last executing test programs: 5.132276076s ago: executing program 1 (id=2609): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="f5af24bd7000000000000e00000008000300", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x200000d0}, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r3, 0x400, 0x70bd26, 0x25dfdbff, {}, ["", "", "", ""]}, 0x1c}}, 0x400c005) 5.004058484s ago: executing program 1 (id=2610): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={'syzkaller1\x00', 0x1}) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'syzkaller1\x00', 0x0}) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) (async) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) (async) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x25) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x18, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x86}}, {}, [@jmp={0x5, 0x0, 0xb, 0x0, 0x0, 0x4, 0x10}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80005}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000640)='GPL\x00', 0x6, 0x1001, &(0x7f0000000680)=""/4097, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3e}, 0x94) (async) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) (async) connect$inet(r5, &(0x7f00000000c0)={0x2, 0x0, @empty}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4) (async) sendmmsg$inet(r5, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="b5", 0x1}], 0x1}}], 0x1, 0x4008440) (async, rerun: 64) write$cgroup_devices(r4, &(0x7f0000000200)={'a', ' *:* ', 'w\x00'}, 0x8) (async, rerun: 64) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x3c, 0x2c, 0x601, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x2}, {0xf, 0xffff}, {0x4, 0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x5, 0x5b, 0x29}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (rerun: 64) 3.625420595s ago: executing program 1 (id=2625): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x34, 0x40, 0x107, 0x70bd2c, 0x25dfdbfa, {0x3, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0x1c, 0x1, 0x0, 0x1, [@nested={0x18, 0x10, 0x0, 0x1, [@typed={0x14, 0xc, 0x0, 0x0, @ipv6=@loopback}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000080}, 0xc000) r1 = getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6=@mcast2, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@initdev}}, &(0x7f0000000200)=0xe8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x85, &(0x7f0000000400)={0x0, @in6={{0xa, 0x4e21, 0xfff, @private2, 0x1}}, 0x27c0}, 0x90) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) sendmmsg$unix(r3, &(0x7f0000000300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@rights={{0x18, 0x1, 0x1, [r4, r4]}}, @rights={{0x14, 0x1, 0x1, [r4]}}, @cred={{0x1c, 0x1, 0x2, {r6, r7, r8}}}], 0x50, 0x40800}}], 0x1, 0x0) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000003c0)={r1, r2, r8}, 0xc) 3.612830197s ago: executing program 1 (id=2628): socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) pipe(&(0x7f00000003c0)) socket$tipc(0x1e, 0x5, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[], 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000500)={'wlan0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000540)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000640)={'wlan0\x00', 0x1}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_STA_AID={0x6, 0x10, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) bind$packet(r4, &(0x7f0000000900)={0x11, 0x300, r2, 0x1, 0x0, 0x6, @random="080211000001"}, 0x14) write(r4, &(0x7f0000000940)="0802110000010802110000000800", 0xe) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c00000062f59f66e97783332284b3cb3a46916eb2ab799c69c0673d042aabba054e75ce289fb58bfd800e7d04cf6f725eb2630ef0faec44e9b7f7e76bc8c88f76694eeb78575fa73424e522511981896bfd76ee9d185ed495b9f1242a895f3589c376c1e855200cf43cfb6c5c31269dcf775192", @ANYRES16=r1, @ANYBLOB="050000000000000000000800000008000300", @ANYRES32=r2, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000008000000000000700000a18000000066b030400000000000000000a000004040004800000020073797a3100000000000000001100010000000000000000000000000a"], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x20000005) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r5) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x34, r6, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8}]}, 0x34}}, 0x404c0c0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f00000002c0)={'netdevsim0\x00', &(0x7f0000000300)=@ethtool_link_settings={0x24, 0x5b09, 0x7, 0x2, 0x3, 0x5, 0x7, 0x8, 0x5, 0x9, [0xce, 0x5, 0x2005, 0x40, 0x4, 0x3, 0x400e, 0xfb]}}) sendmsg(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="68000000000905240000000000000000020000000900010073790030000000001400028006000100000a4000050002000600000008000500000000002c000480080001000000000120000c800c00015c69ed0d5c67f71dffffff7f0000000002080003000000001e", 0x68}], 0x1}, 0x4080) ioctl$sock_inet_SIOCGIFPFLAGS(r5, 0x8935, &(0x7f0000000340)={'hsr0\x00'}) 3.610179631s ago: executing program 3 (id=2629): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=@gettaction={0x3c, 0x32, 0xe72c5f922f23cad9, 0x70bd27, 0x25dfdbf7, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x1}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400c844}, 0x4000000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x5f, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES16=r1, @ANYRES16=r1], 0x48}, 0x1, 0x0, 0x0, 0x404c801}, 0x2000c800) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x4, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x2}, 0x8, 0x10, &(0x7f0000000780), 0x10}, 0x57) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r2, 0x702, 0x38, 0x0, &(0x7f0000000840)="e460334470d8d400eb00c15286dd4b3547f2cbfad47001bd34d04351caf1f9a07be047c25d7670ea4a41b8a6800c0de87b6f8e6a725643f7", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000000900)={0x1, 0x1, 0xfc, 0x2db, @vifc_lcl_addr=@broadcast, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000100)={'wpan4\x00'}) 3.444594153s ago: executing program 3 (id=2633): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) socketpair(0x2c, 0x0, 0x8, &(0x7f0000000000)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x60, r2, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xa}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000004}, 0x81) syz_emit_ethernet(0x5e, &(0x7f0000002e40)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x28, 0x3a, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @remote, [{0x0, 0x2, "122b472e41e216e5000000000000"}]}}}}}}, 0x0) 3.438277959s ago: executing program 1 (id=2634): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000001540)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001500)={&(0x7f0000001580)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100828543faa96bb8632b3bda495bdf000fbdbdf25190000004c0001800800030002000000140002006e7b9b272e7673696d300000000000000800030001001100140002007767320000000000000000000000000008000300030000000800030003000000"], 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x4040004) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) socket$netlink(0x10, 0x3, 0x13) (async) r2 = socket$vsock_seqpacket(0x28, 0x5, 0x0) (async) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000040)={0x0, 0x6, 0x3, 0x1}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r2}, 0x0, 0x12, @unused=[0x5, 0xd, 0xf], @devid=r3}) 3.336676976s ago: executing program 3 (id=2635): bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=@base={0x6, 0x4, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=@base={0x6, 0x4, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001d80)={0x16, 0xc, &(0x7f0000001e40)=ANY=[@ANYBLOB="180000000000000000000000000000007a0af0ff00000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffffbfa300000000000007030000f0ffffffb7040000ff070000850000000200000095"], &(0x7f0000001ec0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001f00)={r1, 0x0, 0xe, 0x0, &(0x7f0000001f80)='\x00'/14, 0x0, 0x3b66, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000001880), 0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000001fc0), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000002000)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) (async) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) writev(r3, &(0x7f0000002080)=[{&(0x7f00000020c0)="2e9b3d0007e03dd65193dfb6c575963f8864", 0x12}, {&(0x7f0000002100)="1100f8ae", 0x4}, {&(0x7f0000002140)="00050090b4", 0x5}, {&(0x7f0000002180)="237f7c", 0x3}], 0x4) sendmsg$kcm(r2, &(0x7f00000018c0)={&(0x7f0000001900)=@hci={0x1f, 0x0, 0x12}, 0x80, &(0x7f0000001980)=[{&(0x7f00000019c0)="62042720920101000001ad2f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a710292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9a4de33", 0xda}, {&(0x7f0000001ac0)="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", 0x114}, {&(0x7f0000001c00)="0a985d7879f1bbff16c7d66e33657e452299fd0ef8c2afda588eb05891b7da030e01452a7986bea19b59c98dc2996c0ea09604d00ea48336d0c813d83025aca8623a5915ddddce2c11c5e374f2e0f387d2398fe0b899ff60dc7a73addcf253cf32aafbe2b9f90799e7fc583bdd9b564697ba988080270bdceb4714219a2d4c229fffb0d86fb286e3553a8b3ac02badc66ada5fceabe5f63c79da96e641a45901128063d6e1e31b11bcfbc3e70bd3c8c6c0be9f653f977f16", 0xfff0}, {&(0x7f0000001cc0)="6f4720baeb54", 0x6}], 0x4}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000011c0)={0x0, 0xb8}, 0x1, 0x0, 0x0, 0x800}, 0x8008010) (async) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000011c0)={0x0, 0xb8}, 0x1, 0x0, 0x0, 0x800}, 0x8008010) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001340)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0x2}, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x20004004) (async) sendmsg$nl_xfrm(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001340)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0x2}, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x20004004) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000001740)={'bridge0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000001740)={'bridge0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000001780)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000ffff27bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="151d0100000000002800128009000100766c616e00000000180002800c0002001a0000001a000000060001000100000008000500", @ANYRES32=r9, @ANYBLOB="fde0887533f4d5d22b4874b99fefd2742a4729ca34dbba59cd30ab5e230b13f2ba72a3f507c50b81ce93bd24fc916bca6d8333b220a70451b263be2b1e899194767848e85758da1bde0ece340b6a2987a6ad84b00a764b4b4a84edca003adfc259964270075480c6ac4e1fd8197f8f1ec6419e4c8054224af15ed539cf4d79def2fd79c91b2927badc276959845fe4d2cf"], 0x50}, 0x1, 0x0, 0x0, 0x28041}, 0x0) (async) sendmsg$nl_route(r8, &(0x7f0000001780)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000ffff27bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="151d0100000000002800128009000100766c616e00000000180002800c0002001a0000001a000000060001000100000008000500", @ANYRES32=r9, @ANYBLOB="fde0887533f4d5d22b4874b99fefd2742a4729ca34dbba59cd30ab5e230b13f2ba72a3f507c50b81ce93bd24fc916bca6d8333b220a70451b263be2b1e899194767848e85758da1bde0ece340b6a2987a6ad84b00a764b4b4a84edca003adfc259964270075480c6ac4e1fd8197f8f1ec6419e4c8054224af15ed539cf4d79def2fd79c91b2927badc276959845fe4d2cf"], 0x50}, 0x1, 0x0, 0x0, 0x28041}, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000001480)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00002029000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000fcffffffffffffff0900000000000000000000000000000000000000000000000200000000000000ffffffffffffffff0000000000000000000000000000000000000000020000000000020000000000ffffffffffffffff0700"/112], 0xb8}}, 0x10) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0xfffffffd, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x97, 0x0, [{}, {0x400000}]}, [{}, {}, {}, {}, {}, {0x448eade7}, {0x0, 0x0, 0x80000000, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x0, 0x20000000, 0x0, 0x0, 0x3, 0x40000}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {0x1021}, {}, {0x0, 0x0, 0x80000000}, {0xfffffffc, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {}, {}, {}, {0x0, 0x9}, {0x0, 0x0, 0x0, 0xffffff41}, {}, {}, {}, {}, {}, {0xfffffffe}, {}, {0xd5}, {}, {}, {}, {0x9}, {}, {0x0, 0xfffffffd}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, {0x0, 0x10}, {0x80000000}, {0x8eb9, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0x0, 0x4, 0x0, 0x7ee}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x9}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, {}, {0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {0x0, 0x18, 0x10000, 0xffffffff}, {}, {0x4, 0x0, 0x0, 0x0, 0x6}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {0x0, 0x0, 0x0, 0x4, 0x2}, {}, {}, {0x4}, {}, {}, {0x10000}, {}, {0x0, 0x0, 0x1}, {0x0, 0x0, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {0x0, 0x100000, 0x0, 0x0, 0x0, 0xb}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x7}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {0x4}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x3}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0xfffffffd, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x97, 0x0, [{}, {0x400000}]}, [{}, {}, {}, {}, {}, {0x448eade7}, {0x0, 0x0, 0x80000000, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x0, 0x20000000, 0x0, 0x0, 0x3, 0x40000}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {0x1021}, {}, {0x0, 0x0, 0x80000000}, {0xfffffffc, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {}, {}, {}, {0x0, 0x9}, {0x0, 0x0, 0x0, 0xffffff41}, {}, {}, {}, {}, {}, {0xfffffffe}, {}, {0xd5}, {}, {}, {}, {0x9}, {}, {0x0, 0xfffffffd}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, {0x0, 0x10}, {0x80000000}, {0x8eb9, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0x0, 0x4, 0x0, 0x7ee}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x9}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, {}, {0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {0x0, 0x18, 0x10000, 0xffffffff}, {}, {0x4, 0x0, 0x0, 0x0, 0x6}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {0x0, 0x0, 0x0, 0x4, 0x2}, {}, {}, {0x4}, {}, {}, {0x10000}, {}, {0x0, 0x0, 0x1}, {0x0, 0x0, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {0x0, 0x100000, 0x0, 0x0, 0x0, 0xb}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x7}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {0x4}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x3}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000001580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r11, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001640)={0x24, r12, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r11, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001640)={0x24, r12, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_DEL_INTERFACE(r11, &(0x7f0000001680)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001700)={0x1c, r12, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r13}, @void}}}, 0x1c}}, 0x0) 3.237737491s ago: executing program 4 (id=2636): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newlink={0x30, 0x10, 0x801, 0x0, 0x25dfdbfb, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0xc00}, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) ioctl$XFS_IOC_SWAPEXT(r0, 0xc0c0586d, &(0x7f0000000000)={0x0, r0, 0xffffffffffffffff, 0x7ff, 0x3, '\x00', {0x7fffffffffffffff, 0x0, 0xfd98, 0x3, 0xa64e, 0xa6, 0x2, 0xd, {0x5, 0x9b1a}, {0x9, 0x5e06}, {0x8001, 0x4}, 0x6, 0x8, 0x4, 0x3, 0x7f, 0x5, 0xa, 0x9, 0x7fff, 0x3, '\x00', 0x7, 0x8000, 0xff, 0x4ed}}) 3.153679173s ago: executing program 4 (id=2637): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket(0x2b, 0x80801, 0x1) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfffffffe}, 0x1c) read(r1, &(0x7f0000000080)=""/169, 0xa9) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x8001, @none, 0x8c2}, 0xe) 3.115354942s ago: executing program 1 (id=2638): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller1\x00', 0xc201}) (async) socket$kcm(0x2, 0xa, 0x2) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r2 = socket$unix(0x1, 0x3, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'syzkaller1\x00', 0x0}) (async) r4 = socket$inet_sctp(0x2, 0x5, 0x84) (async) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000001000)={0x0, 0x10, &(0x7f0000001040)=[@in={0x2, 0x4e24, @rand_addr=0x64010100}]}, &(0x7f0000001080)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x83, &(0x7f00000010c0)=@assoc_value={0x0}, &(0x7f0000001100)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS_V2(r4, 0x84, 0x25, &(0x7f0000001140)={r6, @in={{0x2, 0x4e20, @empty}}, 0xff, 0x1, 0xb5c2}, &(0x7f0000001200)=0x90) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000f40)={&(0x7f0000000000), 0xc, &(0x7f0000000f00)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x76c}, 0x1, 0x0, 0x0, 0x4040010}, 0x20008010) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x58, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xa, 0xe}}]}}, @TCA_RATE={0x6, 0x5, {0x4, 0x4}}, @TCA_CHAIN={0x8, 0xb, 0x2}, @TCA_RATE={0x6, 0x5, {0xc9, 0x78}}]}, 0x58}}, 0x0) socket$l2tp6(0xa, 0x2, 0x73) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) (async) socket$kcm(0x11, 0x3, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 32) r9 = socket$unix(0x1, 0x1, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x6, 0x80000001, 0x8, 0x18, 0x9, 0x3, 0x4, {0x7391, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) (async) r11 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000480)={'syzkaller0\x00', 0x0}) r13 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newtfilter={0x2c, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r12, {0xb, 0xfff3}, {0x6}, {0x7, 0xfff2}}, [@TCA_RATE={0x6, 0x5, {0x9, 0xf}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24040894}, 0x0) (async) r14 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) close(r14) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$SIOCSIFHWADDR(r14, 0x8914, &(0x7f00000005c0)={'syzkaller0\x00', @multicast}) 2.924321111s ago: executing program 4 (id=2641): r0 = socket(0x2, 0x80805, 0x0) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, &(0x7f0000000040)=[{{&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000100)="b1", 0x1}], 0x1}}], 0x1, 0x24040800) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000001c0)={0x2, 0x201, 0xca25, 0x5, r3}, 0x10) r4 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r4, &(0x7f0000000200)={&(0x7f0000000240)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000280)=[{&(0x7f00000002c0)="10", 0x1}], 0x1}, 0x24000900) sendmsg$inet(r4, &(0x7f0000000300)={&(0x7f0000000340)={0x2, 0x4e20, @private=0xa010100}, 0x10, &(0x7f0000000380)=[{&(0x7f00000003c0)='!', 0x1}], 0x1}, 0x54) sendmsg$inet(r4, &(0x7f0000000400)={&(0x7f0000000440)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000480)=[{&(0x7f00000004c0)='W', 0x1}], 0x1}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) recvmsg(r5, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x10000) sendmsg$inet(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000005c0)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) setsockopt(r0, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000640)=0x663b, 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000680)={'geneve0\x00', 0x0}) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYRES32=r9, @ANYRESHEX=r6, @ANYRES16=r9], 0x1a0}, 0x1, 0x0, 0x0, 0x44010}, 0x800) sendmsg$nl_route(r7, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="080100001000010426bd70000000000000000000", @ANYBLOB="35857e5705f93318540261da664525d9dcbf66b4b4e874d91af6fd6e134979db31c433d996f8f2ea56366529f0a206e7b40ec8b0c0814725b82172256b06074e6358dccd3d4cedd81e48c94fb39bd76dac04d34b35a2e6a3f97fb7f4f718459dc81eff6554819f29a28622", @ANYBLOB="0300000000000000d800128009000100766c616e00000000c800028006000100020000000600050088a800000c0002000b0000000700000006000500810000000c000200020000000c000000580003800c00000008000000000000000c000100ff000000070000001c0001000400000000010000540001000200000010ce00000c000700ff010000090000000c00010083020000130000000c000100f44b000000020000060001000300000034000480d3ff010003000000050000000c00010006000000090000000c000100ffff0000ff7fffff0c00", @ANYRES32=r8], 0x108}}, 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000900)={'batadv0\x00'}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r11 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_buf(r11, 0x29, 0xd2, &(0x7f0000000940), 0x0) connect$inet6(r11, &(0x7f0000000980)={0xa, 0x4e04, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x38}}, 0x10003}, 0x1c) setsockopt$inet6_buf(r11, 0x29, 0x6, 0x0, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r10, 0x4004f50d, &(0x7f00000009c0)=0x2) 2.74416203s ago: executing program 0 (id=2643): sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000c}, 0x10) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'dummy0\x00', &(0x7f0000000080)=@ethtool_rxnfc={0x30, 0x1, 0xd, {0xc, @esp_ip6_spec={@rand_addr=' \x01\x00', @mcast2, 0x25, 0x62}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 0x240, 0xc612, [0x7800000, 0x8]}, @sctp_ip6_spec={@remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e20, 0x4e23, 0x3}, {0x0, @local, 0x0, 0x4, [0xf]}, 0xc5}}}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800500010004000000060022"], 0x4c}}, 0x0) 2.597947365s ago: executing program 2 (id=2645): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r2, 0x3141e0b2751b0f9b, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x60c5}, 0x80) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'ip6gretap0\x00', 0x0}) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r1, 0xc038943b, &(0x7f00000001c0)={0x81, 0x38, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd28, 0x25dfdbfe, {0x60, 0x0, 0x0, r4, {0x0, 0xe}, {0xffff, 0xffff}, {0x4a99972ad10d7a14, 0x9}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_TUPDATE={0x8, 0x8, 0xffffffff}, @TCA_PIE_BYTEMODE={0x8, 0x7, 0x1}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 2.49667145s ago: executing program 0 (id=2646): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000018000100000000000000000002000000000000090000000006001500040000001400168004000880"], 0x38}}, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r2], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000b78600030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350064756d6d79300000000000000000000008000a00", @ANYRES32=r3, @ANYBLOB], 0x3c}}, 0x8000) sendmsg$inet(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000680)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014020d000a00000000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d00d00000000000000bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 2.496356251s ago: executing program 3 (id=2647): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@mpls_delroute={0x24, 0x19, 0x1, 0x70bd2b, 0x25dfdbff, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_TTL_PROPAGATE={0x5, 0x1a, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x9}, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000d042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002400128009000100626f6e640000000014000280050001000600000005001b"], 0x44}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.434988322s ago: executing program 2 (id=2648): getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x800}, &(0x7f0000000040)=0xc) pwrite64(r1, &(0x7f0000000080)="5c65566bc7f7a7a2bfc7090b551d5f09c47018074893c2ffcfb72d4cbc459cd967a21e085bf018d88879caa99116ab18a5f1ba2b1aa1c02a3d81b72729f25384a4ef587bfded41603f34c40e26fb7ce30260bf7a95c9030a12524b4a269a5910070e23134cecb1ea7c07e8abdfbb8fc16a31d9ad5cb46c4ac5d6607aaf24f1eeb82f1e5fcfe075190afdb29dcd246f8e24a9d38bfc8a9217053b47e53e1038e4302ecc423a9785bfb165f239df371210438fe206d36920cf45abcfa12ea7926aaaf47bc839bf5d6a0f1fbae8a4fcdbad5498d6cd94", 0xd5, 0xfffffffffffffffd) (async) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000180)={r0, 0x3}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000200)={r2, 0x6}, &(0x7f0000000240)=0x8) (async) r3 = socket(0xa, 0x80003, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000280)={r3, 0x7fffffff, 0x6, 0x914}) getsockopt$inet6_mreq(r3, 0x29, 0x14, &(0x7f00000004c0)={@loopback, 0x0}, &(0x7f0000000500)=0x14) (async) r6 = bpf$TOKEN_CREATE(0x24, &(0x7f00000006c0)={0x0, r3}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x13, &(0x7f00000002c0)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x4}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @jmp={0x5, 0x1, 0x9, 0x9, 0x2, 0x1, 0xfffffffffffffffc}, @jmp={0x5, 0x0, 0x1, 0x3, 0x1, 0x50, 0xffffffffffffffff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8}], &(0x7f0000000380)='GPL\x00', 0x63ad, 0xdb, &(0x7f00000003c0)=""/219, 0x40f00, 0xa9b6ece9c08bbb5f, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000540)=[0x1], &(0x7f0000000580)=[{0x4, 0x5, 0x8, 0x6}, {0x1, 0x1, 0xd, 0x1}, {0x4, 0x2, 0x5, 0xc}, {0x0, 0x2, 0x4, 0x6}, {0x5, 0x5, 0xf, 0x8}], 0x10, 0xa230, @value=r6}, 0x94) getsockopt$inet_sctp6_SCTP_PLPMTUD_PROBE_INTERVAL(r3, 0x84, 0x85, &(0x7f0000000700)={r0, @in={{0x2, 0x4e24, @private=0xa010100}}, 0x4}, &(0x7f00000007c0)=0x90) ioctl$INCFS_IOC_PERMIT_FILL(r4, 0x40046721, &(0x7f0000000800)={r6}) (async) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000b00)={&(0x7f0000000840)="80551530b6aa", &(0x7f0000000880)=""/80, &(0x7f0000000900)="55d7f492427d19efa52ddd0c271ce50de8211c78f9dcbecf5f0dd403e9078a02b1c1f480a268b87f85e0594d72c713487eb909d014f7ebd30643b7b90934c08fdd8dbc3b041c06d08531c8b3009b18e4cd4bc53bd93c911455d008e5a438e4ca3e0659c773ee6fd29021fefd53df7b00ba3f1bd365e0b39a3cd63e8162de75151cb550435183ea2b86d149f74996d505e0ace64ce0bff8f59d916fb47c3f28c9fca7cda876c802cf7f9fb7964179f42211741361331c63212ba7e39189ea4ad92eb58c4f25907542e1a45a5a86", &(0x7f0000000a00)="1fa391b66fb2314533b53a49eda8e7b86df23868ac9dd3c020886d32d0e79339d934eee6623ca8a1bf744e1e93679616960fe69c496cac74235aedc2ea89da2477e8ba18dc45b3d4df49fa161f4e9b5a931a20974171d2f1079e85dae1207a1f74f23d922d15d6c983a261a20d2e1f715cf478f4b46a003868344a263c7510e85e7ee18125d56163cd1c3fda9b5ce66cddd6b67d50d610a15dc5a109345f0367ad86c491512631149457d414abaa2355d27843d02e56e024e8d50f2d96221ad42ac54e", 0xdf, r4, 0x4}, 0x38) (async) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000000c40)={&(0x7f0000000b40)=""/226, 0xe2}) (async) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001d40)={0x1b, 0x0, 0x0, 0x7ff, 0x0, r4, 0x20a5, '\x00', r5, r4, 0x1, 0x5}, 0x50) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001dc0)={0x1b, 0x0, 0x0, 0x4, 0x0, r4, 0xfffffffa, '\x00', r5, r4, 0x4, 0x0, 0x4}, 0x50) (async) pipe(&(0x7f0000001e40)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001e80)={0x2, 0x4, 0x8, 0x1, 0x80, r4, 0x0, '\x00', r5, r1, 0x1, 0x2, 0x1}, 0x50) (async) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000001f00)=@base={0x16, 0x401, 0x7ff, 0x30000, 0x1012b, r4, 0x7, '\x00', r5, r4, 0x2, 0x2, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001fc0)={0x11, 0x8, &(0x7f0000000c80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x4b}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x2}, @map_fd={0x18, 0x3, 0x1, 0x0, r4}]}, &(0x7f0000000cc0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000d00)=""/4096, 0x41100, 0x54, '\x00', r5, 0x0, r4, 0x8, &(0x7f0000001d00)={0x0, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=[r7, 0x1, r8, r10, r4, r11, r12], 0x0, 0x10, 0x10001}, 0x94) r13 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000002080)={r9, r10, 0xa, 0x0, @void}, 0x10) writev(r13, &(0x7f00000022c0)=[{&(0x7f00000020c0)="6edbe21e45439fa2b5d040a40e02ebca62a06bdf83540d4ecb23fa941044fc3395cfe062630958632878c400fb8106e974d0ec448787182c0dbe8b0037c67f2fa75a979f9bbb76c2c1e5ce0b9582bc05a251142ddaa16f9da0257bbca5502cab68b1adf89b", 0x65}, {&(0x7f0000002140)="d77b267bdafcd89fb5d10c91921119cb672d386ec669e24bf1b6c390bd10956c454e8e68d7610fe206f93cd6c278252d76d12ded769cded3d01d9c4e030915a05f81b450b0edbbcf13b2afa6fcc96fb8b5ed3dfebb4cc3b75836306c1e2929fb9cc924f686471edf7a917f19c65d803645e94c21", 0x74}, {&(0x7f00000021c0)="006487666664ec4850ef0cbbcdab2f2503316e2f6bdb2e8b28c22b2f3311482dbd37af984a6f067706af6d3d2f84dddaab41b633aa38702a074245e8a2fcc0fb4eb162f34a3afb1b224c5b8b6b9e698ec5c71281ec3a95a55c7d46fe392de2a274a6880b7b40b5f93a6b25fe9f47cbbc16429749fa1a549b37d4cfd1b521351f0eae2e2e2958f4912bc244c1433c0ba523bc85f66f1dee1aaefc8f58c5195f24e1ec6dfdb2a87d02eb219bd0c395fff4b25fc832db1dab45f231b059908884bcd665f4e5745b826df97788160acff7342a7e9b5b71625fdd", 0xd8}], 0x3) (async) socket$packet(0x11, 0x3, 0x300) recvmsg$unix(r4, &(0x7f00000027c0)={0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000002300)=""/55, 0x37}, {&(0x7f0000002340)=""/150, 0x96}, {&(0x7f0000002400)=""/46, 0x2e}, {&(0x7f0000002440)=""/244, 0xf4}, {&(0x7f0000002540)=""/81, 0x51}, {&(0x7f00000025c0)=""/213, 0xd5}], 0x6, &(0x7f0000002740)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}, 0x80000101) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000002880)={'syztnl2\x00', &(0x7f0000002800)={'syztnl1\x00', r5, 0x29, 0xe, 0x2, 0x6, 0xa, @dev={0xfe, 0x80, '\x00', 0x2d}, @mcast2, 0x1, 0x700, 0xc2, 0x4}}) (async) sendmsg$NFT_BATCH(r14, &(0x7f0000002c80)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002c40)={&(0x7f0000002900)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_RULE_COMPAT={0x1c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x29}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8}]}, @NFTA_RULE_POSITION_ID={0x8}]}, @NFT_MSG_NEWFLOWTABLE={0x124, 0x16, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_FLOWTABLE_HOOK={0xd0, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'macvlan1\x00'}, {0x14, 0x1, 'nr0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'nr0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xa44}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'veth0_to_team\x00'}, {0x14, 0x1, 'lo\x00'}, {0x14, 0x1, 'wg0\x00'}]}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_CHAIN_FLAGS={0x8}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0x7ffffffffffffffb}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELCHAIN={0x1c, 0x5, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}, @NFTA_RULE_USERDATA={0x5b, 0x7, 0x1, 0x0, "82181f6e8f8cd4468c9e901f2977dabaab2f23721aca2faa1a7a41771041606bf89f8981d7b55c7f55ba14c7d7f3f352d0e8b0f722ac42738225c75197efb32737328b24aad53caef967da2a18a99b08e8d8963b7f6e85"}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_ID={0x8}]}, @NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_RULE_COMPAT={0x24, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x33}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x32}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x7fffffff}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x308}, 0x1, 0x0, 0x0, 0x80}, 0x20000004) (async) ioctl$BTRFS_IOC_SCRUB(r12, 0xc400941b, &(0x7f0000002cc0)={0x0, 0x9}) ioctl$BTRFS_IOC_DEV_INFO(r10, 0xd000941e, &(0x7f00000030c0)={r15, "16d307c0b281ae900c942e6d5fe5b700"}) (async) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f00000040c0)={r15, 0x2, 0x1, 0x1}) ioctl$BTRFS_IOC_DEV_INFO(r6, 0xd000941e, &(0x7f00000044c0)={r16, "f41b62ba9b2575ae0f6f363b4ddd836b"}) (async) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000005780)={&(0x7f00000056c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000005740)={&(0x7f0000005700)={0x10, 0x3e8, 0x400, 0x70bd25, 0x25dfdbfe, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x14}, 0x10) 2.297024196s ago: executing program 0 (id=2649): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xc, 0x13, &(0x7f0000000000)=ANY=[@ANYRES64, @ANYRES16], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffaa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x40000000015, 0x1, 0x3) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, 0x0, &(0x7f0000000200)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01080000000000000000020000000900010073797a300000000064000000090a010400000000000000000200000008000a40000000010900020073797a31000000000900010073797a300000000008000540000000080800034000000084200009801c0002800c00018008000140000000040c0001800800014000000004540000000e0a01010000000000000000020000000900020073797a31000000000900010073797a30000000002800038024000080100001800c000100000000000000000010000a800c0001"], 0x100}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$igmp(0x2, 0x3, 0x2) close(r0) 2.216022335s ago: executing program 2 (id=2650): socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000008000000ff0f000007"], 0x50) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="230000000300000002000000ffff000005"], 0x48) socketpair(0x25, 0x6, 0x9, &(0x7f0000000240)) close(0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)={0x20, 0x31, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0xc, 0x17, 0x0, 0x0, @u64=0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x46854}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007008500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x500, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x1, 0x40, 0x9, 0x2, {{0xb, 0x4, 0x0, 0x3, 0x2c, 0x64, 0x0, 0x2, 0x2f, 0x0, @empty, @empty, {[@lsrr={0x83, 0xf, 0xa9, [@multicast1, @dev={0xac, 0x14, 0x14, 0x16}, @rand_addr=0x64010101]}, @rr={0x7, 0x7, 0x82, [@initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000180)={0x6, 0x0}, 0x8) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500)=r5, 0xffffff5e) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r0, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000ffadffff0000000000000000b7080000000000007b8af8ff00000000b7080000070000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000e5ffffb60500000800000085000000a50000009500000000000000d0d5d72cef032f33d9e1eda30b716bc24a4cdcf6cf80119ba5f20e9a39ab9164795d755c8a5a59"], &(0x7f0000000200)='syzkaller\x00', 0x5, 0x47, &(0x7f00000002c0)=""/71, 0x0, 0x24, '\x00', r4, 0x0, r6, 0x8, &(0x7f0000000540)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x4, 0x8, 0x7, 0x9}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000600)=[r0, r0, r0, r7], &(0x7f0000000740)=[{0x4, 0x1, 0x1, 0xc}, {0x4, 0x3, 0xd, 0x1}, {0x0, 0x3, 0x6, 0x1}, {0x3, 0x1, 0xc, 0x6}, {0x2, 0x5, 0x4, 0xa}, {0x0, 0x1, 0x10, 0x3}, {0x2, 0x5, 0x4, 0x4}], 0x10, 0x2}, 0x94) ioctl$TUNGETFEATURES(r3, 0x800454cf, &(0x7f0000000080)) 2.203718967s ago: executing program 3 (id=2651): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1c, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.18902384s ago: executing program 0 (id=2652): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, 0x0, 0x0) (async) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000280), &(0x7f0000000300)=0x68) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB], 0x6c}}, 0x0) 2.122290334s ago: executing program 3 (id=2653): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="19000000040000000800000005", @ANYBLOB], 0x50) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e20, 0x3ff, @empty, 0x99}}, 0x220, 0x9, 0x2, 0x4, 0x8, 0x1000, 0x7}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="12000000290000000800000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r4, 0xffffffffffffffff}, &(0x7f0000000400), &(0x7f0000000440)=r3}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000480)={r5, &(0x7f00000004c0), 0x0}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000bd03000000000000850000003300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r7, &(0x7f00000004c0)={&(0x7f0000000500)={0x2, 0x0, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000000540)=[@rdma_args={0x48, 0x114, 0x1, {{0x0, 0x3}, {&(0x7f0000000600)=""/117, 0x75}, &(0x7f0000000680)=[{&(0x7f00000006c0)=""/86, 0x56}], 0x1}}, @cswp={0x58, 0x114, 0x7, {{0x7, 0x1}, 0x0, 0x0, 0xa, 0x9, 0x80, 0x9, 0x4, 0x41}}], 0xa0}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r6, r1}, 0x14) syz_emit_ethernet(0x1076, &(0x7f0000000480)=ANY=[], 0x0) 2.020265781s ago: executing program 2 (id=2654): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000001780)={0x0, 0xfffffff5, &(0x7f00000017c0)=[{&(0x7f0000001800)="a2", 0xfffffdef}], 0x1}, 0x0) recvmmsg(r0, 0x0, 0x0, 0x40010022, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000200)={'sit0\x00', 0x0, 0x7800, 0x8000, 0x3, 0xa, {{0x7, 0x4, 0x3, 0x1d, 0x1c, 0x68, 0x0, 0x2, 0x29, 0x0, @private=0xa010100, @private=0xa010101, {[@ssrr={0x89, 0x7, 0x53, [@private=0xa010100]}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f00000002c0)={0x2, 0x4e21, @local}, 0x10) connect$inet(r3, &(0x7f00000003c0)={0x2, 0x4e21, @local}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="240000000104010200000180000000000000000008000540000000000500010001"], 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000600)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@gettfilter={0x5c, 0x2e, 0x100, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xc, 0x10}, {0x9, 0xfff3}, {0x1, 0x8}}, [{0x8, 0xb, 0x87}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0xffffffff}, {0x8, 0xb, 0x132}, {0x8, 0xb, 0x1}, {0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYRES16=r9, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000880), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000008c0)) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300a00000014000000020a0500000000000000000000000008140000001100010000000000000000000000000a"], 0x5c}}, 0x0) r11 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r11, 0x4000000000000, 0x40, &(0x7f0000001840)=@raw={'raw\x00', 0x4001, 0x3, 0xa38, 0x8e8, 0xb, 0x148, 0x0, 0x148, 0x9a0, 0x240, 0x240, 0x9a0, 0x215, 0x3, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11, 0x2}, 0x2e8, 0x880, 0x8e8, 0x0, {0xff0f000000000000}, [@common=@inet=@udp={{0x30}}, @common=@unspec=@u32={{0x7e0}, {[{[{}, {}, {0x0, 0x1}], [{}, {0x1}], 0x9}, {}, {[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x3}]}, {[], [{0x800000}]}, {}, {}, {[], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1000000}]}, {[{}, {}, {}, {}, {0xfffffffe}, {}, {}, {}, {0x0, 0x3}]}, {}, {[], [{}, {}, {}, {}, {}, {}, {0x3}, {}, {0x7}]}, {[{}, {}, {}, {}, {}, {}, {}, {0x0, 0x2}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x2000}]}], 0xff}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x2, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xa98) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f0000002300)={0x0, 0x0, &(0x7f0000002340)={&(0x7f0000002380)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a30000000002c000000030a01040000000000000000020000000900010073797a30000000000900030073797a300000000090000000060a01240000000000000000020000000900010073797a30000000000900020073797a300000000064000480600001800b0001007461726765740000500002800e00010049444c4554494d4552000000080002400000000134000300"], 0x104}}, 0x0) sendto$inet(r3, &(0x7f0000002440)="2e552f5d9fd8b0d9627c4980f0d1ea2bf8f617a682acd2841acd878bd68344d4f50f83b0c51fa9135a01c95d4a128ec8b12d01010000a44c4505ba9a36f2cf4cc5e8308126d0a2c3b9d24e57c5011376b6263e2a1258eec1eb72bedea3eb5ccf73eb081b4c6d5faa998d7b795c057dd757d14200a8a6dbb3e59df96b77d16753ac4b32b94ffe6b5ee304d0428eb18056657c8c5c71c632be66cb26fe5c9abec7591ef3cb9b2a1133e9fa9bf0de6c378bed7b51cb8a07c343aabfda193349b91a5dc81a658cb61fbbfa51ef95abe03381ee2cb8d41da19ea8b96ec68ce17cf57da60f1d04acaf34a643db8d2d5ad2991f306b42744347a0c9e1fe2136b2b3da49032d3a57df1e236222cf6d6fe396aff8e5fe7fff5baa88789b783c12045e2c904a5d118369fdddc3e6e2f24bdbb26df92ac9bf4751c897a87c0223888e36ad14ba6e4d879ff464cac6f13a3a543e067d922e99c50f2fc6391e9c1c82b7195005eafdbb3374200c134cbd0f11739e8c19dd07140686242fea48caf3a1a93b86f35d77f258a2c9ce24cf321068551a584262d7a74a344e428c77c8af755e72904b0ca8a0bb359fb0", 0xffffff5d, 0x12, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000002600)='westwood', 0x8) recvfrom$inet(r11, &(0x7f0000000040)=""/9, 0x9, 0xc9100120, 0x0, 0x0) shutdown(r3, 0x0) 2.017634319s ago: executing program 0 (id=2655): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0x4, 0x0, &(0x7f0000000000)=0x41) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x1c, r2, 0xac34efec66c9f537, 0x70bd26, 0x25dfdbfd, {}, [@FOU_ATTR_AF={0x5, 0x2, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040001}, 0x0) (async) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r1) (async) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200)={0x0}, &(0x7f0000000240)=0xc) r5 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) (async) r6 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) (async) r7 = socket$nl_audit(0x10, 0x3, 0x9) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = getpid() sendmsg$nl_generic(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x2c, 0x2d, 0x107, 0x70bd27, 0x0, {0x1, 0x7c}, [@nested={0xc, 0x2, 0x0, 0x1, [@generic="cbd30d11251c9a26"]}, @nested={0x4, 0x7}, @typed={0x8, 0x1, 0x0, 0x0, @pid=r9}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) (async) sendmsg$AUDIT_SET(r7, &(0x7f0000000340)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000400)={0x3c, 0x3e9, 0x2, 0x70bd27, 0x25dfdbff, {0x40, 0x1, 0x2, r9, 0x5, 0x4, 0x5, 0x7f, 0x0, 0x3ff, 0xa1}, ["", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x40080}, 0x80) (async) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xd8, r3, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r9}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x10}, 0x20040810) (async) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r10, 0x6, 0x13, &(0x7f0000000040), 0x4) 1.924986624s ago: executing program 4 (id=2656): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}, 0x94) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f00000009c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000340)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYBLOB="17963c657f0db7830fef76499b7e1e5de0dfc67b74f690b686bcedf6a6ffa0b813d1a1532ff52668324b9acb4e64a5f6a05b78e69201bbae802351f2e34c58d747b66f7a428b67ba0768d375548f262bd3b656d4869aa0361f3f50328915b6afab2e294f62a9e88725b0146dbf60b86d3101dc82db50bd23a568fcacfc0e838b9d91cbbf571103acee53cf3565c9b42f9b15577cd91325a428cb30fdedcc97903dbcafb10879cf4b0715f3d744d379d5427520f1f11ad6e865001b4d8e4073a868692136e02cf167fefda343bf70", @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) r1 = socket$kcm(0x2d, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000040)={r3}) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000080)={r3}) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000140)={r2}) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0xb, &(0x7f00000007c0)=0x9, 0x4) bind$inet6(r4, &(0x7f0000000800)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r4, &(0x7f0000000840), 0x4000058, 0x0, 0x0) setsockopt$inet6_int(r4, 0x29, 0x42, &(0x7f0000000880)=0x5, 0x4) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f00000008c0)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x10, 0x4, &(0x7f0000000bc0)=ANY=[@ANYBLOB="e5000000000000007910480000000000610408000000000095000000"], &(0x7f0000000c00)='GPL\x00', 0x3, 0xfd90, &(0x7f0000000c40)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffe6b}, 0x48) sendmsg$netlink(r5, 0x0, 0x8080) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000d40)=@filter={'filter\x00', 0xe, 0x4, 0x290, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x1f8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x11}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x1, 0x1, 0x2, 0x1, 0x9}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) sendto$inet(r6, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x2, 0x4e23, @local}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) socketpair(0x6, 0x2, 0x5, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_hidp_HIDPCONNDEL(r8, 0x400448c9, &(0x7f0000000780)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xd633f889}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REQ_SET_REG(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x1c, r7, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40008d6}, 0x840) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x5, 0x2, 0x0, 0x12, 0x0, 0x1, 0x90000}, 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000700)={r11, r10}, 0xc) 1.687130802s ago: executing program 0 (id=2657): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000600)={0x0, 0x38}}, 0x0) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0200000000620157ef2fbd700023f4e7a4cb91b8cb6a425b", @ANYRES32=r2, @ANYBLOB="9b060000000000001c00128009000100626f6e64000000000c0002800500010004000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x4000000) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r6, 0x8983, &(0x7f0000000040)={0x8, 'veth0_to_batadv\x00', {'veth1_vlan\x00'}, 0xfffc}) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8) close(0x3) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8], 0x44}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x10, 0x8, &(0x7f0000000b80)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000bf03000000000000850000006b000000b7000000"], 0x0, 0xe, 0x0, 0x0, 0x41000}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="00000000000001", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000d40)={0x0, 0x1}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f00)={0x11, 0x1a, &(0x7f0000000800)=@raw=[@ldst={0x1, 0x1, 0x4, 0x2, 0x4, 0x20, 0xfffffffffffffffc}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffa}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffffb}], &(0x7f0000000900)='syzkaller\x00', 0x6, 0xc8, &(0x7f0000000940)=""/200, 0x41100, 0x14, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000e80)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, r9, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000ec0)=[{0x3, 0x5, 0x4, 0x1}], 0x10, 0x4}, 0x94) socket$kcm(0x10, 0x2, 0x0) socket(0x1, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r10, 0x10f, 0x87, &(0x7f00000001c0)={0x2001, 0x0, 0x1}, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$tipc(&(0x7f00000004c0), 0xffffffffffffffff) bind$tipc(r10, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r11, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)={0x30, r12, 0x1, 0x0, 0x100000, {{}, {}, {0x14, 0x19, {0x2, 0x1, 0x0, 0x2000000}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4080}, 0x1004) 1.093882205s ago: executing program 2 (id=2658): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000001580)={0x0, 0x10, &(0x7f00000015c0)=[@in={0x2, 0x4e22, @private=0xa010101}]}, &(0x7f0000001600)=0x10) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000001640)={0x1, [0x0]}, &(0x7f0000001680)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000016c0)={0x2d01, 0x2, 0x2, 0x1, r3}, 0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000001700)={r3, 0x7}, &(0x7f0000001740)=0x8) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000018c0)={r4, 0x0}, 0x20) unshare(0x8000400) (async) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000180)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e21, @multicast1}, 0x2, 0x2, 0x1, 0xffff}}, 0x26) (async, rerun: 32) r6 = socket$packet(0x11, 0x3, 0x300) (rerun: 32) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000001540)=@req3={0x10000, 0xffffffff, 0x10000, 0xffffffff, 0x3, 0x0, 0x1}, 0x1c) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='memory.numa_stat\x00', 0x0, 0x0) (async) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000d8000000000000000000000408000000000000000000000200000000002e5f61610030dc3000ef6664fb6a0c556f7dee9a0ba426ee763b5c9a2dad5206e3e79cfa5e188ef7a5e516cc61d56c0733c3950148"], 0x0, 0x3a}, 0x28) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x29, 0x7f, 0x4, 0x2, 0x0, @private1, @private1, 0xd5ee713fc0c4e7aa, 0x700, 0x0, 0x7}}) (async, rerun: 64) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2000f3400000238d000000000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x24000840}, 0x20008800) (async) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000003000000010000000000000803000000000000000000000200000000010000000000000f02000000002e"], 0x0, 0x3f, 0x0, 0x1}, 0x28) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[], &(0x7f00000004c0)=""/4086, 0x3f, 0xff6, 0x4}, 0x28) r10 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000003c0)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000014c0)=@newqdisc={0x54, 0x24, 0x1, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0xe, 0x5}}, [@TCA_STAB={0x30, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xac, 0xbc, 0x81, 0x4, 0x0, 0x1, 0x80000000, 0x5}}, {0xe, 0x2, [0x0, 0x1, 0x6, 0x5, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x4000010) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001800)={0x18, 0x7, &(0x7f0000000000)=ANY=[@ANYRESDEC=0x0], &(0x7f0000001900)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x71, '\x00', r8, 0x0, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001940)=[{0x40000000, 0x2, 0x8, 0x5}], 0x10, 0x10001}, 0x94) (rerun: 64) 993.14985ms ago: executing program 4 (id=2659): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000007c0)={0x0, 0x10, &(0x7f0000000900)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000940)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000980)={0x1, [0x0]}, &(0x7f00000009c0)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000a00)=@sack_info={r1, 0x6, 0x1}, &(0x7f0000000a40)=0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@ipv6_newroute={0x24, 0x18, 0x111, 0x1, 0x0, {0xa, 0x0, 0x0, 0x3, 0x0, 0x3, 0x0, 0x8}, [@RTA_EXPIRES={0x8, 0x17, 0xffffffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4805}, 0x4) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0xffffff08}]}}}, {0x18, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x88}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000a80)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r4, &(0x7f0000000ac0)={&(0x7f0000000b00), 0x10, &(0x7f0000000b40)=[{&(0x7f0000000b80)="f7", 0x6d47}], 0x1}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="0a0000000400000008000000000100d6df00549f4dddfa81c4cec131c8002c68c4de5b00000000732958265b63e98d1f653b7805000000000000004dc178681b7ef8704dc6924dfb688c", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r6 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r6, &(0x7f0000000bc0), 0x10) listen(r6, 0x0) r7 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r7, &(0x7f0000000c00), 0x10) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r8, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="2800000014001102000000000000000028001100fe004ac2411e47060aefadfa617ab90000000000"], 0x28}}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000120600627085cc0000", @ANYRES32=r5, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffffbfa300000000000007030000f0ffffffb70400000000000085000000020000009500000000000000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r9, 0x0, 0xe, 0x0, &(0x7f00000006c0)='\x00'/14, 0x0, 0x3b66, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a20000000000a01040000000000000000010080000900010073797a30000000002c000000030a01010000000000000000010000030900010073797a30000000000900030073797a32000000009c000000060a010400000000000000000100000008000b400000000074000480340001800b000100657874686472000024000280080001400000000c080003400000003b080004400000002205000200070000003c0001800c00010062697477697365002c000280080003400000000408000140000000140800024000000000000006400000000508000780040001000900010073797a30"], 0x110}}, 0x0) sendmsg$nl_xfrm(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in6=@private1, @in, 0x0, 0x0, 0x1000, 0x0, 0xa, 0x20, 0x0, 0x11}, {0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000, 0x4}, 0x200, 0x40000000, 0x0, 0x0, 0x2}, [@policy_type={0xa}]}, 0xc4}}, 0x2c000010) 74.665926ms ago: executing program 2 (id=2660): bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1a00000007000000f9ffffbfff07000000940000", @ANYRES32=0x1, @ANYBLOB="c94500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000000000000200"/20, @ANYRES32, @ANYBLOB="00000000f2ed00f7938585aa647a842806df39b1f6f8c7834f178565e80db9fa524e4c9bf631c351ccc22347344969761f6765380522ce647948dc25205ee639bbd35f9746469b23eea955c1604c1b5ec5162cfb459a4ed3ac0c8088a4adb34fde04156e9ba6f28017b42d799657155e139205caa708db9579ae76d866c525b99a1f72a81b71e490dc44876afa395e269af2d0b498ab40f2d7b2a4ec70eddc78710a2c906f371909bd9f2800fae7ee54df8b9f6c2790407f62030058b7afa75ec8c0d2d092d53402b9aac510ba52b1234b2721559b0afe011fabee67aebf1ae68eaa37facdfda4"], 0x50) socket$netlink(0x10, 0x3, 0x14) r0 = socket$inet6(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f00000000c0)=0x10001, 0x4) close(0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYRESHEX=r1], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="ff0000001000010000000000000000000500000a28000000000a010300000000000000000100160508000240000000060900010095797a3000000000140000001100010000000000000000000100000aa684999b95"], 0x50}, 0x1, 0x0, 0x0, 0x4000854}, 0x40) openat$tun(0xffffffffffffff9c, 0x0, 0x80, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0xc50280, 0x0) close(0x3) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}], 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) r2 = socket$netlink(0x10, 0x3, 0x14) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r3, 0x5201) close(0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e22, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c) listen(r4, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e22, 0x5, @loopback}, 0xfffffffffffffefc) listen(0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000080), 0xffffea9) pipe(&(0x7f0000000180)) 0s ago: executing program 4 (id=2661): bpf$TOKEN_CREATE(0x24, &(0x7f00000003c0), 0x8) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001d40)={&(0x7f0000001d80)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000002000"], 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001dc0)={0x6, 0x17, &(0x7f0000001e80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, [@jmp={0x5, 0x0, 0x9, 0x1, 0xa, 0x30, 0x1}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffffe}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001f40)='GPL\x00', 0x5, 0xe2, &(0x7f0000001f80)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000002080)={0x5}, 0x10}, 0x94) pipe(&(0x7f00000005c0)={0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001b80)={r1, 0x0, 0xd2, 0x58, &(0x7f0000001940)="0d8a8c20e54f22c095dd6078f438cd58c3eb1963ac7d0156502ecdc01736dd955f20a0683b25f1f4ab44b66a323afdc3cd4c1fce5043ad5e1ac3091f5598ff114437e764716f962b710030f08ec08c6d83d1de747c9e30900b6302758c314ea290f5a84ac187dbefc93de71e102eb62c797262000ac32e0f63558fac9092bbb22b54c3a8a3fafc5ed29d43ec653e5f7b729cc3b25f8b2a8bc667d52291c67f195666b6778323b8ef8d17fe577dc117071a26e28041239f3d12c191c74675893a020089a8cb1c5b2ce5bb78b30bf6ffeae34b", &(0x7f0000001a40)=""/88, 0x0, 0x0, 0x62, 0xb, &(0x7f0000001ac0)="a61c1fd413e3a89949b91544739ffe68b7cb33845424bfedeaeff165c183a6bbceb4a62f62f01447df98ba22b504089bd235e7869d4e82651b7b1b8ed04cd533b4e15078cfb36ce9f1adff59d1b7e2a1fb50c650996e7ee0447392423e43be2567fd", &(0x7f0000001b40)="fa15fbbff281f9d0710bac", 0x7, 0x0, 0xfffffff9}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={0x0, 0x0, 0x0, 0xfffffffffffffee9, 0x0, 0x2, 0x10000, @value=r1}, 0x28) openat$cgroup_ro(r1, &(0x7f0000000680)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff}) vmsplice(r2, &(0x7f00000004c0)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="040000000000000000000000008000000c000000", @ANYRES32, @ANYBLOB="ffffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x10, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000000000791000000000000063000000000000009500050000000000"], &(0x7f0000000100)='GPL\x00', 0x4, 0x26, &(0x7f0000000140)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000240), 0x8, 0x10, &(0x7f0000000280), 0x10}, 0x23) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000400)={0x1f, 0xffff, 0x3}, 0x6) syz_emit_ethernet(0x3f, &(0x7f0000000500)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x31, 0x0, 0x0, 0xc, 0x67, 0x0, @rand_addr, @empty}, @echo={0x8, 0x0, 0x0, 0x9, 0xc000, "e32e94680984e2c19e4dfc08445c89675436337632"}}}}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000001c00)={@local, @random="7f0a00034011", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @private}, "000088be00000000"}}}}}, 0x0) write(r5, &(0x7f0000000440)="45000000040000000100", 0xa) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001cc0)={&(0x7f0000001d00)=ANY=[@ANYBLOB="2000000046000901feffffff00000000017c00000c00018001"], 0x20}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) unshare(0x20000) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r3, 0x4058587a, &(0x7f0000001880)={{r4, &(0x7f00000002c0)='\x00', 0x10100, &(0x7f0000000300)={@_ha_fsid={[0x1, 0xb6e]}, {0xb, 0x2, 0x3, 0x7}}, 0x1, &(0x7f0000000340)={@_ha_fsid}, &(0x7f0000000380)=0x1000}, {[0x20, 0x6, 0x4, 0x547]}, 0x7fff, 0x1000, &(0x7f0000000880)=""/4096}) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001900)={r4, r7, 0xa, 0x0, @void}, 0x10) r8 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_wireguard(r8, 0x8933, &(0x7f00000020c0)={'wg0\x00'}) ioctl$sock_SIOCGPGRP(r8, 0x8904, &(0x7f0000000600)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x1f, 0x15, &(0x7f0000000780)=ANY=[@ANYRES8, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000a600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000006d00000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x19}, 0x94) kernel console output (not intermixed with test programs): 231.034244][ T9888] netlink: 4 bytes leftover after parsing attributes in process `syz.3.931'. [ 231.034789][ T9888] netlink: 32 bytes leftover after parsing attributes in process `syz.3.931'. [ 231.035365][ T9897] netlink: 4 bytes leftover after parsing attributes in process `syz.3.931'. [ 231.035491][ T9897] netlink: 32 bytes leftover after parsing attributes in process `syz.3.931'. [ 231.097100][ T9879] bond8: (slave bridge9): Enslaving as a backup interface with an up link [ 231.168043][ T9879] bond8: (slave bridge10): Enslaving as a backup interface with an up link [ 231.246114][ T9879] bond8: (slave bridge11): Enslaving as a backup interface with an up link [ 231.300420][ T9879] bond8: (slave bridge12): Enslaving as a backup interface with an up link [ 231.318044][ T9879] bond8: (slave bridge13): Enslaving as a backup interface with an up link [ 231.360508][ T9879] bond8: (slave bridge14): Enslaving as a backup interface with an up link [ 231.383058][ T9879] bond8: (slave bridge15): Enslaving as a backup interface with an up link [ 231.419243][ T9879] bond8: (slave bridge16): Enslaving as a backup interface with an up link [ 231.462621][ T9879] bond8: (slave bridge17): Enslaving as a backup interface with an up link [ 231.493190][ T9879] bond8: (slave bridge18): Enslaving as a backup interface with an up link [ 231.516986][ T9879] bond8: (slave bridge19): Enslaving as a backup interface with an up link [ 231.552100][ T9879] bond8: (slave bridge20): Enslaving as a backup interface with an up link [ 231.576974][ T9879] bond8: (slave bridge21): Enslaving as a backup interface with an up link [ 231.608385][ T9879] bond8: (slave bridge22): Enslaving as a backup interface with an up link [ 232.298584][ T9925] netlink: 'syz.2.939': attribute type 1 has an invalid length. [ 232.604706][ T9951] ip_tables: iptables: counters copy to user failed while replacing table [ 232.718359][ T9959] netlink: 20 bytes leftover after parsing attributes in process `syz.0.949'. [ 232.849402][ T86] IPVS: starting estimator thread 0... [ 232.901093][ T9966] netlink: 'syz.0.951': attribute type 1 has an invalid length. [ 232.933729][ T9964] IPVS: using max 32 ests per chain, 76800 per kthread [ 232.991506][ T9967] syz_tun: entered allmulticast mode [ 233.061610][ T9971] netlink: 'syz.4.954': attribute type 1 has an invalid length. [ 233.138267][ T9973] 8021q: VLANs not supported on wg0 [ 233.258978][ T9978] bond11: entered promiscuous mode [ 233.259514][ T9978] 8021q: adding VLAN 0 to HW filter on device bond11 [ 233.348748][ T9982] IPVS: wlc: TCP 172.20.20.170:20003 - no destination available [ 233.415432][ T9962] syz_tun: left allmulticast mode [ 234.137587][T10018] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 234.639415][T10033] netlink: 'syz.1.969': attribute type 1 has an invalid length. [ 234.656237][T10032] netlink: 'syz.4.970': attribute type 153 has an invalid length. [ 234.730410][T10038] __nla_validate_parse: 5 callbacks suppressed [ 234.730432][T10038] netlink: 68 bytes leftover after parsing attributes in process `syz.2.972'. [ 234.730587][T10034] netlink: 8 bytes leftover after parsing attributes in process `syz.4.970'. [ 234.730603][T10034] netlink: 28 bytes leftover after parsing attributes in process `syz.4.970'. [ 234.805341][T10042] netlink: 24 bytes leftover after parsing attributes in process `syz.2.974'. [ 235.057315][T10068] netlink: 'syz.3.978': attribute type 1 has an invalid length. [ 235.084714][T10071] netlink: 44 bytes leftover after parsing attributes in process `syz.3.978'. [ 235.148214][T10067] netlink: 'syz.3.978': attribute type 1 has an invalid length. [ 235.237442][T10061] bond12 (unregistering): Released all slaves [ 235.316138][T10068] bond9: entered promiscuous mode [ 235.316466][T10068] 8021q: adding VLAN 0 to HW filter on device bond9 [ 235.322540][T10078] netlink: 32 bytes leftover after parsing attributes in process `syz.2.979'. [ 239.131919][T10128] netlink: 'syz.0.994': attribute type 6 has an invalid length. [ 239.683847][T10167] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 239.857180][T10175] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1007'. [ 239.879807][T10172] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1004'. [ 239.982413][T10182] netlink: 'syz.2.1008': attribute type 6 has an invalid length. [ 240.111088][T10191] netlink: 'syz.0.1012': attribute type 8 has an invalid length. [ 240.180695][T10191] tc_dump_action: action bad kind [ 240.185834][T10191] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1012'. [ 240.401167][T10199] vcan0: tx drop: invalid sa for name 0xfffffffffffffffe [ 240.402251][T10205] vcan0: tx drop: invalid sa for name 0xfffffffffffffffe [ 240.419314][T10203] pimreg1: tun_chr_ioctl cmd 1074025677 [ 240.419438][T10203] pimreg1: linktype set to 825 [ 240.431931][T10207] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1018'. [ 240.569830][T10207] syzkaller0: entered promiscuous mode [ 240.569858][T10207] syzkaller0: entered allmulticast mode [ 240.588828][T10214] netlink: 'syz.3.1021': attribute type 6 has an invalid length. [ 240.591850][T10207] syzkaller0: MTU not usable for tipc bearer [ 240.591894][T10207] tipc: Enabling of bearer rejected, failed to enable media [ 240.594848][ T41] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.597296][ T3382] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.597336][ T3382] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.597368][ T3382] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.677965][T10218] netlink: 'syz.3.1022': attribute type 1 has an invalid length. [ 240.691887][T10216] IPVS: ip_vs_add_dest(): server weight less than zero [ 240.692304][T10216] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 240.787579][T10222] netlink: 'syz.0.1023': attribute type 1 has an invalid length. [ 240.902309][ T30] audit: type=1800 audit(1793912411.731:6): pid=10233 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1026" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1172 res=0 errno=-22 [ 241.165910][T10239] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 241.181550][T10252] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 241.202591][T10251] ip_tables: iptables: counters copy to user failed while replacing table [ 241.344845][T10256] syzkaller0: left promiscuous mode [ 241.344867][T10256] syzkaller0: left allmulticast mode [ 241.405362][T10261] netlink: 'syz.0.1032': attribute type 6 has an invalid length. [ 241.440609][T10254] netlink: 4812 bytes leftover after parsing attributes in process `syz.4.1030'. [ 241.483207][T10264] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1033'. [ 241.511969][T10266] netlink: 'syz.4.1034': attribute type 1 has an invalid length. [ 241.554885][T10266] 8021q: adding VLAN 0 to HW filter on device bond9 [ 241.574725][T10266] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1034'. [ 241.583265][T10266] netlink: 'syz.4.1034': attribute type 21 has an invalid length. [ 241.592754][T10266] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1034'. [ 241.610044][T10266] bond9: (slave bridge23): making interface the new active one [ 241.617864][T10266] bond9: (slave bridge23): Enslaving as an active interface with an up link [ 241.655854][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806901b000: rx timeout, send abort [ 241.657256][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88806901b000: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 241.711655][T10273] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1036'. [ 241.711677][T10273] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1036'. [ 241.763607][T10276] netlink: 'syz.4.1037': attribute type 10 has an invalid length. [ 241.763632][T10276] batadv0: left promiscuous mode [ 241.766832][T10276] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 241.767850][T10276] batadv0: entered promiscuous mode [ 241.768265][T10276] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 241.899811][T10278] bond0: (slave batadv0): Releasing backup interface [ 241.901426][T10278] batadv0: left promiscuous mode [ 241.906523][T10278] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 242.840437][T10315] bond6: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 242.853156][T10315] bond6: (slave lo): Enslaving as an active interface with an up link [ 242.854588][T10315] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 243.009145][T10319] can: request_module (can-proto-3) failed. [ 243.031367][T10314] syzkaller0: entered promiscuous mode [ 243.031394][T10314] syzkaller0: entered allmulticast mode [ 245.016360][T10357] validate_nla: 2 callbacks suppressed [ 245.016379][T10357] netlink: 'syz.4.1056': attribute type 6 has an invalid length. [ 245.026498][T10356] netlink: 'syz.2.1058': attribute type 219 has an invalid length. [ 245.289106][T10377] __nla_validate_parse: 4 callbacks suppressed [ 245.289128][T10377] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1060'. [ 245.389430][T10376] sit0: entered promiscuous mode [ 245.389570][T10376] netlink: 'syz.2.1064': attribute type 1 has an invalid length. [ 245.389587][T10376] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1064'. [ 245.542403][T10384] veth9: entered allmulticast mode [ 245.854495][T10413] macsec2: entered promiscuous mode [ 246.158976][T10421] netlink: 'syz.1.1071': attribute type 6 has an invalid length. [ 246.469458][T10437] xt_connbytes: Forcing CT accounting to be enabled [ 246.510763][T10444] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1075'. [ 246.753137][T10436] xt_check_table_hooks: 55 callbacks suppressed [ 246.753160][T10436] x_tables: unsorted underflow at hook 4 [ 246.883033][T10456] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1082'. [ 246.883069][T10456] netlink: 'syz.4.1082': attribute type 7 has an invalid length. [ 246.883082][T10456] netlink: 'syz.4.1082': attribute type 8 has an invalid length. [ 246.883095][T10456] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1082'. [ 246.946474][T10457] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1082'. [ 246.946512][T10457] netlink: 'syz.4.1082': attribute type 7 has an invalid length. [ 246.946524][T10457] netlink: 'syz.4.1082': attribute type 8 has an invalid length. [ 246.946535][T10457] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1082'. [ 246.981563][T10461] netlink: 'syz.0.1084': attribute type 6 has an invalid length. [ 247.319440][T10482] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1093'. [ 247.378198][T10486] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1094'. [ 247.385551][T10486] veth1_macvtap: left promiscuous mode [ 247.402050][T10482] netlink: 'syz.2.1093': attribute type 12 has an invalid length. [ 247.606832][T10494] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 248.226020][T10527] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1106'. [ 248.504312][T10536] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 248.597655][T10539] batman_adv: batadv0: Adding interface: macvtap1 [ 248.597673][T10539] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 248.597700][T10539] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 248.850330][T10546] tc_dump_action: action bad kind [ 248.918055][T10553] ip_tables: iptables: counters copy to user failed while replacing table [ 249.257270][T10574] siw: device registration error -23 [ 250.416825][T10631] __nla_validate_parse: 5 callbacks suppressed [ 250.416846][T10631] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1138'. [ 250.766197][T10644] validate_nla: 5 callbacks suppressed [ 250.766217][T10644] netlink: 'syz.4.1144': attribute type 1 has an invalid length. [ 250.832184][T10644] 8021q: adding VLAN 0 to HW filter on device bond10 [ 250.833249][T10645] bridge_slave_1: vlans aren't supported yet for dev_uc|mc_add() [ 250.856094][T10647] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1146'. [ 250.877708][T10645] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1145'. [ 250.884475][T10644] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1144'. [ 250.908153][T10644] dummy0: left promiscuous mode [ 250.918567][T10647] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1146'. [ 250.918593][T10647] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1146'. [ 250.938304][T10649] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1146'. [ 250.938330][T10649] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1146'. [ 250.963909][T10647] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1146'. [ 250.964107][T10649] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1146'. [ 251.058976][T10659] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 251.061203][T10659] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 251.205638][T10664] ip6tnl1: entered promiscuous mode [ 251.205662][T10664] ip6tnl1: entered allmulticast mode [ 251.366092][T10683] nbd0: detected capacity change from 0 to 4194303 [ 251.374632][ T4963] block nbd0: Dead connection, failed to find a fallback [ 251.429878][T10686] netlink: 'syz.2.1158': attribute type 13 has an invalid length. [ 251.591332][T10693] netlink: 'syz.2.1160': attribute type 1 has an invalid length. [ 251.770538][T10706] netlink: 'syz.0.1164': attribute type 1 has an invalid length. [ 251.772179][T10706] netlink: 'syz.0.1164': attribute type 2 has an invalid length. [ 251.772198][T10706] netlink: 'syz.0.1164': attribute type 11 has an invalid length. [ 252.030614][T10729] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 252.098987][T10734] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 252.100679][T10729] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 252.188417][T10736] netlink: 'syz.4.1173': attribute type 1 has an invalid length. [ 252.358603][T10750] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 252.358858][T10750] SET target dimension over the limit! [ 255.440157][T10763] __nla_validate_parse: 14 callbacks suppressed [ 255.440179][T10763] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1182'. [ 255.462522][T10764] netlink: 1363 bytes leftover after parsing attributes in process `syz.0.1182'. [ 255.826923][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.578844][T10833] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1201'. [ 256.578873][T10833] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1201'. [ 256.578889][T10833] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1201'. [ 257.274899][T10852] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 257.369437][T10857] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1203'. [ 257.369468][T10857] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1203'. [ 257.946614][T10852] bond11: (slave macvlan3): making interface the new active one [ 258.026869][T10852] bond11: (slave macvlan3): Enslaving as an active interface with an up link [ 258.281244][T10876] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1209'. [ 258.571517][T10891] xt_hashlimit: size too large, truncated to 1048576 [ 258.589422][T10895] syz_tun: entered allmulticast mode [ 258.600541][T10892] syz_tun: left allmulticast mode [ 258.885640][T10910] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1218'. [ 259.075300][T10920] netlink: 'syz.0.1224': attribute type 2 has an invalid length. [ 259.076150][T10920] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 259.122052][T10923] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 259.122420][T10923] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 259.127432][T10923] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 259.138215][T10923] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 259.138658][T10923] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 259.138953][T10923] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 259.139239][T10923] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 259.139552][T10923] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 259.151680][T10923] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 259.171867][T10920] 8021q: adding VLAN 0 to HW filter on device bond0 [ 259.186010][T10920] 8021q: adding VLAN 0 to HW filter on device team0 [ 259.214661][T10920] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 259.267486][T10920] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 259.269949][T10920] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 259.289305][T10931] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1225'. [ 259.305139][T10920] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 259.305163][T10920] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 259.309141][T10920] veth1_vlan: left promiscuous mode [ 259.310471][T10920] veth0_vlan: left promiscuous mode [ 259.312280][T10920] veth0_vlan: entered promiscuous mode [ 259.354810][T10920] veth1_vlan: entered promiscuous mode [ 259.360608][T10920] veth1_macvtap: left promiscuous mode [ 259.361778][T10920] veth0_macvtap: left promiscuous mode [ 259.362788][T10920] veth0_macvtap: entered promiscuous mode [ 259.388742][T10920] veth1_macvtap: entered promiscuous mode [ 259.413855][ T1048] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.414011][ T1048] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.414048][ T1048] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.414095][ T1048] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.492301][T10928] tc_dump_action: action bad kind [ 259.803089][T10959] smbdirect: ib_dev[syz2] renamed to [s] [ 260.042289][T10972] netlink: 'syz.4.1237': attribute type 11 has an invalid length. [ 260.042310][T10972] netlink: 'syz.4.1237': attribute type 5 has an invalid length. [ 260.152145][T10972] netlink: 'syz.4.1237': attribute type 1 has an invalid length. [ 260.874849][T10991] __nla_validate_parse: 4 callbacks suppressed [ 260.874870][T10991] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1241'. [ 261.090009][T11002] bond8: entered promiscuous mode [ 261.090071][T11002] bond8: entered allmulticast mode [ 261.090489][T11002] 8021q: adding VLAN 0 to HW filter on device bond8 [ 261.208376][T11002] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1244'. [ 261.291110][T11019] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1245'. [ 261.516124][T11038] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1246'. [ 261.544625][T11032] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1248'. [ 261.686946][T11043] ipvlan2: entered allmulticast mode [ 261.686970][T11043] virt_wifi0: entered allmulticast mode [ 261.692140][T11043] batman_adv: batadv0: Adding interface: ipvlan2 [ 261.692160][T11043] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 261.692752][T11043] batman_adv: batadv0: Interface activated: ipvlan2 [ 261.946716][T11054] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 261.946894][T11056] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1254'. [ 261.995605][T11058] FAULT_INJECTION: forcing a failure. [ 261.995605][T11058] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 261.995637][T11058] CPU: 0 UID: 0 PID: 11058 Comm: syz.0.1252 Not tainted syzkaller #0 PREEMPT(full) [ 261.995659][T11058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 261.995686][T11058] Call Trace: [ 261.995695][T11058] [ 261.995703][T11058] dump_stack_lvl+0xe8/0x150 [ 261.995742][T11058] should_fail_ex+0x3eb/0x540 [ 261.995771][T11058] _copy_from_user+0x2d/0xb0 [ 261.995798][T11058] do_tcp_getsockopt+0x22c/0x2b50 [ 261.995840][T11058] ? __pfx_do_tcp_getsockopt+0x10/0x10 [ 261.995869][T11058] ? sock_recv_errqueue+0x5d0/0x5e0 [ 261.995898][T11058] ? register_lock_class+0x31/0x2e0 [ 261.995929][T11058] ? __lock_acquire+0x747/0x2de0 [ 261.995968][T11058] ? lock_acquire+0x115/0x350 [ 261.996005][T11058] ? __mutex_trylock_common+0x15f/0x270 [ 261.996039][T11058] ? __pfx___mutex_trylock_common+0x10/0x10 [ 261.996073][T11058] ? rcu_is_watching+0x16/0xb0 [ 261.996106][T11058] ? trace_contention_end+0x3d/0x140 [ 261.996139][T11058] ? __mutex_lock+0x305/0x15a0 [ 261.996164][T11058] ? __lock_acquire+0x747/0x2de0 [ 261.996197][T11058] ? smc_getsockopt+0x14d/0x3c0 [ 261.996217][T11058] ? lock_acquire+0x115/0x350 [ 261.996242][T11058] ? __pfx___mutex_lock+0x10/0x10 [ 261.996284][T11058] tcp_getsockopt+0x83/0x130 [ 261.996312][T11058] ? sock_recv_errqueue+0x5d0/0x5e0 [ 261.996338][T11058] ? sock_recv_errqueue+0x5d0/0x5e0 [ 261.996363][T11058] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 261.996384][T11058] smc_getsockopt+0x1e4/0x3c0 [ 261.996404][T11058] ? __pfx_smc_getsockopt+0x10/0x10 [ 261.996422][T11058] ? __might_fault+0xaf/0x130 [ 261.996447][T11058] ? __pfx_smc_getsockopt+0x10/0x10 [ 261.996468][T11058] do_sock_getsockopt+0x4aa/0x640 [ 261.996495][T11058] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 261.996516][T11058] ? do_sys_openat2+0x18d/0x200 [ 261.996535][T11058] ? kmem_cache_free+0x182/0x650 [ 261.996583][T11058] __x64_sys_getsockopt+0x1a4/0x240 [ 261.996616][T11058] do_syscall_64+0x166/0x520 [ 261.996635][T11058] ? trace_irq_disable+0x3b/0x140 [ 261.996662][T11058] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.996682][T11058] ? clear_bhb_loop+0x70/0xc0 [ 261.996707][T11058] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.996727][T11058] RIP: 0033:0x7f27d019fb19 [ 261.996745][T11058] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 261.996761][T11058] RSP: 002b:00007f27d1028028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 261.996781][T11058] RAX: ffffffffffffffda RBX: 00007f27d0426090 RCX: 00007f27d019fb19 [ 261.996796][T11058] RDX: 0000000000000021 RSI: 0000000000000006 RDI: 0000000000000003 [ 261.996808][T11058] RBP: 00007f27d1028090 R08: 0000200000000000 R09: 0000000000000000 [ 261.996821][T11058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 261.996832][T11058] R13: 00007f27d0426128 R14: 00007f27d0426090 R15: 00007fffd66b0208 [ 261.996867][T11058] [ 262.051958][T11065] netlink: 'syz.1.1255': attribute type 4 has an invalid length. [ 262.051979][T11065] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.1255'. [ 262.472657][T11080] netlink: 'syz.2.1258': attribute type 1 has an invalid length. [ 262.589486][T11090] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1261'. [ 262.589511][T11090] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1261'. [ 262.589533][T11090] netlink: 'syz.0.1261': attribute type 14 has an invalid length. [ 262.589547][T11090] netlink: 'syz.0.1261': attribute type 5 has an invalid length. [ 262.718064][T11095] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1263'. [ 262.720910][T11095] syzkaller1: entered promiscuous mode [ 262.720933][T11095] syzkaller1: entered allmulticast mode [ 262.856533][T11103] netlink: 'syz.0.1267': attribute type 19 has an invalid length. [ 262.856762][T11103] netlink: 'syz.0.1267': attribute type 19 has an invalid length. [ 263.291174][T11133] syzkaller1: entered promiscuous mode [ 263.291198][T11133] syzkaller1: entered allmulticast mode [ 264.133050][T11146] validate_nla: 31 callbacks suppressed [ 264.133073][T11146] netlink: 'syz.0.1274': attribute type 1 has an invalid length. [ 265.322267][T11146] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 265.697765][T11168] netlink: 'syz.3.1275': attribute type 1 has an invalid length. [ 266.081744][T11165] pim6reg: entered allmulticast mode [ 266.100032][T11166] pim6reg: left allmulticast mode [ 266.452297][T11172] netlink: 'syz.0.1276': attribute type 2 has an invalid length. [ 266.467136][T11177] netlink: 'syz.0.1276': attribute type 2 has an invalid length. [ 266.805074][T11190] netlink: 'syz.4.1279': attribute type 2 has an invalid length. [ 266.805097][T11190] __nla_validate_parse: 7 callbacks suppressed [ 266.805108][T11190] netlink: 228 bytes leftover after parsing attributes in process `syz.4.1279'. [ 266.957285][T11198] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1283'. [ 266.967698][T11189] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1280'. [ 267.334103][T11219] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1286'. [ 267.485994][T11224] netlink: 'syz.3.1288': attribute type 39 has an invalid length. [ 267.647026][T11229] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 268.401665][T11250] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1293'. [ 268.668625][T11266] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1296'. [ 268.718590][T11271] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1299'. [ 268.968605][T11280] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1300'. [ 269.386071][T11300] netlink: 'syz.1.1305': attribute type 1 has an invalid length. [ 269.386092][T11300] netlink: 4320 bytes leftover after parsing attributes in process `syz.1.1305'. [ 269.709945][T11320] IPVS: length: 218 != 24 [ 270.043757][T11337] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1315'. [ 270.173668][T11344] syzkaller1: entered promiscuous mode [ 270.173691][T11344] syzkaller1: entered allmulticast mode [ 270.270018][T11349] netlink: 'syz.2.1318': attribute type 4 has an invalid length. [ 270.312736][T11346] netlink: 'syz.2.1318': attribute type 4 has an invalid length. [ 270.379088][T11346] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 270.645988][T11362] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 270.726297][T11368] smc: net device lo applied user defined pnetid SYZ2 [ 270.909772][T11376] netlink: 'syz.4.1326': attribute type 4 has an invalid length. [ 270.924478][T11376] .`: renamed from bond0 [ 271.170849][T11380] net_ratelimit: 30 callbacks suppressed [ 271.170873][T11380] TC_ACT_REPEAT abuse ? [ 271.601324][T11408] netlink: 'syz.3.1336': attribute type 5 has an invalid length. [ 271.606871][T11408] netlink: 'syz.3.1336': attribute type 5 has an invalid length. [ 271.729993][T11418] netlink: 'syz.2.1338': attribute type 1 has an invalid length. [ 271.802698][T11418] bond13: entered promiscuous mode [ 271.810743][T11418] 8021q: adding VLAN 0 to HW filter on device bond13 [ 271.869746][T11423] bond13: (slave bridge2): making interface the new active one [ 271.869774][T11423] bridge2: entered promiscuous mode [ 271.888385][T11423] bond13: (slave bridge2): Enslaving as an active interface with an up link [ 271.910978][T11422] bridge24: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 271.959468][T11418] ipvlan2: entered allmulticast mode [ 271.959491][T11418] bond13: entered allmulticast mode [ 271.959523][T11418] bridge2: entered allmulticast mode [ 271.960129][T11418] bond13: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 271.960152][T11418] bond13: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 272.063274][T11428] __nla_validate_parse: 7 callbacks suppressed [ 272.068456][T11428] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1340'. [ 272.188682][T11440] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1343'. [ 272.340969][T11446] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 272.384738][T11442] syzkaller0: entered promiscuous mode [ 272.384764][T11442] syzkaller0: entered allmulticast mode [ 272.541551][T11449] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1345'. [ 274.406862][T11457] rxe_eth0 speed is unknown, defaulting to 1000 [ 274.992888][T11483] netlink: 'syz.2.1354': attribute type 21 has an invalid length. [ 274.992912][T11483] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1354'. [ 274.992969][T11483] netlink: 'syz.2.1354': attribute type 5 has an invalid length. [ 274.992982][T11483] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1354'. [ 275.294212][T11494] netlink: 'syz.4.1359': attribute type 4 has an invalid length. [ 275.294236][T11494] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1359'. [ 275.470456][T11498] netlink: 'syz.3.1361': attribute type 2 has an invalid length. [ 276.015852][T11513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 276.149991][T11519] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 276.547692][T11525] pim6reg: entered allmulticast mode [ 276.547999][T11532] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1368'. [ 279.081006][T11515] pim6reg: left allmulticast mode [ 279.152334][T11545] ip6gre3: entered allmulticast mode [ 279.333627][T11549] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1374'. [ 279.518680][T11563] netlink: 'syz.4.1378': attribute type 1 has an invalid length. [ 279.574459][T11567] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1380'. [ 279.664557][T11576] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1382'. [ 279.782122][T11578] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1384'. [ 279.800000][T11578] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1384'. [ 280.375404][T11606] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1391'. [ 280.427803][T11609] tipc: Trying to set illegal importance in message [ 280.427832][T11609] tipc: Trying to set illegal importance in message [ 280.427849][T11609] tipc: Trying to set illegal importance in message [ 280.427863][T11609] tipc: Trying to set illegal importance in message [ 280.427876][T11609] tipc: Trying to set illegal importance in message [ 280.427888][T11609] tipc: Trying to set illegal importance in message [ 280.427901][T11609] tipc: Trying to set illegal importance in message [ 280.427912][T11609] tipc: Trying to set illegal importance in message [ 280.427924][T11609] tipc: Trying to set illegal importance in message [ 280.427937][T11609] tipc: Trying to set illegal importance in message [ 280.427950][T11609] tipc: Trying to set illegal importance in message [ 280.427963][T11609] tipc: Trying to set illegal importance in message [ 280.427976][T11609] tipc: Trying to set illegal importance in message [ 280.427990][T11609] tipc: Trying to set illegal importance in message [ 280.428003][T11609] tipc: Trying to set illegal importance in message [ 280.428016][T11609] tipc: Trying to set illegal importance in message [ 280.428030][T11609] tipc: Trying to set illegal importance in message [ 280.428043][T11609] tipc: Trying to set illegal importance in message [ 280.428057][T11609] tipc: Trying to set illegal importance in message [ 280.428070][T11609] tipc: Trying to set illegal importance in message [ 280.428083][T11609] tipc: Trying to set illegal importance in message [ 280.428097][T11609] tipc: Trying to set illegal importance in message [ 280.428110][T11609] tipc: Trying to set illegal importance in message [ 280.428123][T11609] tipc: Trying to set illegal importance in message [ 280.428135][T11609] tipc: Trying to set illegal importance in message [ 280.428147][T11609] tipc: Trying to set illegal importance in message [ 280.428159][T11609] tipc: Trying to set illegal importance in message [ 280.428172][T11609] tipc: Trying to set illegal importance in message [ 280.428184][T11609] tipc: Trying to set illegal importance in message [ 280.428197][T11609] tipc: Trying to set illegal importance in message [ 280.428210][T11609] tipc: Trying to set illegal importance in message [ 280.428223][T11609] tipc: Trying to set illegal importance in message [ 280.428235][T11609] tipc: Trying to set illegal importance in message [ 280.556973][T11619] geneve1: entered promiscuous mode [ 280.572414][T11620] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 280.572458][T11620] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 280.572496][T11620] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 280.882111][T11629] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1395'. [ 281.063840][T11640] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 281.063872][T11640] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 281.151297][T11641] bond11: entered promiscuous mode [ 282.361900][T11687] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1411'. [ 284.553747][T11701] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 284.835870][T11705] sctp: [Deprecated]: syz.4.1415 (pid 11705) Use of int in max_burst socket option. [ 284.835870][T11705] Use struct sctp_assoc_value instead [ 284.998346][T11717] x_tables: eb_tables: snat target: used from hooks PREROUTING, but only usable from POSTROUTING [ 285.127019][T11719] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1419'. [ 285.402546][T11725] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1422'. [ 285.403087][T11725] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1422'. [ 285.453525][T11730] netlink: 'syz.3.1424': attribute type 4 has an invalid length. [ 285.458803][T11731] netlink: 'syz.3.1424': attribute type 4 has an invalid length. [ 285.488862][T11730] netlink: 'syz.3.1424': attribute type 4 has an invalid length. [ 285.505575][T11731] netlink: 'syz.3.1424': attribute type 4 has an invalid length. [ 285.523659][T11734] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1424'. [ 285.523681][T11734] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1424'. [ 285.630842][T11730] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 286.060310][T11757] x_tables: ip_tables: RATEEST.0 target: invalid size 32 (kernel) != (user) 0 [ 286.138677][T11757] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1428'. [ 286.138774][T11757] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1428'. [ 286.359042][T11774] netlink: 'syz.4.1433': attribute type 10 has an invalid length. [ 286.359143][T11774] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1433'. [ 286.441812][T11781] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1432'. [ 286.650067][T11793] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1433'. [ 287.228061][T11781] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 287.484064][T11801] ip6gretap1: entered allmulticast mode [ 287.486096][T11801] batman_adv: batadv0: Adding interface: ip6gretap1 [ 287.486114][T11801] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 287.486145][T11801] batman_adv: batadv0: Interface activated: ip6gretap1 [ 287.487643][T11806] netlink: 'syz.0.1439': attribute type 2 has an invalid length. [ 287.592746][T11806] !: entered promiscuous mode [ 287.686394][T11811] !: left promiscuous mode [ 288.764772][T11868] 8021q: adding VLAN 0 to HW filter on device bond12 [ 288.827762][T11875] netlink: 'syz.3.1455': attribute type 11 has an invalid length. [ 288.915269][T11868] bond12 (unregistering): Released all slaves [ 289.273197][T11881] netlink: 'syz.0.1456': attribute type 5 has an invalid length. [ 289.435660][T11885] netlink: 'syz.3.1457': attribute type 4 has an invalid length. [ 289.661266][T11903] ip_tables: iptables: counters copy to user failed while replacing table [ 290.011360][T11909] syzkaller1: entered promiscuous mode [ 290.011384][T11909] syzkaller1: entered allmulticast mode [ 290.150421][T11929] __nla_validate_parse: 16 callbacks suppressed [ 290.150444][T11929] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1469'. [ 290.525676][T11950] Bluetooth: hci0: unsupported parameter 5135 [ 290.525700][T11950] Bluetooth: hci0: unsupported parameter 8192 [ 290.525714][T11950] Bluetooth: hci0: unsupported parameter 5135 [ 290.525727][T11950] Bluetooth: hci0: unsupported parameter 8192 [ 290.963099][T11966] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1478'. [ 291.107270][T11981] netlink: 'syz.0.1477': attribute type 1 has an invalid length. [ 291.117837][T11966] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1478'. [ 291.187283][T11981] 8021q: adding VLAN 0 to HW filter on device bond9 [ 291.211990][T11985] bond9: (slave geneve3): making interface the new active one [ 291.222903][T11985] bond9: (slave geneve3): Enslaving as an active interface with an up link [ 291.414698][T11991] Bluetooth: hci0: unsupported parameter 5135 [ 291.414724][T11991] Bluetooth: hci0: unsupported parameter 8192 [ 291.414737][T11991] Bluetooth: hci0: unsupported parameter 5135 [ 291.414750][T11991] Bluetooth: hci0: unsupported parameter 8192 [ 291.415788][T11991] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1481'. [ 291.467412][T11977] syzkaller0: entered promiscuous mode [ 291.467436][T11977] syzkaller0: entered allmulticast mode [ 291.521204][T11989] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1480'. [ 291.521709][T11989] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1480'. [ 291.564491][T11995] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1482'. [ 291.745722][T12004] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 291.763711][T12004] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1484'. [ 291.769477][T12006] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1485'. [ 291.787790][T12006] Bluetooth: hci0: unsupported parameter 5135 [ 291.787812][T12006] Bluetooth: hci0: unsupported parameter 8192 [ 291.787825][T12006] Bluetooth: hci0: unsupported parameter 5135 [ 291.787837][T12006] Bluetooth: hci0: unsupported parameter 8192 [ 292.006618][T12020] netlink: 23 bytes leftover after parsing attributes in process `syz.3.1488'. [ 292.162325][T12029] ipvlan3: entered allmulticast mode [ 292.166095][T12029] batman_adv: batadv0: Adding interface: ipvlan3 [ 292.166113][T12029] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 292.166140][T12029] batman_adv: The newly added mac address (0e:8c:af:fe:e8:60) already exists on: ipvlan2 [ 292.166156][T12029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.166169][T12029] batman_adv: batadv0: Interface activated: ipvlan3 [ 292.869158][T12068] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 293.087825][T12083] netlink: 'syz.0.1506': attribute type 1 has an invalid length. [ 294.380123][T12159] FAULT_INJECTION: forcing a failure. [ 294.380123][T12159] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 294.380153][T12159] CPU: 1 UID: 0 PID: 12159 Comm: syz.4.1529 Not tainted syzkaller #0 PREEMPT(full) [ 294.380175][T12159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 294.380187][T12159] Call Trace: [ 294.380195][T12159] [ 294.380203][T12159] dump_stack_lvl+0xe8/0x150 [ 294.380240][T12159] should_fail_ex+0x3eb/0x540 [ 294.380268][T12159] _copy_to_user+0x31/0xb0 [ 294.380293][T12159] copy_to_sockptr_offset+0x66/0xa0 [ 294.380321][T12159] do_ip_getsockopt+0x1694/0x1cf0 [ 294.380353][T12159] ? __pfx_do_ip_getsockopt+0x10/0x10 [ 294.380375][T12159] ? lock_acquire+0x115/0x350 [ 294.380400][T12159] ? begin_current_label_crit_section+0x299/0x830 [ 294.380425][T12159] ? __pfx_begin_current_label_crit_section+0x10/0x10 [ 294.380469][T12159] ? __lock_acquire+0x747/0x2de0 [ 294.380500][T12159] ? lock_acquire+0x115/0x350 [ 294.380524][T12159] ? get_pid_task+0x20/0x1f0 [ 294.380564][T12159] ip_getsockopt+0xbb/0x230 [ 294.380602][T12159] ? __pfx_ip_getsockopt+0x10/0x10 [ 294.380628][T12159] ? __might_fault+0xaf/0x130 [ 294.380650][T12159] ? sock_common_getsockopt+0x2d/0xb0 [ 294.380677][T12159] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 294.380708][T12159] do_sock_getsockopt+0x4aa/0x640 [ 294.380734][T12159] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 294.380769][T12159] ? __fget_files+0x3a2/0x420 [ 294.380789][T12159] ? __fget_files+0x2a/0x420 [ 294.380820][T12159] __x64_sys_getsockopt+0x1a4/0x240 [ 294.380850][T12159] do_syscall_64+0x166/0x520 [ 294.380879][T12159] ? trace_irq_disable+0x3b/0x140 [ 294.380904][T12159] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.380923][T12159] ? clear_bhb_loop+0x70/0xc0 [ 294.380947][T12159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.380965][T12159] RIP: 0033:0x7ff40d79fb19 [ 294.380983][T12159] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 294.381000][T12159] RSP: 002b:00007ff40e5e1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 294.381021][T12159] RAX: ffffffffffffffda RBX: 00007ff40da25fa0 RCX: 00007ff40d79fb19 [ 294.381036][T12159] RDX: 0000000000000009 RSI: 0000000000000000 RDI: 0000000000000003 [ 294.381047][T12159] RBP: 00007ff40e5e1090 R08: 0000200000000600 R09: 0000000000000000 [ 294.381060][T12159] R10: 00002000000005c0 R11: 0000000000000246 R12: 0000000000000001 [ 294.381072][T12159] R13: 00007ff40da26038 R14: 00007ff40da25fa0 R15: 00007ffde3e157c8 [ 294.381105][T12159] [ 294.894896][T12187] FAULT_INJECTION: forcing a failure. [ 294.894896][T12187] name failslab, interval 1, probability 0, space 0, times 0 [ 294.894926][T12187] CPU: 1 UID: 0 PID: 12187 Comm: syz.4.1536 Not tainted syzkaller #0 PREEMPT(full) [ 294.894947][T12187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 294.894958][T12187] Call Trace: [ 294.894965][T12187] [ 294.894973][T12187] dump_stack_lvl+0xe8/0x150 [ 294.895010][T12187] should_fail_ex+0x3eb/0x540 [ 294.895040][T12187] should_failslab+0xa8/0x100 [ 294.895069][T12187] __kmalloc_cache_node_noprof+0xa5/0x620 [ 294.895094][T12187] ? bpf_test_run_xdp_live+0x220/0x1c20 [ 294.895122][T12187] ? page_pool_create_percpu+0x73/0xc70 [ 294.895150][T12187] ? page_pool_create_percpu+0x73/0xc70 [ 294.895190][T12187] page_pool_create_percpu+0x73/0xc70 [ 294.895219][T12187] ? page_pool_create+0xd/0x20 [ 294.895256][T12187] bpf_test_run_xdp_live+0x23a/0x1c20 [ 294.895288][T12187] ? __pfx_stack_trace_save+0x10/0x10 [ 294.895312][T12187] ? __lock_acquire+0x747/0x2de0 [ 294.895339][T12187] ? stack_depot_save_flags+0x33/0x810 [ 294.895371][T12187] ? kasan_save_track+0x4f/0x80 [ 294.895395][T12187] ? kasan_save_track+0x3e/0x80 [ 294.895418][T12187] ? __kasan_kmalloc+0x93/0xb0 [ 294.895442][T12187] ? __kmalloc_noprof+0x366/0x710 [ 294.895465][T12187] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 294.895490][T12187] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.895543][T12187] ? lock_acquire+0x115/0x350 [ 294.895581][T12187] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 294.895611][T12187] ? __might_fault+0xaf/0x130 [ 294.895635][T12187] ? _copy_from_user+0x94/0xb0 [ 294.895660][T12187] ? bpf_test_init+0x113/0x150 [ 294.895685][T12187] ? xdp_convert_md_to_buff+0x5b/0x330 [ 294.895716][T12187] bpf_prog_test_run_xdp+0x7d8/0x11d0 [ 294.895760][T12187] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 294.895794][T12187] ? __fget_files+0x2a/0x420 [ 294.895824][T12187] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 294.895854][T12187] bpf_prog_test_run+0x2c5/0x340 [ 294.895880][T12187] __sys_bpf+0xb1e/0xe00 [ 294.895908][T12187] ? __pfx___sys_bpf+0x10/0x10 [ 294.895939][T12187] ? __fget_files+0x2a/0x420 [ 294.895981][T12187] ? ksys_write+0x242/0x270 [ 294.896009][T12187] ? __pfx_ksys_write+0x10/0x10 [ 294.896040][T12187] __x64_sys_bpf+0xba/0xd0 [ 294.896071][T12187] do_syscall_64+0x166/0x520 [ 294.896094][T12187] ? trace_irq_disable+0x3b/0x140 [ 294.896121][T12187] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.896140][T12187] ? clear_bhb_loop+0x70/0xc0 [ 294.896164][T12187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.896184][T12187] RIP: 0033:0x7ff40d79fb19 [ 294.896203][T12187] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 294.896220][T12187] RSP: 002b:00007ff40e5e1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 294.896241][T12187] RAX: ffffffffffffffda RBX: 00007ff40da25fa0 RCX: 00007ff40d79fb19 [ 294.896262][T12187] RDX: 0000000000000050 RSI: 0000200000000280 RDI: 000000000000000a [ 294.896274][T12187] RBP: 00007ff40e5e1090 R08: 0000000000000000 R09: 0000000000000000 [ 294.896287][T12187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 294.896298][T12187] R13: 00007ff40da26038 R14: 00007ff40da25fa0 R15: 00007ffde3e157c8 [ 294.896332][T12187] [ 295.207402][T12182] tc_dump_action: action bad kind [ 295.342937][T12202] netlink: 'syz.4.1539': attribute type 1 has an invalid length. [ 295.391350][T12202] 8021q: adding VLAN 0 to HW filter on device bond12 [ 295.532885][T12204] macvlan4: entered promiscuous mode [ 295.532909][T12204] macvlan4: entered allmulticast mode [ 295.547162][T12204] bond12: entered allmulticast mode [ 295.547270][T12204] bond12: entered promiscuous mode [ 295.549722][T12204] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 295.581157][T12204] team0: Port device macvlan4 added [ 295.959283][T12211] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 295.969024][T12233] __nla_validate_parse: 15 callbacks suppressed [ 295.969045][T12233] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1547'. [ 296.169054][T12240] IPv6: NLM_F_CREATE should be specified when creating new route [ 296.279246][T12233] 8021q: adding VLAN 0 to HW filter on device bond13 [ 296.279829][T12235] sit0: entered promiscuous mode [ 296.285471][T12235] netlink: 21 bytes leftover after parsing attributes in process `syz.0.1546'. [ 296.343728][T12234] bond13: (slave geneve3): Enslaving as an active interface with an up link [ 296.382222][T12238] bond13 (unregistering): (slave geneve3): Releasing backup interface [ 296.399236][T12238] bond13 (unregistering): Released all slaves [ 296.628565][T12250] ip_tables: iptables: counters copy to user failed while replacing table [ 296.679915][T12255] nbd: nbd0 already in use [ 296.680252][T12255] nbd: must specify an index to disconnect [ 296.967350][T12272] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1559'. [ 297.151305][T12279] ip_tables: iptables: counters copy to user failed while replacing table [ 297.151649][T12279] ip_tables: iptables: counters copy to user failed while replacing table [ 297.152000][T12279] ip_tables: iptables: counters copy to user failed while replacing table [ 297.152347][T12279] ip_tables: iptables: counters copy to user failed while replacing table [ 297.190325][T12279] ip_tables: iptables: counters copy to user failed while replacing table [ 297.190728][T12279] ip_tables: iptables: counters copy to user failed while replacing table [ 297.191047][T12279] ip_tables: iptables: counters copy to user failed while replacing table [ 297.191377][T12279] ip_tables: iptables: counters copy to user failed while replacing table [ 297.248115][T12281] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1562'. [ 297.316821][T12281] bond12: entered promiscuous mode [ 297.318813][T12281] 8021q: adding VLAN 0 to HW filter on device bond12 [ 297.752824][T12285] 8021q: adding VLAN 0 to HW filter on device bond12 [ 297.753192][T12285] bond12: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 297.777530][T12285] bond12: (slave ip6gre1): Error -95 calling set_mac_address [ 297.878828][T12292] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1564'. [ 298.302207][T12324] bond0: (slave dummy0): Error: Device can not be enslaved while up [ 298.322719][T12325] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1571'. [ 298.644454][T12336] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1574'. [ 298.786277][T12333] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 299.110169][T12350] netlink: 'syz.3.1578': attribute type 21 has an invalid length. [ 299.274360][T12362] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1580'. [ 299.331805][T12362] sctp: [Deprecated]: syz.4.1580 (pid 12362) Use of int in max_burst socket option. [ 299.331805][T12362] Use struct sctp_assoc_value instead [ 299.660690][T12350] netlink: 'syz.3.1578': attribute type 1 has an invalid length. [ 299.660712][T12350] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1578'. [ 299.685638][T12373] bridge_slave_1: left allmulticast mode [ 299.685675][T12373] bridge_slave_1: left promiscuous mode [ 299.685980][T12373] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.709270][T12373] bridge_slave_0: left allmulticast mode [ 299.709320][T12373] bridge_slave_0: left promiscuous mode [ 299.717221][T12373] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.965508][T12381] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1584'. [ 300.194838][T12390] pimreg0: tun_chr_ioctl cmd 1074025677 [ 300.194951][T12390] pimreg0: linktype set to 823 [ 300.416318][T12406] xt_REDIRECT: bad MAP_IPS. [ 300.514109][T12415] netlink: 'syz.0.1596': attribute type 1 has an invalid length. [ 300.641227][T12415] bond10: entered promiscuous mode [ 300.645770][T12415] 8021q: adding VLAN 0 to HW filter on device bond10 [ 301.257134][T12459] syzkaller0: entered promiscuous mode [ 301.257158][T12459] syzkaller0: entered allmulticast mode [ 301.261080][T12460] __nla_validate_parse: 6 callbacks suppressed [ 301.261102][T12460] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1606'. [ 301.351590][T12465] net_ratelimit: 27 callbacks suppressed [ 301.351611][T12465] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 301.404026][T12472] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1611'. [ 301.488897][T12474] geneve4: entered promiscuous mode [ 301.488920][T12474] geneve4: entered allmulticast mode [ 301.489155][T12477] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1611'. [ 301.501578][T12476] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1612'. [ 301.505139][T12472] netlink: 'syz.3.1611': attribute type 3 has an invalid length. [ 301.692902][T12493] netlink: 'syz.2.1617': attribute type 1 has an invalid length. [ 301.692925][T12493] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1617'. [ 301.818657][T12497] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1617'. [ 301.836501][T12499] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1619'. [ 301.951256][T12497] xt_IDLETIMER: timeout value is zero [ 302.126948][T11933] udevd[11933]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 302.226330][T12512] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 302.226366][T12512] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.307921][T12512] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 302.307960][T12512] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.390507][T12512] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 302.390546][T12512] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.494687][T12512] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 302.494727][T12512] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.806217][ T1048] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 302.806254][ T1048] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.895327][T12536] ip6gre1: entered promiscuous mode [ 302.895353][T12536] ip6gre1: entered allmulticast mode [ 302.925290][T12536] ip_tables: iptables: counters copy to user failed while replacing table [ 302.943568][ T148] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 302.943601][ T148] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.943636][ T148] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 302.943659][ T148] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.943688][ T148] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 302.943719][ T148] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.108854][T12549] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1629'. [ 303.108885][T12549] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1629'. [ 303.108901][T12549] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1629'. [ 303.160930][T12558] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 304.267647][T12559] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 304.583772][T12577] syzkaller0: entered promiscuous mode [ 304.583800][T12577] syzkaller0: entered allmulticast mode [ 304.991115][T12602] ip_tables: iptables: counters copy to user failed while replacing table [ 307.425934][T12602] batadv_slave_0: entered promiscuous mode [ 307.428490][T12606] batadv_slave_0: left promiscuous mode [ 307.708580][T12622] __nla_validate_parse: 6 callbacks suppressed [ 307.708603][T12622] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1648'. [ 307.801126][T12627] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1649'. [ 307.916676][T12637] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1651'. [ 308.005010][T12639] netlink: 'syz.1.1652': attribute type 1 has an invalid length. [ 308.056054][T12639] 8021q: adding VLAN 0 to HW filter on device bond12 [ 308.100508][T12641] bond12: (slave veth7): Enslaving as an active interface with a down link [ 308.175525][T12639] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 308.193917][T12639] bond12: (slave batadv2): making interface the new active one [ 308.201390][T12639] batadv2: entered promiscuous mode [ 308.201945][T12639] bond12: (slave batadv2): Enslaving as an active interface with an up link [ 308.359744][T12648] ip6gretap0: left promiscuous mode [ 308.396097][T12648] 8021q: adding VLAN 0 to HW filter on device team0 [ 308.402446][T12648] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 308.516124][T12648] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 308.516164][T12648] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 308.526038][T12648] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 309.090492][T12661] sctp: [Deprecated]: syz.3.1659 (pid 12661) Use of int in max_burst socket option. [ 309.090492][T12661] Use struct sctp_assoc_value instead [ 309.090615][T12662] sctp: [Deprecated]: syz.3.1659 (pid 12662) Use of int in max_burst socket option. [ 309.090615][T12662] Use struct sctp_assoc_value instead [ 309.351536][T12685] SET target dimension over the limit! [ 309.368872][T12685] ip_tables: iptables: counters copy to user failed while replacing table [ 309.368884][T12678] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1662'. [ 309.443024][T12691] netlink: 'syz.0.1661': attribute type 2 has an invalid length. [ 309.501711][T12692] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1666'. [ 309.542859][T12698] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1667'. [ 309.552867][T12698] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1667'. [ 309.910241][T12713] sctp: [Deprecated]: syz.3.1671 (pid 12713) Use of int in max_burst socket option. [ 309.910241][T12713] Use struct sctp_assoc_value instead [ 309.922735][T12714] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1672'. [ 309.938918][T12713] lo: entered promiscuous mode [ 309.938946][T12713] lo: entered allmulticast mode [ 309.957894][T12713] tunl0: entered promiscuous mode [ 309.957918][T12713] tunl0: entered allmulticast mode [ 309.958888][T12713] gre0: entered promiscuous mode [ 309.958906][T12713] gre0: entered allmulticast mode [ 309.987602][T12713] gretap0: entered promiscuous mode [ 309.987628][T12713] gretap0: entered allmulticast mode [ 309.995004][T12713] erspan0: entered promiscuous mode [ 309.995026][T12713] erspan0: entered allmulticast mode [ 309.999610][T12713] ip_vti0: entered promiscuous mode [ 309.999630][T12713] ip_vti0: entered allmulticast mode [ 310.003377][T12713] ip6_vti0: entered promiscuous mode [ 310.004762][T12713] ip6_vti0: entered allmulticast mode [ 310.009396][T12713] sit0: entered promiscuous mode [ 310.009417][T12713] sit0: entered allmulticast mode [ 310.017356][T12713] ip6tnl0: entered promiscuous mode [ 310.017379][T12713] ip6tnl0: entered allmulticast mode [ 310.019428][T12713] ip6gre0: entered promiscuous mode [ 310.019445][T12713] ip6gre0: entered allmulticast mode [ 310.041249][T12713] ip6gretap0: entered promiscuous mode [ 310.041296][T12713] ip6gretap0: entered allmulticast mode [ 310.042175][T12713] vcan0: entered promiscuous mode [ 310.042192][T12713] vcan0: entered allmulticast mode [ 310.090323][T12713] team0: entered promiscuous mode [ 310.090348][T12713] team0: entered allmulticast mode [ 310.115034][T12713] nlmon0: entered promiscuous mode [ 310.115060][T12713] nlmon0: entered allmulticast mode [ 310.116099][T12713] batadv0: entered promiscuous mode [ 310.116117][T12713] batadv0: entered allmulticast mode [ 310.117186][T12713] vxcan0: entered promiscuous mode [ 310.117203][T12713] vxcan0: entered allmulticast mode [ 310.118275][T12713] vxcan1: entered promiscuous mode [ 310.118292][T12713] vxcan1: entered allmulticast mode [ 310.119317][T12713] veth0: entered promiscuous mode [ 310.119333][T12713] veth0: entered allmulticast mode [ 310.121883][T12713] veth1: entered promiscuous mode [ 310.121903][T12713] veth1: entered allmulticast mode [ 310.202410][T12713] wg0: entered promiscuous mode [ 310.202435][T12713] wg0: entered allmulticast mode [ 310.231211][T12713] wg2: entered promiscuous mode [ 310.231238][T12713] wg2: entered allmulticast mode [ 310.232187][T12713] veth0_to_bridge: entered promiscuous mode [ 310.232205][T12713] veth0_to_bridge: entered allmulticast mode [ 310.261227][T12713] bridge_slave_0: entered promiscuous mode [ 310.261253][T12713] bridge_slave_0: entered allmulticast mode [ 310.276521][T12713] veth1_to_bridge: entered promiscuous mode [ 310.276545][T12713] veth1_to_bridge: entered allmulticast mode [ 310.283703][T12713] bridge_slave_1: entered promiscuous mode [ 310.283725][T12713] bridge_slave_1: entered allmulticast mode [ 310.298599][T12713] veth0_to_bond: entered promiscuous mode [ 310.298633][T12713] veth0_to_bond: entered allmulticast mode [ 310.310815][T12713] bond_slave_0: entered promiscuous mode [ 310.310840][T12713] bond_slave_0: entered allmulticast mode [ 310.321494][T12713] veth1_to_bond: entered promiscuous mode [ 310.321518][T12713] veth1_to_bond: entered allmulticast mode [ 310.337066][T12713] bond_slave_1: entered promiscuous mode [ 310.337093][T12713] bond_slave_1: entered allmulticast mode [ 310.343134][T12713] veth0_to_team: entered promiscuous mode [ 310.343159][T12713] veth0_to_team: entered allmulticast mode [ 310.359123][T12713] team_slave_0: entered promiscuous mode [ 310.359146][T12713] team_slave_0: entered allmulticast mode [ 310.368332][T12713] veth1_to_team: entered promiscuous mode [ 310.368355][T12713] veth1_to_team: entered allmulticast mode [ 310.391421][T12713] team_slave_1: entered promiscuous mode [ 310.391445][T12713] team_slave_1: entered allmulticast mode [ 310.401739][T12713] veth0_to_batadv: entered promiscuous mode [ 310.401765][T12713] veth0_to_batadv: entered allmulticast mode [ 310.420023][T12713] batadv_slave_0: entered promiscuous mode [ 310.420076][T12713] batadv_slave_0: entered allmulticast mode [ 310.446093][T12713] veth1_to_batadv: entered promiscuous mode [ 310.446122][T12713] veth1_to_batadv: entered allmulticast mode [ 310.466092][T12713] batadv_slave_1: entered promiscuous mode [ 310.466108][T12713] batadv_slave_1: entered allmulticast mode [ 310.479693][T12713] xfrm0: entered promiscuous mode [ 310.479717][T12713] xfrm0: entered allmulticast mode [ 310.480610][T12713] veth0_to_hsr: entered promiscuous mode [ 310.480628][T12713] veth0_to_hsr: entered allmulticast mode [ 310.513415][T12713] hsr_slave_0: entered allmulticast mode [ 310.515183][T12713] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 310.810559][T12743] Bluetooth: hci0: invalid length 0, exp 2 for type 7 [ 310.810857][T12743] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1676'. [ 311.107323][T12763] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1682'. [ 311.116217][T12758] ip6tnl1: entered allmulticast mode [ 311.126518][ T1048] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 311.126735][ T1048] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 311.156001][ T5789] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 311.163745][ T5789] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 311.181313][T12763] TCP: TCP_TX_DELAY enabled [ 311.181697][T12763] caif0: tun_chr_ioctl cmd 2147767507 [ 311.395455][ T5639] block nbd1: Receive control failed (result -32) [ 311.460967][T12780] smc: removing ib device s [ 311.534146][ T10] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 311.581284][T12780] smbdirect: ib_dev[s] removed [ 311.956150][T12801] netlink: 'syz.0.1695': attribute type 2 has an invalid length. [ 312.109599][T12798] xt_CT: No such helper "netbios-ns" [ 312.742825][T12823] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 312.746908][T12823] netlink: 'syz.1.1699': attribute type 10 has an invalid length. [ 312.746930][T12823] __nla_validate_parse: 5 callbacks suppressed [ 312.746941][T12823] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1699'. [ 313.309112][T12823] batman_adv: batadv0: Removing interface: macvtap1 [ 313.557610][T12842] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1705'. [ 313.557647][T12842] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1705'. [ 313.694715][T12842] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1705'. [ 313.694753][T12842] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1705'. [ 313.725380][ T1048] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 313.725425][ T1048] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 313.725455][ T1048] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 313.725486][ T1048] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 314.082736][T12860] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1712'. [ 314.106195][T12859] ip_tables: iptables: counters copy to user failed while replacing table [ 314.117089][T12859] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1711'. [ 314.255466][T12874] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1716'. [ 314.255493][T12874] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1716'. [ 314.256019][T12874] netlink: 'syz.4.1716': attribute type 1 has an invalid length. [ 314.313706][T12874] 8021q: adding VLAN 0 to HW filter on device bond13 [ 314.336343][T12879] ip_tables: iptables: counters copy to user failed while replacing table [ 314.411687][T12879] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1715'. [ 315.103633][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 315.112424][T12878] bond13: (slave veth1): Enslaving as an active interface with a down link [ 315.146940][T12874] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 315.149768][T12874] bond13: (slave batadv2): making interface the new active one [ 315.151154][T12874] batadv2: entered promiscuous mode [ 315.151583][T12874] bond13: (slave batadv2): Enslaving as an active interface with an up link [ 315.206787][T12882] bond13 (unregistering): (slave veth1): Releasing active interface [ 315.217246][T12882] bond13 (unregistering): (slave batadv2): Releasing active interface [ 315.217308][T12882] batadv2: left promiscuous mode [ 315.240963][T12882] bond13 (unregistering): Released all slaves [ 315.280079][T12884] veth17: entered allmulticast mode [ 315.621178][T12908] tipc: Enabling of bearer rejected, failed to enable media [ 316.132523][T12946] bond13: entered promiscuous mode [ 316.133068][T12946] 8021q: adding VLAN 0 to HW filter on device bond13 [ 316.664580][ T5002] udevd[5002]: worker [10492] /devices/virtual/block/nbd0 is taking a long time [ 316.749741][T12981] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 316.751989][T12981] netlink: 'syz.0.1743': attribute type 61 has an invalid length. [ 316.818413][T12984] @ÿ: renamed from veth0_vlan (while UP) [ 317.274340][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.969389][T13039] Bluetooth: MGMT ver 1.23 [ 318.050489][T13039] __nla_validate_parse: 13 callbacks suppressed [ 318.050511][T13039] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1760'. [ 318.270528][T13053] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1761'. [ 318.270567][T13053] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1761'. [ 318.762089][T13079] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1765'. [ 319.129997][T13092] netlink: 'syz.0.1770': attribute type 1 has an invalid length. [ 319.238956][T13092] 8021q: adding VLAN 0 to HW filter on device bond11 [ 319.307660][T13097] 8021q: adding VLAN 0 to HW filter on device bond11 [ 319.308112][T13097] bond11: (slave gre3): The slave device specified does not support setting the MAC address [ 319.314256][T13097] bond11: (slave gre3): Error -95 calling set_mac_address [ 319.392972][T13092] gretap1: entered promiscuous mode [ 319.404763][T13092] bond11: (slave gretap1): making interface the new active one [ 319.406669][T13092] bond11: (slave gretap1): Enslaving as an active interface with an up link [ 319.407360][T13100] netlink: 124 bytes leftover after parsing attributes in process `syz.2.1772'. [ 319.407382][T13100] netlink: 124 bytes leftover after parsing attributes in process `syz.2.1772'. [ 319.469782][T13103] bond11 (unregistering): (slave gretap1): Releasing active interface [ 319.494560][T13103] bond11 (unregistering): Released all slaves [ 319.574215][ T6478] batadv2: left promiscuous mode [ 319.614535][T13112] netlink: 6 bytes leftover after parsing attributes in process `syz.1.1774'. [ 319.731041][T13124] bond0: (slave ip6tnl0): refused to change device type [ 320.021836][T13144] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1780'. [ 320.021868][T13144] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1780'. [ 320.216327][T13146] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1783'. [ 320.399551][T13160] tipc: Started in network mode [ 320.399586][T13160] tipc: Node identity 5ad56814af47, cluster identity 4711 [ 320.401696][T13160] tipc: Enabled bearer , priority 0 [ 320.456223][T13164] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 320.604634][T13173] sctp: [Deprecated]: syz.1.1791 (pid 13173) Use of int in max_burst socket option. [ 320.604634][T13173] Use struct sctp_assoc_value instead [ 320.731736][T13183] xt_CT: You must specify a L4 protocol and not use inversions on it [ 321.525780][ T10] tipc: Node number set to 4120012820 [ 321.573925][T13222] netlink: 'syz.4.1806': attribute type 3 has an invalid length. [ 321.600838][T13221] nbd: must specify at least one socket [ 322.146391][T13259] trusted_key: syz.2.1819 sent an empty control message without MSG_MORE. [ 322.541944][T13284] ip_tables: iptables: counters copy to user failed while replacing table [ 322.563874][T13276] syzkaller1: entered promiscuous mode [ 322.563896][T13276] syzkaller1: entered allmulticast mode [ 322.568184][T13288] veth0_to_bond: left promiscuous mode [ 322.568207][T13288] veth0_to_bond: entered allmulticast mode [ 323.215009][T13308] syzkaller1: entered promiscuous mode [ 323.215034][T13308] syzkaller1: entered allmulticast mode [ 323.663513][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 323.717293][T13353] __nla_validate_parse: 10 callbacks suppressed [ 323.717316][T13353] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1835'. [ 325.789355][T13368] x_tables: duplicate underflow at hook 1 [ 325.848325][ T30] audit: type=1800 audit(1793912496.681:7): pid=13370 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1842" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1892 res=0 errno=-22 [ 325.881098][T13370] netlink: 'syz.0.1842': attribute type 1 has an invalid length. [ 325.901374][T13373] ip_tables: iptables: counters copy to user failed while replacing table [ 325.928461][T13367] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1841'. [ 325.937232][T13370] bond11: entered promiscuous mode [ 325.937691][T13370] 8021q: adding VLAN 0 to HW filter on device bond11 [ 325.939301][T13367] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1841'. [ 325.966492][T13379] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1842'. [ 326.021243][T13382] netlink: 'syz.1.1846': attribute type 1 has an invalid length. [ 326.069616][T13382] bond14: entered promiscuous mode [ 326.070061][T13382] 8021q: adding VLAN 0 to HW filter on device bond14 [ 326.168681][T13382] 8021q: adding VLAN 0 to HW filter on device bond14 [ 326.171155][T13382] bond14: (slave gre2): The slave device specified does not support setting the MAC address [ 326.171180][T13382] bond14: (slave gre2): Setting fail_over_mac to active for active-backup mode [ 326.203469][T13382] bond14: (slave gre2): making interface the new active one [ 326.203495][T13382] gre2: entered promiscuous mode [ 326.206732][T13382] bond14: (slave gre2): Enslaving as an active interface with an up link [ 326.269139][T13395] can: request_module (can-proto-0) failed. [ 326.365775][T13392] can: request_module (can-proto-0) failed. [ 326.381437][ T30] audit: type=1804 audit(1793912497.211:8): pid=13408 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1850" name="/newroot/384/cgroup.controllers" dev="tmpfs" ino=1985 res=1 errno=0 [ 326.381488][ T30] audit: type=1800 audit(1793912497.211:9): pid=13408 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1850" name="cgroup.controllers" dev="tmpfs" ino=1985 res=0 errno=-22 [ 326.428642][T13404] netlink: 'syz.1.1851': attribute type 1 has an invalid length. [ 326.428661][T13404] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1851'. [ 326.489766][T13413] netlink: 'syz.4.1852': attribute type 26 has an invalid length. [ 326.746694][T13427] workqueue: name exceeds WQ_NAME_LEN. Truncating to: .äxò¼}¶’¦‚qù©µïóŸû5T\cNaë¯$à [ 327.107959][T13419] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.108581][T13419] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.206397][T13419] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 327.211867][T13419] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 327.556578][T13419] vlan2: left allmulticast mode [ 327.556598][T13419] mac80211_hwsim hwsim9 wlan0: left allmulticast mode [ 327.556693][T13419] bond1: left allmulticast mode [ 327.695570][T13419] bond3: left promiscuous mode [ 327.695589][T13419] wireguard0: left promiscuous mode [ 327.763203][T13419] bond5: left promiscuous mode [ 327.763220][T13419] wireguard1: left promiscuous mode [ 327.864311][T13419] macsec1: left promiscuous mode [ 327.942889][T13419] bond8: left allmulticast mode [ 327.943923][T13419] bond9: left promiscuous mode [ 327.948697][T13419] bond10: left promiscuous mode [ 327.948718][T13419] wireguard2: left promiscuous mode [ 327.964230][T13419] bond11: left promiscuous mode [ 328.112331][T13419] bond14: left promiscuous mode [ 328.112358][T13419] gre2: left promiscuous mode [ 328.123583][ T3302] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 328.123617][ T3302] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.123987][T11010] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 328.124014][T11010] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.124050][T11010] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 328.124075][T11010] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.124110][T11010] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 328.124134][T11010] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.494196][T13454] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1859'. [ 328.539379][T13454] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1859'. [ 328.542078][T13454] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1859'. [ 328.542238][T13454] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1859'. [ 328.542374][T13454] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1859'. [ 328.814671][T13472] __nla_validate_parse: 30 callbacks suppressed [ 328.814692][T13472] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1864'. [ 329.152765][T13498] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1870'. [ 329.152810][T13498] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1870'. [ 329.295701][T13501] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1871'. [ 329.295764][T13501] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1871'. [ 329.295777][T13501] tipc: Invalid UDP bearer configuration [ 329.295817][T13501] tipc: Enabling of bearer rejected, failed to enable media [ 329.361262][T13507] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1874'. [ 329.381840][T13505] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1873'. [ 329.434563][T13505] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 329.489802][T13510] veth18: entered allmulticast mode [ 329.850317][T13540] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1881'. [ 329.850349][T13540] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1881'. [ 330.988445][T13551] tc_dump_action: action bad kind [ 331.277956][T13574] netlink: 'syz.0.1887': attribute type 1 has an invalid length. [ 331.337798][T13573] netlink: 'syz.2.1888': attribute type 4 has an invalid length. [ 331.507437][T13582] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1889'. [ 331.712548][T13592] netlink: 'syz.1.1894': attribute type 1 has an invalid length. [ 331.757332][T13592] bond15: entered promiscuous mode [ 331.757793][T13592] 8021q: adding VLAN 0 to HW filter on device bond15 [ 331.826398][T13597] bond15: (slave bridge5): making interface the new active one [ 331.826422][T13597] bridge5: entered promiscuous mode [ 331.830264][T13597] bond15: (slave bridge5): Enslaving as an active interface with an up link [ 331.885499][T13604] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 331.938257][T13602] can: request_module (can-proto-0) failed. [ 331.954065][T13610] tipc: New replicast peer: 255.255.255.255 [ 331.959417][T13610] tipc: Enabled bearer , priority 10 [ 332.021215][T13616] team_slave_1: entered allmulticast mode [ 333.521820][T13666] netlink: 'syz.1.1906': attribute type 29 has an invalid length. [ 333.840247][T13693] ip_tables: iptables: counters copy to user failed while replacing table [ 333.857912][T13689] __nla_validate_parse: 6 callbacks suppressed [ 333.857933][T13689] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1911'. [ 334.142582][T13709] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1919'. [ 334.143210][T13708] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1919'. [ 334.144298][T13712] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1921'. [ 334.174062][T13698] netlink: 'syz.3.1917': attribute type 8 has an invalid length. [ 334.257607][T13716] ip_tables: iptables: counters copy to user failed while replacing table [ 334.259368][T13716] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1922'. [ 334.259409][T13716] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1922'. [ 334.319748][T13723] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1924'. [ 334.324401][T13723] x_tables: duplicate underflow at hook 2 [ 334.354244][T13719] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1923'. [ 334.703919][T13738] sock: sock_timestamping_bind_phc: sock not bind to device [ 334.767049][T13744] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1930'. [ 334.817580][T13745] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1930'. [ 335.392334][T13771] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 335.461145][T13783] xt_CT: You must specify a L4 protocol and not use inversions on it [ 335.490615][T13771] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 335.610657][T13790] unsupported nlmsg_type 40 [ 335.666834][T13771] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 335.789812][T13771] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 335.919636][T13807] netlink: 'syz.4.1946': attribute type 10 has an invalid length. [ 335.931946][T13802] netlink: 'syz.3.1944': attribute type 2 has an invalid length. [ 335.945317][T13802] netlink: 'syz.3.1944': attribute type 2 has an invalid length. [ 336.057575][T13807] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 336.065378][T13807] batadv0: entered promiscuous mode [ 336.071058][T13807] .`: (slave batadv0): Enslaving as an active interface with an up link [ 336.225514][T11010] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 336.279413][T11010] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 336.298986][ T3302] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 336.303589][T11010] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 336.672483][T13850] IPVS: set_ctl: invalid protocol: 33 255.255.255.255:20003 [ 337.084168][T13871] x_tables: duplicate underflow at hook 3 [ 337.709690][T13898] tap0: tun_chr_ioctl cmd 1074025675 [ 337.709714][T13898] tap0: persist enabled [ 337.710744][T13898] tap0: tun_chr_ioctl cmd 1074025678 [ 337.710761][T13898] tap0: group set to 0 [ 337.892205][T13905] syzkaller1: entered promiscuous mode [ 337.892227][T13905] syzkaller1: entered allmulticast mode [ 338.174330][T13913] netlink: 'syz.2.1978': attribute type 4 has an invalid length. [ 338.199471][T13913] netlink: 'syz.2.1978': attribute type 21 has an invalid length. [ 338.738423][T13942] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 338.850679][T13956] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 339.033167][T13969] sctp: [Deprecated]: syz.0.1996 (pid 13969) Use of int in max_burst socket option. [ 339.033167][T13969] Use struct sctp_assoc_value instead [ 339.095013][T13969] __nla_validate_parse: 13 callbacks suppressed [ 339.095035][T13969] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1996'. [ 339.211023][T13975] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1998'. [ 339.568532][T14004] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2004'. [ 340.920371][T14070] syzkaller0: entered promiscuous mode [ 340.920394][T14070] syzkaller0: entered allmulticast mode [ 340.943519][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 341.434498][ T9579] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 341.806036][ T9579] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 341.981791][T14117] tap0: tun_chr_ioctl cmd 1074025681 [ 342.058640][T14124] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2037'. [ 342.268010][T14125] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2035'. [ 342.268106][T14125] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2035'. [ 342.268139][T14125] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2035'. [ 342.782299][T14157] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2045'. [ 342.830504][T14155] vlan3: entered allmulticast mode [ 342.830527][T14155] bond0: entered allmulticast mode [ 342.878219][T14170] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2047'. [ 342.896075][T14157] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2045'. [ 343.402212][T14190] ipvlan2: entered promiscuous mode [ 343.403116][T14190] bridge0: port 1(ipvlan2) entered blocking state [ 343.417936][T14190] bridge0: port 1(ipvlan2) entered disabled state [ 343.418129][T14190] ipvlan2: entered allmulticast mode [ 343.418145][T14190] bridge0: entered allmulticast mode [ 343.421416][T14190] ipvlan2: left allmulticast mode [ 343.421447][T14190] bridge0: left allmulticast mode [ 343.559993][T14206] bond5: option mode: unable to set because the bond device has slaves [ 343.692562][T14210] syzkaller1: entered promiscuous mode [ 343.692587][T14210] syzkaller1: entered allmulticast mode [ 343.806593][T14219] syzkaller0: entered promiscuous mode [ 343.806617][T14219] syzkaller0: entered allmulticast mode [ 344.000438][T14224] can: request_module (can-proto-0) failed. [ 344.151476][ T30] audit: type=1804 audit(1793912514.981:10): pid=14241 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2068" name="/newroot/426/cgroup.controllers" dev="tmpfs" ino=2197 res=1 errno=0 [ 344.151950][ T30] audit: type=1800 audit(1793912514.981:11): pid=14242 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2068" name="cgroup.controllers" dev="tmpfs" ino=2197 res=0 errno=-22 [ 344.153063][ T30] audit: type=1800 audit(1793912514.981:12): pid=14241 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2068" name="cgroup.controllers" dev="tmpfs" ino=2197 res=0 errno=-22 [ 344.176361][T14235] IPVS: Scheduler module ip_vs_mh not found [ 344.251795][T14241] netlink: 'syz.2.2068': attribute type 10 has an invalid length. [ 344.252182][T14242] netlink: 'syz.2.2068': attribute type 10 has an invalid length. [ 344.252385][T14242] netlink: 'syz.2.2068': attribute type 10 has an invalid length. [ 344.290948][T14245] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 344.354008][T14247] __nla_validate_parse: 4 callbacks suppressed [ 344.354030][T14247] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2069'. [ 345.001707][T14276] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2076'. [ 345.292906][T14282] No such timeout policy "syz1" [ 345.699216][T14305] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2080'. [ 345.736632][T14303] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2082'. [ 345.746087][T14305] pim6reg: entered allmulticast mode [ 345.802124][T14303] 8021q: adding VLAN 0 to HW filter on device bond13 [ 346.459917][T14355] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2094'. [ 346.578498][T14355] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2094'. [ 346.638482][T14361] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2095'. [ 346.823041][T14368] ip_tables: iptables: counters copy to user failed while replacing table [ 346.903120][T14372] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2099'. [ 346.903142][T14372] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2099'. [ 346.910110][T14372] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2099'. [ 347.110679][T14380] netlink: 'syz.1.2101': attribute type 4 has an invalid length. [ 347.764184][T14423] erspan0: entered promiscuous mode [ 347.764387][T14423] macsec1: entered promiscuous mode [ 347.765239][T14426] netlink: 'syz.3.2114': attribute type 12 has an invalid length. [ 347.766811][T14423] erspan0: left promiscuous mode [ 347.812550][T14424] netlink: 'syz.0.2112': attribute type 2 has an invalid length. [ 347.813241][T14427] netlink: 'syz.0.2112': attribute type 2 has an invalid length. [ 347.834727][T14428] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 347.864921][T14426] tc_dump_action: action bad kind [ 348.487728][T14440] 8021q: adding VLAN 0 to HW filter on device bond12 [ 348.858092][T14463] netlink: 'syz.2.2122': attribute type 12 has an invalid length. [ 348.858260][T14463] netlink: 'syz.2.2122': attribute type 12 has an invalid length. [ 349.221378][T14471] netlink: 'syz.0.2124': attribute type 5 has an invalid length. [ 349.436660][T14476] __nla_validate_parse: 76 callbacks suppressed [ 349.436680][T14476] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2125'. [ 349.487058][T14481] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 349.715365][T14481] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2126'. [ 349.716369][T14481] tipc: Resetting bearer [ 349.806855][T14481] tipc: Disabling bearer [ 349.894334][ T3382] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 349.894405][ T3382] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 349.894456][ T3382] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 349.894489][ T3382] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 350.160801][T14498] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 350.371957][T14528] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2133'. [ 350.416847][ T30] audit: type=1107 audit(1793912521.251:13): pid=14529 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 350.499840][T14530] netlink: 'syz.4.2134': attribute type 10 has an invalid length. [ 350.499864][T14530] netlink: 55 bytes leftover after parsing attributes in process `syz.4.2134'. [ 350.985970][T14556] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2139'. [ 351.040334][T14560] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2142'. [ 351.066809][T14555] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2140'. [ 351.266812][T14565] batman_adv: batadv0: Adding interface: syz_tun [ 351.266831][T14565] batman_adv: batadv0: The MTU of interface syz_tun is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 351.266874][T14565] batman_adv: batadv0: Interface activated: syz_tun [ 351.437498][T14581] netlink: 'syz.3.2147': attribute type 1 has an invalid length. [ 351.437522][T14581] netlink: 244 bytes leftover after parsing attributes in process `syz.3.2147'. [ 351.516126][T14585] mac80211_hwsim hwsim7 wlan0: left promiscuous mode [ 351.520912][T14585] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 351.842722][T14593] ip6tnl3: entered allmulticast mode [ 351.899872][T14595] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2154'. [ 351.899897][T14595] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2154'. [ 352.056072][ T148] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 352.056292][ T148] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 352.084121][ T9577] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 352.443773][ T9577] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 352.557386][T14627] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 352.783944][ T9577] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 353.326353][T14676] netlink: 'syz.3.2172': attribute type 29 has an invalid length. [ 353.633197][T14687] ebt_limit: overflow, try lower: 4294901760/65535 [ 353.819316][T14691] netlink: 'syz.0.2178': attribute type 1 has an invalid length. [ 353.996186][T14701] bond14: Removing last ns target with arp_interval on [ 354.296382][T14736] netlink: 'syz.4.2190': attribute type 1 has an invalid length. [ 354.302258][T14735] netlink: 'syz.2.2188': attribute type 1 has an invalid length. [ 354.341333][T14736] bond15: entered promiscuous mode [ 354.341926][T14736] 8021q: adding VLAN 0 to HW filter on device bond15 [ 354.443720][T14735] 8021q: adding VLAN 0 to HW filter on device bond14 [ 354.479402][T14736] __nla_validate_parse: 20 callbacks suppressed [ 354.479424][T14736] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2190'. [ 354.479445][T14736] openvswitch: netlink: IP tunnel dst address not specified [ 354.524613][T14740] bond14: (slave gretap1): making interface the new active one [ 354.530184][T14740] bond14: (slave gretap1): Enslaving as an active interface with an up link [ 354.585680][T14738] 8021q: adding VLAN 0 to HW filter on device bond15 [ 354.586042][T14738] bond15: (slave ip6gre4): The slave device specified does not support setting the MAC address [ 354.586060][T14738] bond15: (slave ip6gre4): Setting fail_over_mac to active for active-backup mode [ 354.595959][T14738] bond15: (slave ip6gre4): making interface the new active one [ 354.595982][T14738] ip6gre4: entered promiscuous mode [ 354.647505][T14738] bond15: (slave ip6gre4): Enslaving as an active interface with an up link [ 354.984485][T14770] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2196'. [ 355.171788][T14777] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2199'. [ 355.435460][T14785] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2201'. [ 355.436600][T14785] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2201'. [ 355.608187][T14798] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2206'. [ 355.608305][T14798] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2206'. [ 355.608402][T14798] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2206'. [ 355.608501][T14798] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2206'. [ 355.608600][T14798] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2206'. [ 355.842002][T14812] sit0: left promiscuous mode [ 355.864889][T14812] team_slave_1: left allmulticast mode [ 355.899820][T14812] vxlan0: left allmulticast mode [ 355.900063][T14812] vxlan1: left allmulticast mode [ 355.983664][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 356.028210][T14812] bond8: left allmulticast mode [ 356.029035][T14812] erspan1: left allmulticast mode [ 356.097964][T14812] bond10: left promiscuous mode [ 356.097988][T14812] wireguard6: left promiscuous mode [ 356.118081][T14812] bond11: left promiscuous mode [ 356.118103][T14812] wireguard7: left promiscuous mode [ 356.122431][T14812] ip6tnl1: left promiscuous mode [ 356.122453][T14812] ip6tnl1: left allmulticast mode [ 356.148908][T14812] bond13: left promiscuous mode [ 356.148930][T14812] bridge2: left promiscuous mode [ 356.167384][T14812] ip6gretap1: left allmulticast mode [ 356.182981][T14812] veth17: left allmulticast mode [ 356.190710][T14812] veth18: left allmulticast mode [ 356.218375][T14812] ip6tnl3: left allmulticast mode [ 356.254016][ T5653] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 356.313547][T14827] netlink: 'syz.0.2211': attribute type 21 has an invalid length. [ 356.316497][T14827] netlink: 'syz.0.2211': attribute type 4 has an invalid length. [ 356.316519][T14827] netlink: 'syz.0.2211': attribute type 5 has an invalid length. [ 356.480057][T14836] netlink: 'syz.1.2214': attribute type 1 has an invalid length. [ 356.634881][ T5653] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 356.759616][T14836] netlink: 'syz.1.2214': attribute type 1 has an invalid length. [ 356.759772][T14836] netlink: 'syz.1.2214': attribute type 1 has an invalid length. [ 356.759909][T14836] netlink: 'syz.1.2214': attribute type 1 has an invalid length. [ 356.760053][T14836] netlink: 'syz.1.2214': attribute type 1 has an invalid length. [ 356.760186][T14836] netlink: 'syz.1.2214': attribute type 1 has an invalid length. [ 356.760352][T14836] netlink: 'syz.1.2214': attribute type 1 has an invalid length. [ 356.883572][T14844] tc_dump_action: action bad kind [ 357.658623][T14885] syzkaller1: entered promiscuous mode [ 357.658649][T14885] syzkaller1: entered allmulticast mode [ 358.024301][T14912] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 358.108271][T14909] batman_adv: batadv0: Adding interface: gretap2 [ 358.108292][T14909] batman_adv: batadv0: The MTU of interface gretap2 is too small (1442) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 358.108334][T14909] batman_adv: batadv0: Interface activated: gretap2 [ 358.320666][T14925] mac80211_hwsim hwsim24 wlan1: entered promiscuous mode [ 358.345607][T14923] bond13: (slave bridge0): making interface the new active one [ 358.346164][T14923] bond13: (slave bridge0): Enslaving as an active interface with an up link [ 358.490198][T14931] bridge0: entered allmulticast mode [ 358.837548][T14942] syzkaller1: entered promiscuous mode [ 358.837572][T14942] syzkaller1: entered allmulticast mode [ 359.225327][T14977] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.225720][T14977] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.285254][T14977] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.880916][T15011] 8021q: adding VLAN 0 to HW filter on device team0 [ 359.887021][T15011] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 359.950181][T15011] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 359.971843][T15004] syzkaller0: entered promiscuous mode [ 359.971867][T15004] syzkaller0: entered allmulticast mode [ 360.069573][T15004] tipc: Started in network mode [ 360.069620][T15004] tipc: Node identity 32b00a42e264, cluster identity 4711 [ 360.087900][T15004] tipc: Enabled bearer , priority 0 [ 360.295778][T15027] __nla_validate_parse: 107 callbacks suppressed [ 360.295800][T15027] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2263'. [ 360.333169][T15032] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2261'. [ 360.338622][T15027] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2263'. [ 360.629965][T15003] tipc: Resetting bearer [ 360.707559][T15003] tipc: Disabling bearer [ 362.984395][T15064] tipc: Started in network mode [ 362.984423][T15064] tipc: Node identity f630f6cf2ef9, cluster identity 4711 [ 362.984654][T15064] tipc: Enabled bearer , priority 0 [ 363.075441][T15048] tipc: Resetting bearer [ 363.116786][T15048] tipc: Disabling bearer [ 364.266721][T15127] pimreg: renamed from bridge0 [ 364.378129][T15135] syzkaller1: entered allmulticast mode [ 364.599818][T15150] validate_nla: 29 callbacks suppressed [ 364.599839][T15150] netlink: 'syz.2.2289': attribute type 1 has an invalid length. [ 364.650169][T15150] bond15: entered promiscuous mode [ 364.650599][T15150] 8021q: adding VLAN 0 to HW filter on device bond15 [ 364.670515][T15156] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2290'. [ 364.751465][T15166] ip_tables: iptables: counters copy to user failed while replacing table [ 364.821597][T15169] macvlan3: entered promiscuous mode [ 364.821619][T15169] batadv0: entered promiscuous mode [ 364.821826][T15169] macvlan3: entered allmulticast mode [ 364.821840][T15169] batadv0: entered allmulticast mode [ 364.824481][T15169] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 364.854271][T15169] batadv0: left allmulticast mode [ 364.854299][T15169] batadv0: left promiscuous mode [ 364.943841][T15177] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2297'. [ 365.297363][T15186] netlink: 'syz.0.2299': attribute type 1 has an invalid length. [ 365.597016][T15192] netlink: 'syz.2.2301': attribute type 10 has an invalid length. [ 365.656369][T15193] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2301'. [ 367.227630][T15186] workqueue: Failed to create a rescuer kthread for wq "bond15": -EINTR [ 367.267284][T15192] ipvlan0: entered allmulticast mode [ 367.267310][T15192] veth0_vlan: entered allmulticast mode [ 367.448004][T15203] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2302'. [ 367.514143][T15209] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2305'. [ 367.685731][T15215] netlink: 'syz.0.2306': attribute type 1 has an invalid length. [ 367.766801][T15215] bond15: entered promiscuous mode [ 367.767252][T15215] 8021q: adding VLAN 0 to HW filter on device bond15 [ 368.102234][T15235] batman_adv: batadv0: Interface deactivated: syz_tun [ 368.259831][T15246] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2309'. [ 368.467600][T15256] IPv6: NLM_F_CREATE should be specified when creating new route [ 368.467718][T15256] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 368.467729][T15256] IPv6: NLM_F_CREATE should be set when creating new route [ 368.682298][T15235] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 368.804966][ T6478] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 368.805016][ T6478] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 368.805048][ T6478] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 368.805080][ T6478] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 368.887437][T15263] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2313'. [ 368.887460][T15263] netlink: 11 bytes leftover after parsing attributes in process `syz.0.2313'. [ 368.887478][T15263] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2313'. [ 368.887490][T15263] netlink: 11 bytes leftover after parsing attributes in process `syz.0.2313'. [ 368.887504][T15263] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2313'. [ 368.892258][T15264] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2313'. [ 369.058959][T15267] netlink: 'syz.4.2314': attribute type 7 has an invalid length. [ 369.111062][T15280] sctp: [Deprecated]: syz.0.2316 (pid 15280) Use of int in maxseg socket option. [ 369.111062][T15280] Use struct sctp_assoc_value instead [ 369.323406][T15284] netlink: 'syz.4.2320': attribute type 1 has an invalid length. [ 369.371624][T15284] bond16: entered promiscuous mode [ 369.372075][T15284] 8021q: adding VLAN 0 to HW filter on device bond16 [ 369.537484][ T30] audit: type=1804 audit(1793912540.371:14): pid=15300 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2322" name="/newroot/458/cgroup.controllers" dev="tmpfs" ino=2365 res=1 errno=0 [ 369.537607][ T30] audit: type=1800 audit(1793912540.371:15): pid=15300 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2322" name="cgroup.controllers" dev="tmpfs" ino=2365 res=0 errno=-22 [ 369.845531][T15308] xt_CT: You must specify a L4 protocol and not use inversions on it [ 369.846023][T15308] xt_CT: You must specify a L4 protocol and not use inversions on it [ 369.858849][T15308] xt_CT: You must specify a L4 protocol and not use inversions on it [ 369.859339][T15308] xt_CT: You must specify a L4 protocol and not use inversions on it [ 369.867684][T15308] xt_CT: You must specify a L4 protocol and not use inversions on it [ 369.868146][T15308] xt_CT: You must specify a L4 protocol and not use inversions on it [ 369.871623][T15308] xt_CT: You must specify a L4 protocol and not use inversions on it [ 369.872111][T15308] xt_CT: You must specify a L4 protocol and not use inversions on it [ 369.877172][T15308] xt_CT: You must specify a L4 protocol and not use inversions on it [ 369.880190][T15308] xt_CT: You must specify a L4 protocol and not use inversions on it [ 370.122607][T15317] veth4: entered allmulticast mode [ 370.341713][T15326] netlink: 'syz.2.2332': attribute type 1 has an invalid length. [ 370.380501][T15326] bond16: entered promiscuous mode [ 370.380991][T15326] 8021q: adding VLAN 0 to HW filter on device bond16 [ 370.717760][T15349] __nla_validate_parse: 7 callbacks suppressed [ 370.717782][T15349] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2339'. [ 371.171441][T15364] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2343'. [ 371.197354][T15364] syzkaller1: entered promiscuous mode [ 371.197378][T15364] syzkaller1: entered allmulticast mode [ 371.199781][T15338] tipc: Failed to remove unknown binding: 66,1,1/0:2786271940/2786271942 [ 371.239658][T15338] netlink: 666 bytes leftover after parsing attributes in process `syz.2.2337'. [ 371.338166][T15366] netlink: 45349 bytes leftover after parsing attributes in process `syz.3.2344'. [ 371.338448][T15366] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 371.350418][T15366] 0ªX¹¦Dö»: left promiscuous mode [ 371.567699][T15378] netlink: 'syz.2.2347': attribute type 83 has an invalid length. [ 371.897009][T15401] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2353'. [ 372.259150][T15421] netlink: 6 bytes leftover after parsing attributes in process `syz.3.2359'. [ 372.372830][T15431] syzkaller0: entered promiscuous mode [ 372.373509][T15431] syzkaller0: entered allmulticast mode [ 372.678380][T15443] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2365'. [ 372.717927][T15446] netlink: 'syz.1.2366': attribute type 1 has an invalid length. [ 372.794192][T15451] netlink: 'syz.1.2366': attribute type 10 has an invalid length. [ 372.794217][T15451] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2366'. [ 372.828521][T15439] syzkaller0: entered promiscuous mode [ 372.828545][T15439] syzkaller0: entered allmulticast mode [ 372.850423][T15452] netlink: 'syz.1.2366': attribute type 32 has an invalid length. [ 372.887177][T15446] 8021q: adding VLAN 0 to HW filter on device bond16 [ 372.889389][T15440] tipc: Enabled bearer , priority 0 [ 372.938164][T15445] bond16: (slave veth13): Enslaving as an active interface with a down link [ 373.009860][T15462] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2369'. [ 373.028201][T15437] gre3: entered promiscuous mode [ 373.042435][T15447] tipc: Resetting bearer [ 373.500923][T15482] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2371'. [ 373.997566][T15496] netlink: 'syz.2.2373': attribute type 4 has an invalid length. [ 375.392981][T15447] tipc: Disabling bearer [ 375.486669][T15491] syzkaller1: entered promiscuous mode [ 375.486696][T15491] syzkaller1: entered allmulticast mode [ 375.815392][T15514] __nla_validate_parse: 1 callbacks suppressed [ 375.815414][T15514] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2380'. [ 375.930706][T15523] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2379'. [ 375.937823][T15516] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2380'. [ 375.949036][T15523] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2379'. [ 376.128682][T15545] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2384'. [ 376.143818][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 376.244219][T15548] netlink: 272 bytes leftover after parsing attributes in process `syz.3.2385'. [ 376.682787][T15573] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2393'. [ 376.907302][T15584] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2395'. [ 376.911407][T15586] openvswitch: netlink: Tunnel attr 103 out of range max 16 [ 376.954050][T15586] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2397'. [ 376.954093][T15586] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2397'. [ 377.776645][T15610] veth0: entered promiscuous mode [ 377.794272][T15607] veth0: left promiscuous mode [ 378.019200][T15623] Cannot find add_set index 34 as target [ 378.981924][T15662] netlink: 'syz.2.2416': attribute type 29 has an invalid length. [ 378.981950][T15662] netlink: 'syz.2.2416': attribute type 70 has an invalid length. [ 378.984440][T15662] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 379.166010][T15666] IPv6: NLM_F_CREATE should be specified when creating new route [ 379.186473][T15666] syzkaller1: entered promiscuous mode [ 379.186497][T15666] syzkaller1: entered allmulticast mode [ 381.818895][T15723] bridge_slave_0: left promiscuous mode [ 381.829938][T15725] bridge0 (unregistering): left allmulticast mode [ 382.019782][T15728] __nla_validate_parse: 14 callbacks suppressed [ 382.019801][T15728] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2432'. [ 382.097532][T15741] netlink: 'syz.4.2435': attribute type 2 has an invalid length. [ 382.181996][T15741] !: entered promiscuous mode [ 382.219905][ T3302] IPVS: starting estimator thread 0... [ 382.230745][T15751] IPVS: wlc: TCP 172.20.20.170:20000 - no destination available [ 382.232624][T15741] ip_tables: iptables: counters copy to user failed while replacing table [ 382.235568][T15753] ip_tables: iptables: counters copy to user failed while replacing table [ 382.249711][T15741] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2435'. [ 382.249795][T15741] !: left promiscuous mode [ 382.324150][T15752] IPVS: using max 26 ests per chain, 62400 per kthread [ 382.329030][T15757] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2439'. [ 382.329050][T15757] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2439'. [ 382.360459][T15759] netlink: 'syz.4.2435': attribute type 2 has an invalid length. [ 382.373730][T15762] netlink: 'syz.4.2435': attribute type 2 has an invalid length. [ 382.395194][T15759] !: entered promiscuous mode [ 382.395592][T15757] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2439'. [ 382.395609][T15757] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2439'. [ 382.451752][T15767] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2440'. [ 382.511507][T15773] ip_tables: iptables: counters copy to user failed while replacing table [ 382.540587][T15775] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2443'. [ 382.540615][T15775] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2443'. [ 382.564018][T15775] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2443'. [ 383.736187][T15805] bond0: option resend_igmp: invalid value (807419198) [ 383.736212][T15805] bond0: option resend_igmp: allowed values 0 - 255 [ 383.769348][T15819] pim6reg: entered allmulticast mode [ 383.773631][T15819] pim6reg: left allmulticast mode [ 384.215432][T15843] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 1, id = 0 [ 386.442495][ T4952] block nbd2: Receive control failed (result -32) [ 386.445819][ T5639] block nbd2: Receive control failed (result -32) [ 386.548171][T15958] macsec0: entered promiscuous mode [ 386.548196][T15958] team0: entered promiscuous mode [ 386.548210][T15958] team_slave_0: entered promiscuous mode [ 386.548465][T15958] team_slave_1: entered promiscuous mode [ 386.548836][T15958] macsec0: entered allmulticast mode [ 386.548851][T15958] team0: entered allmulticast mode [ 386.548864][T15958] team_slave_0: entered allmulticast mode [ 386.548879][T15958] team_slave_1: entered allmulticast mode [ 386.556266][T15958] 8021q: adding VLAN 0 to HW filter on device macsec0 [ 386.556795][T15958] team0: Device macsec0 is already an upper device of the team interface [ 386.614835][T15958] team0: left allmulticast mode [ 386.614926][T15958] team_slave_0: left allmulticast mode [ 386.614942][T15958] team_slave_1: left allmulticast mode [ 386.614958][T15958] team0: left promiscuous mode [ 386.614969][T15958] team_slave_0: left promiscuous mode [ 386.615186][T15958] team_slave_1: left promiscuous mode [ 387.149945][T15975] mac80211_hwsim hwsim8 wlan1: entered promiscuous mode [ 387.561111][T16002] syzkaller0: entered promiscuous mode [ 387.561135][T16002] syzkaller0: entered allmulticast mode [ 388.639411][T16053] syzkaller0: entered promiscuous mode [ 388.639435][T16053] syzkaller0: entered allmulticast mode [ 388.748294][T16063] __nla_validate_parse: 13 callbacks suppressed [ 388.748317][T16063] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2516'. [ 388.751440][T16066] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2517'. [ 388.752969][T16067] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2517'. [ 388.982913][T16081] netlink: 'syz.0.2522': attribute type 1 has an invalid length. [ 389.124912][T16089] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2522'. [ 389.127686][T16081] bond16: entered promiscuous mode [ 389.153612][T16081] 8021q: adding VLAN 0 to HW filter on device bond16 [ 389.208112][T16093] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2524'. [ 389.418639][T16095] sit0: left promiscuous mode [ 389.471527][T16103] netlink: 'syz.2.2528': attribute type 1 has an invalid length. [ 389.569923][T16111] netlink: 'syz.1.2530': attribute type 32 has an invalid length. [ 389.651488][T16113] ip_tables: iptables: counters copy to user failed while replacing table [ 389.710411][T16095] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 389.733130][T16095] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 389.829923][T16095] ipvlan0: left promiscuous mode [ 389.891822][T16121] IPVS: set_ctl: invalid protocol: 103 172.20.20.170:20000 [ 389.891860][T16121] IPVS: set_ctl: invalid protocol: 103 172.20.20.170:20000 [ 389.891885][T16121] IPVS: set_ctl: invalid protocol: 103 172.20.20.170:20000 [ 389.891910][T16121] IPVS: set_ctl: invalid protocol: 103 172.20.20.170:20000 [ 389.891933][T16121] IPVS: set_ctl: invalid protocol: 103 172.20.20.170:20000 [ 389.891957][T16121] IPVS: set_ctl: invalid protocol: 103 172.20.20.170:20000 [ 389.892000][T16121] IPVS: set_ctl: invalid protocol: 103 172.20.20.170:20000 [ 389.892036][T16121] IPVS: set_ctl: invalid protocol: 103 172.20.20.170:20000 [ 389.892061][T16121] IPVS: set_ctl: invalid protocol: 103 172.20.20.170:20000 [ 389.892084][T16121] IPVS: set_ctl: invalid protocol: 103 172.20.20.170:20000 [ 389.892107][T16121] IPVS: set_ctl: invalid protocol: 103 172.20.20.170:20000 [ 389.892131][T16121] IPVS: set_ctl: invalid protocol: 103 172.20.20.170:20000 [ 389.892153][T16121] IPVS: set_ctl: invalid protocol: 103 172.20.20.170:20000 [ 389.892176][T16121] IPVS: set_ctl: invalid protocol: 103 172.20.20.170:20000 [ 389.892200][T16121] IPVS: set_ctl: invalid protocol: 103 172.20.20.170:20000 [ 389.892223][T16121] IPVS: set_ctl: invalid protocol: 103 172.20.20.170:20000 [ 389.892247][T16121] IPVS: set_ctl: invalid protocol: 103 172.20.20.170:20000 [ 389.892270][T16121] IPVS: set_ctl: invalid protocol: 103 172.20.20.170:20000 [ 389.892293][T16121] IPVS: set_ctl: invalid protocol: 103 172.20.20.170:20000 [ 389.892316][T16121] IPVS: set_ctl: invalid protocol: 103 172.20.20.170:20000 [ 389.892341][T16121] IPVS: set_ctl: invalid protocol: 103 172.20.20.170:20000 [ 389.892384][T16121] IPVS: set_ctl: invalid protocol: 103 172.20.20.170:20000 [ 389.892411][T16121] IPVS: set_ctl: invalid protocol: 103 172.20.20.170:20000 [ 389.892436][T16121] IPVS: set_ctl: invalid protocol: 103 172.20.20.170:20000 [ 389.892460][T16121] IPVS: set_ctl: invalid protocol: 103 172.20.20.170:20000 [ 389.892484][T16121] IPVS: set_ctl: invalid protocol: 103 172.20.20.170:20000 [ 389.892509][T16121] IPVS: set_ctl: invalid protocol: 103 172.20.20.170:20000 [ 389.892532][T16121] IPVS: set_ctl: invalid protocol: 103 172.20.20.170:20000 [ 389.892556][T16121] IPVS: set_ctl: invalid protocol: 103 172.20.20.170:20000 [ 389.892580][T16121] IPVS: set_ctl: invalid protocol: 103 172.20.20.170:20000 [ 389.892610][T16121] IPVS: set_ctl: invalid protocol: 103 172.20.20.170:20000 [ 389.892633][T16121] IPVS: set_ctl: invalid protocol: 103 172.20.20.170:20000 [ 389.892657][T16121] IPVS: set_ctl: invalid protocol: 103 172.20.20.170:20000 [ 389.893801][T16095] geneve1: left promiscuous mode [ 389.908664][T16095] bond1: left promiscuous mode [ 389.908687][T16095] xfrm1: left promiscuous mode [ 389.909152][T16095] bond2: left promiscuous mode [ 389.909166][T16095] wireguard0: left promiscuous mode [ 389.920702][T16095] bond3: left promiscuous mode [ 389.920726][T16095] wireguard1: left promiscuous mode [ 390.055872][T16095] bond8: left promiscuous mode [ 390.248656][T16095] bond10: left promiscuous mode [ 390.256473][T16095] geneve4: left promiscuous mode [ 390.275580][T16095] gretap1: left promiscuous mode [ 390.318678][T16095] bond11: left promiscuous mode [ 390.370467][T16095] batman_adv: batadv0: Interface deactivated: gretap2 [ 390.430454][T16095] bond15: left promiscuous mode [ 390.441839][T16095] bond16: left promiscuous mode [ 390.451167][T16103] workqueue: Failed to create a rescuer kthread for wq "bond17": -EINTR [ 390.494998][ T3302] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.495052][ T3302] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.495088][ T3302] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.495123][ T3302] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.629909][T16143] netlink: 'syz.4.2535': attribute type 1 has an invalid length. [ 390.684925][T16150] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2536'. [ 390.718958][T16143] bond17: entered promiscuous mode [ 390.722439][T16143] 8021q: adding VLAN 0 to HW filter on device bond17 [ 390.867890][T16156] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2539'. [ 390.868091][T16156] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2539'. [ 390.920243][T16166] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2542'. [ 390.928574][T16170] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2540'. [ 390.987066][T16156] IPv6: NLM_F_CREATE should be specified when creating new route [ 391.108917][ T6478] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 391.108967][ T6478] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 391.109001][ T6478] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 391.131282][ T3302] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 391.174011][T16176] netlink: 'syz.4.2543': attribute type 1 has an invalid length. [ 391.263247][T16176] bond18: entered promiscuous mode [ 391.263823][T16176] 8021q: adding VLAN 0 to HW filter on device bond18 [ 391.419143][T16196] ip_tables: iptables: counters copy to user failed while replacing table [ 391.468419][T16185] xt_TCPMSS: Only works on TCP SYN packets [ 391.718841][ T41] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 391.718889][ T41] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 391.718922][ T41] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 391.733105][ T41] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 391.895379][T16220] syzkaller0: entered promiscuous mode [ 391.895402][T16220] syzkaller0: entered allmulticast mode [ 391.899921][T16221] netlink: 'syz.1.2554': attribute type 1 has an invalid length. [ 391.945089][T16228] xt_hashlimit: size too large, truncated to 1048576 [ 391.977674][T16221] 8021q: adding VLAN 0 to HW filter on device bond17 [ 392.001202][T16221] bond7: (slave veth0_to_bond): Releasing backup interface [ 392.036079][T16221] bond17: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 392.079457][T16236] ip_tables: iptables: counters copy to user failed while replacing table [ 392.079626][T16220] syzkaller0: left promiscuous mode [ 392.079645][T16220] syzkaller0: left allmulticast mode [ 392.575394][T16258] pimreg: entered allmulticast mode [ 392.656834][T16267] xfrm0: entered promiscuous mode [ 392.656858][T16267] xfrm0: entered allmulticast mode [ 392.874025][T16282] netlink: 'syz.3.2572': attribute type 1 has an invalid length. [ 393.029822][T16282] bond14: entered promiscuous mode [ 393.030244][T16282] 8021q: adding VLAN 0 to HW filter on device bond14 [ 393.070086][T16285] 8021q: adding VLAN 0 to HW filter on device bond14 [ 393.071699][T16285] bond14: (slave wireguard3): The slave device specified does not support setting the MAC address [ 393.071721][T16285] bond14: (slave wireguard3): Setting fail_over_mac to active for active-backup mode [ 393.115922][T16285] bond14: (slave wireguard3): making interface the new active one [ 393.115948][T16285] wireguard3: entered promiscuous mode [ 393.117403][T16285] bond14: (slave wireguard3): Enslaving as an active interface with an up link [ 393.409952][T16315] sctp: [Deprecated]: syz.3.2580 (pid 16315) Use of int in max_burst socket option. [ 393.409952][T16315] Use struct sctp_assoc_value instead [ 393.491079][T16321] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 393.617560][T16331] xt_TCPMSS: Only works on TCP SYN packets [ 393.630287][T16331] 8021q: VLANs not supported on ip_vti0 [ 393.728662][T16336] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 393.872356][T16344] geneve4: entered promiscuous mode [ 393.906396][ T346] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.906473][ T346] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.906507][ T346] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.906538][ T346] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.112793][T16362] __nla_validate_parse: 48 callbacks suppressed [ 394.112816][T16362] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2593'. [ 394.212241][T16366] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2595'. [ 394.509507][ T30] audit: type=1804 audit(1793912565.341:16): pid=16381 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2599" name="/newroot/511/cgroup.controllers" dev="tmpfs" ino=2641 res=1 errno=0 [ 394.509560][ T30] audit: type=1800 audit(1793912565.341:17): pid=16381 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2599" name="cgroup.controllers" dev="tmpfs" ino=2641 res=0 errno=-22 [ 394.714083][T16395] netlink: 'syz.2.2602': attribute type 1 has an invalid length. [ 394.714107][T16395] netlink: 4320 bytes leftover after parsing attributes in process `syz.2.2602'. [ 394.888377][T16404] siw: device registration error -23 [ 394.889759][T16404] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2605'. [ 395.277490][T16421] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2608'. [ 395.277921][T16421] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2608'. [ 395.280909][T16421] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2608'. [ 395.281351][T16421] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2608'. [ 395.426462][T16435] netlink: 'syz.1.2610': attribute type 91 has an invalid length. [ 395.428711][T16435] netlink: 'syz.1.2610': attribute type 91 has an invalid length. [ 395.431954][T16435] netlink: 'syz.1.2610': attribute type 91 has an invalid length. [ 395.433150][T16435] netlink: 'syz.1.2610': attribute type 91 has an invalid length. [ 395.459041][T16435] netlink: 'syz.1.2610': attribute type 91 has an invalid length. [ 395.459679][T16435] netlink: 'syz.1.2610': attribute type 91 has an invalid length. [ 395.483435][T16435] netlink: 'syz.1.2610': attribute type 91 has an invalid length. [ 395.486098][T16435] netlink: 'syz.1.2610': attribute type 91 has an invalid length. [ 395.494502][T16435] netlink: 'syz.1.2610': attribute type 91 has an invalid length. [ 395.809966][T16443] syzkaller0: renamed from gre2 [ 395.942025][T16461] ip_tables: iptables: counters copy to user failed while replacing table [ 396.029478][T16465] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2619'. [ 396.052951][T16465] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2619'. [ 396.454594][T16485] openvswitch: netlink: IPv6 tunnel dst address is zero [ 396.469452][T16480] 0: reclassify loop, rule prio 0, protocol 03 [ 396.566426][T16488] 8021q: adding VLAN 0 to HW filter on device bond19 [ 396.608447][T16492] bond19: (slave gretap3): making interface the new active one [ 396.610101][T16492] bond19: (slave gretap3): Enslaving as an active interface with an up link [ 396.745806][T16498] dvmrp1: entered allmulticast mode [ 397.121667][T16534] .`: (slave batadv0): Releasing backup interface [ 397.135968][T16534] batadv0: left promiscuous mode [ 397.145084][T16534] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 397.379001][T16547] pimreg9: entered allmulticast mode [ 397.630494][T16543] syzkaller0: entered promiscuous mode [ 397.630519][T16543] syzkaller0: entered allmulticast mode [ 397.696586][T16571] bond19: option lacp_strict: invalid value (16) [ 397.714073][T16571] bond19 (unregistering): Released all slaves [ 397.739012][T16575] IPVS: ip_vs_add_dest(): tunnel port is zero [ 397.921068][T16581] 8021q: adding VLAN 0 to HW filter on device bond15 [ 398.000456][T16581] bond16: option tlb_dynamic_lb: invalid value (255) [ 398.002325][T16581] bond16 (unregistering): Released all slaves [ 398.040049][T16579] dummy0: entered promiscuous mode [ 398.494056][T16610] xt_IDLETIMER: timeout value is zero [ 398.648062][T16621] ip_tables: iptables: counters copy to user failed while replacing table [ 399.497615][T16638] __nla_validate_parse: 10 callbacks suppressed [ 399.497640][T16638] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2659'. [ 400.474083][ T32] INFO: task kworker/0:1H:4963 blocked for more than 143 seconds. [ 400.474110][ T32] Not tainted syzkaller #0 [ 400.474120][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 400.474130][ T32] task:kworker/0:1H state:D stack:27432 pid:4963 tgid:4963 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 400.474207][ T32] Workqueue: kblockd blk_mq_run_work_fn [ 400.474244][ T32] Call Trace: [ 400.474250][ T32] [ 400.474264][ T32] __schedule+0x17dd/0x5830 [ 400.474316][ T32] ? __pfx___schedule+0x10/0x10 [ 400.474348][ T32] ? schedule+0x90/0x2b0 [ 400.474372][ T32] schedule+0x164/0x2b0 [ 400.474395][ T32] schedule_timeout+0x152/0x2c0 [ 400.474424][ T32] ? __pfx_schedule_timeout+0x10/0x10 [ 400.474453][ T32] ? __pfx_process_timeout+0x10/0x10 [ 400.474482][ T32] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 400.474502][ T32] ? prepare_to_wait_event+0x3e4/0x4d0 [ 400.474531][ T32] ? prepare_to_wait_event+0x440/0x4d0 [ 400.474557][ T32] nbd_queue_rq+0x96a/0xff0 [ 400.474591][ T32] ? __pfx_nbd_queue_rq+0x10/0x10 [ 400.474612][ T32] ? __pfx_autoremove_wake_function+0x10/0x10 [ 400.474641][ T32] ? lock_acquire+0x115/0x350 [ 400.474667][ T32] ? blk_queue_exit+0x26/0x240 [ 400.474703][ T32] blk_mq_dispatch_rq_list+0x499/0x1990 [ 400.474750][ T32] ? sbitmap_get+0x229/0x390 [ 400.474784][ T32] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 400.474816][ T32] ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0 [ 400.474855][ T32] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 400.474900][ T32] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 400.474925][ T32] ? do_raw_spin_lock+0x12b/0x2f0 [ 400.474950][ T32] ? lock_acquire+0x115/0x350 [ 400.474980][ T32] ? process_scheduled_works+0x97a/0x1630 [ 400.475014][ T32] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 400.475037][ T32] ? blk_mq_run_work_fn+0x13f/0x2f0 [ 400.475061][ T32] blk_mq_run_work_fn+0x167/0x2f0 [ 400.475086][ T32] ? process_scheduled_works+0x97a/0x1630 [ 400.475116][ T32] process_scheduled_works+0xc3d/0x1630 [ 400.475180][ T32] ? __pfx_process_scheduled_works+0x10/0x10 [ 400.475217][ T32] ? assign_work+0x3cf/0x5d0 [ 400.475253][ T32] worker_thread+0xa47/0xfb0 [ 400.475298][ T32] ? __kthread_parkme+0x71/0x1f0 [ 400.475331][ T32] kthread+0x38b/0x480 [ 400.475355][ T32] ? __pfx_worker_thread+0x10/0x10 [ 400.475382][ T32] ? __pfx_kthread+0x10/0x10 [ 400.475407][ T32] ret_from_fork+0x514/0xb70 [ 400.475469][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 400.475493][ T32] ? __switch_to+0xc78/0x1410 [ 400.475534][ T32] ? __pfx_kthread+0x10/0x10 [ 400.475559][ T32] ret_from_fork_asm+0x1a/0x30 [ 400.475599][ T32] [ 400.476858][T16644] validate_nla: 67 callbacks suppressed [ 400.476875][T16644] netlink: 'syz.4.2661': attribute type 1 has an invalid length. [ 400.477325][ T32] [ 400.477325][ T32] Showing all locks held in the system: [ 400.477340][ T32] locks held by khungtaskd/32: 1, last CPU#1: [ 400.477354][ T32] #0: ffffffff8ff5a320 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 400.477420][ T32] locks held by kworker/u8:7/346: 2, last CPU#1: [ 400.477434][ T32] #0: ffff8880327a2948 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 400.477488][ T32] #1: ffffc9000368fc40 ((work_completion)(&(&bat_priv->dat.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 400.477571][ T32] locks held by kworker/0:1H/4963: 4, on CPU#0: [ 400.477585][ T32] #0: ffff888021688948 ((wq_completion)kblockd){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 400.477640][ T32] #1: ffffc90010047c40 ((work_completion)(&(&hctx->run_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 400.477696][ T32] #2: ffff88802725fa98 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_work_fn+0x13f/0x2f0 [ 400.477747][ T32] #3: ffff888027887178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc1/0xff0 [ 400.477793][ T32] locks held by getty/5393: 2, on CPU#1: [ 400.477814][ T32] #0: ffff88803604c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 400.477864][ T32] #1: ffffc900032362e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 400.477928][ T32] locks held by kworker/u8:12/6478: 3, on CPU#0: [ 400.477942][ T32] #0: ffff88813fe0c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 400.477997][ T32] #1: ffffc90005617c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 400.478049][ T32] #2: ffffffff9148c2a0 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 400.478104][ T32] locks held by kworker/0:8/8650: 3, on CPU#0: [ 400.478118][ T32] #0: ffff88813ff4ad48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 400.478172][ T32] #1: ffffc9001a8b7c40 ((work_completion)(&aux->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 400.478227][ T32] #2: ffffffff9148c2a0 (rtnl_mutex){+.+.}-{4:4}, at: bpf_prog_dev_bound_destroy+0x29/0x3f0 [ 400.478287][ T32] locks held by udevd/10492: 1, on CPU#0: [ 400.478301][ T32] #0: ffff888026dab350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70 [ 400.478360][ T32] locks held by syz.1.2638/16543: 1, last CPU#1: [ 400.478374][ T32] #0: ffffffff9148c2a0 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 400.478423][ T32] locks held by syz.3.2653/16609: 1, on CPU#0: [ 400.478436][ T32] #0: ffffffff9148c2a0 (rtnl_mutex){+.+.}-{4:4}, at: bpf_xdp_link_attach+0x120/0x990 [ 400.478485][ T32] locks held by syz.0.2657/16627: 2, on CPU#1: [ 400.478497][ T32] #0: ffffffff9146ce80 (vlan_ioctl_mutex){+.+.}-{4:4}, at: sock_ioctl+0x5eb/0x7e0 [ 400.478548][ T32] #1: ffffffff9148c2a0 (rtnl_mutex){+.+.}-{4:4}, at: vlan_ioctl_handler+0xf0/0x630 [ 400.478597][ T32] locks held by syz.0.2657/16628: 2, on CPU#0: [ 400.478611][ T32] #0: ffffffff90bb1808 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 400.478666][ T32] #1: ffffffff9148c2a0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc1d/0x1c30 [ 400.478709][ T32] locks held by syz.2.2660/16640: 4, last CPU#0: [ 400.479104][ T32] #0: ffff888034e64cc0 (&mm->mmap_lock){++++}-{4:4}, at: __mm_populate+0x182/0x390 [ 400.479160][ T32] #1: ffffffff8ff5a320 (rcu_read_lock){....}-{1:3}, at: prepare_alloc_pages+0x149/0x5f0 [ 400.479212][ T32] #2: ffffffff8ff5a320 (rcu_read_lock){....}-{1:3}, at: filemap_map_pages+0x1d1/0x2170 [ 400.479266][ T32] #3: ffffffff8ff5a320 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 400.479325][ T32] [ 400.479331][ T32] ============================================= [ 400.479331][ T32] [ 400.479351][ T32] NMI backtrace for cpu 1 [ 400.479370][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 400.479391][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 400.479402][ T32] Call Trace: [ 400.479410][ T32] [ 400.479418][ T32] dump_stack_lvl+0xe8/0x150 [ 400.479451][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 400.479471][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 400.479497][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 400.479541][ T32] sys_info+0x135/0x170 [ 400.479567][ T32] watchdog+0x1073/0x10f0 [ 400.479603][ T32] ? watchdog+0x209/0x10f0 [ 400.479637][ T32] kthread+0x38b/0x480 [ 400.479660][ T32] ? __pfx_watchdog+0x10/0x10 [ 400.479683][ T32] ? __pfx_kthread+0x10/0x10 [ 400.479707][ T32] ret_from_fork+0x514/0xb70 [ 400.479733][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 400.479755][ T32] ? __switch_to+0xc78/0x1410 [ 400.479788][ T32] ? __pfx_kthread+0x10/0x10 [ 400.479812][ T32] ret_from_fork_asm+0x1a/0x30 [ 400.479851][ T32] [ 400.479859][ T32] Sending NMI from CPU 1 to CPUs 0: [ 400.479888][ C0] NMI backtrace for cpu 0 [ 400.479902][ C0] CPU: 0 UID: 0 PID: 16640 Comm: syz.2.2660 Not tainted syzkaller #0 PREEMPT(full) [ 400.479924][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 400.479940][ C0] RIP: 0010:lock_is_held_type+0x4b/0x150 [ 400.479966][ C0] Code: 8b 05 51 af bd 08 85 c0 0f 85 d5 00 00 00 65 4c 8b 2d 91 67 bd 08 41 83 bd a4 0b 00 00 00 0f 85 bf 00 00 00 89 f5 49 89 fe 9c <41> 5c fa 48 c7 c7 3f d1 6b 8e e8 86 1c 00 00 65 ff 05 17 af bd 08 [ 400.479983][ C0] RSP: 0018:ffffc900097273e8 EFLAGS: 00000246 [ 400.479999][ C0] RAX: 0000000000000000 RBX: 00000000ffffffff RCX: ffff888051138000 [ 400.480013][ C0] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: ffffffff8ff5a3e0 [ 400.480034][ C0] RBP: 00000000ffffffff R08: ffffffff919d71bf R09: 1ffffffff233ae37 [ 400.480049][ C0] R10: dffffc0000000000 R11: fffffbfff233ae38 R12: ffff88801d280c00 [ 400.480064][ C0] R13: ffff888051138000 R14: ffffffff8ff5a3e0 R15: ffff88802632abf0 [ 400.480079][ C0] FS: 00007f00208e46c0(0000) GS:ffff88812361f000(0000) knlGS:0000000000000000 [ 400.480096][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 400.480110][ C0] CR2: 000000110c3a01bc CR3: 000000002b98c000 CR4: 00000000003526f0 [ 400.480127][ C0] Call Trace: [ 400.480134][ C0] [ 400.480144][ C0] __might_resched+0x86/0x4c0 [ 400.480166][ C0] ? shmem_inode_acct_blocks+0x99/0x450 [ 400.480190][ C0] shmem_inode_acct_blocks+0x10f/0x450 [ 400.480211][ C0] ? shmem_alloc_and_add_folio+0x860/0xf60 [ 400.480240][ C0] shmem_alloc_and_add_folio+0x8cf/0xf60 [ 400.480267][ C0] ? filemap_get_entry+0xcd/0x3f0 [ 400.480297][ C0] ? filemap_map_pages+0x1d1/0x2170 [ 400.480325][ C0] ? __pfx_filemap_get_entry+0x10/0x10 [ 400.480352][ C0] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 400.480389][ C0] shmem_get_folio_gfp+0x594/0x1330 [ 400.480424][ C0] shmem_fault+0x179/0x390 [ 400.480457][ C0] __do_fault+0x138/0x2a0 [ 400.480479][ C0] ? do_pte_missing+0x139f/0x3570 [ 400.480501][ C0] do_pte_missing+0x21d2/0x3570 [ 400.480530][ C0] ? handle_mm_fault+0xf1/0x3750 [ 400.480565][ C0] handle_mm_fault+0x1a53/0x3750 [ 400.480601][ C0] ? handle_mm_fault+0xf1/0x3750 [ 400.480638][ C0] ? __pfx_handle_mm_fault+0x10/0x10 [ 400.480669][ C0] ? follow_page_pte+0x748/0xf10 [ 400.480702][ C0] ? __pfx_follow_page_pte+0x10/0x10 [ 400.480738][ C0] __get_user_pages+0x1670/0x2750 [ 400.480784][ C0] populate_vma_page_range+0x311/0x3f0 [ 400.480813][ C0] ? __pfx_populate_vma_page_range+0x10/0x10 [ 400.480841][ C0] ? down_read+0x2b9/0x320 [ 400.480868][ C0] __mm_populate+0x25f/0x390 [ 400.480894][ C0] ? __pfx___mm_populate+0x10/0x10 [ 400.480924][ C0] vm_mmap_pgoff+0x36e/0x520 [ 400.480950][ C0] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 400.480975][ C0] ? rcu_is_watching+0x16/0xb0 [ 400.481006][ C0] ? ksys_mmap_pgoff+0xf3/0x760 [ 400.481042][ C0] ? __x64_sys_mmap+0x7f/0x140 [ 400.481068][ C0] do_syscall_64+0x166/0x520 [ 400.481091][ C0] ? trace_irq_disable+0x3b/0x140 [ 400.481119][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.481138][ C0] ? clear_bhb_loop+0x70/0xc0 [ 400.481162][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.481181][ C0] RIP: 0033:0x7f001f99fb19 [ 400.481198][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 400.481215][ C0] RSP: 002b:00007f00208e4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 400.481233][ C0] RAX: ffffffffffffffda RBX: 00007f001fc25fa0 RCX: 00007f001f99fb19 [ 400.481248][ C0] RDX: b635773f07ebbeef RSI: 0000000000b36000 RDI: 0000200000000000 [ 400.481262][ C0] RBP: 00007f001fa37b70 R08: ffffffffffffffff R09: 00000000215eb000 [ 400.481276][ C0] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 400.481288][ C0] R13: 00007f001fc26038 R14: 00007f001fc25fa0 R15: 00007ffd5df527f8 [ 400.481314][ C0] [ 400.481921][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 401.607606][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 401.616706][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 401.626754][ T32] Call Trace: [ 401.630025][ T32] [ 401.632954][ T32] vpanic+0x26f/0x710 [ 401.636941][ T32] panic+0xc5/0xd0 [ 401.640654][ T32] ? __pfx_panic+0x10/0x10 [ 401.645057][ T32] ? preempt_schedule_common+0x7f/0xd0 [ 401.650514][ T32] ? preempt_schedule_thunk+0x16/0x40 [ 401.655882][ T32] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 401.662040][ T32] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 401.668291][ T32] watchdog+0x10e7/0x10f0 [ 401.672635][ T32] ? watchdog+0x209/0x10f0 [ 401.677058][ T32] kthread+0x38b/0x480 [ 401.681130][ T32] ? __pfx_watchdog+0x10/0x10 [ 401.685804][ T32] ? __pfx_kthread+0x10/0x10 [ 401.690391][ T32] ret_from_fork+0x514/0xb70 [ 401.694986][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 401.700094][ T32] ? __switch_to+0xc78/0x1410 [ 401.704773][ T32] ? __pfx_kthread+0x10/0x10 [ 401.709360][ T32] ret_from_fork_asm+0x1a/0x30 [ 401.714162][ T32] [ 401.717320][ T32] Kernel Offset: disabled [ 401.721641][ T32] Rebooting in 86400 seconds..