last executing test programs: 4.862151082s ago: executing program 0 (id=2389): r0 = socket$tipc(0x1e, 0x5, 0x0) listen(r0, 0x0) accept(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r2 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x8000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x31, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @value=r2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) shutdown(r4, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) ioctl$int_in(r4, 0x5421, 0x0) connect$bt_rfcomm(r4, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0xf}, 0x6}, 0xa) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 3.865631898s ago: executing program 0 (id=2406): socket(0x2b, 0x1, 0x1) socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000002c00ef5f"], 0x14}, 0x1, 0x0, 0x0, 0x20008081}, 0x800) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) r1 = socket(0x2a, 0x3, 0x4) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000080)=0xc, 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000002c0)={r0, 0x3, 0xf092, 0x2da}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000140)=ANY=[@ANYRESDEC=r0, @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, r2}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) accept$alg(r1, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="0e00"}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x190a1, 0x2c0e}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000824) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x6, &(0x7f0000000680)=ANY=[@ANYBLOB="18450000040000000000000000000000180000000500000000000000ff0f000085000000150013008510000007000000f0a877d234e30bd10e5078ca3bb7fc59af37b9fcc57f0f9d56a7c5480160d0d667489210ee9a25df254c41011c000b952b40960084fab99373297f28679c9f4baf3bfaa50c2320b9bd4dd916f1a4cf38188b7e2bc0448e0295"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x13}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4c, &(0x7f0000000400), 0x4) syz_emit_ethernet(0x1d, 0x0, 0x0) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0x1, 0x0, &(0x7f0000000000)="ff", 0x0, 0x16, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40000000) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000280)=""/130, &(0x7f0000000340)=0x82) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000c, 0x50, r6, 0xffffe000) sendmsg$FOU_CMD_DEL(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x40, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x6}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast2}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}]}, 0x40}, 0x1, 0x0, 0x0, 0x4803}, 0x4008014) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r3, r10, 0x25, 0x2, @val=@perf_event={0x11}}, 0x18) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c000000070605000000000000000000030000040900020073797a32000000000500010007"], 0x4c}, 0x1, 0x0, 0x0, 0x400c811}, 0x8004) 3.463037642s ago: executing program 0 (id=2412): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x50000000000, 0x8, 0x6}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'ipvlan1\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x98, 0x2, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x2}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_DATA={0x68, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x5c}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x5000}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010100}}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x6}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @dev={0xfe, 0x80, '\x00', 0xd}}}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x5}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}]}, 0x98}, 0x1, 0x0, 0x0, 0x1}, 0x40000) shutdown(r3, 0x0) r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x5}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r4}, @generic={0x66}, @initr0, @exit, @printk={@x={0x18, 0x0}, {0x3, 0x3, 0x3, 0xa, 0x0}, {0x7, 0x1, 0xc, 0x1, 0x5}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000000)='GPL\x00', 0x2}, 0x90) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f0000006200)={0x7, 0x8000, 0x1, 0x4, 0x3, 0xa7, 0x1000}, 0xc) recvmmsg(r3, &(0x7f00000004c0), 0xf02, 0xf0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4400000010000104fcfffffffcdbdf2500000000", @ANYRES64, @ANYBLOB="0315000000000000d4966b580c0001006d616376746170000400028008000500", @ANYRES32=r2], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x24000000) 3.172496816s ago: executing program 3 (id=2413): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="50c2000000000000280012800a000100767863616e000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="002805000044000008000300", @ANYRES32=0x0, @ANYBLOB="f0c87f5bacc2f0a5d06c7367d10844d6e47fda9ca2be1c7a10274a5c0f9585a80ea481aa8595284b46a3262031f7f6514b"], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000040), 0x4) close(r0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) splice(r2, 0x0, r4, 0x0, 0x1100000000f336, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="020026bd700010dcdf25030000000a000900bbbbbbbbbbbb00000500290001000000050035000400000005002e2001000000"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x28800) 3.013797666s ago: executing program 0 (id=2416): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a000000060001"], 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x240080d0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@ipv6_getnetconf={0x4c, 0x52, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@NETCONFA_PROXY_NEIGH={0x8}, @NETCONFA_FORWARDING={0x8, 0x2, 0x3}, @NETCONFA_FORWARDING={0x8, 0x2, 0x40}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x3ff6f6c8}, @NETCONFA_FORWARDING={0x8, 0x2, 0x10000}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x31}, @NETCONFA_RP_FILTER={0x8, 0x3, 0xffffff80}]}, 0x4c}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) 2.825059071s ago: executing program 2 (id=2418): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) socket(0x40000000015, 0x5, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket(0x28, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)) close(0x3) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000440)=@gcm_256={{0x303}, '\x00', "352bfc0f38345beb42380beb8a9b6220f956db553fc75817f69b4e4047aaa9e1", '\x00', '\x00\x00\x00@\x00'}, 0x38) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0xa00100}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x400000f, 0x4, 0x0, 0x7fffffff}, 0x0, 0x0) shutdown(r0, 0x2) 2.759826412s ago: executing program 0 (id=2419): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4000002, 0x3032, 0xffffffffffffffff, 0x2a1cf000) (async) r0 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000568000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet6_group_source_req(r1, 0x29, 0x6, &(0x7f00000000c0)={0x11, {{0x29, 0x0, 0x5000000, @private1}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r2, 0x0) 2.382125552s ago: executing program 1 (id=2424): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x400, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_prio={{}, {0x0, 0x2, {0x3, "e30ce288b4447a5f6315f3307e56fb2a"}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/time\x00') socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$kcm(0x21, 0x2, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$netlink(0x10, 0x3, 0xf) socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r5], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2.237371263s ago: executing program 3 (id=2426): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$inet_sctp(0x2, 0x5, 0x84) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r6, 0x84, 0x10, &(0x7f0000000000)=@sack_info={r8, 0x0, 0x2}, 0xc) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r11, {0x4, 0xfff1}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x1, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xf7513c36066f8950}, 0x20000010) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r5, {0x5}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0xa32, 0x6, 0x1, 0xc, 0x0, 0x4, 0x8, 0x4, 0x68d8, 0x5, 0x4, 0x3, 0x12, 0x6, 0xfffffffd, 0xfffffe01}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x88}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfd1e, 0x4, &(0x7f0000000140)={0x11, 0x0, r12, 0x1, 0x0, 0x6, @multicast}, 0x14) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd25, 0x100006, {0x0, 0x0, 0x0, r13, {0x0, 0x10}, {0x2}, {0x8, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000}, 0x48011) r14 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r14, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001b1401002abdd444d446df25080001000000000009"], 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810) r15 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cgroup.controllers\x00', 0x275a, 0x0) preadv(r15, &(0x7f00000004c0)=[{&(0x7f0000000280)=""/96, 0x60}], 0x1, 0xa, 0x6c8) ioctl$TUNSETSNDBUF(r15, 0x400454d4, &(0x7f0000000200)=0x800) 2.217982528s ago: executing program 0 (id=2427): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) (async) r1 = socket(0x1d, 0x80802, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000380)={0x1d, r2, 0x1, {0x0, 0xf0, 0x3}, 0xfe}, 0x18) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000040)="e0", 0x1}, {&(0x7f0000000080)}, {&(0x7f00000004c0)="cb42e83688f145641a4e50e1a6379a06559e612d01bf188a687c4da24606b91a6105daa6850af13e69515bb45694271cfe8c88f923be158364a0d1825883a5a546d61b62185cc5e3078891507bbc4b402421d1d8bfa5525c944f3956cb1dc15d9e279f60100a32f05b5e05f0317516e7f047c2afad2a3bf91a88c65fd80947fdeeed1bf2ebedd906eb4b25d16e024631bf15e492bd14caca9e0cc6a0cf0f10c12e8d873ceb00", 0xa6}, {0x0, 0x4b}, {0x0}, {&(0x7f00000002c0)="ffc18c65ce0f563b8101d10b1e86ec66a37f9a809270a23601ca1643e697e4c048de10a16052a38f63e2b7edbadacd2ab6fc72397d8dfa5743a8c1e8f6ff0f6de68f381ed947059a9de03cc3c83468b329532c3b77ef9c423e7aae2f717f080d1a6ea6071e09ca87f24173dc9f5fd08880dc5730d02387a2a5092374276436dc4c65ad21e8c3ebee14cd3325602f83deb9cf79f8f4", 0x95}, {&(0x7f00000003c0)="9e78178f11becfb0536022cad1119f6b16d7730be48019b89a96db818fe9fa50072ab06a4706c99b56365584f5e0b6bd5b00097175969e2b1b91e2703192f95ced387f2a77512b9cfb00349389227fb757896e6131864602f4315a9971400db64446692dd0f6f38dc6c45c042d14671f65506ae7c7f11030d44c5559eed0ccdc20dd6026ca38945d7c4e360332b896a63cf799e1363b4cc084d9642b2578c1e1884269ba622accca77cecae1156f9a07874e1e81c427815f8b38f38d7a6a3db47d9dc69847337148a4425d71ae3e6977f0956b62278cf02be4568972a464583b8130b18d21d654b44cd1fafe783a24", 0xef}], 0x7) accept(r0, &(0x7f00000000c0)=@can, 0x0) 2.07252928s ago: executing program 1 (id=2429): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) unshare(0x22020400) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async, rerun: 64) r4 = accept4(r3, 0x0, 0x0, 0x800) (rerun: 64) sendmsg$nl_route_sched(r4, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000a00)=@newchain={0x40, 0x64, 0x10, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xd, 0x5}, {0x6, 0x4}, {0x2, 0x3}}, [@TCA_RATE={0x6, 0x5, {0x88, 0x2}}, @TCA_RATE={0x6, 0x5, {0x4, 0x1d}}, @filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x80) (async) r5 = socket(0x840000000002, 0x3, 0x100) setsockopt$inet_msfilter(r5, 0x0, 0x29, 0x0, 0x2ff00) (async) recvmsg$kcm(r4, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000004c0)=""/11, 0xb}, {&(0x7f0000000b80)=""/199, 0xc7}], 0x2}, 0x22) (async) getsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000140)={0x0, 0x9}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={r6, 0x38, &(0x7f0000000240)=[@in6={0xa, 0x4e24, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xe0000}, @in6={0xa, 0x4e21, 0x7, @mcast1, 0x3}]}, &(0x7f00000002c0)=0x10) setsockopt$packet_int(r2, 0x107, 0xe, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000080), &(0x7f0000000100)=0x4) (async, rerun: 64) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) (async, rerun: 64) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x31, 0xffffffffffffffff, 0xf679000) ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82307201, &(0x7f0000000680)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=@newtaction={0x48, 0x12, 0xbf68af9d17701211, 0x0, 0x0, {0x7}, [{0x4}, {0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0xffffffffffffff03}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x1d, {0x3}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x240000d0}, 0x0) 1.863633032s ago: executing program 2 (id=2431): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000140)={{r1, &(0x7f0000000000)='#\x00', 0x304401, &(0x7f0000000040)={@align=0x4850e429, {0x0, 0x80, 0x8, 0x9}}, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x9}, {[0xfffffffb, 0xcbf, 0x2, 0x3]}, 0x4, 0xf, &(0x7f0000000100)=""/15}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f00000001c0)={0x3, 'veth0_to_team\x00', {0x35f4}, 0xf}) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000200), &(0x7f0000000240)=0x4) r3 = openat$cgroup_ro(r2, &(0x7f0000000280)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) ioctl$OCFS2_IOC_UNRESVSP64(r1, 0x4030582b, &(0x7f00000002c0)={0x0, 0x1, 0x1, 0x8, 0x9, 0x7a1}) ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0x7b2) r4 = openat$cgroup_ro(r2, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x44000222}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, r5, 0x300, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_P2P_CTWINDOW={0x5}, @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0x81}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) sendmsg$NFT_BATCH(r2, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELCHAIN={0x70, 0x5, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_CHAIN_POLICY={0x8}, @NFTA_CHAIN_USERDATA={0x54, 0xc, "3b01806f8cda0173d334380170a082eb1a35aa03c6867d471287d8f7eae6d62403623a7e9b9d4c18d82d2554d4c48efbe16d7b13026c5aab669d4689cb1a00d3cb050fb690c7ea9070bb0c67d7158b04"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x98}, 0x1, 0x0, 0x0, 0x40000}, 0x20044000) ioctl$XFS_IOC_GETBMAP(r4, 0xc0205826, &(0x7f0000000640)={0x5, 0x7, 0xc59, 0x40, 0x8}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nbd(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r7, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x2c, r8, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x110}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004080}, 0x800) r9 = syz_genetlink_get_family_id$team(&(0x7f0000000800), r4) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000840)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000900)={'syztnl1\x00', &(0x7f0000000880)={'syztnl1\x00', 0x0, 0x1, 0x700, 0x0, 0x0, {{0x12, 0x4, 0x3, 0x7, 0x48, 0x68, 0x0, 0x9, 0xd729d4d994a0edd7, 0x0, @local, @empty, {[@rr={0x7, 0x27, 0xf0, [@dev={0xac, 0x14, 0x14, 0x25}, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x25}, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @dev={0xac, 0x14, 0x14, 0x34}, @multicast1, @dev={0xac, 0x14, 0x14, 0x36}, @local]}, @timestamp={0x44, 0xc, 0x1a, 0x0, 0x6, [0x9, 0x1]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f00000009c0)={'gre0\x00', &(0x7f0000000940)={'sit0\x00', 0x0, 0x7, 0x700, 0x8000, 0x9, {{0xa, 0x4, 0x1, 0x39, 0x28, 0x65, 0x0, 0xb, 0x4, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_prespec={0x44, 0x14, 0xdb, 0x3, 0x1, [{@rand_addr=0x64010100, 0x90}, {@private=0xa010100, 0x7}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000a80)={'ip6_vti0\x00', &(0x7f0000000a00)={'syztnl0\x00', 0x0, 0x29, 0x7, 0x0, 0x800, 0x0, @local, @mcast1, 0x700, 0x7, 0x6, 0x9}}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000ac0)={'team0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000dc0)={r2, 0xe0, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000b00)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f0000000b40)=[0x0, 0x0, 0x0], &(0x7f0000000b80)=[0x0, 0x0, 0x0], 0x0, 0x89, &(0x7f0000000bc0)=[{}, {}], 0x10, 0x10, &(0x7f0000000c00), &(0x7f0000000c40), 0x8, 0x4b, 0x8, 0x8, &(0x7f0000000c80)}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000e00)={'batadv_slave_0\x00', 0x0}) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000e40)={@private1, 0x0}, &(0x7f0000000e80)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000ec0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r2, &(0x7f0000001a80)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001a40)={&(0x7f0000001240)={0x7c8, r9, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [{{0x8, 0x1, r10}, {0x1ec, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r11}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4a79}}, {0x8, 0x6, r13}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r14}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r15}}}]}}, {{0x8}, {0x1cc, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x10}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r16}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r17}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x34, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}}]}}, {{0x8, 0x1, r18}, {0x224, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x50d68b92}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xc84a}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0xc000, 0x7f, 0xd0, 0x4}, {0x10, 0x1, 0x5, 0x5}]}}}]}}, {{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}]}, 0x7c8}, 0x1, 0x0, 0x0, 0x24044005}, 0x800) 1.729937618s ago: executing program 1 (id=2432): bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)=@base={0xa, 0x16, 0xb3, 0x40}, 0x50) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40090) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SREG_KEY={0x8}, @NFTA_DYNSET_OP={0x8}, @NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_DYNSET_FLAGS={0x8, 0x9, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x90}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x8, 0xfffffffffffffdc4, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000000200)=0x704) write(r3, &(0x7f0000000400)='-\x00\x00', 0x3) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="180200000100000100000000000000008500000053000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffe1b702000008000000b70300000000000085000000170000009500"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r4, 0x2000000, 0xe, 0x0, &(0x7f00000001c0)="5cdd3086ddffff6633c9bbac88a8", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0}, 0x20) 1.689164252s ago: executing program 2 (id=2433): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt(r0, 0x84, 0x82, &(0x7f00000002c0)="1af3050013000000", 0x8) syz_emit_ethernet(0xae, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010120", 0x78, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96489269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x2000000000000190, "000000000400260004000000"}, {0x1, 0x1, "fe906d17efe3"}]}}}}}}, 0x0) 1.637981431s ago: executing program 2 (id=2434): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000040, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x28, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e1d, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) r2 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4623, 0x8001, @remote, 0xffffff5d}, 0x1c) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_ADD_RULE(r3, &(0x7f0000000e40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xc0408800}, 0xc, &(0x7f0000000e00)={&(0x7f00000009c0)={0x428, 0x3f3, 0x100, 0x70bd25, 0x25dfdbfe, {0x4, 0x2, 0x40, [0x7, 0x3ff, 0x0, 0xae, 0x4, 0x80, 0x28, 0xbfcc, 0x9, 0x1, 0x7, 0x80000001, 0x8, 0x0, 0x1, 0xc7, 0x7, 0x7, 0x9, 0x2, 0x6, 0x5, 0xffff0000, 0xf4, 0x5, 0x5, 0x3, 0x26b, 0x0, 0x8, 0x6, 0x3, 0x6, 0x5, 0x80000000, 0x1a4789bd, 0x9, 0x6, 0x80, 0x41e, 0xfffffffa, 0x4, 0xfffffffa, 0x5, 0x4, 0x246, 0x5, 0xfffffffc, 0x1, 0xffff8e52, 0x4, 0x3, 0x40, 0x7f, 0x0, 0x9, 0x8403, 0x5ce, 0x8, 0x5, 0x400, 0x400, 0x6, 0x2], [0x3, 0x200, 0x3, 0x7, 0x2, 0xf, 0x7, 0x800, 0xe50, 0xb, 0x7fff, 0x0, 0x1, 0x5, 0x5e, 0x4de, 0x1, 0x7bdc0b81, 0x8, 0x7, 0x6, 0x4, 0x2, 0x7e76, 0x1, 0x7fffffff, 0x10, 0xffffffff, 0x6000000, 0x6, 0x4, 0x8000, 0xc41f, 0x68, 0xffffff01, 0x3, 0xebd, 0x80, 0x1, 0x5, 0x19, 0xf, 0x6, 0x4, 0x6737, 0x1, 0x2, 0x6e, 0xe, 0x31e, 0x100, 0x9, 0x7, 0x9, 0x1, 0x6, 0xd1b, 0x7f, 0x0, 0x61, 0x8, 0x3, 0x2, 0x7], [0xf6a, 0x6, 0x4, 0x200, 0x1, 0x189b9555, 0x2b60000, 0x5, 0x5, 0x1, 0x92d9, 0x5573b7d8, 0x8, 0x8, 0x3, 0x0, 0xe6, 0x8, 0x4, 0x200, 0x40, 0xfffffff8, 0x800, 0x689, 0x1, 0x7, 0xfffffff3, 0x2, 0x0, 0x8, 0x1, 0x35140f9b, 0x10, 0xfff, 0x5199, 0x5, 0x9, 0xfffffffb, 0x6, 0x10000, 0x3, 0x2, 0x2, 0x4, 0x7c4d, 0x1, 0x3, 0x2, 0xd, 0xf, 0x7, 0x400, 0x1, 0x1, 0x1ff, 0x5, 0xfff, 0x8000, 0x0, 0x0, 0x5, 0x6, 0x2, 0x9], [0x9, 0x4, 0xf, 0x7, 0xfe, 0x0, 0xb, 0x9, 0xfffffffd, 0x5, 0x80000001, 0x5, 0x2, 0xb, 0x2, 0x0, 0x80000000, 0x7, 0x9a, 0x0, 0x0, 0x10, 0x400, 0x1c80fda0, 0x18, 0x9, 0x6, 0x6, 0x80, 0x10001, 0x7, 0x7, 0x9, 0x6, 0x400, 0x401, 0xd9, 0x4, 0x9, 0x1, 0x81, 0x6, 0xffffffff, 0x80, 0x8, 0x7, 0xa0e, 0x8, 0xf869, 0x7, 0x6, 0x7, 0x3ff, 0x9, 0xff, 0x200, 0x0, 0x6, 0xa, 0x9, 0x31, 0x3, 0x2, 0x7], 0x7, ['\x15%+%\x00', '', 'z\x00']}, ["", "", ""]}, 0x428}, 0x1, 0x0, 0x0, 0x4040081}, 0x20004845) listen(r2, 0x50) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x6, &(0x7f0000000300)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}, [@map_idx={0x18, 0x2, 0x5, 0x0, 0x9}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$netlink(0x10, 0x3, 0xc) write$cgroup_int(r5, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r5, 0x0) mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r5, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xba0c29e690d41d4b, 0x20000000ec071, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r4, 0x0, 0xe, 0x0, &(0x7f0000000040)="f7edad00"/14, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_int(r6, 0x107, 0x14, &(0x7f0000000180)=0x19ca, 0x4) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r6, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c642b4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x8, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x44}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 1.504281158s ago: executing program 1 (id=2436): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000140)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000000)={r1, 0xe0000000}, &(0x7f0000000040)=0x8) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@local, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x1, 0x794, 0x4e23, 0x0, 0x0, 0x0, 0x0, 0x3a, 0x0, 0xee00}, {@in=@loopback, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0x83}, {0xfffffffffffffffc, 0x7fff, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x0, 0x2, 0x0, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0xc801}, 0x10) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@broadcast, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x6}, {}, 0x0, 0x0, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x33}, 0x0, @in6=@mcast1}}, 0xe8) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_INFO(r4, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x9c, r5, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x90b}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xa}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1f2e}]}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xfffc}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}]}, 0x9c}, 0x1, 0x0, 0x0, 0x44040}, 0x10) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000006, 0x4132, 0xffffffffffffffff, 0x0) 1.420019891s ago: executing program 4 (id=2437): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000940)={0x0, 0xfffffff0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="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"], 0x254}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0xa10, 0x8, 0x8, 0x180}, 0x50) preadv(r1, &(0x7f00000031c0)=[{&(0x7f0000001f40)=""/4096, 0x1000}, {&(0x7f0000002f40)=""/40, 0x28}, {&(0x7f0000002f80)=""/130, 0x82}, {&(0x7f0000003040)=""/90, 0x5a}, {&(0x7f00000030c0)=""/38, 0x26}, {&(0x7f0000003100)}, {&(0x7f0000003140)=""/71, 0x47}], 0x7, 0x10000, 0x5) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000009c0)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000d0a0000000000000001000005d8"], &(0x7f0000000f40)=""/4089, 0x3e, 0xff9, 0x1, 0xfffffffa}, 0x28) 1.294058714s ago: executing program 2 (id=2438): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan0\x00'}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async, rerun: 32) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 32) bind$bt_hci(r3, &(0x7f0000000040), 0x6) (async) ioctl$sock_bt_hci(r3, 0x400448e7, &(0x7f0000000240)='zvh') (async) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 64) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0x3}, 0x6) (async) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) (async, rerun: 64) setsockopt$sock_timeval(r2, 0x1, 0x2, 0x0, 0x48) (rerun: 64) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000094c0)=ANY=[@ANYBLOB="8c45000043000701feff416ec366166e0314000004004580744501"], 0x458c}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) (async) sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000010}, 0x4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x1f, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffffffffffd8, 0x0, 0x0, 0x4, 0x0, 0x8100348}, 0x18) (async, rerun: 64) socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 64) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r7, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r9, {0x2}, {}, {0xfff3}}}, 0x24}}, 0x0) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) (rerun: 32) r10 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r10, &(0x7f0000000180)={0xa, 0x4e21, 0xb, @mcast2, 0x9}, 0x1c) (async) sendto$inet6(r10, &(0x7f0000000040)="800037bbfa9ba1ce", 0xffe9, 0x0, 0x0, 0x0) (async, rerun: 64) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0), 0xffffffffffffffff) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) socket$nl_route(0x10, 0x3, 0x0) 1.214576644s ago: executing program 4 (id=2439): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0x4000000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, @exit, @printk={@x, {}, {0x7, 0x1, 0xb, 0x1, 0xa, 0x0, 0x3e}, {}, {}, {0x5, 0x0, 0xb, 0xa, 0x0, 0xfffd}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x3, &(0x7f0000000340)=""/222, 0x0, 0xc}, 0x94) 1.165438378s ago: executing program 3 (id=2440): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xbc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000200)="d28e01103108060000000000fbfd", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) (async) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000080)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x0, 0x25dfdbfb, {0xa, 0x80, 0x80}, [@RTA_DPORT={0x6, 0x1d, 0x4e20}, @RTA_IP_PROTO={0x5, 0x1b, 0x3a}]}, 0x2c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8}, [@generic={0x81, 0x1, 0x1, 0x81}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 1.038189427s ago: executing program 2 (id=2441): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x70bd27, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond_slave_1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0xd1}, 0x8014) pipe(&(0x7f0000000000)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r2, @ANYBLOB="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"], 0x22c}, 0x1, 0x0, 0x0, 0xc811}, 0x40000) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180070001006374000014000280080002400000000f08000140000000020900010073797a30000000000900020073797a320000000014000000110001"], 0x78}}, 0x400c084) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e21, @broadcast}}, 0x80000, 0x0, 0x6, 0xfffffff8, 0xb3550aa4ba878396}, 0x9c) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x200000002300, 0x0, 0x0, 0x2000000024be, 0x2000000024ee], 0x20, 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000050000006b0000000016636169663000000000000000e3ff00007665746831000000000000000000000073797a5f74756e0039da0000f8ff0000000076657468310000000000000000001000aaaaaaaaaa3d000000ff00000180c2000003ff00ffffff00ae000000560100008e0100006f776e6572000000000000000000000000000000001800"/198, @ANYRES32, @ANYRES32, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB="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"]}, 0x296) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newtaction={0x18, 0x30, 0xffff, 0x70bd29, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) getsockname$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_emit_ethernet(0xd8, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaa30bbbbbbbbbbbb0011dc8ed67c0ed90f13582e792c9712074935c11aa1a5cc6e0029415b10eb938da3ec9f524d0bce1216931ae024f0264e78b468e485a8b88150d5c8d3bed06c24291b38ccd97e308b43c8e9b4a42e18d2312ec40e3b6e54514e91a330ab7f6eaafef77b02886dcdfb545107285744e7f7e1d82d572c9ebd314f0d07b17206f00c6c0d17a06521ba43125b5694bf67ad3ab5bfcd172c7b6435f40c5b26d55be70f670008fb878f28341ded865f486ca95e9ed2a4f2cc0357092599fa1ef695d5640f85d1eb705b294a38d967"], 0x0) close(0x4) unshare(0x6a040000) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000080)={0x84, @private=0xa010101, 0x15, 0x3, 'sh\x00', 0x2e, 0x5, 0x72}, 0x2c) unshare(0x2000000) r6 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e20, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@loopback, 0x4e20, 0x10000, 0x2, 0x2}}, 0x44) unshare(0x2010100) sendmsg$sock(r6, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 1.022057541s ago: executing program 4 (id=2442): r0 = socket(0x400000000010, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xa, 0x4, 0x4, 0x4, 0x0, 0x1}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2, 0x1}, 0xc) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xa, 0x0, 0x300, 0xed}}) 999.244781ms ago: executing program 3 (id=2443): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0x4000000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8, 0x0, 0x0, 0xfffffffe}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3e00, 0x0, 0x0, 0x0, 0x1000000}, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa, 0x0, 0xfffd}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x3, &(0x7f0000000340)=""/222, 0x0, 0xc}, 0x94) 853.113355ms ago: executing program 1 (id=2444): r0 = socket$netlink(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, 0x0, &(0x7f00000000c0)=0x9b) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}, @IFLA_ADDRESS={0xa}]}, 0x48}}, 0x0) 806.066443ms ago: executing program 4 (id=2445): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$inet6_sctp(0xa, 0x801, 0x84) (async, rerun: 32) close(0x3) (rerun: 32) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x62102, 0x0) close(r2) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000000)=ANY=[]) (async) socket$netlink(0x10, 0x3, 0x4) (async, rerun: 64) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random}) (rerun: 64) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async, rerun: 64) r5 = socket$packet(0x11, 0x2, 0x300) (rerun: 64) sendto$packet(r5, 0x0, 0xfffffffffffffdba, 0x50040, &(0x7f00000001c0)={0x11, 0x3, r4, 0x1, 0xd8, 0x6, @multicast}, 0x14) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan0\x00'}) (async, rerun: 32) syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r0) (async) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r6, &(0x7f0000000040)={&(0x7f0000000080)=@in={0x2, 0x4e23, @local}, 0x80, 0x0, 0x0, 0x0, 0x10b8}, 0x20048000) (async) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x428, 0x290, 0xc8, 0x8, 0x0, 0x5803, 0x358, 0x2e8, 0x2e8, 0x358, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff, 0xff], [0xff000000, 0xff000000, 0xff, 0x1fe0000ff], 'bridge0\x00', 'batadv_slave_1\x00', {0xff}, {}, 0x89, 0x3, 0x0, 0x12}, 0x0, 0x228, 0x290, 0x0, {0x0, 0x2000000000000}, [@inet=@rpfilter={{0x28}, {0xc}}, @common=@inet=@hashlimit3={{0x158}, {'veth1_macvtap\x00', {0xeb98, 0x101, 0x7a, 0xfffd, 0x4, 0x9, 0x0, 0x7f, 0x8, 0x78}, {0xaa}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x8, 0x7, 0x2, 0x563, 'netbios-ns\x00', 'syz1\x00', {0x6}}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0xf0}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1c}}, [0xffffffff, 0x0, 0xff, 0xffffff00], [0xff000000, 0x0, 0x0, 0xff000000], 'pim6reg\x00', 'veth0_to_bond\x00', {0xff}, {0xff}, 0x11, 0x2, 0x3, 0x40}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) (async) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000010400)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) socket(0x2, 0x80805, 0x9) (async) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r9, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0x0, 0x93}, 0xe) ioctl$int_in(r9, 0x5452, &(0x7f0000000280)=0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r10, 0x0, 0xc100) 463.990425ms ago: executing program 3 (id=2446): r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000040)=0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x66, @remote, 0x7}, 0x1c) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000100)={'gre0\x00', 0x0, 0x7880, 0x80, 0xff, 0x8, {{0x8, 0x4, 0x2, 0xd, 0x20, 0x65, 0x0, 0x2, 0x2f, 0x0, @loopback, @remote, {[@timestamp={0x44, 0xc, 0x1b, 0x0, 0x1, [0x5, 0xcd]}]}}}}}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f00000001c0)=0xc) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x104000}, 0xc, &(0x7f0000000500)={&(0x7f0000000200)=@flushsa={0x2f8, 0x1c, 0x10, 0x70bd25, 0x25dfdbfe, {0xff}, [@mark={0xc, 0x15, {0x35075a, 0x74f}}, @srcaddr={0x14, 0xd, @in=@broadcast}, @replay_esn_val={0x34, 0x17, {0x6, 0x70bd26, 0x70bd2b, 0x70bd2b, 0x70bd29, 0x100, [0x2, 0x299e, 0xfffffff6, 0x23c, 0x0, 0x5]}}, @proto={0x5, 0x19, 0x32}, @algo_aead={0x52, 0x12, {{'morus640\x00'}, 0x30, 0xc0, "2466f7db123a"}}, @encap={0x1c, 0x4, {0x1, 0x4e22, 0x4e22, @in=@empty}}, @policy={0xac, 0x7, {{@in=@remote, @in=@rand_addr=0x64010101, 0x4e24, 0x6cd, 0x4e22, 0x5, 0x2, 0x40, 0x80, 0x7350b831f5c6c16e, r1, r2}, {0x5, 0x9, 0x3, 0x7, 0x2, 0x55a, 0x8, 0x8}, {0x1, 0x8001, 0x8000, 0xffffffff00000000}, 0x3, 0x6e6bbf, 0x2, 0x1, 0x2}}, @sec_ctx={0x7d, 0x8, {0x79, 0x8, 0x0, 0x12, 0x71, "529e2ec7b39ca7ba2826546b2f1d49eb785d50923c93c5b0f17bbc861edee87c677fecdefeaef156b1e8362f64a6a1dba2b29c5e5b0c8b4dc166d6f0901e2827aa376f03475cfbe3b43a9c71abf472d2be9453b37aaad9d6f246e04979f717510e94423cfb6868caa1504c63c739e9ef3b"}}, @algo_crypt={0xcd, 0x2, {{'ecb-aes-ce\x00'}, 0x428, "245d36fccbdfdc94f20d4007bdc8d501d9685787dbc94bc6ea52098486863b531b70daa90203dc52636cb1b10a8920f09401eb35d0c16ed82f5c08ca82d65e3e4c4bdf49f86ed99d017c9ef52dc756c261a319611385fa121bd3545b565ab535c8e397d7414d2a2b1af1ba78c24bd17cb3f894a563419bd2237a7f566f8279188792ec8eaa"}}, @encap={0x1c, 0x4, {0xfffffffffffffffe, 0x4e21, 0x4, @in=@loopback}}]}, 0x2f8}, 0x1, 0x0, 0x0, 0xc1}, 0x604c0d0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000580)={@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, r1}, 0xc) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000005c0)={'macsec0\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), r5) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r3, 0x8982, &(0x7f0000000640)) sendmsg$DEVLINK_CMD_RATE_GET(r5, &(0x7f0000001780)={&(0x7f0000000680), 0xc, &(0x7f0000001740)={&(0x7f00000006c0)={0x1060, r6, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0x1004, 0xa8, @random="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"}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x1060}, 0x1, 0x0, 0x0, 0x20}, 0x200080c4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f00000017c0)={0x0, 'vlan0\x00'}, 0x18) ioctl$sock_SIOCGIFCONF(r4, 0x8912, &(0x7f0000001840)=@req={0x28, &(0x7f0000001800)={'veth0\x00', @ifru_flags=0x1000}}) ioctl$XFS_IOC_START_COMMIT(r3, 0x80585882, &(0x7f0000001880)={0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000002a40)={'ip6tnl0\x00', &(0x7f00000029c0)={'ip6gre0\x00', r1, 0x29, 0x9, 0x5, 0x100, 0x4, @loopback, @remote, 0x10, 0x1, 0x1000, 0xec}}) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002a80), 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000002b40)={0x1, 0xffffffffffffffff}, 0x4) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002b80)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x4, '\x00', r1, 0xffffffffffffffff, 0x4, 0x0, 0x4}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000002c80)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000002c00), &(0x7f0000002c40)='%ps \x00'}, 0x20) r13 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000002d00)=@o_path={&(0x7f0000002cc0)='./file0\x00', 0x0, 0x18, r4}, 0x18) r14 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000002d40)={0xffffffffffffffff, 0x40, 0x8}, 0xc) r15 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002e00)=@bpf_tracing={0x1a, 0x9, &(0x7f0000001900)=@framed={{0x18, 0x0, 0x0, 0x0, 0x17, 0x0, 0x0, 0x0, 0xfffffffa}, [@map_idx={0x18, 0x3, 0x5, 0x0, 0x7}, @map_fd={0x18, 0x6, 0x1, 0x0, r7}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffb}]}, &(0x7f0000001980)='GPL\x00', 0x4, 0x1000, &(0x7f00000019c0)=""/4096, 0x1e00, 0x2, '\x00', r8, 0x1a, r9, 0x8, &(0x7f0000002ac0)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000002b00)={0x4, 0x7, 0x3, 0x400}, 0x10, 0x52d0, 0xffffffffffffffff, 0x2, &(0x7f0000002d80)=[r10, 0xffffffffffffffff, r11, r12, r13, r14], &(0x7f0000002dc0)=[{0x3, 0x2, 0xc, 0x8}, {0x3, 0x3, 0x0, 0xb}], 0x10, 0x1ff}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000002ec0)={r15, 0x1}, 0xc) r16 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002f00), 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002f40)={0x1b, 0x0, 0x0, 0x2, 0x0, r7, 0x0, '\x00', 0x0, r16, 0x5, 0x3, 0x4}, 0x50) sendmsg$NFNL_MSG_ACCT_DEL(r7, &(0x7f00000030c0)={&(0x7f0000002fc0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000003080)={&(0x7f0000003000)={0x4c, 0x3, 0x7, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x7}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xe}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x1000}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}, 0x4c}}, 0x0) socket$qrtr(0x2a, 0x2, 0x0) 357.673635ms ago: executing program 4 (id=2447): close(0x3) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000000}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r1, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0], 0x0, 0x91, &(0x7f00000000c0)=[{}], 0x8, 0x10, &(0x7f0000000100), &(0x7f0000000140), 0x8, 0x8c, 0x8, 0x8, &(0x7f0000000180)}}, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000240)={r0, 0x10001, 0x7, 0x8}) r5 = socket(0x15, 0x5, 0x0) r6 = socket(0x40000000015, 0x5, 0x0) connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r6, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet(r6, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40) getsockopt(r6, 0x200000000114, 0x2715, &(0x7f0000019580)=""/102385, &(0x7f0000000400)=0x19018) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000980)={0x0, @in6={{0xa, 0x4e21, 0xc54, @private1={0xfc, 0x1, '\x00', 0x1}, 0xe23d}}, 0xb3, 0x4}, &(0x7f0000000b00)=0x90) getsockopt$inet_sctp6_SCTP_MAXSEG(r6, 0x84, 0xd, &(0x7f0000000b40)=@assoc_id=r8, &(0x7f0000000b80)=0x4) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$inet6(r4, &(0x7f0000001240)={&(0x7f00000003c0)={0xa, 0x4e21, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x200}, 0x1c, &(0x7f0000000e00)=[{&(0x7f0000000bc0)="dbd9c07df0872cb31ac580c5cfe87999c0b8d4b2433a23c2ec056a14253bed4f78d8b8842a92c9b1e02aa9b41a16595fea5087ea68b8cdfa0ae88c94558d67d8f410360d6a4f60725afc19d2924b581f07222e029277186f442fc23f4511adf3e787b572cf73158513717202534581d624231cdf1fd444f669b43f3d8d71aa2f1cff6c6f", 0x84}, {&(0x7f0000000c80)="9f39c0dbec438d8ba03c50a4ba641118f69db104a1b32777abc871e3538dd98c81b21dfe83f7395a16a747a454d49eb2d4b12406673f6c9973b440e82f08574d8a667d75cc2de67a090ca1811713df374c6959c89d69e1700ccf0d785ef67b2315015734932701e7cb6285a91a4cd13b7d2e5404b00aa5e16cb08a39f65f6756f321af9a4c6058a28dd4e854751526", 0x8f}, {&(0x7f0000000d40)="b51a12634c5a903b3511973fea88a10f9d802efe3dcf0c82c4aef86d187a065a", 0x20}, {&(0x7f0000000d80)="ed49bdbd2c9b5ff6b86a7daa89b776f4c083b31895557e727797cecc7741d7d44600b4cc68c1ce8c26ce951b0c37d4b297b71be2758562825c5ecdacf0e040900771466194d73ac52348cb70a9454c3fe1dd0b94a6c64d641b1936e24a701cff092dc235eda3", 0x66}], 0x4, &(0x7f0000001040)=[@hopopts_2292={{0x30, 0x29, 0x36, {0x6c, 0x2, '\x00', [@ra={0x5, 0x2, 0x5}, @enc_lim={0x4, 0x1, 0x81}, @padn={0x1, 0x1, [0x0]}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xf}}, @rthdr_2292={{0xb8, 0x29, 0x39, {0x67, 0x14, 0x0, 0xff, 0x0, [@private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, @ipv4={'\x00', '\xff\xff', @remote}]}}}, @hopopts_2292={{0x40, 0x29, 0x36, {0x2c, 0x4, '\x00', [@jumbo={0xc2, 0x4, 0x81}, @calipso={0x7, 0x18, {0x3, 0x4, 0x5, 0xf000, [0x7, 0xa]}}, @padn={0x1, 0x2, [0x0, 0x0]}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x1000}}, @hoplimit={{0x14, 0x29, 0x34, 0x9}}, @dstopts_2292={{0x48, 0x29, 0x4, {0x33, 0x5, '\x00', [@hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0xe}, @jumbo={0xc2, 0x4, 0xb}, @jumbo={0xc2, 0x4, 0xe42}, @enc_lim={0x4, 0x1, 0x7}]}}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x2c, 0x4, 0x2, 0x2, 0x0, [@mcast1, @private0]}}}], 0x1f0}, 0x40000) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r7, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000600)={&(0x7f0000000900)={0x6c, r9, 0x804734707cb5d93, 0x70bd27, 0x25dfdbfa, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'dummy0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip_vti0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}]}, 0x6c}, 0x1, 0x0, 0x0, 0x2000c080}, 0x9aa7fbc5820dcdc9) r10 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_int(r10, 0x0, 0x21, &(0x7f0000000080)=0xffffffff, 0x4) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1d, 0x31, &(0x7f00000002c0)=ANY=[@ANYRESOCT=r1], &(0x7f0000000280)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x40f00, 0x0, '\x00', r2, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001000), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r13, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, r14, 0x701, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x4000) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f00000007c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r12, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x68, r14, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0xd}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r15}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0xf}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x4}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x48002}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r11, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x17) 200.528238ms ago: executing program 1 (id=2448): shutdown(0xffffffffffffffff, 0x0) unshare(0x6020400) unshare(0x2c060000) r0 = socket$key(0xf, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000180)={0x0, 0x9, 0x0, 0x9, 0x1, 0x0, [{0x1d, 0x5, 0x10000, '\x00', 0x49b}]}) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40040}], 0x1, 0x8040) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r2) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000080)) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xd, &(0x7f0000000340)=@framed={{0x18, 0x2, 0x0, 0x0, 0xff}, [@call={0x85, 0x0, 0x0, 0x41}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1ff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0xe, 0x0, &(0x7f0000000140)="9b7d589f668f4113c16a6297df66", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f00000000c0)=@framed={{0xffffffb4, 0x2, 0x0, 0x0, 0x25000000, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x1c}]}, &(0x7f0000000380)='GPL\x00', 0x5, 0xff92, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x36c, 0x10, &(0x7f0000000000), 0x26}, 0x48) r6 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$bt_BT_SNDMTU(r6, 0x112, 0xc, &(0x7f0000000140)=0x81, 0x2) 199.425148ms ago: executing program 3 (id=2449): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r3, &(0x7f0000000200)={0x2, @long}, 0x8) epoll_pwait(r0, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000007500000095"], &(0x7f0000000500)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000140)="c1188e99b95d02ff4284860188a8", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="180200008000000034b0d716d5ca84d9850000009b00000085000000070000009500000000000000"], &(0x7f0000000680)='GPL\x00'}, 0x5d) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000180)="5becbc0e0d7cca6073a4f11d1b00", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x2c, 0xd, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) listen(r6, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r8, @ANYRES32, @ANYBLOB='&'], 0x10) r9 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=@newtaction={0x78, 0x30, 0x51b, 0x0, 0x0, {}, [{0x64, 0x1, [@m_skbmod={0x60, 0x1, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0xf}}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r8, &(0x7f00000001c0)="bde235aa198d29fc63e789e6bb19ebcc8d6e66f75b2b0c446ae258a9f298874ec4dc39a1b448aaa2b62a6f39236d694ad4e0fc9cbe3ce85d1fe9515779618a", &(0x7f0000004880)=@udp=r9}, 0x20) unshare(0x2c020400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xffffff6a) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffff000) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r10, 0x0, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44010}, 0x40000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='freezer.state\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 4 (id=2450): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) (async) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0xb8}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async, rerun: 64) r5 = accept$nfc_llcp(r3, &(0x7f00000003c0), &(0x7f0000000440)=0x60) (rerun: 64) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f00000005c0)={0xffffffffffffffff, r5, 0x5, 0x9, &(0x7f0000000480)="4886188258a68809d3", 0x5, 0xf0, 0xffff, 0x3f, 0x2c0, 0x0, 0x101, 'syz0\x00'}) r6 = socket(0x2a, 0x2, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r7, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) (async) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x4000000000000, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x4001, 0x3, 0x438, 0x0, 0x700001b, 0x148, 0x0, 0x148, 0x3a0, 0x206, 0x240, 0x3a0, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x1ea, 0x2c8, 0x2f0, 0x0, {0x390, 0x8f00}, [@inet=@rpfilter={{0x28}, {0x3}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00', {0x1000}}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x5, 0xff, {0x9184}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x498) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x4, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x0, 0x4}}}, 0x24}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=@newtfilter={0x4c, 0x2c, 0xd09, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r9, {0xfffa, 0x7}, {}, {0x1c, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x86dd}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x84}, @TCA_FLOWER_KEY_SCTP_SRC={0x6}]}}]}, 0x4c}}, 0x24004000) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000080)=r9) (async) ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0) kernel console output (not intermixed with test programs): bond_slave_0): Releasing backup interface [ 186.079952][ T8889] : (slave bond_slave_1): Releasing backup interface [ 186.114123][ T8899] netlink: 4 bytes leftover after parsing attributes in process `syz.2.785'. [ 186.129658][ T8889] team0: Port device team_slave_0 removed [ 186.146935][ T8889] team0: Port device team_slave_1 removed [ 186.165060][ T8889] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 186.204062][ T8893] 8021q: VLANs not supported on ip6gre0 [ 186.270221][ T8899] hsr_slave_0: left promiscuous mode [ 186.278186][ T5636] Bluetooth: hci4: command 0x0405 tx timeout [ 186.304646][ T8899] hsr_slave_1: left promiscuous mode [ 186.411837][ T8904] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 186.672755][ T8926] netlink: 'syz.4.791': attribute type 1 has an invalid length. [ 186.748685][ T8926] 8021q: adding VLAN 0 to HW filter on device bond4 [ 186.779343][ T8931] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 186.814532][ T8922] bond4: (slave geneve2): making interface the new active one [ 186.829785][ T8922] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 186.840104][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.869564][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.907515][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.026144][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.044535][ T8935] netlink: 'syz.3.793': attribute type 2 has an invalid length. [ 187.053122][ T8935] netlink: 'syz.3.793': attribute type 1 has an invalid length. [ 187.061582][ T8935] netlink: 152 bytes leftover after parsing attributes in process `syz.3.793'. [ 187.072887][ T8936] netlink: 'syz.3.793': attribute type 2 has an invalid length. [ 187.082839][ T8936] netlink: 'syz.3.793': attribute type 1 has an invalid length. [ 187.093073][ T8936] netlink: 152 bytes leftover after parsing attributes in process `syz.3.793'. [ 187.616328][ T8958] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 188.073725][ T8970] netlink: 12 bytes leftover after parsing attributes in process `syz.4.803'. [ 188.102800][ T8970] netlink: 'syz.4.803': attribute type 1 has an invalid length. [ 188.136537][ T8970] netlink: 36 bytes leftover after parsing attributes in process `syz.4.803'. [ 188.594697][ T8992] netlink: 44 bytes leftover after parsing attributes in process `syz.3.811'. [ 188.626317][ T8992] sctp: [Deprecated]: syz.3.811 (pid 8992) Use of int in max_burst socket option deprecated. [ 188.626317][ T8992] Use struct sctp_assoc_value instead [ 188.861284][ T8988] syzkaller0: entered promiscuous mode [ 188.871163][ T8988] syzkaller0: entered allmulticast mode [ 188.882678][ T8993] netlink: 'syz.0.810': attribute type 29 has an invalid length. [ 189.249221][ T5633] IPVS: starting estimator thread 0... [ 189.347868][ T9030] IPVS: using max 25 ests per chain, 60000 per kthread [ 189.402360][ T9040] netlink: 4 bytes leftover after parsing attributes in process `syz.0.823'. [ 189.446720][ T9043] netlink: 'syz.1.822': attribute type 1 has an invalid length. [ 189.457998][ T9043] netlink: 4 bytes leftover after parsing attributes in process `syz.1.822'. [ 190.748560][ T9038] netlink: 28 bytes leftover after parsing attributes in process `syz.1.822'. [ 190.757675][ T9038] netlink: 28 bytes leftover after parsing attributes in process `syz.1.822'. [ 190.820100][ T9059] xt_CT: You must specify a L4 protocol and not use inversions on it [ 190.829503][ T9059] FAULT_INJECTION: forcing a failure. [ 190.829503][ T9059] name failslab, interval 1, probability 0, space 0, times 0 [ 190.843911][ T9059] CPU: 0 UID: 0 PID: 9059 Comm: syz.1.825 Not tainted syzkaller #0 PREEMPT(full) [ 190.843936][ T9059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 190.843947][ T9059] Call Trace: [ 190.843955][ T9059] [ 190.843963][ T9059] dump_stack_lvl+0xe8/0x150 [ 190.843991][ T9059] should_fail_ex+0x412/0x560 [ 190.844024][ T9059] should_failslab+0xa8/0x100 [ 190.844057][ T9059] __kvmalloc_node_noprof+0x178/0x8a0 [ 190.844086][ T9059] ? __nf_hook_entries_try_shrink+0x328/0x700 [ 190.844122][ T9059] __nf_hook_entries_try_shrink+0x328/0x700 [ 190.844160][ T9059] __nf_unregister_net_hook+0x4cc/0x6f0 [ 190.844195][ T9059] nf_unregister_net_hooks+0xcb/0x140 [ 190.844224][ T9059] nf_ct_netns_put+0x36d/0x520 [ 190.844249][ T9059] ? __pfx_connmark_mt_destroy+0x10/0x10 [ 190.844271][ T9059] cleanup_entry+0x15f/0x360 [ 190.844295][ T9059] ? __pfx_cleanup_entry+0x10/0x10 [ 190.844333][ T9059] ? xt_find_target+0x208/0x260 [ 190.844366][ T9059] translate_table+0x1ecd/0x20b0 [ 190.844408][ T9059] ? __pfx_translate_table+0x10/0x10 [ 190.844428][ T9059] ? __might_fault+0xaf/0x130 [ 190.844456][ T9059] ? __might_fault+0xaf/0x130 [ 190.844501][ T9059] ? _copy_from_user+0x94/0xb0 [ 190.844537][ T9059] do_ip6t_set_ctl+0x9fe/0xe10 [ 190.844559][ T9059] ? rcu_is_watching+0x15/0xb0 [ 190.844584][ T9059] ? trace_contention_end+0x3d/0x140 [ 190.844613][ T9059] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 190.844655][ T9059] ? __pfx___mutex_lock+0x10/0x10 [ 190.844675][ T9059] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 190.844727][ T9059] ? __pfx_aa_sk_perm+0x10/0x10 [ 190.844759][ T9059] nf_setsockopt+0x26f/0x290 [ 190.844787][ T9059] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 190.844815][ T9059] do_sock_setsockopt+0x17c/0x1b0 [ 190.844850][ T9059] __x64_sys_setsockopt+0x13d/0x1b0 [ 190.844882][ T9059] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.844903][ T9059] do_syscall_64+0x15f/0xf80 [ 190.844941][ T9059] ? trace_irq_disable+0x3b/0x140 [ 190.844968][ T9059] ? clear_bhb_loop+0x40/0x90 [ 190.844991][ T9059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.845009][ T9059] RIP: 0033:0x7f2d6959ce59 [ 190.845026][ T9059] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 190.845041][ T9059] RSP: 002b:00007f2d6a3d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 190.845060][ T9059] RAX: ffffffffffffffda RBX: 00007f2d69815fa0 RCX: 00007f2d6959ce59 [ 190.845072][ T9059] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 190.845082][ T9059] RBP: 00007f2d6a3d7090 R08: 0000000000000388 R09: 0000000000000000 [ 190.845093][ T9059] R10: 0000200000002880 R11: 0000000000000246 R12: 0000000000000002 [ 190.845104][ T9059] R13: 00007f2d69816038 R14: 00007f2d69815fa0 R15: 00007ffd0b9a7dc8 [ 190.845135][ T9059] [ 191.181326][ T9049] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 191.402268][ T9079] netlink: 4 bytes leftover after parsing attributes in process `syz.0.828'. [ 192.297384][ T9094] netlink: 12 bytes leftover after parsing attributes in process `syz.2.829'. [ 192.474021][ T9094] 8021q: adding VLAN 0 to HW filter on device bond5 [ 192.548948][ T9114] validate_nla: 2 callbacks suppressed [ 192.548966][ T9114] netlink: 'syz.1.834': attribute type 2 has an invalid length. [ 192.572592][ T9095] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 192.583771][ T9116] netlink: 'syz.1.834': attribute type 2 has an invalid length. [ 192.686138][ T9119] xt_CT: You must specify a L4 protocol and not use inversions on it [ 192.713865][ T9119] FAULT_INJECTION: forcing a failure. [ 192.713865][ T9119] name failslab, interval 1, probability 0, space 0, times 0 [ 192.761010][ T9119] CPU: 1 UID: 0 PID: 9119 Comm: syz.0.837 Not tainted syzkaller #0 PREEMPT(full) [ 192.761035][ T9119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 192.761046][ T9119] Call Trace: [ 192.761054][ T9119] [ 192.761062][ T9119] dump_stack_lvl+0xe8/0x150 [ 192.761090][ T9119] should_fail_ex+0x412/0x560 [ 192.761120][ T9119] should_failslab+0xa8/0x100 [ 192.761151][ T9119] __kvmalloc_node_noprof+0x178/0x8a0 [ 192.761180][ T9119] ? __nf_hook_entries_try_shrink+0x328/0x700 [ 192.761215][ T9119] __nf_hook_entries_try_shrink+0x328/0x700 [ 192.761256][ T9119] __nf_unregister_net_hook+0x4cc/0x6f0 [ 192.761290][ T9119] nf_unregister_net_hooks+0xcb/0x140 [ 192.761318][ T9119] nf_defrag_ipv6_disable+0x95/0xe0 [ 192.761346][ T9119] nf_ct_netns_put+0x375/0x520 [ 192.761371][ T9119] ? __pfx_connmark_mt_destroy+0x10/0x10 [ 192.761392][ T9119] cleanup_entry+0x15f/0x360 [ 192.761434][ T9119] ? __pfx_cleanup_entry+0x10/0x10 [ 192.761464][ T9119] ? xt_find_target+0x208/0x260 [ 192.761499][ T9119] translate_table+0x1ecd/0x20b0 [ 192.761545][ T9119] ? __pfx_translate_table+0x10/0x10 [ 192.761565][ T9119] ? __might_fault+0xaf/0x130 [ 192.761592][ T9119] ? __might_fault+0xaf/0x130 [ 192.761640][ T9119] ? _copy_from_user+0x94/0xb0 [ 192.761675][ T9119] do_ip6t_set_ctl+0x9fe/0xe10 [ 192.761700][ T9119] ? rcu_is_watching+0x15/0xb0 [ 192.761725][ T9119] ? trace_contention_end+0x3d/0x140 [ 192.761755][ T9119] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 192.761798][ T9119] ? __pfx___mutex_lock+0x10/0x10 [ 192.761819][ T9119] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 192.761859][ T9119] ? __pfx_aa_sk_perm+0x10/0x10 [ 192.761891][ T9119] nf_setsockopt+0x26f/0x290 [ 192.761933][ T9119] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 192.761963][ T9119] do_sock_setsockopt+0x17c/0x1b0 [ 192.762000][ T9119] __x64_sys_setsockopt+0x13d/0x1b0 [ 192.762035][ T9119] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.762057][ T9119] do_syscall_64+0x15f/0xf80 [ 192.762085][ T9119] ? trace_irq_disable+0x3b/0x140 [ 192.762115][ T9119] ? clear_bhb_loop+0x40/0x90 [ 192.762140][ T9119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.762160][ T9119] RIP: 0033:0x7f1a36f9ce59 [ 192.762179][ T9119] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.762194][ T9119] RSP: 002b:00007f1a37f30028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 192.762214][ T9119] RAX: ffffffffffffffda RBX: 00007f1a37215fa0 RCX: 00007f1a36f9ce59 [ 192.762228][ T9119] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 192.762239][ T9119] RBP: 00007f1a37f30090 R08: 0000000000000388 R09: 0000000000000000 [ 192.762251][ T9119] R10: 0000200000002880 R11: 0000000000000246 R12: 0000000000000002 [ 192.762262][ T9119] R13: 00007f1a37216038 R14: 00007f1a37215fa0 R15: 00007fffec12ffc8 [ 192.762297][ T9119] [ 193.178847][ T9129] ip6tnl1: entered allmulticast mode [ 193.186277][ T32] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 193.214786][ T5729] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 193.224367][ T32] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 193.402276][ T9139] netlink: 'syz.3.842': attribute type 4 has an invalid length. [ 193.444875][ T9142] xt_CT: You must specify a L4 protocol and not use inversions on it [ 193.499710][ T5729] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 193.525993][ T9147] syzkaller0: entered promiscuous mode [ 193.532024][ T9147] syzkaller0: entered allmulticast mode [ 193.737910][ T9156] netlink: 'syz.0.848': attribute type 15 has an invalid length. [ 193.787935][ T5729] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 194.029997][ T9164] syzkaller0: entered promiscuous mode [ 194.036531][ T9164] syzkaller0: entered allmulticast mode [ 194.135465][ T9166] tipc: Started in network mode [ 194.142400][ T9168] netlink: 20 bytes leftover after parsing attributes in process `syz.0.851'. [ 194.151604][ T9166] tipc: Node identity 32090cd46cbf, cluster identity 4711 [ 194.160868][ T9166] tipc: Enabled bearer , priority 0 [ 194.280867][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.332015][ T9174] netlink: 76 bytes leftover after parsing attributes in process `syz.1.852'. [ 195.640351][ T9166] syzkaller0: entered promiscuous mode [ 195.649607][ T9166] syzkaller0: entered allmulticast mode [ 196.486447][ T9176] tipc: Resetting bearer [ 196.495902][ T9165] tipc: Resetting bearer [ 196.511119][ T9165] tipc: Disabling bearer [ 196.526976][ T5729] tipc: Node number set to 1588989140 [ 196.645815][ T9186] syzkaller0: entered promiscuous mode [ 196.659316][ T9186] syzkaller0: entered allmulticast mode [ 196.751944][ T9199] netlink: 132 bytes leftover after parsing attributes in process `syz.4.856'. [ 197.558706][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 198.711100][ T9235] netlink: 'syz.4.865': attribute type 4 has an invalid length. [ 198.723913][ T9237] netlink: 8 bytes leftover after parsing attributes in process `syz.3.866'. [ 198.741945][ T9237] netlink: 24 bytes leftover after parsing attributes in process `syz.3.866'. [ 199.150610][ T9253] veth0_macvtap: Caught tx_queue_len zero misconfig [ 199.253479][ T9255] netlink: 'syz.2.871': attribute type 11 has an invalid length. [ 199.308864][ T9258] xt_CT: You must specify a L4 protocol and not use inversions on it [ 199.545803][ T9266] netlink: 'syz.1.875': attribute type 11 has an invalid length. [ 199.585303][ T9266] netlink: 12 bytes leftover after parsing attributes in process `syz.1.875'. [ 199.854021][ T9276] netlink: 24 bytes leftover after parsing attributes in process `syz.1.878'. [ 200.059036][ T9284] netlink: 20 bytes leftover after parsing attributes in process `syz.0.880'. [ 200.227565][ T9284] netlink: 12 bytes leftover after parsing attributes in process `syz.0.880'. [ 200.372382][ T9304] netlink: 32 bytes leftover after parsing attributes in process `syz.3.883'. [ 200.415596][ T9304] netlink: 16 bytes leftover after parsing attributes in process `syz.3.883'. [ 200.559533][ T8834] udevd[8834]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 201.228623][ T9329] netlink: 14 bytes leftover after parsing attributes in process `syz.2.891'. [ 201.294013][ T9329] bond4: (slave dummy0): Releasing active interface [ 201.756259][ T9352] veth0_to_bridge: entered promiscuous mode [ 201.771138][ T9352] macvtap0: entered allmulticast mode [ 201.781992][ T9352] veth0_to_bridge: entered allmulticast mode [ 201.800025][ T9352] veth0_to_bridge: left allmulticast mode [ 201.816154][ T9352] veth0_to_bridge: left promiscuous mode [ 201.992962][ T9359] __nla_validate_parse: 2 callbacks suppressed [ 201.992981][ T9359] netlink: 48 bytes leftover after parsing attributes in process `syz.3.898'. [ 202.085938][ T9362] netlink: 48 bytes leftover after parsing attributes in process `syz.4.897'. [ 202.090607][ T9363] netlink: 48 bytes leftover after parsing attributes in process `syz.4.897'. [ 203.270610][ T9396] netlink: 'syz.3.903': attribute type 2 has an invalid length. [ 203.390433][ T9398] netlink: 8 bytes leftover after parsing attributes in process `syz.0.906'. [ 203.662560][ T9413] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 203.670063][ T9413] IPv6: NLM_F_CREATE should be set when creating new route [ 203.677346][ T9413] IPv6: NLM_F_CREATE should be set when creating new route [ 203.787398][ T9415] netlink: 20 bytes leftover after parsing attributes in process `syz.4.911'. [ 203.917615][ T9421] netlink: 8 bytes leftover after parsing attributes in process `syz.1.913'. [ 204.427859][ T9439] netlink: 'syz.1.920': attribute type 1 has an invalid length. [ 204.492695][ T9440] netlink: 20 bytes leftover after parsing attributes in process `syz.3.921'. [ 204.555528][ T9444] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 204.561947][ T9445] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 205.181273][ T9484] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 205.181608][ T9482] netlink: 12 bytes leftover after parsing attributes in process `syz.3.931'. [ 205.204225][ T9484] netlink: 24 bytes leftover after parsing attributes in process `syz.4.932'. [ 205.397046][ T9492] netlink: 'syz.3.934': attribute type 1 has an invalid length. [ 205.447938][ T9495] netlink: 'syz.2.936': attribute type 3 has an invalid length. [ 205.481559][ T9498] netlink: 12 bytes leftover after parsing attributes in process `syz.1.935'. [ 206.098811][ T9517] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 206.437948][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 206.474633][ T9527] openvswitch: netlink: IP tunnel dst address not specified [ 206.604442][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 206.605507][ T5643] Bluetooth: hci1: command 0x0406 tx timeout [ 206.610912][ T4944] Bluetooth: hci0: command 0x0406 tx timeout [ 206.616584][ T5651] Bluetooth: hci3: command 0x0406 tx timeout [ 207.594190][ T9562] __nla_validate_parse: 2 callbacks suppressed [ 207.594209][ T9562] netlink: 12 bytes leftover after parsing attributes in process `syz.3.955'. [ 207.710178][ T9562] 8021q: adding VLAN 0 to HW filter on device bond5 [ 207.834553][ T9571] bond5: (slave veth3): Enslaving as an active interface with an up link [ 207.845444][ T9574] tunl0: Caught tx_queue_len zero misconfig [ 207.851989][ T9574] netlink: 8 bytes leftover after parsing attributes in process `syz.0.957'. [ 207.893013][ T9571] netlink: 200 bytes leftover after parsing attributes in process `syz.3.955'. [ 207.959655][ T9571] netlink: 20 bytes leftover after parsing attributes in process `syz.3.955'. [ 207.977186][ T5633] IPVS: starting estimator thread 0... [ 208.031977][ T9571] bond5: (slave bridge5): Enslaving as an active interface with an up link [ 208.087816][ T9580] IPVS: using max 31 ests per chain, 74400 per kthread [ 208.240450][ T9584] netlink: 64 bytes leftover after parsing attributes in process `syz.3.959'. [ 208.310684][ T9584] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 208.312457][ T9588] netlink: 104 bytes leftover after parsing attributes in process `syz.0.961'. [ 208.425625][ T9584] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 208.479392][ T9584] 8021q: adding VLAN 0 to HW filter on device bond2 [ 208.502278][ T9584] 8021q: adding VLAN 0 to HW filter on device bond3 [ 208.516058][ T9584] 8021q: adding VLAN 0 to HW filter on device bond4 [ 208.669571][ T9608] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 208.679092][ T9608] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 208.754434][ T9584] netdevsim netdevsim3 eth0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 208.782637][ T9584] 8021q: adding VLAN 0 to HW filter on device eth0 [ 208.816849][ T9584] netdevsim netdevsim3 eth1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 208.856335][ T9584] 8021q: adding VLAN 0 to HW filter on device eth1 [ 208.864823][ T9584] netdevsim netdevsim3 eth2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 208.878513][ T9584] 8021q: adding VLAN 0 to HW filter on device eth2 [ 208.887580][ T9584] netdevsim netdevsim3 eth3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 208.898195][ T9584] 8021q: adding VLAN 0 to HW filter on device eth3 [ 208.970167][ T6603] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 209.173766][ T9629] netlink: 8 bytes leftover after parsing attributes in process `syz.2.972'. [ 209.290869][ T9635] netlink: 'syz.1.975': attribute type 10 has an invalid length. [ 209.298911][ T9635] netlink: 12 bytes leftover after parsing attributes in process `syz.1.975'. [ 209.316568][ T9626] bond5: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 209.341562][ T9626] bond5 (unregistering): Released all slaves [ 209.684066][ T9658] netlink: 4 bytes leftover after parsing attributes in process `syz.0.977'. [ 210.215072][ T9678] netlink: 8 bytes leftover after parsing attributes in process `syz.2.983'. [ 211.209866][ T9700] batman_adv: batadv0: Adding interface: vlan3 [ 211.229322][ T9700] batman_adv: batadv0: The MTU of interface vlan3 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 211.270370][ T9700] batman_adv: batadv0: Not using interface vlan3 (retrying later): interface not active [ 212.132946][ T9754] syzkaller0: entered promiscuous mode [ 212.153451][ T9754] syzkaller0: entered allmulticast mode [ 212.626100][ T9767] __nla_validate_parse: 10 callbacks suppressed [ 212.626115][ T9767] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1007'. [ 212.661052][ T9768] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1004'. [ 213.333795][ T9813] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1015'. [ 213.408047][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 214.322247][ T9827] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1021'. [ 214.590498][ T9841] syzkaller0: entered promiscuous mode [ 214.604204][ T9841] syzkaller0: entered allmulticast mode [ 215.105247][ T9856] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 215.172167][ T9856] bond1: (slave lo): Enslaving as an active interface with an up link [ 215.212317][ T9856] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 215.800286][ T9892] netlink: 'syz.1.1038': attribute type 41 has an invalid length. [ 215.876460][ T9894] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1038'. [ 215.888907][ T9894] netlink: 'syz.1.1038': attribute type 13 has an invalid length. [ 217.286764][ T9886] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1036'. [ 217.442545][ T9906] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1041'. [ 217.479776][ T9906] netlink: 'syz.0.1041': attribute type 1 has an invalid length. [ 217.522718][ T9906] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1041'. [ 217.800466][ T9913] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 217.840084][ T9913] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.900106][ T9913] 8021q: adding VLAN 0 to HW filter on device bond1 [ 217.907120][ T9928] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 218.184424][ T9938] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1050'. [ 218.248312][ T9941] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1052'. [ 218.273981][ T9941] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1052'. [ 218.531126][ T9954] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1057'. [ 218.675440][ T9963] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 218.863632][ T9972] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1061'. [ 218.880952][ T9970] xfrm1: entered allmulticast mode [ 219.027221][ T9981] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1064'. [ 219.345141][ T9988] tipc: Enabling of bearer rejected, failed to enable media [ 219.362286][ T9992] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1067'. [ 219.408083][ T9995] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1067'. [ 220.113299][T10025] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1073'. [ 220.138338][T10026] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1073'. [ 220.812172][T10052] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 220.838183][T10048] syzkaller0: entered promiscuous mode [ 220.854201][T10048] syzkaller0: entered allmulticast mode [ 220.899847][T10048] ipip0: entered promiscuous mode [ 221.253361][T10062] syzkaller0: entered promiscuous mode [ 221.264310][T10062] syzkaller0: entered allmulticast mode [ 221.812713][T10085] sctp: [Deprecated]: syz.3.1088 (pid 10085) Use of int in max_burst socket option. [ 221.812713][T10085] Use struct sctp_assoc_value instead [ 222.438118][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 223.160048][T10084] team_slave_1: Caught tx_queue_len zero misconfig [ 223.172087][T10092] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 223.312259][T10099] openvswitch: netlink: Flow actions attr not present in new flow. [ 223.423565][T10105] tipc: Invalid UDP bearer configuration [ 223.423654][T10105] tipc: Enabling of bearer rejected, failed to enable media [ 223.514872][T10107] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 223.555338][T10107] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 223.628671][T10115] __nla_validate_parse: 4 callbacks suppressed [ 223.628690][T10115] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.1096'. [ 223.700207][T10120] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 223.717982][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 223.744280][T10120] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 223.791332][T10121] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1096'. [ 223.850651][T10121] 0·: renamed from hsr0 [ 223.999574][T10133] netlink: 'syz.1.1099': attribute type 1 has an invalid length. [ 224.113355][T10121] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 224.133512][T10121] 0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 224.167437][T10121] 0·: entered allmulticast mode [ 224.182018][T10121] hsr_slave_0: entered allmulticast mode [ 224.209172][T10121] hsr_slave_1: entered allmulticast mode [ 224.229494][T10121] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 224.267970][T10129] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1098'. [ 224.292954][T10131] ip6erspan0: entered allmulticast mode [ 224.529181][T10145] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 224.595642][T10144] raw_sendmsg: syz.1.1103 forgot to set AF_INET. Fix it! [ 224.778000][T10150] ip6gretap0: entered promiscuous mode [ 225.494043][T10183] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1114'. [ 225.585827][T10178] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1114'. [ 225.619924][T10188] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1117'. [ 226.119660][T10208] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1122'. [ 226.240988][T10214] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1122'. [ 226.365313][T10223] ieee802154 phy0 wpan0: encryption failed: -22 [ 226.832443][T10236] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1127'. [ 226.926707][T10236] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1127'. [ 227.058297][T10247] ieee802154 phy0 wpan0: encryption failed: -22 [ 227.263365][T10252] ip6gretap1: entered promiscuous mode [ 227.285661][T10256] ip6tnl0: Caught tx_queue_len zero misconfig [ 227.429766][T10262] netlink: 'syz.4.1135': attribute type 2 has an invalid length. [ 227.515016][T10266] veth1_to_team: Caught tx_queue_len zero misconfig [ 227.973760][T10258] veth0_vlan: left promiscuous mode [ 228.017574][T10287] netlink: 'syz.1.1140': attribute type 6 has an invalid length. [ 228.019178][T10258] veth0_vlan: entered promiscuous mode [ 228.046875][T10289] netlink: 'syz.2.1144': attribute type 5 has an invalid length. [ 228.063401][T10287] ieee802154 phy0 wpan0: encryption failed: -22 [ 228.084115][T10258] team0: Device veth0_vlan failed to register rx_handler [ 228.146589][T10293] veth0_macvtap: Caught tx_queue_len zero misconfig [ 228.467079][T10301] pim6reg1: entered promiscuous mode [ 228.482797][T10301] pim6reg1: entered allmulticast mode [ 229.165272][T10331] __nla_validate_parse: 1 callbacks suppressed [ 229.165926][T10331] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1155'. [ 229.243998][T10335] --map-set only usable from mangle table [ 229.498051][T10341] netlink: 'syz.2.1157': attribute type 1 has an invalid length. [ 229.542406][T10343] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1158'. [ 229.560374][T10343] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1158'. [ 229.583019][T10341] bond6: (slave vxcan1): The slave device specified does not support setting the MAC address [ 229.594450][T10341] bond6: (slave vxcan1): Error -95 calling set_mac_address [ 229.604650][T10345] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1157'. [ 229.663395][T10345] bond6: (slave bridge4): Enslaving as an active interface with a down link [ 229.694840][T10341] macvlan2: entered promiscuous mode [ 229.709601][T10341] macvlan2: entered allmulticast mode [ 229.733023][T10341] bond6: entered promiscuous mode [ 229.750523][T10341] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 229.780915][T10341] bond6: left promiscuous mode [ 239.718281][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 243.060645][T10351] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 243.067959][T10351] IPv6: NLM_F_CREATE should be set when creating new route [ 243.075277][T10351] IPv6: NLM_F_CREATE should be set when creating new route [ 243.133633][T10352] bond2: (slave bond_slave_1): Device is not bonding slave [ 243.175546][T10352] bond2: option active_slave: invalid value (bond_slave_1) [ 243.241270][T10352] bond2 (unregistering): Released all slaves [ 243.602304][T10389] netlink: 'syz.2.1166': attribute type 16 has an invalid length. [ 243.623847][T10389] netlink: 'syz.2.1166': attribute type 3 has an invalid length. [ 243.646285][T10389] netlink: 64066 bytes leftover after parsing attributes in process `syz.2.1166'. [ 243.727958][ T5729] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 243.992910][T10397] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1168'. [ 244.071277][T10397] vlan3: entered promiscuous mode [ 244.087351][T10397] batadv0: entered promiscuous mode [ 244.119073][ T5729] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 244.322474][T10412] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1170'. [ 244.952241][T10440] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1176'. [ 244.982307][T10440] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1176'. [ 245.016828][T10440] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1176'. [ 245.044492][T10440] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1176'. [ 245.072666][T10440] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1176'. [ 245.096145][T10440] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1176'. [ 245.107264][T10444] netlink: 'syz.2.1182': attribute type 1 has an invalid length. [ 245.115634][T10446] netlink: 212344 bytes leftover after parsing attributes in process `syz.4.1181'. [ 245.281316][T10444] 8021q: adding VLAN 0 to HW filter on device bond7 [ 245.297160][T10449] 8021q: adding VLAN 0 to HW filter on device bond0 [ 245.315313][T10449] bond7: (slave bond0): Enslaving as a backup interface with an up link [ 245.415523][T10452] netlink: 'syz.2.1182': attribute type 10 has an invalid length. [ 246.653110][T10483] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 247.708948][T10424] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 247.983345][T10500] x_tables: duplicate underflow at hook 3 [ 248.823282][T10538] syzkaller0: entered promiscuous mode [ 248.829313][T10538] syzkaller0: entered allmulticast mode [ 248.901062][T10536] syzkaller0: entered promiscuous mode [ 248.906675][T10536] syzkaller0: entered allmulticast mode [ 249.325006][T10545] __nla_validate_parse: 76 callbacks suppressed [ 249.325046][T10545] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1208'. [ 250.452509][T10541] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 250.460094][T10541] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 250.468788][T10541] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 250.476298][T10541] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 250.490274][T10541] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 250.501098][T10541] batman_adv: batadv0: Removing interface: ipvlan2 [ 250.654427][T10556] xt_l2tp: missing protocol rule (udp|l2tpip) [ 250.797155][T10561] tunl0: Caught tx_queue_len zero misconfig [ 250.840563][T10559] netlink: 'syz.0.1214': attribute type 4 has an invalid length. [ 250.890856][T10563] netlink: 'syz.0.1214': attribute type 4 has an invalid length. [ 251.246798][T10587] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1219'. [ 252.097467][T10624] Cannot find del_set index 1 as target [ 252.099829][T10626] Cannot find del_set index 1 as target [ 252.168127][T10626] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1226'. [ 252.190600][T10626] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1226'. [ 252.951186][T10642] netlink: 'syz.2.1231': attribute type 1 has an invalid length. [ 253.035247][T10642] 8021q: adding VLAN 0 to HW filter on device bond8 [ 253.065772][T10645] bond8: (slave ip6erspan0): making interface the new active one [ 253.080198][T10645] bond8: (slave ip6erspan0): Enslaving as an active interface with an up link [ 253.381735][T10657] netlink: 748 bytes leftover after parsing attributes in process `syz.4.1235'. [ 253.506091][T10666] netlink: 'syz.3.1237': attribute type 8 has an invalid length. [ 253.644826][T10671] ip6tnl0: Caught tx_queue_len zero misconfig [ 253.691409][T10671] batadv_slave_0: entered promiscuous mode [ 253.703451][T10670] batadv_slave_0: left promiscuous mode [ 254.428910][T10712] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1250'. [ 254.515214][T10721] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1250'. [ 254.574697][T10727] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1251'. [ 255.141097][T10746] syzkaller1: entered promiscuous mode [ 255.146836][T10746] syzkaller1: entered allmulticast mode [ 255.475070][T10769] lo speed is unknown, defaulting to 1000 [ 255.484656][T10769] lo speed is unknown, defaulting to 1000 [ 255.509669][T10769] lo speed is unknown, defaulting to 1000 [ 255.533877][T10769] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 255.549699][T10769] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 255.580245][T10769] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 255.597081][T10769] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 255.628090][T10769] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 255.719407][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.756846][T10769] lo speed is unknown, defaulting to 1000 [ 255.768100][T10769] lo speed is unknown, defaulting to 1000 [ 255.774309][T10779] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1265'. [ 255.774427][T10779] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1265'. [ 255.819209][T10769] lo speed is unknown, defaulting to 1000 [ 255.832662][T10769] lo speed is unknown, defaulting to 1000 [ 255.840488][T10769] lo speed is unknown, defaulting to 1000 [ 256.319089][T10804] netlink: 'syz.4.1271': attribute type 29 has an invalid length. [ 256.394003][T10804] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1271'. [ 256.413883][T10804] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1271'. [ 256.751654][T10818] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1275'. [ 256.786957][T10818] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1275'. [ 257.133260][T10838] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1280'. [ 257.386821][T10844] geneve2: entered promiscuous mode [ 257.595550][T10855] netlink: 'syz.0.1284': attribute type 1 has an invalid length. [ 257.757618][T10855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.980580][T10875] tipc: Started in network mode [ 257.995487][T10875] tipc: Node identity fe800000000000000000000000000013, cluster identity 4711 [ 258.016932][T10875] tipc: Enabled bearer , priority 10 [ 258.024874][T10876] netlink: 'syz.3.1286': attribute type 49 has an invalid length. [ 258.212228][ T5288] veth1_macvtap: left promiscuous mode [ 258.383330][T10891] ip6erspan0: entered allmulticast mode [ 258.979403][T10918] tipc: Started in network mode [ 259.002807][T10918] tipc: Node identity 5, cluster identity 4711 [ 259.022879][T10918] tipc: Node number set to 5 [ 259.088381][T10918] tipc: Cannot configure node identity twice [ 259.165125][T10923] bond0: entered promiscuous mode [ 259.198123][T10923] bond_slave_0: entered promiscuous mode [ 259.219151][T10923] bond_slave_1: entered promiscuous mode [ 259.243941][T10923] bond0: left promiscuous mode [ 259.258768][T10923] bond_slave_0: left promiscuous mode [ 259.270513][T10923] bond_slave_1: left promiscuous mode [ 259.314942][ T2105] tipc: Node number set to 4269801491 [ 259.489981][T10934] __nla_validate_parse: 6 callbacks suppressed [ 259.490002][T10934] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1301'. [ 259.515309][T10934] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1301'. [ 259.558053][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 259.793590][T10949] bond6: option tlb_dynamic_lb: invalid value (5) [ 259.831282][T10949] bond6 (unregistering): Released all slaves [ 259.942121][T10962] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1305'. [ 260.323526][T10977] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1308'. [ 260.370973][T10976] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1309'. [ 260.385128][T10977] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1308'. [ 260.567506][T10988] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1313'. [ 260.588286][T10988] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1313'. [ 260.680279][T10990] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1314'. [ 260.970951][T11006] x_tables: duplicate underflow at hook 3 [ 261.119362][T11007] lo speed is unknown, defaulting to 1000 [ 261.311964][T11019] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1322'. [ 261.548992][T11031] xt_TPROXY: Can be used only with -p tcp or -p udp [ 261.965620][T11045] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 264.153959][T11106] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 265.302500][T11050] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 265.479183][T11121] __nla_validate_parse: 7 callbacks suppressed [ 265.479203][T11121] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1347'. [ 266.128334][T11154] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1355'. [ 266.153683][T11155] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1354'. [ 266.175410][T11155]  (unregistering): Released all slaves [ 267.062146][T11197] netlink: 'syz.1.1366': attribute type 3 has an invalid length. [ 267.127345][T11200] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1367'. [ 267.226779][T11203] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1368'. [ 267.261608][T11203] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1368'. [ 267.354388][T11204] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1367'. [ 267.580346][T11217] netlink: 'syz.4.1371': attribute type 1 has an invalid length. [ 267.807524][T11188] vlan2: left allmulticast mode [ 267.813749][T11188] bond0: left allmulticast mode [ 267.824201][T11188] bond_slave_0: left allmulticast mode [ 267.835832][T11188] bond_slave_1: left allmulticast mode [ 267.864745][T11188] ip6gretap1: left promiscuous mode [ 267.874855][T11188] 8021q: adding VLAN 0 to HW filter on device bond6 [ 268.091761][T11238] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1375'. [ 268.319468][T11245] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1375'. [ 269.619567][T11244] lo: Caught tx_queue_len zero misconfig [ 269.753947][T11237] netlink: 840 bytes leftover after parsing attributes in process `syz.4.1374'. [ 270.054422][T11263] syzkaller1: entered promiscuous mode [ 270.073928][T11263] syzkaller1: entered allmulticast mode [ 270.526251][T11297] tunl0: Caught tx_queue_len zero misconfig [ 270.663936][T11304] __nla_validate_parse: 2 callbacks suppressed [ 270.663955][T11304] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1390'. [ 270.750465][T11304] unsupported nlmsg_type 40 [ 271.565795][T11335] netlink: 'syz.3.1396': attribute type 13 has an invalid length. [ 271.628988][T11335] netlink: 'syz.3.1396': attribute type 17 has an invalid length. [ 271.814505][T11353] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1398'. [ 271.856973][T11354] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1396'. [ 272.085210][T11335] vlan2: left promiscuous mode [ 272.099929][T11335] bridge0: left promiscuous mode [ 272.115376][T11335] ip6tnl1: left promiscuous mode [ 272.128989][T11335] bond1: left promiscuous mode [ 272.286593][T11335] A link change request failed with some changes committed already. Interface pimreg may have been left with an inconsistent configuration, please check. [ 272.312098][ T809] lo speed is unknown, defaulting to 1000 [ 272.373545][T11367] FAULT_INJECTION: forcing a failure. [ 272.373545][T11367] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 272.391171][T11367] CPU: 1 UID: 0 PID: 11367 Comm: syz.2.1401 Not tainted syzkaller #0 PREEMPT(full) [ 272.391198][T11367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 272.391213][T11367] Call Trace: [ 272.391225][T11367] [ 272.391233][T11367] dump_stack_lvl+0xe8/0x150 [ 272.391262][T11367] should_fail_ex+0x412/0x560 [ 272.391293][T11367] _copy_from_user+0x2d/0xb0 [ 272.391323][T11367] core_sys_select+0x578/0xc30 [ 272.391365][T11367] ? __pfx_core_sys_select+0x10/0x10 [ 272.391413][T11367] ? __pfx_set_user_sigmask+0x10/0x10 [ 272.391446][T11367] __se_sys_pselect6+0x267/0x320 [ 272.391475][T11367] ? __pfx___se_sys_pselect6+0x10/0x10 [ 272.391497][T11367] ? __pfx_ksys_write+0x10/0x10 [ 272.391531][T11367] ? __x64_sys_pselect6+0x21/0xf0 [ 272.391552][T11367] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.391572][T11367] do_syscall_64+0x15f/0xf80 [ 272.391598][T11367] ? trace_irq_disable+0x3b/0x140 [ 272.391624][T11367] ? clear_bhb_loop+0x40/0x90 [ 272.391646][T11367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.391666][T11367] RIP: 0033:0x7f457d39ce59 [ 272.391683][T11367] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 272.391699][T11367] RSP: 002b:00007f457e183028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 272.391718][T11367] RAX: ffffffffffffffda RBX: 00007f457d615fa0 RCX: 00007f457d39ce59 [ 272.391732][T11367] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000040 [ 272.391742][T11367] RBP: 00007f457e183090 R08: 0000000000000000 R09: 0000000000000000 [ 272.391753][T11367] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 272.391764][T11367] R13: 00007f457d616038 R14: 00007f457d615fa0 R15: 00007ffe35f8e8a8 [ 272.391796][T11367] [ 272.585708][T11343] lo speed is unknown, defaulting to 1000 [ 273.512404][T11404] Cannot find set identified by id 65534 to match [ 273.569866][T11406] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1409'. [ 273.764370][T11412] FAULT_INJECTION: forcing a failure. [ 273.764370][T11412] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 273.778891][T11412] CPU: 0 UID: 0 PID: 11412 Comm: syz.2.1412 Not tainted syzkaller #0 PREEMPT(full) [ 273.778925][T11412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 273.778936][T11412] Call Trace: [ 273.778944][T11412] [ 273.778952][T11412] dump_stack_lvl+0xe8/0x150 [ 273.778980][T11412] should_fail_ex+0x412/0x560 [ 273.779010][T11412] _copy_from_user+0x2d/0xb0 [ 273.779038][T11412] core_sys_select+0x6fd/0xc30 [ 273.779077][T11412] ? __pfx_core_sys_select+0x10/0x10 [ 273.779121][T11412] ? __pfx_set_user_sigmask+0x10/0x10 [ 273.779154][T11412] __se_sys_pselect6+0x267/0x320 [ 273.779182][T11412] ? __pfx___se_sys_pselect6+0x10/0x10 [ 273.779202][T11412] ? __pfx_ksys_write+0x10/0x10 [ 273.779235][T11412] ? __x64_sys_pselect6+0x21/0xf0 [ 273.779256][T11412] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.779277][T11412] do_syscall_64+0x15f/0xf80 [ 273.779304][T11412] ? trace_irq_disable+0x3b/0x140 [ 273.779333][T11412] ? clear_bhb_loop+0x40/0x90 [ 273.779357][T11412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.779376][T11412] RIP: 0033:0x7f457d39ce59 [ 273.779393][T11412] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 273.779428][T11412] RSP: 002b:00007f457e183028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 273.779449][T11412] RAX: ffffffffffffffda RBX: 00007f457d615fa0 RCX: 00007f457d39ce59 [ 273.779464][T11412] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000040 [ 273.779476][T11412] RBP: 00007f457e183090 R08: 0000000000000000 R09: 0000000000000000 [ 273.779488][T11412] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 273.779500][T11412] R13: 00007f457d616038 R14: 00007f457d615fa0 R15: 00007ffe35f8e8a8 [ 273.779533][T11412] [ 274.015725][T11415] sctp: [Deprecated]: syz.3.1411 (pid 11415) Use of struct sctp_assoc_value in delayed_ack socket option. [ 274.015725][T11415] Use struct sctp_sack_info instead [ 274.373300][T11438] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1417'. [ 274.575396][T11452] netlink: 7 bytes leftover after parsing attributes in process `syz.4.1421'. [ 274.664735][T11461] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1423'. [ 274.832189][T11471] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1425'. [ 274.909620][T11479] FAULT_INJECTION: forcing a failure. [ 274.909620][T11479] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 274.959545][T11479] CPU: 1 UID: 0 PID: 11479 Comm: syz.4.1426 Not tainted syzkaller #0 PREEMPT(full) [ 274.959578][T11479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 274.959591][T11479] Call Trace: [ 274.959599][T11479] [ 274.959608][T11479] dump_stack_lvl+0xe8/0x150 [ 274.959638][T11479] should_fail_ex+0x412/0x560 [ 274.959671][T11479] prepare_alloc_pages+0x22a/0x650 [ 274.959710][T11479] __alloc_frozen_pages_noprof+0x12f/0x380 [ 274.959746][T11479] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 274.959783][T11479] ? __pfx_policy_nodemask+0x10/0x10 [ 274.959818][T11479] ? do_raw_spin_lock+0x12b/0x2f0 [ 274.959846][T11479] ? lock_acquire+0x106/0x350 [ 274.959872][T11479] alloc_pages_mpol+0x235/0x490 [ 274.959909][T11479] alloc_pages_noprof+0xac/0x2a0 [ 274.959931][T11479] get_free_pages_noprof+0xf/0x80 [ 274.959962][T11479] __pollwait+0x263/0x430 [ 274.959985][T11479] ? __pfx___pollwait+0x10/0x10 [ 274.960006][T11479] unix_poll+0x88/0x3f0 [ 274.960040][T11479] sock_poll+0x321/0x3e0 [ 274.960066][T11479] ? __pfx_sock_poll+0x10/0x10 [ 274.960100][T11479] do_select+0x1074/0x1800 [ 274.960130][T11479] ? do_select+0x891/0x1800 [ 274.960172][T11479] ? __pfx_do_select+0x10/0x10 [ 274.960192][T11479] ? unwind_next_frame+0xa6/0x2550 [ 274.960225][T11479] ? __pfx___pollwait+0x10/0x10 [ 274.960250][T11479] ? __pfx_pollwake+0x10/0x10 [ 274.960276][T11479] ? __pfx_pollwake+0x10/0x10 [ 274.960302][T11479] ? __pfx_pollwake+0x10/0x10 [ 274.960327][T11479] ? __pfx_pollwake+0x10/0x10 [ 274.960353][T11479] ? __pfx_pollwake+0x10/0x10 [ 274.960379][T11479] ? __pfx_pollwake+0x10/0x10 [ 274.960404][T11479] ? __pfx_pollwake+0x10/0x10 [ 274.960430][T11479] ? __pfx_pollwake+0x10/0x10 [ 274.960456][T11479] ? __pfx_pollwake+0x10/0x10 [ 274.960503][T11479] core_sys_select+0x896/0xc30 [ 274.960544][T11479] ? __pfx_core_sys_select+0x10/0x10 [ 274.960593][T11479] ? __pfx_set_user_sigmask+0x10/0x10 [ 274.960627][T11479] __se_sys_pselect6+0x267/0x320 [ 274.960656][T11479] ? __pfx___se_sys_pselect6+0x10/0x10 [ 274.960680][T11479] ? __pfx_ksys_write+0x10/0x10 [ 274.960715][T11479] ? __x64_sys_pselect6+0x21/0xf0 [ 274.960737][T11479] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.960760][T11479] do_syscall_64+0x15f/0xf80 [ 274.960790][T11479] ? trace_irq_disable+0x3b/0x140 [ 274.960821][T11479] ? clear_bhb_loop+0x40/0x90 [ 274.960846][T11479] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.960866][T11479] RIP: 0033:0x7f8c3099ce59 [ 274.960884][T11479] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 274.960901][T11479] RSP: 002b:00007f8c3192f028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 274.960923][T11479] RAX: ffffffffffffffda RBX: 00007f8c30c15fa0 RCX: 00007f8c3099ce59 [ 274.960938][T11479] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000040 [ 274.960951][T11479] RBP: 00007f8c3192f090 R08: 0000000000000000 R09: 0000000000000000 [ 274.960963][T11479] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 274.960975][T11479] R13: 00007f8c30c16038 R14: 00007f8c30c15fa0 R15: 00007ffe931e4458 [ 274.961010][T11479] [ 276.131453][T11504] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1437'. [ 276.220622][T11503] netlink: 'syz.3.1436': attribute type 1 has an invalid length. [ 276.242927][T11503] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1436'. [ 276.375042][T11510] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1439'. [ 276.636673][T11521] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1444'. [ 276.724928][T11524] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1445'. [ 276.880350][T11532] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1448'. [ 276.891401][T11532] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 277.208124][T11539] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1449'. [ 278.192678][T11563] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1454'. [ 278.414939][T11566] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1456'. [ 278.435648][T11570] netlink: 'syz.2.1458': attribute type 8 has an invalid length. [ 278.448149][T11566] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1456'. [ 278.465864][T11570] sch_fq: defrate 0 ignored. [ 278.832917][T11586] batman_adv: batadv0: Interface activated: vlan3 [ 278.974793][T11586] 8021q: adding VLAN 0 to HW filter on device bond0 [ 279.012416][T11586] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 279.024231][T11597] sctp: [Deprecated]: syz.1.1463 (pid 11597) Use of int in max_burst socket option. [ 279.024231][T11597] Use struct sctp_assoc_value instead [ 279.032789][ C0] vcan0: j1939_tp_rxtimer: 0xffff888055833c00: rx timeout, send abort [ 279.191227][T11586] 0·: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 279.373357][T11610] bond9: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 279.470751][T11610] bond9 (unregistering): Released all slaves [ 279.548273][ C0] vcan0: j1939_tp_rxtimer: 0xffff888055833c00: abort rx timeout. Force session deactivation [ 279.748616][T11627] ieee802154 phy0 wpan0: encryption failed: -22 [ 279.774744][T11627] 0ªX¹¦À: renamed from batadv0 (while UP) [ 279.785297][T11627] 0ªX¹¦À: entered allmulticast mode [ 279.793012][T11627] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 280.176235][T11651] block nbd3: Unsupported socket: should be TCP or UNIX. [ 280.209855][T11651] netlink: 'syz.3.1474': attribute type 3 has an invalid length. [ 280.244749][T11651] netlink: 'syz.3.1474': attribute type 3 has an invalid length. [ 281.002867][T11692] batman_adv: batadv0: Interface deactivated: vlan3 [ 281.195363][T11706] __nla_validate_parse: 21 callbacks suppressed [ 281.195381][T11706] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1490'. [ 281.268125][T11683] lo speed is unknown, defaulting to 1000 [ 281.303348][ T48] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.312871][ T48] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.414935][ T48] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.436904][ T48] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.499586][T11712] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1492'. [ 281.668350][T11715] tipc: Enabled bearer , priority 0 [ 281.704561][T11713] netlink: 'syz.3.1492': attribute type 10 has an invalid length. [ 281.726425][T11713] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1492'. [ 281.826239][T11714] tipc: Resetting bearer [ 281.874622][T11714] tipc: Disabling bearer [ 281.901732][T11713] dummy0: entered promiscuous mode [ 282.136437][T11728] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1495'. [ 282.738872][T11749] xt_hashlimit: size too large, truncated to 1048576 [ 282.993935][T11763] netlink: 'syz.4.1503': attribute type 1 has an invalid length. [ 283.058950][T11763] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1503'. [ 283.143274][T11765] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1506'. [ 283.570885][T11779] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1511'. [ 283.743140][T11785] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1513'. [ 283.771655][T11788] netlink: 'syz.3.1514': attribute type 8 has an invalid length. [ 283.788818][T11790] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1513'. [ 283.939508][T11792] xt_hashlimit: size too large, truncated to 1048576 [ 284.183698][T11803] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 285.321391][T11831] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1523'. [ 285.370860][T11832] netlink: 'syz.3.1524': attribute type 1 has an invalid length. [ 285.739994][T11832] 8021q: adding VLAN 0 to HW filter on device bond6 [ 285.763185][T11837] bond6: option tlb_dynamic_lb: unable to set because the bond device is up [ 285.772603][T11826] lo speed is unknown, defaulting to 1000 [ 285.822176][T11842] netlink: 'syz.0.1525': attribute type 10 has an invalid length. [ 286.112983][T11856] tap0: tun_chr_ioctl cmd 1074025677 [ 286.123363][T11856] tap0: linktype set to 773 [ 286.258537][T11849] syzkaller0: entered promiscuous mode [ 286.266186][T11849] syzkaller0: entered allmulticast mode [ 286.287486][T11864] __nla_validate_parse: 1 callbacks suppressed [ 286.287505][T11864] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1531'. [ 286.579820][T11866] erspan0: entered promiscuous mode [ 287.405073][T11890] netlink: 'syz.4.1539': attribute type 1 has an invalid length. [ 287.510279][T11892] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1539'. [ 288.524384][T11890] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 288.855261][T11903] bond7: (slave bond0): Removing an active aggregator [ 288.880354][T11906] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1545'. [ 288.893958][T11903] bond7: (slave bond0): Releasing backup interface [ 288.960784][T11903] bridge_slave_0: left allmulticast mode [ 288.974450][T11903] bridge_slave_0: left promiscuous mode [ 288.980944][T11903] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.006613][T11903] bridge_slave_1: left allmulticast mode [ 289.018351][T11903] bridge_slave_1: left promiscuous mode [ 289.027283][T11915] netlink: 'syz.4.1546': attribute type 1 has an invalid length. [ 289.037912][T11903] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.059708][T11903] bond0: (slave bond_slave_0): Releasing backup interface [ 289.070640][T11903] bond0: (slave bond_slave_1): Releasing backup interface [ 289.085054][T11903] team0: Port device team_slave_0 removed [ 289.096131][T11903] team0: Port device team_slave_1 removed [ 289.103572][T11903] batman_adv: 60ªX¹¦À: Interface deactivated: batadv_slave_0 [ 289.113138][T11903] batman_adv: 60ªX¹¦À: Removing interface: batadv_slave_0 [ 289.125945][T11903] batman_adv: 60ªX¹¦À: Interface deactivated: batadv_slave_1 [ 289.134951][T11903] batman_adv: 60ªX¹¦À: Removing interface: batadv_slave_1 [ 289.151226][T11903] bond1: (slave macvlan0): Releasing active interface [ 289.183302][T11903] bond2: (slave bond3): Releasing backup interface [ 289.206503][T11903] bond2: (slave bond3): the permanent HWaddr of slave - 5e:0d:44:8a:59:4a - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 289.232385][T11903] bond2: (slave gretap1): making interface the new active one [ 289.253516][T11903] bond2: (slave gretap1): Releasing backup interface [ 289.280541][T11903] bond5: (slave geneve2): Releasing backup interface [ 289.293729][T11903] bond6: (slave bridge4): Releasing active interface [ 289.310150][T11903] bond8: (slave ip6erspan0): Releasing active interface [ 289.332513][T11906] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1545'. [ 289.361546][T11915] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 289.645794][T11938] netlink: 'syz.4.1549': attribute type 1 has an invalid length. [ 289.707883][T11943] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1549'. [ 289.788955][T11943] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1549'. [ 289.803087][T11947] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1549'. [ 289.869983][T11947] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1549'. [ 289.887227][T11938] bond5: entered promiscuous mode [ 289.923351][T11938] 8021q: adding VLAN 0 to HW filter on device bond5 [ 290.219721][T11965] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 290.296105][T11961] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1555'. [ 291.243049][T12017] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1568'. [ 291.310960][T12011] netlink: 'syz.4.1568': attribute type 1 has an invalid length. [ 291.320999][ T6606] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 291.340818][ T6606] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 291.379631][ T6606] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 291.424710][ T6606] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 291.539152][T12027] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1570'. [ 291.560786][T12027] gretap0: entered promiscuous mode [ 291.578692][T12027] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1570'. [ 291.591392][T12027] 0ªî{X¹¦: renamed from gretap0 [ 291.599515][T12027] 0ªî{X¹¦: left promiscuous mode [ 291.619573][T12027] 0ªî{X¹¦: entered allmulticast mode [ 291.635017][T12029] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1570'. [ 291.679854][T12027] batman_adv: batadv0: Interface activated: vlan3 [ 291.732311][T12027] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 291.806681][T12038] netlink: 236 bytes leftover after parsing attributes in process `syz.2.1574'. [ 291.831636][T12038] netlink: 236 bytes leftover after parsing attributes in process `syz.2.1574'. [ 291.860115][T12029] 0ªî{X¹¦: entered promiscuous mode [ 291.870226][T12029] 0ªî{X¹¦: left allmulticast mode [ 291.889532][T12029] batman_adv: batadv0: Interface deactivated: vlan3 [ 291.915320][T12015] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1566'. [ 292.058625][T12046] netlink: 'syz.1.1577': attribute type 1 has an invalid length. [ 292.081531][T12046] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1577'. [ 292.091314][T12049] x_tables: duplicate underflow at hook 2 [ 292.101438][T12046] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1577'. [ 292.147266][T12003] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 292.305011][T12056] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1580'. [ 292.444604][T12062] netlink: 6024 bytes leftover after parsing attributes in process `syz.1.1583'. [ 292.749939][T12076] netlink: 'syz.0.1588': attribute type 3 has an invalid length. [ 292.770442][T12076] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 292.936202][T12078] netlink: 'syz.1.1589': attribute type 1 has an invalid length. [ 293.079108][ T5640] Bluetooth: hci2: command 0x0406 tx timeout [ 293.161293][ T29] audit: type=1804 audit(1779254591.810:3): pid=12087 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1591" name="/newroot/331/cgroup.controllers" dev="tmpfs" ino=1707 res=1 errno=0 [ 293.208217][T12086] bond9: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 293.243620][ T29] audit: type=1800 audit(1779254591.850:4): pid=12087 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1591" name="cgroup.controllers" dev="tmpfs" ino=1707 res=0 errno=0 [ 293.283182][T12086] bond9: (slave lo): Enslaving as an active interface with an up link [ 293.411105][T12086] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 293.476808][T12090] lo speed is unknown, defaulting to 1000 [ 293.687057][T12107] syzkaller0: entered promiscuous mode [ 293.699820][T12107] syzkaller0: entered allmulticast mode [ 293.778712][T12104] bridge0: port 1(wlan0) entered blocking state [ 293.795340][T12104] bridge0: port 1(wlan0) entered disabled state [ 293.818759][T12104] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 293.839047][T12104] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 294.438105][ T5640] Bluetooth: hci4: command 0x0405 tx timeout [ 294.669105][T12142] ipip0: entered promiscuous mode [ 294.700986][T12142] 8021q: VLANs not supported on ip6gre0 [ 294.815845][T12152] netlink: 'syz.0.1612': attribute type 11 has an invalid length. [ 294.912063][T12157] bond6: entered allmulticast mode [ 294.939576][T12163] netlink: 'syz.1.1615': attribute type 1 has an invalid length. [ 294.958244][T12159] macvlan0: entered promiscuous mode [ 294.963574][T12159] macvlan0: entered allmulticast mode [ 294.971512][T12159] bond6: (slave macvlan0): Opening slave failed [ 294.989535][T12161] netlink: 'syz.0.1614': attribute type 4 has an invalid length. [ 295.045348][T12167] netlink: 'syz.0.1614': attribute type 4 has an invalid length. [ 295.063018][T12164] bond2: (slave bridge4): making interface the new active one [ 295.074681][T12164] bond2: (slave bridge4): Enslaving as an active interface with an up link [ 295.141736][T12163] macvlan0: entered promiscuous mode [ 295.160371][T12163] macvlan0: entered allmulticast mode [ 295.179496][T12163] bond2: entered promiscuous mode [ 295.193981][T12163] bridge4: entered promiscuous mode [ 295.211565][T12163] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 295.268875][T12163] bond2: (slave macvlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 295.316666][T12163] bond2: left promiscuous mode [ 295.335244][T12163] bridge4: left promiscuous mode [ 295.624986][T12196] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 295.648427][T12189] lo speed is unknown, defaulting to 1000 [ 295.662078][T12198] 8021q: VLANs not supported on vcan0 [ 295.716280][T12198] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 295.749195][T12198] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 295.758825][T12198] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 296.378140][T12217] RDS: rds_bind could not find a transport for 2001::2, load rds_tcp or rds_rdma? [ 296.396083][T12213] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 296.526636][T12212] lo speed is unknown, defaulting to 1000 [ 296.590356][T12224] netlink: 'syz.0.1628': attribute type 1 has an invalid length. [ 296.676572][T12213] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 296.930949][T12237] syzkaller0: entered promiscuous mode [ 296.936562][T12237] syzkaller0: entered allmulticast mode [ 296.975521][T12213] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 297.191958][T12213] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 297.219189][T12257] __nla_validate_parse: 13 callbacks suppressed [ 297.219202][T12257] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1638'. [ 299.249434][T12295] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1646'. [ 299.314751][T12299] tunl0: entered allmulticast mode [ 299.339615][T12299] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 299.464608][T12300] IPVS: Scheduler module ip_vs_sip not found [ 299.473245][T12311] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1647'. [ 300.192648][T12334] netlink: 'syz.2.1656': attribute type 1 has an invalid length. [ 300.405445][T12341] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1658'. [ 300.622594][T12362] xt_l2tp: invalid flags combination: 8 [ 300.957536][T12374] lo speed is unknown, defaulting to 1000 [ 301.275924][T12386] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1665'. [ 301.432242][T12397] bond10: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 301.458273][T12397] bond10 (unregistering): Released all slaves [ 301.650996][T12406] netlink: 'syz.3.1669': attribute type 1 has an invalid length. [ 301.659079][T12406] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 301.842663][T12415] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1671'. [ 301.874930][T12414] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1672'. [ 301.893639][T12415] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1671'. [ 301.910180][T12417] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 301.919733][T12415] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1671'. [ 302.033136][T12426] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1674'. [ 302.376183][T12435] __nla_validate_parse: 1 callbacks suppressed [ 302.376203][T12435] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1678'. [ 302.492069][T12439] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1680'. [ 302.696906][T12449] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1682'. [ 302.754690][T12447] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1681'. [ 302.771913][T12455] netlink: 'syz.4.1684': attribute type 4 has an invalid length. [ 302.932533][T12457] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.941112][T12457] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.233453][T12477] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1693'. [ 303.442464][T12485] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1696'. [ 303.677546][T12493] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1700'. [ 303.736325][T12497] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1701'. [ 303.766022][T12497] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1701'. [ 304.058393][T12479] Unknown options in mask 6 [ 304.490896][T12528] bond10: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3) [ 304.511611][T12528] bond10 (unregistering): Released all slaves [ 304.621562][T12535] lo speed is unknown, defaulting to 1000 [ 304.699547][T12546] netlink: 'syz.0.1714': attribute type 1 has an invalid length. [ 304.711231][T12546] netlink: 'syz.0.1714': attribute type 2 has an invalid length. [ 304.720449][T12546] netlink: 'syz.0.1714': attribute type 1 has an invalid length. [ 304.745806][T12545] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1716'. [ 305.038995][T12553] lo: Caught tx_queue_len zero misconfig [ 307.285451][T12599] netlink: 'syz.2.1732': attribute type 4 has an invalid length. [ 307.307466][T12594] netlink: 'syz.0.1727': attribute type 1 has an invalid length. [ 307.341132][T12599] netlink: 'syz.2.1732': attribute type 4 has an invalid length. [ 307.463362][T12594] veth5: entered allmulticast mode [ 307.644663][T12612] macsec3: entered promiscuous mode [ 307.675726][T12617] __nla_validate_parse: 5 callbacks suppressed [ 307.675740][T12617] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1736'. [ 310.123101][T12584] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 310.335046][T12637] netlink: 'syz.4.1741': attribute type 1 has an invalid length. [ 310.466176][T12647] netlink: 'syz.2.1742': attribute type 10 has an invalid length. [ 310.491802][T12647] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.1742'. [ 310.618158][T12644] 8021q: adding VLAN 0 to HW filter on device bond8 [ 310.691400][T12657] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1746'. [ 310.708095][T12644] bond7: (slave bond8): making interface the new active one [ 310.739055][T12644] bond7: (slave bond8): Enslaving as an active interface with an up link [ 310.794083][T12648] bond7: (slave gretap0): Enslaving as a backup interface with an up link [ 310.806574][T12637] 8021q: adding VLAN 0 to HW filter on device bond7 [ 311.022960][T12657] 8021q: adding VLAN 0 to HW filter on device bond3 [ 311.071481][T12657] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1746'. [ 311.084934][T12668] netlink: get zone limit has 4 unknown bytes [ 311.095029][T12657] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1746'. [ 311.120232][T12657] netlink: 'syz.1.1746': attribute type 12 has an invalid length. [ 311.137801][T12657] netlink: 'syz.1.1746': attribute type 11 has an invalid length. [ 311.203302][T12660] macvlan0: entered promiscuous mode [ 311.221403][T12660] bond3: entered promiscuous mode [ 311.234435][T12660] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 311.247344][T12660] team0: Port device macvlan0 added [ 311.282925][T12670] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1752'. [ 311.308844][T12670] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 311.316161][T12670] IPv6: NLM_F_CREATE should be set when creating new route [ 311.326785][T12670] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1752'. [ 311.680813][T12684] netlink: 'syz.2.1757': attribute type 1 has an invalid length. [ 311.842587][T12688] bond10: entered promiscuous mode [ 311.849958][T12688] bond10: entered allmulticast mode [ 311.855677][T12688] 8021q: adding VLAN 0 to HW filter on device bond10 [ 311.903897][T12690] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 311.938253][T12684] bridge5: entered promiscuous mode [ 311.943702][T12684] bridge5: entered allmulticast mode [ 311.949837][T12684] bond10: (slave bridge5): Enslaving as a backup interface with an up link [ 311.974348][ T48] bond10: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 312.048932][T12688] bridge6: entered promiscuous mode [ 312.055670][T12688] bridge6: entered allmulticast mode [ 312.072639][T12688] bond10: (slave bridge6): Enslaving as a backup interface with a down link [ 312.098689][ T48] bond10: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 312.119838][T12698] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1759'. [ 312.271852][T12705] 8021q: VLANs not supported on sit0 [ 312.762149][T12731] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1768'. [ 312.806212][T12730] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1769'. [ 312.849680][T12730] netlink: 176 bytes leftover after parsing attributes in process `syz.3.1769'. [ 312.982973][T12742] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1769'. [ 313.022490][T12730] netlink: 'syz.3.1769': attribute type 4 has an invalid length. [ 313.211894][T12753] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1775'. [ 313.223967][T12751] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1774'. [ 313.286729][T12756] netlink: 'syz.0.1774': attribute type 11 has an invalid length. [ 313.348649][T12756] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1774'. [ 313.378903][T12760] netlink: 516 bytes leftover after parsing attributes in process `syz.4.1776'. [ 313.419352][T12760] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1776'. [ 313.436422][T12759] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1777'. [ 314.610360][T12817] syzkaller1: entered promiscuous mode [ 314.630387][T12817] syzkaller1: entered allmulticast mode [ 314.685055][T12819] netlink: 'syz.4.1794': attribute type 4 has an invalid length. [ 314.716270][T12819] netlink: 'syz.4.1794': attribute type 4 has an invalid length. [ 314.733998][T12819] netlink: 'syz.4.1794': attribute type 4 has an invalid length. [ 315.138633][T12843] sctp: [Deprecated]: syz.2.1799 (pid 12843) Use of int in maxseg socket option. [ 315.138633][T12843] Use struct sctp_assoc_value instead [ 315.188209][T12843] netdevsim netdevsim2: Firmware load for './file0/../file0' refused, path contains '..' component [ 315.259467][T12843] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 315.344644][T12850] openvswitch: netlink: IPv4 frag type 127 is out of range max 2 [ 315.555263][T12854] xt_hashlimit: size too large, truncated to 1048576 [ 315.841883][T12867] netlink: 'syz.1.1808': attribute type 14 has an invalid length. [ 315.861503][T12867] netlink: 'syz.1.1808': attribute type 12 has an invalid length. [ 316.174756][T12880] netlink: 'syz.2.1811': attribute type 4 has an invalid length. [ 316.377328][T12886] sctp: [Deprecated]: syz.0.1812 (pid 12886) Use of struct sctp_assoc_value in delayed_ack socket option. [ 316.377328][T12886] Use struct sctp_sack_info instead [ 316.428382][T12886] sctp: [Deprecated]: syz.0.1812 (pid 12886) Use of struct sctp_assoc_value in delayed_ack socket option. [ 316.428382][T12886] Use struct sctp_sack_info instead [ 316.505944][T12886] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 316.559169][T12895] xt_hashlimit: size too large, truncated to 1048576 [ 316.987372][T12912] netlink: 'syz.2.1818': attribute type 1 has an invalid length. [ 317.139130][T12912] 8021q: adding VLAN 0 to HW filter on device bond11 [ 317.160325][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.258544][T12915] bond11: (slave gretap2): making interface the new active one [ 317.300080][T12915] bond11: (slave gretap2): Enslaving as an active interface with an up link [ 317.658260][T12945] --map-set only usable from mangle table [ 317.903478][T12954] syzkaller0: entered promiscuous mode [ 317.941454][T12954] syzkaller0: entered allmulticast mode [ 317.984671][T12963] __nla_validate_parse: 12 callbacks suppressed [ 317.984692][T12963] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1832'. [ 318.023040][T12966] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1832'. [ 318.109704][T12968] IPv6: sit1: Disabled Multicast RS [ 318.186664][T12979] netlink: 'syz.4.1836': attribute type 1 has an invalid length. [ 318.252422][T12982] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1836'. [ 318.403604][T12979] bond9: entered promiscuous mode [ 318.414895][T12979] 8021q: adding VLAN 0 to HW filter on device bond9 [ 318.644532][T13007] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1842'. [ 318.674786][T13007] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1842'. [ 318.726050][T13011] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1843'. [ 318.743685][T13008] ip6tnl5: entered allmulticast mode [ 319.083587][T13026] workqueue: name exceeds WQ_NAME_LEN. Truncating to: çþÏ€Ôxµ…üô–)%ë ]ÓÙ.˜>„n÷6‡# [ 319.198539][T13032] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1848'. [ 319.632338][T13050] IPVS: set_ctl: invalid protocol: 0 100.1.1.2:20003 [ 319.719623][ T2105] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 319.927655][T13060] bond0: Caught tx_queue_len zero misconfig [ 319.986568][T13067] netlink: 'syz.1.1854': attribute type 1 has an invalid length. [ 319.994886][T13067] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1854'. [ 320.014581][T13068] netlink: 124 bytes leftover after parsing attributes in process `syz.3.1856'. [ 320.223620][T13072] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 320.369974][T13078] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1857'. [ 320.767599][T13102] IPv6: sit1: Disabled Multicast RS [ 321.140073][T13115] veth0: entered promiscuous mode [ 321.185630][T13115] veth0: left promiscuous mode [ 322.451084][T13168] veth1: entered promiscuous mode [ 322.456211][T13168] veth1: entered allmulticast mode [ 323.080120][ C0] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 323.402458][T13185] netlink: 'syz.3.1881': attribute type 1 has an invalid length. [ 323.427019][T13185] 8021q: adding VLAN 0 to HW filter on device bond7 [ 323.503788][T13187] bond7: (slave gretap3): making interface the new active one [ 323.512388][T13187] bond7: (slave gretap3): Enslaving as an active interface with an up link [ 324.489062][T13145] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 324.804339][T13200] __nla_validate_parse: 7 callbacks suppressed [ 324.804359][T13200] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1887'. [ 324.831621][T13195] Unknown metaid 0 dlen 28 [ 325.034495][T13207] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 325.316206][T13222] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1891'. [ 325.454599][T13222] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1891'. [ 325.651713][T13232] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1894'. [ 325.678170][T13232] openvswitch: netlink: Flow actions attr not present in new flow. [ 325.862194][T13236] netlink: 'syz.3.1896': attribute type 10 has an invalid length. [ 326.058836][T13243] syzkaller0: entered promiscuous mode [ 326.072454][T13243] syzkaller0: entered allmulticast mode [ 326.209899][T13257] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1902'. [ 326.481208][T13266] lo: Caught tx_queue_len zero misconfig [ 326.608786][T13269] veth0: entered promiscuous mode [ 326.631479][T13276] netlink: 332 bytes leftover after parsing attributes in process `syz.2.1906'. [ 326.686694][T13266] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 326.711439][T13266] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.729354][T13266] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 326.797301][T13283] bond8: Removing last ns target with arp_interval on [ 326.904168][T13283] netlink: 'syz.3.1908': attribute type 15 has an invalid length. [ 326.994077][T13296] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1910'. [ 327.026147][T13266] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 327.079428][T13266] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.124719][T13266] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 327.215098][T13304] netlink: 'syz.1.1915': attribute type 32 has an invalid length. [ 327.257167][T13266] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 327.269410][T13266] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.282675][T13266] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 327.303668][T13305] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 327.328030][T13265] veth0: left promiscuous mode [ 327.335817][T13308] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1914'. [ 327.361377][T13308] tipc: Invalid UDP bearer configuration [ 327.361434][T13308] tipc: Enabling of bearer rejected, failed to enable media [ 327.407496][T13266] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 327.429884][T13266] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.454152][T13266] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 327.529475][T13314] syzkaller0: entered promiscuous mode [ 327.539836][T13314] syzkaller0: entered allmulticast mode [ 327.674689][ T6599] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 327.697171][ T6599] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 327.724971][ T6599] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 327.742731][T13321] netlink: 'syz.2.1920': attribute type 21 has an invalid length. [ 327.763408][T13321] IPv6: NLM_F_CREATE should be specified when creating new route [ 327.791984][T13321] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 327.793448][T13323] netlink: 'syz.2.1920': attribute type 21 has an invalid length. [ 327.800797][T13321] IPv6: NLM_F_CREATE should be set when creating new route [ 327.814638][T13321] IPv6: NLM_F_CREATE should be set when creating new route [ 327.821911][T13321] IPv6: NLM_F_CREATE should be set when creating new route [ 327.836524][ T6613] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 327.845439][ T6613] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 327.854316][ T6613] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 327.884767][T13323] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 327.895183][ T32] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 327.903764][ T32] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 327.912372][ T32] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 327.917478][T13327] netlink: 'syz.1.1921': attribute type 178 has an invalid length. [ 327.929921][T13328] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1921'. [ 328.004383][T13328] ip6gre2: entered promiscuous mode [ 328.018224][T13328] ip6gre2: entered allmulticast mode [ 328.032382][ T32] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 328.052346][ T32] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 328.085665][ T32] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 328.094611][T13332] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1923'. [ 328.175273][T13335] netlink: 'syz.0.1924': attribute type 8 has an invalid length. [ 328.227441][T13339] netlink: 'syz.4.1927': attribute type 12 has an invalid length. [ 328.236379][T13339] netlink: 'syz.4.1927': attribute type 12 has an invalid length. [ 328.553160][T13355] syzkaller1: entered promiscuous mode [ 328.564351][T13355] syzkaller1: entered allmulticast mode [ 328.598092][T13355] 0ªî{X¹¦: left promiscuous mode [ 328.623614][T13355] 0·: left allmulticast mode [ 328.628553][T13355] hsr_slave_0: left allmulticast mode [ 328.634577][T13355] hsr_slave_1: left allmulticast mode [ 328.643920][T13355] vlan2: left promiscuous mode [ 328.649467][T13355] bond_slave_1: left promiscuous mode [ 328.656111][T13355] bond3: left promiscuous mode [ 328.661438][T13355] bridge2: left promiscuous mode [ 328.668372][T13355] veth3: left allmulticast mode [ 328.680732][T13355] bond5: left promiscuous mode [ 328.734615][T13355] bond6: left allmulticast mode [ 328.839436][T13355] bond9: left promiscuous mode [ 328.877143][T13355] ip6tnl5: left allmulticast mode [ 328.914998][T13355] syzkaller1: left promiscuous mode [ 328.928102][T13355] syzkaller1: left allmulticast mode [ 328.956973][T13360] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1280) ! [ 329.384108][T13398] 8021q: adding VLAN 0 to HW filter on device bond0 [ 329.606636][T13405] Unknown metaid 0 dlen 28 [ 329.971041][T13423] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 330.063975][T13429] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 330.150463][T13435] __nla_validate_parse: 4 callbacks suppressed [ 330.150479][T13435] netlink: 16170 bytes leftover after parsing attributes in process `syz.2.1952'. [ 330.185406][T13433] syzkaller1: entered promiscuous mode [ 330.193231][T13433] syzkaller1: entered allmulticast mode [ 330.210648][T13429] syzkaller1: entered promiscuous mode [ 330.221942][T13429] syzkaller1: entered allmulticast mode [ 330.552261][T13443] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 330.581146][T13443] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode [ 330.598893][T13443] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 330.901330][T13455] bond9: option all_slaves_active: invalid value (6) [ 330.913531][T13455] bond9 (unregistering): Released all slaves [ 331.030025][T13456] team_slave_1: Caught tx_queue_len zero misconfig [ 331.429122][T13464] syzkaller0: entered promiscuous mode [ 331.434798][T13464] syzkaller0: entered allmulticast mode [ 331.490870][ T3341] bond10: (slave bridge5): link status up again after 0 ms [ 331.506598][T13482] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.537915][ T3341] bond10: (slave bridge5): link status up again after 0 ms [ 331.568941][ T3341] bond10: (slave bridge5): link status up again after 0 ms [ 331.607985][ T6613] bond10: (slave bridge5): link status up again after 0 ms [ 331.627831][ T6596] bond10: (slave bridge5): link status up again after 0 ms [ 331.679970][ T6596] bond10: (slave bridge5): link status up again after 0 ms [ 331.694936][ T6596] bond10: (slave bridge5): failed to get link speed/duplex [ 331.828039][T13482] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.876357][T13491] openvswitch: netlink: VXLAN extension 1 has unexpected len 8 expected 4 [ 331.998104][T13482] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.087896][ T6612] bond10: (slave bridge5): failed to get link speed/duplex [ 332.142699][T13482] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.207803][ T6596] bond10: (slave bridge5): failed to get link speed/duplex [ 332.391557][ T6596] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.472886][ T6596] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.518045][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 332.536446][ T6612] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.625913][ T6599] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.717993][T13519] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1969'. [ 332.817427][T13523] netlink: 172 bytes leftover after parsing attributes in process `syz.2.1969'. [ 332.914091][T13525] xt_hashlimit: size too large, truncated to 1048576 [ 333.779992][T13548] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1976'. [ 333.804964][T13548] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1976'. [ 333.815450][T13548] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1976'. [ 333.825150][T13549] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1977'. [ 334.099207][T13563] netlink: 'syz.1.1980': attribute type 1 has an invalid length. [ 334.117609][T13563] netlink: 'syz.1.1980': attribute type 4 has an invalid length. [ 334.134285][T13563] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.1980'. [ 334.162323][T13560] netlink: 'syz.1.1980': attribute type 1 has an invalid length. [ 334.179972][T13560] netlink: 'syz.1.1980': attribute type 4 has an invalid length. [ 334.200267][T13560] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.1980'. [ 334.349482][T13570] netlink: 332 bytes leftover after parsing attributes in process `syz.0.1982'. [ 334.375153][T13570] netlink: 'syz.0.1982': attribute type 9 has an invalid length. [ 334.829658][T13582] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 334.876318][T13583] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 334.894627][ T24] team_slave_1: entered promiscuous mode [ 335.393383][T13600] __nla_validate_parse: 3 callbacks suppressed [ 335.393402][T13600] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1992'. [ 336.518713][ T6613] net_ratelimit: 34 callbacks suppressed [ 336.518731][ T6613] bond10: (slave bridge5): failed to get link speed/duplex [ 336.543432][T13625] netlink: 'syz.1.1997': attribute type 1 has an invalid length. [ 336.677908][ T6613] bond10: (slave bridge5): failed to get link speed/duplex [ 336.741294][T13639] pim6reg1: entered promiscuous mode [ 336.753905][T13639] pim6reg1: entered allmulticast mode [ 336.848814][ T6612] bond10: (slave bridge5): failed to get link speed/duplex [ 336.968262][ T3341] bond10: (slave bridge5): failed to get link speed/duplex [ 337.042161][T13642] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2000'. [ 337.068563][T13642] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2000'. [ 337.087769][ T3341] bond10: (slave bridge5): failed to get link speed/duplex [ 337.208111][ T3341] bond10: (slave bridge5): failed to get link speed/duplex [ 337.347804][ T6612] bond10: (slave bridge5): failed to get link speed/duplex [ 337.478184][ T3341] bond10: (slave bridge5): failed to get link speed/duplex [ 337.598642][ T6612] bond10: (slave bridge5): failed to get link speed/duplex [ 337.718091][ T3341] bond10: (slave bridge5): failed to get link speed/duplex [ 337.746532][T13657] syzkaller0: entered promiscuous mode [ 337.761471][T13657] syzkaller0: entered allmulticast mode [ 337.814127][T13657] syzkaller0: refused to change device tx_queue_len [ 338.153879][T13667] netlink: 200 bytes leftover after parsing attributes in process `syz.3.2007'. [ 338.416657][T13673] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2008'. [ 338.449380][T13673] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2008'. [ 338.511985][T13679] netlink: 'syz.3.2009': attribute type 1 has an invalid length. [ 338.711036][T13679] bond9: entered promiscuous mode [ 338.728308][T13679] 8021q: adding VLAN 0 to HW filter on device bond9 [ 338.829810][T13674] bond9: (slave bridge11): making interface the new active one [ 338.837421][T13674] bridge11: entered promiscuous mode [ 338.875606][T13674] bridge11: left promiscuous mode [ 339.128616][T13691] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2012'. [ 339.148115][T13693] 8021q: adding VLAN 0 to HW filter on device bond5 [ 339.172309][T13693] bond4: (slave bond5): Enslaving as an active interface with an up link [ 339.219328][T13694] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 339.245168][T13691] 8021q: adding VLAN 0 to HW filter on device bond4 [ 339.254050][T13701] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 339.263818][T13701] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 339.273530][T13701] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 339.472878][T13714] sctp: [Deprecated]: syz.0.2015 (pid 13714) Use of int in maxseg socket option. [ 339.472878][T13714] Use struct sctp_assoc_value instead [ 339.630680][T13718] bond10 (unregistering): Released all slaves [ 339.826100][T13726] tap0: tun_chr_ioctl cmd 2148553947 [ 339.865786][ T2105] bridge0: entered promiscuous mode [ 340.000024][T13734] netlink: 212328 bytes leftover after parsing attributes in process `syz.4.2023'. [ 340.386455][T13749] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2027'. [ 340.915565][T13774] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2036'. [ 341.070540][T13783] netlink: 'syz.4.2033': attribute type 3 has an invalid length. [ 341.276686][T13796] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2040'. [ 341.391984][T13801] netlink: 'syz.0.2040': attribute type 1 has an invalid length. [ 341.574399][T13801] bond1 (unregistering): Released all slaves [ 341.798088][ T6596] net_ratelimit: 25 callbacks suppressed [ 341.798107][ T6596] bond10: (slave bridge5): failed to get link speed/duplex [ 341.835454][T13791] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 341.959162][ T6612] bond10: (slave bridge5): failed to get link speed/duplex [ 342.120495][ T6612] bond10: (slave bridge5): failed to get link speed/duplex [ 342.248364][ T6612] bond10: (slave bridge5): failed to get link speed/duplex [ 342.277189][T13839] IPVS: set_ctl: invalid protocol: 25965 114.121.46.101:30309 [ 342.387833][ T6596] bond10: (slave bridge5): failed to get link speed/duplex [ 342.507857][ T6606] bond10: (slave bridge5): failed to get link speed/duplex [ 342.645517][T13859] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2053'. [ 342.671471][T13859] nbd: couldn't find a device at index 0 [ 342.691788][T13848] syzkaller0: entered promiscuous mode [ 342.701601][T13861] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2052'. [ 342.705386][T13848] syzkaller0: entered allmulticast mode [ 342.774123][ T6606] bond10: (slave bridge5): failed to get link speed/duplex [ 342.784382][T13862] IPVS: sync thread started: state = MASTER, mcast_ifn = macsec0, syncid = 3, id = 0 [ 343.556784][T13887] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2058'. [ 343.605027][T13887] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2058'. [ 345.287621][T13887] ipvlan1: entered allmulticast mode [ 345.299353][T13887] gretap0: entered allmulticast mode [ 345.398998][ T6599] bond10: (slave bridge5): failed to get link speed/duplex [ 345.485201][T13896] veth1_macvtap: renamed from vlan0 [ 345.515518][T13896] netlink: 'syz.0.2061': attribute type 21 has an invalid length. [ 345.528794][ T6599] bond10: (slave bridge5): failed to get link speed/duplex [ 345.559749][T13904] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2064'. [ 345.568901][T13902] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2063'. [ 345.588490][T13900] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.588894][T13902] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2063'. [ 345.614036][T13906] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.2064'. [ 345.678874][ T6596] bond10: (slave bridge5): failed to get link speed/duplex [ 345.722467][T13900] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.895453][T13900] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.953565][T13925] vlan0: entered promiscuous mode [ 345.979996][T13920] 8021q: VLANs not supported on ip6tnl0 [ 346.020350][T13900] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.265220][T13939] __nla_validate_parse: 1 callbacks suppressed [ 346.265238][T13939] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2073'. [ 346.305818][ T6596] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.573021][ T6606] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.668750][ T6606] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.761751][ T6599] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.894747][T13961] gre1: entered allmulticast mode [ 346.940167][T13964] vlan3: entered promiscuous mode [ 346.967806][ T6612] net_ratelimit: 4 callbacks suppressed [ 346.967824][ T6612] bond10: (slave bridge5): failed to get link speed/duplex [ 347.117809][ T6596] bond10: (slave bridge5): failed to get link speed/duplex [ 347.249888][ T6606] bond10: (slave bridge5): failed to get link speed/duplex [ 347.777854][ T6596] bond10: (slave bridge5): failed to get link speed/duplex [ 347.898114][ T6599] bond10: (slave bridge5): failed to get link speed/duplex [ 347.958930][T13995] netlink: 204 bytes leftover after parsing attributes in process `syz.1.2085'. [ 348.028163][ T6596] bond10: (slave bridge5): failed to get link speed/duplex [ 348.169135][ T6596] bond10: (slave bridge5): failed to get link speed/duplex [ 348.298154][ T6612] bond10: (slave bridge5): failed to get link speed/duplex [ 348.428225][ T6606] bond10: (slave bridge5): failed to get link speed/duplex [ 348.558707][ T6612] bond10: (slave bridge5): failed to get link speed/duplex [ 349.210233][T14054] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2101'. [ 349.245775][T14058] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2103'. [ 349.314423][T14050] team_slave_1: left promiscuous mode [ 349.769008][T14050] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 349.809638][T14050] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 350.031735][ T48] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 350.073137][ T48] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 350.108280][ T48] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 350.149019][ T48] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 350.188344][ T48] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 350.218749][ T48] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 350.287258][ T48] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 350.323976][ T48] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 350.354611][ T48] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 350.395379][ T48] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 350.430320][ T48] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 350.479400][ T48] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 350.923014][T14121] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 351.041202][T14126] ip6t_REJECT: ECHOREPLY is not supported [ 351.180316][T14130] nbd: must specify an index to disconnect [ 351.196775][T14133] netlink: 'syz.0.2114': attribute type 1 has an invalid length. [ 351.280656][T14142] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2114'. [ 351.296097][T14133] bond1: entered promiscuous mode [ 351.302204][T14133] 8021q: adding VLAN 0 to HW filter on device bond1 [ 351.317902][T14142] bond1: entered allmulticast mode [ 351.331055][T14143] netlink: 140 bytes leftover after parsing attributes in process `syz.4.2113'. [ 351.368111][T14143] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2113'. [ 351.388279][T14145] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2116'. [ 351.471059][T14133] bond1: (slave bridge3): making interface the new active one [ 351.490847][T14133] bridge3: entered promiscuous mode [ 351.505260][T14133] bridge3: entered allmulticast mode [ 351.536448][T14133] bond1: (slave bridge3): Enslaving as an active interface with an up link [ 351.585845][T14149] x_tables: duplicate underflow at hook 2 [ 351.603778][T14133] bridge0: port 4(vlan0) entered blocking state [ 351.625727][T14133] bridge0: port 4(vlan0) entered disabled state [ 351.651568][T14133] vlan0: entered allmulticast mode [ 351.668187][T14133] geneve0: entered allmulticast mode [ 351.682622][T14133] vlan0: entered promiscuous mode [ 351.698853][T14133] geneve0: entered promiscuous mode [ 351.928453][T14160] tipc: Started in network mode [ 351.943612][T14160] tipc: Node identity ba5ef75c104c, cluster identity 4711 [ 351.969470][T14160] tipc: Enabled bearer , priority 0 [ 351.994845][T14160] syzkaller0: entered promiscuous mode [ 352.018913][T14160] syzkaller0: entered allmulticast mode [ 352.091076][T14160] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2120'. [ 352.133069][T14160] tipc: Resetting bearer [ 352.174529][T14158] tipc: Resetting bearer [ 352.258731][T14158] tipc: Disabling bearer [ 352.357865][ T48] net_ratelimit: 15 callbacks suppressed [ 352.357884][ T48] bond10: (slave bridge5): failed to get link speed/duplex [ 352.498070][ T3341] bond10: (slave bridge5): failed to get link speed/duplex [ 352.628188][ T3341] bond10: (slave bridge5): failed to get link speed/duplex [ 352.767830][ T3341] bond10: (slave bridge5): failed to get link speed/duplex [ 352.814266][T14194] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2127'. [ 352.931192][T14194] : entered promiscuous mode [ 352.978016][ T6599] bond10: (slave bridge5): failed to get link speed/duplex [ 353.032642][T14208] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2130'. [ 353.094993][T14208] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2130'. [ 353.137818][ T6596] bond10: (slave bridge5): failed to get link speed/duplex [ 353.370682][T14219] netlink: 'syz.1.2133': attribute type 32 has an invalid length. [ 353.400478][T14219] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2133'. [ 353.582053][T14239] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2136'. [ 355.464710][T14219] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 355.484593][ T6606] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.533632][ T6606] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.559982][T14269] veth1_to_bond: entered allmulticast mode [ 355.600073][T14266] veth1_to_bond (unregistering): left allmulticast mode [ 355.727607][ T6606] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.749114][ T6606] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.839646][T14278] team0 (unregistering): Port device team_slave_1 removed [ 355.982702][T14296] netlink: 'syz.4.2146': attribute type 2 has an invalid length. [ 356.210247][T14315] netlink: 'syz.2.2145': attribute type 89 has an invalid length. [ 356.270667][T14318] netlink: 'syz.1.2150': attribute type 1 has an invalid length. [ 356.392821][T14325] sctp: [Deprecated]: syz.0.2152 (pid 14325) Use of int in max_burst socket option. [ 356.392821][T14325] Use struct sctp_assoc_value instead [ 356.444905][T14328] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 356.469708][T14318] bond6: entered promiscuous mode [ 356.480589][T14318] 8021q: adding VLAN 0 to HW filter on device bond6 [ 356.561486][T14318] bond6: (slave bridge6): making interface the new active one [ 356.569305][T14318] bridge6: entered promiscuous mode [ 356.575821][T14318] bond6: (slave bridge6): Enslaving as an active interface with an up link [ 356.933015][T14340] lo speed is unknown, defaulting to 1000 [ 357.016575][T14349] __nla_validate_parse: 34 callbacks suppressed [ 357.016594][T14349] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2158'. [ 357.196302][T14349] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2158'. [ 357.249398][T14357] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2160'. [ 357.279590][T14360] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2160'. [ 357.481131][T14357] bond13: entered promiscuous mode [ 357.482309][T14370] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 357.487446][T14357] 8021q: adding VLAN 0 to HW filter on device bond13 [ 357.764457][T14373] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.869914][T14373] team_slave_0: left promiscuous mode [ 357.878195][T14373] team_slave_1: left promiscuous mode [ 358.591822][T14084] lo speed is unknown, defaulting to 1000 [ 358.603200][T14084] syz2: Port: 1 Link DOWN [ 358.628590][ T6599] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.642875][T14346] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2158'. [ 358.654441][ T6599] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.682228][ T6599] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.700187][ T6599] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.925978][T14402] FAULT_INJECTION: forcing a failure. [ 358.925978][T14402] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 358.965725][T14402] CPU: 1 UID: 0 PID: 14402 Comm: syz.1.2170 Not tainted syzkaller #0 PREEMPT(full) [ 358.965750][T14402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 358.965763][T14402] Call Trace: [ 358.965770][T14402] [ 358.965779][T14402] dump_stack_lvl+0xe8/0x150 [ 358.965810][T14402] should_fail_ex+0x412/0x560 [ 358.965841][T14402] _copy_from_user+0x2d/0xb0 [ 358.965872][T14402] mptcp_setsockopt+0x201f/0x3520 [ 358.965901][T14402] ? aa_sk_perm+0x6d5/0x900 [ 358.965928][T14402] ? __pfx_mptcp_setsockopt+0x10/0x10 [ 358.965949][T14402] ? fd_install+0x94/0x3d0 [ 358.965974][T14402] ? __pfx_aa_sk_perm+0x10/0x10 [ 358.966000][T14402] ? aa_sock_opt_perm+0xff/0x1a0 [ 358.966028][T14402] ? sock_common_setsockopt+0x36/0xc0 [ 358.966054][T14402] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 358.966082][T14402] do_sock_setsockopt+0x17c/0x1b0 [ 358.966117][T14402] __x64_sys_setsockopt+0x13d/0x1b0 [ 358.966149][T14402] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.966171][T14402] do_syscall_64+0x15f/0xf80 [ 358.966198][T14402] ? trace_irq_disable+0x3b/0x140 [ 358.966228][T14402] ? clear_bhb_loop+0x40/0x90 [ 358.966252][T14402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.966272][T14402] RIP: 0033:0x7f2d6959ce59 [ 358.966291][T14402] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 358.966308][T14402] RSP: 002b:00007f2d6a3d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 358.966330][T14402] RAX: ffffffffffffffda RBX: 00007f2d69815fa0 RCX: 00007f2d6959ce59 [ 358.966344][T14402] RDX: 0000000000000025 RSI: 0000000000000001 RDI: 0000000000000003 [ 358.966356][T14402] RBP: 00007f2d6a3d7090 R08: 0000000000000008 R09: 0000000000000000 [ 358.966367][T14402] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 358.966379][T14402] R13: 00007f2d69816038 R14: 00007f2d69815fa0 R15: 00007ffd0b9a7dc8 [ 358.966417][T14402] [ 359.443737][T14418] xt_hashlimit: max too large, truncated to 1048576 [ 359.467742][T14417] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2175'. [ 359.479653][T14418] xt_ecn: cannot match TCP bits for non-tcp packets [ 359.513706][T14423] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2172'. [ 359.528011][T14417] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2175'. [ 360.068797][T14445] netlink: 'syz.4.2183': attribute type 1 has an invalid length. [ 360.081979][T14445] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2183'. [ 360.096841][T14447] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 360.288912][T14453] FAULT_INJECTION: forcing a failure. [ 360.288912][T14453] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 360.307896][T14453] CPU: 0 UID: 0 PID: 14453 Comm: syz.2.2185 Not tainted syzkaller #0 PREEMPT(full) [ 360.307924][T14453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 360.307936][T14453] Call Trace: [ 360.307943][T14453] [ 360.307952][T14453] dump_stack_lvl+0xe8/0x150 [ 360.307979][T14453] should_fail_ex+0x412/0x560 [ 360.308010][T14453] _copy_to_user+0x31/0xb0 [ 360.308041][T14453] simple_read_from_buffer+0xe1/0x170 [ 360.308071][T14453] proc_fail_nth_read+0x1bb/0x230 [ 360.308100][T14453] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 360.308129][T14453] ? rw_verify_area+0x2a6/0x4d0 [ 360.308155][T14453] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 360.308186][T14453] vfs_read+0x20c/0xa70 [ 360.308216][T14453] ? mptcp_setsockopt+0x2043/0x3520 [ 360.308242][T14453] ? __pfx_vfs_read+0x10/0x10 [ 360.308266][T14453] ? aa_sk_perm+0x6d5/0x900 [ 360.308293][T14453] ? __pfx_mptcp_setsockopt+0x10/0x10 [ 360.308314][T14453] ? fd_install+0x94/0x3d0 [ 360.308338][T14453] ? __pfx_aa_sk_perm+0x10/0x10 [ 360.308371][T14453] ksys_read+0x150/0x270 [ 360.308400][T14453] ? __pfx_ksys_read+0x10/0x10 [ 360.308436][T14453] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.308457][T14453] do_syscall_64+0x15f/0xf80 [ 360.308485][T14453] ? trace_irq_disable+0x3b/0x140 [ 360.308513][T14453] ? clear_bhb_loop+0x40/0x90 [ 360.308538][T14453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.308556][T14453] RIP: 0033:0x7f457d35d68e [ 360.308575][T14453] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 360.308592][T14453] RSP: 002b:00007f457e182fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 360.308613][T14453] RAX: ffffffffffffffda RBX: 00007f457e1836c0 RCX: 00007f457d35d68e [ 360.308626][T14453] RDX: 000000000000000f RSI: 00007f457e1830a0 RDI: 0000000000000004 [ 360.308637][T14453] RBP: 00007f457e183090 R08: 0000000000000000 R09: 0000000000000000 [ 360.308648][T14453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 360.308658][T14453] R13: 00007f457d616038 R14: 00007f457d615fa0 R15: 00007ffe35f8e8a8 [ 360.308690][T14453] [ 360.912510][T14467] netlink: 'syz.4.2190': attribute type 8 has an invalid length. [ 361.283645][T14483] netlink: 'syz.0.2194': attribute type 10 has an invalid length. [ 361.383045][T14483] netlink: 'syz.0.2194': attribute type 10 has an invalid length. [ 361.408763][T14485] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2195'. [ 361.597014][T14495] netlink: 'syz.0.2198': attribute type 9 has an invalid length. [ 361.625721][T14495] netlink: 'syz.0.2198': attribute type 6 has an invalid length. [ 361.642752][T14497] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 361.677530][T14495] netlink: 'syz.0.2198': attribute type 7 has an invalid length. [ 361.714568][T14495] netlink: 'syz.0.2198': attribute type 8 has an invalid length. [ 362.064508][T14507] __nla_validate_parse: 1 callbacks suppressed [ 362.064528][T14507] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2201'. [ 362.437852][T14507] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2201'. [ 362.617443][T14526] netlink: 'syz.0.2206': attribute type 1 has an invalid length. [ 363.170579][T14545] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2208'. [ 363.283976][T14546] bond2: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 363.316270][T14546] bond2 (unregistering): Released all slaves [ 363.419590][T14548] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2210'. [ 363.435096][T14548] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2210'. [ 363.459083][T14540] lo speed is unknown, defaulting to 1000 [ 363.730838][T14561] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 365.296321][T14593] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2221'. [ 365.310818][T14598] netlink: 'syz.0.2223': attribute type 2 has an invalid length. [ 365.374717][T14593] syzkaller0: entered promiscuous mode [ 365.389531][T14593] syzkaller0: entered allmulticast mode [ 365.482334][T14603] netlink: 'syz.2.2224': attribute type 1 has an invalid length. [ 365.490896][T14604] netlink: 'syz.2.2224': attribute type 1 has an invalid length. [ 365.540129][T14603] bond14: entered promiscuous mode [ 365.547488][T14603] bond14: entered allmulticast mode [ 365.553918][T14603] 8021q: adding VLAN 0 to HW filter on device bond14 [ 365.614289][T14608] IPVS: set_ctl: invalid protocol: 47 224.0.0.1:20002 [ 365.709662][T14616] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2228'. [ 365.922738][T14621] openvswitch: netlink: IP tunnel dst address not specified [ 365.940080][T14622] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2231'. [ 366.223673][T14632] netlink: zone id is out of range [ 366.244190][T14632] netlink: zone id is out of range [ 366.258319][T14632] netlink: zone id is out of range [ 366.270226][T14632] netlink: zone id is out of range [ 366.275747][T14632] netlink: zone id is out of range [ 366.281594][T14632] netlink: zone id is out of range [ 366.287112][T14632] netlink: zone id is out of range [ 366.489083][T14642] netlink: 280 bytes leftover after parsing attributes in process `syz.1.2236'. [ 367.041088][T14671] netlink: 232 bytes leftover after parsing attributes in process `syz.0.2240'. [ 367.323907][T14685] SET target dimension over the limit! [ 367.866288][T14714] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2253'. [ 368.019491][T14717] netlink: 'syz.0.2254': attribute type 339 has an invalid length. [ 368.213079][T14732] netlink: 'syz.1.2258': attribute type 18 has an invalid length. [ 368.231447][T14732] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2258'. [ 368.260116][T14732] netlink: 'syz.1.2258': attribute type 18 has an invalid length. [ 368.294303][T14732] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2258'. [ 368.405538][T14747] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2261'. [ 368.433733][T14747] netlink: 196 bytes leftover after parsing attributes in process `syz.4.2261'. [ 368.483860][T14752] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2260'. [ 368.517099][T14742] dvmrp0: entered allmulticast mode [ 368.590855][T14747] syzkaller0: entered promiscuous mode [ 368.607037][T14747] syzkaller0: entered allmulticast mode [ 369.251876][T14780] lo: entered allmulticast mode [ 369.572199][T14795] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2274'. [ 369.586771][T14799] netlink: 'syz.4.2272': attribute type 4 has an invalid length. [ 369.876922][T14812] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2278'. [ 369.904909][T14812] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2278'. [ 369.928750][T14816] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2275'. [ 370.241607][T14831] net_ratelimit: 18 callbacks suppressed [ 370.241629][T14831] netlink: zone id is out of range [ 370.279108][T14831] netlink: zone id is out of range [ 370.293947][T14831] netlink: zone id is out of range [ 370.321117][T14831] netlink: zone id is out of range [ 370.332990][T14831] netlink: zone id is out of range [ 370.345755][T14831] netlink: zone id is out of range [ 370.351858][T14831] netlink: zone id is out of range [ 370.357189][T14831] netlink: zone id is out of range [ 370.362955][T14831] netlink: zone id is out of range [ 370.369037][T14831] netlink: zone id is out of range [ 370.379751][T14835] netlink: 'syz.3.2283': attribute type 30 has an invalid length. [ 370.388285][T14836] netlink: 'syz.3.2283': attribute type 30 has an invalid length. [ 370.496572][T14838] netlink: 'syz.3.2284': attribute type 58 has an invalid length. [ 370.963563][ T6599] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0xe8 [ 373.768056][T14856] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 374.057900][T14925] __nla_validate_parse: 4 callbacks suppressed [ 374.057918][T14925] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2309'. [ 374.329350][T14941] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2313'. [ 374.356484][T14941] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2313'. [ 374.391668][T14941] netlink: 'syz.4.2313': attribute type 1 has an invalid length. [ 374.409801][T14941] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2313'. [ 374.444031][T14941] netlink: 'syz.4.2313': attribute type 2 has an invalid length. [ 374.452135][T14941] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2313'. [ 374.816614][T14978] lo: entered allmulticast mode [ 374.825957][T14978] lo: left allmulticast mode [ 375.198827][T14993] syzkaller0: entered promiscuous mode [ 375.204512][T14993] syzkaller0: entered allmulticast mode [ 375.465489][T15003] netlink: 'syz.3.2330': attribute type 1 has an invalid length. [ 375.491138][T15003] bond11: entered promiscuous mode [ 375.496897][T15003] 8021q: adding VLAN 0 to HW filter on device bond11 [ 375.513844][T15003] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2330'. [ 375.523689][T15003] netlink: 116 bytes leftover after parsing attributes in process `syz.3.2330'. [ 375.533257][T15003] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2330'. [ 377.331311][T14943] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 377.561868][T15030] netlink: 'syz.2.2338': attribute type 4 has an invalid length. [ 377.575681][T15031] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 377.599038][T15026] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20001 [ 377.620143][T15026] bridge0: left promiscuous mode [ 377.678563][T15033] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2334'. [ 377.698086][T15033] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2334'. [ 377.840616][T15038] batadv_slave_1: entered promiscuous mode [ 377.861681][T15038] batadv_slave_1 (unregistering): left promiscuous mode [ 378.084019][T15051] netlink: 'syz.2.2345': attribute type 1 has an invalid length. [ 378.148781][T15051] netlink: 'syz.2.2345': attribute type 11 has an invalid length. [ 378.600054][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.697066][T15069] netlink: 'syz.1.2350': attribute type 1 has an invalid length. [ 378.912018][T15079] netlink: 'syz.1.2353': attribute type 10 has an invalid length. [ 379.315338][T15097] netlink: 'syz.2.2361': attribute type 7 has an invalid length. [ 379.362103][T15097] __nla_validate_parse: 5 callbacks suppressed [ 379.362121][T15097] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2361'. [ 379.917418][T15119] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2369'. [ 380.356911][T15142] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2376'. [ 380.673635][T15146] bond12: (slave vcan1): refused to change device type [ 380.944443][T15161] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2380'. [ 381.435901][T15174] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2384'. [ 381.684981][T15180] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2386'. [ 382.462830][T15219] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2401'. [ 382.551727][T15227] block nbd3: Unsupported socket: should be TCP or UNIX. [ 382.659562][T15227] net_ratelimit: 338 callbacks suppressed [ 382.659607][T15227] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 382.708245][T15237] netlink: 277 bytes leftover after parsing attributes in process `syz.4.2402'. [ 382.877968][T15249] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2406'. [ 382.899152][T15249] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2406'. [ 383.151016][T15257] nbd3: detected capacity change from 0 to 127 [ 383.189057][T15261] syzkaller1: tun_chr_ioctl cmd 35108 [ 383.271188][ T5649] block nbd3: Receive control failed (result -104) [ 383.797873][ T5649] Bluetooth: hci4: command 0x0405 tx timeout [ 384.386293][T15316] syzkaller0: entered promiscuous mode [ 384.406115][T15316] syzkaller0: entered allmulticast mode [ 384.942102][T15338] __nla_validate_parse: 2 callbacks suppressed [ 384.942119][T15338] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2435'. [ 385.153999][T15345] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2437'. [ 385.746400][T15372] netlink: 'syz.1.2444': attribute type 1 has an invalid length. [ 385.850900][T15372] 8021q: adding VLAN 0 to HW filter on device bond7 [ 385.911454][T15374] bond7: (slave veth7): Enslaving as an active interface with a down link [ 385.971286][T15372] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 385.988069][T15372] bond7: (slave batadv0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 386.164409][T15382] IPVS: Unknown mcast interface: vlan0 [ 386.188471][T15367] lo speed is unknown, defaulting to 1000 [ 386.527116][T15360] infiniband syz0: set down [ 386.530731][ T49] block nbd3: Connection timed out, retrying (0/1 alive) [ 386.550489][ T49] block nbd3: Connection timed out, retrying (0/1 alive) [ 386.558647][ T25] block nbd3: Dead connection, failed to find a fallback [ 386.571204][ T49] block nbd3: Connection timed out, retrying (0/1 alive) [ 386.579649][ T25] block nbd3: shutting down sockets [ 386.587409][ T49] block nbd3: Connection timed out, retrying (0/1 alive) [ 386.596494][ T25] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 386.608927][ T25] Buffer I/O error on dev nbd3, logical block 0, async page read [ 386.618114][ T25] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 386.627480][ T25] Buffer I/O error on dev nbd3, logical block 3, async page read [ 386.635400][ T25] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 386.644835][ T25] Buffer I/O error on dev nbd3, logical block 2, async page read [ 386.658093][ T25] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 386.667242][ T25] Buffer I/O error on dev nbd3, logical block 1, async page read [ 386.678994][T10368] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 386.692671][T10368] Buffer I/O error on dev nbd3, logical block 0, async page read [ 386.701379][T10368] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 386.710521][T10368] Buffer I/O error on dev nbd3, logical block 1, async page read [ 386.718568][T10368] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 386.727622][T10368] Buffer I/O error on dev nbd3, logical block 2, async page read [ 386.735877][T10368] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 386.745123][T10368] Buffer I/O error on dev nbd3, logical block 3, async page read [ 386.753160][T10368] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 386.762913][T10368] Buffer I/O error on dev nbd3, logical block 0, async page read [ 386.770902][T10368] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 386.780496][T10368] Buffer I/O error on dev nbd3, logical block 1, async page read [ 386.792327][T10368] ldm_validate_partition_table(): Disk read failed. [ 386.801621][T10368] Dev nbd3: unable to read RDB block 0 [ 386.812717][T10368] nbd3: unable to read partition table [ 386.827859][T15360] infiniband syz0: added bond_slave_1 [ 386.841532][T15360] [ 386.843902][T15360] ====================================================== [ 386.850938][T15360] WARNING: possible circular locking dependency detected [ 386.857990][T15360] syzkaller #0 Not tainted [ 386.862426][T15360] ------------------------------------------------------ [ 386.869476][T15360] syz.2.2441/15360 is trying to acquire lock: [ 386.875566][T15360] ffffffff8ea5f900 (pcpu_alloc_mutex){+.+.}-{4:4}, at: pcpu_alloc_noprof+0x261/0x19c0 [ 386.885279][T15360] [ 386.885279][T15360] but task is already holding lock: [ 386.892664][T15360] ffffffff8e7fae60 (wq_pool_mutex){+.+.}-{4:4}, at: __alloc_workqueue+0x9f8/0x1f50 [ 386.902035][T15360] [ 386.902035][T15360] which lock already depends on the new lock. [ 386.902035][T15360] [ 386.912449][T15360] [ 386.912449][T15360] the existing dependency chain (in reverse order) is: [ 386.921511][T15360] [ 386.921511][T15360] -> #9 (wq_pool_mutex){+.+.}-{4:4}: [ 386.929026][T15360] __mutex_lock+0x1a3/0x1550 [ 386.934178][T15360] __alloc_workqueue+0x9f8/0x1f50 [ 386.939785][T15360] alloc_workqueue_noprof+0xe3/0x210 [ 386.945625][T15360] padata_alloc+0xc1/0x360 [ 386.950589][T15360] pcrypt_init_padata+0x27/0x100 [ 386.956067][T15360] pcrypt_init+0x60/0xc0 [ 386.960874][T15360] do_one_initcall+0x250/0x870 [ 386.966181][T15360] do_initcall_level+0x104/0x190 [ 386.971679][T15360] do_initcalls+0x59/0xa0 [ 386.976561][T15360] kernel_init_freeable+0x2a6/0x3e0 [ 386.982300][T15360] kernel_init+0x1d/0x1d0 [ 386.987167][T15360] ret_from_fork+0x514/0xb70 [ 386.992291][T15360] ret_from_fork_asm+0x1a/0x30 [ 386.997595][T15360] [ 386.997595][T15360] -> #8 (cpu_hotplug_lock){++++}-{0:0}: [ 387.005356][T15360] cpus_read_lock+0x42/0x160 [ 387.010483][T15360] static_key_slow_inc+0x12/0x30 [ 387.015957][T15360] setup_udp_tunnel_sock+0x2df/0x4f0 [ 387.021775][T15360] l2tp_tunnel_register+0xe72/0x1570 [ 387.027600][T15360] pppol2tp_connect+0x8b7/0x17c0 [ 387.033070][T15360] __sys_connect+0x312/0x450 [ 387.038191][T15360] __x64_sys_connect+0x7a/0x90 [ 387.043495][T15360] do_syscall_64+0x15f/0xf80 [ 387.048628][T15360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.055060][T15360] [ 387.055060][T15360] -> #7 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 387.062829][T15360] lock_sock_nested+0x41/0x100 [ 387.068127][T15360] inet_shutdown+0x6a/0x390 [ 387.073177][T15360] nbd_mark_nsock_dead+0x2e9/0x560 [ 387.078823][T15360] recv_work+0x1c2e/0x1d40 [ 387.083773][T15360] process_scheduled_works+0xb5d/0x1860 [ 387.089861][T15360] worker_thread+0xa53/0xfc0 [ 387.094982][T15360] kthread+0x389/0x470 [ 387.099596][T15360] ret_from_fork+0x514/0xb70 [ 387.104725][T15360] ret_from_fork_asm+0x1a/0x30 [ 387.110028][T15360] [ 387.110028][T15360] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 387.117704][T15360] __mutex_lock+0x1a3/0x1550 [ 387.122840][T15360] nbd_queue_rq+0x37b/0x1100 [ 387.127961][T15360] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 387.134046][T15360] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 387.140918][T15360] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 387.147433][T15360] blk_mq_run_hw_queue+0x348/0x4f0 [ 387.153087][T15360] blk_mq_dispatch_list+0xd16/0xe10 [ 387.158834][T15360] blk_mq_flush_plug_list+0x48d/0x570 [ 387.164749][T15360] __blk_flush_plug+0x3ed/0x4d0 [ 387.170169][T15360] __submit_bio+0x28d/0x580 [ 387.175233][T15360] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 387.181408][T15360] block_read_full_folio+0x599/0x830 [ 387.187250][T15360] filemap_read_folio+0x137/0x3b0 [ 387.192815][T15360] do_read_cache_folio+0x358/0x590 [ 387.198470][T15360] read_part_sector+0xb6/0x2b0 [ 387.203778][T15360] adfspart_check_ICS+0xb1/0x960 [ 387.209257][T15360] bdev_disk_changed+0x817/0x1770 [ 387.214836][T15360] blkdev_get_whole+0x380/0x510 [ 387.220258][T15360] bdev_open+0x31e/0xd30 [ 387.225060][T15360] blkdev_open+0x470/0x610 [ 387.230020][T15360] do_dentry_open+0x785/0x14e0 [ 387.235328][T15360] vfs_open+0x3b/0x340 [ 387.239955][T15360] path_openat+0x2e08/0x3860 [ 387.245087][T15360] do_file_open+0x23e/0x4a0 [ 387.250146][T15360] do_sys_openat2+0x113/0x200 [ 387.255377][T15360] __x64_sys_openat+0x138/0x170 [ 387.260772][T15360] do_syscall_64+0x15f/0xf80 [ 387.265915][T15360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.272347][T15360] [ 387.272347][T15360] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 387.279586][T15360] __mutex_lock+0x1a3/0x1550 [ 387.284731][T15360] nbd_queue_rq+0xc6/0x1100 [ 387.289776][T15360] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 387.295880][T15360] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 387.302761][T15360] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 387.309322][T15360] blk_mq_run_hw_queue+0x348/0x4f0 [ 387.314985][T15360] blk_mq_dispatch_list+0xd16/0xe10 [ 387.320737][T15360] blk_mq_flush_plug_list+0x48d/0x570 [ 387.326675][T15360] __blk_flush_plug+0x3ed/0x4d0 [ 387.332087][T15360] __submit_bio+0x28d/0x580 [ 387.337152][T15360] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 387.343334][T15360] block_read_full_folio+0x599/0x830 [ 387.349153][T15360] filemap_read_folio+0x137/0x3b0 [ 387.354726][T15360] do_read_cache_folio+0x358/0x590 [ 387.360381][T15360] read_part_sector+0xb6/0x2b0 [ 387.365688][T15360] adfspart_check_ICS+0xb1/0x960 [ 387.371166][T15360] bdev_disk_changed+0x817/0x1770 [ 387.376732][T15360] blkdev_get_whole+0x380/0x510 [ 387.382131][T15360] bdev_open+0x31e/0xd30 [ 387.386914][T15360] blkdev_open+0x470/0x610 [ 387.391883][T15360] do_dentry_open+0x785/0x14e0 [ 387.397183][T15360] vfs_open+0x3b/0x340 [ 387.401787][T15360] path_openat+0x2e08/0x3860 [ 387.406924][T15360] do_file_open+0x23e/0x4a0 [ 387.411963][T15360] do_sys_openat2+0x113/0x200 [ 387.417176][T15360] __x64_sys_openat+0x138/0x170 [ 387.422568][T15360] do_syscall_64+0x15f/0xf80 [ 387.427708][T15360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.434145][T15360] [ 387.434145][T15360] -> #4 (set->srcu){.+.+}-{0:0}: [ 387.441285][T15360] __synchronize_srcu+0xca/0x300 [ 387.446761][T15360] elevator_switch+0x1e8/0x7a0 [ 387.452088][T15360] elevator_change+0x2cc/0x450 [ 387.457427][T15360] elevator_set_default+0x36c/0x430 [ 387.463176][T15360] blk_register_queue+0x3e9/0x4e0 [ 387.468753][T15360] __add_disk+0x677/0xd50 [ 387.473615][T15360] add_disk_fwnode+0xfb/0x480 [ 387.478826][T15360] nbd_dev_add+0x72c/0xb50 [ 387.483790][T15360] nbd_init+0x168/0x1f0 [ 387.488497][T15360] do_one_initcall+0x250/0x870 [ 387.493812][T15360] do_initcall_level+0x104/0x190 [ 387.499301][T15360] do_initcalls+0x59/0xa0 [ 387.504185][T15360] kernel_init_freeable+0x2a6/0x3e0 [ 387.509926][T15360] kernel_init+0x1d/0x1d0 [ 387.514793][T15360] ret_from_fork+0x514/0xb70 [ 387.519924][T15360] ret_from_fork_asm+0x1a/0x30 [ 387.525231][T15360] [ 387.525231][T15360] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 387.533080][T15360] __mutex_lock+0x1a3/0x1550 [ 387.538204][T15360] elevator_change+0x1b3/0x450 [ 387.543510][T15360] elevator_set_none+0xb5/0x140 [ 387.548907][T15360] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 387.555252][T15360] nbd_start_device+0x17f/0xb10 [ 387.560634][T15360] nbd_genl_connect+0x165b/0x1cf0 [ 387.566187][T15360] genl_family_rcv_msg_doit+0x22a/0x330 [ 387.572268][T15360] genl_rcv_msg+0x61c/0x7a0 [ 387.577307][T15360] netlink_rcv_skb+0x232/0x4b0 [ 387.582604][T15360] genl_rcv+0x28/0x40 [ 387.587121][T15360] netlink_unicast+0x75c/0x8e0 [ 387.592430][T15360] netlink_sendmsg+0x813/0xb40 [ 387.597726][T15360] ____sys_sendmsg+0x972/0x9f0 [ 387.603026][T15360] ___sys_sendmsg+0x2a5/0x360 [ 387.608238][T15360] __x64_sys_sendmsg+0x1bd/0x2a0 [ 387.613712][T15360] do_syscall_64+0x15f/0xf80 [ 387.618840][T15360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.625263][T15360] [ 387.625263][T15360] -> #2 (&q->q_usage_counter(io)#51){++++}-{0:0}: [ 387.633890][T15360] blk_alloc_queue+0x546/0x680 [ 387.639193][T15360] __blk_mq_alloc_disk+0x197/0x390 [ 387.644836][T15360] nbd_dev_add+0x499/0xb50 [ 387.649787][T15360] nbd_init+0x168/0x1f0 [ 387.654472][T15360] do_one_initcall+0x250/0x870 [ 387.659779][T15360] do_initcall_level+0x104/0x190 [ 387.665281][T15360] do_initcalls+0x59/0xa0 [ 387.670176][T15360] kernel_init_freeable+0x2a6/0x3e0 [ 387.675932][T15360] kernel_init+0x1d/0x1d0 [ 387.680861][T15360] ret_from_fork+0x514/0xb70 [ 387.685988][T15360] ret_from_fork_asm+0x1a/0x30 [ 387.691295][T15360] [ 387.691295][T15360] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 387.698530][T15360] fs_reclaim_acquire+0x71/0x100 [ 387.704019][T15360] prepare_alloc_pages+0x152/0x650 [ 387.709693][T15360] __alloc_frozen_pages_noprof+0x12f/0x380 [ 387.716057][T15360] __alloc_pages_noprof+0x10/0x100 [ 387.721733][T15360] pcpu_populate_chunk+0x182/0xb30 [ 387.727404][T15360] pcpu_alloc_noprof+0xcc2/0x19c0 [ 387.732978][T15360] bpf_map_alloc_percpu+0x65/0x180 [ 387.738625][T15360] prealloc_init+0x217/0x640 [ 387.743754][T15360] htab_map_alloc+0x69e/0xc90 [ 387.748966][T15360] map_create+0xafd/0x16a0 [ 387.753935][T15360] __sys_bpf+0x6e1/0x950 [ 387.758725][T15360] __x64_sys_bpf+0x7c/0x90 [ 387.763683][T15360] do_syscall_64+0x15f/0xf80 [ 387.768819][T15360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.775245][T15360] [ 387.775245][T15360] -> #0 (pcpu_alloc_mutex){+.+.}-{4:4}: [ 387.783000][T15360] __lock_acquire+0x15a5/0x2cf0 [ 387.788387][T15360] lock_acquire+0x106/0x350 [ 387.793435][T15360] __mutex_lock+0x1a3/0x1550 [ 387.798562][T15360] pcpu_alloc_noprof+0x261/0x19c0 [ 387.804135][T15360] __alloc_workqueue+0xa88/0x1f50 [ 387.809709][T15360] alloc_workqueue_noprof+0xe3/0x210 [ 387.815537][T15360] ib_mad_init_device+0x944/0x20a0 [ 387.821190][T15360] add_client_context+0x37c/0x7a0 [ 387.826802][T15360] enable_device_and_get+0x19c/0x3e0 [ 387.832644][T15360] ib_register_device+0x110f/0x13e0 [ 387.838381][T15360] rxe_register_device+0x1e3/0x350 [ 387.844029][T15360] rxe_net_add+0x81/0x110 [ 387.848909][T15360] rxe_newlink+0xf4/0x1c0 [ 387.853779][T15360] nldev_newlink+0x5bc/0x650 [ 387.858920][T15360] rdma_nl_rcv+0x6d1/0xa10 [ 387.863913][T15360] netlink_unicast+0x75c/0x8e0 [ 387.869221][T15360] netlink_sendmsg+0x813/0xb40 [ 387.874516][T15360] ____sys_sendmsg+0x972/0x9f0 [ 387.879812][T15360] ___sys_sendmsg+0x2a5/0x360 [ 387.885025][T15360] __x64_sys_sendmsg+0x1bd/0x2a0 [ 387.890499][T15360] do_syscall_64+0x15f/0xf80 [ 387.895636][T15360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.902067][T15360] [ 387.902067][T15360] other info that might help us debug this: [ 387.902067][T15360] [ 387.912311][T15360] Chain exists of: [ 387.912311][T15360] pcpu_alloc_mutex --> cpu_hotplug_lock --> wq_pool_mutex [ 387.912311][T15360] [ 387.925366][T15360] Possible unsafe locking scenario: [ 387.925366][T15360] [ 387.932823][T15360] CPU0 CPU1 [ 387.938198][T15360] ---- ---- [ 387.943578][T15360] lock(wq_pool_mutex); [ 387.947835][T15360] lock(cpu_hotplug_lock); [ 387.954874][T15360] lock(wq_pool_mutex); [ 387.961655][T15360] lock(pcpu_alloc_mutex); [ 387.966177][T15360] [ 387.966177][T15360] *** DEADLOCK *** [ 387.966177][T15360] [ 387.974327][T15360] 6 locks held by syz.2.2441/15360: [ 387.979532][T15360] #0: ffffffff9a804808 (&rdma_nl_types[idx].sem){.+.+}-{4:4}, at: rdma_nl_rcv+0x328/0xa10 [ 387.989576][T15360] #1: ffffffff8fb32848 (link_ops_rwsem){++++}-{4:4}, at: nldev_newlink+0x429/0x650 [ 387.998996][T15360] #2: ffffffff8fb23e48 (devices_rwsem){++++}-{4:4}, at: enable_device_and_get+0xff/0x3e0 [ 388.008941][T15360] #3: ffffffff8fb24148 (clients_rwsem){++++}-{4:4}, at: enable_device_and_get+0x165/0x3e0 [ 388.019406][T15360] #4: ffff88807d2bc620 (&device->client_data_rwsem){++++}-{4:4}, at: add_client_context+0x33c/0x7a0 [ 388.030326][T15360] #5: ffffffff8e7fae60 (wq_pool_mutex){+.+.}-{4:4}, at: __alloc_workqueue+0x9f8/0x1f50 [ 388.040098][T15360] [ 388.040098][T15360] stack backtrace: [ 388.045998][T15360] CPU: 1 UID: 0 PID: 15360 Comm: syz.2.2441 Not tainted syzkaller #0 PREEMPT(full) [ 388.046018][T15360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 388.046029][T15360] Call Trace: [ 388.046037][T15360] [ 388.046046][T15360] dump_stack_lvl+0xe8/0x150 [ 388.046072][T15360] print_circular_bug+0x2e1/0x300 [ 388.046096][T15360] check_noncircular+0x12e/0x150 [ 388.046120][T15360] __lock_acquire+0x15a5/0x2cf0 [ 388.046141][T15360] ? check_path+0x21/0x40 [ 388.046160][T15360] ? check_noncircular+0xda/0x150 [ 388.046181][T15360] ? add_lock_to_list+0xc7/0x100 [ 388.046202][T15360] ? lockdep_unlock+0x5d/0xd0 [ 388.046215][T15360] ? __lock_acquire+0x146e/0x2cf0 [ 388.046233][T15360] ? pcpu_alloc_noprof+0x261/0x19c0 [ 388.046255][T15360] lock_acquire+0x106/0x350 [ 388.046271][T15360] ? pcpu_alloc_noprof+0x261/0x19c0 [ 388.046299][T15360] __mutex_lock+0x1a3/0x1550 [ 388.046315][T15360] ? pcpu_alloc_noprof+0x261/0x19c0 [ 388.046337][T15360] ? __mutex_trylock_common+0x158/0x260 [ 388.046360][T15360] ? __pfx___mutex_trylock_common+0x10/0x10 [ 388.046383][T15360] ? rcu_is_watching+0x15/0xb0 [ 388.046402][T15360] ? pcpu_alloc_noprof+0x261/0x19c0 [ 388.046425][T15360] ? __pfx___mutex_lock+0x10/0x10 [ 388.046438][T15360] ? __mutex_lock+0x319/0x1550 [ 388.046458][T15360] ? __alloc_workqueue+0x9f8/0x1f50 [ 388.046480][T15360] pcpu_alloc_noprof+0x261/0x19c0 [ 388.046502][T15360] ? rcu_is_watching+0x15/0xb0 [ 388.046523][T15360] ? __kmalloc_cache_node_noprof+0x3ef/0x6b0 [ 388.046551][T15360] __alloc_workqueue+0xa88/0x1f50 [ 388.046580][T15360] alloc_workqueue_noprof+0xe3/0x210 [ 388.046604][T15360] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 388.046632][T15360] ib_mad_init_device+0x944/0x20a0 [ 388.046663][T15360] ? __pfx_ib_mad_init_device+0x10/0x10 [ 388.046679][T15360] ? do_raw_spin_unlock+0xf5/0x210 [ 388.046703][T15360] ? _raw_spin_unlock+0x28/0x50 [ 388.046726][T15360] add_client_context+0x37c/0x7a0 [ 388.046753][T15360] ? __pfx_add_client_context+0x10/0x10 [ 388.046776][T15360] ? xa_find+0x25b/0x2b0 [ 388.046796][T15360] enable_device_and_get+0x19c/0x3e0 [ 388.046819][T15360] ? __pfx_enable_device_and_get+0x10/0x10 [ 388.046845][T15360] ? device_add+0x70b/0xbb0 [ 388.046865][T15360] ib_register_device+0x110f/0x13e0 [ 388.046892][T15360] ? __pfx_ib_register_device+0x10/0x10 [ 388.046915][T15360] ? xas_start+0x3d4/0x770 [ 388.046941][T15360] ? xa_load+0x60/0x210 [ 388.046954][T15360] ? xa_load+0x60/0x210 [ 388.046966][T15360] ? xa_load+0x60/0x210 [ 388.046992][T15360] ? xa_load+0x1db/0x210 [ 388.047008][T15360] ? ib_device_set_netdev+0x5c9/0x6d0 [ 388.047035][T15360] rxe_register_device+0x1e3/0x350 [ 388.047063][T15360] rxe_net_add+0x81/0x110 [ 388.047086][T15360] rxe_newlink+0xf4/0x1c0 [ 388.047104][T15360] nldev_newlink+0x5bc/0x650 [ 388.047124][T15360] ? __pfx_nldev_newlink+0x10/0x10 [ 388.047217][T15360] ? bpf_lsm_capable+0x9/0x20 [ 388.047233][T15360] ? security_capable+0x7e/0x2c0 [ 388.047254][T15360] ? __pfx_nldev_newlink+0x10/0x10 [ 388.047279][T15360] rdma_nl_rcv+0x6d1/0xa10 [ 388.047306][T15360] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 388.047338][T15360] ? netlink_deliver_tap+0x2e/0x1b0 [ 388.047354][T15360] ? netlink_deliver_tap+0x2e/0x1b0 [ 388.047373][T15360] netlink_unicast+0x75c/0x8e0 [ 388.047402][T15360] netlink_sendmsg+0x813/0xb40 [ 388.047424][T15360] ? __pfx_netlink_sendmsg+0x10/0x10 [ 388.047442][T15360] ? aa_sock_msg_perm+0xf1/0x1b0 [ 388.047463][T15360] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 388.047487][T15360] ____sys_sendmsg+0x972/0x9f0 [ 388.047504][T15360] ? __might_fault+0xaf/0x130 [ 388.047527][T15360] ? __pfx_____sys_sendmsg+0x10/0x10 [ 388.047547][T15360] ? import_iovec+0x73/0xa0 [ 388.047572][T15360] ___sys_sendmsg+0x2a5/0x360 [ 388.047587][T15360] ? __lock_acquire+0x6b5/0x2cf0 [ 388.047605][T15360] ? __pfx____sys_sendmsg+0x10/0x10 [ 388.047623][T15360] ? futex_wait+0x2a2/0x390 [ 388.047663][T15360] ? __fget_files+0x2a/0x420 [ 388.047686][T15360] ? __fget_files+0x3a0/0x420 [ 388.047713][T15360] __x64_sys_sendmsg+0x1bd/0x2a0 [ 388.047732][T15360] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 388.047752][T15360] ? rcu_is_watching+0x15/0xb0 [ 388.047775][T15360] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.047791][T15360] do_syscall_64+0x15f/0xf80 [ 388.047815][T15360] ? trace_irq_disable+0x3b/0x140 [ 388.047839][T15360] ? clear_bhb_loop+0x40/0x90 [ 388.047857][T15360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.047874][T15360] RIP: 0033:0x7f457d39ce59 [ 388.047889][T15360] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 388.047905][T15360] RSP: 002b:00007f457e183028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 388.047922][T15360] RAX: ffffffffffffffda RBX: 00007f457d615fa0 RCX: 00007f457d39ce59 [ 388.047934][T15360] RDX: 0000000000008014 RSI: 0000200000000200 RDI: 0000000000000003 [ 388.047945][T15360] RBP: 00007f457d432d6f R08: 0000000000000000 R09: 0000000000000000 [ 388.047955][T15360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 388.047965][T15360] R13: 00007f457d616038 R14: 00007f457d615fa0 R15: 00007ffe35f8e8a8 [ 388.047986][T15360] [ 388.549745][T10368] ldm_validate_partition_table(): Disk read failed. [ 388.557553][T10368] Dev nbd3: unable to read RDB block 0 [ 388.564428][T10368] nbd3: unable to read partition table [ 388.768474][T15360] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 388.770293][T15360] infiniband syz0: Couldn't open port 1 [ 388.805185][T15360] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 388.838284][T15360] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 388.912802][T15360] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 389.003717][T15360] RDS/IB: syz0: added [ 389.018563][T15360] smc: adding ib device syz0 with port count 1 [ 389.053852][T15360] smc: ib device syz0 port 1 has no pnetid