last executing test programs: 57.233821545s ago: executing program 1 (id=4651): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYRES64=r1, @ANYRES16=r1, @ANYBLOB="0100fdffffff000000001d00000008000300", @ANYRES32=r2, @ANYBLOB="14002f80080001"], 0x30}}, 0x4000040) 57.221166439s ago: executing program 3 (id=4652): bind$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r1) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0500000000000000000022f1ffdd090001007770616e31"], 0x20}}, 0x4000000) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f00000004c0)={0x3, {{0xa, 0x4e23, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80000001}}, 0x1, 0x9, [{{0xa, 0x4e21, 0x2, @private1, 0x3}}, {{0xa, 0x4e22, 0x4, @mcast1, 0xf88}}, {{0xa, 0x4e20, 0x4, @mcast1, 0x8}}, {{0xa, 0x4e21, 0x0, @private0, 0x4}}, {{0xa, 0x4e21, 0x3, @mcast2, 0x3}}, {{0xa, 0x4e23, 0x1, @dev={0xfe, 0x80, '\x00', 0x19}, 0x2}}, {{0xa, 0x4e22, 0x6, @empty, 0xffff0001}}, {{0xa, 0x4e24, 0x2, @local, 0x8}}, {{0xa, 0x4e24, 0xa, @empty}}]}, 0x510) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x19, 0x3}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x44040) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x10, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000006b8a00fe00000000c708000001000a007b8af0ff00000000bda100000000000007000000f8ffffffbfa400000000000007040000f0ffffffb7020000080000fa18230000", @ANYRES32=r5, @ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvfrom$inet(r4, &(0x7f0000000000)=""/12, 0xc, 0x100, 0x0, 0x0) sendmsg$xdp(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{0x0}], 0x1}, 0x0) 57.097880384s ago: executing program 0 (id=4654): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, 0x9, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x10004001}, 0x20044841) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000000b14010027bd7000ecdbdf2507000700"], 0x18}, 0x1, 0x0, 0x0, 0x20000001}, 0x1004) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000002500090122bd7008f9ffffff0200000008003f8004002280080003004700000008003e00", @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) 56.851417612s ago: executing program 0 (id=4657): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r0) r1 = socket(0x1e, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x9, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x20040}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, r2, 0x201, 0x68320}}}}}}]}, 0x48}, 0x1, 0x2000, 0x0, 0x40}, 0x4048800) 1.973473238s ago: executing program 3 (id=4659): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010101}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000000c0)={r1, 0x0, 0x4}, 0x8) r2 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000001c0)={r1, 0x1, 0x3}, 0x8) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x4a, &(0x7f0000000500), 0x4) bind(r2, &(0x7f0000000000)=@ax25={{0x3, @default, 0x7}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x80) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f0000000340)={0x28, r5, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'ip6gretap0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x40040) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x5, 0x20000000ec071, 0xffffffffffffffff, 0x1000000) 1.969882043s ago: executing program 1 (id=4661): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x60d1}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[], 0x13a}, 0x1, 0x0, 0x0, 0x4800}, 0x8090) (async) sendmsg$IPSET_CMD_DEL(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[], 0x13a}, 0x1, 0x0, 0x0, 0x4800}, 0x8090) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0xd}, 0x7ff}, 0xe) unshare(0x6020400) (async) unshare(0x6020400) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000001640)=ANY=[@ANYRES32, @ANYBLOB="2f000000180000000400000004245fabc2bca51d186015c77b633aa22d6a1eabfff581594c5be63bc93502082204100ee3e8ee16c99806c213670e5b3dde3d0d8f093d5fd16c0d08e6130cde79385af2f556b926b442852bf69ee26a527a5e7792ee92ecc154507855462fb212b10a503b6b8d9077b2277455f09009c6c420a5047363263c21f7707db5a7ddff3f", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004004}, 0x800) (async) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004004}, 0x800) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x4}}]}}]}, 0x48}}, 0x20040084) (async) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2) r8 = socket(0x1, 0x3, 0x0) r9 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r8, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newchain={0x34, 0x64, 0x1, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xb, 0xffe0}, {0x5, 0x9}, {0x1, 0xfffd}}, [@TCA_CHAIN={0x8, 0xb, 0x1}, @TCA_RATE={0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) sendmsg$nl_route_sched(r8, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newchain={0x34, 0x64, 0x1, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xb, 0xffe0}, {0x5, 0x9}, {0x1, 0xfffd}}, [@TCA_CHAIN={0x8, 0xb, 0x1}, @TCA_RATE={0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) r10 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r10, 0x1, 0x41, &(0x7f0000000200)=0x237a, 0x4) setsockopt$SO_TIMESTAMP(r10, 0x1, 0x3f, &(0x7f0000000700)=0xebb4, 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0x10) socket$nl_rdma(0x10, 0x3, 0x14) 1.96944051s ago: executing program 2 (id=4662): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00006000000080002000500000014000600ff01000a00f2f3f31f000a0000000001060001"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x83, &(0x7f0000000800)={r3, 0x1}, &(0x7f0000000840)=0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4040000) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r8, {0x8, 0xa}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r4, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40085}, 0x4040) 1.968108664s ago: executing program 0 (id=4664): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[], 0xf8}, 0x1, 0x0, 0x0, 0x4000880}, 0x400c084) ioctl$FS_IOC_GETFSLABEL(r1, 0x800452d2, &(0x7f0000000100)) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030e00000027bd70000000000004000900a800000001d78771b90bd8a3b4914783c5432d69ca5b9538a900000003000600000000000200000000000001000000000000000002000100010000000000031600000000030005000000000002"], 0x70}, 0x1, 0x7}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000080), &(0x7f0000000200)=0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYRESHEX=r2], 0x0, 0x2, 0x0, 0x0, 0x41000, 0xb4a02fe0ce239f83, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) socket(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000004000070127bd7000fedbdf24037c00000400c2800800018004001d80"], 0x20}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) socket$netlink(0x10, 0x3, 0x8000000004) setsockopt$sock_int(r1, 0x1, 0x28, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r10, {0x0, 0xffff}, {0xffff, 0xffff}, {0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x99}]}, 0x2c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x2000800) bind$bt_l2cap(r6, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r6, 0xec) accept4$bt_l2cap(r6, 0x0, 0x0, 0x800) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0x95, 0x0, &(0x7f0000000580)="630b008646dc3f0adf33c9f7b986898142755b7c985e95a158299921573c84754202344dc799d57ffa9764e1b54dd2c9d30a6242ebc5c1f349e94d776548cab378350ab91455a3da8420f67f8189852a7c50454f2ede1c46feac8442498b338e4c1cefae97d943ba2e7a5d25a3e7c56d700e8df72222cab6f3fe5d27f60de78c700ec73bd8e0dbd8746b163c082826eadb3e08a07f", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x50) 1.947179656s ago: executing program 1 (id=4666): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = epoll_create1(0x80000) ioctl$NILFS_IOCTL_RESIZE(r1, 0x40086e8b, &(0x7f0000000040)=0x9) r2 = socket$kcm(0x2, 0xa, 0x2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), r3) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r4 = socket$packet(0x11, 0x3, 0x300) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000e9ff0000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b70300002bb91a008500000052000000bc0900000000000045080100002000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000bf2700000000000007080000fffdffffbfa400000000000007040000f0ffffffc40200000800000018220000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7050000080000004608efff76000000bf9800000000000056090000000000008500000000a00000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000180)=@nat={'nat\x00', 0x670, 0x5, 0x460, 0x220, 0x2f0, 0xfeffffff, 0xf8, 0x2f0, 0x3c8, 0x3c8, 0xffffffff, 0x3c8, 0x3c8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'caif0\x00', {}, {}, 0x6}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x40, 0x6}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x3]}}}, @common=@set={{0x40}, {{0x0, [], 0x0, 0x1}}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @gre_key=0x6, @port=0x4e24}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @gre_key=0x1, @port=0x4e24}}}}, {{@ip={@local, @empty, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00', {}, {}, 0x6}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv4=@multicast1, @port, @gre_key}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4c0) setsockopt$packet_int(r4, 0x107, 0x1c, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r4, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd000109000450f65274e717dc8111ac000000a60c6eec00be00442ffffe0000000000000000aaff020000000000000000000000000001042088be000000030c000800050086dd88a888be000000021609660501000000000088a8080022eb00020000200cf008020000000000000200040000000000002ecfa8d4830ef0a068bbd62a1b6a7d1f647787747c1118373d2d2351bf8332fe5997d23c42c006d7cfb0cb2654a198fbdadc042f5ca24dc3ffeca94de8fd6765829be0a725ad9a"], 0x7a) 1.944820349s ago: executing program 0 (id=4667): ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000110700)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x7, "e81e98e4abedff"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000111700)={0x8f2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x5, "dbc312f1a0d3d7"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000112700)={0x0, 0x0, "4e1d39f458a72cc6d7b339cecd8d38a19b381a0a50d26b5fb3702d3923629562bcea65f72907462847ad94953abbd4cf0702dfbf47f5aaca1eaa8ef19696b675900d28e2d217f8db90c553457f14e72f038c8f06492f860e70d06e1dbfc166a14bb795076f6ab2d08c62ed339723a6582966f3b112f8f5ecb8ddb068e7627f2c1ab8a6c6bb9e7daf39298acc4150224a869392a37f8d03cc457595eca675659d508edfb341a411938982bbda681a566de453e309963e7049ef3c1f5a95399ba062dc7a9f74e93c3e497dcf58eab8641508cecbfec6b5b1d2f322d371c14e1dacdc20507837e17cf1c384146f0c440f4cff1795f02b33235e45a2903ea78272c2", "1263d3a87406d9f7679514d698499587a997fc23b2fd427d29c5d5073e239beca83c7cd7ff382bfdaca4a7f7ad31846bb55179d908cf09aaf45296532ee1c6d34ffadc07221c15c32763561fc2f39d2e4f29adf13869d2869b2ae1c0c0d7b4dfce6406175e8db9f3c529d94b5a64aa0912dfde9e902a90f1156b7be271f96ca203d1f145d3b98e177ec676d4a195fc4e02b56f34bcc19578f7ac1e6c3b6745abc7fa20f2541169efce60b00fb6f5d07b89253885ea492128820bcf3917bcb8c33ca63dbf1ec6eac1b524d92632e9400001eb73e9a1d5b1eaa85058d15d5c9e2237350f891b9d485b2fb6932d65e886f1423fdf07e9ec09e2b76ab57d36a2ab97dd53ca1307a24d64c3220ae8a537b5fb4f10bdc5941d1fcc88b4cf80e89cccfc2d483e78d7644d6761fe300936314fd88783ff8fc8a00c026e0f92b24df06ef68360104584464eedb38e72a89ec307801b8c6f8ebc320a51b1218ce16ddf2d9186f75574c9eca3a0542962825cf9f1be2fa0cf65cbcebbf21628be3b0744caa133192506e63ebe262bd1404be973d92ce9f87bbc647d4880ad147ceb65afbedf2019ad4bc48214daf70c944d6fc7f64cf4f6812e63258086ae8fc7525a6e8bd7eaf4d709124d3655bfa6b228627db069d6359b2978fc7752a817a30541ea9006bca0692323cb5f7e2bf872a258f1ee42a1c438dbcf91323502a51c307df4c83a33e65173916ba8e34bd1c023618a86b42e1bc4140344c2a7f9fcbeaa4b82b15470394dfb0e11ec77b64018e589b768cac3e3f9116bf938bf28b01bdde65681c71068fff0534db47b0fb31fdfb265865f22b6836e8a27d78c94360134fee4861ae4ef34e395952a71e7c6f7252a0367d629821a08720c6acc652a30a1a6f8e59afaac78cf9df6cb6797be206c6d8cb07ff3acf22ed5efe8b279c2246f2cb0472826c5009dd97a4170e404333edf02de0d08ce0be6b59609b005d8cc542423a7c4b1fa0edfbb1c1845af87da21b605779db7c8926833a33e4cc13b882322cf1fb33ac77a6fe30613f5181eec449b3d3892bc2cd426e4b843572b4965ae099e9cb53cc1b78ded38810095b2b4d2264e6f52606c6c3cbdb2942aef1b0ad7df194dc25a6bdae2daed0577ccd223f0948c82b33fe422eed0c0fc94c80e12764127d99fffd26c14aeb4556876bcdd81c56c48c407f06fe8dd5c306be5c53055815dfc63b2ecca8a11d88b9aaf9e1fa76bb3e0d52aa1b5c900b462b225b646dfc2f700951e68fbf26dbf73cbcb953366d2f5d16d1dfa3c416fa9f93a7729716d5ddc8333df04f1777524dc9c41eb6bc332343163b59654bcd0e3ccf29170e6a11e0c9464045d42d4d258375dd9685b294e16e2d665805fd9ad770f2f6e6ec3e26680a6aab7ddcf79a6f1c96a1e01867197fbfb08acb684dfec2b87c10a950a51f35a1c59ac697799a8f9933b63bf96d57600ea90acbdf01ab26dbe2f8f5c040f41b225594638757e89f40753d0a2436d548f8323f7f69553de523fae8f6fd864db24923f53a90746b9303f278d3ab06a6830697b6438ae3ba6e0e9580d92ec5b768da77cab5963015485407b3ca6e891e007122a7e7601cdced48085976d496b291d08500e789dc4daec2c18f23e9ccf972ac1c378177966eca57f9c7be77219bd54bde1d51cea8f8e232509ee960923d2e33ba5ea62737c9e4cb070d2422069a7b84e1552ea79e952fa54b3b8889611a485e3bde71f65b4e03c259d870909022134b0dc83dd4ffdcf79dea6ed8eda316e16009a56aa0ca5688ea4422c4270b222de2422ceac535d5a2d9b6bc53ed4e954d2672427b74f2d30b1a999143014baf91dc49b8bba9cab37cbb36eb76a7dbb14b850dd22d9a0a921c840c88e59c6653d7343beeb72657859f24858cd7bb474a214b74e6b28cfebfffd876a70f3e8ba0804e6a63c1bc59b7327e17e0bc16513a9e6df07e8189620b3e8b02f96477dc8ab2eca6d955959dbbad44c4c57bb5ddef7acd1473431666d84d681f42604b5def770cac196e42c271a420df558596938860618c5d24505c8ebbf8f0bce1eec8a81cf46ee92b4ed84552ae7600ff2e98c1d878e79b707b37a9eb4ac7a6aff685808a41b0125e311d3745407f133bb70dcf7f3a1cdd7bf1fbea7c9b455d05ffc370df14adf9e482181c9442ae52e9705a3e75341d9b82369234127202ddcacdff2f5e8376c82698c2286670f8301705962d1dcf42a1ceb944a2247fa21dd7b4ce43cba6207baf252469aeb325eca15cb5d60387cef74705252a4e1b352edd7cda8cebe6d63b8e2c277e59239eb2906c95fbaf29592632c367809325771db10d0a6c5cf3f253f5e971f15bb3c81d1dab5d2572e52c1632bac372efa83dbbb301f390289eb25f13c77209ec4fe0e2fd76f1d0e61eb2efa441fd308049a1a8745b5dfc62e82c41e35465a4e2b3accb2b7b0cc9294f9c5659381bc58d6af7ecd595d13aa25d89df154cb8e67cacd9eb906cfff82ca6893199f49fd78f4f083d8a6d52d30b4d477eac14eaee2cdd2a2ecd983ce1b4897344211c5c0ce7ab5fd274e01ad5b366994c3320dbc1d95dad8b572bd8378d9a61f8ce81e6d5eac05978d0b727b9781b977086be963c301ede8b0b7acbbfa3c55b9b1c697bad43e2e5ea13ac8ed3c855a4b9bc8cdac7f404c7990c2c1227a36e3941b0710f2298f2c4e1b3dc1c27c7f8e214d00d86e43bca00fdb58cbe45e15ac62ffdf07b8e75584cbda973ff2469bed3d34c9a3062a765250576fa4c14dbad8564ec027771e252e6e0118927721f507284ac0e092fbe982a6dced585ec5a5356adcb556fa43fe5bd114307f5cfa5c018f1fbe6f3c90a422073a2b3754bf7b6d0ccf58c25065e8bff3a36ee5c6704c8bfe7746c6644086e949dc41de5c344979a6bcf08a3a6d72d9a1c1d864049d623729e92f961beab5dac5ef11db1e35eaaf209c76acab70ca1045d81ecac52893dacb029dbb93c1669d3853fde8696e394f9037272a912d7856be48acefb9ad451cf402d24861ffff245cf6a7ddaf407d5e126e05ec0ed4a06d282570b5b70ab1a366fea72a965a39122dbe75a0929f70a9aa0ce14afbb53ede7d8a273d089fc11c67545126a1a419b44ee0a6f5a02bc38a61ad861b47e7ddc9402825187380ba1d903910370d0957105775ca774d6ab7876b548138e9c4525a5eb6ad931d2e05cb75c973d46bb67f802dabca02d78b4c1e65bacbf69d371480de3759643adeaaa15e484778601463f6eecb128bf3285b7b86439619cf68daa0718f9120a48ab60e98dc034ad866a73e8b5871a5f69997279cbd6bebeff19934a71f4d2485440d87a174680514763d69c94ca71e4c8f9127f46a4b9b3487b2ea75de282b181e43b03a5286d50c5eff1a4297cb7b0b0244795e06c89316dbb5fc4cabf75439e5a91222457bc10aa4ae79239be2f42d90b1d02f4f1d1488425fd09f3931f1371458e8b116f5450efca3278e3537e33745f57ace2eeb0cfbe0d2785689a9933125850e26297b339b8834565a02ea4792a9644f39984902619c36a62c95378df3ccf9d8d46c2def7ca5656236b78292f232db67ca54d02cbcc13a4b5bc5ebbd4972788a532e5ed220148a64d74edc1bb1f5b701ef1e70be978543d1f8065d8aade83084c546232915b8eb807d5ee7f0e64abf21ea4d33fe8ed7c17853bbd8cd9f539b27465b2ca77c9414a06ed257a1e400b11957f936b96afc35310c38316e8f991b909e3b31b0dbba70fbc6b6bd845f6298ea6d2bdcc0427f38a0db1bfbcf186d3a6e638e9ce37dccb57bec5d86158a2395c9ae99f12732d4b4f4514165a81cc16b7dd2cd0ab0d6efdf97239d219b607164e81fd94086728653616f3a25f1907d62e97da1764c0bfa042f6efe6758d4af84987c2b158a073bf55d7ccab7a152434cca4de1c2e05c9aaf6364a135ca2c6476a3e5b6b728a5bb83e2ec5ef48a31b44f43bb1c7b72d0d676892c01ba8be80cfdd938da4aa6b9fedecb8dfc664f9c6c13473aff567dc8ef969a47c37daaf465709cd9477e0cee681349372af2051feb1635ea5e229fb40d58ee241dbeaf58ec7200e21251cadf9014f2d8c83792808fa110629e7297cecdf323fc1fc42597ea14a1d335550019b65be28b58d7620e157031c77176b527eabec3f84cc0f168b095d62bce7a8cd516005d9a39820b5997ab363e169e059d703d7e40f860b238ade860e81e693f3888d955764bc83ab9a3219f3aa6ae4de571a195f83bb530f3d4f7c1ef45348d28c1f750da6552a03e7dc1a6ddf8ec1f2eb6b418f85fbee53203137b1a6bf54b23bb6a4e9c96926dde844c28b9dafbc62448e2121824412cd0262e1d71a7287652a34fcd13d594ebb16d1a2302b40de52eee5538cd7744f8f900bb4ce08401b81afe95c2307e507177ee3e45090637fab253ca4a01b9bce538fa53e18aba8adf61ef59b3b30fdb0722d077c52f40e472df69f5ec41b5e3e8873791912ed35c091d119feb2a5aaa710ec76fdae8f75e6ab90537d8417248beacce375b7ffa6f048ce863117fd11a604504d7dc315775f620e9b76f30f1db670c0bb1023075cf0802d2a14ab77167ef4c543d879b19ce45f9a884a00c33d0279c528e8fca1667f0cc1d117cb1f40ace9e2d425a4f8c29b15add3ce3ae607bddc3d3476f3fcf1f1ff3e3aa055a5d08dba79d80e549241bcc3b02538eebbe31f2de436c6c01fa616e4c77aa524c3e15d1a93210acbee8f4337157d2bdcb7a2e699a3506974f183e1520234bd1038518963b45cb092da3655e52c962fa6465487dd5ee9123fbc02edcb53636b7a8f543ee99873d0ffd052d5bb5d77985b56d9ac31320a9af9f79e69e70bd3482e8a80480559a7fcb90855125f9b3ace6aea7059fd77e64482266044dd2cd4f6e03347867aac30321b9a2992412e5d6872f3d81734cb704b9ee8322558734dc903767835bf6ae1b14a1a20c9dd5f5f69e697b96feda61f611bcf01ae8fb548b0ff8e495df3d0d83550141cb8eda8ae10ac971e5737e33046d28ca19ffc85b3bd61d316bd5746f0a8686ddd5bc8f3162ebfeba10418990fd6803b26353541558c9dab4f8eb9600e2a712af4746dfed0da28d026e08a6a0f300f2f2761cf468a8ac231e1a6ce65bdce38f3c386dccd53c4331c26b4b994fc1e67423ee881abd18ff90f6d3270221164bfdf786532498484fdbe9211415c8a5afb6257b7ffe04a48c5b4a594c312e44ac63ad5e158cc5f602fa2ca0fd8110e65f50923d6b238e76dc64ff187c8d15c46d4e5961b6a19c175027c019b062fda48ddc4381fb136b988a960a44a343c47c34fad3f502be7c201e451b500b93883f4ae7fdac29af74e120f914eca4c5493bde081b5ad4ed332dcc8241a242ae7568034f"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000113700)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000113900)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000114900)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000115900)={0x0, [{}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "488ef106a320a3"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000116900)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {0x0, r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r20}, {}, {0x0, r12}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r19}], 0x1, "f45eea8aed62fb"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000117900)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000117b00)={{0x0, 0xab7e, 0x6, 0x4, 0x491, 0x5, 0x0, 0x3f5, 0x80, 0x80, 0x8, 0x4, 0x1, 0x1, 0x1}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000118b00)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r24}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {0x0}], 0x6, "7fc27c7dfa4ed5"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000119b00)={{0x0, 0x10, 0x8, 0xa90d, 0x35, 0x7, 0x9, 0x10, 0x4, 0x1, 0x0, 0x6, 0x7, 0x3, 0x2}, 0x40, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000119bc0)={0x5, [{}, {}, {}, {}, {}, {r0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {r32}, {}, {}, {}, {r33}, {}, {}, {}, {}, {}, {r23}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2, r10}, {r29, r15}, {r16, r17}, {0x0, r18}, {r21}, {r25, r26}, {r27, r28}, {r34}], 0x3, "c1650c01f470c2"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000116900)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r30}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r31}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r22}], 0x1, "f45eea8aed62fb"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000117900)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000117b00)={{r35, 0xab7e, 0x6, 0x4, 0x48f, 0x5, 0x0, 0x3f5, 0x80, 0x80, 0x8, 0x4, 0x1, 0x1, 0x1}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000118b00)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r36}], 0x6, "7fc27c7dfa4ed5"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000119b00)={{0x0, 0x10, 0x8, 0xa90d, 0x35, 0x7, 0x9, 0x10, 0x4, 0x1, 0x0, 0x6, 0x7, 0x3, 0x2}, 0x40, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000119bc0)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r37, r38}, {r39, r40}, {r41}], 0x3, "c1650c01f470c2"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000c0800)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r38}], 0x9, "c38952bb2ad6f3"}) r42 = socket$nl_route(0x10, 0x3, 0x0) r43 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r43, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r44 = socket$nl_generic(0x10, 0x3, 0x10) r45 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r44, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="340001f9", @ANYRES16=r45, @ANYBLOB="29062abd7001ffdbdf251400000018000180140002006e657464657673696d3000000000000008001200fcffffff"], 0x34}, 0x1, 0x0, 0x0, 0x104}, 0x44004) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r43, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20044000}, 0x10) close(0x3) sendmsg$nl_route(r42, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010400000000fdffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000100000000000000128009000100626f000c00028008001f0004000000c72c27d98bcd6ab120d93b9f6b51"], 0x3c}}, 0x0) 1.942358015s ago: executing program 1 (id=4668): syz_emit_ethernet(0x3a, &(0x7f0000000000)={@random="461a97e48feb", @dev, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x3, 0x0, 0x2, 0x6, 0x0, @private=0xa210104, @local, {[@timestamp_addr={0x44, 0x4, 0x4}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0x0, 0x0, 0x8}}}}}}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x1a8, 0x19, 0x1, 0x70bd2a, 0x25dfdbfb, {0x1d, 0xd601, 0x9}, [@nested={0x50, 0x12, 0x0, 0x1, [@nested={0x4c, 0x30, 0x0, 0x1, [@typed={0x14, 0xae, 0x0, 0x0, @ipv6=@mcast1}, @nested={0x28, 0x14f, 0x0, 0x1, [@nested={0x4, 0xe9}, @typed={0x14, 0xb1, 0x0, 0x0, @ipv6=@empty}, @typed={0xc, 0x1f, 0x0, 0x0, @u64=0xf33}]}, @typed={0x9, 0xec, 0x0, 0x0, @binary="9b3e15cc8f"}]}]}, @nested={0x144, 0x6, 0x0, 0x1, [@nested={0x140, 0xfa, 0x0, 0x1, [@nested={0x13c, 0x13e, 0x0, 0x1, [@nested={0x138, 0xa0, 0x0, 0x1, [@nested={0x134, 0x61, 0x0, 0x1, [@nested={0x130, 0x6d, 0x0, 0x1, [@nested={0x12c, 0xd1, 0x0, 0x1, [@nested={0x128, 0x112, 0x0, 0x1, [@nested={0x121, 0xcd, 0x0, 0x1, [@generic="42110f1d6f88ff52f41c6a703875b814ba2c48b3f0cf607256b8d243a3227bb11571d268c41187452c28663be3d9e39505157b48b9212b07ca7b4686a2a55f4f80cbea3f494421c794c12d35f89faffe1de6605dfada605ad7c5d1212f30e4f92cf2ae0e57c77aa34e47801d546b04458c2f6011fb906b6ed5217cb687ba4ddfe78e78b635fdfc513245c2cf7b69f9218d14bb4039e9e3c4cd1c649f4cdea528557d814da783fd6a399fb44d9ceae7ab2e046a74094f015f2aad655abdd7d7bd884d9eacfdffb8d690d970427074e38ab80e3fd67c77f2ec7fb214f91cdf12924a9bc02b01c5e2618391a7ef7c9a44cdce8b538dc7", @nested={0x28, 0x28, 0x0, 0x1, [@nested={0x21, 0x3a, 0x0, 0x1, [@generic="764e9ef8fa02ac8a1ec86f999149427d11f34c130c18bf0d7667bea714", @generic]}]}]}]}]}]}]}]}]}]}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x5}, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8a00fe00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbf0400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r2, @ANYBLOB="0000000002000000b705000008000000850000005e00000095"], &(0x7f00000002c0)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x2}, 0x94) 1.94176542s ago: executing program 2 (id=4669): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000100)={0x0}, &(0x7f0000000180)=0x8) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x14, &(0x7f00000004c0)=ANY=[@ANYRESDEC=r2, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000001c0)={r1, 0x9, 0xd3, "27b51f8f1f8a50864c908fbc356532ce70f40a7b75b44620ce1c3bb43053f6aa806ad7d7a3cea7090055beb195977c1edae0e6c0396c112c7ffd0b010ec032a7d9ae88455082bd17fc95d66b48a8068e718f8a6a8dd53f3b77971cf49c53ca404e81da9fda87ff777d2c27743252e76a3e3c1668b04bb297ddfd0d6906c81ce8e166730da86a06c08183e6b2cd40cf8fccd131ba2d3b1251fd7e6f8e132aad43936681eefe9f9f2c2568fbc0e1faa6983ef285c3e1386397b6fae578dc137ca05aa158343c4cecb64fac21870146cfa1908621"}, 0xdb) (async, rerun: 32) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x49920d862a92153b, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x441, 0x11001}, [@IFLA_CARRIER={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c810}, 0x0) (rerun: 32) 1.93286285s ago: executing program 3 (id=4670): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r1, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000001700)={0x30, 0x0, 0xb, 0x5, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_COMPAT_NAME={0xc, 0x1, 'NFQUEUE\x00'}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x24040800) unshare(0x20000400) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@map, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) unshare(0x82c40fde7f9ea28f) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x7, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000300)={r5, 0x2000000, 0x4, 0x0, &(0x7f00000000c0)="3a1d5bd9", 0x0, 0xfffffbff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, 0x0, 0x0) sendmmsg$inet(r4, &(0x7f0000001880)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)="0a6ea58d6228d8465b159e2424b8ff9911fe6cdb30318d43e279513641a27c8f0d56cb29f637becc8ed81426b052082f45a42ee732bddce4a1477de081b96cb0539b43715c71", 0x46}, {&(0x7f00000002c0)="e07f974018cbe7c03c6afd134f662f1aed24ea0652e40b26d7f3a5e9bb15ab9c3e8984d8207dc509bb", 0x29}, {&(0x7f0000000340)="f68a76e8", 0x4}, {0x0}], 0x4}}], 0x1, 0x20044840) sendmmsg$inet(r4, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000bc0)="4490137c227c56ee66c372f3105eb186dd8062fad2d5b5bfb0ba068e74a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9afda48e71255a747b6d03097385fb05cf8db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac539985bac8624c50b527c68b0ff250261953f2da79a78104c2d0000000086b124945aa9ab7581ebd385fb61210c410d799168ffc4b64677af924affd442035db81e18c2d2462d0bb25fff9d3b1ce903597992b2a4", 0xaf}], 0x1}}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000001500)="24acadd7f04daaa04e88680351d9ce53f67fd2afefe557d4bd561f02df2570f175951d4bdd97ec433ec583c79fa668922a61c8662e0890ce06996f5ba401e582dfb5197822bee50c6cd4b3a6f9d14f1fde9b1698ad6847d4fde0458282ece396a1e212cd02e6fb62599df5ecb5984843ee04e96eb26fa2a8100a0b7b2d032fff965485ded83b39d6c9835416a8db5414a6c54101693e6b05e652b49fceaf4a0cc2b7898034ff0eb5150b3e85b9ff5658ba346d0b6b5a3a71eb084311606cf6b8ccf7c45a79b319a201e9c5ae9f0aab5c4dd7a77de7f5ae2edb307892dbfa8377446d8cabb9302b27250c66ddaeb3988933df044b6ae4570671cf861484b9124827dbe78a0388eecac9e6ad371287ca014fa658c6f1308b046b2fc0cc3d5b8ba48f3b1319d5976bb45f3c630f01c77b93f07fe2b304a98383258a37791da00145e24f619c5dd07939c39212ca7d8421dcf50ab703f86dacf4a4159a123d25a7a9ad2319a876af43da4cf86b0f6a7f261562e1b10681a71d941a5e90031452e37f4a616b85fe6b48803cbca2369565be720ef5fd1e6326234c34f6e13ba39f9460acc68e15eef508e402b29e452883c90b50b04d66ad07cb689d31426147a965dd4691519d844bfc83d830b8c5a679c41fbdcc2d16b3dcecc1f5be156f96fa2a315c68bfd1ebba95e9de0e3c", 0x1eb}], 0x1}}], 0x2, 0x2090) socket(0x26, 0x5, 0x8) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0xfffffff6, @private0, 0x9}]}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000000c0)={r6, @in6={{0xa, 0x4e23, 0x8, @private0, 0x8}}, 0x80000000, 0x1f4, 0x0, 0x0, 0xce024d}, 0x9c) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_tracing={0x1a, 0x1c, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7}, {}, {}, [@map_fd={0x18, 0x3, 0x1, 0x0, 0x1}, @cb_func={0x18, 0x8, 0x4, 0x0, 0x4}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @generic={0x7, 0xe, 0x8, 0x400, 0x7}, @map_idx={0x18, 0x6, 0x5, 0x0, 0xa}, @alu={0x3, 0x0, 0xd, 0xb, 0x2, 0xffffffffffffff4e, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000340)='GPL\x00', 0x5, 0x0, 0x0, 0xc26b1d180d59dd16, 0x69, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x5, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x222cf, 0xffffffffffffffff, 0x7, &(0x7f00000003c0)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000400)=[{0x3, 0x3, 0x9, 0xa}, {0x4, 0x4, 0xa, 0x6}, {0x1, 0x1, 0x5, 0x1}, {0x3, 0x5, 0x1, 0x7}, {0x0, 0x5, 0x2, 0x1}, {0x0, 0x2, 0x5, 0xc}, {0x1, 0x3, 0x10, 0x5}], 0x10, 0x6}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ba000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006c00000095", @ANYRESDEC=r0], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x26, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r8 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCOUTQ(r8, 0x5411, &(0x7f00000010c0)) getsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000480)=@assoc_id=r6, &(0x7f00000006c0)=0x4) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f7", 0x1}], 0x1}], 0x1, 0x40800) 1.931548572s ago: executing program 4 (id=4671): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="d00000000002010400000000000000000a000000440001802c00018014000300fe80000000000000000000000000002014000400fe80000000000000000000000000002f0c000280e0fe01009800feff05000340000200003c0003800c00028005000100890000002c00018014000300fe80000000000000000000000000002a14000400fe8800000000000000000000000001013c0002802c00018014000300ff0200000000000000000000000000011400040000000000000000000000ffffe00000020c000280050001"], 0xd0}, 0x1, 0x0, 0x0, 0x20008004}, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = getpid() close(r0) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x1c, 0x3c, 0x301, 0x70bd25, 0xfffffffc, {0x7}, [@typed={0x8, 0x3, 0x0, 0x0, @pid=r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200448d3}, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="2fca6ccc633758e62a368f14c98e51cc272039694d6d0ce723b0b32b655ba79d1d04484956b7f1d3a9520524a467908bdb128f239690f8d7eb6ffe4ffd222320a5f1a201b88d9a288b27cd531e095a2158d3354b02d0eff72dea647da85b067a733057c9a44e393eaa6aafe9", 0x6c) 1.860534379s ago: executing program 4 (id=4672): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f00000005c0)=0x9, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r3) ioctl$FIOCLEX(r3, 0x5451) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010025bd7000fedbdf251200000018000180140002006272696403655f736c6176655f3100000800070002000086e34ca211868e2700"], 0x3c}, 0x1, 0x0, 0x0, 0x4008087}, 0x4e040) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000180)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f00000013c0)=[{0x0}, {&(0x7f0000002380)="1c393502dda1a67d93b1", 0xa}], 0x2}, 0x9cdc2384056f0939) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0xc1}, 0x0) 1.79295031s ago: executing program 2 (id=4673): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r5 = socket(0x1, 0x803, 0x0) socket$inet_udp(0x2, 0x2, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x403, 0x78bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c0000001000039032070e3db862ca0000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 990.906951ms ago: executing program 3 (id=4674): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="f4000000", @ANYRES16=r1, @ANYBLOB="cd3c000000000200000001000000ce00010043ecf8a077157cd8bc73e1b93314cdcbb6b9bb84e5bcdb7f9af2eacc913a7640e8332d1daa67516c7f094b740c631f175dd5d0f0a8ebd2679204020b006f64e62cd3404917f3be657330adc6bf2f2ab6286f91741293554bf4406edcdc8a3779814659bebb63d2c301a5e2568cb3696d7ed256da47bd6246c86e86ac9cfbdae22622b43a13e9096385b4cb17bf6d8436e77f709e436462ad3ba28f73bf36e8e358673326e220d60a9d3d0600e5dc9007e74d9c3c932faf89062b965db52beeff385e442adbb8d87480d40000080002000500000006000b0028000000b71c6b81171efba9dc32d2659f468405d80e7f3d35ad5e3d485bb0213c0855b7fd8c979ca408d075388dd0483640d881d01ec9249ff339a83794e08e47bc2122192962cd8d7fca7f09861061e0939752c7338b0b83a45452c9f3abb4e9e10147e90d6aba24835a3383830c4d24895c5202611e88a7c0a99ff34d15842bde4d9fb822ce2e911b4df9c519c3a3d6183bb8a8044fc940b4a25cd2983691b8851835b7c94428bb7c11dcd8ab29428a27c2d5b05c19d1a3a36eec9da416f9ad756ce84cd112b09d7519e3f5e441ac43018dd2c5c48634ff1f1276e6911b268f643206b189b26a71f34f691bbb3f95658a657271b3e9aa17277ce8cd7957"], 0xf4}, 0x1, 0x0, 0x0, 0x20084880}, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0xb0260000) r2 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$sock_attach_bpf(r2, 0x29, 0x22, &(0x7f0000000100), 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0xe22, 0x0, @empty}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="28000000100001082c5c7000ffffffff0000000001f01befc13ca224f82dcdea6413154165ca3fde5988a634054a1fa330382113e00ca382d139a071765c6c8d0b882421d346c60d4a0f988bc24b6d3607635361cc08e188afd93dbf0deb801c86fd0f1643f5cb4f58e3d8a4930aca7d2c1f6a6cc7401565949408ff29e4105cfad40af8b2c25d1bfd593a010b4ada00027e176995eb45e6d8194b132996ebed2bffe41bdac6059ba413443786ba9644b3006d5e6920", @ANYRES32=0x0, @ANYBLOB="fffe01000100000008001b0000000000"], 0x28}}, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r6, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r6, &(0x7f0000002040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000017c0)=""/43, 0x2b}, 0x8}, {{0x0, 0x0, 0x0}, 0xaa14}], 0x2, 0x40, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x0, 0x3, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r5], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$IP_VS_SO_GET_TIMEOUT(r8, 0x0, 0x486, &(0x7f0000000340), &(0x7f0000000680)=0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYRESOCT=r2, @ANYRES8=r4, @ANYRES8=r7, @ANYBLOB="bb7c5954796dda2897bcead01c9c76368a97accff4e8e5ce92e73d270f690bfac4775abee1d6ecf1bf28c3649be4cca36f8bb37a5f5d8413ac951cb39619aad31f9b4d2aa74cce7a34510133401af4cc2f3f4dee10777e613e4ce071a316cb8bb8445073e0658e4d85781baa174eed389dba51bcf72136b235758e9c2c5c70e8c49e7c", @ANYRESOCT=r5, @ANYRESDEC=r6], 0x0, 0x26, 0x0, 0x1}, 0x28) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x2c, 0x24, 0x2, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x10}]}, 0x2c}}, 0x0) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) ioctl$BTRFS_IOC_BALANCE_V2(r3, 0xc4009420, &(0x7f0000000300)={0x0, 0x2, {0x10000, @struct={0x3ff, 0x32}, 0x0, 0x4, 0x9, 0x6, 0x7, 0x2, 0x10, @usage, 0x1ff, 0xc, [0xfe, 0xb8c, 0x6, 0x6, 0x1ff, 0xffff]}, {0x0, @struct={0x8, 0x9d1}, 0x0, 0x975d, 0x1ff, 0x4, 0x0, 0x0, 0x40a, @struct={0x6, 0xb2e}, 0x7, 0xe, [0x2400000000000000, 0x7, 0x24b, 0x6, 0x1, 0x5]}, {0xcc, @usage=0xffffffff, 0x0, 0xd, 0xb4a, 0x6, 0x7, 0xffff, 0x4, @struct={0x10001, 0x5}, 0x6630, 0x6, [0x2, 0x40101, 0x6, 0x196186de, 0x57f, 0x5]}, {0x3, 0x9, 0xa489}}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000004000000b705000008000006850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000c000000638af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r12, @ANYBLOB="0000000000000000b703"], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x4b, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 910.424199ms ago: executing program 4 (id=4675): ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wg1\x00', 0x0}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) pipe(&(0x7f0000000040)) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6(0xa, 0x2, 0x0) (async) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r4, &(0x7f0000000400)={&(0x7f0000000040)={0xa, 0x4e20, 0x7a, @mcast2, 0x9}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="300000000000000029000000040000008402ff02000730000502000304", @ANYRESOCT=r4], 0x30}, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x28}, 0x9}, 0x1c) (async) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x28}, 0x9}, 0x1c) vmsplice(r2, &(0x7f0000000940)=[{&(0x7f00000000c0)="e6", 0x1}], 0x1, 0x3) splice(r1, 0x0, r3, 0x0, 0x877f, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x4, '\x00', r0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x50) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) getsockopt$inet_buf(r5, 0x118, 0x29, 0x0, &(0x7f00000003c0)) (async) getsockopt$inet_buf(r5, 0x118, 0x29, 0x0, &(0x7f00000003c0)) 909.698014ms ago: executing program 2 (id=4676): syz_emit_ethernet(0x62, &(0x7f0000000000)={@local, @random="3cfeff41cffe", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dda00", 0x2c, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @private0={0xfc, 0x0, '\x00', 0x1}, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x2, 0x0, 0x0, 0x0, {[@generic={0x22, 0x12, "2dc30000000000270000000000000000"}, @generic={0x4, 0x3, "a8"}]}}}}}}}}, 0x0) 888.975947ms ago: executing program 0 (id=4677): r0 = socket(0x28, 0x6, 0x101) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) close(0xffffffffffffffff) (async) close(0xffffffffffffffff) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x15c, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x800, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x7}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24, 0x9, {0xf, 0xedcb, 0x9, 0x100}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000940)=@newsa={0x140, 0x1a, 0x803, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0xe23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0xfe, 0x1000000000000192, 0x4, 0x10001, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3f9}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x5}]}, 0x140}}, 0x844) (async) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000940)=@newsa={0x140, 0x1a, 0x803, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0xe23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0xfe, 0x1000000000000192, 0x4, 0x10001, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3f9}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x5}]}, 0x140}}, 0x844) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x200c000) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x200c000) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) (async) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f00000000c0)={0x8, 0xffe, 0x1ff, 0x42000}, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000005200010004000000000000001c0000001400", @ANYRES16=r5], 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000040), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000240)={'dummy0\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x4b, 0x29, "4b721b782b17a7b6a00d962a649fcdf8ebbc4dbb9c0a2c3f9360abd34e1204ab518bc5eb872935137e"}}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffe}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4028055}, 0x0) 768.763358ms ago: executing program 1 (id=4678): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x2b, 0x80801, 0x1) getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x44, &(0x7f0000000040)={'IDLETIMER\x00'}, &(0x7f0000000080)=0x1e) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r5, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000070000030900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000c080003400000000808000640000000d79e4affaa145161010000000000000000070000000900020073797a31000000000900010073797a3000000000300003802c000080080003400000000214000280100002800900020073797a31000000000c000440ffffffffffff0000140000001000010000000000000000000084000a"], 0xf0}}, 0x4000840) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800100014002101000000000000000002200000", @ANYRES32=r5, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x0) ioctl$XFS_IOC_FSGROWFSLOG(r6, 0x4008586f, &(0x7f0000000240)={0x8001, 0x2}) r7 = socket$netlink(0x10, 0x3, 0xa) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000001400212100000000000000000200"], 0x28}}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="200000001400210100000000000000000200b000", @ANYRES32=r10, @ANYBLOB="08000200ac1414aa"], 0x20}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1800000015140100000000000000000002000000", @ANYRES32=r10], 0x18}}, 0x0) r11 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r11, &(0x7f0000000180)={0x400000000000000, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="020f000014000000000000000000000005000500000000000a000004000000000000000000000000000000000000000000000000000000000800120000000200000000000000000006007e00000000000000000000000000fc000000002000000000000000000000ffffffff00000000000000000000000005000600000000000a00000000000000ff0200000000000000000000000000010000000000000000"], 0xa0}}, 0x0) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0x2}, 0x1c) r12 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r12, 0x89f2, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f00000004c0)={'ip6tnl0\x00', r5, 0x4, 0x8, 0xfb, 0x0, 0x8, @dev={0xfe, 0x80, '\x00', 0x17}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x80, 0x10, 0xfffffff7, 0x2}}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf42, 0x4) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) close(0x4) sendto$packet(r0, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdc9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 716.009691ms ago: executing program 2 (id=4679): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x1c, r1, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x1c}}, 0x40) ioctl$F2FS_IOC_SEC_TRIM_FILE(r0, 0x4018f514, &(0x7f0000000440)={0xc, 0x151, 0x3}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="02000000040000000404000040"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x7, 0x4, 0x801, 0x1, r3, 0x15b4}, 0x50) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x7, 0x4, 0x801, 0x1, r3, 0x15b4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r4}, &(0x7f0000000840), &(0x7f0000000880)=r3}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r4, &(0x7f0000000900)}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x44, r2, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x77}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x406}]}, 0x44}, 0x1, 0x0, 0x0, 0x2040}, 0x4000) (async) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x44, r2, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x77}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x406}]}, 0x44}, 0x1, 0x0, 0x0, 0x2040}, 0x4000) r6 = socket$inet(0x2, 0x2, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r7, 0x10e, 0xb, &(0x7f0000000100)=0x800000, 0x48) (async) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r7, 0x10e, 0xb, &(0x7f0000000100)=0x800000, 0x48) sendmsg$nl_route(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001e00030903000000fedbdf2507000000", @ANYRES32=0x0, @ANYBLOB="090100001803000008003c"], 0x28}, 0x1, 0x0, 0x0, 0x2000c090}, 0x50) socket(0x10, 0x803, 0x0) (async) r8 = socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x5, 0x0) (async) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) connect$inet6(r8, &(0x7f00000000c0)={0xa, 0x4e20, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xa38}, 0x1c) (async) connect$inet6(r8, &(0x7f00000000c0)={0xa, 0x4e20, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xa38}, 0x1c) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048810}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newtfilter={0x450, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r10, {0xc, 0xfff1}, {0x0, 0x5}, {0x5, 0xf}}, [@filter_kind_options=@f_fw={{0x7}, {0x424, 0x2, [@TCA_FW_POLICE={0x420, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0x1}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x7, 0x4, 0x7c65, 0x7, 0x80000000, 0x74e, 0x10, 0x8000, 0x67c6, 0x80000001, 0x2174, 0x1, 0x8b, 0xdab0, 0x7fffffff, 0xffffff7f, 0x5, 0x8, 0x6, 0x4, 0xd5, 0x6, 0x10000, 0x4, 0x2, 0x9ef, 0x7, 0x8001, 0xfffffff9, 0xfffff50f, 0x0, 0x281, 0x512, 0xfffffffd, 0x4, 0x3d, 0x1, 0x4, 0x1, 0x2, 0x5, 0x10, 0x2, 0x5, 0x6, 0x7, 0x6, 0x8000, 0x80000000, 0x0, 0x80, 0xf57, 0x4, 0x0, 0x6, 0x8000, 0x2, 0x4fa5, 0x4, 0x7fff, 0x4, 0x9, 0x40, 0xc, 0x3ff, 0xfff, 0x4, 0x0, 0x7fff, 0x81, 0x6, 0x4, 0xfcc, 0x0, 0x8, 0x3, 0x2, 0x2, 0xc, 0xb934, 0x2, 0x8, 0x9, 0x8, 0x7, 0x7, 0x6, 0x4000000, 0xac, 0x4, 0x4, 0x400, 0xfffffff9, 0xd, 0x7, 0x1000, 0x8001, 0x3, 0x7, 0x6923e70d, 0xd91, 0x200, 0x1, 0x3, 0x0, 0x8, 0xc46d, 0xfffffc12, 0x8, 0x890, 0x1, 0x7be8, 0x2, 0x76, 0x5, 0xa62, 0xf, 0x60f4, 0x10000000, 0x2, 0x1, 0x0, 0x9, 0x18d0, 0xe8, 0x5, 0x4, 0x8, 0x8, 0x7, 0x3ff, 0x2, 0x2, 0x1, 0x8, 0xef42, 0x1, 0x9, 0x7, 0x29, 0xfffffffd, 0x10000, 0x7, 0xe7a, 0x63, 0x8, 0x40, 0x1, 0x3, 0x6, 0x9, 0x5, 0x10000000, 0x3, 0x3, 0x0, 0x0, 0x81, 0x0, 0x9, 0xb8e, 0x3, 0xb, 0xa9, 0x101, 0xa, 0x4, 0x12b, 0xca1, 0x8, 0x3, 0x3, 0x7, 0x8, 0x0, 0x2, 0x7fffffff, 0x80000000, 0x1, 0x2, 0x2, 0xa, 0x0, 0x80, 0x4, 0x9, 0xb4b, 0x3, 0x5, 0x2, 0x2, 0x2, 0x7, 0xf8, 0x8, 0x3038, 0x9, 0xcfd, 0x8, 0x3, 0xfffffff7, 0x9, 0x1, 0x0, 0x7, 0xb, 0xa, 0x1, 0x9, 0x2, 0x2, 0xdaaf, 0xb, 0x1000, 0x1000, 0x4, 0xe33, 0x2a, 0xfffffffe, 0x401, 0xffff, 0x100, 0x6, 0x3, 0x9e, 0x4, 0x6, 0x800, 0x0, 0x0, 0x6, 0xffffffff, 0x4, 0x8, 0x4, 0xff, 0x3, 0x6, 0xfffffff8, 0xfffffffc, 0x0, 0x200, 0x4, 0x80, 0xfff, 0x54f0, 0x4, 0x5, 0x0, 0x7, 0x7, 0x1, 0x9, 0x3, 0x5]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}]}]}}]}, 0x450}}, 0x20000090) setsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f0000000040)={@dev={0xac, 0x14, 0x14, 0x2e}, @multicast1, r10}, 0xc) (async) setsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f0000000040)={@dev={0xac, 0x14, 0x14, 0x2e}, @multicast1, r10}, 0xc) setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) (async) setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000500), r8) (async) r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000000500), r8) sendmsg$TIPC_CMD_SET_NODE_ADDR(r11, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, r12, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x6f7479b8}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x884}, 0x4040800) syz_emit_ethernet(0x69, &(0x7f0000005a40)={@multicast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "75e700", 0x33, 0x3a, 0x0, @dev, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "a3579e", 0x0, 0x2c, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, [], "6be2c6"}}}}}}}, 0x0) (async) syz_emit_ethernet(0x69, &(0x7f0000005a40)={@multicast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "75e700", 0x33, 0x3a, 0x0, @dev, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "a3579e", 0x0, 0x2c, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, [], "6be2c6"}}}}}}}, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) 685.778493ms ago: executing program 3 (id=4680): ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x700, 0x700, 0x401, 0x1, {{0x11, 0x4, 0x1, 0x16, 0x44, 0x64, 0x0, 0x5e, 0x2f, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x1d}, {[@noop, @timestamp_addr={0x44, 0x2c, 0x71, 0x1, 0xc, [{@loopback, 0x582}, {@local, 0x2}, {@multicast1, 0xc83}, {@loopback, 0x5}, {@local}]}]}}}}}) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @loopback}, @FOU_ATTR_PORT={0x6}]}, 0x4c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x20, 0xd, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) r5 = accept4(r4, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, &(0x7f00000002c0)=0x80, 0x800) r6 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000580)=0x0) sendmsg$AUDIT_SET(r6, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x3c, 0x3e9, 0x400, 0x70bd2b, 0x25dfdbfc, {0xb, 0x1, 0x2, r7, 0x2, 0x9, 0x10001, 0xa8, 0x0, 0xa3, 0x2}, ["", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) setsockopt$bt_BT_VOICE(r5, 0x112, 0xb, &(0x7f0000000680)=0x3, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r9 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000140)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000005e0001002bbd7000ffdbdf2500000000", @ANYRES32=r10], 0x1c}, 0x1, 0x0, 0x0, 0x831e368c771a0719}, 0x400c080) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000100001082cbd7000ffffffff00000000", @ANYRES32=0x0, @ANYBLOB="fffe03001001020308001b000000000024001a8020000a8014000700200100000000000000000000000100f2040008"], 0x4c}}, 0x0) sendmmsg(r9, &(0x7f0000000000), 0x4000000000001f2, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000300)=[@in={0x2, 0x4e21, @private=0xa010101}, @in6={0xa, 0x4e21, 0x81, @loopback, 0x8827}, @in={0x2, 0x4e20, @rand_addr=0x64010101}, @in6={0xa, 0x4e23, 0x3, @empty, 0x7}, @in={0x2, 0x4e20, @local}, @in6={0xa, 0x4e22, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x36d1}, @in={0x2, 0x4e22, @private=0xa010102}, @in={0x2, 0x4e23, @empty}], 0xa4) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r11, 0xffff0000, 0xf0, 0xe200, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xa8, 0x0, 0x30c, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x84}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r0}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x14}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x80}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r0}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xf}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40000}, 0x8010) socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000006c0), 0x1, 0x0) 640.971076ms ago: executing program 4 (id=4681): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @broadcast}, &(0x7f0000000080)=0xc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x16, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x40f00, 0x50, '\x00', 0x0, @fallback=0x27, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000500000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000377c8028850000002d000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={r2, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300), &(0x7f0000000380), 0x0, 0xbb, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000480), &(0x7f00000005c0), 0x8, 0x6c, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x30, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1fd}, [@generic={0x84, 0x1, 0x1, 0x62}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001f80), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r4, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002040)={&(0x7f0000001fc0)={0x2c, r5, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x20004040) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1e, 0xe, &(0x7f0000001080)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x19, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, r3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, @fallback=0x12, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 492.055994ms ago: executing program 0 (id=4682): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r7, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r7, 0x84, 0xf, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e22, @local}}, 0x3, 0xfffffffe, 0x169, 0x9b, 0x5}, &(0x7f0000000100)=0x98) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x9, 0x7b2d2bff, 0x4, 0x2bfe, 0x6, 0x9, 0x3, 0x5, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r8 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r10, 0xfff) accept4(r10, 0x0, 0x0, 0x800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r11], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r12, 0x0, 0x0, 0x0, 0x0}, 0x94) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r13, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) connect$can_bcm(r8, &(0x7f00000000c0)={0x1d, r9}, 0x10) sendmsg$can_bcm(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="0100000001000000ffffffff00000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001000000020000c025020000407c"], 0x48}, 0x1, 0x0, 0x0, 0x881}, 0x0) accept$packet(0xffffffffffffffff, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) 249.172878ms ago: executing program 4 (id=4683): r0 = socket$inet(0x2, 0x3, 0x8) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000010c0)=@raw={'raw\x00', 0x8, 0x3, 0x310, 0x0, 0xe138, 0x198, 0x1c0, 0x198, 0x278, 0x358, 0x358, 0x278, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, '\x00', 'veth0_to_bond\x00', {}, {}, 0x21}, 0x0, 0x158, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0004000000000000000004fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0xc}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffffd, 0x0, 'snmp_trap\x00', 'syz0\x00', {0xfffffffffffffffc}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0xfffd, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x370) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x4004850) sendmsg$NFT_BATCH(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000220000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000009"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) 247.131833ms ago: executing program 2 (id=4684): ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x4) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x4, &(0x7f00000008c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0x18}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20}, 0x94) socket(0x400000000010, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$netlink(0x10, 0x3, 0x6720f15ce8555866) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000003c0)='cubic', 0xb) sendmsg$IPCTNL_MSG_CT_DELETE(r2, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000003c0)={r4, @in={{0x2, 0x4e24, @private=0xa010101}}}, 0x84) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0x8, 0x3, 0xc70, 0x0, 0xffffffff, 0xffffffff, 0x908, 0xffffffff, 0xba0, 0xffffffff, 0xffffffff, 0xba0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x8e0, 0x908, 0x0, {}, [@common=@unspec=@u32={{0x7e0}, {[{[{0xd8800000, 0x1}, {0xec, 0x2}, {0x6, 0x3}, {0x80}, {0x6, 0x2}, {0x10000, 0x2}, {0xd}, {0x2}, {0x4, 0x3}, {0x1, 0x1}, {0x4}], [{0x9, 0xfffffffb}, {0x7, 0x7}, {0x2, 0x80000000}, {0x9, 0x1}, {0x799, 0x8001}, {0x0, 0x2}, {0xc2, 0x5}, {0x8, 0x1000}, {0x40, 0x9}, {0xff, 0x81}, {0x636, 0x6}], 0x6}, {[{0x8, 0x2}, {0xe000}, {0xb8b4, 0x1}, {0x3c5f9b87, 0x3}, {0x3, 0x1}, {}, {0x29b5, 0x2}, {0x54a2f77, 0x3}, {0x3, 0x3}, {0x1000, 0x2}, {0x1, 0x2}], [{0x6, 0x5}, {0x5, 0x7}, {0x2, 0x3}, {0x80000000, 0x2}, {0xee84, 0x8000}, {0x9, 0x9}, {0x3800000, 0x3}, {0x800, 0x9}, {0xfffffffa, 0x1}, {0x0, 0x2}, {0x7, 0x7}], 0x4, 0x3}, {[{0x286f, 0x1}, {0x554b, 0x3}, {0x0, 0x3}, {0x6, 0x3}, {0x5}, {0x9, 0x1}, {0x6000000, 0x3}, {0x400, 0x3}, {0x9, 0x2}, {0x8001, 0x2}, {0xc5bf}], [{0x6, 0x7f}, {0x5, 0xfffffff9}, {0x7, 0x8}, {0xb, 0x3}, {0x8, 0x9}, {0x9}, {0x7}, {0x7, 0x1000}, {0xfff, 0x2e4}, {0x0, 0x400}, {0x0, 0x8}], 0xb, 0x4}, {[{0x5, 0x2}, {0x2, 0x1}, {0x6, 0x3}, {0xfffffffc, 0x1}, {0x4, 0x3}, {0x10001}, {0xca0, 0x2}, {0x10, 0x1}, {0x8, 0x1}, {0x6796, 0x3}, {0x8, 0x1}], [{0x6, 0x6}, {0x1, 0x7}, {0x5, 0x9}, {0xffff, 0x2}, {0xc, 0x5}, {0x51a3, 0x3}, {0x8, 0x5}, {0xfffffff7, 0x9}, {0xd0, 0x1}, {0xfffffff8, 0x8}, {0x7656, 0x2}], 0x7}, {[{0x2, 0x2}, {0x10001}, {0x4eb}, {0x10000, 0x3}, {0x2, 0x2}, {0x3}, {0x81}, {0x4, 0x1}, {0x10001, 0x2}, {0x9, 0x3}, {0x1, 0x2}], [{0x4}, {0x0, 0x400}, {0xd9a8, 0x7}, {0x1000, 0x8f8}, {0x3, 0x10001}, {0x3, 0x7c67}, {0x6, 0x80}, {0xfffffff9, 0x2}, {0xffff, 0x2}, {0x1000, 0x9}, {0x3, 0x2}], 0x1, 0x4}, {[{0xabb918, 0x1}, {0x3, 0x1}, {0x8, 0x2}, {0x9, 0x1}, {0x2}, {0x9, 0x1}, {0x80000000, 0x3}, {0x1, 0x2}, {0x0, 0xc49aafde8229cbf1}, {0x4, 0x1}, {0x3, 0x2}], [{0x8b, 0x9}, {0x6, 0x553}, {0x1, 0xe0}, {0x3, 0x4ad}, {0x0, 0x10001}, {0x1, 0x2}, {0xd1, 0x100}, {0x6, 0x7641}, {0x3, 0xfffffffc}, {0x2, 0x4}, {0x9, 0x2}], 0x1, 0x1}, {[{0x8015, 0x3}, {0x3, 0x3}, {0x1, 0x2}, {0x0, 0x2}, {0x37b, 0x3}, {0x5}, {0x2, 0x3}, {0x1, 0x2}, {0x7f}, {0x6, 0x2}, {0xfffffff6, 0x2}], [{0x9, 0x7}, {0x8, 0x7}, {0x6, 0x4}, {0x800, 0x80000001}, {0x0, 0x10000}, {0x2, 0x3b58}, {0x4ca7ea08, 0x8001}, {0x0, 0xa9b}, {0x1ff}, {0x5, 0x2}, {0x8, 0x4}], 0xa, 0xb}, {[{0x10001, 0x3}, {0x3}, {0xc, 0x1}, {0x7a, 0x3}, {0x6, 0x1}, {0x80000001, 0x3}, {0x3, 0x2}, {0xa}, {0x401, 0x1}, {0x9}, {0x1, 0x2}], [{0x200, 0x1}, {0x8, 0x1aaa}, {0x706, 0x9}, {0x9, 0x2}, {0x4, 0x7}, {0x5, 0x9}, {0x3}, {0x5, 0xbf789c5e}, {0x8, 0x3}, {0x7, 0x10001}, {0x1}], 0xa, 0x1}, {[{0xc2}, {0x5, 0x1}, {0x7cd72bba}, {0x8, 0x2}, {0x400}, {0x7ff, 0x3}, {0x10001}, {0xe1a}, {0x9, 0x3}, {0xfffffffc, 0x3}, {0x9}], [{0x10, 0x4}, {0x1, 0x10000}, {0xbf9, 0x6}, {0x4}, {0x101, 0x8}, {0x100, 0x4}, {0x0, 0xb6e}, {0x7f, 0x8}, {0x9, 0x7}, {0xffff, 0x92a}, {0xd, 0x2}], 0x9, 0x2}, {[{0x8, 0x3}, {0x80000001}, {0x8, 0x3}, {0x4, 0x2}, {0x1, 0x3}, {0x4}, {0x4, 0x1}, {0x1, 0x3}, {0xc, 0x3}, {0x101, 0x2}, {0x1}], [{0x4, 0x3}, {0x0, 0x8}, {0xffffe5cb, 0x1}, {0x7f, 0xfffffff4}, {0x40, 0xffffffff}, {0x2, 0x7}, {0x7fff, 0x6}, {0x0, 0x8}, {0xffffff2e, 0x7ff}, {0x40, 0xa}, {0x3, 0x7}], 0x6, 0x2}, {[{0x1ff}, {0x5, 0x2}, {0x10001, 0x1}, {0x2, 0x2}, {0xff, 0x1}, {0x1, 0x1}, {0x800, 0x3}, {0x80000001, 0x2}, {0x1ef6, 0x2}, {0x1, 0x2}, {0xba, 0x3}], [{0x18d, 0x7}, {0x0, 0x2}, {0xdf91, 0x1}, {0xe08, 0x6}, {0x4, 0x7ff}, {0xa64, 0x101}, {0x7, 0x4}, {0x401, 0x2}, {0x7ff}, {0x0, 0xd4}, {0xef}], 0x2, 0x7}]}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x230, 0x298, 0x0, {}, [@common=@frag={{0x30}, {[0x4, 0xf31], 0x4, 0x34, 0x1}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0xffffffffffffffff, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x8000, 0x16a, 0x1, 'syz1\x00', 'syz0\x00', {0x80000001}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0xcd0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) syz_80211_join_ibss(&(0x7f0000000000)='wlan1\x00', &(0x7f00000002c0)=@default_ap_ssid, 0x6, 0x1) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'dummy0\x00'}) sendmsg$NL802154_CMD_GET_SEC_KEY(r6, &(0x7f0000000800)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYBLOB="0100af460000fcdbdf25160000000c00060002000000020000000c000600020000000000000008000300", @ANYRES32, @ANYBLOB="0c000600020000000200000008000300", @ANYRES32=0x0, @ANYBLOB="0c00060002000000020000000c0006800000000000000000"], 0x60}, 0x1, 0x0, 0x0, 0x40011}, 0x80) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 138.536681ms ago: executing program 3 (id=4685): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6(0xa, 0xa, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x66, &(0x7f0000000400)=0x100, 0x4) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) recvmmsg(r1, &(0x7f0000002600)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000200)=""/69, 0x45}, {&(0x7f0000000280)=""/91, 0x5b}, {&(0x7f0000000300)=""/30, 0x1e}, {&(0x7f0000000340)=""/90, 0x5a}, {&(0x7f00000003c0)=""/9, 0x9}, {&(0x7f0000000440)=""/50, 0x32}, {&(0x7f0000000480)=""/131, 0x83}], 0x7}, 0x48000}, {{&(0x7f00000005c0)=@in={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000640)=""/55, 0x37}, {&(0x7f0000000680)=""/41, 0x29}, {&(0x7f0000000700)=""/152, 0x98}, {&(0x7f00000007c0)=""/162, 0xa2}, {&(0x7f0000000880)=""/226, 0xe2}, {&(0x7f0000000980)=""/163, 0xa3}], 0x6, &(0x7f0000000ac0)=""/25, 0x19}, 0x8}, {{0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000b00)=""/4096, 0x1000}, {&(0x7f0000001b00)=""/30, 0x1e}, {&(0x7f0000001b40)=""/240, 0xf0}, {&(0x7f0000001c40)=""/90, 0x5a}], 0x4, &(0x7f0000001d00)=""/168, 0xa8}, 0x9b53}, {{&(0x7f0000001dc0)=@nl, 0x80, &(0x7f0000002040)=[{&(0x7f0000001e40)=""/102, 0x66}, {&(0x7f0000001ec0)=""/40, 0x28}, {&(0x7f0000001f00)=""/38, 0x26}, {&(0x7f0000001f40)=""/238, 0xee}], 0x4}, 0xff}, {{0x0, 0x0, &(0x7f0000002400)=[{&(0x7f0000002080)=""/7, 0x7}, {&(0x7f00000020c0)=""/105, 0x69}, {&(0x7f0000002140)=""/244, 0xf4}, {&(0x7f0000002240)=""/147, 0x93}, {&(0x7f0000002300)=""/218, 0xda}], 0x5, &(0x7f0000002480)=""/32, 0x20}, 0x1}, {{0x0, 0x0, &(0x7f00000025c0)=[{&(0x7f00000024c0)=""/43, 0x2b}, {&(0x7f0000002500)=""/171, 0xab}], 0x2}, 0x7}], 0x6, 0x2100, 0x0) write$tun(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0a00001bbbbbbbbbbbbbaaaaaaaaaa2986dd6d002008001811ff20010000000000000000000000000001ff0200000000000000000000000000014f194e20"], 0x52) 102.251351ms ago: executing program 4 (id=4686): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) getsockopt(r1, 0xa, 0xcd, 0x0, &(0x7f0000000400)) unshare(0x8010800) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000011008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000100ba8000001201", 0x2e}], 0x1}, 0x40840) unshare(0x66000080) 0s ago: executing program 1 (id=4687): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0x8, 0x10, &(0x7f0000000040)={0x0, 0xa}, 0x10}, 0x94) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000440)={'syztnl1\x00', &(0x7f00000003c0)={'syztnl0\x00', 0x0, 0x4, 0x60, 0xa, 0x2, 0x9, @private1, @dev={0xfe, 0x80, '\x00', 0x10}, 0x8, 0x10, 0x9, 0x800}}) (async) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) (async) sendto$inet6(r2, &(0x7f00000005c0)="f5", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffffc, @rand_addr=' \x01\x00'}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r3, 0x8992, &(0x7f0000000040)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) (async) r4 = socket$rds(0x15, 0x5, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) bind$rds(r4, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) (async) sendmsg$rds(r4, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000300)=[{&(0x7f0000002640)=""/102389, 0x18ff5}], 0x1, 0x1903d}}], 0x48}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x0, 0x1}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x9, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@exit, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x6e}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x1}]}, &(0x7f0000000100)='syzkaller\x00', 0x3, 0xc5, &(0x7f00000002c0)=""/197, 0x40f00, 0x1, '\x00', r1, 0x0, r0, 0x8, &(0x7f0000000480)={0x8, 0x1}, 0x8, 0x10, &(0x7f00000004c0)={0x2, 0xe, 0x2, 0xfffffff3}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000500)=[r0, r0, r0], &(0x7f0000000540)=[{0x5, 0x2, 0x6, 0x4}, {0x3, 0x1, 0xb, 0x4}, {0x3, 0x3, 0x0, 0x9}, {0x2, 0x2, 0x9, 0x3}, {0x0, 0x1, 0xe, 0x2}, {0x3, 0x4, 0xe, 0x2}, {0x0, 0x5, 0xb, 0xb}, {0x3, 0x2, 0x1, 0x3}], 0x10, 0x3}, 0x94) kernel console output (not intermixed with test programs): 4 [ 523.191599][ T5638] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 523.205746][T18246] bond0: left allmulticast mode [ 523.232287][T18246] bond_slave_0: left allmulticast mode [ 523.244579][T18246] bond_slave_1: left allmulticast mode [ 523.368838][ T6015] bond_slave_0: left promiscuous mode [ 523.375709][ T6015] bond_slave_1: left promiscuous mode [ 523.828144][T18276] __nla_validate_parse: 1 callbacks suppressed [ 523.828167][T18276] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3154'. [ 524.321609][T18293] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3159'. [ 524.330569][ T4951] Bluetooth: hci2: command 0x040f tx timeout [ 524.486194][T18303] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3163'. [ 524.674763][T18310] netlink: 'syz.1.3167': attribute type 1 has an invalid length. [ 524.893617][T18318] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3167'. [ 525.189976][T18332] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3171'. [ 525.213105][T18332] ip6tnl1: entered allmulticast mode [ 525.270731][T18252] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.277999][T18252] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.285277][T18252] bridge_slave_0: entered allmulticast mode [ 525.292308][ T4951] Bluetooth: hci1: command tx timeout [ 525.300355][T18252] bridge_slave_0: entered promiscuous mode [ 525.309098][T18252] bridge0: port 2(bridge_slave_1) entered blocking state [ 525.316330][T18252] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.323612][T18252] bridge_slave_1: entered allmulticast mode [ 525.331500][T18252] bridge_slave_1: entered promiscuous mode [ 525.385604][T18252] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 525.398361][T18252] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 525.438585][T18252] team0: Port device team_slave_0 added [ 525.447122][T18252] team0: Port device team_slave_1 added [ 525.517951][T18252] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 525.528121][T18252] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 525.554225][T18252] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 525.617626][T18252] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 525.624622][T18252] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 525.650548][T18252] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 525.738359][T18252] hsr_slave_0: entered promiscuous mode [ 525.745131][T18252] hsr_slave_1: entered promiscuous mode [ 525.751495][T18252] debugfs: 'hsr0' already exists in 'hsr' [ 525.757277][T18252] Cannot create hsr debugfs directory [ 526.054558][T18351] openvswitch: netlink: VXLAN extension 51 out of range max 1 [ 526.117147][T18349] netlink: 'syz.2.3175': attribute type 1 has an invalid length. [ 526.509366][T18252] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 526.644387][T18363] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3181'. [ 526.666220][T18363] IPv6: addrconf: prefix option has invalid lifetime [ 526.672988][T18363] IPv6: addrconf: prefix option has invalid lifetime [ 526.770890][T18375] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3184'. [ 526.783908][T18375] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3184'. [ 526.860112][T18373] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3183'. [ 527.119496][T18390] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3186'. [ 527.402562][T18399] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 527.421556][ T4951] Bluetooth: hci1: command tx timeout [ 527.457821][T18252] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 527.634872][T18413] netlink: 'syz.2.3191': attribute type 1 has an invalid length. [ 527.829643][T18399] team_slave_1: entered promiscuous mode [ 527.855452][T18399] team_slave_1: entered allmulticast mode [ 527.944212][T18425] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048) [ 527.970134][T18399] xt_hashlimit: size too large, truncated to 1048576 [ 528.526499][T18252] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 529.011536][T18468] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 529.158644][T18468] __nla_validate_parse: 3 callbacks suppressed [ 529.158664][T18468] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3203'. [ 529.398454][T18479] netlink: 'syz.3.3204': attribute type 12 has an invalid length. [ 529.440110][T18252] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 529.487799][T18485] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3206'. [ 529.500513][ T4951] Bluetooth: hci1: command tx timeout [ 529.908346][T18495] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3208'. [ 530.256699][T18252] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 530.315721][T18252] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 530.347789][T18252] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 530.425452][T18252] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 530.437526][T18252] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 530.472610][T18252] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 530.526198][T18252] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 530.562496][T18252] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 530.703224][ T5836] IPVS: starting estimator thread 0... [ 530.736100][T18516] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3212'. [ 530.754366][T18515] ip6gre1: entered promiscuous mode [ 530.759648][T18515] ip6gre1: entered allmulticast mode [ 531.055554][T18517] IPVS: using max 26 ests per chain, 62400 per kthread [ 531.083172][T18252] 8021q: adding VLAN 0 to HW filter on device bond0 [ 531.136925][T18252] 8021q: adding VLAN 0 to HW filter on device team0 [ 531.170834][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 531.178111][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 531.421337][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 531.428648][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 531.649013][ T4951] Bluetooth: hci1: command tx timeout [ 531.701696][T18534] bond1: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 531.742498][T18540] openvswitch: netlink: Unexpected mask (mask=5000040, allowed=1010048) [ 531.777008][T18534] bond1 (unregistering): Released all slaves [ 531.918922][T18529] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3216'. [ 532.848005][T18577] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 532.958143][T18584] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3231'. [ 533.025107][T18252] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 533.119184][T18582] xt_hashlimit: max too large, truncated to 1048576 [ 533.156981][T18582] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3229'. [ 534.013940][T18628] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3239'. [ 534.016701][T18252] veth0_vlan: entered promiscuous mode [ 534.080039][T18633] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3240'. [ 534.216390][T18633] bond0: entered allmulticast mode [ 534.221734][T18633] bond_slave_0: entered allmulticast mode [ 534.227572][T18633] bond_slave_1: entered allmulticast mode [ 534.289774][T18252] veth1_vlan: entered promiscuous mode [ 534.372453][T18252] veth0_macvtap: entered promiscuous mode [ 534.391604][T18252] veth1_macvtap: entered promiscuous mode [ 534.531361][T18252] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 534.555299][T18252] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 534.883482][T18707] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.939947][T18713] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.951161][T18713] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.062999][T18713] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.143892][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 535.182724][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 535.342036][T18698] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 535.349941][T18698] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 535.699289][T18743] xt_hashlimit: max too large, truncated to 1048576 [ 535.706573][T18743] xt_ecn: cannot match TCP bits for non-tcp packets [ 536.123983][T18766] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3262'. [ 536.137477][T18766] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3262'. [ 536.394461][T18771] bridge1: entered promiscuous mode [ 536.399756][T18771] bridge1: entered allmulticast mode [ 536.408636][T18771] team0: Port device bridge1 added [ 536.446522][T18775] nbd2: detected capacity change from 0 to 3 [ 536.492123][T17243] block nbd2: Dead connection, failed to find a fallback [ 536.568046][T17243] block nbd2: shutting down sockets [ 536.599300][T17243] blk_print_req_error: 136 callbacks suppressed [ 536.599321][T17243] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 536.648562][T18760] bridge2: entered promiscuous mode [ 536.692877][T17243] buffer_io_error: 138 callbacks suppressed [ 536.692898][T17243] Buffer I/O error on dev nbd2, logical block 0, async page read [ 536.706775][T17243] Buffer I/O error on dev nbd2, logical block 1, async page read [ 536.714710][T17243] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 536.723874][T17243] Buffer I/O error on dev nbd2, logical block 0, async page read [ 536.731868][T17243] Buffer I/O error on dev nbd2, logical block 1, async page read [ 536.739884][T17243] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 536.782568][T18760] bridge2: entered allmulticast mode [ 536.834396][T18760] team0: Port device bridge2 added [ 536.841824][T17243] Buffer I/O error on dev nbd2, logical block 0, async page read [ 536.850015][T17243] Buffer I/O error on dev nbd2, logical block 1, async page read [ 536.858021][T17243] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 536.922428][T17243] Buffer I/O error on dev nbd2, logical block 0, async page read [ 536.930937][T17243] Buffer I/O error on dev nbd2, logical block 1, async page read [ 536.938894][T17243] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 536.964472][T17243] Buffer I/O error on dev nbd2, logical block 0, async page read [ 536.972401][T17243] Buffer I/O error on dev nbd2, logical block 1, async page read [ 537.115690][T17243] ldm_validate_partition_table(): Disk read failed. [ 537.122479][T17243] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 537.134937][T17243] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 537.144311][T17243] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 537.153657][T17243] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 537.162917][T17243] Dev nbd2: unable to read RDB block 0 [ 537.168517][T17243] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 537.178356][T17243] nbd2: unable to read partition table [ 537.184177][T17243] nbd2: partition table beyond EOD, truncated [ 537.348163][T17243] ldm_validate_partition_table(): Disk read failed. [ 537.367155][T17243] Dev nbd2: unable to read RDB block 0 [ 537.373287][T17243] nbd2: unable to read partition table [ 537.379107][T17243] nbd2: partition table beyond EOD, truncated [ 537.381206][T18789] netlink: 207952 bytes leftover after parsing attributes in process `syz.1.3268'. [ 537.398745][T18806] netlink: 'syz.0.3270': attribute type 2 has an invalid length. [ 537.578178][T18811] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3273'. [ 537.605982][T18811] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3273'. [ 537.639806][T18811] syzkaller0: entered promiscuous mode [ 537.645538][T18811] syzkaller0: entered allmulticast mode [ 537.752513][T18809] macsec1: entered promiscuous mode [ 538.059000][T18822] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3276'. [ 538.457629][T18833] macvtap0: entered promiscuous mode [ 538.463564][T18833] macvtap0: entered allmulticast mode [ 538.469702][T18833] veth1_vlan: entered allmulticast mode [ 538.515823][T18834] macvtap1: entered promiscuous mode [ 538.521658][T18834] macvtap1: entered allmulticast mode [ 538.974086][T18846] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 539.038387][T18851] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3281'. [ 539.284936][T18856] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 539.615905][T18867] nbd: couldn't find a device at index 4 [ 539.677529][T18873] netlink: 'syz.1.3290': attribute type 4 has an invalid length. [ 539.724182][T18873] netlink: 'syz.1.3290': attribute type 4 has an invalid length. [ 539.746260][T18871] netlink: 'syz.0.3291': attribute type 1 has an invalid length. [ 539.789975][T18870] netlink: 'syz.0.3291': attribute type 1 has an invalid length. [ 540.211100][T18899] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3296'. [ 540.715548][T18915] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3301'. [ 540.877803][T18915] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.929157][T18915] bridge_slave_1 (unregistering): left allmulticast mode [ 540.936269][T18915] bridge_slave_1 (unregistering): left promiscuous mode [ 540.943322][T18915] bridge0: port 2(bridge_slave_1) entered disabled state [ 541.022600][T18921] IPVS: set_ctl: invalid protocol: 33 172.20.20.170:20000 [ 541.033080][T18921] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3304'. [ 541.092096][T18921] bond3: entered promiscuous mode [ 541.097702][T18921] 8021q: adding VLAN 0 to HW filter on device bond3 [ 541.154045][T18924] 8021q: adding VLAN 0 to HW filter on device bond4 [ 541.162918][T18924] bond4: entered promiscuous mode [ 541.189262][T18924] bond3: (slave bond4): Enslaving as an active interface with an up link [ 541.848548][T18950] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3315'. [ 541.857734][T18950] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3315'. [ 541.981071][T18964] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 542.069845][T18970] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3319'. [ 542.081703][T18970] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3319'. [ 542.091901][T18970] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3319'. [ 542.221323][T18975] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3320'. [ 542.385509][T18975] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3320'. [ 542.429805][T18982] syzkaller0: entered promiscuous mode [ 542.435665][T18982] syzkaller0: entered allmulticast mode [ 542.457890][T18987] vlan2: entered allmulticast mode [ 542.463153][T18987] bond0: entered allmulticast mode [ 542.487287][T18988] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3320'. [ 542.490786][T18987] bond_slave_0: entered allmulticast mode [ 542.507251][T18987] bond_slave_1: entered allmulticast mode [ 542.516161][T18987] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3323'. [ 542.588866][T18987] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 542.619438][T18987] bond_slave_0: left allmulticast mode [ 542.642613][T18987] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 542.657052][T18987] bond_slave_1: left allmulticast mode [ 542.677014][T18987] bond0 (unregistering): Released all slaves [ 543.413972][T19015] netlink: 'syz.0.3329': attribute type 1 has an invalid length. [ 543.449810][T19015] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3329'. [ 544.624384][T19071] openvswitch: netlink: IPv4 tun info is not correct [ 544.647256][T19071] vcan0: tx drop: invalid da for name 0xfffffffffffffffd [ 544.657740][T19071] netlink: 'syz.0.3347': attribute type 4 has an invalid length. [ 545.526512][T19118] netlink: 'syz.1.3361': attribute type 58 has an invalid length. [ 545.813120][T19128] Bluetooth: MGMT ver 1.23 [ 545.988521][T19130] IPVS: set_ctl: invalid protocol: 29 224.0.0.1:20002 [ 546.277240][T19133] syzkaller1: entered allmulticast mode [ 546.527179][T19143] tipc: Started in network mode [ 546.532117][T19143] tipc: Node identity 0a345eda092e, cluster identity 4711 [ 546.539425][T19143] tipc: Enabled bearer , priority 0 [ 546.595108][T19149] FAULT_INJECTION: forcing a failure. [ 546.595108][T19149] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 546.624876][T19149] CPU: 0 UID: 0 PID: 19149 Comm: syz.3.3371 Not tainted syzkaller #0 PREEMPT(full) [ 546.624909][T19149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 546.624922][T19149] Call Trace: [ 546.624931][T19149] [ 546.624940][T19149] dump_stack_lvl+0xe8/0x150 [ 546.624969][T19149] should_fail_ex+0x412/0x560 [ 546.624998][T19149] _copy_from_user+0x2d/0xb0 [ 546.625024][T19149] btf_new_fd+0x352/0xd40 [ 546.625061][T19149] ? __pfx_btf_new_fd+0x10/0x10 [ 546.625089][T19149] ? bpf_token_put+0x143/0x160 [ 546.625112][T19149] ? bpf_btf_load+0x126/0x190 [ 546.625136][T19149] __sys_bpf+0x4e5/0x950 [ 546.625170][T19149] ? __pfx___sys_bpf+0x10/0x10 [ 546.625219][T19149] ? ksys_write+0x242/0x270 [ 546.625252][T19149] ? __pfx_ksys_write+0x10/0x10 [ 546.625287][T19149] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.625311][T19149] __x64_sys_bpf+0x7c/0x90 [ 546.625341][T19149] do_syscall_64+0x174/0x580 [ 546.625362][T19149] ? trace_irq_disable+0x3b/0x140 [ 546.625393][T19149] ? clear_bhb_loop+0x40/0x90 [ 546.625420][T19149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.625441][T19149] RIP: 0033:0x7fcfd5d9ce59 [ 546.625459][T19149] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 546.625477][T19149] RSP: 002b:00007fcfd6cfb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 546.625499][T19149] RAX: ffffffffffffffda RBX: 00007fcfd6015fa0 RCX: 00007fcfd5d9ce59 [ 546.625514][T19149] RDX: 0000000000000028 RSI: 0000200000001c40 RDI: 0000000000000012 [ 546.625527][T19149] RBP: 00007fcfd6cfb090 R08: 0000000000000000 R09: 0000000000000000 [ 546.625540][T19149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 546.625552][T19149] R13: 00007fcfd6016038 R14: 00007fcfd6015fa0 R15: 00007ffe34cb0c98 [ 546.625587][T19149] [ 546.906816][T19143] tipc: Disabling bearer [ 546.997967][T19158] __nla_validate_parse: 6 callbacks suppressed [ 546.997986][T19158] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3373'. [ 546.998072][T19155] macsec1: entered promiscuous mode [ 547.018541][T19155] bridge0: entered promiscuous mode [ 547.027673][T19155] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3372'. [ 547.263262][T19166] pim6reg1: entered promiscuous mode [ 547.268644][T19166] pim6reg1: entered allmulticast mode [ 547.473826][T19171] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3377'. [ 547.482877][T19171] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3377'. [ 547.491859][T19171] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3377'. [ 547.879131][T19199] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3385'. [ 548.135066][T19210] FAULT_INJECTION: forcing a failure. [ 548.135066][T19210] name failslab, interval 1, probability 0, space 0, times 0 [ 548.147972][T19210] CPU: 0 UID: 0 PID: 19210 Comm: syz.0.3390 Not tainted syzkaller #0 PREEMPT(full) [ 548.148001][T19210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 548.148014][T19210] Call Trace: [ 548.148023][T19210] [ 548.148031][T19210] dump_stack_lvl+0xe8/0x150 [ 548.148061][T19210] should_fail_ex+0x412/0x560 [ 548.148090][T19210] should_failslab+0xa8/0x100 [ 548.148112][T19210] ? skb_clone+0x212/0x3a0 [ 548.148140][T19210] kmem_cache_alloc_noprof+0x87/0x650 [ 548.148172][T19210] ? __netlink_lookup+0xc6/0x8b0 [ 548.148204][T19210] skb_clone+0x212/0x3a0 [ 548.148234][T19210] __netlink_deliver_tap+0x404/0x850 [ 548.148272][T19210] ? netlink_deliver_tap+0x2e/0x1b0 [ 548.148299][T19210] netlink_deliver_tap+0x19c/0x1b0 [ 548.148325][T19210] netlink_unicast+0x730/0x8e0 [ 548.148359][T19210] netlink_sendmsg+0x813/0xb40 [ 548.148395][T19210] ? __pfx_netlink_sendmsg+0x10/0x10 [ 548.148423][T19210] ? aa_sock_msg_perm+0xf1/0x1b0 [ 548.148457][T19210] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 548.148490][T19210] ____sys_sendmsg+0x972/0x9f0 [ 548.148516][T19210] ? __might_fault+0xaf/0x130 [ 548.148550][T19210] ? __pfx_____sys_sendmsg+0x10/0x10 [ 548.148585][T19210] ? import_iovec+0x73/0xa0 [ 548.148615][T19210] ___sys_sendmsg+0x2a5/0x360 [ 548.148637][T19210] ? __lock_acquire+0x6b5/0x2cf0 [ 548.148666][T19210] ? __pfx____sys_sendmsg+0x10/0x10 [ 548.148731][T19210] ? __fget_files+0x2a/0x420 [ 548.148757][T19210] ? __fget_files+0x3a0/0x420 [ 548.148796][T19210] __x64_sys_sendmsg+0x1bd/0x2a0 [ 548.148825][T19210] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 548.148861][T19210] ? __pfx_ksys_write+0x10/0x10 [ 548.148903][T19210] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.148927][T19210] do_syscall_64+0x174/0x580 [ 548.148955][T19210] ? trace_irq_disable+0x3b/0x140 [ 548.148986][T19210] ? clear_bhb_loop+0x40/0x90 [ 548.149013][T19210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.149034][T19210] RIP: 0033:0x7f7bbfb9ce59 [ 548.149053][T19210] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 548.149071][T19210] RSP: 002b:00007f7bbddf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 548.149093][T19210] RAX: ffffffffffffffda RBX: 00007f7bbfe15fa0 RCX: 00007f7bbfb9ce59 [ 548.149108][T19210] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 548.149121][T19210] RBP: 00007f7bbddf6090 R08: 0000000000000000 R09: 0000000000000000 [ 548.149134][T19210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 548.149147][T19210] R13: 00007f7bbfe16038 R14: 00007f7bbfe15fa0 R15: 00007ffd30a67648 [ 548.149182][T19210] [ 548.603431][T19217] netlink: 'syz.3.3393': attribute type 1 has an invalid length. [ 548.637950][T19214] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3391'. [ 548.647896][T19217] 8021q: adding VLAN 0 to HW filter on device bond0 [ 548.678460][T19214] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3391'. [ 548.703161][T19217] macvlan2: entered promiscuous mode [ 548.708690][T19217] macvlan2: entered allmulticast mode [ 548.759663][T19226] bond0: (slave ip6gretap1): making interface the new active one [ 548.769911][T19226] bond0: (slave ip6gretap1): Enslaving as an active interface with an up link [ 548.929066][T19214] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3391'. [ 548.961161][T19214] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 548.986096][T19214] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 549.049625][T19242] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3396'. [ 550.153078][T19254] bond1: entered allmulticast mode [ 550.167566][T19254] erspan1: entered allmulticast mode [ 550.176111][T19254] bond1: (slave erspan1): Enslaving as an active interface with an up link [ 550.236979][T19257] netdevsim netdevsim3: Firmware load for '..' refused, path contains '..' component [ 551.467816][T19273] dummy0: entered allmulticast mode [ 551.482248][T19274] netlink: 'syz.4.3404': attribute type 1 has an invalid length. [ 551.490396][T19274] netlink: 'syz.4.3404': attribute type 2 has an invalid length. [ 551.498988][T19274] netlink: 'syz.4.3404': attribute type 1 has an invalid length. [ 551.548627][T19216] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 551.978495][T19293] netlink: 'syz.4.3412': attribute type 1 has an invalid length. [ 552.032547][T19293] netlink: 'syz.4.3412': attribute type 4 has an invalid length. [ 552.089860][T19293] __nla_validate_parse: 7 callbacks suppressed [ 552.089879][T19293] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.3412'. [ 552.133683][T19299] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3413'. [ 552.582769][T19323] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3418'. [ 552.645927][T19320] batadv0: entered promiscuous mode [ 552.669852][T19320] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 552.732853][T19320] hsr1: entered allmulticast mode [ 552.738167][T19320] batadv0: entered allmulticast mode [ 552.743705][T19320] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 552.758400][T19320] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 553.269567][T19347] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3426'. [ 553.493085][T19354] netlink: 'syz.1.3428': attribute type 1 has an invalid length. [ 553.521890][T19354] netlink: 280 bytes leftover after parsing attributes in process `syz.1.3428'. [ 553.578453][T19357] netlink: 'syz.0.3429': attribute type 1 has an invalid length. [ 553.775824][T19366] SET target dimension over the limit! [ 553.851266][T19368] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3431'. [ 553.951891][T19370] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 553.982628][T19368] xt_hashlimit: size too large, truncated to 1048576 [ 554.082413][T19372] xt_hashlimit: size too large, truncated to 1048576 [ 554.117266][T19374] syzkaller1: entered promiscuous mode [ 554.122816][T19374] syzkaller1: entered allmulticast mode [ 554.150143][T19372] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 554.781051][T19397] netlink: 'syz.0.3436': attribute type 1 has an invalid length. [ 554.855388][T19399] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3437'. [ 555.021175][T19401] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3438'. [ 555.247896][T19416] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3441'. [ 555.257205][T19416] 0ªX¹¦À: renamed from batadv0 (while UP) [ 555.345487][T19417] IPVS: set_ctl: invalid protocol: 43 172.20.20.38:20000 [ 555.463967][T19416] 0ªX¹¦À: entered allmulticast mode [ 555.509634][T19416] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 555.602194][T19423] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3444'. [ 555.732796][T19423] macsec1: entered promiscuous mode [ 555.738091][T19423] dummy0: entered promiscuous mode [ 555.743604][T19423] macsec1: entered allmulticast mode [ 555.748936][T19423] dummy0: entered allmulticast mode [ 555.919834][T19423] dummy0: left allmulticast mode [ 555.942373][T19433] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 556.075935][ T5767] dummy0: left promiscuous mode [ 556.158964][T19430] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 556.281466][T19430] bond1 (unregistering): Released all slaves [ 556.436536][T19441] pim6reg: entered allmulticast mode [ 556.447412][T19429] pim6reg: left allmulticast mode [ 556.971232][T19468] netlink: 'syz.2.3454': attribute type 10 has an invalid length. [ 556.981185][T19470] netlink: 'syz.2.3454': attribute type 10 has an invalid length. [ 556.996088][T19470] geneve1: entered promiscuous mode [ 557.036700][T19470] team0: Port device geneve1 added [ 557.094775][T19463] IPv6: Can't replace route, no match found [ 557.129803][T19468] IPv6: Can't replace route, no match found [ 557.136109][T19468] IPv6: Can't replace route, no match found [ 557.161738][T19463] IPv6: Can't replace route, no match found [ 557.317367][T19474] __nla_validate_parse: 4 callbacks suppressed [ 557.317386][T19474] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3455'. [ 557.411751][ T5367] IPVS: starting estimator thread 0... [ 557.411761][T19474] IPVS: set_ctl: invalid protocol: 103 224.0.0.1:20001 [ 557.432413][T19484] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3457'. [ 557.700937][T19496] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3460'. [ 557.724329][T19483] IPVS: using max 24 ests per chain, 57600 per kthread [ 557.913459][T19507] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3459'. [ 558.107934][T19510] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3463'. [ 558.146914][T19513] netlink: 244 bytes leftover after parsing attributes in process `syz.3.3462'. [ 558.257448][T19518] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3462'. [ 558.379721][T18698] dvmrp0: left allmulticast mode [ 558.396050][T19518] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3462'. [ 558.625278][T19518] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3462'. [ 558.642385][T19535] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3467'. [ 558.723503][T19538] netlink: 'syz.1.3468': attribute type 10 has an invalid length. [ 558.929727][T19550] netlink: 'syz.1.3468': attribute type 10 has an invalid length. [ 558.981109][T18698] bond2 (unregistering): (slave bridge0): Releasing backup interface [ 559.032909][T18698] bond6 (unregistering): (slave bridge4): Releasing backup interface [ 559.067614][T18698] bond0 (unregistering): (slave bridge7): Releasing backup interface [ 559.081972][T18698] team0: Port device bridge8 removed [ 559.111046][T18698]  (unregistering): Released all slaves [ 559.154271][T18698] bond1 (unregistering): Released all slaves [ 559.187187][T18701] smbdirect: ib_dev[syz1] removed [ 559.216644][T18698] bond2 (unregistering): Released all slaves [ 559.261557][T18698] bond3 (unregistering): Released all slaves [ 559.281050][T18698] bond4 (unregistering): Released all slaves [ 559.300333][T18698] bond5 (unregistering): Released all slaves [ 559.325170][T18698] bond6 (unregistering): Released all slaves [ 559.356578][T18698] bond7 (unregistering): Released all slaves [ 559.385072][T18698] bond8 (unregistering): (slave batadv1): Releasing backup interface [ 559.398753][T18698] bond8 (unregistering): Released all slaves [ 559.422177][T18698] bond0 (unregistering): Released all slaves [ 559.727631][T18698] 5nè‹Ò: left promiscuous mode [ 560.044963][T18698] tipc: Disabling bearer [ 560.154347][T18698] tipc: Left network mode [ 560.705902][T19578] netlink: 'syz.3.3477': attribute type 10 has an invalid length. [ 560.765955][T19542] infiniband uyz0: set active [ 560.772615][T19542] infiniband uyz0: added bridge_slave_1 [ 560.819043][T19578] team0: Port device dummy0 added [ 560.840224][T19542] smbdirect: ib_dev[uyz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 560.857394][T19542] smbdirect: ib_dev[uyz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 560.875261][T19542] smbdirect: ib_dev[uyz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 560.969773][T19542] RDS/IB: uyz0: added [ 561.016375][T19542] smc: adding ib device uyz0 with port count 1 [ 561.047314][T19542] smc: ib device uyz0 port 1 has no pnetid [ 561.460431][T19608] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 561.933734][T19625] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 561.998674][T19627] xt_hashlimit: size too large, truncated to 1048576 [ 563.169501][T19661] netlink: 'syz.3.3498': attribute type 1 has an invalid length. [ 563.254180][T19661] 8021q: adding VLAN 0 to HW filter on device bond2 [ 563.422671][T19656] bond2: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 563.479531][T19661] macvlan2: entered promiscuous mode [ 563.484892][T19661] macvlan2: entered allmulticast mode [ 563.618769][T19661] bond2: entered promiscuous mode [ 563.624693][T19661] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 563.632472][T19661] bond2: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 563.684507][T19661] bond2: left promiscuous mode [ 563.955361][T19678] __nla_validate_parse: 10 callbacks suppressed [ 563.955380][T19678] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3499'. [ 564.320284][T19693] bridge_slave_0: left allmulticast mode [ 564.329416][T19693] bridge_slave_0: left promiscuous mode [ 564.337012][T19693] bridge0: port 1(bridge_slave_0) entered disabled state [ 564.351583][T19693] bond0: (slave bond_slave_0): Releasing backup interface [ 564.365543][T19693] bond0: (slave bond_slave_1): Releasing backup interface [ 564.419403][T19693] team0: Port device team_slave_0 removed [ 564.478814][T19693] team0: Port device team_slave_1 removed [ 564.508229][T19693] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 564.529954][T19693] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 564.542272][T19693] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 564.550089][T19693] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 564.559439][T19693] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 564.892021][T19711] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 564.933292][T19711] netlink: 260 bytes leftover after parsing attributes in process `syz.0.3506'. [ 565.272243][T19723] block nbd3: not configured, cannot reconfigure [ 566.081698][T19750] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3516'. [ 567.341759][T19791] netlink: 'syz.4.3522': attribute type 1 has an invalid length. [ 567.453474][T19791] 8021q: adding VLAN 0 to HW filter on device bond1 [ 568.052069][T19810] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3524'. [ 568.225634][T19817] netlink: 1576 bytes leftover after parsing attributes in process `syz.0.3526'. [ 568.250361][T19816] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3524'. [ 568.307139][T19820] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3524'. [ 568.331630][T19821] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3527'. [ 568.409330][T19825] openvswitch: netlink: VXLAN extension 307 out of range max 1 [ 570.195355][T18698] hsr_slave_0: left promiscuous mode [ 570.203447][T18698] hsr_slave_1: left promiscuous mode [ 570.861135][T18698] team0 (unregistering): Port device veth1_to_hsr removed [ 571.993001][T18698] IPVS: stop unused estimator thread 0... [ 595.844733][ T5638] Bluetooth: hci5: command 0x0406 tx timeout [ 611.378672][ T5638] Bluetooth: hci0: command 0x0406 tx timeout [ 621.444378][ T5638] Bluetooth: hci4: command 0x0405 tx timeout [ 629.026961][T19895] netlink: 'syz.4.3539': attribute type 1 has an invalid length. [ 629.318806][T19899] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 629.556226][T19893] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3539'. [ 629.609960][T19886] veth3: entered promiscuous mode [ 629.618495][T19886] bond2: (slave veth3): Enslaving as a backup interface with a down link [ 629.633018][T18702] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 629.678188][T19893] 8021q: adding VLAN 0 to HW filter on device bond2 [ 629.775444][T18698] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 630.027461][T19927] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3549'. [ 630.109265][T19932] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3548'. [ 630.156010][T19929] netlink: 'syz.1.3547': attribute type 2 has an invalid length. [ 630.161016][T19936] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3550'. [ 630.208402][T19938] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3552'. [ 630.322623][T19946] syzkaller0: entered promiscuous mode [ 630.328611][T19946] syzkaller0: entered allmulticast mode [ 630.337912][T19946] 0: reclassify loop, rule prio 0, protocol 800 [ 630.349969][T19948] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3555'. [ 630.365064][T19948] netlink: 'syz.3.3555': attribute type 13 has an invalid length. [ 630.373190][T19948] netlink: 'syz.3.3555': attribute type 17 has an invalid length. [ 630.471270][T19948] team_slave_1: left promiscuous mode [ 630.476879][T19948] team_slave_1: left allmulticast mode [ 630.522388][T19948] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 630.611943][T18698] bond2: (slave veth0_to_bond): link status definitely up, 10000 Mbps full duplex [ 630.637146][T18698] bond2: (slave veth0_to_bond): making interface the new active one [ 630.652854][T18698] bond2: active interface up! [ 631.307273][T19972] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3563'. [ 631.565156][T19983] netlink: 'syz.3.3566': attribute type 1 has an invalid length. [ 631.718506][T19983] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3566'. [ 631.745655][T19983] 8021q: adding VLAN 0 to HW filter on device bond3 [ 632.059077][T19992] bond3: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 632.230557][T19992] bond3 (unregistering): Released all slaves [ 632.269139][T20005] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3569'. [ 632.278594][T20005] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3569'. [ 633.086835][T20037] tipc: Started in network mode [ 633.091781][T20037] tipc: Node identity ff020000000000000000000000000001, cluster identity 4711 [ 633.100732][T20037] tipc: Enabling of bearer rejected, failed to enable media [ 633.357616][T20045] ip6gre1: entered promiscuous mode [ 633.362918][T20045] ip6gre1: entered allmulticast mode [ 633.406014][T20045] netlink: 'syz.1.3587': attribute type 6 has an invalid length. [ 633.443303][T20053] netlink: 'syz.2.3586': attribute type 11 has an invalid length. [ 633.502151][T20053] netlink: 'syz.2.3586': attribute type 1 has an invalid length. [ 633.651664][T20061] mac80211_hwsim hwsim43 wlan0: entered promiscuous mode [ 633.664247][T20061] mac80211_hwsim hwsim43 wlan0: entered allmulticast mode [ 633.814317][T20066] tipc: Started in network mode [ 633.836959][T20066] tipc: Node identity 169a16fac24e, cluster identity 4711 [ 633.854433][T20066] tipc: Enabled bearer , priority 0 [ 633.864482][T20066] syzkaller0: entered promiscuous mode [ 633.870041][T20066] syzkaller0: entered allmulticast mode [ 633.895429][T20066] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 634.125470][T20071] team0: Port device team_slave_0 removed [ 634.183369][T20070] tipc: Resetting bearer [ 634.226262][T20063] tipc: Resetting bearer [ 634.315993][T20082] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 634.368572][T20063] tipc: Disabling bearer [ 634.445957][T20084] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 634.761302][T20099] __nla_validate_parse: 9 callbacks suppressed [ 634.761322][T20099] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3602'. [ 635.340873][T20119] netlink: 211276 bytes leftover after parsing attributes in process `syz.3.3606'. [ 635.642310][T20139] IPv6: addrconf: prefix option has invalid lifetime [ 636.076071][T20145] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3612'. [ 636.077848][T20149] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3612'. [ 636.143202][T20151] ip6erspan0: entered allmulticast mode [ 636.431974][T20157] can: request_module (can-proto-5) failed. [ 636.804490][ T4951] Bluetooth: hci2: command 0x040f tx timeout [ 636.939777][T20182] netlink: 'syz.2.3621': attribute type 1 has an invalid length. [ 636.988014][T20166] netlink: 'syz.4.3617': attribute type 2 has an invalid length. [ 636.990640][T20184] netlink: 'syz.3.3622': attribute type 10 has an invalid length. [ 637.003683][T20184] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3622'. [ 637.045764][T20184] team0: Port device geneve1 added [ 637.052316][T20182] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 637.056073][T20166] netlink: 'syz.4.3617': attribute type 2 has an invalid length. [ 637.138748][T20175] macsec1: entered promiscuous mode [ 637.414484][T20198] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3624'. [ 637.531286][T20200] netlink: 'syz.2.3625': attribute type 13 has an invalid length. [ 637.539184][T20200] netlink: 'syz.2.3625': attribute type 17 has an invalid length. [ 638.161774][T20197] bridge0: port 2(bridge_slave_1) entered disabled state [ 638.250360][T20197] team_slave_1: left promiscuous mode [ 638.724997][T20197] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 638.767890][T20197] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 639.408402][T20200] 8021q: adding VLAN 0 to HW filter on device bond0 [ 639.418664][T20200] 8021q: adding VLAN 0 to HW filter on device team0 [ 639.431586][T20200] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 639.452482][T20200] bridge0: port 2(bridge_slave_1) entered blocking state [ 639.459708][T20200] bridge0: port 2(bridge_slave_1) entered forwarding state [ 639.478650][T20200] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 639.488836][T20200] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 639.522099][T20200] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 639.539055][T20207] syzkaller0: entered promiscuous mode [ 639.544670][T20207] syzkaller0: entered allmulticast mode [ 639.705607][T20234] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3632'. [ 639.779964][T18700] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.807815][T18700] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.906823][T18700] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.013077][T20245] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3636'. [ 640.082669][T18700] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.250991][T20259] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3637'. [ 641.318176][T20251] bridge0: port 2(bridge_slave_1) entered disabled state [ 641.509552][T20264] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3640'. [ 641.824975][T20251] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 641.864759][T20251] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 642.172714][T20253] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3636'. [ 642.273819][T20259] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3637'. [ 642.379253][T20264] bridge0: port 2(bridge_slave_1) entered disabled state [ 642.416406][T20264] bridge_slave_1 (unregistering): left allmulticast mode [ 642.449220][T20264] bridge_slave_1 (unregistering): left promiscuous mode [ 642.456825][T20264] bridge0: port 2(bridge_slave_1) entered disabled state [ 642.465739][T20273] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3641'. [ 642.490323][T20273] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3641'. [ 642.501354][T18703] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 642.510120][T18703] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.544856][T20276] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3642'. [ 642.552216][T18703] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 642.563928][T18703] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.577034][ T5760] uyz0: Port: 1 Link DOWN [ 642.581875][T18703] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 642.590643][T18703] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.599562][T18703] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 642.608292][T18703] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.935885][T20284] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 643.162028][T20294] netlink: 'syz.4.3647': attribute type 15 has an invalid length. [ 643.714771][T20321] Bluetooth: MGMT ver 1.23 [ 643.840475][T20328] sctp: [Deprecated]: syz.2.3655 (pid 20328) Use of int in maxseg socket option. [ 643.840475][T20328] Use struct sctp_assoc_value instead [ 644.511365][T20338] netlink: 'syz.1.3660': attribute type 1 has an invalid length. [ 644.767904][T20341] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3660'. [ 644.798667][T20341] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3660'. [ 644.826275][T20341] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 644.838784][T20341] bond_slave_0: left allmulticast mode [ 644.845099][T20343] netlink: 'syz.2.3661': attribute type 1 has an invalid length. [ 645.211680][T20341] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 645.221571][T20341] bond_slave_1: left allmulticast mode [ 645.227619][T20341] bond0 (unregistering): Released all slaves [ 645.337058][T20343] 8021q: adding VLAN 0 to HW filter on device bond4 [ 645.420317][T20349] syzkaller0: entered promiscuous mode [ 645.468958][T20349] syzkaller0: entered allmulticast mode [ 645.848645][T20359] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3665'. [ 645.858173][T20359] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3665'. [ 646.097640][T20366] block nbd3: not configured, cannot reconfigure [ 646.119786][T20362] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3666'. [ 646.135475][T20362] bond0: entered promiscuous mode [ 646.140564][T20362] bond_slave_0: entered promiscuous mode [ 646.146463][T20362] bond_slave_1: entered promiscuous mode [ 646.152351][T20362] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 646.194223][T20362] bond0: left promiscuous mode [ 646.200800][T20362] bond_slave_0: left promiscuous mode [ 646.223641][T20362] bond_slave_1: left promiscuous mode [ 646.262063][T20362] netdevsim netdevsim2 netdevsim1: left promiscuous mode [ 646.761148][T20383] netlink: 'syz.4.3673': attribute type 1 has an invalid length. [ 646.912329][T20383] gretap1: entered allmulticast mode [ 646.923264][T20383] bond3: (slave gretap1): making interface the new active one [ 646.940026][T20383] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 647.290422][T20391] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3676'. [ 647.315805][T20391] vlan0: entered promiscuous mode [ 647.697292][T20400] block nbd3: not configured, cannot reconfigure [ 647.838039][T20406] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 647.875414][T20406] syz_tun: entered allmulticast mode [ 647.894755][T20408] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 647.958350][T20405] syz_tun: left allmulticast mode [ 648.177493][T20415] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 648.243523][T20415] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 648.353357][T20420] bond4: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-alb(6) [ 648.370142][T20424] netlink: 'syz.0.3688': attribute type 1 has an invalid length. [ 648.381691][T20420] bond4 (unregistering): Released all slaves [ 648.556750][T20424] 8021q: adding VLAN 0 to HW filter on device bond5 [ 648.582753][T20425] bond5: entered allmulticast mode [ 648.632329][T20427] bond5: (slave ip6gretap1): making interface the new active one [ 648.640272][T20427] ip6gretap1: entered allmulticast mode [ 648.648652][T20427] bond5: (slave ip6gretap1): Enslaving as an active interface with an up link [ 648.660429][T20433] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3691'. [ 648.773973][T20437] block nbd3: not configured, cannot reconfigure [ 648.831904][T20434] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 649.220788][T20460] xt_CT: You must specify a L4 protocol and not use inversions on it [ 649.354958][T20462] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 649.594272][T20472] ip6gretap0: entered promiscuous mode [ 650.457135][T20500] netlink: 'syz.3.3712': attribute type 3 has an invalid length. [ 650.479526][T20500] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3712'. [ 650.729220][T20500] bond4: up delay (2) is not a multiple of miimon (80), value rounded to 0 ms [ 650.764370][T20500] bond4: entered promiscuous mode [ 650.769903][T20500] 8021q: adding VLAN 0 to HW filter on device bond4 [ 651.072522][T20517] tipc: Enabled bearer , priority 0 [ 651.079603][T20518] tipc: Enabling of bearer rejected, already enabled [ 651.119786][T20517] netlink: 'syz.4.3715': attribute type 1 has an invalid length. [ 651.119798][T20518] netlink: 'syz.4.3715': attribute type 1 has an invalid length. [ 651.436692][T20518] 8021q: adding VLAN 0 to HW filter on device bond4 [ 651.563519][ T29] audit: type=1804 audit(1780097387.409:27): pid=20530 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.3717" name="/newroot/132/memory.events" dev="tmpfs" ino=686 res=1 errno=0 [ 651.620764][T20518] tipc: Disabling bearer [ 651.654430][T20531] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3718'. [ 651.671028][ T29] audit: type=1800 audit(1780097387.409:28): pid=20530 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3717" name="memory.events" dev="tmpfs" ino=686 res=0 errno=0 [ 651.756075][ T29] audit: type=1804 audit(1780097387.409:29): pid=20530 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.3717" name="/newroot/132/memory.events" dev="tmpfs" ino=686 res=1 errno=0 [ 651.875892][T20536] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3720'. [ 651.974245][T20536] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3720'. [ 652.265705][T20554] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3724'. [ 652.375312][T20557] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3724'. [ 652.700452][T20575] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3730'. [ 652.908444][T20576] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3731'. [ 652.971347][T20585] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3734'. [ 653.009244][T20585] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3734'. [ 653.037134][T20585] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3734'. [ 653.152744][T20593] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 654.311895][T20620] openvswitch: netlink: Message has 4 unknown bytes. [ 654.318669][T20620] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 654.641888][T20628] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 654.766037][T20633] openvswitch: netlink: Key 6 has unexpected len 318 expected 2 [ 655.038945][T20647] nbd: couldn't find a device at index 4 [ 655.425071][T20653] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 655.451653][T20653] syzkaller1: linktype set to 769 [ 655.911384][T20672] netlink: 'syz.1.3759': attribute type 1 has an invalid length. [ 655.989311][T20669] netlink: 'syz.3.3757': attribute type 7 has an invalid length. [ 656.152124][T20672] bond0: entered promiscuous mode [ 656.176223][T20672] bond0: entered allmulticast mode [ 656.202564][T20672] 8021q: adding VLAN 0 to HW filter on device bond0 [ 656.265148][T20674] macvlan2: entered promiscuous mode [ 656.282173][T20674] macvlan2: entered allmulticast mode [ 656.309883][T20674] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 656.331889][T20682] netlink: 'syz.2.3760': attribute type 1 has an invalid length. [ 656.703787][T20686] syzkaller0: entered promiscuous mode [ 656.709331][T20686] syzkaller0: entered allmulticast mode [ 657.396052][T20705] __nla_validate_parse: 17 callbacks suppressed [ 657.396072][T20705] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3767'. [ 657.563526][T20714] netlink: 'syz.2.3772': attribute type 11 has an invalid length. [ 657.571425][T20714] netlink: 'syz.2.3772': attribute type 11 has an invalid length. [ 658.149928][T20730] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 658.162653][T20730] syzkaller1: linktype set to 776 [ 658.490563][T20708] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 658.817060][T20748] nbd: must specify a device to reconfigure [ 658.963347][T20753] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3784'. [ 659.238681][T20763] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3787'. [ 659.247978][T20763] openvswitch: netlink: Invalid VLAN frame [ 659.346291][T20772] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3790'. [ 659.433530][T20768] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3788'. [ 659.446015][T20775] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3791'. [ 659.479199][T20775] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3791'. [ 659.663156][T20786] veth0_virtÿifi: renamed from erspan0 (while UP) [ 659.701847][T20786] veth0_virtÿifi: refused to change device tx_queue_len [ 659.709046][T20786] A link change request failed with some changes committed already. Interface veth0_virtÿifi may have been left with an inconsistent configuration, please check. [ 659.725853][T20788] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3794'. [ 659.938797][T18654] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 659.968100][T18654] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 660.008118][T18654] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 660.031439][T18654] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 660.260851][T20805] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3798'. [ 660.286493][T20808] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3800'. [ 660.384966][T18654] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 660.415263][T18654] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 660.447574][T18654] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 660.463775][T20815] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input6 [ 660.494286][T18654] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 661.060752][T20841] batadv0: entered promiscuous mode [ 661.070786][T20840] batadv0: left promiscuous mode [ 661.392891][T20852] syzkaller0: entered promiscuous mode [ 661.398449][T20852] syzkaller0: entered allmulticast mode [ 661.428147][T20864] tipc: Enabled bearer , priority 0 [ 661.476320][T20852] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 661.483931][T20852] dvmrp1: linktype set to 0 [ 661.500639][T20864] syzkaller0: entered promiscuous mode [ 661.506162][T20864] syzkaller0: entered allmulticast mode [ 661.595840][T20864] tipc: Resetting bearer [ 661.613335][T20863] tipc: Resetting bearer [ 661.689127][T20863] tipc: Disabling bearer [ 662.373107][T18702] bond0: (slave netdevsim1): link status definitely down, disabling slave [ 662.581747][T20890] __nla_validate_parse: 6 callbacks suppressed [ 662.581766][T20890] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3826'. [ 662.962702][T20907] FAULT_INJECTION: forcing a failure. [ 662.962702][T20907] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 662.988028][T20907] CPU: 0 UID: 0 PID: 20907 Comm: syz.0.3832 Not tainted syzkaller #0 PREEMPT(full) [ 662.988075][T20907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 662.988097][T20907] Call Trace: [ 662.988105][T20907] [ 662.988114][T20907] dump_stack_lvl+0xe8/0x150 [ 662.988145][T20907] should_fail_ex+0x412/0x560 [ 662.988174][T20907] _copy_from_user+0x2d/0xb0 [ 662.988206][T20907] ___sys_sendmsg+0x1c6/0x360 [ 662.988229][T20907] ? __lock_acquire+0x6b5/0x2cf0 [ 662.988257][T20907] ? __pfx____sys_sendmsg+0x10/0x10 [ 662.988288][T20907] ? kstrtouint+0x6e/0xe0 [ 662.988346][T20907] ? __fget_files+0x2a/0x420 [ 662.988385][T20907] ? __fget_files+0x3a0/0x420 [ 662.988422][T20907] __sys_sendmmsg+0x27c/0x4e0 [ 662.988453][T20907] ? __pfx___sys_sendmmsg+0x10/0x10 [ 662.988475][T20907] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 662.988538][T20907] ? ksys_write+0x242/0x270 [ 662.988571][T20907] ? __pfx_ksys_write+0x10/0x10 [ 662.988610][T20907] __x64_sys_sendmmsg+0xa0/0xc0 [ 662.988635][T20907] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 662.988657][T20907] do_syscall_64+0x174/0x580 [ 662.988677][T20907] ? trace_irq_disable+0x3b/0x140 [ 662.988709][T20907] ? clear_bhb_loop+0x40/0x90 [ 662.988735][T20907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 662.988756][T20907] RIP: 0033:0x7f7bbfb9ce59 [ 662.988776][T20907] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 662.988793][T20907] RSP: 002b:00007f7bbddf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 662.988815][T20907] RAX: ffffffffffffffda RBX: 00007f7bbfe15fa0 RCX: 00007f7bbfb9ce59 [ 662.988831][T20907] RDX: 0000000000000001 RSI: 00002000000032c0 RDI: 0000000000000003 [ 662.988845][T20907] RBP: 00007f7bbddf6090 R08: 0000000000000000 R09: 0000000000000000 [ 662.988858][T20907] R10: 0000000000004000 R11: 0000000000000246 R12: 0000000000000001 [ 662.988871][T20907] R13: 00007f7bbfe16038 R14: 00007f7bbfe15fa0 R15: 00007ffd30a67648 [ 662.988906][T20907] [ 663.608376][T20930] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3839'. [ 663.664380][ T6007] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 663.732827][T20916] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3836'. [ 663.805555][T18698] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 663.869225][T20916] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3836'. [ 663.885611][T20916] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3836'. [ 664.405303][ T6007] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 664.632397][T20941] veth1_vlan (unregistering): left allmulticast mode [ 664.712971][T20958] FAULT_INJECTION: forcing a failure. [ 664.712971][T20958] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 664.761651][T20958] CPU: 1 UID: 0 PID: 20958 Comm: syz.1.3847 Not tainted syzkaller #0 PREEMPT(full) [ 664.761680][T20958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 664.761693][T20958] Call Trace: [ 664.761702][T20958] [ 664.761711][T20958] dump_stack_lvl+0xe8/0x150 [ 664.761740][T20958] should_fail_ex+0x412/0x560 [ 664.761769][T20958] _copy_from_user+0x2d/0xb0 [ 664.761796][T20958] __copy_msghdr+0x3c5/0x5b0 [ 664.761825][T20958] ___sys_sendmsg+0x213/0x360 [ 664.761848][T20958] ? __lock_acquire+0x6b5/0x2cf0 [ 664.761876][T20958] ? __pfx____sys_sendmsg+0x10/0x10 [ 664.761906][T20958] ? kstrtouint+0x6e/0xe0 [ 664.761966][T20958] ? __fget_files+0x2a/0x420 [ 664.761992][T20958] ? __fget_files+0x3a0/0x420 [ 664.762029][T20958] __sys_sendmmsg+0x27c/0x4e0 [ 664.762060][T20958] ? __pfx___sys_sendmmsg+0x10/0x10 [ 664.762094][T20958] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 664.762147][T20958] ? ksys_write+0x242/0x270 [ 664.762181][T20958] ? __pfx_ksys_write+0x10/0x10 [ 664.762219][T20958] __x64_sys_sendmmsg+0xa0/0xc0 [ 664.762244][T20958] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 664.762267][T20958] do_syscall_64+0x174/0x580 [ 664.762287][T20958] ? trace_irq_disable+0x3b/0x140 [ 664.762320][T20958] ? clear_bhb_loop+0x40/0x90 [ 664.762346][T20958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 664.762367][T20958] RIP: 0033:0x7f6a49d9ce59 [ 664.762386][T20958] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 664.762404][T20958] RSP: 002b:00007f6a4ac0c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 664.762426][T20958] RAX: ffffffffffffffda RBX: 00007f6a4a015fa0 RCX: 00007f6a49d9ce59 [ 664.762440][T20958] RDX: 0000000000000001 RSI: 00002000000032c0 RDI: 0000000000000003 [ 664.762454][T20958] RBP: 00007f6a4ac0c090 R08: 0000000000000000 R09: 0000000000000000 [ 664.762466][T20958] R10: 0000000000004000 R11: 0000000000000246 R12: 0000000000000001 [ 664.762479][T20958] R13: 00007f6a4a016038 R14: 00007f6a4a015fa0 R15: 00007ffc8da7f9f8 [ 664.762512][T20958] [ 665.122921][T20963] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3848'. [ 665.397591][T18707] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 665.416547][T18707] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 665.480655][ T8620] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 665.839758][T20990] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3852'. [ 665.889222][T20990] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3852'. [ 666.329801][T20994] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3856'. [ 666.643014][T20983] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 666.687353][T20983] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 666.951814][T18703] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 666.986990][T18703] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 667.014435][T18703] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 667.058664][T18703] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 667.189244][T21011] netlink: 'syz.3.3861': attribute type 1 has an invalid length. [ 667.243062][T21011] 8021q: adding VLAN 0 to HW filter on device bond5 [ 667.306448][T21011] bond5: (slave macvlan0): making interface the new active one [ 667.382067][T21011] bond5: (slave macvlan0): Enslaving as an active interface with an up link [ 667.415944][T21025] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 667.673650][T21033] netlink: 120 bytes leftover after parsing attributes in process `syz.4.3866'. [ 667.715842][T21034] netlink: 'syz.0.3867': attribute type 39 has an invalid length. [ 667.722783][T21032] bridge4: entered allmulticast mode [ 667.757392][T21033] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3866'. [ 668.266745][T21055] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3874'. [ 668.279629][T21057] netlink: 'syz.3.3876': attribute type 1 has an invalid length. [ 668.386271][T21060] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3877'. [ 668.455107][T21057] 8021q: adding VLAN 0 to HW filter on device bond6 [ 668.537403][T21063] bond6: entered allmulticast mode [ 668.555272][T21064] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3874'. [ 668.618610][T21066] netlink: 'syz.0.3878': attribute type 2 has an invalid length. [ 668.704226][T21055] nbd1: detected capacity change from 0 to 3 [ 668.717976][T19905] block nbd1: Dead connection, failed to find a fallback [ 668.980082][T21075] netlink: 368 bytes leftover after parsing attributes in process `syz.0.3880'. [ 669.036543][T21075] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3880'. [ 669.045551][T21075] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3880'. [ 669.054541][T21075] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3880'. [ 669.281945][T21085] netlink: 272 bytes leftover after parsing attributes in process `syz.1.3884'. [ 669.320198][T21081] nbd: must specify a size in bytes for the device [ 669.465966][T21090] netlink: 'syz.4.3883': attribute type 1 has an invalid length. [ 669.706479][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 671.018519][T21090] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 671.022885][T21099] netlink: 'syz.1.3886': attribute type 4 has an invalid length. [ 671.299560][T21122] syzkaller0: entered promiscuous mode [ 671.305116][T21122] syzkaller0: entered allmulticast mode [ 671.798225][T21150] unsupported nlmsg_type 40 [ 671.822126][T21152] netlink: 'syz.1.3894': attribute type 13 has an invalid length. [ 671.874382][T18702] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 671.886813][T18702] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 671.895782][T18702] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 671.905495][T18702] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 672.045479][T21157] syzkaller0: entered promiscuous mode [ 672.122153][T21157] syzkaller0: entered allmulticast mode [ 672.555286][T21177] netlink: 'syz.2.3904': attribute type 8 has an invalid length. [ 672.563065][T21177] netlink: 'syz.2.3904': attribute type 9 has an invalid length. [ 672.768927][T21185] IPVS: set_ctl: invalid protocol: 44 10.1.1.2:20001 [ 673.453082][T18703] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 673.474988][T21208] bridge_slave_0: left allmulticast mode [ 673.480873][T21208] bridge_slave_0: left promiscuous mode [ 673.486702][T21208] bridge0: port 1(bridge_slave_0) entered disabled state [ 673.500267][T21208] bridge_slave_1: left allmulticast mode [ 673.512850][T21208] bridge_slave_1: left promiscuous mode [ 673.522721][T21208] bridge0: port 2(bridge_slave_1) entered disabled state [ 673.536241][T21211] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 673.551642][T21208] bond0: (slave bond_slave_0): Releasing backup interface [ 673.567426][T21208] bond0: (slave bond_slave_1): Releasing backup interface [ 673.593658][T21208] team0: Port device team_slave_0 removed [ 673.613522][T21208] team0: Port device team_slave_1 removed [ 673.620628][T21208] batman_adv: 60ªX¹¦À: Interface deactivated: batadv_slave_0 [ 673.633751][T21208] batman_adv: 60ªX¹¦À: Removing interface: batadv_slave_0 [ 673.673057][T21208] batman_adv: 60ªX¹¦À: Interface deactivated: batadv_slave_1 [ 673.680610][T21208] batman_adv: 60ªX¹¦À: Removing interface: batadv_slave_1 [ 673.695276][T21208] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 673.711549][T21205] netlink: 'syz.4.3914': attribute type 15 has an invalid length. [ 673.846099][T21220] ip6gre2: entered allmulticast mode [ 673.948857][T21220] team0: Port device ip6gre2 added [ 673.978421][T21226] nbd: couldn't find a device at index 4 [ 674.059108][T21229] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 674.158802][T21236] v: renamed from ip6tnl0 (while UP) [ 674.312759][T21236] __nla_validate_parse: 8 callbacks suppressed [ 674.312779][T21236] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3921'. [ 674.334808][T21236] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 674.997358][T21260] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3927'. [ 675.098671][T21260] veth9: entered allmulticast mode [ 675.598718][T21275] netlink: 97 bytes leftover after parsing attributes in process `syz.4.3931'. [ 675.643309][T21275] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3931'. [ 675.683715][T21275] netlink: 'syz.4.3931': attribute type 1 has an invalid length. [ 676.153117][T21283] netlink: 'syz.4.3935': attribute type 4 has an invalid length. [ 676.165334][T21283] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3935'. [ 676.174442][T21283] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3935'. [ 676.228411][T21285] netlink: 'syz.0.3934': attribute type 1 has an invalid length. [ 676.341459][T21290] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3934'. [ 676.489617][T21290] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3934'. [ 676.621241][T21293] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3937'. [ 676.725931][T21285] bond6: (slave gretap2): making interface the new active one [ 676.756634][T21285] bond6: (slave gretap2): Enslaving as an active interface with an up link [ 676.772508][T21297] nbd: couldn't find a device at index 4 [ 676.843453][T21290] macvlan0: entered promiscuous mode [ 676.862371][T21290] macvlan0: entered allmulticast mode [ 677.134341][T21308] netlink: 'syz.4.3942': attribute type 1 has an invalid length. [ 677.245912][T21308] bond5: entered promiscuous mode [ 677.254730][T21308] 8021q: adding VLAN 0 to HW filter on device bond5 [ 677.307848][T21315] netlink: 'syz.2.3943': attribute type 83 has an invalid length. [ 677.367697][T21316] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3942'. [ 677.689392][T21326] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 678.852651][T21359] 8021q: adding VLAN 0 to HW filter on device bond5 [ 678.993139][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 679.175038][T21371] netlink: 'syz.4.3961': attribute type 5 has an invalid length. [ 679.190272][T21373] FAULT_INJECTION: forcing a failure. [ 679.190272][T21373] name failslab, interval 1, probability 0, space 0, times 0 [ 679.227674][T21373] CPU: 1 UID: 0 PID: 21373 Comm: syz.1.3962 Not tainted syzkaller #0 PREEMPT(full) [ 679.227704][T21373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 679.227717][T21373] Call Trace: [ 679.227726][T21373] [ 679.227735][T21373] dump_stack_lvl+0xe8/0x150 [ 679.227764][T21373] should_fail_ex+0x412/0x560 [ 679.227792][T21373] should_failslab+0xa8/0x100 [ 679.227816][T21373] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 679.227846][T21373] ? __alloc_skb+0x186/0x7d0 [ 679.227866][T21373] ? __alloc_skb+0x1d0/0x7d0 [ 679.227883][T21373] ? __local_bh_enable_ip+0xd0/0x130 [ 679.227910][T21373] __alloc_skb+0x1d0/0x7d0 [ 679.227935][T21373] netlink_sendmsg+0x5d4/0xb40 [ 679.227979][T21373] ? __pfx_netlink_sendmsg+0x10/0x10 [ 679.228008][T21373] ? aa_sock_msg_perm+0xf1/0x1b0 [ 679.228041][T21373] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 679.228073][T21373] ____sys_sendmsg+0x972/0x9f0 [ 679.228097][T21373] ? __might_fault+0xaf/0x130 [ 679.228130][T21373] ? __pfx_____sys_sendmsg+0x10/0x10 [ 679.228164][T21373] ? import_iovec+0x73/0xa0 [ 679.228203][T21373] ___sys_sendmsg+0x2a5/0x360 [ 679.228225][T21373] ? __lock_acquire+0x6b5/0x2cf0 [ 679.228251][T21373] ? __pfx____sys_sendmsg+0x10/0x10 [ 679.228297][T21373] ? kstrtouint+0x6e/0xe0 [ 679.228358][T21373] ? __fget_files+0x2a/0x420 [ 679.228383][T21373] ? __fget_files+0x3a0/0x420 [ 679.228417][T21373] __sys_sendmmsg+0x27c/0x4e0 [ 679.228445][T21373] ? __pfx___sys_sendmmsg+0x10/0x10 [ 679.228465][T21373] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 679.228512][T21373] ? ksys_write+0x242/0x270 [ 679.228545][T21373] ? __pfx_ksys_write+0x10/0x10 [ 679.228582][T21373] __x64_sys_sendmmsg+0xa0/0xc0 [ 679.228605][T21373] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 679.228628][T21373] do_syscall_64+0x174/0x580 [ 679.228650][T21373] ? trace_irq_disable+0x3b/0x140 [ 679.228679][T21373] ? clear_bhb_loop+0x40/0x90 [ 679.228706][T21373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 679.228727][T21373] RIP: 0033:0x7f6a49d9ce59 [ 679.228746][T21373] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 679.228765][T21373] RSP: 002b:00007f6a4ac0c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 679.228787][T21373] RAX: ffffffffffffffda RBX: 00007f6a4a015fa0 RCX: 00007f6a49d9ce59 [ 679.228803][T21373] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000003 [ 679.228817][T21373] RBP: 00007f6a4ac0c090 R08: 0000000000000000 R09: 0000000000000000 [ 679.228830][T21373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 679.228842][T21373] R13: 00007f6a4a016038 R14: 00007f6a4a015fa0 R15: 00007ffc8da7f9f8 [ 679.228875][T21373] [ 679.248147][T21371] geneve2: entered promiscuous mode [ 679.669396][T21371] geneve2: entered allmulticast mode [ 679.677794][T18654] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 55241 - 0 [ 679.689961][T21378] netlink: 'syz.2.3963': attribute type 39 has an invalid length. [ 679.706825][ T154] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 55241 - 0 [ 679.724259][ T154] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 55241 - 0 [ 679.740583][ T154] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 55241 - 0 [ 679.887144][T21388] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 679.904162][T21385] __nla_validate_parse: 5 callbacks suppressed [ 679.904182][T21385] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3965'. [ 680.125837][T21401] : renamed from bond0 (while UP) [ 680.146656][T21401] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3967'. [ 680.157645][T21363] openvswitch: netlink: Unexpected mask (mask=5000040, allowed=1010048) [ 680.220528][T21401] team1: entered promiscuous mode [ 680.229059][T21401] team1: entered allmulticast mode [ 680.262768][T21401] 8021q: adding VLAN 0 to HW filter on device team1 [ 680.518578][T21415] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3972'. [ 680.570246][T21419] netlink: 'syz.2.3973': attribute type 1 has an invalid length. [ 680.647285][T21419] 8021q: adding VLAN 0 to HW filter on device bond6 [ 680.715898][T21423] bond6: (slave geneve2): making interface the new active one [ 680.725064][T21423] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 680.733851][T18674] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 680.747856][T18674] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 680.757643][T18674] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 680.766873][T18674] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 680.926114][T21427] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3974'. [ 681.110896][T21444] x_tables: duplicate underflow at hook 1 [ 681.568001][T21457] syzkaller0: entered promiscuous mode [ 681.573554][T21457] syzkaller0: entered allmulticast mode [ 681.671420][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880216aa400: rx timeout, send abort [ 682.031943][T21466] netlink: 'syz.2.3988': attribute type 32 has an invalid length. [ 682.039831][T21466] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3988'. [ 682.134092][T21466] bond7: option coupled_control: invalid value (12) [ 682.169753][T21466] bond7 (unregistering): Released all slaves [ 682.219433][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880216aa400: abort rx timeout. Force session deactivation [ 682.602501][T21480] netlink: 'syz.4.3992': attribute type 66 has an invalid length. [ 682.639061][T21482] FAULT_INJECTION: forcing a failure. [ 682.639061][T21482] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 682.652867][T21482] CPU: 0 UID: 0 PID: 21482 Comm: syz.1.3993 Not tainted syzkaller #0 PREEMPT(full) [ 682.652895][T21482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 682.652908][T21482] Call Trace: [ 682.652916][T21482] [ 682.652924][T21482] dump_stack_lvl+0xe8/0x150 [ 682.652954][T21482] should_fail_ex+0x412/0x560 [ 682.652982][T21482] _copy_from_iter+0x1d3/0x1670 [ 682.653009][T21482] ? rcu_is_watching+0x15/0xb0 [ 682.653040][T21482] ? __pfx__copy_from_iter+0x10/0x10 [ 682.653072][T21482] ? netlink_sendmsg+0x650/0xb40 [ 682.653095][T21482] ? skb_put+0x11b/0x210 [ 682.653121][T21482] netlink_sendmsg+0x6c0/0xb40 [ 682.653155][T21482] ? __pfx_netlink_sendmsg+0x10/0x10 [ 682.653183][T21482] ? aa_sock_msg_perm+0xf1/0x1b0 [ 682.653217][T21482] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 682.653249][T21482] ____sys_sendmsg+0x972/0x9f0 [ 682.653273][T21482] ? __might_fault+0xaf/0x130 [ 682.653307][T21482] ? __pfx_____sys_sendmsg+0x10/0x10 [ 682.653341][T21482] ? import_iovec+0x73/0xa0 [ 682.653370][T21482] ___sys_sendmsg+0x2a5/0x360 [ 682.653393][T21482] ? __lock_acquire+0x6b5/0x2cf0 [ 682.653420][T21482] ? __pfx____sys_sendmsg+0x10/0x10 [ 682.653450][T21482] ? kstrtouint+0x6e/0xe0 [ 682.653517][T21482] ? __fget_files+0x2a/0x420 [ 682.653542][T21482] ? __fget_files+0x3a0/0x420 [ 682.653579][T21482] __sys_sendmmsg+0x27c/0x4e0 [ 682.653610][T21482] ? __pfx___sys_sendmmsg+0x10/0x10 [ 682.653636][T21482] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 682.653687][T21482] ? ksys_write+0x242/0x270 [ 682.653720][T21482] ? __pfx_ksys_write+0x10/0x10 [ 682.653765][T21482] __x64_sys_sendmmsg+0xa0/0xc0 [ 682.653790][T21482] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 682.653812][T21482] do_syscall_64+0x174/0x580 [ 682.653833][T21482] ? trace_irq_disable+0x3b/0x140 [ 682.653864][T21482] ? clear_bhb_loop+0x40/0x90 [ 682.653890][T21482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 682.653912][T21482] RIP: 0033:0x7f6a49d9ce59 [ 682.653931][T21482] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 682.653949][T21482] RSP: 002b:00007f6a4ac0c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 682.653970][T21482] RAX: ffffffffffffffda RBX: 00007f6a4a015fa0 RCX: 00007f6a49d9ce59 [ 682.653985][T21482] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000003 [ 682.653999][T21482] RBP: 00007f6a4ac0c090 R08: 0000000000000000 R09: 0000000000000000 [ 682.654012][T21482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 682.654024][T21482] R13: 00007f6a4a016038 R14: 00007f6a4a015fa0 R15: 00007ffc8da7f9f8 [ 682.654058][T21482] [ 683.395320][T21498] batadv0: entered promiscuous mode [ 683.408015][T21498] veth1_to_batadv: entered promiscuous mode [ 683.431102][T21498] debugfs: 'hsr1' already exists in 'hsr' [ 683.436958][T21498] Cannot create hsr debugfs directory [ 683.442534][T21498] hsr1: Slave A (batadv0) is not up; please bring it up to get a fully working HSR network [ 683.469249][T21498] hsr1: Slave B (veth1_to_batadv) is not up; please bring it up to get a fully working HSR network [ 683.499474][T21508] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4000'. [ 683.509788][T21508] netlink: 192 bytes leftover after parsing attributes in process `syz.3.4000'. [ 683.519760][T21498] hsr1: entered allmulticast mode [ 683.524848][T21498] batadv0: entered allmulticast mode [ 683.530171][T21498] veth1_to_batadv: entered allmulticast mode [ 683.819117][T21515] syzkaller0: entered promiscuous mode [ 683.851086][T21515] syzkaller0: entered allmulticast mode [ 684.397296][T21521] netlink: 'syz.4.4004': attribute type 1 has an invalid length. [ 684.495009][T21521] 8021q: adding VLAN 0 to HW filter on device bond6 [ 684.609422][T21528] bond6: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 684.704760][T21521] bond6: entered promiscuous mode [ 684.719029][T21521] bond6: entered allmulticast mode [ 684.988581][T21534] netlink: 'syz.4.4008': attribute type 13 has an invalid length. [ 685.210168][T21540] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4010'. [ 685.491723][T21556] sock: sock_timestamping_bind_phc: sock not bind to device [ 685.615918][T21566] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4016'. [ 685.988112][T21569] ipvlan1: entered promiscuous mode [ 685.995772][T21569] ipvlan1: entered allmulticast mode [ 686.001113][T21569] veth0_vlan: entered allmulticast mode [ 686.050310][T21569] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4020'. [ 686.293478][T21590] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4023'. [ 686.310430][T21591] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4023'. [ 686.392647][T21591] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4023'. [ 686.695267][T21604] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4025'. [ 686.893989][T21616] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4025'. [ 687.010323][T21625] bridge2: entered promiscuous mode [ 687.015610][T21625] bridge2: entered allmulticast mode [ 687.024084][T21625] team0: Port device bridge2 added [ 687.136707][T21625] bridge3: entered promiscuous mode [ 687.141989][T21625] bridge3: entered allmulticast mode [ 687.174899][T21625] team0: Port device bridge3 added [ 687.379053][T21638] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 687.589200][T21647] netlink: 'syz.3.4033': attribute type 1 has an invalid length. [ 687.779113][T21647] 8021q: adding VLAN 0 to HW filter on device bond7 [ 688.013417][T21668] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4039'. [ 688.529067][T21681] xt_hashlimit: size too large, truncated to 1048576 [ 688.592742][T21683] netlink: 'syz.4.4043': attribute type 1 has an invalid length. [ 688.677701][T21685] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4043'. [ 688.774907][T21686] openvswitch: netlink: Flow actions attr not present in new flow. [ 688.881522][T21683] bond7: (slave gretap3): making interface the new active one [ 688.910029][T21683] bond7: (slave gretap3): Enslaving as an active interface with an up link [ 688.962398][T21685] macvlan3: entered promiscuous mode [ 688.967761][T21685] macvlan3: entered allmulticast mode [ 689.246209][T21703] FAULT_INJECTION: forcing a failure. [ 689.246209][T21703] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 689.279348][T21703] CPU: 0 UID: 0 PID: 21703 Comm: syz.2.4049 Not tainted syzkaller #0 PREEMPT(full) [ 689.279394][T21703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 689.279407][T21703] Call Trace: [ 689.279415][T21703] [ 689.279424][T21703] dump_stack_lvl+0xe8/0x150 [ 689.279453][T21703] should_fail_ex+0x412/0x560 [ 689.279482][T21703] _copy_from_iter+0x1d3/0x1670 [ 689.279508][T21703] ? rcu_is_watching+0x15/0xb0 [ 689.279540][T21703] ? __pfx__copy_from_iter+0x10/0x10 [ 689.279571][T21703] ? netlink_sendmsg+0x650/0xb40 [ 689.279595][T21703] ? skb_put+0x11b/0x210 [ 689.279620][T21703] netlink_sendmsg+0x6c0/0xb40 [ 689.279654][T21703] ? __pfx_netlink_sendmsg+0x10/0x10 [ 689.279682][T21703] ? aa_sock_msg_perm+0xf1/0x1b0 [ 689.279714][T21703] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 689.279746][T21703] ____sys_sendmsg+0x972/0x9f0 [ 689.279769][T21703] ? __might_fault+0xaf/0x130 [ 689.279802][T21703] ? __pfx_____sys_sendmsg+0x10/0x10 [ 689.279836][T21703] ? import_iovec+0x73/0xa0 [ 689.279864][T21703] ___sys_sendmsg+0x2a5/0x360 [ 689.279886][T21703] ? __lock_acquire+0x6b5/0x2cf0 [ 689.279913][T21703] ? __pfx____sys_sendmsg+0x10/0x10 [ 689.279933][T21703] ? __lock_acquire+0x6b5/0x2cf0 [ 689.279961][T21703] ? kstrtouint+0x6e/0xe0 [ 689.280035][T21703] __sys_sendmmsg+0x27c/0x4e0 [ 689.280065][T21703] ? __pfx___sys_sendmmsg+0x10/0x10 [ 689.280087][T21703] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 689.280147][T21703] ? ksys_write+0x242/0x270 [ 689.280181][T21703] ? __pfx_ksys_write+0x10/0x10 [ 689.280221][T21703] __x64_sys_sendmmsg+0xa0/0xc0 [ 689.280245][T21703] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 689.280268][T21703] do_syscall_64+0x174/0x580 [ 689.280289][T21703] ? trace_irq_disable+0x3b/0x140 [ 689.280321][T21703] ? clear_bhb_loop+0x40/0x90 [ 689.280348][T21703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 689.280369][T21703] RIP: 0033:0x7fe71c59ce59 [ 689.280389][T21703] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 689.280406][T21703] RSP: 002b:00007fe71d4bb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 689.280428][T21703] RAX: ffffffffffffffda RBX: 00007fe71c815fa0 RCX: 00007fe71c59ce59 [ 689.280443][T21703] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000003 [ 689.280457][T21703] RBP: 00007fe71d4bb090 R08: 0000000000000000 R09: 0000000000000000 [ 689.280469][T21703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 689.280481][T21703] R13: 00007fe71c816038 R14: 00007fe71c815fa0 R15: 00007ffe94b3fcd8 [ 689.280515][T21703] [ 690.180923][T21722] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 690.473626][T21738] __nla_validate_parse: 3 callbacks suppressed [ 690.473649][T21738] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4059'. [ 690.773877][T21744] x_tables: duplicate underflow at hook 2 [ 691.630569][T21777] xt_hashlimit: size too large, truncated to 1048576 [ 691.750302][T21780] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4072'. [ 691.880411][T21780] team0: Port device team_slave_0 removed [ 695.697453][T21841] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4090'. [ 695.787043][T21841] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4090'. [ 695.829754][T21849] openvswitch: netlink: Unknown key attributes 2 [ 695.881341][T21848] syzkaller1: entered promiscuous mode [ 695.897587][T21848] syzkaller1: entered allmulticast mode [ 695.971277][T21855] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4095'. [ 696.466636][T21879] syzkaller0: entered promiscuous mode [ 696.476473][T21879] syzkaller0: entered allmulticast mode [ 696.503589][T21883] vlan2: entered promiscuous mode [ 697.456940][ T29] audit: type=1804 audit(1780097433.309:30): pid=21930 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.4105" name="/newroot/207/cgroup.controllers" dev="tmpfs" ino=1072 res=1 errno=0 [ 697.527667][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 697.604539][ T29] audit: type=1800 audit(1780097433.309:31): pid=21930 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4105" name="cgroup.controllers" dev="tmpfs" ino=1072 res=0 errno=0 [ 697.641524][T21927] netlink: 'syz.2.4108': attribute type 3 has an invalid length. [ 697.950984][T21935] pimreg: entered allmulticast mode [ 698.390993][T21966] netlink: 284 bytes leftover after parsing attributes in process `syz.3.4114'. [ 698.642606][T21980] netlink: 'syz.3.4117': attribute type 1 has an invalid length. [ 698.784774][T21983] bond8: entered promiscuous mode [ 698.790189][T21983] bond8: entered allmulticast mode [ 698.795783][T21983] 8021q: adding VLAN 0 to HW filter on device bond8 [ 698.821513][T21980] bridge5: entered promiscuous mode [ 698.827078][T21980] bridge5: entered allmulticast mode [ 698.832109][ T154] bond8: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 698.845366][T21980] bond8: (slave bridge5): Enslaving as an active interface with an up link [ 698.955096][T21980] bridge6: entered promiscuous mode [ 698.983475][T21980] bridge6: entered allmulticast mode [ 699.024431][ T154] bond8: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 699.042426][T21980] bond8: (slave bridge6): Enslaving as a backup interface with a down link [ 699.063193][T21991] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4118'. [ 699.363866][T21998] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4119'. [ 699.652064][T22008] netlink: 'syz.1.4121': attribute type 1 has an invalid length. [ 699.776661][T22008] bond1: entered promiscuous mode [ 699.782961][T22008] 8021q: adding VLAN 0 to HW filter on device bond1 [ 699.796405][T22022] netlink: 'syz.1.4121': attribute type 1 has an invalid length. [ 700.758091][T22066] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4133'. [ 700.798952][T22066] hsr_slave_0: left promiscuous mode [ 700.817641][T22066] hsr_slave_1: left promiscuous mode [ 700.893914][T22072] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4133'. [ 700.904756][T22072] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4133'. [ 702.304786][T22091] bridge0: port 2(bridge_slave_1) entered disabled state [ 702.312550][T22091] bridge0: port 1(bridge_slave_0) entered disabled state [ 702.509185][T22091] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 702.532672][T22091] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 703.448402][T22098] vlan0: left promiscuous mode [ 703.501656][T22098] bridge1: left promiscuous mode [ 703.506851][T22098] bridge1: left allmulticast mode [ 703.513290][T22098] bridge2: left promiscuous mode [ 703.519161][T22098] bridge2: left allmulticast mode [ 703.535024][T22098] veth3: left promiscuous mode [ 703.570391][T22098] ip6erspan0: left allmulticast mode [ 703.585992][T22098] gretap1: left allmulticast mode [ 703.597019][T22098] bond5: left promiscuous mode [ 703.603336][T22098] geneve2: left promiscuous mode [ 703.608345][T22098] geneve2: left allmulticast mode [ 703.614292][T22098] bond6: left promiscuous mode [ 703.619170][T22098] bond6: left allmulticast mode [ 703.627880][T22098] macvlan3: left promiscuous mode [ 703.632994][T22098] macvlan3: left allmulticast mode [ 703.668720][T18674] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.717364][T18674] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.739221][T18674] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.768212][T18674] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.806271][T18695] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 703.844980][T18695] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.855963][T18695] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 55241 - 0 [ 703.865429][T18695] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 703.875112][T18695] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.906579][T18695] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 55241 - 0 [ 703.917406][T18695] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 703.927377][T18695] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.936866][T18695] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 55241 - 0 [ 703.997266][T22129] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 704.070345][T18695] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 704.113812][T18695] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 704.165029][T18695] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 55241 - 0 [ 704.331125][T22144] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4151'. [ 704.388903][T22138] veth3: entered promiscuous mode [ 704.403983][T22141] batadv_slave_0: entered promiscuous mode [ 704.421898][T22140] batadv_slave_0: left promiscuous mode [ 704.647960][T22158] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4153'. [ 704.840314][T22154] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4152'. [ 705.224695][T22179] netlink: 'syz.3.4158': attribute type 1 has an invalid length. [ 705.393638][T22184] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4159'. [ 705.402592][T22184] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4159'. [ 705.449029][T22184] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4159'. [ 705.508190][T22188] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4161'. [ 705.921706][T22204] __nla_validate_parse: 1 callbacks suppressed [ 705.921726][T22204] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4162'. [ 706.063012][T22208] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4166'. [ 706.346862][T22214] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4165'. [ 706.419593][T22213] syzkaller0: entered promiscuous mode [ 706.425141][T22213] syzkaller0: entered allmulticast mode [ 706.749056][T22232] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 706.823481][T22238] netlink: 'syz.4.4168': attribute type 1 has an invalid length. [ 706.831282][T22238] netlink: 256 bytes leftover after parsing attributes in process `syz.4.4168'. [ 706.903156][T22241] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4170'. [ 707.794478][T22259] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4177'. [ 707.981394][T22270] syzkaller0: entered promiscuous mode [ 707.986943][T22270] syzkaller0: entered allmulticast mode [ 708.676248][T22290] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4185'. [ 708.692178][T22291] netlink: 'syz.0.4185': attribute type 1 has an invalid length. [ 708.706470][T22291] netlink: 'syz.0.4185': attribute type 2 has an invalid length. [ 708.714843][T22291] netlink: 'syz.0.4185': attribute type 1 has an invalid length. [ 708.722755][T22291] netlink: 'syz.0.4185': attribute type 3 has an invalid length. [ 708.736720][T22291] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4185'. [ 708.974143][T22295] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4186'. [ 709.059759][T22305] netlink: 'syz.0.4188': attribute type 22 has an invalid length. [ 709.135200][T22308] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4189'. [ 709.363285][T22314] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048) [ 709.482057][T22320] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 709.501267][T22320] netlink: 'syz.1.4193': attribute type 1 has an invalid length. [ 710.314217][T22353] netlink: 'syz.3.4200': attribute type 1 has an invalid length. [ 710.718736][T22364] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 711.958535][T22400] __nla_validate_parse: 3 callbacks suppressed [ 711.958554][T22400] netlink: 200 bytes leftover after parsing attributes in process `syz.0.4212'. [ 712.028530][T22402] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4213'. [ 712.106615][T22400] syzkaller0: entered promiscuous mode [ 712.112550][T22400] syzkaller0: entered allmulticast mode [ 712.860334][T22441] netlink: 11562 bytes leftover after parsing attributes in process `syz.2.4223'. [ 712.907451][T22443] netlink: 'syz.1.4224': attribute type 1 has an invalid length. [ 712.963633][T22445] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4225'. [ 713.429501][T22443] 8021q: adding VLAN 0 to HW filter on device bond2 [ 713.601408][T22450] syzkaller0: entered promiscuous mode [ 713.618197][T22450] syzkaller0: entered allmulticast mode [ 713.827894][T22469] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4228'. [ 713.846991][T22469] IPv6: NLM_F_CREATE should be specified when creating new route [ 713.959237][T22477] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4230'. [ 714.471118][T22494] netlink: 9 bytes leftover after parsing attributes in process `syz.4.4235'. [ 714.496503][T22494] gretap0: entered promiscuous mode [ 714.522120][T22494] netlink: 5 bytes leftover after parsing attributes in process `syz.4.4235'. [ 714.549518][T22494] 0ªî{X¹¦: renamed from gretap0 [ 714.613898][T22494] 0ªî{X¹¦: left promiscuous mode [ 714.639407][T22494] 0ªî{X¹¦: entered allmulticast mode [ 714.669557][T22494] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 715.060583][T22509] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4239'. [ 715.454714][T22517] netlink: 'syz.3.4239': attribute type 1 has an invalid length. [ 715.497029][T22514] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4240'. [ 715.753230][T22537] dvmrp0: entered allmulticast mode [ 715.820202][T22539] netlink: 'syz.1.4247': attribute type 27 has an invalid length. [ 716.115833][T22547] macsec2: entered promiscuous mode [ 716.121817][T22547] macsec2: entered allmulticast mode [ 716.648114][T22566] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 716.973518][T22571] syzkaller0: entered promiscuous mode [ 716.979069][T22571] syzkaller0: entered allmulticast mode [ 717.020054][T22570] simple: basic_1 [ 717.024099][T22570] simple: basic_2 [ 717.027762][T22570] simple: basic_3 [ 717.031424][T22570] simple: basic_4 [ 717.048655][T22570] simple: basic_5 [ 717.052347][T22570] simple: basic_6 [ 717.056019][T22570] simple: basic_7 [ 717.059681][T22570] simple: basic_8 [ 717.063339][T22570] simple: basic_9 [ 717.067002][T22570] simple: basic_10 [ 717.070840][T22570] simple: basic_11 [ 717.074586][T22570] simple: basic_12 [ 717.078363][T22570] simple: basic_13 [ 717.082111][T22570] simple: basic_14 [ 717.085849][T22570] simple: basic_15 [ 717.089599][T22570] simple: basic_16 [ 717.093340][T22570] simple: basic_17 [ 717.097083][T22570] 0: reclassify loop, rule prio 0, protocol 800 [ 717.154415][T22571] simple: basic_18 [ 717.158253][T22571] simple: basic_19 [ 717.162018][T22571] simple: basic_20 [ 717.165807][T22571] simple: basic_21 [ 717.169567][T22571] simple: basic_22 [ 717.173320][T22571] simple: basic_23 [ 717.177103][T22571] simple: basic_24 [ 717.180980][T22571] simple: basic_25 [ 717.184860][T22571] simple: basic_26 [ 717.188607][T22571] simple: basic_27 [ 717.192383][T22571] simple: basic_28 [ 717.196219][T22571] simple: basic_29 [ 717.199969][T22571] simple: basic_30 [ 717.203715][T22571] simple: basic_31 [ 717.207537][T22571] simple: basic_32 [ 717.211279][T22571] simple: basic_33 [ 717.215097][T22571] simple: basic_34 [ 717.218847][T22571] 0: reclassify loop, rule prio 0, protocol 800 [ 717.916045][T22591] __nla_validate_parse: 2 callbacks suppressed [ 717.916063][T22591] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4262'. [ 717.944833][T22591] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4262'. [ 718.040844][T22585] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4260'. [ 718.050082][T22585] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4260'. [ 718.158768][T22602] netlink: 'syz.3.4263': attribute type 1 has an invalid length. [ 718.199604][ T5638] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 718.431997][ T29] audit: type=1107 audit(1780097454.279:32): pid=22612 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 718.586491][T22617] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4269'. [ 718.750713][T22625] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4271'. [ 718.885719][T22631] netlink: 136 bytes leftover after parsing attributes in process `syz.4.4272'. [ 718.894832][T22631] A link change request failed with some changes committed already. Interface veth0_virtÿifi may have been left with an inconsistent configuration, please check. [ 718.935291][T22631] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 718.970985][T22634] bond10: entered allmulticast mode [ 718.983993][T22633] macvlan2: entered promiscuous mode [ 718.989347][T22633] macvlan2: entered allmulticast mode [ 718.995846][T22633] bond10: (slave macvlan2): Opening slave failed [ 719.062546][T22638] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 719.722051][T22665] netlink: 'syz.2.4283': attribute type 1 has an invalid length. [ 720.066504][T22687] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4290'. [ 720.179176][T22691] bond11: option primary_reselect: invalid value (6) [ 720.212246][T22691] bond11 (unregistering): Released all slaves [ 720.234416][ T29] audit: type=1800 audit(1780097456.079:33): pid=22673 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4282" name="memory.events" dev="tmpfs" ino=1342 res=0 errno=0 [ 720.388923][T22700] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4292'. [ 720.423701][T22703] openvswitch: netlink: Message has 8 unknown bytes. [ 720.549807][T22707] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4295'. [ 720.579474][T22707] syzkaller1: entered promiscuous mode [ 720.585110][T22707] syzkaller1: entered allmulticast mode [ 720.955187][T22720] xt_TCPMSS: Only works on TCP SYN packets [ 721.698275][T22729] tipc: Enabling of bearer rejected, failed to enable media [ 721.920617][T22746] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 722.292131][T22766] syzkaller0: entered promiscuous mode [ 722.298986][T22766] syzkaller0: entered allmulticast mode [ 722.520764][T22780] netlink: 'syz.2.4315': attribute type 5 has an invalid length. [ 722.817080][T22786] 8021q: adding VLAN 0 to HW filter on device bond9 [ 722.843922][T22788] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 722.926583][T22798] netlink: 'syz.1.4322': attribute type 1 has an invalid length. [ 723.008804][T22798] bond3: entered promiscuous mode [ 723.014424][T22798] 8021q: adding VLAN 0 to HW filter on device bond3 [ 723.039878][T22804] syzkaller1: entered promiscuous mode [ 723.049349][T22804] syzkaller1: entered allmulticast mode [ 723.058262][T22806] __nla_validate_parse: 9 callbacks suppressed [ 723.058282][T22806] netlink: 148 bytes leftover after parsing attributes in process `syz.2.4325'. [ 723.118680][T22798] 8021q: adding VLAN 0 to HW filter on device bond3 [ 723.144560][T22798] bond3: (slave vti0): The slave device specified does not support setting the MAC address [ 723.154788][T22798] bond3: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 723.173201][T22798] bond3: (slave vti0): making interface the new active one [ 723.180486][T22798] vti0: entered promiscuous mode [ 723.187499][T22798] bond3: (slave vti0): Enslaving as an active interface with an up link [ 723.211092][T22810] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4326'. [ 723.328502][T22812] 8021q: adding VLAN 0 to HW filter on device team0 [ 723.341845][T22812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 723.372746][T22812] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 723.382408][T22812] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 723.399474][T22812] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 723.406424][T22819] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4329'. [ 723.432028][T22819] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4329'. [ 723.472600][T18695] bridge0: port 1(bridge_slave_0) entered blocking state [ 723.479871][T18695] bridge0: port 1(bridge_slave_0) entered forwarding state [ 723.491379][T18695] bridge0: port 2(bridge_slave_1) entered blocking state [ 723.498681][T18695] bridge0: port 2(bridge_slave_1) entered forwarding state [ 723.586242][T22825] xt_l2tp: wrong L2TP version: 0 [ 723.957893][T22841] netlink: 92 bytes leftover after parsing attributes in process `syz.1.4331'. [ 724.008513][T22809] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 724.156379][T22847] bond10 (unregistering): Released all slaves [ 724.198305][T22852] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4334'. [ 724.263015][T22851] bond11: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 724.278427][T22851] bond11 (unregistering): Released all slaves [ 724.758733][T22867] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4341'. [ 724.964404][T22874] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4343'. [ 725.088672][T22875] syzkaller0: entered promiscuous mode [ 725.094220][T22875] syzkaller0: entered allmulticast mode [ 725.125739][T22884] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 725.191486][T22874] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4343'. [ 725.204863][ T4951] Bluetooth: hci1: command 0x0405 tx timeout [ 725.566772][T22896] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 725.662532][T22902] netlink: 9 bytes leftover after parsing attributes in process `syz.3.4350'. [ 725.676647][T22902] gretap0: entered promiscuous mode [ 727.125210][T22958] openvswitch: netlink: Key type 29 is not supported [ 727.545779][T22969] ip6gre1: entered promiscuous mode [ 727.551138][T22969] ip6gre1: entered allmulticast mode [ 727.861923][T22979] 8021q: adding VLAN 0 to HW filter on device bond8 [ 727.899716][T22979] bond8 (unregistering): Released all slaves [ 729.111772][T23014] __nla_validate_parse: 11 callbacks suppressed [ 729.111793][T23014] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4380'. [ 732.048826][T23005] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 732.336138][T23052] batman_adv: batadv0: Adding interface: macvtap1 [ 732.342625][T23052] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 732.402710][T23052] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 732.525235][T23064] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4393'. [ 732.560265][T23064] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4393'. [ 732.745450][T23081] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4398'. [ 733.279204][T23090] mac80211_hwsim hwsim41 wlan0: entered promiscuous mode [ 733.286407][T23090] mac80211_hwsim hwsim41 wlan0: entered allmulticast mode [ 733.293751][T23090] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 733.420546][T23094] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4402'. [ 733.523231][T23096] openvswitch: netlink: VXLAN extension message has 12 unknown bytes. [ 733.689402][T23096] netlink: 'syz.0.4403': attribute type 3 has an invalid length. [ 733.716193][T23096] netlink: 666 bytes leftover after parsing attributes in process `syz.0.4403'. [ 733.766226][T23100] syzkaller0: entered promiscuous mode [ 733.771763][T23100] syzkaller0: entered allmulticast mode [ 734.456732][T23125] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.4414'. [ 734.514807][T23122] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4412'. [ 734.858889][T23131] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4417'. [ 735.279650][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 737.050745][T23149] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4421'. [ 737.061147][T23149] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4421'. [ 737.220246][T23158] vlan0: entered promiscuous mode [ 737.227274][T23158] syzkaller0: entered promiscuous mode [ 737.232920][T23158] syzkaller0: entered allmulticast mode [ 737.272027][T23155] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4421'. [ 737.425574][T23164] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4423'. [ 737.435983][T23164] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4423'. [ 737.873723][T23182] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4427'. [ 737.908749][T23133] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 738.449930][T23198] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 738.605827][T23201] netlink: 'syz.1.4430': attribute type 4 has an invalid length. [ 739.076069][T23213] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4435'. [ 739.133783][T23224] syzkaller1: entered promiscuous mode [ 739.139339][T23224] syzkaller1: entered allmulticast mode [ 739.912284][T23251] xt_hashlimit: size too large, truncated to 1048576 [ 741.494729][T23280] syzkaller0: entered promiscuous mode [ 741.513278][T23280] syzkaller0: entered allmulticast mode [ 741.579004][T23285] netlink: 'syz.0.4453': attribute type 1 has an invalid length. [ 741.592470][T23286] netlink: zone id is out of range [ 741.597732][T23286] netlink: zone id is out of range [ 741.603054][T23286] netlink: zone id is out of range [ 741.616580][T23286] netlink: zone id is out of range [ 741.621766][T23286] netlink: zone id is out of range [ 741.632215][T23286] netlink: zone id is out of range [ 741.637389][T23286] netlink: zone id is out of range [ 741.642528][T23286] netlink: zone id is out of range [ 741.670062][T23286] netlink: zone id is out of range [ 741.739759][T23285] 8021q: adding VLAN 0 to HW filter on device bond7 [ 742.024214][T23310] netlink: 92 bytes leftover after parsing attributes in process `syz.2.4458'. [ 742.060556][T23307] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input7 [ 742.120966][T23283] bond7: (slave veth7): Enslaving as an active interface with a down link [ 742.143337][T23291] hsr0: entered promiscuous mode [ 742.181592][T23310] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 742.305313][T23314] tipc: Started in network mode [ 742.310331][T23314] tipc: Node identity 2a8cfd02973e, cluster identity 4711 [ 742.354029][T23314] tipc: Enabled bearer , priority 0 [ 742.378520][T23306] syzkaller0: entered promiscuous mode [ 742.384062][T23306] syzkaller0: entered allmulticast mode [ 742.393932][T23319] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4460'. [ 742.403991][T23316] ip6gretap0: entered promiscuous mode [ 742.409713][T23316] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4458'. [ 742.441166][T23321] tipc: Resetting bearer [ 742.485649][T23305] tipc: Resetting bearer [ 742.600984][T23305] tipc: Disabling bearer [ 742.782154][T23339] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4465'. [ 743.042545][T23338] bond11 (unregistering): Released all slaves [ 743.070517][T23290] hsr0: left promiscuous mode [ 743.081412][T23339] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 743.155043][T23352] netlink: 'syz.2.4467': attribute type 7 has an invalid length. [ 743.171281][T23352] netlink: 'syz.2.4467': attribute type 8 has an invalid length. [ 743.294436][T23359] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4468'. [ 743.408507][T23368] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.4472'. [ 743.627004][T23371] syzkaller0: entered promiscuous mode [ 743.632526][T23371] syzkaller0: entered allmulticast mode [ 743.814426][T23391] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4477'. [ 746.528872][T23410] netlink: 'syz.4.4482': attribute type 1 has an invalid length. [ 746.561070][T23410] 8021q: adding VLAN 0 to HW filter on device bond10 [ 746.595138][T23410] bond10: (slave veth7): Enslaving as an active interface with a down link [ 746.613463][T23410] bond10: (slave dummy0): making interface the new active one [ 746.649758][T23410] dummy0: entered promiscuous mode [ 746.658617][T23410] bond10: (slave dummy0): Enslaving as an active interface with an up link [ 746.727822][T23412] syzkaller0: entered promiscuous mode [ 746.744725][T23412] syzkaller0: entered allmulticast mode [ 746.837054][T23420] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4484'. [ 746.846728][T23412] netlink: 'syz.0.4481': attribute type 3 has an invalid length. [ 746.945626][T23422] netlink: 108 bytes leftover after parsing attributes in process `syz.1.4485'. [ 747.218977][T23433] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input8 [ 747.247462][T23436] netlink: 'syz.3.4489': attribute type 1 has an invalid length. [ 747.327555][T23436] bond11: entered promiscuous mode [ 747.330446][T23437] netlink: 'syz.1.4488': attribute type 1 has an invalid length. [ 747.341670][T23436] bond11: entered allmulticast mode [ 747.348890][T23436] 8021q: adding VLAN 0 to HW filter on device bond11 [ 747.423488][T23436] macvlan2: entered promiscuous mode [ 747.428863][T23436] macvlan2: entered allmulticast mode [ 747.494076][T23436] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 747.514415][T23453] net_ratelimit: 169 callbacks suppressed [ 747.514437][T23453] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 747.816789][T23462] ipt_rpfilter: unknown options [ 747.969143][T23469] netlink: 'syz.2.4496': attribute type 10 has an invalid length. [ 747.977580][T23467] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4497'. [ 748.029674][T23467] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4497'. [ 748.044618][T23469] team0: Port device geneve1 removed [ 748.050812][T23467] netlink: 'syz.0.4497': attribute type 10 has an invalid length. [ 748.063739][T23469] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 748.108233][T23467] team0: Device veth1_to_hsr is of different type [ 748.136969][T23477] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4496'. [ 748.149533][T23469] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4496'. [ 748.169748][T23469] netlink: 'syz.2.4496': attribute type 22 has an invalid length. [ 748.195820][T23469] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4496'. [ 748.221533][T23475] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4499'. [ 748.308092][T18695] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 748.320761][T23475] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4499'. [ 748.337117][T23475] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4499'. [ 748.362305][T18695] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 748.396114][T18695] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 748.419160][T18695] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 748.586322][T23493] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4502'. [ 748.876512][T23508] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4507'. [ 749.429393][T23523] netlink: 'syz.2.4513': attribute type 1 has an invalid length. [ 749.840069][T23532] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 749.933244][T23537] team1: entered promiscuous mode [ 749.959085][T23537] team1: entered allmulticast mode [ 749.991207][T23537] 8021q: adding VLAN 0 to HW filter on device team1 [ 750.014743][T23540] team2 (uninitialized): Failed to send options change via netlink (err -105) [ 750.043395][T23540] team2: entered promiscuous mode [ 750.074542][T23540] team2: entered allmulticast mode [ 750.107658][T23540] 8021q: adding VLAN 0 to HW filter on device team2 [ 751.602707][T23603] sctp: [Deprecated]: syz.4.4533 (pid 23603) Use of int in maxseg socket option. [ 751.602707][T23603] Use struct sctp_assoc_value instead [ 751.682427][T23613] IPVS: set_ctl: invalid protocol: 46 224.0.0.2:20004 [ 753.002586][T23673] lo: entered allmulticast mode [ 753.008575][T23673] lo: left allmulticast mode [ 753.063982][T23676] netlink: 'syz.4.4552': attribute type 1 has an invalid length. [ 753.185695][T23676] __nla_validate_parse: 10 callbacks suppressed [ 753.185716][T23676] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4552'. [ 753.234491][T23675] bond11: (slave geneve3): making interface the new active one [ 753.273249][T23675] bond11: (slave geneve3): Enslaving as an active interface with an up link [ 753.292264][T23676] 8021q: adding VLAN 0 to HW filter on device bond11 [ 753.299693][T18709] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 753.349083][T18709] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 753.455645][T23684] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4554'. [ 753.838786][T23701] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4557'. [ 754.000312][T18709] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 754.014848][T18709] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 754.183502][T23703] bridge7: port 1(gretap1) entered blocking state [ 754.193858][T23703] bridge7: port 1(gretap1) entered disabled state [ 754.201187][T23703] gretap1: entered allmulticast mode [ 754.210515][T23703] gretap1: entered promiscuous mode [ 754.383688][T23722] netlink: 212344 bytes leftover after parsing attributes in process `syz.3.4562'. [ 754.408214][T23723] netlink: 212344 bytes leftover after parsing attributes in process `syz.3.4562'. [ 754.753949][T23730] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4565'. [ 755.003910][T23747] sch_fq: defrate 0 ignored. [ 755.031447][T23749] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4570'. [ 755.038911][T23747] x_tables: duplicate entry at hook 2 [ 755.158324][T23751] netlink: 'syz.3.4571': attribute type 1 has an invalid length. [ 755.246506][T23751] 8021q: adding VLAN 0 to HW filter on device bond12 [ 755.268308][T23754] tipc: Enabled bearer , priority 0 [ 755.275929][T23754] syzkaller0: entered allmulticast mode [ 755.363242][T23754] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 755.419519][T23753] tipc: Disabling bearer [ 755.460502][T23757] veth0_virt_wifi: entered promiscuous mode [ 755.484709][T23755] veth0_virt_wifi: left promiscuous mode [ 755.628474][T23773] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4577'. [ 755.654809][T20228] bridge0: entered promiscuous mode [ 755.697557][T23785] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4580'. [ 755.706065][T23782] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4579'. [ 756.105247][T23806] netlink: 'syz.4.4585': attribute type 22 has an invalid length. [ 756.871253][T23845] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 756.943895][T23849] ipip0: entered promiscuous mode [ 757.459414][T23858] 0ªî{X¹¦: entered promiscuous mode [ 757.465162][T23858] vlan3: entered promiscuous mode [ 757.763928][T23876] syzkaller0: entered promiscuous mode [ 757.769478][T23876] syzkaller0: entered allmulticast mode [ 758.237224][T23894] batadv_slave_0: entered promiscuous mode [ 758.245397][T23893] batadv_slave_0: left promiscuous mode [ 758.523139][T23902] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 758.584593][T23904] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 759.104556][T23917] __nla_validate_parse: 10 callbacks suppressed [ 759.104579][T23917] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4619'. [ 759.181371][T23919] xt_hashlimit: size too large, truncated to 1048576 [ 759.237668][T23922] netlink: 'syz.1.4620': attribute type 1 has an invalid length. [ 759.245654][T23922] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4620'. [ 760.008799][T23939] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4625'. [ 760.081454][T23939] netlink: 'syz.0.4625': attribute type 1 has an invalid length. [ 760.173718][T23939] 8021q: adding VLAN 0 to HW filter on device bond8 [ 760.215227][T23956] netlink: 'syz.2.4630': attribute type 1 has an invalid length. [ 760.223289][T23956] netlink: 'syz.2.4630': attribute type 3 has an invalid length. [ 760.231626][T23956] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4630'. [ 760.482544][T23959] veth0_to_bond: mtu less than device minimum [ 760.650821][T23963] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4632'. [ 761.025890][ T1120] dummy0: left promiscuous mode [ 761.111272][T23977] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4635'. [ 761.156632][T23975] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4633'. [ 761.180647][T23975] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4633'. [ 761.351069][T23987] netlink: 'syz.4.4640': attribute type 1 has an invalid length. [ 761.384721][T23987] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4640'. [ 761.709900][T23999] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 761.860042][T24005] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4646'. [ 762.404707][T24025] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 762.425910][T24030] netlink: 'syz.0.4654': attribute type 7 has an invalid length. [ 762.475362][T24030] netlink: 'syz.0.4654': attribute type 62 has an invalid length. [ 762.650096][T24038] vxcan2: entered allmulticast mode [ 762.737267][T24044] openvswitch: netlink: ufid size 912 bytes exceeds the range (1, 16) [ 762.745601][T24044] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 763.120730][T24058] openvswitch: netlink: Key type 29 is not supported [ 763.173168][T24064] xt_TCPMSS: Only works on TCP SYN packets [ 763.447002][ T5001] udevd[5001]: worker [19905] /devices/virtual/block/nbd1 is taking a long time [ 813.961184][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 817.505324][T24084] netlink: 'syz.4.4671': attribute type 3 has an invalid length. [ 817.572590][T24089] __nla_validate_parse: 1 callbacks suppressed [ 817.572608][T24089] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4672'. [ 817.641781][T24091] netlink: 'syz.2.4673': attribute type 1 has an invalid length. [ 817.761364][T24091] bond8: entered promiscuous mode [ 817.766927][T24091] 8021q: adding VLAN 0 to HW filter on device bond8 [ 818.927508][T24122] netlink: 'syz.3.4680': attribute type 8 has an invalid length. [ 818.974626][T24126] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4678'. [ 819.080748][T24130] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.4680'. [ 819.214917][T24137] tipc: Enabled bearer , priority 0 [ 819.223062][T24133] xt_CT: No such helper "snmp_trap" [ 819.230619][T24125] syzkaller0: entered promiscuous mode [ 819.236341][T24133] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4683'. [ 819.247792][T24125] syzkaller0: entered allmulticast mode [ 819.330198][T24139] netlink: 'syz.4.4686': attribute type 10 has an invalid length. [ 819.345254][T24139] team0 (unregistering): Port device bridge1 removed [ 819.353915][T24139] team0 (unregistering): Port device bridge2 removed [ 819.511292][T24145] xt_hashlimit: invalid rate [ 819.744044][ T30] INFO: task udevd:19905 blocked for more than 143 seconds. [ 819.751410][ T30] Not tainted syzkaller #0 [ 819.756388][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 819.765094][ T30] task:udevd state:D stack:23400 pid:19905 tgid:19905 ppid:5001 task_flags:0x400140 flags:0x00080000 [ 819.777082][ T30] Call Trace: [ 819.780412][ T30] [ 819.783390][ T30] __schedule+0x1821/0x5740 [ 819.787980][ T30] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 819.793943][ T30] ? __blk_flush_plug+0x416/0x4d0 [ 819.868845][ T30] ? __pfx___schedule+0x10/0x10 [ 819.873815][ T30] ? schedule+0x90/0x360 [ 819.878123][ T30] schedule+0x164/0x360 [ 819.882352][ T30] schedule_timeout+0x158/0x2c0 [ 819.887348][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 819.892768][ T30] ? __pfx_process_timeout+0x10/0x10 [ 819.898112][ T30] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 819.903971][ T30] ? prepare_to_wait_event+0x436/0x480 [ 819.909501][ T30] nbd_queue_rq+0x857/0x1100 [ 819.914164][ T30] ? __pfx_nbd_queue_rq+0x10/0x10 [ 819.919272][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 819.924250][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 819.930390][ T30] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 819.936004][ T30] ? sbitmap_get+0x229/0x390 [ 819.940664][ T30] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 819.946786][ T30] ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0 [ 819.952671][ T30] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 819.987869][ T30] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 819.994828][ T30] ? blk_mq_hw_queue_need_run+0x13c/0x680 [ 820.000617][ T30] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 820.006041][ T30] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 820.012079][ T30] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 820.017413][ T30] blk_mq_run_hw_queue+0x348/0x4f0 [ 820.022583][ T30] blk_mq_dispatch_list+0xd16/0xe10 [ 820.027927][ T30] ? bdev_count_inflight+0x1cf/0x210 [ 820.033275][ T30] ? blk_mq_dispatch_list+0x180/0xe10 [ 820.054197][ T30] ? __pfx_blk_mq_dispatch_list+0x10/0x10 [ 820.060020][ T30] ? rcu_is_watching+0x15/0xb0 [ 820.064872][ T30] blk_mq_flush_plug_list+0x48d/0x570 [ 820.174150][ T30] ? blk_add_rq_to_plug+0x300/0x450 [ 820.179563][ T30] ? blk_mq_submit_bio+0x1a95/0x28a0 [ 820.185216][ T30] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 820.191321][ T30] ? blk_mq_submit_bio+0x49e/0x28a0 [ 820.202839][ T30] __blk_flush_plug+0x3ed/0x4d0 [ 820.221474][ T30] ? __pfx___blk_flush_plug+0x10/0x10 [ 820.232771][ T30] __submit_bio+0x28d/0x580 [ 820.237638][ T30] ? __pfx___submit_bio+0x10/0x10 [ 820.243060][ T30] ? bio_associate_blkg+0x6d/0x230 [ 820.248887][ T30] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 820.255035][ T30] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 820.261355][ T30] block_read_full_folio+0x599/0x830 [ 820.268228][ T30] ? __pfx_blkdev_get_block+0x10/0x10 [ 820.273768][ T30] filemap_read_folio+0x137/0x3b0 [ 820.279336][ T30] ? __pfx_blkdev_read_folio+0x10/0x10 [ 820.285121][ T30] ? __pfx_filemap_read_folio+0x10/0x10 [ 820.291197][ T30] ? filemap_add_folio+0x356/0x530 [ 820.296620][ T30] do_read_cache_folio+0x358/0x590 [ 820.302104][ T30] ? __pfx_blkdev_read_folio+0x10/0x10 [ 820.307915][ T30] read_part_sector+0xb6/0x2b0 [ 820.313128][ T30] adfspart_check_ICS+0xb1/0x960 [ 820.318990][ T30] ? seq_buf_printf+0x212/0x2d0 [ 820.327701][ T30] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 820.342957][T20225] tipc: Node number set to 531472976 [ 820.377112][ T30] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 820.383826][ T30] bdev_disk_changed+0x817/0x1770 [ 820.389664][ T30] ? __pfx_bdev_disk_changed+0x10/0x10 [ 820.395850][ T30] blkdev_get_whole+0x380/0x510 [ 820.400878][ T30] bdev_open+0x31e/0xd30 [ 820.405661][ T30] blkdev_open+0x470/0x610 [ 820.410518][ T30] ? __pfx_blkdev_open+0x10/0x10 [ 820.416188][ T30] do_dentry_open+0x822/0x13a0 [ 820.421133][ T30] vfs_open+0x3b/0x340 [ 820.426560][ T30] ? path_openat+0x2df0/0x3860 [ 820.431620][ T30] path_openat+0x2e08/0x3860 [ 820.437871][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 820.443411][ T30] ? stack_depot_save_flags+0x33/0x810 [ 820.468046][ T30] ? __pfx_path_openat+0x10/0x10 [ 820.473216][ T30] ? __x64_sys_openat+0x138/0x170 [ 820.478780][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 820.483926][ T30] do_file_open+0x23e/0x4a0 [ 820.489014][ T30] ? __pfx_do_file_open+0x10/0x10 [ 820.494497][ T30] ? _raw_spin_unlock+0x28/0x50 [ 820.499492][ T30] ? alloc_fd+0x64b/0x6c0 [ 820.504457][ T30] do_sys_openat2+0x113/0x200 [ 820.509482][ T30] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 820.515539][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 820.520909][ T30] ? rcu_is_watching+0x15/0xb0 [ 820.526286][ T30] __x64_sys_openat+0x138/0x170 [ 820.531296][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 820.538169][ T30] do_syscall_64+0x174/0x580 [ 820.542917][ T30] ? clear_bhb_loop+0x40/0x90 [ 820.549791][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 820.556610][ T30] RIP: 0033:0x7faec5ca7407 [ 820.561199][ T30] RSP: 002b:00007ffc01f7b8a0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 820.570662][ T30] RAX: ffffffffffffffda RBX: 00007faec641e880 RCX: 00007faec5ca7407 [ 820.579085][ T30] RDX: 00000000000a0800 RSI: 000055e6a8645290 RDI: ffffffffffffff9c [ 820.587976][ T30] RBP: 000055e6a8623910 R08: 0000000000000000 R09: 0000000000000000 [ 820.597523][ T30] R10: 0000000000000000 R11: 0000000000000202 R12: 000055e6a86464d0 [ 820.606009][ T30] R13: 000055e6a8631190 R14: 0000000000000000 R15: 000055e6a86464d0 [ 820.615047][ T30] [ 820.618299][ T30] [ 820.618299][ T30] Showing all locks held in the system: [ 820.630720][ T30] 1 lock held by khungtaskd/30: [ 820.636193][ T30] #0: ffffffff8e95cce0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 820.646747][ T30] 2 locks held by getty/5393: [ 820.651549][ T30] #0: ffff888031f810a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 820.662122][ T30] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0 [ 820.681146][ T30] 4 locks held by kworker/u8:18/13512: [ 820.692872][ T30] 5 locks held by kworker/u8:51/18695: [ 820.705481][ T30] 3 locks held by udevd/19905: [ 820.730739][ T30] #0: ffff888026d18350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 820.742381][ T30] #1: ffff8880266fe818 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x31f/0x4f0 [ 820.751961][ T30] #2: ffff888026e37178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc6/0x1100 [ 820.761022][ T30] 1 lock held by syz.0.4682/24124: [ 820.766190][ T30] #0: ffffffff8fdc8e00 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 820.775323][ T30] 1 lock held by syz.2.4684/24135: [ 820.780479][ T30] #0: ffffffff8fdc8e00 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 820.789519][ T30] 1 lock held by syz.3.4685/24150: [ 820.794685][ T30] [ 820.797045][ T30] ============================================= [ 820.797045][ T30] [ 820.830535][T24124] tipc: Resetting bearer [ 820.842982][ T30] NMI backtrace for cpu 1 [ 820.843002][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 820.843021][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 820.843032][ T30] Call Trace: [ 820.843038][ T30] [ 820.843046][ T30] dump_stack_lvl+0xe8/0x150 [ 820.843070][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 820.843094][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 820.843115][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 820.843140][ T30] sys_info+0x135/0x170 [ 820.843167][ T30] watchdog+0xfd3/0x1030 [ 820.843199][ T30] ? watchdog+0x1c9/0x1030 [ 820.843228][ T30] kthread+0x389/0x470 [ 820.843250][ T30] ? __pfx_watchdog+0x10/0x10 [ 820.843272][ T30] ? __pfx_kthread+0x10/0x10 [ 820.843295][ T30] ret_from_fork+0x514/0xb70 [ 820.843317][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 820.843334][ T30] ? __switch_to+0xc79/0x1410 [ 820.843361][ T30] ? __pfx_kthread+0x10/0x10 [ 820.843384][ T30] ret_from_fork_asm+0x1a/0x30 [ 820.843418][ T30] [ 820.843424][ T30] Sending NMI from CPU 1 to CPUs 0: [ 820.964487][ C0] NMI backtrace for cpu 0 [ 820.964505][ C0] CPU: 0 UID: 0 PID: 18666 Comm: kworker/u8:27 Not tainted syzkaller #0 PREEMPT(full) [ 820.964526][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 820.964538][ C0] Workqueue: krds_cp_wq#2/7 rds_connect_worker [ 820.964562][ C0] RIP: 0010:lock_acquire+0x10a/0x350 [ 820.964584][ C0] Code: 02 00 00 41 0f 94 c1 4c 89 ef 89 de 8b 54 24 04 44 89 e1 45 89 f0 6a 00 6a 00 6a 00 55 ff 74 24 30 e8 da 02 00 00 48 83 c4 28 <48> c7 c7 cf 22 22 8e e8 1a 8d 07 0a b8 ff ff ff ff 65 0f c1 05 5d [ 820.964599][ C0] RSP: 0018:ffffc90000007698 EFLAGS: 00000082 [ 820.964614][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000000 [ 820.964625][ C0] RDX: 00000000fb93ea96 RSI: 000000005005aba1 RDI: ffff888035165d00 [ 820.964637][ C0] RBP: ffffffff8176e256 R08: ffffffff8176e256 R09: ffffffff8e95cce0 [ 820.964650][ C0] R10: ffffc90000007858 R11: ffffffff81b0e210 R12: 0000000000000002 [ 820.964662][ C0] R13: ffffffff8e95cce0 R14: 0000000000000000 R15: 0000000000000046 [ 820.964693][ C0] FS: 0000000000000000(0000) GS:ffff88812528b000(0000) knlGS:0000000000000000 [ 820.964706][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 820.964718][ C0] CR2: 00007fcfd5fea2f8 CR3: 0000000071e26000 CR4: 00000000003526f0 [ 820.964733][ C0] Call Trace: [ 820.964739][ C0] [ 820.964749][ C0] ? unwind_next_frame+0xa6/0x2550 [ 820.964770][ C0] ? unwind_next_frame+0x1bbf/0x2550 [ 820.964791][ C0] ? stack_trace_save+0xa9/0x100 [ 820.964817][ C0] ? unwind_next_frame+0xa6/0x2550 [ 820.964836][ C0] unwind_next_frame+0xc3/0x2550 [ 820.964860][ C0] ? unwind_next_frame+0xa6/0x2550 [ 820.964884][ C0] ? __unwind_start+0x5b8/0x760 [ 820.964903][ C0] ? stack_trace_save+0xa9/0x100 [ 820.964929][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 820.964955][ C0] arch_stack_walk+0x11b/0x150 [ 820.964979][ C0] ? stack_trace_save+0xa9/0x100 [ 820.965006][ C0] stack_trace_save+0xa9/0x100 [ 820.965030][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 820.965060][ C0] kasan_save_stack+0x3e/0x60 [ 820.965118][ C0] kasan_record_aux_stack+0xbd/0xd0 [ 820.965139][ C0] insert_work+0x3d/0x330 [ 820.965156][ C0] __queue_work+0xcef/0x1040 [ 820.965177][ C0] ? __queue_work+0x1ae/0x1040 [ 820.965197][ C0] call_timer_fn+0x192/0x5e0 [ 820.965216][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 820.965235][ C0] ? call_timer_fn+0xd4/0x5e0 [ 820.965253][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 820.965277][ C0] ? do_raw_spin_unlock+0xf5/0x210 [ 820.965301][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 820.965321][ C0] __run_timer_base+0x67e/0x8b0 [ 820.965337][ C0] ? ktime_get+0x45/0x220 [ 820.965368][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 820.965393][ C0] run_timer_softirq+0xb7/0x170 [ 820.965411][ C0] handle_softirqs+0x22a/0x840 [ 820.965430][ C0] ? __irq_exit_rcu+0xca/0x220 [ 820.965452][ C0] __irq_exit_rcu+0xca/0x220 [ 820.965469][ C0] irq_exit_rcu+0x9/0x30 [ 820.965484][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 820.965501][ C0] [ 820.965507][ C0] [ 820.965513][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 820.965532][ C0] RIP: 0010:__inet6_bind+0x26a/0xf60 [ 820.965549][ C0] Code: 89 fb e9 97 00 00 00 0f b7 eb 48 8b 04 24 4c 8d a8 b8 0a 00 00 4c 89 e8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 0f b6 04 08 <84> c0 0f 85 6f 0a 00 00 45 8b 6d 00 44 89 ef 89 ee e8 c0 ba 76 f7 [ 820.965563][ C0] RSP: 0018:ffffc900033a7750 EFLAGS: 00000a02 [ 820.965577][ C0] RAX: 0000000000000000 RBX: 000000000000c5af RCX: dffffc0000000000 [ 820.965588][ C0] RDX: ffff888035165d00 RSI: 000000000000afc5 RDI: 0000000000000000 [ 820.965599][ C0] RBP: 000000000000c5af R08: ffff888035165d00 R09: 0000000000000002 [ 820.965611][ C0] R10: 000000000000c0fe R11: 0000000000000000 R12: 0000000000000000 [ 820.965621][ C0] R13: ffff888079f2d838 R14: 1ffff1100a0bc872 R15: ffff8880505e4380 [ 820.965649][ C0] kernel_bind+0x13e/0x1c0 [ 820.965669][ C0] ? irqentry_exit+0x218/0x8b0 [ 820.965687][ C0] ? __pfx_kernel_bind+0x10/0x10 [ 820.965706][ C0] ? irqentry_exit+0x218/0x8b0 [ 820.965729][ C0] ? rds_tcp_conn_path_connect+0x577/0x930 [ 820.965755][ C0] rds_tcp_conn_path_connect+0x53e/0x930 [ 820.965783][ C0] ? __pfx_rds_tcp_conn_path_connect+0x10/0x10 [ 820.965807][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 820.965832][ C0] ? process_scheduled_works+0xa70/0x1860 [ 820.965852][ C0] ? process_scheduled_works+0xa70/0x1860 [ 820.965873][ C0] rds_connect_worker+0x1d8/0x290 [ 820.965890][ C0] ? process_scheduled_works+0xa70/0x1860 [ 820.965908][ C0] process_scheduled_works+0xb5d/0x1860 [ 820.965940][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 820.965961][ C0] ? assign_work+0x3d5/0x5e0 [ 820.965979][ C0] worker_thread+0xa53/0xfc0 [ 820.966010][ C0] kthread+0x389/0x470 [ 820.966031][ C0] ? __pfx_worker_thread+0x10/0x10 [ 820.966048][ C0] ? __pfx_kthread+0x10/0x10 [ 820.966070][ C0] ret_from_fork+0x514/0xb70 [ 820.966089][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 820.966111][ C0] ? __switch_to+0xc79/0x1410 [ 820.966137][ C0] ? __pfx_kthread+0x10/0x10 [ 820.966159][ C0] ret_from_fork_asm+0x1a/0x30 [ 820.966186][ C0] [ 821.533038][T24124] tipc: Disabling bearer [ 821.546867][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 821.553794][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 821.562936][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 821.573031][ T30] Call Trace: [ 821.576354][ T30] [ 821.579316][ T30] vpanic+0x56c/0xa60 [ 821.583429][ T30] ? __pfx___schedule+0x10/0x10 [ 821.588333][ T30] ? __pfx_vpanic+0x10/0x10 [ 821.592886][ T30] ? nmi_trigger_cpumask_backtrace+0x1f4/0x300 [ 821.599095][ T30] panic+0xc5/0xd0 [ 821.602860][ T30] ? __pfx_panic+0x10/0x10 [ 821.607311][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 821.612732][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 821.618943][ T30] watchdog+0x102c/0x1030 [ 821.623329][ T30] ? watchdog+0x1c9/0x1030 [ 821.627801][ T30] kthread+0x389/0x470 [ 821.631913][ T30] ? __pfx_watchdog+0x10/0x10 [ 821.636739][ T30] ? __pfx_kthread+0x10/0x10 [ 821.641387][ T30] ret_from_fork+0x514/0xb70 [ 821.646023][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 821.651270][ T30] ? __switch_to+0xc79/0x1410 [ 821.655996][ T30] ? __pfx_kthread+0x10/0x10 [ 821.660627][ T30] ret_from_fork_asm+0x1a/0x30 [ 821.665427][ T30] [ 821.669337][ T30] Kernel Offset: disabled [ 821.673681][ T30] Rebooting in 86400 seconds..