last executing test programs: 4.334208271s ago: executing program 0 (id=2362): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, r3, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000009}, 0x40) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000240)="a6", 0x1, 0x20000000, &(0x7f0000000140)={0xa, 0x2, 0xbe14e07, @loopback, 0xd}, 0x1c) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@map, 0x31, 0x1, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0], 0x0}, 0x40) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000480)={0xece7, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)={@cgroup=r6, r1, 0x10, 0x2038, 0x0, @void, @void, @value=r7, @void, r5}, 0x20) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='lp', 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000200)={0x28, 0x1, '\x00', [@padn, @jumbo, @jumbo={0xc2, 0x4, 0x6}]}, 0x18) shutdown(r0, 0x1) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x401, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1703, 0x1081b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 3.682587861s ago: executing program 1 (id=2370): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x12, 0x5, 0x4, 0x2, 0x0, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000240), &(0x7f0000000280)=r1}, 0x20) connect$inet(r0, &(0x7f00000003c0)={0x2, 0x0, @private=0xa010101}, 0x10) 3.333496916s ago: executing program 2 (id=2375): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000c, 0x11, r0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)=0x20) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) close(0x4) r2 = gettid() syz_open_procfs$namespace(r2, &(0x7f0000000040)='ns/pid\x00') ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) 3.321112643s ago: executing program 0 (id=2376): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4000840}, 0xc000) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6tnl0\x00', 0x0, 0x29, 0xb, 0xe4, 0x5, 0x78, @loopback, @rand_addr=' \x01\x00', 0x7800, 0x7, 0x2, 0x4}}) (rerun: 32) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r2, 0x11, 0xa, &(0x7f0000000740), &(0x7f0000000780)=0x4) (async, rerun: 32) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000040)={0x1, 0x4, 0x5, 0x3, @vifc_lcl_addr=@empty, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) (rerun: 32) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000640), r1) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x3c, r3, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'ip_vti0\x00'}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4000) (async) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r1) (async) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x81, &(0x7f0000000280)="1a0000000200", 0x6) (async, rerun: 64) pipe(0x0) (rerun: 64) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}}}}}}, 0x0) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x401, @loopback, 0x2}], 0x1c) (async) sendto$inet6(r5, &(0x7f0000000100)="b8", 0x1, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x998e, @loopback, 0xffffffff}, 0x1c) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010003b0c000000341cade180f862532c", @ANYRES32=0x0, @ANYBLOB="0000000000620000280012800b00010065727370616e0000180002800400120005001600050000000800140000000000"], 0x48}}, 0x40080c0) (async) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f00000003c0)=ANY=[@ANYRESDEC=r5, @ANYRES64=r0, @ANYRESDEC], 0xffc9) (async) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="e00725bd7000fedbdf25010000014e56ed126f660000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000088}, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r7}, 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) (async) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x7e832, 0xffffffffffffffff, 0x0) (async) sendmsg$nl_generic(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000000aa00)=ANY=[@ANYBLOB="d850000044000701fefffffffcdbdf25037c000004004580c0500180bc506480b850cd80b450d680b05018800400f28004008d809f506a80cb84262700fc44f829e9ac5d2b0168d2ed51fbf02783ae7705c94d9468d49caa3fe7907450398014006d800500a4000000000008004d00ac14140c5950028037000180d01032234b706888b980d85f5def3c191ca34a6233501153013bfba3d086610cf508856addde7e5c76f43c436ca7ad24952a0b0085125080106436907b2a903f7e0157da1114736ba94b5dbf4f9c4f80f729a22252376abc3c07a20ec89bb97eb05c339e1274645639afd083cb636ee66d5c151197e89a6e61c57a8c6166ab600ed3768498f99189e39e1b69fc318fdf49ec5bb01f58252c64b18d56a5d340c13a8bc9079abfef0061800400d98004006b00ea11c6ebcf7daba729395ae46378a6c5ea317653ba1c9c415186a816e5b96d1bb170d08a0c3662a881ae356dd004bdcec0f7523da7ba2cca516faf18cc0f269d75b20e5b9a1ba0fe28c74d055c36a00d4055fe19f4d587c63364210d3ba1c9065fb993f13e48a2b2ae7f807b33ef09377821210240935f332253a7abc5a81e51fdf5a47c34d6b6735a1cfc8a2c08d27a668b14211d555addb43097e24d6122e4fd6eb36336a962c07465bbf558eda52d3381f3a8731316953ac9ec5a1621ddb5f93beacfaeb9a06ed666cd011e61d39471491d66ccdbacf99d42fcd8313f8e7625cc2700cf10c58006000d005b000000c41b098a50dda9bb69dd1b8fbc7e1d6a6d00426bb56a116f397aee87932d5a5dcaf58f5d35653926a46cfd0c7cae541dc5e9a0e092c7fe0373937164401ea504e79bea646aef3e0f16f82ba596e064bf2b2cc8528df217def0e6b8974ff2d7952dca23f00149d9b4189a26e057806a67f166922f06db4ce6e19cdaf26b1fa56a7b52b69794ca5624b7dee8f48eba85ae25559334a6af7439a0d58e3b238cb98d501cc026e13fc0269f68b83e006359e5a79f7916096d99fbe600a35a8b55205f631a0a2fe3f13938fdbe4cb259df8a7a69d00594b28249d1764d7b202230c0ca148f6efdfe3108fe38dfd34e5711df4bd741729e138c73faba648361fb53a772d70f8662818764f66302f3314ba96f7c175ec76242b5fb66ff2dd7e81a9bfddf8c58101b30c85fa65239218400300bb7cae9fe6dd4e5827af6c51f506a657aba798068b80283b55149491b49ea8db6c27ea283f0284410098268320e90a7a6508fa9d86f7cc74dfc42688d7e8281692b4f4a66654188f1ef99d1074291c751f57327c93bb1b411bab7e65aa8b26272e211367e80e903796ef0c705856941c9e14940f5925c6dfd7995d6769b7c788ad28125a487594560cd614132be9eb9f74b23f0412cc589ee152ed50adad3ad7722a0f67a3e523798e5fda6dd9eaf4e8407af3f8679efce7ed3fd7f1ff687ad45e2e769ea4cb12ec8eb4c9902b84cc5c4428181a4321379486852a809b0947c464fe5eb261c9d4b74bf0c85e0a92b87933e2bd0ff3538a882fc8460016c5964b963ac67040ab872c438d792c797a9cd57f0f6caea157c7866362dd4f41088f5d02e2bca6a07838a85f1cbef335e0e069641135b4c3e5a055f9fc501859c7c90ea1105faba48a9f6b5d58f6fc3ea487811c760b5848d0aae86fd6c482625087b6831873b26cdae442675fad68b5e904e4ba013fc9ae86f271290671b6c9b65ce00f40e11938384744bed5f4e6ec68e530eb89da516a6d032f979688821893f0920e8b2b51f47081270d0b209c875fa7817f375568e0e08a85b50c3e69a6c5935fda95c43732c2963071ea98cba4382403b95ffa88fcb8b7155685304d8021ba5ab6ce1fb98aea0ac742e69f6039506b4dbaa6af01a0a0dd683717d59373a88b602fc0f3165b1b7817af9490081239d1a2ecdf21b65023bc071fc18aae01ea888182f326969fda2f073219bb135ef632f67a83eb12deb8ee880e8f4bf217e077d83ae9fdbbd8ef4556c5ecd9de9a0387970766a1515ea10099d080eb0f3c31b542fdbb05e2359728c287cc38c98908a8335e2b2f0f32950639670be162075ec4711ca4396ecc32d803195f8992afd430c1e8f9de7810f4bd2708d55eccdf048f87e5e02040a572ec122934a6fcab35091fe94107bf1d1fc19cc28b60cb27ad86c5a2929f4d6781182164c18c86b04ae221746e952d5cf9a26dc9df51f2837bb0d13bdbba32fe810ec3fb6a985c277bc13f1ce5d23285e388ec1a30473d1d6437ed77ca1e42e6c41a6bb81185bf7e7880cbeb13c95ab547f3655787869f608d1e2fc1536dd67163104acbd961a632ce46dcb9ab1d79c7d77ea58c6caa462ca6caa7f4d9365cdcb3703a78d6ed4684c069bbcaf7f9e10f6377652f0bfce0a4204f1dc1dde6e1fcd5dd441749bd6479d90734426a59a749fd1d9c35651b79c21865bb261ad1cf776b4d6556160f1742e7c838824258fd547c98c1ff6967e36a68e2d1e238a582f2a0600a8fffd19d7166959bfdf1387911406b4bf8fdb7095d32eb9c286cf36499f15238ec7fe416b42c9240d6d25c4dd46a024127d688464d1d2ae1726587dd65a43e5133bec63e5b78bcac5b062d149ff1b0a65a73fcb0e0281ddfba3847d6b3170a85e74accce9cc4e5b724dd22ff236149df77f68b2c7511c86b51bf4b0c2d4b78755fe0433ac79480c77fbbdc6a8", @ANYBLOB], 0x50d8}}, 0xc000) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv6_delrule={0x38, 0x21, 0x1, 0x70bd2c, 0x25dfdbfd, {0xa, 0x80, 0x0, 0x4, 0xff, 0x0, 0x0, 0x0, 0x10004}, [@FRA_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @broadcast}}, @FIB_RULE_POLICY=@FRA_PRIORITY={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000841}, 0x20040000) (async) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000400)={0x0, 0x8000, 0x3}, &(0x7f0000000440)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f0000000480)={r10, 0xffff}, &(0x7f0000000500)=0x8) 2.734126272s ago: executing program 2 (id=2379): r0 = socket$kcm(0x1e, 0x4, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x41100, 0x2e, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r2 = socket$kcm(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000004e00c30000000071120100000000009500000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000240)={0x84, @loopback, 0x4e22, 0x3, 'lc\x00', 0x34, 0x80001, 0x70}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000ffdd00"/28], 0x50) socket$inet_smc(0x2b, 0x1, 0x0) pselect6(0x40, &(0x7f0000000a00)={0x8, 0x9, 0x6, 0x1000, 0xa, 0x7e, 0x72, 0x7f1c}, 0x0, 0x0, &(0x7f0000000ac0), 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xa0040, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x150, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@TCA_STAB={0x11c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x0, 0x9, 0x7, 0x0, 0x4, 0x3ff, 0x3}}, {0xa, 0x2, [0x6, 0x3, 0x8001]}}, {{0x1c, 0x1, {0x1, 0x33, 0x5, 0xb, 0x0, 0x4, 0x5, 0x2}}, {0x8, 0x2, [0x7ff, 0x8]}}, {{0x1c, 0x1, {0x8, 0x4, 0x9, 0x7, 0x1, 0xfffff721, 0x7, 0xa}}, {0x18, 0x2, [0x9, 0x1, 0x8, 0xfffe, 0xfff8, 0x7, 0x0, 0x0, 0x1, 0x4]}}, {{0x1c, 0x1, {0xf6, 0x15, 0x5, 0xfe, 0x0, 0x1, 0x7, 0x1}}, {0x6, 0x2, [0x4]}}, {{0x1c, 0x1, {0x2, 0x6, 0x9, 0x6, 0x2, 0x7fffffff, 0x4cf7, 0x5}}, {0xe, 0x2, [0x7ff, 0xf, 0x3, 0x7fff, 0xe9]}}, {{0x1c, 0x1, {0x6, 0x6, 0x6, 0xb, 0x0, 0x3, 0xc, 0x1}}, {0x6, 0x2, [0x9]}}, {{0x1c, 0x1, {0x7, 0x81, 0x401, 0x8, 0x1, 0x8, 0x1ec, 0x2}}, {0x8, 0x2, [0x7fff, 0x7]}}]}, @TCA_RATE={0x6, 0x5, {0x2, 0x3}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0x150}}, 0x20040084) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xb, 0x24, &(0x7f00000009c0)=ANY=[@ANYBLOB="18080000cbb60000000000001000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100b00000009500000000000000b7020000000080007b9af8ff00000000d60900001fffffff7baaf0ff00000000bf2720000000000007080000fffdffffbf9400000000000007040000f0ffffff640200000800000018220000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7050000080000004604f0ff7600000018010000696c6c2500000000002020207b1af8b000000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000bf9800000000000056080000000000408500000005000000b70000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r12 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$TIPC_SRC_DROPPABLE(r12, 0x10f, 0x80, &(0x7f0000000300), &(0x7f0000001080)=0x4) sendmsg(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)="00f9c22ea7", 0x5}], 0x1}, 0x49cf75490397e68f) ioctl$SIOCSIFHWADDR(r5, 0x8905, 0x0) sendmsg$sock(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000140)={r0, 0x0, 0x4, 0xa03e}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) socket$nl_route(0x10, 0x3, 0x0) 2.668768382s ago: executing program 1 (id=2380): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020a040007000000b6f1ff0c0100854105001a000000000000d74619edc700006040231e93e304ad59cac20e4acd8a1220bb64e6fda632eee816"], 0x38}}, 0x20000000) (async) r1 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, 0x0, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000500)=0x12, 0x4) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000040)={'syztnl0\x00', &(0x7f0000000000)={'tunl0\x00', 0x0, 0xa1, 0x80, 0x100, 0x0, {{0x6, 0x4, 0x0, 0x34, 0x18, 0x68, 0x0, 0xf, 0x2f, 0x0, @remote, @multicast1, {[@end]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000240)={'gre0\x00', r3, 0x10, 0x40, 0x7, 0xff, {{0x21, 0x4, 0x2, 0x9, 0x84, 0x68, 0x0, 0x9, 0x4, 0x0, @rand_addr=0x64000101, @multicast2, {[@ssrr={0x89, 0x27, 0x61, [@broadcast, @local, @rand_addr=0x64010101, @local, @remote, @dev={0xac, 0x14, 0x14, 0x2f}, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x11}]}, @lsrr={0x83, 0x3, 0xd0}, @lsrr={0x83, 0x17, 0x8d, [@rand_addr=0x64010100, @local, @multicast2, @loopback, @remote]}, @noop, @ssrr={0x89, 0x1f, 0x7, [@local, @empty, @dev={0xac, 0x14, 0x14, 0x30}, @loopback, @loopback, @dev={0xac, 0x14, 0x14, 0x24}, @local]}, @timestamp={0x44, 0xc, 0xfd, 0x0, 0x7, [0xf, 0x7]}]}}}}}) 2.48059782s ago: executing program 2 (id=2382): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x89}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x125}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x5c}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x89}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x125}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x5c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, [@alu={0x7, 0x0, 0x5, 0x0, 0x0, 0x50}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, [@alu={0x7, 0x0, 0x5, 0x0, 0x0, 0x50}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r1 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x30, 0x1, 0xfd, 0x5ae9}, {0x30, 0x7f, 0x4, 0xfffff00c}, {0x6, 0x23, 0x7, 0xfffffff8}]}, 0x10) sendmmsg$inet(r2, &(0x7f0000002c40)=[{{0x0, 0xffffffffffffffa9, &(0x7f00000001c0)=[{&(0x7f0000000180)="e12d990cc39c0e7c72ef257c2d01855a3605dfb91ffdc2b009000000f78079f21246e5a93e374fb83e9a9688e9a7358835ffd65ed2600ae6f3cb05", 0x3b}], 0x1}}], 0x1, 0x4000) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000040)={r6}, 0x8) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x200000002300, 0x0, 0x0, 0x2000000024be, 0x2000000024ee], 0x0, 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff010000001f0000006b0000000016636169663000000000000000e3ff00007665746831000000000000000000000073797a5f74756e0039da0000f8ff0000000076657468310000000000000000001000aaaaaaaaaa3d000000ff00000180c2000003ff00ffffff00ae000000560100008e0100006f776e6572000000000000000000000000000000000000000000000000000000180000000000", @ANYRES32, @ANYRES32, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB="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"]}, 0x296) 2.367127363s ago: executing program 4 (id=2384): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xe, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000600000085000000aa0000ff0300000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xac, 0xac, 0xb, [@int={0xf, 0x0, 0x0, 0x1, 0x0, 0x1d, 0x0, 0x25, 0x7}, @func={0xe, 0x0, 0x0, 0xc, 0x4}, @float={0x3, 0x0, 0x0, 0x10, 0x7}, @struct={0xb, 0x0, 0x0, 0x4, 0x1, 0x4}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x3, 0xfffffffc}}, @ptr={0xf, 0x0, 0x0, 0x2, 0x4}, @union={0xb, 0x6, 0x0, 0x5, 0x0, 0xba55, [{0xa, 0x3, 0x3}, {0x3, 0x2, 0x242}, {0x1, 0x5, 0x8}, {0x8, 0x3, 0x200}, {0xa, 0x2, 0x1}, {0x2, 0x4, 0x1}]}]}, {0x0, [0x0, 0x0, 0x61, 0x61, 0x30, 0x0, 0x30, 0x5f, 0x2e]}}, &(0x7f0000000100)=""/6, 0xcf, 0x6, 0x1}, 0x28) 2.348224904s ago: executing program 1 (id=2385): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES64=r0, @ANYRES32=r0], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0x11, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000006000000000000000800000018110000", @ANYRES32=r1, @ANYBLOB="00000000003526a5508233fb5a000000b7030000002000007700378383000000bf090000000000005509010000000000950000000000000018410000f8ffffff0000000000000000bf91000000000000b7020000000800008500000085000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x2}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x350, 0x0, 0xc8, 0x8, 0x280, 0x5803, 0x280, 0x2e8, 0x2e8, 0x280, 0x2e8, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffffff, 0xffffff00, 0xff], [0xffffff7f, 0xfffffefe, 0xff, 0xff], 'xfrm0\x00', 'veth0_to_bridge\x00', {0xff}, {0xff}, 0x2f, 0xb7, 0x0, 0x1}, 0x0, 0x168, 0x1b0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x82, 0x3, {0x5}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x81, 0x43a14c66, 0xe, 'syz0\x00', {0x5}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x6, 0x6}, {0xffffffffffffffff, 0x8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d4) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x3e8, 0x11, 0x0, &(0x7f0000000b80)="c1df07000100d30a298ee688890687984f", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) socket$kcm(0xa, 0x2, 0x0) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r4, 0x80047437, &(0x7f0000000040)) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f00000000c0)) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r7 = socket$key(0xf, 0x3, 0x2) recvmmsg(r7, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) setsockopt$sock_int(r7, 0x1, 0x4b, &(0x7f0000000040)=0xfd86, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @local}, @in6={0xa, 0x0, 0xfffffffc, @loopback, 0xc7f}], 0x2c) sendmsg$key(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0216000002"], 0x10}}, 0x0) ioctl(r6, 0x40047438, &(0x7f0000000040)) ioctl$PPPIOCCONNECT(r6, 0x4004743a, &(0x7f00000000c0)) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f0000000140)=0x192975ec) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) write$ppp(r5, &(0x7f0000000080)="d1007ef1afe824dfe760345467c72f55", 0x10) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0xa, &(0x7f0000000180)=0x10d, 0x4) ioctl$sock_TIOCINQ(r8, 0x541b, &(0x7f0000000000)) r9 = socket(0x2, 0x80002, 0x0) setsockopt$IP_VS_SO_SET_ADD(r9, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r9, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010103, 0x4e22, 0x3, 'lblcr\x00', 0x4d, 0x8, 0x77}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e21, 0x2, 0x6, 0x1}}, 0x44) 2.240003413s ago: executing program 0 (id=2386): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000002800)={'wg1\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r4, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0000000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e06018000020000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000900)=@newtfilter={0x40, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {0xb}, {0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_bpf={{0x8}, {0x14, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_ACT={0x4}]}}]}, 0x40}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3404317996c38f9852a87000fddbdf250200020000000000060007f2050000000c000880050004000100000008000500", @ANYRES32=r1, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) 2.235869216s ago: executing program 2 (id=2387): socket$inet6(0xa, 0x2, 0x0) (async) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) (async) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) recvmsg(r0, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x10002) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x40f00}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x40f00}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000400)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000400)=0x0) bind(r0, &(0x7f0000000540)=@nfc={0x27, r2, 0xffffffffffffffff, 0x5}, 0x80) (async) bind(r0, &(0x7f0000000540)=@nfc={0x27, r2, 0xffffffffffffffff, 0x5}, 0x80) r3 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000000c0)=0x10, 0x80000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'sit0\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x40, 0x20, 0x3, 0x1278, {{0xc, 0x4, 0x2, 0x17, 0x30, 0x65, 0x0, 0x5, 0x2f, 0x0, @rand_addr=0x64010102, @multicast2, {[@lsrr={0x83, 0x1b, 0x1b, [@remote, @multicast1, @dev={0xac, 0x14, 0x14, 0x2b}, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote]}, @end]}}}}}) sendmsg$inet(r3, &(0x7f00000003c0)={&(0x7f0000000100)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000140)="c149f390d04ca6e803bbb01a3294630172ad68fd6ed79cd219d2d444c93419b68a08f76e9192eb3b44a2b8c34a4fb7f3ff360ed5db0a46f14847e0cc7810cf2f9b47d90e4f3f43bd872f4381fdbe1bbd3cada9f5d5b185391331f629b9f0961cc030fbb7b8b1e88c93c05636af914d5cb842", 0x72}, {&(0x7f00000001c0)="f28e23eeba0505fcd8beec2f64ad5766c9ec94c20a30dc1f1a50ecd4fae463e5a615bd38e0676b68fadd86634a927aa891eaaac219d245e1154d22bab500e42dbdf6d695d77ef38b7f4f014d04dba01c36b3cebfca19343879a7afc2b41fc65b4bd6fee3645037abe40f77cb1e7a4bd2b261aac31b6dc9b692", 0x79}], 0x2, &(0x7f0000000340)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @private=0xa010101, @remote}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}], 0x68}, 0x4000800) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f0000000040)="07000000010003", 0x7) 2.193911377s ago: executing program 4 (id=2388): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0xc, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r1, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000280)=0x14) r3 = socket$inet(0x2, 0x3, 0x2) unshare(0x22020600) getsockopt(r3, 0xff, 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x6, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0xcc}, @exit], &(0x7f0000000280)='GPL\x00', 0x9, 0x6b, &(0x7f00000002c0)=""/107, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x90}, 0x94) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@newtfilter={0x24, 0x11, 0xd27, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x74, r5, {0x4, 0xfff2}, {0xafabc05531515610, 0xd}, {0x8, 0x2}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x1c005}, 0x24048004) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a40)={&(0x7f0000000900)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x5, [@float={0x6, 0x0, 0x0, 0x10, 0x4}, @decl_tag={0xe, 0x0, 0x0, 0x11, 0x3, 0x1}, @fwd={0x8}, @typedef={0xc, 0x0, 0x0, 0x8, 0x4}, @struct={0x8, 0x5, 0x0, 0x4, 0x0, 0x10, [{0xa, 0x1, 0x81}, {0x3, 0x5}, {0x8, 0x1, 0xe34b}, {0x4, 0x5, 0x5}, {0x5, 0x5, 0x5}]}]}, {0x0, [0x0, 0x2e, 0x2e]}}, &(0x7f0000000a00)=""/59, 0x99, 0x3b, 0x0, 0x4}, 0x28) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b00)={0x1b, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x5}, 0x50) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000bc0)=@generic={&(0x7f0000000b80)='./file0\x00', 0x0, 0x10}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c40)={0x11, 0x1c, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x98c, 0x0, 0x0, 0x0, 0xd}, {}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x58e}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x10}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000880)='GPL\x00', 0x5, 0x3c, &(0x7f00000008c0)=""/60, 0x41000, 0x20, '\x00', r5, 0x0, r6, 0x8, &(0x7f0000000a80)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000ac0)={0x4, 0x7, 0x6, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000c00)=[r7, r8], 0x0, 0x10, 0x5a}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3e, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x25, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r9, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x50103}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d00)={{0x14, 0x10, 0x4}, [@NFT_MSG_DELOBJ={0x178, 0x14, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2000000000000005}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_USERDATA={0x6d, 0x8, "ddec992efe4097c9439b96af752dc89b6d385d2bd68741773db78cc6f78b4b952cb43c2d62e6ba42811f41730c79fe7bbb441b5373621ae8fba5e439c2acf0acccd2c726a6f6b0a460634cd062b3906691301134c4965fb521dcbf3f85ddc2516cbb18b428caf15f9e"}, @NFTA_OBJ_USERDATA={0xc8, 0x8, "bb389d7688bca4fd8c830583b3f104779c9a376b166a4053039c6399473de393d7c2e5049e2cf653b47f7020550ca41e892f8867bff755addd256bef384dc15d88b48ff8176875c247b1ca6e64dd66a7b32a6553fd8f7e6948e18b3f5fc8da411a4071a06b48e22fedd4b08013cee270b4d3de264077d10bf9dfbb9fc0a85b7cfc3a5f8db6433d7a5de972a3bb2b4c6f3b3cf530e6dfa1ffc368216f94251ab39ef8b61b54886a313d3dde177090fef978095cc1f5ba5c8cd6fd18bbe984aa4bb1dbac11"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x2, 0x84}}}, 0x1a0}, 0x1, 0x0, 0x0, 0x24048045}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440)=[{0x0}], 0x1}, 0x4005) sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400c2800c0001800600060086dd00000c0007"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) syz_genetlink_get_family_id$gtp(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000480)={'ip6tnl0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x2f, 0xa7, 0x9, 0x1, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}, @private2, 0x7, 0x80, 0x1, 0x7}}) 2.113408104s ago: executing program 3 (id=2389): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x2}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0400000800014b5c9fa24f5f6708bcfc75184f2043"], 0x50) setsockopt$inet6_tcp_buf(r1, 0x6, 0xd, &(0x7f0000000300)="fd236bfdab", 0x5) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xc6}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.052310515s ago: executing program 0 (id=2390): recvmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x5b}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4, 0x40}, {}, {}, {}, {}, {0x0, 0x0, 0xd}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffff8}, {}, {}, {}, {}, {0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {0x0, 0x401}, {}, {0x80}, {0x0, 0x0, 0x9}, {}, {}, {}, {0x0, 0x0, 0x7ff}, {0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x8000}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xffffffff}, {}, {}, {}, {}, {0x0, 0xfffffffc}, {}, {}, {0x0, 0xfffffffd}, {}, {0x0, 0x101}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {0x2000000}, {}, {}, {0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x80000}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x7}, {}, {}, {}, {0x0, 0x0, 0xfffffffa}], [{}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x20004000) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000080)={0x9, 0x0}, 0x8) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000400)={@val={0x0, 0x8100}, @void, @eth={@broadcast, @local, @val={@val={0x88a8, 0x1, 0x0, 0x1}, {0x8100, 0x7, 0x1, 0x2}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x4000, 0xe000, 0x6, 0x2f, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x40}}, {0xa001, 0x880b, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x8, 0x0, @void}}}}}}}}, 0x3a) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r1}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="00000000040000090000000000000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000c300000638af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=@newpolicy={0x17c, 0x13, 0x101, 0x0, 0x0, {{@in6=@remote, @in=@broadcast, 0x100, 0xd, 0x400, 0x9, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x2, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x8}, {0x0, 0x1, 0x0, 0x100}, 0xfffffffe}, [@tmpl={0xc4, 0x5, [{{@in=@remote, 0x4d2, 0x2b}, 0xa, @in6=@empty, 0x0, 0x1, 0x1, 0x1, 0x4, 0x2, 0x80000001}, {{@in6=@mcast1, 0x4d5, 0x32}, 0xa, @in=@rand_addr=0x64010101, 0x0, 0x1, 0x2, 0x48, 0x4, 0x40ffff, 0x5}, {{@in=@multicast2, 0x4d4, 0x2b}, 0xa, @in=@local, 0x0, 0x4, 0x0, 0x3, 0xfffffff9, 0x3ff, 0xd9}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.025069373s ago: executing program 1 (id=2391): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="16000000", @ANYRES16=r3, @ANYBLOB="09020000000000000000010000000500040002000000"], 0x1c}}, 0x0) sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x14, r3, 0x1, 0xfffffffc, 0x4}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000001c0), 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x8, [@restrict={0x0, 0x0, 0x0, 0xb, 0x3}, @func_proto, @func={0x4, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x0, 0x0, 0x0, 0x61, 0x61, 0x2e]}}, 0x0, 0x44, 0x0, 0x1}, 0x28) listen(0xffffffffffffffff, 0x709) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, 0x0, 0x20004000) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c00000009060300000000000000000007000000240007800c000180082101407f0000010c001480080001400a010100060004405000000005000100060000000900020073797a3100000000"], 0x4c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) socket$vsock_stream(0x28, 0x1, 0x0) r6 = socket(0x11, 0x2, 0x0) setsockopt(r6, 0x107, 0x1, &(0x7f00000001c0)="010000000200060000071a80010061cc", 0x10) close(r6) connect$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x0, @host}, 0x41) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000001b14010029bd7000ffdbe825080045006d46e539"], 0x18}, 0x1, 0x0, 0x0, 0x4040800}, 0xc0) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r2, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x14, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000094}, 0x81) getsockopt$sock_buf(r0, 0x1, 0x30, &(0x7f0000000080)=""/239, &(0x7f0000000180)=0xef) 1.88744603s ago: executing program 3 (id=2392): socket(0x10, 0x80002, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=@newqdisc={0x68, 0x14, 0xf0b, 0x0, 0xfffffffc, {0x2, 0x0, 0x0, 0x0, {0x5, 0xa}, {0xd}, {0x2, 0x5}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x40, 0xfc, 0x200, 0x5, 0x0, 0xfffffffa, 0x80}}, {0x4}}, {{0x1c, 0x1, {0x1, 0x7f, 0x8, 0x40a, 0x2, 0x8, 0x2}}, {0x4}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x24008814}, 0x20000880) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'vlan0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="090029bd7000000000000200000008000300", @ANYRES32=r5, @ANYBLOB="0c00990041000000600000000800a10001010000050019010e000000050018012d000000"], 0x40}}, 0x80) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a09040000000000000000020000000900010073797a30000000000900020073797a3200000000200020bb4b016b36f2a692279f014164ce0000080a"], 0xa0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0xe, &(0x7f0000000000)=ANY=[], &(0x7f0000000580)='syzkaller\x00', 0x6, 0xc, &(0x7f0000000340)=""/12, 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x10, 0xfffffffe}, 0x9b) sendmsg$NFT_BATCH(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x84}, @NFTA_SET_DESC={0x20, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}]}]}, @NFT_MSG_NEWSETELEM={0x54, 0xc, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, "e7ffff7f00000000"}]}, @NFTA_SET_ELEM_KEY_END={0x10, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, "f81f3fe70a58a077"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x100}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) bind$alg(r1, &(0x7f00000002c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r10, 0x29, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="11030000000000000001000103000000040102010800000000"], 0x20) r11 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r11, &(0x7f0000001140)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000540)='O', 0x1}], 0x1}}], 0x1, 0x0) shutdown(r11, 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r11, 0x84, 0x84, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e20, 0x4, @empty, 0xc}}, 0x0, 0x2}, &(0x7f0000000340)=0x90) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe315}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x48}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x34, 0x18, 0x35f32a6dfa748ddd, 0x3, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0x8, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_DATA={0x4, 0x4}}}}]}, 0x34}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) 1.368059405s ago: executing program 4 (id=2393): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) (async) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000000e00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0xa6, &(0x7f00000003c0)=""/166}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x12, 0x1, 0x8, 0xb}, 0x50) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x12, 0x1, 0x8, 0xb}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) sendto$inet6(r0, &(0x7f0000000000)="e1", 0x1, 0x20000000, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a00001400028010000e"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0x44014) (async) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a00001400028010000e"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0x44014) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) syz_open_procfs$namespace(0x0, &(0x7f0000000000)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) (async) sendmsg$inet(r8, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) recvmmsg(r7, &(0x7f0000002340)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000005300)=""/4096, 0x1000}], 0x1}, 0xf}, {{0x0, 0x0, 0x0}, 0x1e3}], 0x2, 0x2042, 0x0) ioctl$FIBMAP(r6, 0x1, &(0x7f0000000080)) openat$cgroup_ro(r6, &(0x7f0000000000)='memory.events.local\x00', 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x60, 0x1403, 0xf, 0x70bd26, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_virt_wifi\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'pim6reg\x00'}}]}, 0x60}}, 0x8e55514b3dcdfbdb) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0}, 0x14) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000100)={0xff}, 0x8) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000100)={0xff, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000180)=r9, 0x4) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000002c80)=@newtfilter={0x120, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x1, 0xfffb}, {0x0, 0xffff}, {0x300, 0x6}}, [@filter_kind_options=@f_basic={{0xa}, {0xf0, 0x2, [@TCA_BASIC_EMATCHES={0xec, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x400}}, @TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_LIST={0xdc, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x5, 0x8, 0x2000}, {0x3, 0x3, 0x3}}}, @TCF_EM_CONTAINER={0xb0, 0x1, 0x0, 0x0, {{0x5, 0x0, 0x401}, "f09992a4874419e12c7f3c41cd0532179d3416c4ac82a014095f53b60fccc9cee04d936837b16041b9815c2b3aa879efbd8c04050410b8d89a48df80359b25fe72670ae1c6610993a06258872d35f4295abe45e3292a3ca13e98595f58c5ee5edbea5f1449c1926ce6b5c5508989ae46c605ae3574900130da10fb8c5c2aa148261a50793c1b56c4c2178db69cbfff3a9bb7081f0b4bc185da07efe035f554e31464"}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x400}, {0xdf01, 0x2, 0x7, 0x1, 0x2, 0x2}}}]}]}]}}]}, 0x120}}, 0x0) 1.242086748s ago: executing program 1 (id=2394): unshare(0x6a040000) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)={0x14, r1, 0x30b, 0x0, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x404c857}, 0x20060000) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="00000000800000000008a116edfe", @ANYRES32=0x0, @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x9, 0x4, &(0x7f0000000380)=@framed={{0x18, 0x6, 0x0, 0x0, 0x1}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}]}, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet6(r2, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000000)={0x0, 0xfffffffe, 0x8001, 0x6}, 0x10) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000f00100001e65a127a940dcb5f0800000000217a2e73d76b097e6f7e0500000000000000f123fa60149bfbfbd043f678ac", @ANYRES32=0x0, @ANYBLOB="000000002104020008001b00000000000c001a800800028004000180"], 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024) syz_genetlink_get_family_id$nbd(&(0x7f0000000600), r0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) recvfrom$llc(0xffffffffffffffff, 0x0, 0x0, 0xa7a028f7425b35c2, 0x0, 0x0) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}], 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='veno', 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0x3}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a00000409"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$inet6(0xa, 0x80000, 0xfffffffd) socket$packet(0x11, 0x2, 0x300) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 1.202445301s ago: executing program 3 (id=2395): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000500)=0xeb3149fb247d6842, 0x4) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd0, 0x0, 0x4) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001a00010000000000000000001c000000000000000000000004001a"], 0x24}}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r7 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$tipc(r7, &(0x7f0000002c80)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x2, 0x3}}, 0x10) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x21000440}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES8=r6, @ANYBLOB="240029bd7000fddbdf25010000000c00060000000023000000000800010000000000090023007ba95b232f000000"], 0x34}, 0x1, 0x0, 0x0, 0xc141}, 0xc000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x10}]}, &(0x7f0000000100)='GPL\x00', 0x5}, 0x94) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002cbd7000001000ca3d9be7768899798595b58fa18f343d00010000000c0002000400000000000000100007800c0001800800010086a157f38646c9efba072f9acff527830c4837dc51bdccf6096d4c669e900888ae98a5cffbfe7df2cd9411aa7bc8fefbe4d21538e40207a762ebc90b4dc0f3dc5aec3d7305633e5b3b14c0ceb6d5c4689e07bf4d21a08c1b17f782890f8c368ccd223bd15643eb911c2bf3807963bd58", @ANYRES32=r3, @ANYBLOB="0c000500770369144697da5d"], 0x3c}}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000580)={@map=r8, 0x34, 0x0, 0x7c53, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0]}, 0x40) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vxcan1\x00', 0x0}) connect$can_j1939(r4, &(0x7f0000000280)={0x1d, r9, 0x3, {0x1, 0xff, 0x1}, 0xff}, 0x18) 1.100079093s ago: executing program 2 (id=2396): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={0x1, 0xffffffffffffffff}, 0x4) ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(r0, 0x40109441, &(0x7f00000002c0)={0x200, 0x3, 0x3}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000880)=ANY=[@ANYBLOB="180000002f00090028bd70000000000004000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x20000004) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x21031, 0xffffffffffffffff, 0x21d63000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r2, 0x80010040) (async) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa1b080045f40028006700000206907864010101ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="0000000000000000bf67622a85146a369181937281688a5634f4939c0b6119852b8e0dcb6ee4fe18734a9944d864513a8f7cf321b793c98f6ab01ee3dbff87e637cb1b73f3911b"], 0x0) syz_emit_ethernet(0x36, &(0x7f0000000640)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0xfffe, 0x0, 0x95, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x40, 0xb}}}}}}, 0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0600000004000000001000008900000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000a40543796779f6319eed381d6f6cd607d81d58e2a750"], 0x50) r4 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000380)=@filter={'filter\x00', 0x42, 0x4, 0x311, 0xffffffff, 0x1d8, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x2a8, 0x2a8, 0x2a8, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'netpci0\x00', 'nr0\x00', {0xff}}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@private=0xa010101, @multicast2, 0xff, 0x0, 'netpci0\x00', 'team_slave_1\x00'}, 0x287, 0xe0, 0x140, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x4}}, @common=@unspec=@limit={{0x48}, {0xfffffffa, 0xb, 0x0, 0x0, 0x0, 0xfffffffc}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x1278]}, {0xffff, [0x5]}}}}, {{@ip={@dev, @remote, 0x0, 0xff000000, 'veth1_to_team\x00', 'veth1_to_batadv\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x0, 0x3, 0x1, 0x2, 0x0, 0x5], 0x1, 0x4}, {0xffffffffffffffff, [0x7, 0x4, 0x4, 0x5], 0x6, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a0) (async) getsockopt$inet_opts(r4, 0x0, 0x16, &(0x7f0000000180)=""/171, &(0x7f0000000240)=0xab) (async) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r5, 0x0, 0x8008000000010, &(0x7f00000000c0)="170000000200010400ffbe8c5ee17688a20032e80101000a000002a257fc5ad90200bb6a880000d6c8db000000df018002000000fc0607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dfc060115003901000000000000eaffff00000000000062068f5ee50ce5af9b1c5683ffffff02ff030000ba000840024f0298e9e90539062a80e605007f71174aa951f3c63e5a1b47b63a6323ded2231454668492f9c681a6a9fc", 0xb8) (async) syz_emit_ethernet(0x3e, &(0x7f0000000200)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x2, 0x29, 0x7, 0x66, 0x81, 0x2, 0x29, 0x1000, @empty, @multicast1}}}}}}, 0x0) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, &(0x7f0000000980)=""/103, &(0x7f00000025c0), &(0x7f0000000600), 0x80, r3, 0x0, 0x7}, 0x38) 984.115026ms ago: executing program 0 (id=2397): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e21, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) r1 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000001a00)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff010000000000000000000000000001f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000a004e2000000008fe8000000000000000000000000000aa05000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000010000000c0000000000000000000000000000000104000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ad94e2100000073fe8000000000000000000000000000aa"], 0x610) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f00000000c0), &(0x7f0000000400)=0x14) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xfffffffe}}, {{0xa, 0x4e08, 0x4a3, @private2, 0x4f0}}}, 0x108) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="8c01000010000100000000000002000009000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x18c}}, 0x4004090) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x41, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r1) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r5, 0x8983, &(0x7f0000000440)={0x3, 'netdevsim0\x00', {0x4}}) getsockopt$sock_buf(r3, 0x1, 0x1a, &(0x7f0000000300)=""/188, &(0x7f00000003c0)=0xbc) sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x84}, 0x20000010) 819.323039ms ago: executing program 3 (id=2398): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYRES8=r0, @ANYRESDEC, @ANYRES64], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x40000) 744.549928ms ago: executing program 4 (id=2399): socket$nl_xfrm(0x10, 0x3, 0x6) (async) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000100040000000000091931007b1140000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x34, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x16) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000100040000000000091931007b1140000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x34, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x16) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a580000000c0a3d0100000000000000150a0000060900020073797a31000000000900010073797a31000000002c0003801c0000840c00018006000100d10300000c000440000000002df31ab30c000080080003400000000214000000110001"], 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_xfrm(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x1fc, 0x19, 0x1, 0xfffffffd, 0x25dfdbff, {{@in6=@mcast1, @in=@remote, 0x4e20, 0x0, 0xf7ff, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0xfffffffffffffff8, 0x0, 0xffffffffffffffff, 0x1000}, {0x3, 0x6, 0x80}, 0xfffffffc, 0x0, 0x0, 0x0, 0x3}, [@tmpl={0x144, 0x5, [{{@in6=@private0={0xfc, 0x0, '\x00', 0x4}, 0x0, 0x3c}, 0x0, @in6=@mcast2, 0x3502, 0x0, 0x2, 0x0, 0x0, 0xbd0}, {{@in6=@remote, 0x0, 0x3c}, 0xa, @in=@broadcast, 0xfffffffd, 0x1, 0x0, 0x0, 0x800, 0x800, 0xffffffff}, {{@in6=@loopback, 0x0, 0x32}, 0xa, @in6=@empty, 0x3503, 0x1, 0x0, 0x4, 0x8, 0x0, 0xfffffffd}, {{@in=@multicast2, 0x10000, 0x33}, 0x0, @in6=@mcast2, 0x3504, 0x0, 0x2, 0x4, 0x0, 0xabb}, {{@in=@dev={0xac, 0x14, 0x14, 0xc}, 0x0, 0x2b}, 0xa, @in6=@local, 0x0, 0x4, 0x2, 0x0, 0x10000}]}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x20002884}, 0x800) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000c40)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) accept4(r2, 0x0, 0x0, 0x0) (async) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000540)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}], 0x1, 0x80) sendmmsg$inet6(r3, &(0x7f00000032c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=[@hopopts_2292={{0x18, 0x29, 0x36, {0x87}}}], 0x18}}], 0x1, 0x44001) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x80000001, 0x30}, &(0x7f00000001c0)=0xc) (async) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x80000001, 0x30}, &(0x7f00000001c0)=0xc) setsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000002c0)={r4, 0x9, 0x3}, 0x10) 655.075375ms ago: executing program 3 (id=2400): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x6, &(0x7f0000000780)=ANY=[@ANYBLOB="1802000001000400000000000000000085000000410000001800000003000000000000000400000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) (async) r1 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000340)=@ethtool_rxnfc={0x31, 0x1, 0xe, {0x2, @udp_ip4_spec={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0x4e02, 0x4e22, 0xa}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, 0x7, 0x8b6, [0x5, 0xb3300]}, @udp_ip6_spec={@local, @mcast2, 0x4e1e, 0x4e22, 0x8f}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0x800, 0xf, [0x7, 0x9]}, 0x10, 0x2}}}) (async) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r6, &(0x7f0000000000)={[{0x2d, 'net'}]}, 0x5) (async) ioctl$FS_IOC_RESVSP(r6, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x9ffffc}) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x5001}) (async) ioctl$TUNSETVNETHDRSZ(r4, 0x400454d8, &(0x7f0000000200)=0xc) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000400)={'syzkaller1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f00000000c0)={@dev={0xfe, 0x80, '\x00', 0xfe}, 0x40, r8}) (async) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000600)={'syzkaller1\x00', 0x41}) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000004000000080000000100000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010000000000a2b300000000000000080000000000000000"], 0x50) write$tun(r2, &(0x7f00000001c0)=ANY=[@ANYRESHEX=r1], 0x64) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f00000002c0)=0x10) (async) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) (async, rerun: 64) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r9, 0xc0096616, &(0x7f0000000300)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (rerun: 64) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000140)={r10, 0x80}, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000680)="548852ac5b4eba7aeaccd2c62b2b", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8}, 0x50) 579.361132ms ago: executing program 4 (id=2401): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@bridge_getlink={0xc4, 0x12, 0x8, 0x70bd26, 0x25dfdbfb, {0x7, 0x0, 0x0, 0x0, 0x1, 0x4}, [@IFLA_PROP_LIST={0x68, 0x34, 0x0, 0x1, [{0x14, 0x35, 'vcan0\x00'}, {0x14, 0x35, 'veth1_to_bond\x00'}, {0x14, 0x35, 'macvlan0\x00'}, {0x14, 0x35, 'veth0\x00'}, {0x14, 0x35, 'bridge_slave_1\x00'}]}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x9}, @IFLA_GROUP={0x8, 0x1b, 0x9471}, @IFLA_MAP={0x24, 0xe, {0x1, 0x4, 0x6, 0x8, 0xb, 0xf3}}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x1}]}, 0xc4}, 0x1, 0x0, 0x0, 0x404c8c0}, 0x8050) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001780)=@newlink={0x3c, 0x10, 0x403, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x429a4}, [@IFLA_MASTER={0x8, 0xa, r2}, @IFLA_ALT_IFNAME={0x14, 0x35, 'wlan1\x00'}]}, 0x3c}}, 0x8000) 564.717513ms ago: executing program 0 (id=2402): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_ifreq(r1, 0x891f, &(0x7f0000000280)={'rose0\x00', @ifru_ivalue=0xf}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00'}) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040), 0x10) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080), 0x10) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000004ec0)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000500)='\b', 0x1}], 0x1, 0x0, 0x0, 0x4000004}], 0x1, 0x20) sendmmsg(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x1}], 0x1}}], 0x1, 0x4008094) recvfrom$unix(0xffffffffffffffff, &(0x7f0000000140)=""/263, 0x107, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000006c0)=""/68, 0x20000}], 0x1}, 0x2) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'erspan0\x00'}) socket$kcm(0xa, 0x2, 0x73) socket$inet_udp(0x2, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x13, 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x14, &(0x7f00000003c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0xf, 0xd9, &(0x7f0000000f80)=""/217, 0x41100, 0x5a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x420000}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socket$xdp(0x2c, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000540)=0xb0, 0x4) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000007c0)={'tunl0\x00', &(0x7f0000000740)={'sit0\x00', 0x0, 0x40, 0x10, 0x4, 0x8003, {{0xb, 0x4, 0x1, 0x4, 0x2c, 0x66, 0x0, 0xa, 0x4, 0x0, @multicast1, @remote, {[@noop, @end, @end, @timestamp={0x44, 0x8, 0x53, 0x0, 0x2, [0x200]}, @cipso={0x86, 0xa, 0xffffffffffffffff, [{0x0, 0x4, "73a1"}]}]}}}}}) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x3, @loopback, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) 348.303567ms ago: executing program 2 (id=2403): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x123482, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000004c0)={r3, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x3, 0x11, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x100}, [@call={0x85, 0x0, 0x0, 0x18}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x381}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0xb6}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x896e00}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x107a655, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x43, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETSTEERINGEBPF(r6, 0x800454e0, &(0x7f0000000200)=r5) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r7, &(0x7f00000004c0)='G', 0x1, 0x40, 0x0, 0x0) sendto$packet(r7, &(0x7f0000000280)="05", 0x5dc, 0x4009, &(0x7f0000000140)={0x11, 0x8100, r8, 0x1, 0x3, 0x6, @remote}, 0x14) 183.599506ms ago: executing program 4 (id=2404): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB='/\x00'/12, @ANYRES32=r0, @ANYBLOB="7b31587f1ab0940c754a4094fac018f6f6024c85120b0796fa7b9aa5b0", @ANYRES64=0x0], 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000380)={@cgroup=r1, r1, 0x2f, 0x0, 0x4, @void, @value, @void, @void, r2}, 0x20) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x4040850) sendmsg$NFT_BATCH(r4, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x174}, 0x1, 0x0, 0x0, 0x80}, 0x80) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x1001}) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000200)={'syzkaller1\x00', {0x2, 0x0, @rand_addr=0x1010101}}) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000300)={'syzkaller1\x00', 0x1}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r7, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r8, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r8, 0x84, 0x16, &(0x7f00000000c0)={0x1, [0x3]}, 0x6) setsockopt$bt_BT_DEFER_SETUP(r7, 0x112, 0xf, 0x0, 0x0) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000005580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELOBJ={0xc0, 0x14, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_OBJ_TYPE={0x11}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_USERDATA={0x6f, 0x8, "dcf482a437981760b41b15d9aa6437d49beb8e2f278bdcd9b6427d8f5393d4593c2b3667927d230cfe9a968fa0e9230513c578a9ee444ddffa5ec156a33ecde9614c2b0f1cf73daede055c1f0833be15191b5664df9abdde1885c451297a204c10e034283c8996b6233fda"}]}, @NFT_MSG_NEWTABLE={0x130, 0x0, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0x11, 0x6, "caa827f5345c98c89c2610f761"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0xdc, 0x6, "f26c231d1754d4a72ae880a0032781e3bcb2c43ce686ee542f03e274b8f02991f78849a57acae29b44214ca81397ee05289b295f9ef36deecf525e6db3d029c8d282b856ed5cf322d26c9f80014b5eb076572e88c464fa5800d5030b70461fb4d1065f34d8c12ad68aa1a301ace9b50d82b09ff3971f44976e8dae0c18d6aa33fb40a6903df6bf5ec2ea164a624de520c7bf0e667323afc23539ef1f1c012db87b70e487c2d245402dccd94dcf7892405ae3d78264f68f65bef42707a48894ee4e6371e2ddd06ea8eef21df43617b6c723608e6744551491"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWFLOWTABLE={0x74, 0x16, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_FLOWTABLE_HOOK={0x40, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'pim6reg1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x28c}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) write$ppp(r9, &(0x7f0000000540)="c652ccc323c57edd185cc3c61b484d098922462dd4db271c9803ce6a7be5be2f2d6e528c7ba7277181a17ff61efa33d575081e8bf3619b01915200b59ca728a586e48c786f978b52ab8915ad83f522677a55a22176176941eceb768f6fd08d44b0391a4c55b6f98d89002a1750c4bb43c8a0a7f32f6e35c69044980f75058fd98646cc3a", 0x84) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x34, r11, 0x1, 0x2, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'vxcan1\x00'}}}}}, 0x34}}, 0x20042000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000400)={'sit0\x00', &(0x7f0000000450)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x0, 0x64, 0x0, 0x40, 0x89, 0x0, @rand_addr=0x1010101, @empty}}}}) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000500)={'sit0\x00', 0x1}) write$tun(r3, &(0x7f0000000600)=ANY=[@ANYBLOB="450000280000000040897448020202020101010100"/40], 0x28) 162.536414ms ago: executing program 1 (id=2405): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x1, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x8d, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x2c, 0x3, "9ac420002e2eafb9fdd672bad09dfb78c7699c74e891a0c700"/40}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xe, 0x1, 'IDLETIMER\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r2) sendmsg$NFC_CMD_SE_IO(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002abd7000fddbdf251b00000008001500000019000700190090dfdc0008000100f4"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x90) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000280)=@ccm_128={{0x303}, "ca401ac38978c6e7", "0cd80d61b06eea94198ff074edcac558", "2f127221", "a577334ad08d96d2"}, 0x28) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r4) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r6, 0x0, 0x20000000002) 0s ago: executing program 3 (id=2406): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(r0, 0xc040583f, &(0x7f0000000200)={{@_ha_fsid={[0x800, 0x2]}, {0x0, 0x0, 0x40, 0xc}}, {{[0xb, 0x1ff, 0x9, 0x4]}, 0x0, 0x1, 0x401, 0x0, &(0x7f0000000140)=[{{@_ha_fsid={[0x6]}, {0x3, 0x3, 0x7fff, 0xffff}}, 0x2134, 0x0, '+\x00'}, {{@align=0x7fffffff, {0x2, 0x2, 0xfffffffa, 0x4a}}, 0xfffffff7, 0x0, '\x00'}, {{@_ha_fsid={[0x6, 0xb2ee]}, {0x8000, 0x4, 0x1, 0x1}}, 0x1, 0x0, '\x00'}, {{@align=0x8000000000000000, {0x6, 0x5, 0x8, 0x5cb}}, 0xb0, 0x0, '*.**\x00'}]}}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="fc00000003010102000000000000000002000004dc0002800c00028005000100840000002c00018014000300fe80000000000000000000000000002f14000400000000000000000000000000000000011400018008000100ac1e010108000200ac1414aa0c00028005000100060000001400018008000100ffffffff08000200000000001400018008000100ac1414bb080002000a0101022c000180140003000000000000000000000000000000000114000400ff0100000000000000000000000000010c000280050001008800000006000340000400000c00028005000100060000000c00028005000100010000000c00198008000200", @ANYRES16=r1], 0xfc}, 0x1, 0x0, 0x0, 0x4050}, 0x40080c0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xc, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000911172000000000095"], &(0x7f0000000c40)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="1c020000", @ANYRES16, @ANYBLOB="01000000000000000000010000001400020077673100000000000000000000000000f40108807000008048000980280000f8060001000a00000014000200fe8000000000000000000000000000aa05000300000000001c000080060001000200000908000200e0000001050003000000000024000100000000000000000000000000000000000000000000000000000000000000000080010080200004000a004e2000000005200100000000000000000000000000000800000006000500b01f00000800030006"], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r2) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)={0x50, r3, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}]}, 0x50}}, 0x200000000000000) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={0x0, 0x6}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000240)={r5, 0x5}, 0x8) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="780000001000010425bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0317000000000000140003006c6f000000000000000004000000000008000400", @ANYRES32=0x0, @ANYBLOB='<\x00+'], 0x78}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) kernel console output (not intermixed with test programs): syz.3.825'. [ 188.304348][ T9287] netlink: 'syz.3.825': attribute type 1 has an invalid length. [ 188.304361][ T9287] netlink: 76 bytes leftover after parsing attributes in process `syz.3.825'. [ 188.306842][ T9287] netlink: 'syz.3.825': attribute type 1 has an invalid length. [ 188.467645][ T9286] tipc: Disabling bearer [ 190.230460][ T9352] xt_hashlimit: size too large, truncated to 1048576 [ 190.463289][ T9365] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 190.511075][ T9355] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.551931][ T9358] bond2: (slave veth0_to_bond): Releasing active interface [ 190.646543][ T9358] bond0: (slave veth0_to_bond): making interface the new active one [ 190.663975][ T9358] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 191.486638][ T9408] IPVS: set_ctl: invalid protocol: 58 172.30.0.5:20004 [ 191.742893][ T9416] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 191.743009][ T9416] syzkaller1: linktype set to 780 [ 192.310024][ T9444] syzkaller0: entered promiscuous mode [ 192.310052][ T9444] syzkaller0: entered allmulticast mode [ 194.463556][ T9461] __nla_validate_parse: 41 callbacks suppressed [ 194.463579][ T9461] netlink: 220 bytes leftover after parsing attributes in process `syz.2.859'. [ 194.474897][ T9460] macsec0: entered allmulticast mode [ 194.474919][ T9460] ip6gretap0: entered allmulticast mode [ 194.493633][ T9460] ip6gretap0: left allmulticast mode [ 194.528192][ T9467] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 194.684500][ T9483] validate_nla: 39 callbacks suppressed [ 194.684525][ T9483] netlink: 'syz.3.867': attribute type 29 has an invalid length. [ 194.723570][ T6336] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 194.723697][ T6336] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 194.723738][ T6336] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 194.741386][ T6337] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 194.766058][ T9485] netlink: 'syz.4.866': attribute type 2 has an invalid length. [ 194.766079][ T9485] netlink: 8 bytes leftover after parsing attributes in process `syz.4.866'. [ 194.810866][ T9489] netlink: 12 bytes leftover after parsing attributes in process `syz.1.868'. [ 194.856389][ T9485] ¿: entered promiscuous mode [ 194.960057][ T9496] netlink: 296 bytes leftover after parsing attributes in process `syz.3.871'. [ 195.058598][ T9500] netlink: 8 bytes leftover after parsing attributes in process `syz.4.872'. [ 195.218864][ T9502] netlink: 4 bytes leftover after parsing attributes in process `syz.2.870'. [ 195.219054][ T9502] unsupported nla_type 140 [ 196.018811][ T9532] netlink: 36 bytes leftover after parsing attributes in process `syz.1.878'. [ 196.037189][ T9534] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 196.147641][ T9542] Cannot find del_set index 2 as target [ 196.155943][ T9542] nbd2: detected capacity change from 0 to 127 [ 196.187936][ T9549] ip_tables: iptables: counters copy to user failed while replacing table [ 196.234009][ T9542] lo speed is unknown, defaulting to 1000 [ 196.239151][ T9547] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.267390][ T9547] bridge_slave_0 (unregistering): left allmulticast mode [ 196.267421][ T9547] bridge_slave_0 (unregistering): left promiscuous mode [ 196.267502][ T9547] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.441986][ T9542] lo speed is unknown, defaulting to 1000 [ 196.856636][ T9560] netlink: 'syz.3.887': attribute type 32 has an invalid length. [ 196.856660][ T9560] netlink: 8 bytes leftover after parsing attributes in process `syz.3.887'. [ 196.988140][ T9560] bond4: Setting coupled_control to off (0) [ 197.126109][ T9582] netlink: 8 bytes leftover after parsing attributes in process `syz.4.891'. [ 197.126183][ T9582] netlink: 8 bytes leftover after parsing attributes in process `syz.4.891'. [ 197.144822][ T5621] block nbd2: Receive control failed (result -104) [ 198.020927][ T9583] netlink: 'syz.0.892': attribute type 3 has an invalid length. [ 198.021296][ T9583] netlink: 'syz.0.892': attribute type 3 has an invalid length. [ 198.021520][ T9583] netlink: 'syz.0.892': attribute type 3 has an invalid length. [ 198.021719][ T9583] netlink: 'syz.0.892': attribute type 3 has an invalid length. [ 198.021923][ T9583] netlink: 'syz.0.892': attribute type 3 has an invalid length. [ 198.023337][ T9583] netlink: 'syz.0.892': attribute type 3 has an invalid length. [ 198.031644][ T9583] netlink: 'syz.0.892': attribute type 3 has an invalid length. [ 198.194404][ T9608] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 198.652260][ T9628] IPVS: set_ctl: invalid protocol: 60 100.1.1.2:20001 [ 198.850012][ T5276] veth0_macvtap: left promiscuous mode [ 199.497109][ T26] block nbd2: Connection timed out, retrying (0/1 alive) [ 199.497713][ T26] block nbd2: Connection timed out, retrying (0/1 alive) [ 199.497769][ T26] block nbd2: Connection timed out, retrying (0/1 alive) [ 199.497816][ T26] block nbd2: Connection timed out, retrying (0/1 alive) [ 199.498209][ T26] block nbd2: Dead connection, failed to find a fallback [ 199.498228][ T26] block nbd2: shutting down sockets [ 199.498295][ T26] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 199.498376][ T26] Buffer I/O error on dev nbd2, logical block 3, async page read [ 199.499349][ T26] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 199.499379][ T26] Buffer I/O error on dev nbd2, logical block 2, async page read [ 199.501900][ T26] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 199.501932][ T26] Buffer I/O error on dev nbd2, logical block 1, async page read [ 199.501958][ T26] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 199.501981][ T26] Buffer I/O error on dev nbd2, logical block 0, async page read [ 199.503312][ T26] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 199.503341][ T26] Buffer I/O error on dev nbd2, logical block 0, async page read [ 199.503452][ T26] Buffer I/O error on dev nbd2, logical block 1, async page read [ 199.503467][ T26] Buffer I/O error on dev nbd2, logical block 2, async page read [ 199.503480][ T26] Buffer I/O error on dev nbd2, logical block 3, async page read [ 199.504382][ T26] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 199.504408][ T26] Buffer I/O error on dev nbd2, logical block 0, async page read [ 199.504422][ T26] Buffer I/O error on dev nbd2, logical block 1, async page read [ 199.504543][ T26] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 199.504647][ T26] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 199.504749][ T26] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 199.504852][ T26] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 199.510664][ T5628] ldm_validate_partition_table(): Disk read failed. [ 199.512894][ T5628] Dev nbd2: unable to read RDB block 0 [ 199.515627][ T5628] nbd2: unable to read partition table [ 199.605270][ T5628] ldm_validate_partition_table(): Disk read failed. [ 199.607496][ T5628] Dev nbd2: unable to read RDB block 0 [ 199.608628][ T5628] nbd2: unable to read partition table [ 199.827719][ T9659] __nla_validate_parse: 43 callbacks suppressed [ 199.827744][ T9659] netlink: 112 bytes leftover after parsing attributes in process `syz.4.909'. [ 200.191680][ T5715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.288453][ T9666] v: left promiscuous mode [ 200.300674][ T9666] v: entered promiscuous mode [ 200.353835][ T9666] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 200.414467][ T9666] bond2: left promiscuous mode [ 200.417549][ T9666] bond2: entered allmulticast mode [ 200.418194][ T9666] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 200.563257][ T5752] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.956661][ T9700] validate_nla: 26 callbacks suppressed [ 200.956685][ T9700] netlink: 'syz.1.916': attribute type 10 has an invalid length. [ 200.959575][ T9702] netlink: 14 bytes leftover after parsing attributes in process `syz.1.916'. [ 201.156259][ T9715] netlink: 48 bytes leftover after parsing attributes in process `syz.3.918'. [ 201.171603][ T9714] netlink: 12 bytes leftover after parsing attributes in process `syz.3.918'. [ 201.209091][ T9704] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode [ 201.209121][ T9704] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode [ 201.247926][ T9702] netlink: 2724 bytes leftover after parsing attributes in process `syz.1.916'. [ 201.248124][ T9702] netlink: 28 bytes leftover after parsing attributes in process `syz.1.916'. [ 201.248144][ T9702] netlink: 28 bytes leftover after parsing attributes in process `syz.1.916'. [ 201.446926][ T9728] netlink: 16 bytes leftover after parsing attributes in process `syz.0.920'. [ 201.655035][ T9725] netlink: 8 bytes leftover after parsing attributes in process `syz.2.919'. [ 201.655073][ T9725] netlink: 12 bytes leftover after parsing attributes in process `syz.2.919'. [ 201.663760][ T5626] Bluetooth: hci3: command 0x0406 tx timeout [ 201.663859][ T5626] Bluetooth: hci1: command 0x0406 tx timeout [ 201.663884][ T5626] Bluetooth: hci2: command 0x0406 tx timeout [ 201.704224][ T9733] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 202.081558][ T9725] geneve3: entered promiscuous mode [ 202.081584][ T9725] geneve3: entered allmulticast mode [ 202.412973][ T9753] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 202.479053][ T9757] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 202.479080][ T9757] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 202.499175][ T9757] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 202.520576][ T9757] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 203.253918][ T9755] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 203.891249][ T9803] netlink: 'syz.4.938': attribute type 3 has an invalid length. [ 203.891274][ T9803] netlink: 'syz.4.938': attribute type 1 has an invalid length. [ 203.891290][ T9803] NCSI netlink: No device for ifindex 2147483648 [ 204.684588][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.418187][ T9865] __nla_validate_parse: 10 callbacks suppressed [ 205.418210][ T9865] netlink: 8 bytes leftover after parsing attributes in process `syz.1.949'. [ 205.475770][ T9868] netlink: 8 bytes leftover after parsing attributes in process `syz.1.949'. [ 205.476331][ T9868] netlink: 32 bytes leftover after parsing attributes in process `syz.1.949'. [ 206.318253][ T9884] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 206.319187][ T9884] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified. [ 206.319221][ T9884] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 206.355544][ T9884] netlink: 52 bytes leftover after parsing attributes in process `syz.0.952'. [ 206.355857][ T9885] netlink: 52 bytes leftover after parsing attributes in process `syz.0.952'. [ 206.569625][ T9891] netlink: 16 bytes leftover after parsing attributes in process `syz.3.954'. [ 206.932652][ T9905] netlink: 'syz.4.957': attribute type 30 has an invalid length. [ 206.932679][ T9905] netlink: 8 bytes leftover after parsing attributes in process `syz.4.957'. [ 206.932706][ T9905] bond0: option arp_missed_max: invalid value (0) [ 206.932725][ T9905] bond0: option arp_missed_max: allowed values 1 - 255 [ 206.949758][ T9908] netlink: 12 bytes leftover after parsing attributes in process `syz.1.959'. [ 206.988615][ T9913] netlink: 'syz.3.960': attribute type 10 has an invalid length. [ 206.989381][ T9913] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.023894][ T9912] netlink: 'syz.0.958': attribute type 49 has an invalid length. [ 207.365957][ T9928] netlink: 120 bytes leftover after parsing attributes in process `syz.1.962'. [ 207.366145][ T9928] netlink: 120 bytes leftover after parsing attributes in process `syz.1.962'. [ 207.527183][ T9932] tc_dump_action: action bad kind [ 208.357753][ T9944] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 209.192179][ T9996] nbd: must specify a size in bytes for the device [ 209.254734][ T9991] ovs-s!: entered promiscuous mode [ 209.629778][T10002] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 209.870098][T10018] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 210.255276][T10029] batman_adv: batadv0: Adding interface: veth0 [ 210.255296][T10029] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 210.255324][T10029] batman_adv: batadv0: Interface activated: veth0 [ 210.307947][T10029] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 210.307976][T10029] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 210.330050][T10029] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 210.340696][T10029] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 210.352917][T10029] batman_adv: batadv0: Interface deactivated: macvtap1 [ 210.352940][T10029] batman_adv: batadv0: Removing interface: macvtap1 [ 210.360418][T10029] batman_adv: batadv0: Interface deactivated: veth0 [ 210.360442][T10029] batman_adv: batadv0: Removing interface: veth0 [ 210.476768][T10044] __nla_validate_parse: 2 callbacks suppressed [ 210.476790][T10044] netlink: 8 bytes leftover after parsing attributes in process `syz.1.983'. [ 210.734045][T10053] netlink: 4 bytes leftover after parsing attributes in process `syz.3.985'. [ 211.116880][T10060] netlink: 'syz.2.986': attribute type 1 has an invalid length. [ 211.300980][T10060] bond3: entered promiscuous mode [ 211.301054][T10060] bond3: entered allmulticast mode [ 211.314498][T10060] 8021q: adding VLAN 0 to HW filter on device bond3 [ 212.430299][T10109] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1001'. [ 212.559090][T10109] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1001'. [ 212.559118][T10109] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 212.708157][T10123] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1003'. [ 213.269890][T10146] netlink: 'syz.4.1008': attribute type 2 has an invalid length. [ 213.328601][T10146] : entered promiscuous mode [ 213.729511][T10157] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1011'. [ 213.729535][T10157] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1011'. [ 213.770304][T10157] netlink: 'syz.1.1011': attribute type 4 has an invalid length. [ 213.770331][T10157] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1011'. [ 213.813604][T10157] xt_bpf: check failed: parse error [ 213.843892][T10157] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 213.880283][T10157] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 214.018016][T10171] netlink: 'syz.0.1015': attribute type 1 has an invalid length. [ 214.112348][T10149] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 214.613983][T10206] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1018'. [ 214.658805][T10203] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 214.658846][T10203] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.706929][T10209] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1020'. [ 214.805922][T10212] ip6gre2: entered promiscuous mode [ 214.805945][T10212] ip6gre2: entered allmulticast mode [ 215.018768][T10232] IPVS: set_ctl: invalid protocol: 94 224.0.0.1:20004 [ 216.485687][T10272] only policy match revision 0 supported [ 216.485703][T10272] unable to load match [ 217.679460][T10334] netlink: 'syz.2.1043': attribute type 1 has an invalid length. [ 217.679483][T10334] __nla_validate_parse: 6 callbacks suppressed [ 217.679495][T10334] netlink: 756 bytes leftover after parsing attributes in process `syz.2.1043'. [ 218.101977][T10341] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1045'. [ 218.503519][T10360] netlink: 'syz.3.1046': attribute type 2 has an invalid length. [ 218.503544][T10360] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1046'. [ 218.540729][T10360] ¿: entered promiscuous mode [ 218.571948][T10364] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1049'. [ 218.592420][ T5276] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 218.690456][T10364] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1049'. [ 219.200142][T10393] RDS: rds_bind could not find a transport for 2001::2, load rds_tcp or rds_rdma? [ 220.541306][T10443] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1064'. [ 220.667559][T10446] x_tables: duplicate underflow at hook 1 [ 220.828575][T10454] netlink: 160 bytes leftover after parsing attributes in process `syz.4.1068'. [ 220.856827][T10454] ip_tables: iptables: counters copy to user failed while replacing table [ 221.140961][ T31] audit: type=1800 audit(1789277166.335:2): pid=10460 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1070" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1167 res=0 errno=0 [ 221.594967][T10464] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1070'. [ 221.596701][T10464] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1070'. [ 221.648481][T10494] netlink: 'syz.3.1079': attribute type 1 has an invalid length. [ 221.782650][T10501] netlink: 666 bytes leftover after parsing attributes in process `syz.4.1081'. [ 221.822981][T10494] 8021q: adding VLAN 0 to HW filter on device bond6 [ 221.842171][T10503] tap0: tun_chr_ioctl cmd 1074025677 [ 221.842271][T10503] tap0: linktype set to 823 [ 221.932709][T10507] openvswitch: netlink: Missing valid actions attribute. [ 221.965224][ T6336] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.965249][ T6336] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.107326][T10519] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified. [ 222.107375][T10519] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 222.132429][T10519] netlink: 'syz.0.1084': attribute type 1 has an invalid length. [ 222.540867][ C1] vcan0: j1939_tp_rxtimer: 0xffff888055590000: rx timeout, send abort [ 222.943292][T10550] syzkaller1: entered promiscuous mode [ 222.943320][T10550] syzkaller1: entered allmulticast mode [ 223.041061][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802a237c00: rx timeout, send abort [ 223.041953][ C1] vcan0: j1939_tp_rxtimer: 0xffff888055590000: abort rx timeout. Force session deactivation [ 223.107211][T10550] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.109432][T10550] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.541115][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802a237c00: abort rx timeout. Force session deactivation [ 223.583923][T10557] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode [ 223.583998][T10557] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode [ 223.645114][ T6336] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.645167][ T6336] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.645203][ T6336] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.645238][ T6336] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.012791][T10594] __nla_validate_parse: 2 callbacks suppressed [ 224.012815][T10594] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1097'. [ 224.082904][T10596] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1095'. [ 224.127458][T10596] vlan3: entered promiscuous mode [ 224.127486][T10596] ip6gretap0: entered promiscuous mode [ 224.495532][T10614] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1102'. [ 224.700296][T10628] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1104'. [ 224.754258][T10632] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1103'. [ 224.754529][T10632] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1103'. [ 224.755027][T10632] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1103'. [ 224.755286][T10632] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1103'. [ 224.755545][T10632] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1103'. [ 224.760178][T10632] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1103'. [ 225.361332][T10622] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.645865][T10622] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.769718][T10622] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.047999][T10622] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.543013][T10693] nbd: must specify a size in bytes for the device [ 226.811463][ T6350] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.954160][ T6336] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.954242][ T6336] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.986215][ T6336] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.481902][T10732] netlink: 'syz.0.1130': attribute type 28 has an invalid length. [ 227.825250][T10746] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 227.880954][T10746] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 228.514057][T10777] set match dimension is over the limit! [ 228.902303][T10800] netlink: 'syz.2.1144': attribute type 11 has an invalid length. [ 229.162613][T10811] __nla_validate_parse: 12 callbacks suppressed [ 229.162636][T10811] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1148'. [ 229.306331][T10809] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1147'. [ 229.306363][T10809] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1147'. [ 229.569667][T10825] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1152'. [ 229.569690][T10825] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1152'. [ 229.569712][T10825] netlink: 'syz.4.1152': attribute type 12 has an invalid length. [ 229.695902][ T6350] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 229.697839][ T6350] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 229.697883][ T6350] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 229.697924][ T6350] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 229.923447][T10850] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1156'. [ 229.972851][T10833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.990416][T10833] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.117287][T10833] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 230.117317][T10833] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 230.133239][T10833] veth1_vlan: left promiscuous mode [ 230.144085][T10833] veth0_vlan: left promiscuous mode [ 230.146413][T10833] veth0_vlan: entered promiscuous mode [ 230.147962][T10833] veth1_vlan: entered promiscuous mode [ 230.167556][T10833] veth1_macvtap: left promiscuous mode [ 230.171608][T10833] veth1_macvtap: entered promiscuous mode [ 230.180782][T10833] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 230.184412][T10833] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 230.191833][T10833] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 230.200639][T10833] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 230.220266][T10833] 8021q: adding VLAN 0 to HW filter on device bond1 [ 230.232176][T10833] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 230.240461][ T6338] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.240571][ T6338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.243670][ T6338] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.243775][ T6338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.355155][ T6339] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.355207][ T6339] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.355241][ T6339] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.355286][ T6339] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.743229][T10873] syzkaller0: entered promiscuous mode [ 230.743282][T10873] syzkaller0: entered allmulticast mode [ 232.672307][T10841] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 233.057613][T10913] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1160'. [ 233.680707][T10901] netlink: 'syz.3.1162': attribute type 3 has an invalid length. [ 233.916448][ T31] audit: type=1800 audit(1789277179.115:3): pid=10941 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1166" name=3A202E31323334352E2E2E2E2028313829207238203D2030783363333130303030300A202020202020323A202E31323334352E2E382E20283835292063616C6C2070632B360A202020202020333A202E2E2E2E2E2E2E2E382E2028313829207230203D203078313130303030303066666666666666660A202020202020353A202E2E2E2E2E2E2E2E382E202836362920696620773820733E2030783020676F746F2070632B300A202020202020363A202E2E2E2E2E2E2E2E2E2E20283138292072 dev="tmpfs" ino=1214 res=0 errno=0 [ 234.357059][T10961] ovs-s: entered promiscuous mode [ 234.467080][T10960] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1171'. [ 234.489137][T10968] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1174'. [ 234.988560][T10981] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1176'. [ 234.990560][T10981] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1176'. [ 235.034006][T10985] netlink: 'syz.0.1178': attribute type 7 has an invalid length. [ 235.034029][T10985] netlink: 'syz.0.1178': attribute type 3 has an invalid length. [ 235.034041][T10985] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1178'. [ 235.034180][T10985] netlink: 'syz.0.1178': attribute type 7 has an invalid length. [ 235.034193][T10985] netlink: 'syz.0.1178': attribute type 3 has an invalid length. [ 235.034204][T10985] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1178'. [ 235.034383][T10985] netlink: 'syz.0.1178': attribute type 7 has an invalid length. [ 235.034396][T10985] netlink: 'syz.0.1178': attribute type 3 has an invalid length. [ 235.034407][T10985] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1178'. [ 235.034596][T10985] netlink: 'syz.0.1178': attribute type 7 has an invalid length. [ 235.034609][T10985] netlink: 'syz.0.1178': attribute type 3 has an invalid length. [ 235.034621][T10985] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1178'. [ 235.034809][T10985] netlink: 'syz.0.1178': attribute type 7 has an invalid length. [ 235.034824][T10985] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1178'. [ 235.035028][T10985] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1178'. [ 235.246168][T10989] bond_slave_0: entered promiscuous mode [ 235.246196][T10989] bond_slave_0: entered allmulticast mode [ 235.640536][T11005] xt_CT: No such helper "netbios-ns" [ 235.673660][T11016] ip6t_hbh: Not strict - not implemented [ 235.760240][T11013] bond5: entered promiscuous mode [ 235.760563][T11013] 8021q: adding VLAN 0 to HW filter on device bond5 [ 235.786173][T11017] macvtap1: entered allmulticast mode [ 235.829473][T11013] bond5: (slave bridge6): making interface the new active one [ 235.829500][T11013] bridge6: entered promiscuous mode [ 235.840266][T11013] bond5: (slave bridge6): Enslaving as an active interface with an up link [ 235.993551][T11027] wg2 speed is unknown, defaulting to 1000 [ 235.993622][T11027] wg2 speed is unknown, defaulting to 1000 [ 236.009961][T11027] wg2 speed is unknown, defaulting to 1000 [ 236.052412][T11027] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 236.052463][T11027] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 236.052504][T11027] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 236.153704][T11027] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 236.209002][T11027] wg2 speed is unknown, defaulting to 1000 [ 236.224056][T11027] wg2 speed is unknown, defaulting to 1000 [ 236.228405][T11027] wg2 speed is unknown, defaulting to 1000 [ 236.230880][T11027] wg2 speed is unknown, defaulting to 1000 [ 236.255050][T11027] wg2 speed is unknown, defaulting to 1000 [ 236.629790][ T5617] Bluetooth: hci1: unexpected event 0x04 length: 0 < 10 [ 236.629931][T11054] xt_policy: output policy not valid in PREROUTING and INPUT [ 237.044976][T11065] syzkaller0: entered promiscuous mode [ 237.045001][T11065] syzkaller0: entered allmulticast mode [ 237.066567][T11067] Cannot find set identified by id 65534 to match [ 237.077230][T11065] xt_hashlimit: size too large, truncated to 1048576 [ 237.435614][T11073] bond7: entered promiscuous mode [ 237.447512][T11073] 8021q: adding VLAN 0 to HW filter on device bond7 [ 237.589983][T11084] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 237.605754][T11077] macvtap1: entered allmulticast mode [ 237.625633][T11083] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 237.629658][T11073] bond7: (slave sit1): refused to change device type [ 237.715150][T11084] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 238.790189][T11157] validate_nla: 94 callbacks suppressed [ 238.790211][T11157] netlink: 'syz.4.1214': attribute type 1 has an invalid length. [ 238.857553][T11153] bond8 (unregistering): Released all slaves [ 238.983020][T11160] erspan1: entered allmulticast mode [ 239.066220][T11157] bond4: entered promiscuous mode [ 239.066292][T11157] bond4: entered allmulticast mode [ 239.069722][T11157] 8021q: adding VLAN 0 to HW filter on device bond4 [ 239.110692][T11162] syz.4.1214 (11162) used obsolete PPPIOCDETACH ioctl [ 239.114648][T11173] 1·: renamed from c0· (while UP) [ 239.128341][T11173] A link change request failed with some changes committed already. Interface c1· may have been left with an inconsistent configuration, please check. [ 239.699873][T11198] __nla_validate_parse: 59 callbacks suppressed [ 239.699893][T11198] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1219'. [ 239.700134][T11194] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1219'. [ 240.247147][T11224] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1226'. [ 240.264737][T11224] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1226'. [ 240.264798][T11224] netlink: 'syz.3.1226': attribute type 1 has an invalid length. [ 240.462221][T11228] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1228'. [ 240.462239][T11228] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1228'. [ 240.987574][T11244] x_tables: duplicate underflow at hook 1 [ 241.643941][T11145] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 241.667101][T11207] netlink: 'syz.4.1223': attribute type 11 has an invalid length. [ 241.873191][T11254] netlink: 'syz.1.1235': attribute type 10 has an invalid length. [ 241.873215][T11254] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1235'. [ 242.055243][T11269] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1237'. [ 242.215121][T11276] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1238'. [ 242.378713][T11278] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1239'. [ 242.486958][T11299] ipt_ah: unknown flags FF [ 242.731303][T11305] syzkaller0: entered promiscuous mode [ 242.731331][T11305] syzkaller0: entered allmulticast mode [ 243.135302][T11331] netlink: 'syz.3.1251': attribute type 2 has an invalid length. [ 243.198520][T11331] IPVS: Scheduler module ip_vs_sip not found [ 243.504026][T11342] syzkaller0: entered promiscuous mode [ 243.504050][T11342] syzkaller0: entered allmulticast mode [ 243.509578][T11342] tipc: Enabled bearer , priority 0 [ 243.610076][T11350] tipc: Enabling of bearer rejected, already enabled [ 243.672517][T11341] tipc: Resetting bearer [ 243.718548][T11341] tipc: Disabling bearer [ 244.450363][T11402] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode [ 244.450442][T11402] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode [ 244.474057][T11402] TC_ACT_REPEAT abuse ? [ 244.719587][T11421] __nla_validate_parse: 6 callbacks suppressed [ 244.719611][T11421] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1273'. [ 244.879218][T11424] xt_hashlimit: size too large, truncated to 1048576 [ 244.879408][T11424] xt_hashlimit: invalid interval [ 244.960483][T11428] ip_tables: iptables: counters copy to user failed while replacing table [ 245.384839][T11448] bond0: (slave ip6gretap0): Enslaving as an active interface with an up link [ 245.558689][T11447] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 245.617705][T11447] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 245.647648][T11447] bond0 (unregistering): (slave ip6gretap0): Releasing backup interface [ 245.665417][T11447] bond0 (unregistering): Released all slaves [ 246.266679][T11485] 8021q: adding VLAN 0 to HW filter on device bond3 [ 246.313615][T11485] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1287'. [ 246.313639][T11485] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1287'. [ 246.348110][T11485] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.366711][T11485] bond3: (slave bond0): making interface the new active one [ 246.382928][T11485] bond3: (slave bond0): Enslaving as an active interface with an up link [ 246.447785][T11489] bond3 (unregistering): (slave bond0): Releasing active interface [ 246.474138][T11489] bond3 (unregistering): Released all slaves [ 246.768946][T11499] bond0 (unregistering): Released all slaves [ 247.163433][T11523] bridge0: port 1(batadv1) entered blocking state [ 247.164144][T11523] bridge0: port 1(batadv1) entered disabled state [ 247.164319][T11523] batadv1: entered allmulticast mode [ 247.196944][T11523] batadv1: entered promiscuous mode [ 247.210411][T11523] ip_tables: iptables: counters copy to user failed while replacing table [ 247.384165][T11536] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.386072][T11536] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.390321][T11536] bridge0: entered allmulticast mode [ 247.426841][T11536] bridge_slave_1: left allmulticast mode [ 247.426869][T11536] bridge_slave_1: left promiscuous mode [ 247.427085][T11536] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.430484][T11542] netlink: 'syz.4.1303': attribute type 1 has an invalid length. [ 247.469791][T11536] bridge_slave_0: left allmulticast mode [ 247.469822][T11536] bridge_slave_0: left promiscuous mode [ 247.470042][T11536] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.556232][T11546] bond3: (slave dummy0): Releasing active interface [ 247.586889][T11546] bridge_slave_1: left promiscuous mode [ 247.587237][T11546] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.596714][T11550] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1305'. [ 247.643658][T11546] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 247.647273][T10560] wg2 speed is unknown, defaulting to 1000 [ 247.651680][ T6349] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 247.651699][ T6349] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 247.764407][T11551] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1304'. [ 248.339751][ T31] audit: type=1800 audit(1789277193.535:4): pid=11559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1307" name="memory.events" dev="tmpfs" ino=1349 res=0 errno=0 [ 248.441410][T11584] netlink: 'syz.1.1313': attribute type 11 has an invalid length. [ 248.713757][T11583] openvswitch: netlink: Message has 8 unknown bytes. [ 248.713795][T11583] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 249.421704][T11622] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1320'. [ 249.637928][T11622] netlink: 288 bytes leftover after parsing attributes in process `syz.2.1320'. [ 250.223479][T11657] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1326'. [ 250.223511][T11657] bridge: RTM_NEWNEIGH with unconfigured vlan 1 on bridge0 [ 250.483782][T11665] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1327'. [ 250.834878][T11688] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1332'. [ 250.896681][T11688] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1332'. [ 250.897288][T11690] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1332'. [ 251.273251][T11712] netlink: 'syz.1.1337': attribute type 5 has an invalid length. [ 251.273452][T11713] netlink: 'syz.1.1337': attribute type 5 has an invalid length. [ 251.283879][T11713] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1337'. [ 251.284131][T11714] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1337'. [ 251.756881][T11730] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1340'. [ 252.063339][T11743] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode [ 252.064249][T11743] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode [ 252.637222][T11755] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1350'. [ 252.793919][T11755] vlan2: entered promiscuous mode [ 252.794676][T11755] ip6gretap0: entered promiscuous mode [ 252.830633][ T53] block nbd3: Receive control failed (result -32) [ 252.832944][ T5617] block nbd3: Receive control failed (result -32) [ 253.015754][T11782] netlink: 136 bytes leftover after parsing attributes in process `syz.1.1356'. [ 253.015782][T11782] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 253.300958][T11795] netlink: 'syz.0.1360': attribute type 2 has an invalid length. [ 253.300982][T11795] netlink: 'syz.0.1360': attribute type 5 has an invalid length. [ 253.314092][T11789] team0: No ports can be present during mode change [ 253.315333][T11790] team0: No ports can be present during mode change [ 253.452376][T11800] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 253.456832][T11800] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 253.456888][T11800] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 253.665717][T11800] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 253.979028][T11808] bridge0: port 4(veth0) entered blocking state [ 253.979200][T11808] bridge0: port 4(veth0) entered disabled state [ 253.979384][T11808] veth0: entered allmulticast mode [ 254.010823][T11808] veth0: entered promiscuous mode [ 254.018885][T11808] bridge0: port 4(veth0) entered blocking state [ 254.019023][T11808] bridge0: port 4(veth0) entered forwarding state [ 254.558471][T11825] netlink: 'syz.2.1367': attribute type 1 has an invalid length. [ 254.759833][T11833] IPv6: Can't replace route, no match found [ 254.760079][T11833] IPv6: Can't replace route, no match found [ 254.810543][T11825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 254.921883][T11827] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 255.169977][T11837] syz_tun: entered allmulticast mode [ 255.404780][T11844] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 255.410886][T11844] bond3: (slave lo): Enslaving as an active interface with an up link [ 255.435974][T11851] Bluetooth: hci0: invalid length 0, exp 2 for type 9 [ 255.525697][T11844] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 255.990322][T11875] __nla_validate_parse: 3 callbacks suppressed [ 255.990345][T11875] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1377'. [ 256.007332][T11875] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1377'. [ 256.204473][T11881] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1380'. [ 256.228334][T11881] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1380'. [ 256.353450][T11890] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1383'. [ 256.537198][T11900] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1387'. [ 256.566595][T11896] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1385'. [ 256.691585][T11910] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 256.903353][T11918] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 256.910732][T11918] syz.2.1391: vmalloc error: size 34359742464, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 256.910806][T11918] CPU: 0 UID: 0 PID: 11918 Comm: syz.2.1391 Not tainted syzkaller #0 PREEMPT(full) [ 256.910829][T11918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 256.910841][T11918] Call Trace: [ 256.910849][T11918] [ 256.910858][T11918] dump_stack_lvl+0xe8/0x150 [ 256.910895][T11918] warn_alloc+0x24d/0x270 [ 256.910918][T11918] ? kasan_save_track+0x4f/0x80 [ 256.910938][T11918] ? kasan_save_track+0x3e/0x80 [ 256.910963][T11918] ? __pfx_warn_alloc+0x10/0x10 [ 256.910984][T11918] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 256.911008][T11918] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.911052][T11918] __vmalloc_node_range_noprof+0x127/0x1540 [ 256.911108][T11918] ? rcu_is_watching+0x16/0xb0 [ 256.911137][T11918] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 256.911167][T11918] ? __kmalloc_cache_noprof+0x321/0x600 [ 256.911188][T11918] ? __kmalloc_cache_noprof+0x14d/0x600 [ 256.911207][T11918] ? xskq_create+0x56/0x220 [ 256.911232][T11918] xskq_create+0x148/0x220 [ 256.911251][T11918] ? xsk_init_queue+0x8a/0xe0 [ 256.911285][T11918] xsk_init_queue+0x8a/0xe0 [ 256.911317][T11918] xsk_setsockopt+0x5e0/0x960 [ 256.911349][T11918] ? __pfx_xsk_setsockopt+0x10/0x10 [ 256.911379][T11918] ? __pfx_aa_sk_perm+0x10/0x10 [ 256.911407][T11918] ? aa_sock_opt_perm+0x142/0x1e0 [ 256.911436][T11918] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 256.911461][T11918] ? __pfx_xsk_setsockopt+0x10/0x10 [ 256.911491][T11918] do_sock_setsockopt+0x17c/0x1b0 [ 256.911533][T11918] __x64_sys_setsockopt+0x13d/0x1b0 [ 256.911564][T11918] do_syscall_64+0x166/0x520 [ 256.911585][T11918] ? trace_irq_disable+0x3b/0x140 [ 256.911605][T11918] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.911625][T11918] ? clear_bhb_loop+0x70/0xc0 [ 256.911650][T11918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.911671][T11918] RIP: 0033:0x7fcc7eb9e159 [ 256.911691][T11918] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 256.911709][T11918] RSP: 002b:00007fcc7fa18028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 256.911732][T11918] RAX: ffffffffffffffda RBX: 00007fcc7ee25fa0 RCX: 00007fcc7eb9e159 [ 256.911747][T11918] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000003 [ 256.911760][T11918] RBP: 00007fcc7ec3503b R08: 0000000000000004 R09: 0000000000000000 [ 256.911773][T11918] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 256.911786][T11918] R13: 00007fcc7ee26038 R14: 00007fcc7ee25fa0 R15: 00007fffcca97408 [ 256.911818][T11918] [ 256.938347][T11918] Mem-Info: [ 256.938365][T11918] active_anon:6813 inactive_anon:0 isolated_anon:0 [ 256.938365][T11918] active_file:2 inactive_file:43106 isolated_file:0 [ 256.938365][T11918] unevictable:0 dirty:239 writeback:0 [ 256.938365][T11918] slab_reclaimable:11299 slab_unreclaimable:102108 [ 256.938365][T11918] mapped:30002 shmem:1503 pagetables:1703 [ 256.938365][T11918] sec_pagetables:0 bounce:0 [ 256.938365][T11918] kernel_misc_reclaimable:0 [ 256.938365][T11918] free:1273777 free_pcp:22876 free_cma:0 [ 256.938421][T11918] Node 0 active_anon:27252kB inactive_anon:0kB active_file:8kB inactive_file:172224kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:120008kB dirty:956kB writeback:0kB shmem:6012kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14208kB pagetables:6668kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 256.938475][T11918] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 256.938523][T11918] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 256.938587][T11918] lowmem_reserve[]: 0 2486 2486 2486 2486 [ 256.938627][T11918] Node 0 DMA32 free:1133916kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:27252kB inactive_anon:0kB active_file:8kB inactive_file:172224kB unevictable:0kB writepending:956kB zspages:0kB present:3129332kB managed:2546620kB mlocked:0kB bounce:0kB free_pcp:91536kB local_pcp:76336kB free_cma:0kB [ 256.938690][T11918] lowmem_reserve[]: 0 0 0 0 0 [ 256.938727][T11918] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 256.953419][T11918] lowmem_reserve[]: 0 0 0 0 0 [ 256.953463][T11918] Node 1 Normal free:3945832kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 256.953520][T11918] lowmem_reserve[]: 0 0 0 0 0 [ 256.953554][T11918] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 256.953669][T11918] Node 0 DMA32: 547*4kB (UME) 1006*8kB (UM) 932*16kB (UM) 943*32kB (UM) 480*64kB (UME) 856*128kB (UM) 603*256kB (UME) 379*512kB (UM) 218*1024kB (UM) 11*2048kB (UME) 84*4096kB (UM) = 1133852kB [ 256.953855][T11918] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 256.953950][T11918] Node 1 Normal: 2*4kB (M) 2*8kB (UM) 7*16kB (UM) 5*32kB (UM) 9*64kB (UM) 2*128kB (UM) 5*256kB (UM) 4*512kB (UM) 1*1024kB (M) 2*2048kB (U) 961*4096kB (M) = 3945832kB [ 256.954111][T11918] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 256.954127][T11918] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 256.954142][T11918] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 256.954157][T11918] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 256.954172][T11918] 44632 total pagecache pages [ 256.954180][T11918] 0 pages in swap cache [ 256.954187][T11918] Free swap = 124996kB [ 256.954194][T11918] Total swap = 124996kB [ 256.954202][T11918] 2097051 pages RAM [ 256.954209][T11918] 0 pages HighMem/MovableOnly [ 256.954215][T11918] 428780 pages reserved [ 256.954222][T11918] 0 pages cma reserved [ 257.108924][T11920] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 257.174465][T11927] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1392'. [ 257.176164][T11927] 8021q: VLANs not supported on vcan0 [ 257.971110][ T53] Bluetooth: hci4: command 0x0405 tx timeout [ 258.048820][T11946] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 258.105560][T11961] syzkaller0: entered promiscuous mode [ 258.105587][T11961] syzkaller0: entered allmulticast mode [ 258.236068][T11966] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1401'. [ 258.528260][T11986] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1405'. [ 258.760456][T11997] Bluetooth: hci0: unsupported parameter 5135 [ 258.760491][T11997] Bluetooth: hci0: unsupported parameter 8192 [ 258.760505][T11997] Bluetooth: hci0: unsupported parameter 5135 [ 258.760518][T11997] Bluetooth: hci0: unsupported parameter 8192 [ 258.811990][ T3361] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.832386][ T3361] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.832495][ T3361] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.832531][ T3361] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.160767][T12012] netlink: zone id is out of range [ 259.160786][T12012] netlink: zone id is out of range [ 259.160794][T12012] netlink: zone id is out of range [ 259.160803][T12012] netlink: zone id is out of range [ 259.160812][T12012] netlink: zone id is out of range [ 259.160821][T12012] netlink: zone id is out of range [ 259.160833][T12012] netlink: zone id is out of range [ 259.160843][T12012] netlink: zone id is out of range [ 259.160851][T12012] netlink: zone id is out of range [ 259.160859][T12012] netlink: zone id is out of range [ 259.272719][T12008] bridge0: port 3(syz_tun) entered disabled state [ 259.277380][T12008] bridge0: port 4(veth0) entered disabled state [ 259.277624][T12008] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.278455][T12008] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.718216][T12008] bond2: left allmulticast mode [ 259.718300][T12008] macvtap2: left allmulticast mode [ 259.746300][T12008] ip6erspan0: left allmulticast mode [ 259.768082][T12008] geneve3: left promiscuous mode [ 259.768107][T12008] geneve3: left allmulticast mode [ 259.770869][T12008] bond3: left promiscuous mode [ 259.770891][T12008] bond3: left allmulticast mode [ 259.820806][T12008] vlan2: left promiscuous mode [ 259.820833][T12008] ip6gretap0: left promiscuous mode [ 259.849111][ T124] lo speed is unknown, defaulting to 1000 [ 259.849141][ T124] syz0: Port: 1 Link DOWN [ 260.020315][T10560] s`z1: Port: 1 Link DOWN [ 260.055083][ T6349] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 260.055122][ T6349] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.056158][ T6349] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 260.056190][ T6349] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.056226][ T6349] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 260.056252][ T6349] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.022872][T12082] __nla_validate_parse: 2 callbacks suppressed [ 261.022893][T12082] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1429'. [ 261.062946][T12085] netlink: 'syz.0.1429': attribute type 2 has an invalid length. [ 261.117601][T12079] syzkaller0: entered promiscuous mode [ 261.117626][T12079] syzkaller0: entered allmulticast mode [ 261.169048][T12094] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1430'. [ 261.170279][T12092] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1430'. [ 261.314122][T12094] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1430'. [ 261.361957][T12092] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1430'. [ 261.437087][T12096] tap0: tun_chr_ioctl cmd 1074025677 [ 261.437198][T12096] tap0: linktype set to 823 [ 261.738277][T12114] netlink: 6436 bytes leftover after parsing attributes in process `syz.2.1436'. [ 261.792865][T12116] netlink: 'syz.4.1437': attribute type 8 has an invalid length. [ 261.792891][T12116] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1437'. [ 263.764090][T12116] veth1_to_team: entered promiscuous mode [ 263.764966][T12116] gretap0: entered promiscuous mode [ 263.765862][T12116] veth1_to_team: left promiscuous mode [ 263.766908][T12116] gretap0: left promiscuous mode [ 264.165971][T12149] net_ratelimit: 499 callbacks suppressed [ 264.165996][T12149] openvswitch: netlink: IP tunnel dst address not specified [ 264.170051][T12149] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1444'. [ 264.232507][T12152] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1445'. [ 264.398826][T12161] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1448'. [ 264.413735][T12158] netlink: 'syz.1.1446': attribute type 1 has an invalid length. [ 264.507415][T12168] netlink: 'syz.3.1447': attribute type 1 has an invalid length. [ 264.656152][T12169] bond9: option arp_validate: invalid value (1048579) [ 264.658338][T12169] bond9 (unregistering): Released all slaves [ 264.690952][T12172] netlink: 'syz.0.1450': attribute type 4 has an invalid length. [ 264.691061][T12155] bond8: option arp_validate: invalid value (1048579) [ 265.514824][ T5715] wg2 speed is unknown, defaulting to 1000 [ 265.514853][ T5715] syz2: Port: 1 Link DOWN [ 265.538871][T12205] veth1_to_team: entered promiscuous mode [ 265.547405][T12205] veth1_to_team: left promiscuous mode [ 265.631465][ T6353] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.631561][ T6353] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.631597][ T6353] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.631631][ T6353] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.108264][T12227] __nla_validate_parse: 2 callbacks suppressed [ 266.108289][T12227] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1462'. [ 266.108311][T12227] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1462'. [ 266.184538][T12227] netlink: 'syz.2.1462': attribute type 1 has an invalid length. [ 266.600129][T12245] netlink: 'syz.0.1464': attribute type 2 has an invalid length. [ 266.968371][T12261] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1468'. [ 267.020416][T12261] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1468'. [ 267.302065][T12270] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1472'. [ 267.546011][T12282] netlink: 5044 bytes leftover after parsing attributes in process `syz.2.1473'. [ 267.640083][ T31] audit: type=1107 audit(1789277212.835:5): pid=12286 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='_$ÂuD¥˜å¥„~ñ5h½Àqy9Ks=þÿRÂOhã4áÞOÈ Ò=ñ-êhTÓ@BbËǶêÙjO?Ü’É¥ç!s´Ù ´íÙ,t`Ë' [ 267.675933][T12290] netlink: 'syz.0.1475': attribute type 4 has an invalid length. [ 267.679447][T12291] netlink: 'syz.0.1475': attribute type 4 has an invalid length. [ 267.679825][T12287] xt_limit: Overflow, try lower: 268435456/134217728 [ 268.264913][T12321] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1484'. [ 268.424139][T12325] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1486'. [ 268.424158][T12325] openvswitch: netlink: Flow actions attr not present in new flow. [ 268.853037][T12347] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1490'. [ 268.894617][T12353] netlink: 'syz.4.1492': attribute type 2 has an invalid length. [ 269.045441][T12359] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1493'. [ 269.872193][T12402] netlink: 'syz.1.1506': attribute type 2 has an invalid length. [ 269.895897][T12402] : entered promiscuous mode [ 269.899325][T12395] xt_ecn: cannot match TCP bits for non-tcp packets [ 270.247078][T12419] ip6gretap1: entered allmulticast mode [ 270.251856][T12419] batman_adv: batadv0: Adding interface: ip6gretap1 [ 270.251873][T12419] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 270.251905][T12419] batman_adv: batadv0: Interface activated: ip6gretap1 [ 270.336952][T12423] netlink: 'syz.1.1512': attribute type 1 has an invalid length. [ 270.409631][T12430] Cannot find del_set index 4 as target [ 270.476028][T12423] 8021q: adding VLAN 0 to HW filter on device bond7 [ 270.516730][T12424] macvlan0: entered promiscuous mode [ 270.516755][T12424] macvlan0: entered allmulticast mode [ 270.518582][T12424] bond7: entered allmulticast mode [ 270.518618][T12424] bond7: entered promiscuous mode [ 270.519208][T12424] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 270.520511][T12424] team0: Port device macvlan0 added [ 270.707888][T12442] veth1_to_bond: entered allmulticast mode [ 270.751747][T12441] veth1_to_bond: left allmulticast mode [ 270.923490][T12450] netlink: 'syz.4.1521': attribute type 9 has an invalid length. [ 271.657221][T12490] __nla_validate_parse: 13 callbacks suppressed [ 271.657243][T12490] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1531'. [ 271.657261][T12490] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1531'. [ 271.989247][T12504] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1533'. [ 271.989280][T12504] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1533'. [ 272.028317][T12504] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1533'. [ 272.028345][T12504] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1533'. [ 272.028692][T12504] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1533'. [ 272.028713][T12504] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1533'. [ 272.184327][T12513] Unsupported ieee802154 address type: 0 [ 272.229111][T12519] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1537'. [ 272.530934][T12516] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1536'. [ 272.813255][T12538] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 273.029181][T12553] netlink: 'syz.4.1543': attribute type 1 has an invalid length. [ 273.413575][T12564] x_tables: duplicate entry at hook 4 [ 273.415010][T12564] netlink: 'syz.0.1545': attribute type 13 has an invalid length. [ 273.415033][T12564] netlink: 'syz.0.1545': attribute type 12 has an invalid length. [ 273.806620][T12571] dummy0: entered promiscuous mode [ 273.871326][T12570] dummy0: left promiscuous mode [ 274.140130][T12586] veth0: entered promiscuous mode [ 274.198895][T12586] netlink: 'syz.0.1551': attribute type 1 has an invalid length. [ 274.281269][ T53] Bluetooth: hci4: command 0x0405 tx timeout [ 274.463920][T12584] veth0: left promiscuous mode [ 274.750495][T12600] bond5: option ad_select: invalid value (34) [ 274.762649][T12600] bond5 (unregistering): Released all slaves [ 275.294652][T12638] netlink: 'syz.0.1564': attribute type 62 has an invalid length. [ 275.326108][T12638] tipc: Invalid UDP bearer configuration [ 275.326166][T12638] tipc: Enabling of bearer rejected, failed to enable media [ 276.530217][T12678] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 276.586276][T12714] netlink: 'syz.3.1576': attribute type 1 has an invalid length. [ 276.686095][T12678] veth1_vlan: left allmulticast mode [ 276.987135][T12714] 8021q: adding VLAN 0 to HW filter on device bond9 [ 276.995790][ T6348] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 276.995825][ T6348] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.052527][T12716] bond9: (slave dummy0): making interface the new active one [ 277.054773][T12716] bond9: (slave dummy0): Enslaving as an active interface with an up link [ 277.058308][T12719] : renamed from dummy0 (while UP) [ 277.127885][T12726] netlink: 'syz.0.1579': attribute type 10 has an invalid length. [ 277.131867][ T1113] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 277.131915][ T1113] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.186141][T12726] team0: Port device dummy0 added [ 277.203850][ T6349] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 277.203898][ T6349] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.291331][ T6349] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 277.291371][ T6349] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.450731][T12744] __nla_validate_parse: 19 callbacks suppressed [ 277.450754][T12744] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1584'. [ 277.450781][T12744] bond0: ARP target 0.0.0.2 is already present [ 277.450802][T12744] bond0: option arp_ip_target: invalid value (33554432) [ 277.620903][T12749] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1583'. [ 277.620934][T12749] nbd: couldn't find a device at index 0 [ 277.626843][T12749] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1583'. [ 278.489623][T12775] Cannot find del_set index 2 as target [ 278.539969][T12778] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1593'. [ 278.550311][T12780] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1594'. [ 278.600801][T12775] lo speed is unknown, defaulting to 1000 [ 278.636753][T12775] lo speed is unknown, defaulting to 1000 [ 278.645127][T12775] wg2 speed is unknown, defaulting to 1000 [ 278.686399][T12784] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1595'. [ 278.686427][T12784] netlink: 18 bytes leftover after parsing attributes in process `syz.1.1595'. [ 278.686479][T12784] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1595'. [ 279.666921][T12831] netlink: 67 bytes leftover after parsing attributes in process `syz.2.1605'. [ 279.668160][T12831] syzkaller0: entered promiscuous mode [ 279.668176][T12831] syzkaller0: entered allmulticast mode [ 282.013366][T12799] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 282.116008][T12837] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1609'. [ 282.320204][T12837] veth3: entered allmulticast mode [ 282.320889][T12839] tipc: Started in network mode [ 282.320919][T12839] tipc: Node identity 785634120000000021436587, cluster identity 4711 [ 282.518895][T12862] nbd: couldn't find a device at index 0 [ 282.543543][T12853] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 282.562407][T12845] __nla_validate_parse: 1 callbacks suppressed [ 282.562429][T12845] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1611'. [ 282.570659][T12845] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1611'. [ 282.574886][T12848] netlink: 'syz.1.1611': attribute type 32 has an invalid length. [ 282.574907][T12848] netlink: 500 bytes leftover after parsing attributes in process `syz.1.1611'. [ 283.052857][T12886] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1619'. [ 283.058590][T12886] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1619'. [ 283.058623][T12886] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1619'. [ 283.070256][T12886] macvlan2: entered allmulticast mode [ 283.070280][T12886] erspan0: entered allmulticast mode [ 283.103124][T12888] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 283.222697][T12894] netlink: 160 bytes leftover after parsing attributes in process `syz.1.1621'. [ 283.759310][T12915] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1625'. [ 283.842861][T12919] tap0: tun_chr_ioctl cmd 1074025677 [ 283.842975][T12919] tap0: linktype set to 823 [ 283.846893][T12925] tap0: tun_chr_ioctl cmd 1074025678 [ 283.846918][T12925] tap0: group set to 0 [ 283.964844][T12936] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1624'. [ 284.289489][T12953] netlink: 'syz.3.1632': attribute type 39 has an invalid length. [ 284.419290][T12958] Unknown options in mask 6 [ 284.420365][T12958] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1633'. [ 284.435642][T12958] netlink: 'syz.4.1633': attribute type 1 has an invalid length. [ 284.618312][T12962] 8021q: adding VLAN 0 to HW filter on device bond0 [ 284.756759][T12973] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 285.172878][T12988] syzkaller1: entered promiscuous mode [ 285.172904][T12988] syzkaller1: entered allmulticast mode [ 285.419802][T13003] netlink: 'syz.2.1643': attribute type 3 has an invalid length. [ 285.710633][T13024] syzkaller0: entered promiscuous mode [ 285.710661][T13024] syzkaller0: entered allmulticast mode [ 285.831506][T13018] tipc: Started in network mode [ 285.831541][T13018] tipc: Node identity a645513de5a5, cluster identity 4711 [ 285.835806][T13018] tipc: Enabled bearer , priority 0 [ 285.873324][T13018] tipc: Resetting bearer [ 286.010738][T13024] tipc: Resetting bearer [ 286.090077][T13040] ip_tables: iptables: counters copy to user failed while replacing table [ 286.161468][T13046] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 286.225881][ T1113] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x6c [ 286.279244][T13052] netlink: 'syz.3.1652': attribute type 1 has an invalid length. [ 286.680690][T13024] tipc: Disabling bearer [ 286.825758][T13056] netlink: 'syz.0.1657': attribute type 7 has an invalid length. [ 286.825781][T13056] netlink: 'syz.0.1657': attribute type 8 has an invalid length. [ 286.851266][T13056] team0: entered promiscuous mode [ 286.851290][T13056] team_slave_0: entered promiscuous mode [ 286.851529][T13056] team_slave_1: entered promiscuous mode [ 286.851763][T13056] dummy0: entered promiscuous mode [ 286.860114][T13056] bond0: entered promiscuous mode [ 286.860141][T13056] bond_slave_0: entered promiscuous mode [ 286.860441][T13056] bond_slave_1: entered promiscuous mode [ 286.903922][T13056] erspan0: entered promiscuous mode [ 286.907367][T13056] hsr1: Slave B (bond0) is not up; please bring it up to get a fully working HSR network [ 286.908007][T13056] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 287.326899][T13081] ip_tables: iptables: counters copy to user failed while replacing table [ 288.127847][T13096] __nla_validate_parse: 12 callbacks suppressed [ 288.127865][T13096] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1669'. [ 288.280318][T13104] No such timeout policy "s " [ 288.280333][T13104] netlink: Failed to associated timeout policy 's ' [ 289.085412][T13041] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 289.091809][T13098] netlink: 'syz.0.1670': attribute type 23 has an invalid length. [ 289.183663][T13100] netlink: 'syz.0.1670': attribute type 23 has an invalid length. [ 289.353433][T13119] syzkaller0: entered promiscuous mode [ 289.353458][T13119] syzkaller0: entered allmulticast mode [ 289.500703][T13125] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 289.512967][T13127] netlink: 'syz.3.1677': attribute type 1 has an invalid length. [ 289.585453][T13133] x_tables: duplicate underflow at hook 1 [ 289.594392][T13127] 8021q: adding VLAN 0 to HW filter on device bond10 [ 289.597756][T13134] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1680'. [ 289.602964][T13136] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1678'. [ 289.604648][T13136] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1678'. [ 290.126232][T13153] gtp1: entered promiscuous mode [ 290.126258][T13153] gtp1: entered allmulticast mode [ 291.085807][T13184] netlink: 'syz.0.1691': attribute type 1 has an invalid length. [ 291.085833][T13184] netlink: 200 bytes leftover after parsing attributes in process `syz.0.1691'. [ 291.207147][T13186] IPVS: set_ctl: invalid protocol: 46 224.0.0.1:20000 [ 291.426852][T13197] netlink: 252 bytes leftover after parsing attributes in process `syz.2.1696'. [ 291.434695][T13197] netlink: 252 bytes leftover after parsing attributes in process `syz.2.1696'. [ 291.444502][T13197] netlink: 252 bytes leftover after parsing attributes in process `syz.2.1696'. [ 291.570671][T13212] netlink: 'syz.4.1700': attribute type 1 has an invalid length. [ 291.580868][T13212] netlink: 'syz.4.1700': attribute type 1 has an invalid length. [ 291.594999][T13212] netlink: 'syz.4.1700': attribute type 1 has an invalid length. [ 291.595176][T13212] netlink: 'syz.4.1700': attribute type 1 has an invalid length. [ 291.595334][T13212] netlink: 'syz.4.1700': attribute type 1 has an invalid length. [ 291.598451][T13212] netlink: 'syz.4.1700': attribute type 1 has an invalid length. [ 292.105292][T13222] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1702'. [ 292.229434][T13222] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1702'. [ 292.289185][T13228] bond4: entered promiscuous mode [ 292.289622][T13228] 8021q: adding VLAN 0 to HW filter on device bond4 [ 292.290918][T13236] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 292.381438][T13236] xt_CT: No such helper "netbios-ns" [ 292.509485][T13228] 8021q: adding VLAN 0 to HW filter on device bond4 [ 292.509996][T13228] bond4: (slave gre2): The slave device specified does not support setting the MAC address [ 292.510018][T13228] bond4: (slave gre2): Setting fail_over_mac to active for active-backup mode [ 292.555256][T13228] bond4: (slave gre2): making interface the new active one [ 292.555284][T13228] gre2: entered promiscuous mode [ 292.585372][T13228] bond4: (slave gre2): Enslaving as an active interface with an up link [ 292.595997][T13230] syzkaller0: entered promiscuous mode [ 292.596020][T13230] syzkaller0: entered allmulticast mode [ 292.969529][T13257] bond4: option lacp_active: invalid value (5) [ 292.983886][T13257] bond4 (unregistering): Released all slaves [ 293.369603][T13268] mac80211_hwsim hwsim4 syzkaller0: Caught tx_queue_len zero misconfig [ 293.422161][T13268] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode [ 293.422240][T13268] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode [ 293.430330][T13267] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 64993 [ 293.694568][T13275] __nla_validate_parse: 3 callbacks suppressed [ 293.694592][T13275] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1717'. [ 293.855917][T13277] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1718'. [ 293.876389][T13277] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1718'. [ 293.899634][T13281] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 293.924113][T13284] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1720'. [ 294.093784][T13294] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1722'. [ 294.613083][T13321] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1729'. [ 296.299326][T13373] validate_nla: 28 callbacks suppressed [ 296.299348][T13373] netlink: 'syz.2.1746': attribute type 21 has an invalid length. [ 296.299367][T13373] IPv6: NLM_F_CREATE should be specified when creating new route [ 296.478405][T13376] veth0_to_bond: entered allmulticast mode [ 296.502468][T13384] syzkaller0: entered promiscuous mode [ 296.502615][T13384] syzkaller0: entered allmulticast mode [ 296.524259][T13376] netlink: 'syz.4.1747': attribute type 2 has an invalid length. [ 296.597467][T13387] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1747'. [ 296.712699][T13391] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1748'. [ 296.812348][T13376] syzkaller1: entered promiscuous mode [ 296.812376][T13376] syzkaller1: entered allmulticast mode [ 297.046441][T13399] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1752'. [ 297.116024][T13378] netlink: zone id is out of range [ 297.116042][T13378] netlink: zone id is out of range [ 297.116051][T13378] netlink: zone id is out of range [ 297.116060][T13378] netlink: zone id is out of range [ 297.116068][T13378] netlink: zone id is out of range [ 297.116076][T13378] netlink: zone id is out of range [ 297.116084][T13378] netlink: zone id is out of range [ 297.116093][T13378] netlink: zone id is out of range [ 297.116134][T13378] netlink: zone id is out of range [ 297.715140][T13416] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1759'. [ 297.824850][T13419] block nbd4: shutting down sockets [ 298.021641][T13423] netlink: 'syz.3.1761': attribute type 4 has an invalid length. [ 298.732183][T13456] __nla_validate_parse: 1 callbacks suppressed [ 298.732207][T13456] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1769'. [ 298.926608][T13466] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1774'. [ 298.960895][T13463] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1773'. [ 299.027064][T13471] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 299.027094][T13471] IPv6: NLM_F_CREATE should be set when creating new route [ 299.027164][T13471] IPv6: NLM_F_CREATE should be set when creating new route [ 299.179336][T13476] xt_TPROXY: Can be used only with -p tcp or -p udp [ 299.233781][T13468] veth3: entered promiscuous mode [ 299.233809][T13468] veth3: entered allmulticast mode [ 299.246040][T13468] bridge9: port 1(veth3) entered blocking state [ 299.246168][T13468] bridge9: port 1(veth3) entered disabled state [ 299.274318][T13468] bridge9: port 1(veth3) entered blocking state [ 299.274473][T13468] bridge9: port 1(veth3) entered forwarding state [ 299.420894][T13463] veth5: entered promiscuous mode [ 299.420923][T13463] veth5: entered allmulticast mode [ 299.433862][T13463] bridge9: port 2(veth5) entered blocking state [ 299.434004][T13463] bridge9: port 2(veth5) entered disabled state [ 299.457195][T13463] bridge9: port 2(veth5) entered blocking state [ 299.457344][T13463] bridge9: port 2(veth5) entered forwarding state [ 299.468837][T13482] veth1_to_bond: entered allmulticast mode [ 299.498045][T13495] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 299.617085][T13484] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1780'. [ 299.645513][T13475] veth1_to_bond: left allmulticast mode [ 299.696789][ T3361] bridge9: port 1(veth3) entered disabled state [ 299.719595][ T3361] bridge9: port 2(veth5) entered disabled state [ 299.949004][T13514] xt_CT: You must specify a L4 protocol and not use inversions on it [ 301.472595][T13559] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1797'. [ 301.622414][T13564] No such timeout policy "syz1" [ 301.660632][T13564] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1797'. [ 303.100818][T13568] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1798'. [ 303.397311][T13583] netlink: 'syz.4.1804': attribute type 2 has an invalid length. [ 303.585837][T13584] bond8: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 303.604549][T13584] bond8 (unregistering): Released all slaves [ 303.680110][T13591] net_ratelimit: 6 callbacks suppressed [ 303.680132][T13591] openvswitch: netlink: Actions may not be safe on all matching packets [ 303.805366][T13604] openvswitch: netlink: Actions may not be safe on all matching packets [ 303.823324][T13583] : entered promiscuous mode [ 303.874346][T13609] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1810'. [ 303.962162][T13609] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 303.980782][T13613] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1812'. [ 304.097309][T13625] ip6t_rt: unknown flags 1F [ 304.119472][T13625] netlink: 'syz.0.1811': attribute type 22 has an invalid length. [ 304.119498][T13625] netlink: 'syz.0.1811': attribute type 9 has an invalid length. [ 304.479735][T13643] netlink: 'syz.0.1820': attribute type 1 has an invalid length. [ 304.632135][T13653] netlink: 'syz.0.1820': attribute type 1 has an invalid length. [ 304.700520][T13659] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1821'. [ 304.719753][T13643] 8021q: adding VLAN 0 to HW filter on device bond5 [ 304.893055][T13645] bond5: (slave veth0_to_bond): making interface the new active one [ 304.928358][T13645] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 305.055472][T13656] bond5: (slave bridge3): Enslaving as an active interface with a down link [ 305.092499][T13643] macvlan0: entered promiscuous mode [ 305.092518][T13643] macvlan0: entered allmulticast mode [ 305.092904][T13643] bond5: entered promiscuous mode [ 305.092915][T13643] veth0_to_bond: entered promiscuous mode [ 305.109990][T13643] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 305.110637][T13643] bond5: (slave macvlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 305.110864][T13643] bond5: left promiscuous mode [ 305.110878][T13643] veth0_to_bond: left promiscuous mode [ 305.344780][ T3361] bond5: (slave veth0_to_bond): link status definitely down, disabling slave [ 305.346054][ T3361] bond5: now running without any active interface! [ 305.351500][T13678] tipc: Enabling of bearer rejected, failed to enable media [ 305.810483][T13707] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1828'. [ 305.988163][T13707] syzkaller1: entered allmulticast mode [ 306.010893][T13711] xt_CT: No such helper "netbios-ns" [ 306.813908][T13758] gretap3: entered promiscuous mode [ 306.885326][T13764] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1838'. [ 306.890714][T13764] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1838'. [ 306.961822][T13764] team_slave_0 (unregistering): left promiscuous mode [ 306.967064][T13764] team0: Port device team_slave_0 removed [ 307.000072][T13770] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 307.199157][T13770] xt_CT: No such helper "netbios-ns" [ 307.395039][T13784] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode [ 307.395072][T13784] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode [ 307.423261][T13789] netlink: 'syz.0.1841': attribute type 10 has an invalid length. [ 307.449378][T13789] team0 (unregistering): left promiscuous mode [ 307.449406][T13789] team_slave_1: left promiscuous mode [ 307.449653][T13789] dummy0: left promiscuous mode [ 307.482368][T13789] team0 (unregistering): Port device team_slave_1 removed [ 307.532666][T13789] team0 (unregistering): Port device dummy0 removed [ 308.005891][T13820] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1846'. [ 308.400828][T13834] netlink: 'syz.3.1850': attribute type 2 has an invalid length. [ 308.400857][T13834] netlink: 'syz.3.1850': attribute type 2 has an invalid length. [ 308.654633][T13844] geneve2: entered promiscuous mode [ 308.656033][ T6346] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.656311][ T6346] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.656381][ T6346] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.656420][ T6346] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.766540][T13841] macsec1: entered promiscuous mode [ 308.969108][T13849] lo speed is unknown, defaulting to 1000 [ 309.024399][T13849] lo speed is unknown, defaulting to 1000 [ 309.044495][T13849] wg2 speed is unknown, defaulting to 1000 [ 309.379569][T13886] netlink: 'syz.2.1859': attribute type 2 has an invalid length. [ 309.379595][T13886] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1859'. [ 309.786444][T13903] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1862'. [ 310.012984][T13915] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1863'. [ 310.392365][T13933] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1870'. [ 310.414500][T13933] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1870'. [ 310.416647][T13932] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1869'. [ 310.592372][T13945] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1873'. [ 310.593045][T13946] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1873'. [ 310.612514][T13944] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 310.617444][T13947] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1871'. [ 310.728899][T13953] netlink: 584 bytes leftover after parsing attributes in process `syz.1.1874'. [ 311.396714][T13980] Bluetooth: hci1: expected 36 bytes, got 2 bytes [ 312.136020][T13980] macsec0: entered promiscuous mode [ 312.136539][T13984] macsec0: left promiscuous mode [ 312.321993][T13991] x_tables: duplicate underflow at hook 1 [ 312.406768][T13986] 8021q: adding VLAN 0 to HW filter on device bond9 [ 312.476546][T13993] 8021q: adding VLAN 0 to HW filter on device bond9 [ 312.476979][T13993] bond9: (slave wireguard0): The slave device specified does not support setting the MAC address [ 312.477831][T13993] bond9: (slave wireguard0): Error -95 calling set_mac_address [ 312.548760][T13999] mac80211_hwsim hwsim4 wlan1: entered promiscuous mode [ 312.560859][T13999] bond9: (slave wlan1): Enslaving as an active interface with an up link [ 312.978070][T14030] xt_CT: You must specify a L4 protocol and not use inversions on it [ 312.996088][T14030] IPVS: set_ctl: invalid protocol: 50 127.0.0.1:17 [ 313.689760][T14068] IPv6: Can't replace route, no match found [ 314.298985][T14101] netlink: 'syz.0.1909': attribute type 1 has an invalid length. [ 314.299015][T14101] netlink: 'syz.0.1909': attribute type 1 has an invalid length. [ 314.361281][ T53] Bluetooth: hci4: command 0x0405 tx timeout [ 316.776802][T14110] __nla_validate_parse: 7 callbacks suppressed [ 316.776826][T14110] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1913'. [ 316.995855][T14119] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1916'. [ 317.032035][T14119] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1916'. [ 317.416182][T14137] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1920'. [ 317.500605][T14138] netlink: 'syz.0.1920': attribute type 10 has an invalid length. [ 317.622203][T14138] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 317.657930][T14138] netdevsim netdevsim0 netdevsim1: entered promiscuous mode [ 317.680345][T14138] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 318.154988][T14171] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1931'. [ 318.473562][T14181] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1933'. [ 318.493737][T14184] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1934'. [ 319.059465][T14181] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1933'. [ 319.239508][T14201] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1937'. [ 319.347468][T14204] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1937'. [ 319.797645][T14214] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 319.797677][T14214] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 320.705632][T14278] syzkaller0: entered promiscuous mode [ 320.705656][T14278] syzkaller0: entered allmulticast mode [ 320.857624][T14285] syzkaller1: entered promiscuous mode [ 320.857651][T14285] syzkaller1: entered allmulticast mode [ 320.858138][T14283] SET target dimension over the limit! [ 321.373775][T14309] vlan3: entered allmulticast mode [ 321.373801][T14309] bridge10: entered allmulticast mode [ 321.627963][ T53] block nbd4: Receive control failed (result -32) [ 321.629368][ T5617] block nbd4: Receive control failed (result -32) [ 321.746161][T14340] FAULT_INJECTION: forcing a failure. [ 321.746161][T14340] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 321.746188][T14340] CPU: 1 UID: 0 PID: 14340 Comm: syz.4.1966 Not tainted syzkaller #0 PREEMPT(full) [ 321.746204][T14340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 321.746212][T14340] Call Trace: [ 321.746217][T14340] [ 321.746223][T14340] dump_stack_lvl+0xe8/0x150 [ 321.746246][T14340] should_fail_ex+0x410/0x560 [ 321.746264][T14340] _copy_from_user+0x2d/0xb0 [ 321.746281][T14340] bpf_test_init+0xd8/0x150 [ 321.746301][T14340] bpf_prog_test_run_skb+0x31e/0x2230 [ 321.746319][T14340] ? lock_acquire+0x115/0x350 [ 321.746342][T14340] ? __fget_files+0x3a2/0x420 [ 321.746359][T14340] ? __fget_files+0x2a/0x420 [ 321.746378][T14340] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 321.746396][T14340] bpf_prog_test_run+0x2c5/0x340 [ 321.746414][T14340] __sys_bpf+0xa22/0xd90 [ 321.746433][T14340] ? __pfx___sys_bpf+0x10/0x10 [ 321.746454][T14340] ? __fget_files+0x2a/0x420 [ 321.746492][T14340] ? rcu_is_watching+0x16/0xb0 [ 321.746511][T14340] __x64_sys_bpf+0xba/0xd0 [ 321.746526][T14340] do_syscall_64+0x166/0x520 [ 321.746539][T14340] ? trace_irq_disable+0x3b/0x140 [ 321.746552][T14340] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.746565][T14340] ? clear_bhb_loop+0x70/0xc0 [ 321.746580][T14340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.746592][T14340] RIP: 0033:0x7ff9a6b9e159 [ 321.746605][T14340] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 321.746616][T14340] RSP: 002b:00007ff9a7a01028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 321.746631][T14340] RAX: ffffffffffffffda RBX: 00007ff9a6e25fa0 RCX: 00007ff9a6b9e159 [ 321.746640][T14340] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 321.746649][T14340] RBP: 00007ff9a7a01090 R08: 0000000000000000 R09: 0000000000000000 [ 321.746657][T14340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 321.746664][T14340] R13: 00007ff9a6e26038 R14: 00007ff9a6e25fa0 R15: 00007fff01010d58 [ 321.746685][T14340] [ 322.049181][T14344] __nla_validate_parse: 4 callbacks suppressed [ 322.049205][T14344] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1968'. [ 322.101264][T14344] 8021q: adding VLAN 0 to HW filter on device bond6 [ 322.102213][T14351] bond6: option ad_select: unable to set because the bond device is up [ 322.154337][T14353] vlan0: entered promiscuous mode [ 322.154365][T14353] 1·: entered promiscuous mode [ 322.154631][T14353] vlan0: entered allmulticast mode [ 322.219997][T14357] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1971'. [ 322.247009][T14360] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1970'. [ 322.354781][T14363] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1972'. [ 322.356128][T14363] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1972'. [ 322.356151][T14363] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 322.364879][T14366] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1972'. [ 322.364906][T14366] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1972'. [ 322.364921][T14366] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 322.634275][T14374] openvswitch: netlink: Unknown key attributes 1 [ 323.085450][T14398] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 323.248255][T14402] netlink: 'syz.0.1984': attribute type 13 has an invalid length. [ 323.296003][T14402] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1984'. [ 323.595474][T14413] bond0 (unregistering): left promiscuous mode [ 323.595502][T14413] bond_slave_0: left promiscuous mode [ 323.595809][T14413] bond_slave_1: left promiscuous mode [ 323.596026][T14413] netdevsim netdevsim0 netdevsim1: left promiscuous mode [ 323.604887][T14413] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 323.689803][T14413] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 323.827708][T14413] bond0 (unregistering): (slave netdevsim1): Releasing backup interface [ 323.851528][T14413] bond0 (unregistering): Released all slaves [ 323.869240][T14425] xt_hashlimit: size too large, truncated to 1048576 [ 324.286531][T14438] IPVS: set_ctl: invalid protocol: 137 100.1.1.0:20004 [ 324.482569][T14449] netlink: 'syz.3.1996': attribute type 7 has an invalid length. [ 324.482598][T14449] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1996'. [ 324.629874][T14458] ip_tables: iptables: counters copy to user failed while replacing table [ 324.882396][T14469] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 325.371487][T14499] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2009'. [ 325.453011][T14504] macsec1: entered promiscuous mode [ 325.686034][T14508] team0: Port device dummy0 removed [ 325.688794][T14508] bond0: (slave veth0_to_bond): Releasing active interface [ 325.721012][T14508] team0: Port device bond_slave_0 removed [ 325.741665][T14508] team0: Port device team_slave_0 removed [ 325.759933][T14508] team0: Port device team_slave_1 removed [ 325.760830][T14508] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 325.775622][T14508] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 325.776605][T14508] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 325.897188][T14511] netlink: 'syz.0.2012': attribute type 12 has an invalid length. [ 325.897210][T14511] netlink: 'syz.0.2012': attribute type 11 has an invalid length. [ 325.898648][T14511] sctp: [Deprecated]: syz.0.2012 (pid 14511) Use of struct sctp_assoc_value in delayed_ack socket option. [ 325.898648][T14511] Use struct sctp_sack_info instead [ 325.917755][ T5617] block nbd5: Receive control failed (result -32) [ 325.917766][ T53] block nbd5: Receive control failed (result -32) [ 326.164573][T14521] bridge0: port 1(vlan0) entered blocking state [ 326.164768][T14521] bridge0: port 1(vlan0) entered disabled state [ 326.164923][T14521] vlan0: entered allmulticast mode [ 326.164940][T14521] geneve0: entered allmulticast mode [ 326.167232][T14521] vlan0: entered promiscuous mode [ 326.167249][T14521] geneve0: entered promiscuous mode [ 327.478042][T14566] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 327.725408][T14571] syzkaller1: entered promiscuous mode [ 327.725435][T14571] syzkaller1: entered allmulticast mode [ 327.897022][T14587] netlink: zone id is out of range [ 327.899729][T14588] netlink: zone id is out of range [ 327.900137][T14588] netlink: zone id is out of range [ 327.906984][T14587] netlink: zone id is out of range [ 327.907414][T14587] netlink: zone id is out of range [ 327.907424][T14587] netlink: zone id is out of range [ 327.907492][T14587] netlink: zone id is out of range [ 327.913835][T14588] netlink: zone id is out of range [ 327.913849][T14588] netlink: zone id is out of range [ 328.624286][T14606] __nla_validate_parse: 4 callbacks suppressed [ 328.624310][T14606] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2033'. [ 328.938093][T14632] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2037'. [ 328.938425][T14633] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2037'. [ 329.117690][T14650] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2041'. [ 329.148143][T14650] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2041'. [ 329.148566][T14650] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2041'. [ 329.156689][T14650] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2041'. [ 329.156923][T14650] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2041'. [ 329.157185][T14650] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2041'. [ 329.157403][T14650] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2041'. [ 329.379674][T14665] dvmrp0: entered allmulticast mode [ 329.396543][T14665] dvmrp0: left allmulticast mode [ 329.396656][T14665] dvmrp8: left allmulticast mode [ 329.546875][T14671] sctp: [Deprecated]: syz.3.2043 (pid 14671) Use of int in maxseg socket option. [ 329.546875][T14671] Use struct sctp_assoc_value instead [ 330.021489][ T6348] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 330.021541][ T6348] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 330.021576][ T6348] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 330.021613][ T6348] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 330.900295][T14721] bond5 (unregistering): Released all slaves [ 330.986004][T14746] netlink: 'syz.3.2059': attribute type 11 has an invalid length. [ 331.138209][T14735] syzkaller0: entered promiscuous mode [ 331.138236][T14735] syzkaller0: entered allmulticast mode [ 331.663709][T14767] syzkaller0: entered promiscuous mode [ 331.663738][T14767] syzkaller0: entered allmulticast mode [ 331.900274][T14793] nbd: nbd4 already in use [ 331.906459][T14793] block nbd4: NBD_DISCONNECT [ 331.906490][T14793] block nbd4: Send disconnect failed -32 [ 331.906509][T14793] block nbd4: Send disconnect failed -32 [ 331.906528][T14793] block nbd4: shutting down sockets [ 332.128291][T14793] netlink: 'syz.4.2071': attribute type 1 has an invalid length. [ 332.255398][T14803] netlink: 'syz.4.2071': attribute type 9 has an invalid length. [ 334.018368][T14793] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 334.404234][T14815] warn_alloc: 1 callbacks suppressed [ 334.404258][T14815] syz.2.2076: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 334.404325][T14815] CPU: 1 UID: 0 PID: 14815 Comm: syz.2.2076 Not tainted syzkaller #0 PREEMPT(full) [ 334.404350][T14815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 334.404363][T14815] Call Trace: [ 334.404372][T14815] [ 334.404381][T14815] dump_stack_lvl+0xe8/0x150 [ 334.404419][T14815] warn_alloc+0x24d/0x270 [ 334.404443][T14815] ? kasan_save_track+0x4f/0x80 [ 334.404464][T14815] ? kasan_save_track+0x3e/0x80 [ 334.404489][T14815] ? __pfx_warn_alloc+0x10/0x10 [ 334.404508][T14815] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 334.404534][T14815] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.404579][T14815] __vmalloc_node_range_noprof+0x127/0x1540 [ 334.404636][T14815] ? rcu_is_watching+0x16/0xb0 [ 334.404667][T14815] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 334.404694][T14815] ? __kmalloc_cache_noprof+0x321/0x600 [ 334.404724][T14815] ? __kmalloc_cache_noprof+0x14d/0x600 [ 334.404745][T14815] ? xskq_create+0x56/0x220 [ 334.404772][T14815] xskq_create+0x148/0x220 [ 334.404797][T14815] ? xsk_init_queue+0x8a/0xe0 [ 334.404830][T14815] xsk_init_queue+0x8a/0xe0 [ 334.404888][T14815] xsk_setsockopt+0x52a/0x960 [ 334.404922][T14815] ? __pfx_xsk_setsockopt+0x10/0x10 [ 334.404950][T14815] ? put_files_struct+0x24f/0x350 [ 334.404978][T14815] ? __pfx_aa_sk_perm+0x10/0x10 [ 334.405027][T14815] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 334.405056][T14815] ? __pfx_xsk_setsockopt+0x10/0x10 [ 334.405087][T14815] do_sock_setsockopt+0x17c/0x1b0 [ 334.405120][T14815] __x64_sys_setsockopt+0x13d/0x1b0 [ 334.405154][T14815] do_syscall_64+0x166/0x520 [ 334.405177][T14815] ? trace_irq_disable+0x3b/0x140 [ 334.405198][T14815] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.405219][T14815] ? clear_bhb_loop+0x70/0xc0 [ 334.405246][T14815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.405268][T14815] RIP: 0033:0x7fcc7eb9e159 [ 334.405289][T14815] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 334.405306][T14815] RSP: 002b:00007fcc7fa18028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 334.405328][T14815] RAX: ffffffffffffffda RBX: 00007fcc7ee25fa0 RCX: 00007fcc7eb9e159 [ 334.405344][T14815] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 334.405357][T14815] RBP: 00007fcc7ec3503b R08: 0000000000000004 R09: 0000000000000000 [ 334.405371][T14815] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 334.405384][T14815] R13: 00007fcc7ee26038 R14: 00007fcc7ee25fa0 R15: 00007fffcca97408 [ 334.405421][T14815] [ 334.405443][T14815] Mem-Info: [ 334.405453][T14815] active_anon:6239 inactive_anon:0 isolated_anon:0 [ 334.405453][T14815] active_file:5 inactive_file:43595 isolated_file:0 [ 334.405453][T14815] unevictable:0 dirty:113 writeback:0 [ 334.405453][T14815] slab_reclaimable:11803 slab_unreclaimable:105889 [ 334.405453][T14815] mapped:29733 shmem:927 pagetables:1770 [ 334.405453][T14815] sec_pagetables:0 bounce:0 [ 334.405453][T14815] kernel_misc_reclaimable:0 [ 334.405453][T14815] free:1274831 free_pcp:15719 free_cma:0 [ 334.405508][T14815] Node 0 active_anon:24956kB inactive_anon:0kB active_file:20kB inactive_file:174180kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:118932kB dirty:452kB writeback:0kB shmem:3708kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14988kB pagetables:6936kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 334.405568][T14815] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 334.405623][T14815] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 334.405767][T14815] lowmem_reserve[]: 0 2486 2486 2486 2486 [ 334.405814][T14815] Node 0 DMA32 free:1138172kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:24956kB inactive_anon:0kB active_file:20kB inactive_file:174180kB unevictable:0kB writepending:452kB zspages:0kB present:3129332kB managed:2546620kB mlocked:0kB bounce:0kB free_pcp:62772kB local_pcp:20696kB free_cma:0kB [ 334.405879][T14815] lowmem_reserve[]: 0 0 0 0 0 [ 334.405919][T14815] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 334.405979][T14815] lowmem_reserve[]: 0 0 0 0 0 [ 334.406019][T14815] Node 1 Normal free:3945792kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 334.406081][T14815] lowmem_reserve[]: 0 0 0 0 0 [ 334.406121][T14815] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 334.406249][T14815] Node 0 DMA32: 613*4kB (UME) 1571*8kB (UME) 1062*16kB (UME) 3066*32kB (UME) 1497*64kB (UME) 237*128kB (UME) 407*256kB (UME) 369*512kB (UME) 227*1024kB (UM) 12*2048kB (UM) 81*4096kB (UM) = 1138188kB [ 334.406426][T14815] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 334.406536][T14815] Node 1 Normal: 2*4kB (M) 1*8kB (M) 7*16kB (UM) 4*32kB (UM) 9*64kB (UM) 2*128kB (UM) 5*256kB (UM) 4*512kB (UM) 1*1024kB (M) 2*2048kB (U) 961*4096kB (M) = 3945792kB [ 334.406723][T14815] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 334.406741][T14815] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 334.406758][T14815] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 334.406775][T14815] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 334.406791][T14815] 44548 total pagecache pages [ 334.406800][T14815] 0 pages in swap cache [ 334.406808][T14815] Free swap = 124996kB [ 334.406817][T14815] Total swap = 124996kB [ 334.406826][T14815] 2097051 pages RAM [ 334.406834][T14815] 0 pages HighMem/MovableOnly [ 334.406842][T14815] 428780 pages reserved [ 334.406851][T14815] 0 pages cma reserved [ 335.405805][T14843] bond_slave_0: left promiscuous mode [ 335.405832][T14843] bond_slave_0: left allmulticast mode [ 335.406028][T14843] net_ratelimit: 95 callbacks suppressed [ 335.406043][T14843] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 335.787257][T14857] __nla_validate_parse: 46 callbacks suppressed [ 335.787281][T14857] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2090'. [ 335.814631][T14860] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2090'. [ 335.814656][T14860] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2090'. [ 335.991255][T14868] netlink: 45349 bytes leftover after parsing attributes in process `syz.1.2092'. [ 335.991388][T14868] 0ªX¹¦Dö»: renamed from gretap0 [ 336.019335][T14868] 0ªX¹¦Dö»: entered promiscuous mode [ 336.019355][T14868] 0ªX¹¦Dö»: entered allmulticast mode [ 336.085507][T14873] openvswitch: netlink: Message has 8 unknown bytes. [ 336.343594][T14886] bond7: left allmulticast mode [ 336.344599][T14886] bond7: left promiscuous mode [ 336.347649][T14886] macvlan0: left promiscuous mode [ 336.347671][T14886] macvlan0: left allmulticast mode [ 336.350823][T14886] netlink: 'syz.1.2097': attribute type 2 has an invalid length. [ 336.505289][T14894] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 336.518435][T14894] netlink: 'syz.2.2100': attribute type 1 has an invalid length. [ 336.518457][T14894] netlink: 248 bytes leftover after parsing attributes in process `syz.2.2100'. [ 336.570375][T14894] netlink: 'syz.2.2100': attribute type 16 has an invalid length. [ 336.570401][T14894] netlink: 'syz.2.2100': attribute type 17 has an invalid length. [ 336.658001][T14894] bridge0: port 3(syz_tun) entered blocking state [ 336.658153][T14894] bridge0: port 3(syz_tun) entered forwarding state [ 336.660963][T14894] bridge0: left promiscuous mode [ 336.681036][T14894] 8021q: adding VLAN 0 to HW filter on device team0 [ 336.765896][T14894] veth1_vlan: left promiscuous mode [ 336.769734][T14894] v: left promiscuous mode [ 336.784218][T14894] v: entered promiscuous mode [ 336.787289][T14894] veth1_vlan: entered promiscuous mode [ 336.806331][T14894] veth1_macvtap: left promiscuous mode [ 336.807908][T14894] veth0_macvtap: left promiscuous mode [ 336.809345][T14894] veth0_macvtap: entered promiscuous mode [ 336.810811][T14894] veth1_macvtap: entered promiscuous mode [ 336.847593][T14894] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 336.849011][T14894] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 336.850904][T14894] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 336.874882][T14894] mac80211_hwsim hwsim7 wlan1: left promiscuous mode [ 336.875766][T14894] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 336.877053][T14894] 8021q: adding VLAN 0 to HW filter on device bond1 [ 336.936456][T14894] 8021q: adding VLAN 0 to HW filter on device bond2 [ 336.937987][T14894] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 336.967642][T14894] 8021q: adding VLAN 0 to HW filter on device bond3 [ 336.982407][T14894] A link change request failed with some changes committed already. Interface veth1_to_bod may have been left with an inconsistent configuration, please check. [ 336.982491][T10577] lo speed is unknown, defaulting to 1000 [ 336.982514][T10577] syz0: Port: 1 Link ACTIVE [ 336.989120][T14255] s`z1: Port: 1 Link ACTIVE [ 337.026394][ T6349] bridge0: port 4(veth0) entered blocking state [ 337.026515][ T6349] bridge0: port 4(veth0) entered forwarding state [ 337.035045][ T6349] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.035228][ T6349] bridge0: port 1(bridge_slave_0) entered forwarding state [ 337.047802][ T6349] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.047935][ T6349] bridge0: port 2(bridge_slave_1) entered forwarding state [ 337.102917][T14254] bridge0: entered promiscuous mode [ 337.223731][T14916] netlink: zone id is out of range [ 337.223749][T14916] netlink: zone id is out of range [ 337.223758][T14916] netlink: zone id is out of range [ 337.223766][T14916] netlink: zone id is out of range [ 337.223774][T14916] netlink: zone id is out of range [ 337.223782][T14916] netlink: zone id is out of range [ 337.233992][ T6346] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 337.234027][ T6346] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.234060][ T6346] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 337.234084][ T6346] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.234114][ T6346] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 337.234138][ T6346] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.379267][ T31] audit: type=1800 audit(1789277282.575:6): pid=14909 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2105" name="memory.events" dev="tmpfs" ino=2185 res=0 errno=0 [ 337.750677][T14938] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2112'. [ 337.990347][T14939] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2112'. [ 338.595133][T14962] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2117'. [ 338.745825][T14967] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2119'. [ 339.173971][T14994] veth7: entered allmulticast mode [ 339.418659][T15005] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.428952][T15000] lo speed is unknown, defaulting to 1000 [ 339.456991][T15000] lo speed is unknown, defaulting to 1000 [ 339.459270][T15008] lo speed is unknown, defaulting to 1000 [ 339.463373][T15000] wg2 speed is unknown, defaulting to 1000 [ 339.587026][T15008] lo speed is unknown, defaulting to 1000 [ 339.598194][T15008] wg2 speed is unknown, defaulting to 1000 [ 339.798511][T14984] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 340.025524][T15033] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2127'. [ 340.371673][T15046] tun0: tun_chr_ioctl cmd 1074025677 [ 340.371781][T15046] tun0: linktype set to 776 [ 340.592360][T15046] lo speed is unknown, defaulting to 1000 [ 340.623509][T15046] lo speed is unknown, defaulting to 1000 [ 340.629310][T15046] wg2 speed is unknown, defaulting to 1000 [ 340.862445][T15064] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2134'. [ 341.281863][T15080] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 341.345749][T15080] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 341.435996][T15085] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2137'. [ 341.530213][T15088] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2138'. [ 342.222419][T15095] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2140'. [ 342.255838][T15095] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2140'. [ 342.259403][T15095] bond10: entered promiscuous mode [ 342.259474][T15095] bond10: entered allmulticast mode [ 342.259946][T15095] 8021q: adding VLAN 0 to HW filter on device bond10 [ 342.468942][T15109] netlink: 'syz.2.2146': attribute type 11 has an invalid length. [ 342.513765][T15111] netlink: 216 bytes leftover after parsing attributes in process `syz.1.2145'. [ 342.550568][T15111] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2145'. [ 342.595581][T15114] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2147'. [ 342.681670][ C0] net_ratelimit: 155 callbacks suppressed [ 342.681696][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.077376][T15134] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 343.151734][T15134] pim6reg: entered allmulticast mode [ 343.375486][T15149] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2154'. [ 343.540187][T15156] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2155'. [ 343.976505][T15182] netlink: 'syz.4.2162': attribute type 2 has an invalid length. [ 344.614896][T15214] vlan3: entered promiscuous mode [ 345.074809][T15240] netlink: 'syz.3.2181': attribute type 32 has an invalid length. [ 345.074847][T15240] bond0: option coupled_control: mode dependency failed, not supported in mode active-backup(1) [ 345.255836][T15252] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap0 [ 345.256453][T15252] batman_adv: batadv0: Adding interface: gretap0 [ 345.256467][T15252] batman_adv: batadv0: The MTU of interface gretap0 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 345.256499][T15252] batman_adv: batadv0: Interface activated: gretap0 [ 345.757907][T15271] netlink: 'syz.1.2188': attribute type 2 has an invalid length. [ 345.916626][T15275] __nla_validate_parse: 5 callbacks suppressed [ 345.916651][T15275] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2189'. [ 346.744941][T15321] ip_tables: iptables: counters copy to user failed while replacing table [ 346.910226][T15306] veth7: entered promiscuous mode [ 347.134652][T15340] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2203'. [ 347.142328][T15340] xt_TCPMSS: Only works on TCP SYN packets [ 347.239356][T15300] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 347.239385][T15300] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 347.274915][T15300] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 347.274942][T15300] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 347.305045][T15300] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 347.305073][T15300] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 347.334478][T15300] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 347.334507][T15300] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 347.554072][T15349] netlink: 'syz.0.2206': attribute type 21 has an invalid length. [ 348.364848][T15363] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2210'. [ 348.868382][T15395] smbdirect: ib_dev[s`z1] removed [ 348.879911][T15393] netlink: 'syz.4.2216': attribute type 22 has an invalid length. [ 348.879935][T15393] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2216'. [ 348.890406][T15393] 8021q: adding VLAN 0 to HW filter on device bond0 [ 349.090828][T15407] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2221'. [ 349.101509][T15407] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2221'. [ 349.102094][T15407] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 349.140580][T15402] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2218'. [ 349.140944][T15402] 8021q: VLANs not supported on ip_vti0 [ 349.480846][T15428] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 349.480914][T14255] lo speed is unknown, defaulting to 1000 [ 349.480936][T14255] syz0: Port: 1 Link DOWN [ 349.823340][T15445] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2228'. [ 349.961300][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.286271][T15462] netlink: 27 bytes leftover after parsing attributes in process `syz.0.2231'. [ 350.732516][T15483] netlink: 'syz.0.2235': attribute type 4 has an invalid length. [ 350.776078][T15483] netlink: 'syz.0.2235': attribute type 4 has an invalid length. [ 350.805659][T15486] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2233'. [ 351.993760][T15530] __nla_validate_parse: 1 callbacks suppressed [ 351.993785][T15530] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2243'. [ 352.006299][T15530] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2243'. [ 352.395542][T15550] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2248'. [ 353.133105][T15584] netlink: 'syz.3.2254': attribute type 2 has an invalid length. [ 353.133136][T15584] netlink: 'syz.3.2254': attribute type 2 has an invalid length. [ 353.457867][T15596] netlink: 'syz.0.2257': attribute type 5 has an invalid length. [ 353.460748][T15598] netlink: 'syz.0.2257': attribute type 5 has an invalid length. [ 354.148180][T15628] ip_tables: iptables: counters copy to user failed while replacing table [ 354.392654][T15638] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2265'. [ 354.392689][T15638] block nbd4: Unsupported socket: should be TCP or UNIX. [ 354.591042][T15649] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2267'. [ 354.984116][T15669] bridge9: entered promiscuous mode [ 355.289063][T15687] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2274'. [ 355.357309][T15687] Cannot find del_set index 0 as target [ 355.458152][T15677] bridge9: entered promiscuous mode [ 355.738392][T15699] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 355.739754][T15699] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 356.012292][T15715] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2283'. [ 356.250981][T15720] netlink: 75 bytes leftover after parsing attributes in process `syz.2.2284'. [ 356.258192][T15720] IPVS: rr: FWM 3 0x00000003 - no destination available [ 356.288909][T15726] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2287'. [ 356.304844][T15726] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2287'. [ 356.668114][T15720] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 356.668156][T15720] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.939299][T15720] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 356.939340][T15720] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.037427][T15740] lo speed is unknown, defaulting to 1000 [ 357.047498][T15740] lo speed is unknown, defaulting to 1000 [ 357.066085][T15740] wg2 speed is unknown, defaulting to 1000 [ 357.122282][T15720] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 357.122322][T15720] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.278997][T15748] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 357.288986][T15748] bond4: (slave macvlan4): Enslaving as an active interface with a down link [ 357.313177][T15755] __nla_validate_parse: 2 callbacks suppressed [ 357.313200][T15755] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2291'. [ 357.678155][T15755] §: renamed from sit0 (while UP) [ 357.771863][ T1113] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 357.771904][ T1113] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.038928][T15776] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2295'. [ 358.059262][T15771] mac80211_hwsim hwsim4 wlan1: left promiscuous mode [ 358.184942][T15784] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2297'. [ 358.211812][ T6349] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 358.211851][ T6349] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.212242][T15779] tipc: Started in network mode [ 358.212256][T15779] tipc: Node identity , cluster identity 4711 [ 358.212270][T15779] tipc: Failed to obtain node identity [ 358.212316][T15779] tipc: Enabling of bearer rejected, failed to enable media [ 358.242545][ T1113] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 358.242580][ T1113] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.297260][ T6346] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 358.297298][ T6346] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.516346][T15793] bridge2: entered allmulticast mode [ 359.007846][T15824] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2307'. [ 359.007880][T15824] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2307'. [ 359.405264][T15843] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2313'. [ 359.692895][T15860] netlink: 'syz.3.2317': attribute type 1 has an invalid length. [ 359.718896][T15854] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2314'. [ 359.764235][T15869] bridge0: port 2(wlan1) entered blocking state [ 359.764345][T15869] bridge0: port 2(wlan1) entered disabled state [ 359.764521][T15869] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 359.781889][T15869] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 359.986207][T15882] xt_nat: multiple ranges no longer supported [ 359.996593][T15882] netlink: 'syz.3.2320': attribute type 3 has an invalid length. [ 359.996617][T15882] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2320'. [ 360.197132][T15889] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2323'. [ 360.312484][T15893] netlink: 12103 bytes leftover after parsing attributes in process `syz.1.2324'. [ 360.437093][T15906] unsupported nlmsg_type 40 [ 360.440519][T15906] netlink: 'syz.2.2326': attribute type 2 has an invalid length. [ 361.424683][T15951] IPVS: sh: FWM 3 0x00000003 - no destination available [ 361.474605][T15953] ip_vti0: entered promiscuous mode [ 361.568386][T15959] ipt_REJECT: TCP_RESET invalid for non-tcp [ 361.678093][T15959] gre0: left promiscuous mode [ 361.678119][T15959] gre0: left allmulticast mode [ 362.327902][T15992] syzkaller1: entered promiscuous mode [ 362.327928][T15992] syzkaller1: entered allmulticast mode [ 362.574158][T15993] 8021q: adding VLAN 0 to HW filter on device team0 [ 362.591902][T15993] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 362.806410][T15993] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 362.825161][T15993] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 362.825190][T15993] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 362.829222][T15993] veth1_vlan: left promiscuous mode [ 362.834088][T15993] veth0_vlan: left promiscuous mode [ 362.839461][T15993] veth0_vlan: entered promiscuous mode [ 362.846258][T15993] veth1_vlan: entered promiscuous mode [ 362.846276][T15993] veth1_vlan: entered allmulticast mode [ 362.872601][T15993] veth0_macvtap: left promiscuous mode [ 362.873876][T15993] veth0_macvtap: entered promiscuous mode [ 362.887832][T15993] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 362.890203][T15993] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 362.893334][T15993] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 362.895621][T15993] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 362.898708][T15993] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 363.047556][T16011] __nla_validate_parse: 5 callbacks suppressed [ 363.047580][T16011] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2355'. [ 363.080679][T16011] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2355'. [ 363.196310][T16016] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2356'. [ 363.542434][T16035] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2363'. [ 363.955729][T16064] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2369'. [ 363.955767][T16064] openvswitch: netlink: Missing key (keys=c0, expected=100) [ 363.956421][T16064] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2369'. [ 364.313402][T16073] syzkaller0: entered promiscuous mode [ 364.313428][T16073] syzkaller0: entered allmulticast mode [ 364.627972][T16093] netlink: zone id is out of range [ 364.627991][T16093] netlink: zone id is out of range [ 364.628000][T16093] netlink: zone id is out of range [ 364.628008][T16093] netlink: zone id is out of range [ 364.628016][T16093] netlink: zone id is out of range [ 364.628025][T16093] netlink: zone id is out of range [ 364.628037][T16093] netlink: zone id is out of range [ 364.900480][T16102] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2378'. [ 364.900507][T16102] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2378'. [ 364.900521][T16102] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2378'. [ 365.685323][T16134] lo: left promiscuous mode [ 365.700439][T16134] ip_vti0: left promiscuous mode [ 365.748019][T16134] macvlan0: left promiscuous mode [ 365.760516][T16134] geneve1: left promiscuous mode [ 365.767989][T16147] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2391'. [ 365.782231][T16147] lo: entered allmulticast mode [ 365.782354][T16147] lo: left allmulticast mode [ 366.380716][T16151] macvtap2: entered promiscuous mode [ 366.393967][T16151] macvtap2: entered allmulticast mode [ 366.685880][T16171] netlink: 'syz.3.2395': attribute type 26 has an invalid length. [ 366.780628][T16163] lo speed is unknown, defaulting to 1000 [ 366.833257][T16163] lo speed is unknown, defaulting to 1000 [ 366.846619][T16177] net_ratelimit: 154 callbacks suppressed [ 366.846640][T16177] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 366.875326][T16163] wg2 speed is unknown, defaulting to 1000 [ 367.065877][T16188] trusted_key: syz.4.2399 sent an empty control message without MSG_MORE. [ 367.418933][T16203] 8021q: adding VLAN 0 to HW filter on device bond5 [ 367.432068][T16204] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 367.432314][T16204] bridge0: port 2(wlan1) entered disabled state [ 367.465479][T16204] bond5: (slave wlan1): Opening slave failed [ 367.742541][T16212] syzkaller0: entered promiscuous mode [ 367.742571][T16212] syzkaller0: entered allmulticast mode [ 367.840443][T16216] netlink: 'syz.4.2404': attribute type 3 has an invalid length. [ 368.015034][ T5617] block nbd4: Receive control failed (result -1) [ 368.015397][ T5617] [ 368.024119][ T5617] ====================================================== [ 368.031163][ T5617] WARNING: possible circular locking dependency detected [ 368.038203][ T5617] syzkaller #0 Not tainted [ 368.042645][ T5617] ------------------------------------------------------ [ 368.049681][ T5617] kworker/u9:2/5617 is trying to acquire lock: [ 368.055857][ T5617] ffff8880ab07e0e0 (sk_lock-AF_INET6-NBD){+.+.}-{0:0}, at: inet_shutdown+0x6a/0x390 [ 368.065450][ T5617] [ 368.065450][ T5617] but task is already holding lock: [ 368.072836][ T5617] ffff88801c2cf868 (&nsock->tx_lock){+.+.}-{4:4}, at: recv_work+0x1cd9/0x1e10 [ 368.081814][ T5617] [ 368.081814][ T5617] which lock already depends on the new lock. [ 368.081814][ T5617] [ 368.092223][ T5617] [ 368.092223][ T5617] the existing dependency chain (in reverse order) is: [ 368.101263][ T5617] [ 368.101263][ T5617] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 368.108965][ T5617] __mutex_lock+0x19d/0x1550 [ 368.114215][ T5617] nbd_queue_rq+0x373/0xff0 [ 368.119276][ T5617] blk_mq_dispatch_rq_list+0x499/0x1990 [ 368.125433][ T5617] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 368.132343][ T5617] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 368.138878][ T5617] blk_mq_run_work_fn+0x16c/0x300 [ 368.144457][ T5617] process_scheduled_works+0xc3d/0x1630 [ 368.150596][ T5617] worker_thread+0xa47/0xfb0 [ 368.155723][ T5617] kthread+0x38b/0x480 [ 368.160347][ T5617] ret_from_fork+0x514/0xb70 [ 368.165527][ T5617] ret_from_fork_asm+0x1a/0x30 [ 368.170868][ T5617] [ 368.170868][ T5617] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 368.178096][ T5617] __mutex_lock+0x19d/0x1550 [ 368.183239][ T5617] nbd_queue_rq+0xc1/0xff0 [ 368.188212][ T5617] blk_mq_dispatch_rq_list+0x499/0x1990 [ 368.194305][ T5617] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 368.201206][ T5617] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 368.207721][ T5617] blk_mq_run_work_fn+0x16c/0x300 [ 368.213280][ T5617] process_scheduled_works+0xc3d/0x1630 [ 368.219368][ T5617] worker_thread+0xa47/0xfb0 [ 368.224503][ T5617] kthread+0x38b/0x480 [ 368.229105][ T5617] ret_from_fork+0x514/0xb70 [ 368.234222][ T5617] ret_from_fork_asm+0x1a/0x30 [ 368.239525][ T5617] [ 368.239525][ T5617] -> #4 (set->srcu){.+.+}-{0:0}: [ 368.246701][ T5617] __synchronize_srcu+0xc9/0x2f0 [ 368.252204][ T5617] elevator_switch+0x1e8/0x7b0 [ 368.257560][ T5617] elevator_change+0x2fa/0x480 [ 368.262854][ T5617] elevator_set_default+0x375/0x440 [ 368.268590][ T5617] blk_register_queue+0x3f3/0x4e0 [ 368.274207][ T5617] __add_disk+0x6b8/0xdb0 [ 368.279072][ T5617] add_disk_fwnode+0x100/0x3a0 [ 368.284370][ T5617] nbd_dev_add+0x733/0xb60 [ 368.289319][ T5617] nbd_init+0x168/0x1f0 [ 368.294123][ T5617] do_one_initcall+0x250/0x870 [ 368.299429][ T5617] do_initcall_level+0x10a/0x1a0 [ 368.304951][ T5617] do_initcalls+0x59/0xa0 [ 368.309835][ T5617] kernel_init_freeable+0x29d/0x3e0 [ 368.315593][ T5617] kernel_init+0x22/0x1d0 [ 368.320531][ T5617] ret_from_fork+0x514/0xb70 [ 368.325666][ T5617] ret_from_fork_asm+0x1a/0x30 [ 368.330982][ T5617] [ 368.330982][ T5617] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 368.338814][ T5617] __mutex_lock+0x19d/0x1550 [ 368.343936][ T5617] elevator_change+0x1af/0x480 [ 368.349236][ T5617] elevator_set_none+0xb5/0x140 [ 368.354615][ T5617] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 368.360955][ T5617] nbd_start_device+0x189/0xb30 [ 368.366342][ T5617] nbd_genl_connect+0x167d/0x1cd0 [ 368.371967][ T5617] genl_family_rcv_msg_doit+0x233/0x340 [ 368.378126][ T5617] genl_rcv_msg+0x614/0x7a0 [ 368.383166][ T5617] netlink_rcv_skb+0x226/0x4a0 [ 368.388528][ T5617] genl_rcv+0x28/0x40 [ 368.393034][ T5617] netlink_unicast+0x7bd/0x940 [ 368.398329][ T5617] netlink_sendmsg+0x813/0xb40 [ 368.403625][ T5617] sock_sendmsg_nosec+0x13a/0x180 [ 368.409263][ T5617] ____sys_sendmsg+0x54e/0x850 [ 368.414560][ T5617] ___sys_sendmsg+0x2a5/0x360 [ 368.419766][ T5617] __x64_sys_sendmsg+0x1b1/0x290 [ 368.425237][ T5617] do_syscall_64+0x166/0x520 [ 368.430409][ T5617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.436895][ T5617] [ 368.436895][ T5617] -> #2 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 368.445529][ T5617] blk_alloc_queue+0x544/0x690 [ 368.450838][ T5617] __blk_mq_alloc_disk+0x194/0x390 [ 368.456484][ T5617] nbd_dev_add+0x494/0xb60 [ 368.461427][ T5617] nbd_init+0x168/0x1f0 [ 368.466114][ T5617] do_one_initcall+0x250/0x870 [ 368.471418][ T5617] do_initcall_level+0x10a/0x1a0 [ 368.476897][ T5617] do_initcalls+0x59/0xa0 [ 368.481759][ T5617] kernel_init_freeable+0x29d/0x3e0 [ 368.487522][ T5617] kernel_init+0x22/0x1d0 [ 368.492405][ T5617] ret_from_fork+0x514/0xb70 [ 368.497530][ T5617] ret_from_fork_asm+0x1a/0x30 [ 368.502864][ T5617] [ 368.502864][ T5617] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 368.510088][ T5617] fs_reclaim_acquire+0x71/0x100 [ 368.515600][ T5617] __kmalloc_noprof+0xbc/0x720 [ 368.520890][ T5617] tls_sw_sendmsg+0x59b/0x2b50 [ 368.526254][ T5617] sock_sendmsg_nosec+0x90/0x180 [ 368.531822][ T5617] sock_sendmsg+0x1ca/0x2d0 [ 368.537121][ T5617] splice_to_socket+0xb5e/0x12a0 [ 368.542624][ T5617] direct_splice_actor+0x101/0x160 [ 368.548285][ T5617] splice_direct_to_actor+0x57b/0xcb0 [ 368.554206][ T5617] do_splice_direct+0x195/0x290 [ 368.559607][ T5617] do_sendfile+0x52e/0x7c0 [ 368.564582][ T5617] __se_sys_sendfile64+0x144/0x1a0 [ 368.570222][ T5617] do_syscall_64+0x166/0x520 [ 368.575345][ T5617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.581776][ T5617] [ 368.581776][ T5617] -> #0 (sk_lock-AF_INET6-NBD){+.+.}-{0:0}: [ 368.589876][ T5617] __lock_acquire+0x164c/0x2de0 [ 368.595283][ T5617] lock_acquire+0x115/0x350 [ 368.600333][ T5617] lock_sock_nested+0x41/0x100 [ 368.605691][ T5617] inet_shutdown+0x6a/0x390 [ 368.610740][ T5617] nbd_mark_nsock_dead+0x2cb/0x550 [ 368.616415][ T5617] recv_work+0x1cee/0x1e10 [ 368.621382][ T5617] process_scheduled_works+0xc3d/0x1630 [ 368.627485][ T5617] worker_thread+0xa47/0xfb0 [ 368.632619][ T5617] kthread+0x38b/0x480 [ 368.637226][ T5617] ret_from_fork+0x514/0xb70 [ 368.642446][ T5617] ret_from_fork_asm+0x1a/0x30 [ 368.647754][ T5617] [ 368.647754][ T5617] other info that might help us debug this: [ 368.647754][ T5617] [ 368.657989][ T5617] Chain exists of: [ 368.657989][ T5617] sk_lock-AF_INET6-NBD --> &cmd->lock --> &nsock->tx_lock [ 368.657989][ T5617] [ 368.671032][ T5617] Possible unsafe locking scenario: [ 368.671032][ T5617] [ 368.678487][ T5617] CPU0 CPU1 [ 368.683855][ T5617] ---- ---- [ 368.689228][ T5617] lock(&nsock->tx_lock); [ 368.693654][ T5617] lock(&cmd->lock); [ 368.700166][ T5617] lock(&nsock->tx_lock); [ 368.707125][ T5617] lock(sk_lock-AF_INET6-NBD); [ 368.711993][ T5617] [ 368.711993][ T5617] *** DEADLOCK *** [ 368.711993][ T5617] [ 368.720152][ T5617] locks held by kworker/u9:2/5617: 3, last CPU#1: [ 368.726579][ T5617] #0: ffff8880275d7140 ((wq_completion)nbd4-recv){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 368.737846][ T5617] #1: ffffc9000439fc40 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 368.749632][ T5617] #2: ffff88801c2cf868 (&nsock->tx_lock){+.+.}-{4:4}, at: recv_work+0x1cd9/0x1e10 [ 368.759001][ T5617] [ 368.759001][ T5617] stack backtrace: [ 368.764897][ T5617] CPU: 1 UID: 0 PID: 5617 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT(full) [ 368.774365][ T5617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 368.784431][ T5617] Workqueue: nbd4-recv recv_work [ 368.789384][ T5617] Call Trace: [ 368.792757][ T5617] [ 368.795693][ T5617] dump_stack_lvl+0xe8/0x150 [ 368.800298][ T5617] print_circular_bug+0x2e2/0x300 [ 368.805337][ T5617] check_noncircular+0x12f/0x150 [ 368.810284][ T5617] __lock_acquire+0x164c/0x2de0 [ 368.815147][ T5617] ? irqentry_exit+0x218/0x910 [ 368.819922][ T5617] ? lockdep_hardirqs_on+0x7b/0x110 [ 368.825134][ T5617] lock_acquire+0x115/0x350 [ 368.829644][ T5617] ? inet_shutdown+0x6a/0x390 [ 368.834341][ T5617] lock_sock_nested+0x41/0x100 [ 368.839108][ T5617] ? inet_shutdown+0x6a/0x390 [ 368.843803][ T5617] inet_shutdown+0x6a/0x390 [ 368.848322][ T5617] nbd_mark_nsock_dead+0x2cb/0x550 [ 368.853454][ T5617] recv_work+0x1cee/0x1e10 [ 368.857877][ T5617] ? __lock_acquire+0x747/0x2de0 [ 368.862825][ T5617] ? register_lock_class+0x31/0x2e0 [ 368.868032][ T5617] ? __lock_acquire+0x747/0x2de0 [ 368.872976][ T5617] ? trace_hrtimer_start+0x82/0x200 [ 368.878195][ T5617] ? __pfx_recv_work+0x10/0x10 [ 368.882973][ T5617] ? do_raw_spin_lock+0x12b/0x2f0 [ 368.888018][ T5617] ? rcu_is_watching+0x16/0xb0 [ 368.892795][ T5617] ? process_scheduled_works+0x97a/0x1630 [ 368.898526][ T5617] process_scheduled_works+0xc3d/0x1630 [ 368.904151][ T5617] ? __pfx_process_scheduled_works+0x10/0x10 [ 368.910177][ T5617] ? assign_work+0x3cf/0x5d0 [ 368.914783][ T5617] worker_thread+0xa47/0xfb0 [ 368.919393][ T5617] kthread+0x38b/0x480 [ 368.923469][ T5617] ? __pfx_worker_thread+0x10/0x10 [ 368.928591][ T5617] ? __pfx_kthread+0x10/0x10 [ 368.933186][ T5617] ret_from_fork+0x514/0xb70 [ 368.937785][ T5617] ? __pfx_ret_from_fork+0x10/0x10 [ 368.942914][ T5617] ? __switch_to+0xc89/0x1420 [ 368.947642][ T5617] ? __pfx_kthread+0x10/0x10 [ 368.952240][ T5617] ret_from_fork_asm+0x1a/0x30 [ 368.957024][ T5617] [ 370.202384][T16221] lo: entered promiscuous mode [ 370.202402][T16221] lo: entered allmulticast mode [ 370.209030][T16221] __nla_validate_parse: 6 callbacks suppressed [ 370.209044][T16221] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2406'. [ 370.209054][T16221] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 370.255004][ T5715] lo speed is unknown, defaulting to 1000 [ 370.255030][ T5715] sy: Port: 1 Link ACTIVE