last executing test programs: 3.457146226s ago: executing program 0 (id=2040): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0xa930bb9f3fd061f1) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r0}, 0x8) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x4, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x78, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback=0x7f000015}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_ORIG={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x4}]}]}, 0x78}}, 0x8800) (async) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2, 0xb, 0xe, 0x8, 0x6, 0x0, 0x70bd25, 0x25dfdbfe, [@sadb_lifetime={0x4, 0x3, 0x4, 0x5, 0xf, 0x10000000000001}]}, 0x30}}, 0x4000) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100003800c"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB="05"], 0x10) close(r2) (async) r5 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r5, 0x100004) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r3}, &(0x7f0000000500), &(0x7f0000000540)=r2}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r6}, 0x20) (async) ioctl$TUNSETGROUP(r0, 0x400454ce, 0xffffffffffffffff) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newnexthop={0x20, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_OIF={0x8}]}, 0x20}}, 0x0) 3.07907396s ago: executing program 0 (id=2045): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r2) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0x11, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x50, 0x3, 0x8, 0x801, 0x0, 0x0, {0x5, 0x0, 0x6}, [@CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_CLOSEREQ={0x8, 0x5, 0x1, 0x0, 0x38c}, @CTA_TIMEOUT_DCCP_REQUEST={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_DCCP_REQUEST={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0x6}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x20}]}, 0x50}, 0x1, 0x0, 0x0, 0x4050}, 0x4004050) 2.658194073s ago: executing program 0 (id=2048): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1802000002000000000000000a0000808500000041000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="5f1747b6c340ec1050d04760d167", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000180)={0x7a2a, 0x9, 0x5a}, 0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DONE(r2, 0x29, 0xc9, 0x12, 0x0) sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000640)="0c4a522d120d68306fc7e0f85f124d89a52a6a68d513ab1f0be2e6a230779569dcafbb154e94e72f47a2f08f31b0508665f7c8377d09adf4b06173d31011a9112f1b78bdc92e8cf952a4300ee3a3de6a526f7fc583c86b1aef33335725089b9a50f7b1a93e79", 0x66}], 0x1, 0x0, 0x0, 0x2804c044}, 0x0) setsockopt(r1, 0x42, 0x60e, &(0x7f0000000080)="96230c294c2f6d8b6044369ce74a30a3b7fc1c6f9fdf1054e75eba8724f7e395c60fc2ac71890a1b9e45b014433645b3762271fac362224c4c67cf2778112cc63046d85ef3b0ce45c15c7289f7d2d585491682f68533363970f4f294b8ec4d0d3901a626ed7f250e2e", 0x69) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r4, 0x29, 0x40, &(0x7f00000002c0)={'nat\x00', 0x0, [0x2, 0x4, 0x84, 0x3, 0x8]}, &(0x7f0000000400)=0x54) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r3, 0x84, 0x78, &(0x7f0000000000)=r6, 0x4) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x6, 0x9}, 0x8) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000f8ffffff00000040000000008500bf5fec81a9b148e2000036000000180000000300"/48], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$phonet_pipe(0x23, 0x5, 0x2) accept4$phonet_pipe(r8, 0x0, 0x0, 0x80000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r7, 0x0, 0xe, 0x0, &(0x7f0000000040)="f7edad00"/14, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8}, 0x50) accept4(r1, &(0x7f00000004c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, &(0x7f00000005c0)=0x80, 0x800) ioctl$FS_IOC_MEASURE_VERITY(r3, 0xc0046686, &(0x7f0000000740)={0x0, 0x69, "34f067c5acab649b1df8c7b6efb373b556de8f35ec2b21a6be059f3715cd2b7aadccbb9d75ad4c2cde48cba28d15f7e8368078fd70b15fc5051fffb43a1e8ac2f0d210fa55480ef81e92d454f1948299249543b3ad1e26f0a087e56c2d89535b76cf8cb3b14f9064cb"}) 2.427553499s ago: executing program 3 (id=2050): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="95ab8caad55817c0450000000000000085100000feffffff9500000000000000"], &(0x7f0000000280)='GPL\x00', 0x4, 0xdf, &(0x7f00000002c0)=""/223, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0xc, 0x0, 0x2, 0x10, &(0x7f00000004c0), 0x10}, 0x80) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000000180)={0x1, 0x3, 0x1000, 0x74, &(0x7f0000000040)="7541e5897c370e43d3aa54e5414ce893d290418be676ac77109e1fe5ce187e186a43045c55c1189296cf674b2139af54cbdec7c0c47d03d82843870ea5224a7220378edb8e4227c6e55c79786a04f6f69f997d075b88c6ce83490b491e848e3d180581c4a9fd34fc632a317a5608779c26538646", 0x45, 0x0, &(0x7f00000000c0)="514e1a229f048c37051baf4b443d3809f7ddd53ba332a7f820ba261a72f26be3e02f0519c8ca6b2365afac83faea075b31ee6bd74242643d35cc14c1bb6643912ff2c4dfa8"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="95ab8caad55817c0450000000000000085100000feffffff9500000000000000"], &(0x7f0000000280)='GPL\x00', 0x4, 0xdf, &(0x7f00000002c0)=""/223, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0xc, 0x0, 0x2, 0x10, &(0x7f00000004c0), 0x10}, 0x80) (async) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000000180)={0x1, 0x3, 0x1000, 0x74, &(0x7f0000000040)="7541e5897c370e43d3aa54e5414ce893d290418be676ac77109e1fe5ce187e186a43045c55c1189296cf674b2139af54cbdec7c0c47d03d82843870ea5224a7220378edb8e4227c6e55c79786a04f6f69f997d075b88c6ce83490b491e848e3d180581c4a9fd34fc632a317a5608779c26538646", 0x45, 0x0, &(0x7f00000000c0)="514e1a229f048c37051baf4b443d3809f7ddd53ba332a7f820ba261a72f26be3e02f0519c8ca6b2365afac83faea075b31ee6bd74242643d35cc14c1bb6643912ff2c4dfa8"}) (async) 2.365903514s ago: executing program 2 (id=2051): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1200000007000000040000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000d1e37643c50000e3000000"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000640)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xffff, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000800)={0x0, @initdev, @empty}, &(0x7f0000000840)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000008c0)={'gretap0\x00', &(0x7f0000000880)={'tunl0\x00', 0x0, 0x8, 0x700, 0x20, 0x1000, {{0x7, 0x4, 0x0, 0x7, 0x1c, 0x67, 0x0, 0x1, 0x29, 0x0, @broadcast, @loopback, {[@lsrr={0x83, 0x7, 0x21, [@remote]}]}}}}}) sendmsg$nl_route(r0, 0x0, 0x4004000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7a, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.162033087s ago: executing program 3 (id=2052): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000009000000030000000000000010000000000000000000000000b0b0bafcbc6c407025d02563a2889df367c69d32ee5aa1196f9bdbbe9f8fc9847ca1f419da2bca25432f02cecbc7203423324c2e5e60fe8341666cf435b7a7cbfa7aa1468bc0e5ffbdfc3d1a099248532a53916374c52f32f164e2a0889925666082dd7ecd9770ec6f48f40a75e054ff5045d8764f91f6108065bedd019fbc12552ff78ed9902dcf4230be59e592fdb14753afcb4ee709bb3ca06b1ad8f899408896ff8a13dcc6683738d73f"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r0}, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000680)=ANY=[], 0x54}}, 0x24008000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000440)=""/8, 0x8}, {&(0x7f0000000480)=""/20, 0x14}, {&(0x7f0000000980)=""/19, 0x13}, {&(0x7f0000000c40)=""/180, 0xb4}, {&(0x7f0000000d00)=""/101, 0x65}, {&(0x7f0000001000)=""/77, 0x4d}], 0x6}, 0x12000) r3 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) r4 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="6220d5"], 0x9) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r3) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r5 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000800)={@initdev, @multicast2, 0x0}, &(0x7f0000000840)=0xc) sendmmsg$inet(r6, &(0x7f0000000b80)=[{{&(0x7f0000000000)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000400)}}, {{&(0x7f00000003c0)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f0000000740)=[{&(0x7f0000000400)="265402e5951b07f0b3929224f39d87fad8f9f846167738e61754ed01fcc0888ac778ebec0209d062", 0x28}, {&(0x7f00000004c0)="bd9ff8d124e85d2f07eb811d7294c57c50e6c412f274604b55414500911db770b564dad622dbb1324704c32e07d48c73f86c74e7a7aac78204ef7f68b2b8358ebe2f310953a5b56d79ff7809936ea8b5d88c9f0dc4e9a596f5c088cf8953", 0x5e}, {&(0x7f0000000540)="063b0211ccd719d4d6ffa210ccd5ba48000f4fb2dfd244f9cf8e99f50de8069b59db4ea80565b58f88bd9b415567ff17567b2ad8dc99c5f995b17ed2c2eaf790a61f525b30c71c03162eebb4043fbbf1ca70bbf7b0f993c3b8", 0x59}], 0x3, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="ac1e01017f0000010000000014000000000000000000000002000000feffffff00000000140000000000000000000000010000006101000000000000140000000000000000000000020000000200000000000000110000000000000000000000010000000500000000000000140000000000000000000000010000000500000000000000"], 0x160}}, {{&(0x7f0000000a40)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000000b40)=[{&(0x7f0000000a80)="f53aa3fcb0dfbb53853b2138538b4d5783c32510b9645df1a6512c730fdf095fb8f58884ba9bc5840e5c771c92ae3d11f574c839913f74c4de8202b71ea613e73e74b4cb346b67aa96bb28f7eeb7ad57ad30ed0b772c020129b5f6a70fddd16369b9f1be00e534f704df1a0e69fb70456cca30e1eed42f18b45d1e5d60fd0a26fce26bfdbc6b06d5567bb28854cb96a7c2ce473558e9ade221da47e87c8580fd145a160bc4dd9c4b50527dbb166fbfb0b3d779dab07619ec861508", 0xbb}], 0x1}}], 0x3, 0x810) listen(r3, 0xc6) accept4(r6, &(0x7f0000000780)=@ax25={{0x3, @default}, [@rose, @netrom, @null, @netrom, @null, @null]}, &(0x7f0000000680)=0x80, 0xc0800) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB="380000000214000228bd7008fddbdf2508004400", @ANYRES32, @ANYBLOB="08000100010000000500540000000000050054000000000008004400", @ANYRES32=r5, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x4000007}, 0x24040880) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(r9, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="ff7f0000", @ANYRES16=0x0, @ANYBLOB="00012bbd7000fddbdf25170000000c009900010000001a0000000a001a00ffffffffffff0000"], 0x2c}, 0x1, 0x0, 0x0, 0x20044054}, 0x800) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000340)={'tunl0\x00'}) sendmsg$nl_route_sched(r10, 0x0, 0x4800) readv(r8, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x1c}], 0x4) socket$kcm(0x2, 0x0, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r3) 2.160677017s ago: executing program 1 (id=2053): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x80b, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r2, 0x9362, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, r6, {0x0, 0x3}, {0xffff, 0xffff}, {0x7}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x3b9aca40f}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x1}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24040040}, 0x24044041) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001800000200f8dbdf261d010600000000e24196174ad67cd5a199ad6cf81e69767b179f0a5b79be6377b75e301b9f25"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r8 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0) r9 = socket$inet(0x2, 0x400000000008000e, 0x2) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c00)=@newtaction={0xe68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x7, 0x1, 0x10000000, 0x4, 0xaef}, 0x7, 0x7}, [{0x8, 0xffbff000, 0x2, 0xffff, 0x1ff, 0xafe}, {0xe, 0x2, 0x1, 0x9, 0x4, 0xa}, {0x2, 0xfe73, 0x6, 0x8, 0x2, 0x10000}, {0x80000001, 0x3bf6, 0x4, 0x8, 0xffffff9d, 0x4}, {0x6, 0x44, 0x3, 0x986, 0xffff6d72, 0xbf5}, {0x7ff, 0x8009ef, 0x1, 0x3, 0x9, 0x81}, {0x7f, 0x5752, 0x0, 0x9, 0x7}, {0x9, 0xf7b, 0xa004, 0x8, 0x5, 0x20000a17}, {0x7, 0x200, 0x1000, 0x80, 0x4, 0x1}, {0x7, 0x80000000, 0x40, 0x3, 0xfffffff2, 0x8}, {0x6, 0xfff, 0xe4af, 0x0, 0x8, 0x7}, {0x6, 0xd, 0x230, 0x400, 0x6971, 0xfff}, {0x6, 0x5, 0x6, 0x2, 0x4, 0x3}, {0x84, 0x3, 0x8, 0x7, 0x9, 0xaa7}, {0x5, 0x5, 0x4, 0x80, 0x0, 0x100}, {0x4, 0x8, 0x9, 0x1, 0x2, 0x9}, {0x2690, 0x7ff, 0x11, 0xd, 0x2, 0x722dadd0}, {0x4b, 0x5, 0x9, 0x9, 0x279, 0x3}, {0x7, 0x7b5a, 0x4, 0x0, 0xfffffffb, 0x80000000}, {0x2, 0x0, 0x6fbc79d2, 0x9, 0x401, 0x5}, {0x0, 0x527e, 0xc7, 0x4, 0x80, 0x7}, {0x4, 0xd, 0x5, 0xbd52, 0x80, 0xef35}, {0x9, 0xb, 0x4, 0xb904, 0xfffffff8, 0x1}, {0x3, 0x8, 0xd, 0x1d00, 0x5, 0x400}, {0x8000, 0x74dfe8ce, 0x956b, 0x4, 0x2, 0xfffffff4}, {0xf2, 0x1ee, 0x5, 0xfffffd14, 0x13, 0x40}, {0x0, 0xd, 0x9, 0x6, 0xffffffff, 0x1}, {0x3, 0x1000, 0x1ff, 0x9, 0x3, 0x1}, {0x0, 0xfffffff9, 0x6, 0x3, 0x7fffffff, 0x20000002}, {0xec, 0x8, 0x8f1, 0xfffffffb, 0xa, 0x10000}, {0x6, 0x726, 0x6, 0x8, 0xfff, 0x9}, {0x0, 0x9, 0x3, 0x5, 0x3, 0x2}, {0x4, 0xffff, 0x5, 0xfffffffe, 0x7f, 0x6}, {0x400, 0xf, 0xcf, 0xc, 0x4022, 0x44}, {0x4, 0x4, 0x8, 0xfff, 0x6, 0x1}, {0xffff, 0x3, 0xb5, 0x433, 0x6, 0x6}, {0x10000, 0x0, 0x7, 0x9, 0x20, 0x4}, {0x4, 0x9, 0x3, 0xf90, 0xc, 0x3}, {0x5, 0x657a0ecc, 0x1, 0xa4, 0x4, 0x7}, {0x5, 0xe4, 0x2, 0x4, 0x8001, 0x2}, {0x2, 0xe4, 0xe, 0x2, 0x0, 0x9}, {0x3, 0xff, 0x6, 0x7, 0xd7d6, 0xfffffffb}, {0x42, 0x2, 0x6, 0x7, 0xae45, 0x5}, {0x6, 0x9c, 0x5, 0x80, 0x7fffffff, 0x5}, {0x7, 0x3, 0x3, 0x6, 0x0, 0x4}, {0x7ff, 0x2, 0x8, 0x8, 0x9, 0x5}, {0x1, 0xb, 0xfffffffe, 0x800, 0x0, 0x1}, {0x8, 0x5, 0x3fd, 0x4, 0xffffffff, 0x7}, {0x4, 0x0, 0x6, 0x5, 0x9, 0x9}, {0x3, 0x80000001, 0x9d, 0x1, 0x80000000}, {0xbd, 0xfffffff7, 0x84e5, 0x7f, 0x3a, 0x3fd}, {0x8000, 0x7, 0x2, 0xd8, 0xa}, {0x9, 0x1004, 0x8, 0x6, 0x1, 0x2}, {0x0, 0x9, 0x9, 0xd, 0x8, 0xfffffc00}, {0x1, 0xfffffffc, 0x6, 0xffffffff, 0xc0, 0xfffff44c}, {0x4, 0x3, 0xfffffff5, 0x9, 0xbe, 0x7}, {0x6, 0x3, 0x0, 0x7fff, 0x5, 0x7ff}, {0x400, 0x7, 0x80000000, 0x5, 0xfffffff7, 0x1}, {0x7, 0x100000, 0x5, 0x9, 0xbc, 0x11}, {0x1ff, 0xfffffffc, 0xf, 0x4, 0x1, 0x2}, {0x10000, 0x3, 0x0, 0x111, 0x7, 0x2}, {0x1d, 0x3, 0xda62, 0x200004, 0x0, 0x8}, {0xb8000000, 0xfffffff8, 0x7, 0x9, 0x0, 0x49}, {0x8, 0x401, 0x9, 0x332a, 0x1, 0x2}, {0xfa0, 0x6, 0x7f, 0x7, 0x8, 0x80}, {0x10001, 0x4, 0x400, 0x9, 0x6, 0xdbce}, {0x1, 0x57f, 0x800, 0xe49, 0x0, 0xa81c}, {0x5, 0x8, 0xa, 0xa, 0x100006, 0x8}, {0x7f, 0xf, 0x1, 0x5, 0x401}, {0x7f, 0x4, 0x6, 0x2, 0x3}, {0x625, 0x80000001, 0xfc4, 0xfffffffd, 0x7}, {0x6, 0xfffffffc, 0x95db, 0x3d0b, 0x3, 0x80000001}, {0x7fff, 0x2, 0xffffff7f, 0x381, 0x8, 0x1}, {0x9, 0x4, 0x1, 0x80000000, 0xae, 0x2}, {0x9, 0xffffff80, 0xffff, 0xfff, 0x3, 0x3ff}, {0x9, 0x2, 0xb2f9, 0xbf, 0x1ff, 0x9}, {0xe, 0x310, 0x2, 0xad0, 0x7fffffff, 0x859}, {0x7, 0x6, 0x2, 0x200, 0x6, 0x3}, {0x7bf65384, 0x8, 0xe87, 0x0, 0x3, 0xfffffffd}, {0x3, 0x2, 0x1fd, 0x7, 0x2, 0x6}, {0x3, 0x0, 0x3, 0x80000001, 0xc3, 0xa9d}, {0x8, 0x200, 0x8, 0x8, 0xc}, {0x4, 0x4, 0x13ca, 0x74, 0x2, 0x1}, {0x2, 0x2, 0x1, 0x7fff, 0x14, 0x3}, {0x80000000, 0x4, 0x899, 0xfff, 0x0, 0x1}, {0x5, 0x80000, 0x0, 0x1, 0x3, 0x8}, {0x400, 0x5, 0x3ff, 0x3, 0xd, 0xffffffff}, {0x2, 0x20000000, 0x3, 0x6, 0x81, 0x5}, {0x6, 0x7ff, 0x1, 0x3f, 0x9, 0x7}, {0x8, 0x0, 0xd, 0x6, 0x5}, {0x3, 0x7, 0x1, 0x3b1c, 0x2, 0x6}, {0x4, 0x49354bbb, 0x2, 0x3, 0x7, 0x9}, {0x5, 0x2, 0x10, 0x9, 0x2, 0x400}, {0x40000fff, 0x54, 0x8, 0xc, 0x0, 0x6}, {0x400, 0x0, 0xff, 0x6, 0x3, 0x3}, {0x80000000, 0x7d, 0x2, 0xb, 0x84, 0x3}, {0xc45c, 0xa, 0x0, 0x2, 0x4, 0x2}, {0x7, 0x6, 0x86, 0x9, 0x3, 0x8001}, {0x3a, 0x7eb, 0x4, 0x9, 0x9, 0x405}, {0x7011, 0xfff, 0x9, 0x1, 0x40000009, 0x2}, {0x1, 0xff, 0x8, 0x2968, 0x2, 0xfffffffc}, {0x0, 0x9, 0xc402, 0x2, 0x100, 0xc72}, {0xfffffff9, 0x5, 0x81, 0x26, 0x9, 0x1}, {0x7ff, 0x81, 0xfffffff8, 0x401, 0x5, 0x3ff}, {0x3, 0x6, 0xd, 0x0, 0x6e5f, 0x80}, {0x4, 0x3ff, 0x7, 0x0, 0x0, 0x6}, {0x0, 0x4, 0x7f, 0x4, 0x10, 0x4}, {0x7, 0x4, 0x81, 0x6, 0xa, 0x7}, {0x3, 0xff, 0x2, 0x7f, 0x4, 0x5}, {0x8000, 0x8, 0xd, 0x700000, 0x5, 0x4}, {0xcab, 0xf, 0x4, 0xf, 0x8, 0x7}, {0x4, 0x8000, 0x3, 0x5, 0x7, 0x34}, {0x0, 0x6, 0x10000, 0x8, 0xbb, 0x7fffffff}, {0x2, 0x9, 0x9, 0x9, 0x80, 0x7}, {0x39e3, 0x9, 0x1ff, 0x0, 0x31, 0x3}, {0xfffffffc, 0x4, 0x0, 0xbe50, 0x40, 0x7}, {0xe, 0x9, 0x7, 0xffffffff, 0xd, 0x1}, {0x5, 0x1000, 0x9, 0x7ffc, 0x24e, 0x1}, {0x7, 0x7, 0x7, 0x80000000, 0x1, 0x5}, {0x7, 0x9, 0x4, 0x8dad, 0x6, 0x4000b}, {0x1, 0x101, 0x3, 0x7, 0x4, 0x7}, {0x3ff, 0x3, 0x5, 0x2, 0x0, 0x2}, {0x2, 0x5, 0x7, 0x5, 0x2, 0x8}, {0x3c, 0x3409, 0x3, 0x5, 0x997c, 0x2df0}, {0x2, 0x9, 0x10001, 0x8711, 0x800}, {0x81, 0x0, 0x1, 0x1db, 0x0, 0xb}, {0x2, 0x5, 0x2, 0x5, 0x0, 0x7}, {0x8, 0xdfd3, 0x8, 0x2, 0xfffffffe, 0x2}], [{0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x6}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x5}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {}, {0x2, 0x1}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {0x5}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0xe691a73254f1a9a5, 0x1}, {0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5}, {0x5}, {}, {0x2}, {0x4, 0x1}, {0x0, 0x3}, {0x2}, {0x2}, {0x1}, {0x5, 0x1}, {0x2}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x5}, {0x0, 0x1}, {0x5}, {}, {0x5}, {0x4}, {0x5}, {}, {0x5}, {}, {0x2}, {0x3}, {0x0, 0x1}, {0x5, 0x2}, {0x2, 0x1}, {0x3}, {0x5}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {}, {}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x708aee799a2a8f33}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x3}, {0x2}, {0x1, 0x1}, {0x4, 0x1}, {0x1}, {}, {0x6}, {0x5, 0x1}, {0x2}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {}, {0x1, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {}, {0x1}, {0x3}, {0x2}, {0x4}, {0x4, 0x1}, {0x2}, {0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xe68}, 0x1, 0x0, 0x0, 0x4}, 0x20000015) sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f00000002c0)={0x0, 0x8}, 0x8) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000300)=0xb50b, 0x4) bind$inet(r9, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r9, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r9, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r9, 0x6, 0x15, &(0x7f0000000280), 0x4) write$cgroup_subtree(r8, &(0x7f0000000140)=ANY=[@ANYRES32=r0, @ANYRES64=r7, @ANYRES8=r2, @ANYRES8=r8], 0xfe33) 2.028626888s ago: executing program 2 (id=2054): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x11, 0x4, 0x4, 0x2}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x11}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x30, 0x3, 0x8, 0x201, 0x0, 0x0, {0x2}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0x7fff}, @CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0x65}]}]}, 0x30}}, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r2, 0x40047211, &(0x7f0000000000)=0x10) 1.943404194s ago: executing program 1 (id=2055): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b702000000070000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000be000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495dd, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x2000012, 0x8ff, 0x0, &(0x7f00000004c0)="4133c9e924380000000000000000", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c", 0x15) r1 = socket$igmp(0x2, 0x3, 0x2) socket$kcm(0x2d, 0x2, 0x0) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000100), 0x4) unshare(0x22020600) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$sock_int(r2, 0x1, 0x3, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, 0x0, 0x0) setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2e, &(0x7f0000000540)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x1000, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300, {[@generic={0x88, 0x2}]}}, @echo={0x8, 0x0, 0x0, 0x6, 0x3}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000200)={@empty=0x1f, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x40, 0x40000006}, 0x3c) r5 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$inet(r5, &(0x7f0000000680)={&(0x7f0000000040)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000540)='\x00', 0x1}, {0x0, 0x55}], 0x2}, 0x4008058) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x20, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000008000000000000000900000018110000", @ANYRESHEX=0x0, @ANYBLOB="0000000000000000b702000014000000b7030000fffe00008500000086000000bf09000000000000550901000000008097000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000feffffff85000000060000003500fcffffffffff1801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000080010008500000006000000bf91000000000000b702000003000000850000002a000000b70000000005000095"], &(0x7f0000000200)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000d}, 0x94) 1.764352144s ago: executing program 2 (id=2056): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="c3aa00fea000000071101a0000000000950000000065bf003a80036c74f8fe130e995b8904bd9936277af04286e8dc43e1a4bff50a8f9e44d9392d2874cf6eeef5a4a4f46806a56902321d6393e5525fe4a974832c85f96cc358619a58a912cf4cc61a63018275d8f59dc94708619e2874ca73"], 0x0}, 0x94) r1 = socket(0x8, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x16, 0x4, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x5, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000800), 0x42901, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) r5 = socket$packet(0x11, 0x3, 0x300) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="00000000b1adbd1432ce7c54b4c4c2a084e4fc100d0c1faad845a2565f4f48862ea92fb2f62591ace190383a3512f4bcd2c131fae1ac7a17965fe10c412a1beb503e8a10014ce24fa8613b", @ANYRES16=0x0, @ANYBLOB="0100ffffffff000000002f000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000041}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xd, &(0x7f0000000280)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8, 0x0, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, @exit, @cb_func={0x18, 0x6, 0x4, 0x0, 0x2}, @exit]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xc}, 0x94) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0)={0x2, 0x4, 0x1, 0x7433}, 0x8) bind$packet(r5, &(0x7f0000000240)={0x11, 0xf6, 0x0, 0x1, 0x90, 0x6, @multicast}, 0x14) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000240)=ANY=[], 0xfdef) 1.761287602s ago: executing program 4 (id=2057): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000091118300000000009500000000000000dcd2bcd7effff1273599f07dc264ee22728a2a58dbb0d73a941bfacb45e6b1d405281d66ff762b1157dba5322b62ee79609738a6280ddb0c4317105575781f3f2f1b61dc8d3d9636c13bfb0749e904b548b62b1f51ce4c114fac5683f8a9f06b73ea35"], &(0x7f0000000c40)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94) (async) r1 = socket$igmp6(0xa, 0x3, 0x2) (async) ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f0000000040)) (async) r2 = socket$kcm(0x2, 0xa, 0x2) r3 = socket$inet6(0xa, 0x3, 0x4) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x43, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @multicast}) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_lsm={0xd, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="350a0000000000006111ac00000000009500a28e5fe39ae911000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) (async) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'batadv_slave_0\x00', {0x2}}) write$tun(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5", @ANYRES16], 0x72) 1.760635862s ago: executing program 3 (id=2058): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x20, r2, 0x1, 0x70bd6c, 0x0, {0x1a}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000801}, 0x40) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}) write$tun(r0, &(0x7f00000003c0)={@val={0x0, 0x892f}, @val={0x3, 0x80, 0x10, 0x1, 0x8, 0x4}, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @broadcast, @val={@val={0x88a8, 0x7, 0x0, 0x1}, {0x8100, 0x0, 0x0, 0xfff}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @empty, @dev={0xac, 0x14, 0x14, 0x37}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}, @broadcast}}}}}, 0x40) 1.374753859s ago: executing program 4 (id=2059): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r0) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x34, r1, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xffffffffffff0183}}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0xc000000}, 0x40054) 1.370603901s ago: executing program 0 (id=2060): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x4) r2 = socket$inet(0x2, 0x80001, 0x84) listen(r2, 0x3a5) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001400190d09004beafd0d36020a8429000b4e230f00000000a2bc5603ca00000f7f89004e002050da742dac0000000101ff05020003000200000000000100000000005839", 0x48}], 0x1) r3 = socket$inet_sctp(0x2, 0x5, 0x84) listen(r3, 0x9) sendmmsg$inet_sctp(r3, &(0x7f0000004840)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@sndinfo={0x20, 0x84, 0x2, {0x9, 0x8200, 0xb0, 0x1}}], 0x20}], 0x1, 0x8000) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x138, r4, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x124, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'ib', 0x3a, 'hsr0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x9, @ipv4={'\x00', '\xff\xff', @local}}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xb}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x665}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x7, @remote, 0x8}}}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x24000010}, 0x8000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a3100000000b0000000030a01011100000000000000010000000900030073797a3100000000700008800c00014000000000000000000c00014000000000000000030c00024000000000000000020c000240000000000000608b0c00014000000000000000050c00014000000000000000600c00014000000000000000060c00014000000000000000080c00024000000000000100000900010073797a310000000014000480080002407c40280f080001"], 0x114}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 1.332324348s ago: executing program 4 (id=2061): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x4004805) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x18, 0x3, "c6a41d10ff0000f500e906000000000000070000"}, @NFTA_MATCH_NAME={0xa, 0x1, 'owner\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x4048010) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r4) sendmsg$NLBL_MGMT_C_LISTDEF(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="01062abd7000ffdbdf250600000006000b000a"], 0x1c}, 0x1, 0x0, 0x0, 0x4004001}, 0x40) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x200, 0x70bd2d, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040041}, 0x2000c000) 1.250849321s ago: executing program 1 (id=2062): r0 = socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'ip6tnl0\x00', 0x0, 0x2f, 0xb3, 0x0, 0x7fffffff, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, 0x1, 0x700, 0x7f, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f00000001c0)={'syztnl0\x00', r1, 0x2f, 0x1, 0x3, 0xaa, 0x1, @mcast2, @local, 0x7, 0x7800, 0x8, 0xf9b1}}) r2 = socket$packet(0x11, 0x2, 0x300) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000003801000020696c2500000000002020207f1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) (async) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0x14, 0x0, &(0x7f0000000140)="259a53f271a76d2608004c6588a8d6dc03d5cc2a", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.2446552s ago: executing program 3 (id=2063): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f000000040000000800000008"], 0x50) ioctl$NILFS_IOCTL_GET_CPSTAT(r0, 0x80186e83, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000010400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000200000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002cc0)=@newtaction={0x488, 0x30, 0xffff, 0x0, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0xfffffffc, 0x0, 0x0, 0x0, 0x20000, 0x733f, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xcff, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x5, 0x0, 0x8000, 0x0, 0xf23fd53b, 0x0, 0x0, 0x4, 0x4, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, 0xfffffffc, 0x0, 0x0, 0x200, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x1, 0x80000, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, 0x0, 0x0, 0x2000, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0xc192dfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1000, 0x0, 0x40, 0x0, 0x2, 0x0, 0x0, 0x0, 0xad6, 0x0, 0x0, 0x5b3, 0x0, 0xfffff7fd, 0x0, 0x0, 0xffffffff, 0xfffffffd, 0x0, 0x9, 0x1, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x5, 0xd, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0xb, 0x1000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x8, 0x0, 0x5, 0x0, 0x80000, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2e, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1800]}], [@TCA_POLICE_TBF={0x3b, 0x1, {0xe, 0x1, 0x4, 0x80000004, 0x4, {0x5, 0x2, 0x8, 0x1, 0x7, 0x1f7}, {0x8, 0x0, 0x6, 0x800, 0x21ff}, 0x3, 0x82e, 0x9}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x3}}}}]}]}, 0x488}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f00000019c0)="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", 0xb1}, {&(0x7f0000000600)="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", 0x92}, {&(0x7f0000001b00)="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", 0x1000}], 0x14) (async) writev(r2, &(0x7f0000000000)=[{&(0x7f00000019c0)="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", 0xb1}, {&(0x7f0000000600)="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", 0x92}, {&(0x7f0000001b00)="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", 0x1000}], 0x14) socket$packet(0x11, 0x3, 0x300) (async) socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x1c, 0x26, 0x109, 0x870bd22, 0xfffffff9, {0x2}, [@typed={0x5, 0x14e, 0x0, 0x0, @binary='\r'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000800)=0x10000) (async) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000800)=0x10000) r6 = accept$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @local}, &(0x7f0000000780)=0x1c) r7 = accept$inet6(r6, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, &(0x7f00000005c0)=0x1c) sendmsg$inet6(r7, &(0x7f0000000dc0)={&(0x7f00000002c0)={0xa, 0x4e21, 0x8621, @remote, 0x1}, 0x1c, &(0x7f0000000d00)=[{&(0x7f0000000300)="3b461619d07d881124fa3b9895832b0a9d4d0d18d5704126eff8118e9af66380bca09ef6d9fd77e66869ef2adca4cb30782ca27bed571b595869bb201f8eedc5f1a2953479d02cf7a236ee6c77858d4fb6096f05f10cb56a59fc87cfa0ab7e10c49a0a6856fc6ec2d4fee6adcd07d17b6b67413e", 0x74}, {&(0x7f0000000480)="cfd17d998198c4f9fcb945df5ed2b236119381ffd424fa648c39718324b50a8407d50f6f7cf5fd29d1e0f71cf8729d9bc42f3ace0f42dd0aeb66ba7bebd3c6b6ad4c35e2c084f434ac07f566eb6bf732017bf582cd09c41a9791acb5a63bcad816f92767705dd71705cb983379e0faeed5a9577e3be0ae983ccfdf3a5ec0babc4307ebdb6bc2899302a62857d045c8ced59799ec9f409b4618e8c1619158c828f99cb105fcdad51e160cf5d52ca855079869", 0xb2}, {&(0x7f00000009c0)="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", 0xff}, {&(0x7f0000000ac0)="c60627d2a13b0ca2df15ee3cbec886caa561d381d2dd88c3b677decd2343a5ba896a631fdb096152bbf60c8b20bfeb2a6fbbebb2e807b73fb905ca2019d08333d421c7a78f61384ed35772", 0x4b}, {&(0x7f0000000b40)="67e42d6de3e38687a0343fc9363672428133d9dbf40335f2d5f3fa7f8a248e59f5af7869ae04e18d92c670cf7fb2af5414fe0983e2f20e21a34c14bc18ba5947a1826fc21e9bede5c491bef4d8ce8f2b39a0a245036a0b8611e978533bfd37e409fc971937e8a5372b56805aa705302483afd1150fc0c7188b4f7a35bdadf0d96e8901ca80c6c80dc13213da0f4217f8ea1df1635a2cd1ea6f6577543e8c4ff60d5842507e2369101fe62922c18012af2b4e4784d23598a61c81c5caef362129e63e50919e", 0xc5}, {&(0x7f0000000c40)="35fa78896c6d789e761f0675410de093984506bd62b939e6cd38bd3092bbef20d22f275290f92b615a3243587c4d4441cfdf3955b7d01cf4a6a149e0179cd338b73fe73de9dbb4c15af4c7b13de3341d349565cd43f2b80212af99514eebb6a9252883e3ab11c09c5574541438e53e983573965550bab2b71e9877a2fa6eba1bce0a", 0x82}], 0x6, &(0x7f0000000d80)=[@dstopts={{0x20, 0x29, 0x37, {0xff, 0x0, '\x00', [@padn={0x1, 0x1, [0x0]}]}}}], 0x20}, 0x20004001) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000040)) r9 = socket(0x2, 0x805, 0x0) getsockopt$inet_mptcp_buf(r9, 0x11c, 0x2, &(0x7f0000003180)=""/4096, &(0x7f0000004180)=0x1000) (async) getsockopt$inet_mptcp_buf(r9, 0x11c, 0x2, &(0x7f0000003180)=""/4096, &(0x7f0000004180)=0x1000) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}, @in={0x2, 0x4e20, @remote}]}, &(0x7f00000007c0)=0x10) (async) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}, @in={0x2, 0x4e20, @remote}]}, &(0x7f00000007c0)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r9, 0x84, 0x1, &(0x7f0000000180)={r10, 0x2, 0x6, 0x80000000, 0xa18c, 0x8}, &(0x7f00000001c0)=0x14) (async) getsockopt$inet_sctp_SCTP_ASSOCINFO(r9, 0x84, 0x1, &(0x7f0000000180)={r10, 0x2, 0x6, 0x80000000, 0xa18c, 0x8}, &(0x7f00000001c0)=0x14) bind$alg(r9, &(0x7f0000000e00)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4309(rfc4543(ccm(compress_null-generic)))\x00'}, 0x58) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000540)={r10, 0x6, 0x0, 0x4, 0x200000}, 0x14) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWSETELEM={0x58, 0xc, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2c, 0x3, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPR={0x20, 0x7, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x80000001}]}}}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000001580)=ANY=[@ANYBLOB="1800000000100000000000000000000062012c000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000001580)=ANY=[@ANYBLOB="1800000000100000000000000000000062012c000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) 1.101111964s ago: executing program 4 (id=2064): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000080)={'sit0\x00', @random="6fd18c2ddca3"}) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x400000, @private1}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000040)="fd", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r2, 0x1) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r3, &(0x7f0000000280)={&(0x7f0000000040), 0x10, 0x0}, 0x0) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000280)) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f00000000c0)={0x0, 0x8, 0x8, 0x6bb}, &(0x7f0000000180)=0x10) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x240040d0}, 0x20044850) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000200)={r5, 0x5}, &(0x7f0000000400)=0x8) r6 = socket(0x15, 0x5, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x94}}, 0x400c004) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f0000000240)={0x4, 0x6d49, 0x200, 0xffff, 0x100, 0x6, 0x5, 0x10}, 0x20) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="67d0fa27", 0x4}, {0x0, 0x38}], 0x2) 1.084721889s ago: executing program 1 (id=2065): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14, 0x80800) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000180)=@req3={0x7, 0xd, 0x86, 0x9, 0x10, 0x2, 0xc7}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@ipv4_getnetconf={0x14, 0x52, 0x800, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4000004) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) 983.951153ms ago: executing program 0 (id=2066): mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, 0xffffffffffffffff, 0xc6e9f000) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@fallback=r0, r0, 0x2f, 0x8, 0xffffffffffffffff, @void, @value=0x0}, 0x20) (async) r1 = accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14, 0x80000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000200)={'syztnl1\x00', 0x0, 0x29, 0x2, 0x3, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x41}, @private1, 0x80, 0x40, 0x3, 0x1}}) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f00000002c0)={r2, 0x1, 0x6, @broadcast}, 0x10) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)={@fallback=r0, r0, 0x2f, 0x0, 0x0, @void, @value=r0}, 0x20) mmap(&(0x7f0000d8c000/0x1000)=nil, 0x1000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) (async) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x7000000, 0x6e073, 0xffffffffffffffff, 0x100000000) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000980)={0x0, "fadfdaca9cdb6a4fb829b7b6ec878846"}) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@ipv4_delroute={0x1c, 0x19, 0x115, 0x70bd2b, 0x25dfdbfd, {0x2, 0x18, 0x10, 0x0, 0xff, 0x4, 0xfd, 0x0, 0x1000}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$vsock_stream(0x28, 0x1, 0x0) pipe(0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x4a, &(0x7f0000000300)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, '\x00', 0x14, 0x6, 0xff, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x10, 0x7, 0x0, 0x3}}}}}}}, 0x0) (async, rerun: 64) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @random="f4cc31e5135e", @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, "9eebf9", 0x18, 0x6, 0xff, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x6, 0xc2, 0x1, 0x0, 0xffd, {[@window={0x3, 0x3, 0x7}]}}}}}}}}, 0x0) (rerun: 64) 894.864431ms ago: executing program 4 (id=2067): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={0xffffffffffffffff, 0xfeffff, 0x78, 0x0, &(0x7f0000000700)="c45c57ce395de5b289f07d637a223920f181c2e57d71483cfb2d075a3ff07258e080a194805cdb0c26d3f7ffb1e0d9cf4fa36dcb2168b72de48ac8f93e6804f1c4d70898d0810e044d7e1778eaac5dfdcc9f1208905522025bcfdf1b6f969b094d5c022c2b7ffefde71e0627b9a2069cc1e0175c4b8860aa", 0x0, 0xf0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000000)=""/4102, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24048014}, 0x20048804) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24048014}, 0x20048804) writev(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) (async) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848130000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@dellink={0x20, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x42013, 0x2020e}}, 0x20}, 0x1, 0x0, 0x0, 0x20000886}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@dellink={0x20, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x42013, 0x2020e}}, 0x20}, 0x1, 0x0, 0x0, 0x20000886}, 0x0) unshare(0x20000400) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(r5, &(0x7f00000025c0)=[{&(0x7f0000003740)=""/4096, 0x1000}], 0x1, 0x0, 0x1) 890.152888ms ago: executing program 3 (id=2068): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x12, 0x1, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x1e) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r3, &(0x7f0000000040)}, 0x20) write$tun(r0, &(0x7f0000000500)={@val={0x0, 0x22f0}, @void, @eth={@dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@void, {0x6558, 0x0, 0x0, 0x20}}, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x6, 0x40, 0x68, 0x0, 0x2, 0x6, 0x0, @empty, @multicast1}, @payload_mcast={{{{{{0x2c, 0x0, 0x1, 0x1, 0x1, 0xb, 0x0, 0x2, 0x400, 0x0, 0x3, 0x0, 0x1, 0x1, 0xe3, 0x9, 0x0, 0x4e22, 0x4e24}, 0x6}, 0x1}, 0x3}}}}}}}}, 0x56) 846.400855ms ago: executing program 1 (id=2069): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000500)=ANY=[@ANYRES64=0x0, @ANYBLOB="ce5d2d04b2e41a3c2c624b3c1cb08916800e30827d33cd5388ed5669b7e2d381a7f2cea4c39fc41822110338ba6f77f48be2929a73be704bad8ea5ef11eed68bdf724c990715311f9aac1857885e84886a4f86d3800ac87473d52da70a0c6834ce95963e9cbf1a3e886688b586134fe7d270ea02b833fa7f820e72394fa40caaca53e275aefa3a2c3c316ac578989c9b683359579dc4ff001311663f415cdeb502492f1b2d905d121f153afdc61fbfb1", @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8fffdffb702000008000000b50af8ff00000000850000000600000095"], &(0x7f0000000140)='syzkaller\x00', 0x2, 0xf1, &(0x7f0000000740)=""/241, 0x0, 0xc}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2e0, 0xe3, 0x0, &(0x7f0000000100)="b9ff03076044238cb89e0cf086dd0de0ffff00184060630677fbac141414e000000162079f4b4d2f87e5feca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="021800001c000000000000000000000005000600000000000a00000000000000000000000000000000000000000000000000000000000000020012000000000000000000fcffffff0600ff0000000000000000000000000000000000000000000000000001000000fe8000000000002100000000000000bb050005002b0000000a00000000000000fc01000000020000000200000000000000000000000000000800"], 0xe0}}, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x38, r3, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4246}, @TIPC_NLA_NET_NODEID={0xfffffffffffffdbc, 0x3, 0x8}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r4) sendmsg$WG_CMD_GET_DEVICE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="dc9a51e299888bef7b6db0c10000080001006b09073b8c222e522094d93be79b6632e1a41f72729502c25a1f2da17a9c27648aa907d8ebe96ba44bb0d86cb1b1819e00668b91f2c013f5dc68c80db1", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x24044800) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x9, [@struct={0x4, 0x1, 0x0, 0x4, 0x1, 0x7, [{0x1, 0x3, 0x9}]}, @int={0x5, 0x0, 0x0, 0x1, 0x5, 0x20}, @typedef={0x7, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x61, 0x0, 0x30, 0x2e, 0x61, 0x61, 0x61]}}, 0x0, 0x55}, 0x28) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=ANY=[@ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800b000100697036746e6c00002000028014000300fe8000000000000000000000000000aa050009002900000008000400000001"], 0x58}, 0x1, 0x0, 0x0, 0x48844}, 0x0) 698.609291ms ago: executing program 0 (id=2070): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac14"], 0xfdef) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f0000000080)=@add_del={0x2, &(0x7f0000000040)='veth1_to_team\x00'}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x3e8, 0xe80, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68886dd87", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 690.377658ms ago: executing program 2 (id=2071): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f00000004000000080000000c"], 0x50) (async) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="37bd700000000000020000"], 0x28}, 0x1, 0x0, 0x0, 0x44814}, 0x4040000) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r2) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYRESHEX=r3, @ANYRESDEC=r1], 0x1c}}, 0x4008054) (async) r4 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000008c0)=ANY=[@ANYBLOB="e00000001000090503000000000000080800d20001000000a5000000a7e2fa2800000000123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004060000000000bf852c8986626691b01b5f44e4ce2871285f2828289423debbb86f9dba4a2dba4dbe076c02262600c446a567de243ab0d67683f7bb11c9cab3b3eed8487b9120389cf176fed77989ef3fefa8bef4ff01f0ffffffffffffc1a66db4424a8ba100022db228bb7b5eb5100e434db5dd5e995aa0912086d9f4606d2e4cc898739222c5d3a83cb6dc07f33363360000002000008014000100fe8800000000000000"], 0xe0}], 0x1, 0x0, 0x0, 0x1}, 0x40040) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), r2) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), r6) (async) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000680)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100fdffffff000000001d00000008000300", @ANYRES32=r8, @ANYBLOB="60002f8008000100000000000c0002000202aaaaaaaaaaaa480003803100040091f60000340003800800020001000000060001000000000008000200020000000800020002002000060001000000000006000300a2aa00000800010000000000"], 0x7c}, 0x1, 0x0, 0x0, 0xd49920d352514f42}, 0x4000040) sendmsg$NL802154_CMD_SET_TX_POWER(r2, &(0x7f00000005c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00012abd7000fcdbdf2537e00000080003000000001096416d3924501430fa9499d874131f2a7c6e08ecbb90b4f667e3", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r8, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x884) write$nci(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="7103b3"], 0xb6) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r9, 0x29, 0x2b, &(0x7f0000000440)={0x9, {{0xa, 0x4e21, 0x4, @empty, 0x7}}, {{0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xe}}}, 0x108) (async) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), r10) sendmsg$NLBL_CIPSOV4_C_ADD(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB='j\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000000100000008000100030000002c0004800500030080ff00000500030080ff00000500030080ff0000050003000100000005000300800000000800020003"], 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r12], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r13, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r14, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) (async) r15 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000800000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r15, 0xc00, 0x95, 0x0, &(0x7f00000009c0)="e0d7c27225824791b9547ed387dbe9abc89b6f5bec54745ccba583a031312acfe55318ab466b627f5e5a6dbc630860aa940229ad7b041c4c9158694f798a0398950647e86ad366f39b3cf341e03250803d1c4c9e30c230f716f1eaff37ec6c2690ee4595074536eb1c1599b8f02eea8c4da47e591b905ba495fa6cf92e744edfe681aa98ba54f46fec686e00"/149, 0x0, 0x4002000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x50) 403.398303ms ago: executing program 2 (id=2072): syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000980)=@nat={'nat\x00', 0x670, 0x5, 0x458, 0x218, 0x218, 0xfeffffff, 0xf0, 0x218, 0x3c0, 0x3c0, 0xffffffff, 0x3c0, 0x3c0, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [0x4e23], 0x0, 0x0, 0x2, 0x8}}, @common=@inet=@socket2={{0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x4000000, 0x4000000, 0x1000000, 0x4000000]}}}, @common=@set={{0x40}, {{0x0, [0x218]}}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@private=0xa010102, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@private=0xa010101, @ipv4=@dev}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b8) (async) r1 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, 0x0, &(0x7f0000000040)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000180), 0x4) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001940)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000000000000850000006d00000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x380, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001200)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f07df33c9f7b986", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], 0x0}, 0x94) (async) socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x0, 0x0, 0xfffffffffffffef4, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x50) (async, rerun: 64) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r6, 0x800452d3, &(0x7f0000000200)) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async, rerun: 64) r7 = socket$inet_sctp(0x2, 0x1, 0x84) (rerun: 64) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}], 0x10) (async) listen(r7, 0x7) (async, rerun: 64) recvfrom(r7, &(0x7f00000004c0)=""/244, 0xf4, 0x101, &(0x7f00000005c0)=@rxrpc=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e24, 0x7fffffff, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x7f}}, 0x80) (async, rerun: 64) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000180)=0x3, 0x4) (async) bind$inet6(r8, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) (async, rerun: 32) socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 32) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r9, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) 246.711091ms ago: executing program 1 (id=2073): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket(0x10, 0x80002, 0x0) recvmmsg$unix(r4, &(0x7f0000002380)=[{{0x0, 0x3f, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}}], 0x4000000000003b9, 0x26022, 0x0) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000140)=0x7, 0x4) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001380)={0x1b, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4}, 0x50) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32=r7, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001580)=0xffffffffffffffff, 0x4) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001640)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x2}, 0x50) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000016c0)={0x1b, 0x0, 0x0, 0x7ff, 0x0, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3}, 0x50) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xdca3, '\x00', 0x0, 0xffffffffffffffff, 0x3}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001840)={0x18, 0xf, &(0x7f0000001400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001480)='GPL\x00', 0xa, 0x91, &(0x7f00000014c0)=""/145, 0x41000, 0x32, '\x00', r7, 0x0, r8, 0x8, &(0x7f00000015c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001600)={0x5, 0x6, 0x8, 0xffff}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000017c0)=[r9, r10, r11], &(0x7f0000001800)=[{0x5, 0x1, 0xe, 0xb}, {0x4, 0x3, 0x0, 0x2}, {0x0, 0x5, 0xd, 0x9}, {0x3, 0x5, 0x8}], 0x10, 0x9}, 0x94) r12 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000002d40)=@newtaction={0x44c, 0x31, 0x1, 0x0, 0x0, {}, [{0x438, 0x1, [@m_police={0x434, 0x1e, 0x0, 0x0, {{0xb}, {0x408, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x8, 0x6, 0x8000, 0x5, 0x1, 0x7ff, 0x1, 0x10000, 0x7, 0x0, 0x10000, 0x4, 0x9, 0x6, 0x5, 0x8, 0x1000, 0x0, 0x1, 0x4, 0x4, 0xa0, 0x32d4, 0xa, 0x80000000, 0x10000, 0x4f7, 0x0, 0x9, 0x3, 0xfffffff5, 0x7, 0x3, 0x4, 0x80ed, 0x7fff, 0xfffffff9, 0x4, 0x4, 0x6, 0x0, 0xb6, 0x7f, 0x43, 0x2, 0xfffffffb, 0x1, 0x8, 0x3, 0x9, 0x4, 0x1, 0x905, 0x7, 0x4, 0x3, 0x1, 0x7, 0xffffffff, 0x58, 0x9, 0x7ff, 0xad, 0x1002, 0xffffff61, 0x8a8, 0x1, 0x0, 0x8, 0x5, 0xffff8000, 0x1, 0x5, 0xffffffff, 0x4, 0xb, 0x1, 0x42, 0x10001, 0x302160e2, 0x0, 0x1, 0xff, 0x4, 0x80, 0x3, 0x4, 0x1, 0x7, 0x1, 0x6, 0xfffffffc, 0x81, 0x7, 0x66d3, 0xffffbfff, 0xef2, 0x9, 0x6, 0x7fffffff, 0xe52, 0x7, 0x4, 0x2, 0x0, 0xffffffff, 0x7fffffff, 0x3, 0x200, 0x2, 0x2, 0x9265, 0x3, 0x8, 0xff, 0xb58, 0xe3, 0x0, 0x7000, 0x9ae, 0xe, 0x0, 0x550, 0x2, 0x59, 0x4ca, 0x559b, 0x0, 0x2, 0x12, 0x400, 0x37, 0x1ff, 0x1, 0x6, 0x4, 0xc40, 0x7, 0x1, 0x74, 0x5b, 0x9, 0x10000, 0x401, 0xc, 0x59b1, 0xd117, 0xf, 0x7, 0x4, 0xff, 0x10080, 0x80000001, 0x9, 0x1, 0x2, 0x2, 0x8, 0xfffffbff, 0x43, 0x1, 0xc, 0x2, 0x38a9, 0x8568, 0x8, 0x3, 0x80000001, 0x4404, 0x1, 0x1020, 0x3ff, 0xf4d, 0x63ae, 0xffffff00, 0xffffffff, 0x9, 0x81, 0xd8, 0x8, 0x1, 0xc1e4, 0xfffffff9, 0x8, 0x3, 0xb, 0x7, 0x1, 0x0, 0x8, 0xc, 0x7, 0x1, 0xe, 0x0, 0x6b687e82, 0x8, 0x8, 0x0, 0x66, 0x7, 0x8, 0x7, 0x3, 0x8, 0x0, 0x6, 0x80, 0x6, 0x68f, 0x7, 0x2000003, 0x7, 0x8, 0xfff, 0x2, 0xe7d, 0x4, 0x5f1, 0x3, 0x7, 0x9, 0x4, 0x1ff, 0xfffffffd, 0xf45b, 0x8, 0x76, 0x1, 0x7d43, 0x800, 0x4, 0x80000001, 0x8, 0x8, 0x80000000, 0x400, 0x2, 0x800000, 0x1e, 0x40, 0x5, 0x4, 0x9, 0x2, 0xffff, 0x80000001, 0x8, 0x1c000000, 0x84d1, 0xff, 0x84, 0x9, 0x2, 0x9]}]]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x44c}}, 0x8000) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r13 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r14, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r14, {0x2, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_LABEL={0x8, 0x5, {0x4}}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@dellinkprop={0x4c, 0x6d, 0x2ec9b2c728e3c67, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1080, 0x8000}, [@IFLA_PROP_LIST={0x18, 0x34, 0x0, 0x1, [{0x14, 0x35, 'ip6_vti0\x00'}]}, @IFLA_IFNAME={0x14, 0x3, 'ip_vti0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 245.002577ms ago: executing program 2 (id=2074): r0 = socket$alg(0x26, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async, rerun: 32) r2 = socket$kcm(0x2, 0xa, 0x2) (rerun: 32) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000360ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000106"], 0xffe) (async) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) (async) r3 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x3}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000600)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x1592e566}], 0x2}, 0x0) 2.732047ms ago: executing program 3 (id=2075): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004044}, 0x20040084) (async) r4 = socket$unix(0x1, 0x1, 0x0) (async) r5 = socket$kcm(0x11, 0x3, 0x0) (async, rerun: 64) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x2a0a00, 0x0) (rerun: 64) close(r6) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=r5, @ANYBLOB="0200200000000000000000000100000000000000", @ANYRES32=r3, @ANYRES32, @ANYBLOB="04000000030000000400"/28], 0x50) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async, rerun: 32) r7 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r7, &(0x7f0000000ac0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000880)={0x1f0, r8, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x2c, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x80, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xda6eb297ae6ce612}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xc}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x110, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xa12326d745de71fb}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x11}, 0x40000) (async) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async, rerun: 64) socket(0x400000000010, 0x3, 0x0) (rerun: 64) socket$unix(0x1, 0x1, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r9, &(0x7f00000bd000), 0x2d, 0x20040040) (async, rerun: 32) r10 = socket(0x10, 0x803, 0x0) (rerun: 32) sendmsg$IPVS_CMD_SET_INFO(r10, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r11, @ANYBLOB="01000000000000001c0012000c000100bf585e1216bf2189046a5429bcc0626f6e"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newlink={0x34, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r11, 0x90656}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x690}, 0x40) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x1, 0x803, 0x0) 0s ago: executing program 4 (id=2076): r0 = socket(0x400000000010, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2, 0xfffff}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10, 0x0, 0x0, 0x2}, @union={0x0, 0x0, 0x0, 0x9, 0x0, 0x2}]}}, 0x0, 0x4e}, 0x28) ioctl$sock_inet_udp_SIOCINQ(r5, 0x5760, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r4, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000003a80)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r7, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x7, 0x2}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r8 = accept$alg(r0, 0x0, 0x0) getsockname(r8, &(0x7f00000002c0)=@un=@abs, &(0x7f0000000340)=0x80) kernel console output (not intermixed with test programs): allmulticast mode [ 162.495240][ T7865] netlink: 'syz.0.617': attribute type 1 has an invalid length. [ 162.510528][ T7877] netlink: 4 bytes leftover after parsing attributes in process `syz.2.621'. [ 163.264181][ T7891] syzkaller0: entered promiscuous mode [ 163.269830][ T7891] syzkaller0: entered allmulticast mode [ 163.511880][ T7896] 8021q: VLANs not supported on lo [ 163.590513][ T7900] netlink: 28 bytes leftover after parsing attributes in process `syz.0.631'. [ 163.647527][ T7900] netlink: 12 bytes leftover after parsing attributes in process `syz.0.631'. [ 163.801090][ T7902] gre1: entered allmulticast mode [ 164.740756][ T7930] tipc: Enabled bearer , priority 10 [ 165.394483][ T30] audit: type=1804 audit(1783894326.192:3): pid=7948 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.644" name="/newroot/120/cgroup.controllers" dev="tmpfs" ino=622 res=1 errno=0 [ 165.466153][ T7948] netlink: 20 bytes leftover after parsing attributes in process `syz.1.644'. [ 165.477956][ T30] audit: type=1800 audit(1783894326.222:4): pid=7948 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.644" name="cgroup.controllers" dev="tmpfs" ino=622 res=0 errno=0 [ 165.537633][ T7948] netlink: 36 bytes leftover after parsing attributes in process `syz.1.644'. [ 165.620281][ T7954] tipc: Started in network mode [ 165.650254][ T7954] tipc: Node identity 22eb373adc9c, cluster identity 4711 [ 165.679884][ T7954] tipc: Enabled bearer , priority 0 [ 165.710807][ T7952] syzkaller0: MTU too low for tipc bearer [ 165.726667][ T7952] tipc: Disabling bearer [ 165.854802][ T5757] tipc: Node number set to 1883522579 [ 166.407108][ T7972] IPVS: set_ctl: invalid protocol: 4 172.20.20.12:20002 [ 166.543634][ T7976] sctp: Trying to GSO but underlying device doesn't support it. [ 166.833019][ T7985] IPv6: Can't replace route, no match found [ 166.848355][ T7988] veth1_macvtap: left promiscuous mode [ 166.920086][ T7985] IPv6: Can't replace route, no match found [ 166.937501][ T7991] netlink: 'syz.1.658': attribute type 11 has an invalid length. [ 167.136945][ T7988] veth1_macvtap: entered promiscuous mode [ 167.324647][ T7996] netlink: 28 bytes leftover after parsing attributes in process `syz.0.659'. [ 167.563031][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 167.975482][ T8011] netlink: 80 bytes leftover after parsing attributes in process `syz.4.664'. [ 168.026902][ T8016] netlink: 12 bytes leftover after parsing attributes in process `syz.1.666'. [ 168.563719][ T8023] netlink: 'syz.4.668': attribute type 1 has an invalid length. [ 168.597948][ T8023] netlink: 224 bytes leftover after parsing attributes in process `syz.4.668'. [ 169.138211][ T8043] ip6tnl2: entered allmulticast mode [ 169.465934][ T6492] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 169.534297][ T91] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 169.570440][ T6492] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 169.923294][ T5758] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 170.444977][ T5749] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 171.013391][ T8092] sctp: [Deprecated]: syz.3.684 (pid 8092) Use of int in maxseg socket option. [ 171.013391][ T8092] Use struct sctp_assoc_value instead [ 171.999349][ T8115] netlink: 8 bytes leftover after parsing attributes in process `syz.0.692'. [ 172.039093][ T8115] netlink: 20 bytes leftover after parsing attributes in process `syz.0.692'. [ 172.108935][ T8114] bond2: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 172.140357][ T8117] netlink: 16 bytes leftover after parsing attributes in process `syz.3.694'. [ 172.159390][ T8114] bond2 (unregistering): Released all slaves [ 172.278355][ T8115] geneve3: entered promiscuous mode [ 172.287195][ T8115] geneve3: entered allmulticast mode [ 172.744512][ T8134] netlink: 'syz.4.696': attribute type 27 has an invalid length. [ 172.785234][ T8136] netlink: 'syz.4.696': attribute type 27 has an invalid length. [ 173.619074][ T8167] netlink: 'syz.2.705': attribute type 1 has an invalid length. [ 173.722858][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 173.947791][ T8136] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.955850][ T8136] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.788149][ T8136] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 174.858655][ T8136] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 175.969493][ T8136] ip6tnl2: left allmulticast mode [ 176.024458][ T8167] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 176.210695][ T6492] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 176.297729][ T6492] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.323580][ T8179] IPv4: Oversized IP packet from 127.202.26.0 [ 176.333526][ T6492] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 176.347703][ T6492] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.349066][ T8180] openvswitch: netlink: Missing valid actions attribute. [ 176.420702][ T6492] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 176.451756][ T6492] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.465130][ T8180] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 176.515163][ T6492] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 176.568010][ T6492] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.660824][ T8180] netlink: 'syz.1.707': attribute type 1 has an invalid length. [ 176.676907][ T8186] bond0: (slave wlan0): Error: Device can not be enslaved while up [ 176.756301][ T8186] netlink: 8 bytes leftover after parsing attributes in process `syz.0.709'. [ 176.780468][ T8188] netlink: 'syz.3.710': attribute type 21 has an invalid length. [ 176.815632][ T8186] sctp: [Deprecated]: syz.0.709 (pid 8186) Use of struct sctp_assoc_value in delayed_ack socket option. [ 176.815632][ T8186] Use struct sctp_sack_info instead [ 176.834880][ T8188] netlink: 'syz.3.710': attribute type 22 has an invalid length. [ 176.846942][ T8188] netlink: 'syz.3.710': attribute type 23 has an invalid length. [ 176.861331][ T8186] sctp: [Deprecated]: syz.0.709 (pid 8186) Use of struct sctp_assoc_value in delayed_ack socket option. [ 176.861331][ T8186] Use struct sctp_sack_info instead [ 176.887867][ T8188] netlink: 'syz.3.710': attribute type 25 has an invalid length. [ 176.917860][ T8188] netlink: 'syz.3.710': attribute type 26 has an invalid length. [ 176.941454][ T8188] netlink: 16 bytes leftover after parsing attributes in process `syz.3.710'. [ 176.995037][ T8191] tipc: Enabling not permitted [ 177.024960][ T8191] tipc: Enabling of bearer rejected, failed to enable media [ 177.377006][ T8201] netlink: 165 bytes leftover after parsing attributes in process `syz.1.713'. [ 177.458708][ T8203] netlink: 'syz.1.713': attribute type 1 has an invalid length. [ 177.497165][ T8203] netlink: 'syz.1.713': attribute type 1 has an invalid length. [ 177.535767][ T8196] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.712'. [ 177.919218][ T8211] netlink: 'syz.2.715': attribute type 10 has an invalid length. [ 177.981939][ T8211] netlink: 16154 bytes leftover after parsing attributes in process `syz.2.715'. [ 178.487171][ T8224] xt_hashlimit: size too large, truncated to 1048576 [ 179.349367][ T8238] netlink: 4 bytes leftover after parsing attributes in process `syz.2.722'. [ 181.459812][ T8265] mac80211_hwsim hwsim9 wlan0: entered promiscuous mode [ 181.511558][ T8265] mac80211_hwsim hwsim9 wlan0: entered allmulticast mode [ 181.564885][ T8283] netlink: 8 bytes leftover after parsing attributes in process `syz.2.733'. [ 181.583654][ T8265] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 182.720884][ T8304] netlink: 'syz.0.740': attribute type 3 has an invalid length. [ 182.757840][ T8304] netlink: 8 bytes leftover after parsing attributes in process `syz.0.740'. [ 184.801897][ T6505] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 184.872600][ T6505] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.914084][ T6505] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 184.972249][ T6505] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.035322][ T6505] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 185.124809][ T6505] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.181039][ T6505] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 185.247753][ T6505] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.482686][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 185.719802][ T8347] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 185.815469][ T8351] x_tables: duplicate entry at hook 3 [ 186.088148][ T8359] netlink: 'syz.0.748': attribute type 27 has an invalid length. [ 186.444577][ T8355] nbd0: detected capacity change from 0 to 63 [ 186.559397][ T8372] netlink: 40 bytes leftover after parsing attributes in process `syz.4.751'. [ 186.586127][ T5628] block nbd0: Receive control failed (result -104) [ 186.736169][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 186.810090][ T8385] block nbd4: not configured, cannot reconfigure [ 186.979239][ T8354] 8021q: adding VLAN 0 to HW filter on device bond1 [ 187.006023][ T8354] geneve2: left promiscuous mode [ 187.025470][ T8354] geneve3: left promiscuous mode [ 187.292273][ T8390] netlink: 20 bytes leftover after parsing attributes in process `syz.2.753'. [ 187.485755][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 188.046718][ T8414] netlink: 12 bytes leftover after parsing attributes in process `syz.3.758'. [ 188.806438][ T8432] netlink: 'syz.4.761': attribute type 1 has an invalid length. [ 191.888873][ T8416] netlink: 8 bytes leftover after parsing attributes in process `syz.0.759'. [ 191.906945][ T8432] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 192.850150][ T8461] netlink: 8 bytes leftover after parsing attributes in process `syz.0.769'. [ 192.920101][ T8461] netlink: 4 bytes leftover after parsing attributes in process `syz.0.769'. [ 192.961603][ T8461] netlink: 'syz.0.769': attribute type 18 has an invalid length. [ 193.721609][ T8472] trusted_key: syz.2.773 sent an empty control message without MSG_MORE. [ 193.907880][ T8482] netlink: 48 bytes leftover after parsing attributes in process `syz.0.775'. [ 194.470638][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.482962][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.518396][ T8491] netlink: 16170 bytes leftover after parsing attributes in process `syz.2.777'. [ 194.622262][ T8492] netlink: 316 bytes leftover after parsing attributes in process `syz.1.778'. [ 194.679220][ T8492] netlink: 12 bytes leftover after parsing attributes in process `syz.1.778'. [ 194.774932][ T8498] netlink: 'syz.0.779': attribute type 3 has an invalid length. [ 194.801476][ T8498] netlink: 666 bytes leftover after parsing attributes in process `syz.0.779'. [ 195.819545][ T8515] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 196.576390][ T8509] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 198.567249][ T8561] netlink: 'syz.3.795': attribute type 1 has an invalid length. [ 198.869888][ T8572] netlink: 44 bytes leftover after parsing attributes in process `syz.3.795'. [ 199.350039][ T8582] netlink: 4 bytes leftover after parsing attributes in process `syz.1.797'. [ 199.593356][ T8561] bond1: (slave gretap1): making interface the new active one [ 199.613051][ T8561] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 199.627142][ T8561] syz.3.795 (8561) used greatest stack depth: 18784 bytes left [ 199.729472][ T8582] netlink: 4 bytes leftover after parsing attributes in process `syz.1.797'. [ 200.400445][ T8602] netlink: 4 bytes leftover after parsing attributes in process `syz.4.801'. [ 200.503564][ T6502] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.503765][ T8602] netlink: 4 bytes leftover after parsing attributes in process `syz.4.801'. [ 200.550124][ T6502] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.928432][ T6502] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.966137][ T6502] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.894041][ T5630] Bluetooth: hci0: command 0x0406 tx timeout [ 211.901509][ T8643] Bluetooth: hci4: command 0x0406 tx timeout [ 211.901580][ T8643] Bluetooth: hci2: command 0x0406 tx timeout [ 211.901610][ T8643] Bluetooth: hci3: command 0x0406 tx timeout [ 211.901938][ T8643] Bluetooth: hci1: command 0x0406 tx timeout [ 214.931266][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 216.843752][ T4949] block nbd0: Possible stuck request ffff8880275c5080: control (read@0,1024B). Runtime 30 seconds [ 216.859142][ T4949] block nbd0: Possible stuck request ffff8880275c5240: control (read@1024,1024B). Runtime 30 seconds [ 216.872848][ T4949] block nbd0: Possible stuck request ffff8880275c5400: control (read@2048,1024B). Runtime 30 seconds [ 216.885766][ T4949] block nbd0: Possible stuck request ffff8880275c55c0: control (read@3072,1024B). Runtime 30 seconds [ 220.682809][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 241.121659][ T8652] netlink: 20 bytes leftover after parsing attributes in process `syz.0.805'. [ 241.163831][ T8650] netlink: 4 bytes leftover after parsing attributes in process `syz.4.809'. [ 241.231067][ T8650] netlink: 4 bytes leftover after parsing attributes in process `syz.4.809'. [ 241.267161][ T8648] netlink: 20 bytes leftover after parsing attributes in process `syz.2.807'. [ 241.284171][ T8654] netlink: 4 bytes leftover after parsing attributes in process `syz.3.808'. [ 241.695317][ T8652] syz.0.805 (8652) used greatest stack depth: 18312 bytes left [ 242.628524][ T8687] netlink: 4 bytes leftover after parsing attributes in process `syz.0.818'. [ 242.806204][ T8687] netlink: 4 bytes leftover after parsing attributes in process `syz.0.818'. [ 242.820647][ T6500] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 242.908903][ T6490] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 243.020709][ T8699] SET target dimension over the limit! [ 243.052835][ T6490] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 243.099218][ T6490] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 243.499313][ T8703] netlink: 28 bytes leftover after parsing attributes in process `syz.2.821'. [ 243.525533][ T8703] netlink: 'syz.2.821': attribute type 7 has an invalid length. [ 243.548971][ T8703] netlink: 'syz.2.821': attribute type 8 has an invalid length. [ 243.563267][ T8703] netlink: 4 bytes leftover after parsing attributes in process `syz.2.821'. [ 243.884695][ T8715] netlink: 8 bytes leftover after parsing attributes in process `syz.3.825'. [ 243.945231][ T8715] netlink: 'syz.3.825': attribute type 12 has an invalid length. [ 243.959370][ T8715] netlink: 'syz.3.825': attribute type 13 has an invalid length. [ 244.118172][ T8720] openvswitch: netlink: ufid size 41726 bytes exceeds the range (1, 16) [ 244.167296][ T8720] openvswitch: netlink: Message has 512 unknown bytes. [ 244.257862][ T8729] netlink: 'syz.4.828': attribute type 1 has an invalid length. [ 244.479130][ T8729] bond2: entered promiscuous mode [ 244.499046][ T8729] 8021q: adding VLAN 0 to HW filter on device bond2 [ 244.644030][ T8733] 8021q: adding VLAN 0 to HW filter on device bond2 [ 244.662237][ T8733] bond2: (slave gre1): The slave device specified does not support setting the MAC address [ 244.678005][ T8733] bond2: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 244.701141][ T8733] bond2: (slave gre1): making interface the new active one [ 244.736618][ T8733] gre1: entered promiscuous mode [ 244.767658][ T8733] bond2: (slave gre1): Enslaving as an active interface with an up link [ 245.033575][ T8740] bond2 (unregistering): (slave gre1): Releasing backup interface [ 245.062104][ T8751] ref_ctr_offset mismatch. inode: 0x64 offset: 0x0 ref_ctr_offset(old): 0x300000006 ref_ctr_offset(new): 0x0 [ 245.079498][ T8740] gre1: left promiscuous mode [ 245.094819][ T8740] bond2 (unregistering): Released all slaves [ 246.947767][ T4949] block nbd0: Possible stuck request ffff8880275c5080: control (read@0,1024B). Runtime 60 seconds [ 246.966522][ T4949] block nbd0: Possible stuck request ffff8880275c5240: control (read@1024,1024B). Runtime 60 seconds [ 246.985936][ T4949] block nbd0: Possible stuck request ffff8880275c5400: control (read@2048,1024B). Runtime 60 seconds [ 247.004294][ T4949] block nbd0: Possible stuck request ffff8880275c55c0: control (read@3072,1024B). Runtime 60 seconds [ 247.691670][ T8817] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 248.739842][ T8840] netlink: 'syz.3.854': attribute type 58 has an invalid length. [ 248.762376][ T8840] __nla_validate_parse: 4 callbacks suppressed [ 248.762399][ T8840] netlink: 20 bytes leftover after parsing attributes in process `syz.3.854'. [ 249.523090][ T8843] syzkaller0: entered promiscuous mode [ 249.566880][ T8843] syzkaller0: entered allmulticast mode [ 253.421353][ T4988] udevd[4988]: worker [5635] /devices/virtual/block/nbd0 is taking a long time [ 255.897253][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.918841][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.388587][ T8975] netlink: 4 bytes leftover after parsing attributes in process `syz.1.879'. [ 256.501585][ T8975] netlink: 4 bytes leftover after parsing attributes in process `syz.1.879'. [ 256.843654][ T8990] netlink: 24 bytes leftover after parsing attributes in process `syz.1.884'. [ 256.868585][ T8991] netlink: 28 bytes leftover after parsing attributes in process `syz.3.882'. [ 256.892667][ T8991] netlink: 'syz.3.882': attribute type 2 has an invalid length. [ 257.042846][ T8991] : entered promiscuous mode [ 257.234085][ T8998] netlink: 4 bytes leftover after parsing attributes in process `syz.0.885'. [ 258.350918][ T9020] netlink: 12 bytes leftover after parsing attributes in process `syz.1.890'. [ 258.392516][ T9020] netlink: 12 bytes leftover after parsing attributes in process `syz.1.890'. [ 258.582600][ T9020] netlink: 12 bytes leftover after parsing attributes in process `syz.1.890'. [ 258.623538][ T9020] netlink: 12 bytes leftover after parsing attributes in process `syz.1.890'. [ 259.041710][ T9020] netlink: 12 bytes leftover after parsing attributes in process `syz.1.890'. [ 261.259990][ T9100] netlink: 'syz.1.916': attribute type 13 has an invalid length. [ 261.298316][ T9100] netlink: 'syz.1.916': attribute type 17 has an invalid length. [ 262.190760][ T9100] bond1: left allmulticast mode [ 262.321996][ T9124] bridge0: port 3(syz_tun) entered blocking state [ 262.346041][ T9124] bridge0: port 3(syz_tun) entered disabled state [ 262.369456][ T9124] syz_tun: entered allmulticast mode [ 262.382995][ T9124] syz_tun: entered promiscuous mode [ 262.396395][ T9124] bridge0: port 3(syz_tun) entered blocking state [ 262.405955][ T9124] bridge0: port 3(syz_tun) entered forwarding state [ 263.189473][ T9156] __nla_validate_parse: 12 callbacks suppressed [ 263.189526][ T9156] netlink: 8 bytes leftover after parsing attributes in process `syz.2.928'. [ 263.210176][ T9156] netlink: 4 bytes leftover after parsing attributes in process `syz.2.928'. [ 263.226513][ T9156] netlink: 4 bytes leftover after parsing attributes in process `syz.2.928'. [ 263.240028][ T9156] netlink: 4 bytes leftover after parsing attributes in process `syz.2.928'. [ 263.342600][ T9156] netlink: 4 bytes leftover after parsing attributes in process `syz.2.928'. [ 263.397082][ T9160] netlink: 4 bytes leftover after parsing attributes in process `syz.3.929'. [ 263.440647][ T9160] netlink: 4 bytes leftover after parsing attributes in process `syz.3.929'. [ 263.906235][ T9162] syzkaller0: entered promiscuous mode [ 263.915246][ T9162] syzkaller0: entered allmulticast mode [ 264.324103][ T9186] netlink: 4 bytes leftover after parsing attributes in process `syz.1.938'. [ 264.337116][ T9187] netlink: 12 bytes leftover after parsing attributes in process `syz.0.936'. [ 264.806652][ T9202] No such timeout policy "syz0" [ 268.405111][ T9186] veth0_macvtap: left promiscuous mode [ 268.578940][ T9183] netlink: 'syz.0.936': attribute type 5 has an invalid length. [ 268.587850][ T9183] netlink: 4 bytes leftover after parsing attributes in process `syz.0.936'. [ 268.682183][ T9235] ipvlan0: entered promiscuous mode [ 268.865785][ T9238] netlink: 16 bytes leftover after parsing attributes in process `syz.2.949'. [ 268.921396][ T9239] netlink: 12 bytes leftover after parsing attributes in process `syz.2.949'. [ 268.973509][ T9239] netlink: 12 bytes leftover after parsing attributes in process `syz.2.949'. [ 269.048541][ T9246] syzkaller0: entered promiscuous mode [ 269.054609][ T9246] syzkaller0: entered allmulticast mode [ 269.201000][ T9254] netlink: 16 bytes leftover after parsing attributes in process `syz.2.953'. [ 269.366170][ T9257] netlink: zone id is out of range [ 269.421597][ T9257] netlink: zone id is out of range [ 269.438732][ T9259] netlink: 'syz.2.955': attribute type 1 has an invalid length. [ 269.448822][ T9257] netlink: zone id is out of range [ 269.454694][ T9257] netlink: zone id is out of range [ 269.491396][ T9257] netlink: zone id is out of range [ 269.563658][ T9264] netlink: 28 bytes leftover after parsing attributes in process `syz.2.955'. [ 269.596850][ T9257] netlink: zone id is out of range [ 269.609430][ T9257] netlink: zone id is out of range [ 269.618834][ T9257] netlink: zone id is out of range [ 269.624693][ T9257] netlink: zone id is out of range [ 269.631359][ T9257] netlink: zone id is out of range [ 269.639573][ T9264] 8021q: adding VLAN 0 to HW filter on device bond3 [ 269.994572][ T9279] IPVS: length: 4096 != 8 [ 270.010922][ T9280] IPVS: length: 4096 != 8 [ 270.208652][ T9281] netlink: 64 bytes leftover after parsing attributes in process `syz.3.960'. [ 270.831479][ T9298] netlink: 'syz.1.965': attribute type 1 has an invalid length. [ 270.874989][ T9298] xt_TCPMSS: Only works on TCP SYN packets [ 270.890522][ T13] tipc: Subscription rejected, illegal request [ 271.177126][ T9301] syz_tun: entered allmulticast mode [ 271.881789][ T9317] netlink: 'syz.0.969': attribute type 1 has an invalid length. [ 272.187329][ T9317] 8021q: adding VLAN 0 to HW filter on device bond2 [ 272.265048][ T9318] macvlan2: entered promiscuous mode [ 272.293071][ T9318] macvlan2: entered allmulticast mode [ 272.313475][ T9318] bond2: entered promiscuous mode [ 272.337588][ T9318] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 272.379622][ T9318] bond2: left promiscuous mode [ 272.816488][ T9303] syzkaller1: entered promiscuous mode [ 272.843117][ T9303] syzkaller1: entered allmulticast mode [ 273.828736][ T9348] vlan2: entered allmulticast mode [ 273.840068][ T9348] bridge0: port 3(vlan2) entered blocking state [ 273.849114][ T9348] bridge0: port 3(vlan2) entered disabled state [ 273.869011][ T9348] vlan2: entered promiscuous mode [ 274.583535][ T9369] netlink: 4 bytes leftover after parsing attributes in process `syz.2.983'. [ 274.607026][ T9367] netlink: 24 bytes leftover after parsing attributes in process `syz.1.984'. [ 274.857154][ T9380] netlink: 'syz.3.989': attribute type 1 has an invalid length. [ 274.990587][ T9380] netlink: 59 bytes leftover after parsing attributes in process `syz.3.989'. [ 275.489356][ T9396] netlink: 8 bytes leftover after parsing attributes in process `syz.3.992'. [ 275.846319][ T9408] --map-set only usable from mangle table [ 276.179362][ T9410] netlink: 4 bytes leftover after parsing attributes in process `syz.2.999'. [ 276.249667][ T80] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 276.265248][ T9410] netlink: 4 bytes leftover after parsing attributes in process `syz.2.999'. [ 276.294968][ T80] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 276.356826][ T80] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 276.438459][ T80] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 276.675293][ T9420] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1003'. [ 276.696908][ T9421] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1002'. [ 276.742013][ T9420] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 276.891291][ T9421] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1002'. [ 276.896921][ T1022] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 276.916008][ T1022] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 276.933395][ T1022] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 276.972203][ T1022] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 277.005014][ T4949] block nbd0: Possible stuck request ffff8880275c5080: control (read@0,1024B). Runtime 90 seconds [ 277.020494][ T4949] block nbd0: Possible stuck request ffff8880275c5240: control (read@1024,1024B). Runtime 90 seconds [ 277.037557][ T4949] block nbd0: Possible stuck request ffff8880275c5400: control (read@2048,1024B). Runtime 90 seconds [ 277.073638][ T4949] block nbd0: Possible stuck request ffff8880275c55c0: control (read@3072,1024B). Runtime 90 seconds [ 277.128264][ T9431] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1006'. [ 277.920044][ T9449] syzkaller0: entered promiscuous mode [ 277.937977][ T9449] syzkaller0: entered allmulticast mode [ 279.678306][ T9509] __nla_validate_parse: 6 callbacks suppressed [ 279.678328][ T9509] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1030'. [ 279.712061][ T9510] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1030'. [ 279.752190][ T9507] ieee802154 phy0 wpan0: encryption failed: -22 [ 279.772527][ T9509] bridge: RTM_NEWNEIGH with invalid state 0x0 [ 279.820717][ T9512] netlink: 820 bytes leftover after parsing attributes in process `syz.3.1031'. [ 279.841433][ T9509] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1030'. [ 279.869447][ T9512] netlink: 820 bytes leftover after parsing attributes in process `syz.3.1031'. [ 279.881959][ T9509] bridge: RTM_NEWNEIGH with invalid state 0x0 [ 279.900433][ T9510] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1030'. [ 279.906840][ T9509] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1030'. [ 279.937742][ T9509] bridge: RTM_NEWNEIGH with invalid state 0x0 [ 279.948285][ T9517] syzkaller0: entered promiscuous mode [ 279.954977][ T9517] syzkaller0: entered allmulticast mode [ 279.970132][ T9509] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1030'. [ 279.989704][ T9510] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1030'. [ 280.001202][ T9509] bridge: RTM_NEWNEIGH with invalid state 0x0 [ 280.043547][ T9509] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1030'. [ 280.063953][ T9509] bridge: RTM_NEWNEIGH with invalid state 0x0 [ 280.271473][ T9509] bridge: RTM_NEWNEIGH with invalid state 0x0 [ 280.281484][ T9509] bridge: RTM_NEWNEIGH with invalid state 0x0 [ 280.289740][ T9509] bridge: RTM_NEWNEIGH with invalid state 0x0 [ 280.393468][ T9523] FAULT_INJECTION: forcing a failure. [ 280.393468][ T9523] name failslab, interval 1, probability 0, space 0, times 0 [ 280.481689][ T9523] CPU: 1 UID: 0 PID: 9523 Comm: syz.2.1035 Not tainted syzkaller #0 PREEMPT(full) [ 280.481722][ T9523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 280.481748][ T9523] Call Trace: [ 280.481757][ T9523] [ 280.481766][ T9523] dump_stack_lvl+0xe8/0x150 [ 280.481944][ T9523] should_fail_ex+0x40c/0x560 [ 280.482077][ T9523] should_failslab+0xa8/0x100 [ 280.482140][ T9523] __kmalloc_noprof+0xfe/0x720 [ 280.482177][ T9523] ? sk_prot_alloc+0xe7/0x210 [ 280.482299][ T9523] ? sk_prot_alloc+0xe7/0x210 [ 280.482338][ T9523] sk_prot_alloc+0xe7/0x210 [ 280.482368][ T9523] ? sk_alloc+0x27/0x390 [ 280.482403][ T9523] sk_alloc+0x3a/0x390 [ 280.482440][ T9523] bpf_prog_test_run_skb+0x3a6/0x2230 [ 280.482604][ T9523] ? __fget_files+0x3a2/0x420 [ 280.482647][ T9523] ? __fget_files+0x2a/0x420 [ 280.482679][ T9523] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 280.482713][ T9523] bpf_prog_test_run+0x2c5/0x340 [ 280.482774][ T9523] __sys_bpf+0xa22/0xd90 [ 280.482813][ T9523] ? __pfx___sys_bpf+0x10/0x10 [ 280.482854][ T9523] ? __fget_files+0x2a/0x420 [ 280.482900][ T9523] ? ksys_write+0x242/0x270 [ 280.482946][ T9523] ? __pfx_ksys_write+0x10/0x10 [ 280.482985][ T9523] __x64_sys_bpf+0xba/0xd0 [ 280.483011][ T9523] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.483052][ T9523] do_syscall_64+0x174/0x580 [ 280.483169][ T9523] ? trace_irq_disable+0x3b/0x140 [ 280.483196][ T9523] ? clear_bhb_loop+0x40/0x90 [ 280.483223][ T9523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.483244][ T9523] RIP: 0033:0x7f7920b9de59 [ 280.483266][ T9523] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 280.483284][ T9523] RSP: 002b:00007f7921a38028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 280.483307][ T9523] RAX: ffffffffffffffda RBX: 00007f7920e25fa0 RCX: 00007f7920b9de59 [ 280.483323][ T9523] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 280.483335][ T9523] RBP: 00007f7921a38090 R08: 0000000000000000 R09: 0000000000000000 [ 280.483347][ T9523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 280.483360][ T9523] R13: 00007f7920e26038 R14: 00007f7920e25fa0 R15: 00007ffc38494708 [ 280.483392][ T9523] [ 280.486633][ T9509] bridge: RTM_NEWNEIGH with invalid state 0x0 [ 280.919079][ T9528] net_ratelimit: 381 callbacks suppressed [ 280.919103][ T9528] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 280.975524][ T9530] tipc: Enabling of bearer rejected, failed to enable media [ 281.110533][ T9538] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 281.218366][ T9532] syzkaller0: entered promiscuous mode [ 281.238024][ T9532] syzkaller0: entered allmulticast mode [ 282.418074][ T9575] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 283.243637][ T9585] bond3: option xmit_hash_policy: invalid value (10) [ 283.321785][ T9585] bond3 (unregistering): Released all slaves [ 285.423593][ T9653] bridge0: port 3(syz_tun) entered blocking state [ 285.470062][ T9653] bridge0: port 3(syz_tun) entered disabled state [ 285.529164][ T9653] syz_tun: entered allmulticast mode [ 285.554078][ T9653] syz_tun: entered promiscuous mode [ 285.599301][ T9653] bridge0: port 3(syz_tun) entered blocking state [ 285.607074][ T9653] bridge0: port 3(syz_tun) entered forwarding state [ 285.683950][ T9660] syzkaller0: entered promiscuous mode [ 285.714189][ T9651] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 285.742454][ T9660] syzkaller0: entered allmulticast mode [ 285.755951][ T9665] __nla_validate_parse: 39 callbacks suppressed [ 285.755972][ T9665] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1067'. [ 285.813922][ T9662] hsr0: entered allmulticast mode [ 285.829209][ T9662] hsr_slave_0: entered allmulticast mode [ 285.838869][ T9662] hsr_slave_1: entered allmulticast mode [ 285.853849][ T9665] hsr_slave_0: left promiscuous mode [ 285.865403][ T9665] hsr_slave_1: left promiscuous mode [ 285.921663][ T9665] hsr0 (unregistering): left allmulticast mode [ 286.480357][ T9683] geneve4: entered promiscuous mode [ 286.490410][ T9687] FAULT_INJECTION: forcing a failure. [ 286.490410][ T9687] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 286.526528][ T9687] CPU: 1 UID: 0 PID: 9687 Comm: syz.1.1074 Not tainted syzkaller #0 PREEMPT(full) [ 286.526558][ T9687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 286.526571][ T9687] Call Trace: [ 286.526580][ T9687] [ 286.526589][ T9687] dump_stack_lvl+0xe8/0x150 [ 286.526625][ T9687] should_fail_ex+0x40c/0x560 [ 286.526654][ T9687] _copy_to_user+0x31/0xb0 [ 286.527037][ T9687] bpf_test_finish+0x4ea/0x690 [ 286.527069][ T9687] ? __pfx_bpf_test_finish+0x10/0x10 [ 286.527101][ T9687] bpf_prog_test_run_skb+0x11fe/0x2230 [ 286.527156][ T9687] ? __fget_files+0x3a2/0x420 [ 286.527251][ T9687] ? __fget_files+0x2a/0x420 [ 286.527285][ T9687] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 286.527320][ T9687] bpf_prog_test_run+0x2c5/0x340 [ 286.527355][ T9687] __sys_bpf+0xa22/0xd90 [ 286.527393][ T9687] ? __pfx___sys_bpf+0x10/0x10 [ 286.527434][ T9687] ? __fget_files+0x2a/0x420 [ 286.527481][ T9687] ? ksys_write+0x242/0x270 [ 286.527517][ T9687] ? __pfx_ksys_write+0x10/0x10 [ 286.527556][ T9687] __x64_sys_bpf+0xba/0xd0 [ 286.527582][ T9687] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.527606][ T9687] do_syscall_64+0x174/0x580 [ 286.527638][ T9687] ? trace_irq_disable+0x3b/0x140 [ 286.527665][ T9687] ? clear_bhb_loop+0x40/0x90 [ 286.527689][ T9687] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.527707][ T9687] RIP: 0033:0x7f9092b9de59 [ 286.527728][ T9687] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 286.527745][ T9687] RSP: 002b:00007f9093981028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 286.527768][ T9687] RAX: ffffffffffffffda RBX: 00007f9092e25fa0 RCX: 00007f9092b9de59 [ 286.527783][ T9687] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 286.527796][ T9687] RBP: 00007f9093981090 R08: 0000000000000000 R09: 0000000000000000 [ 286.527809][ T9687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 286.527821][ T9687] R13: 00007f9092e26038 R14: 00007f9092e25fa0 R15: 00007ffcebd90908 [ 286.527855][ T9687] [ 287.751847][ T9719] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1080'. [ 287.791627][ T9719] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 288.694651][ T9741] pim6reg: entered allmulticast mode [ 288.721294][ T9742] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1085'. [ 288.770242][ T9756] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1088'. [ 288.820366][ T9756] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1088'. [ 289.057641][ T9753] pim6reg: left allmulticast mode [ 289.082007][ C0] vxcan1: j1939_xtp_rx_rts_session_active: 0xffff88807a474800: connection exists (01 ff). last cmd: 20 [ 289.938238][ T9784] netlink: 252 bytes leftover after parsing attributes in process `syz.0.1092'. [ 290.822571][ T9801] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1094'. [ 294.159533][ T9807] netlink: 'syz.0.1095': attribute type 1 has an invalid length. [ 294.305331][ T9807] netlink: 'syz.0.1095': attribute type 2 has an invalid length. [ 295.015658][ T9829] bridge0: port 1(syz_tun) entered blocking state [ 295.028120][ T9829] bridge0: port 1(syz_tun) entered disabled state [ 295.038585][ T9829] syz_tun: entered allmulticast mode [ 295.051709][ T9829] syz_tun: entered promiscuous mode [ 296.421679][ T9867] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1107'. [ 296.482814][ T9867] netlink: 47 bytes leftover after parsing attributes in process `syz.3.1107'. [ 296.548619][ T9867] netlink: 'syz.3.1107': attribute type 6 has an invalid length. [ 296.569364][ T9846] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 296.608556][ T9867] netlink: 'syz.3.1107': attribute type 6 has an invalid length. [ 296.842744][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 297.174823][ T9891] veth0_to_team: entered promiscuous mode [ 297.196986][ T9891] erspan0: entered promiscuous mode [ 298.058121][ T9926] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1119'. [ 298.365999][ T9933] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1121'. [ 298.495198][ T9933] 8021q: adding VLAN 0 to HW filter on device bond2 [ 298.783745][ T9944] sit0: entered promiscuous mode [ 298.828801][ T9944] netlink: 'syz.1.1125': attribute type 1 has an invalid length. [ 298.876216][ T9951] netlink: 'syz.2.1126': attribute type 4 has an invalid length. [ 298.888353][ T9944] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1125'. [ 298.915554][ T9949] netlink: 'syz.2.1126': attribute type 4 has an invalid length. [ 298.955435][ T9955] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1125'. [ 299.376194][ T9967] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1131'. [ 299.451044][ T9968] netlink: 'syz.1.1130': attribute type 3 has an invalid length. [ 299.744579][ T48] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x69 [ 299.806768][ T9981] sctp: [Deprecated]: syz.3.1132 (pid 9981) Use of struct sctp_assoc_value in delayed_ack socket option. [ 299.806768][ T9981] Use struct sctp_sack_info instead [ 299.841465][ T9979] syzkaller0: entered promiscuous mode [ 299.889140][ T9979] syzkaller0: entered allmulticast mode [ 299.920289][ T9974] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 300.000242][ T9979] tipc: Started in network mode [ 300.028328][ T9979] tipc: Node identity 2a75c308e3ff, cluster identity 4711 [ 300.076075][ T9979] tipc: Enabled bearer , priority 0 [ 300.166043][ T9990] ÿ: renamed from bond_slave_0 [ 300.241932][ T9978] tipc: Resetting bearer [ 300.460261][ T9978] tipc: Disabling bearer [ 300.744659][T10013] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1139'. [ 301.135337][ T9991] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1136'. [ 301.175457][T10018] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1140'. [ 301.557894][T10024] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1142'. [ 301.965707][T10033] netlink: 'syz.0.1145': attribute type 1 has an invalid length. [ 302.063780][T10040] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1147'. [ 302.077123][T10036] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1146'. [ 302.094245][T10036] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1146'. [ 302.141364][T10036] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1146'. [ 302.182693][T10036] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1146'. [ 302.959451][T10062] netlink: 'syz.3.1152': attribute type 1 has an invalid length. [ 303.437963][T10062] 8021q: adding VLAN 0 to HW filter on device bond3 [ 303.475309][T10068] bond3: entered allmulticast mode [ 303.544356][T10061] batadv_slave_0: entered promiscuous mode [ 303.637329][T10069] bond3: (slave ip6gretap1): making interface the new active one [ 303.675503][T10069] ip6gretap1: entered allmulticast mode [ 303.706977][T10069] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 303.889822][T10079] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1154'. [ 303.905823][T10043] batadv_slave_0: left promiscuous mode [ 304.068821][T10084] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1155'. [ 304.641510][T10096] netlink: 'syz.4.1158': attribute type 23 has an invalid length. [ 304.690961][T10093] syzkaller1: entered promiscuous mode [ 304.743556][T10093] syzkaller1: entered allmulticast mode [ 305.389653][T10113] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1161'. [ 305.422783][T10113] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1161'. [ 305.438348][T10104] syzkaller0: entered promiscuous mode [ 305.469263][T10104] syzkaller0: entered allmulticast mode [ 305.503727][T10104] xt_connbytes: Forcing CT accounting to be enabled [ 306.727826][T10152] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 306.821663][T10156] __nla_validate_parse: 5 callbacks suppressed [ 306.821724][T10156] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1175'. [ 306.879919][T10156] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1175'. [ 306.928081][T10156] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1175'. [ 306.993469][T10156] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1175'. [ 307.093770][ T4949] block nbd0: Possible stuck request ffff8880275c5080: control (read@0,1024B). Runtime 120 seconds [ 307.109087][ T4949] block nbd0: Possible stuck request ffff8880275c5240: control (read@1024,1024B). Runtime 120 seconds [ 307.123623][ T4949] block nbd0: Possible stuck request ffff8880275c5400: control (read@2048,1024B). Runtime 120 seconds [ 307.137406][ T4949] block nbd0: Possible stuck request ffff8880275c55c0: control (read@3072,1024B). Runtime 120 seconds [ 307.210386][T10170] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1179'. [ 307.531315][T10184] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1180'. [ 307.570850][T10184] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1180'. [ 307.612079][T10184] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1180'. [ 307.639668][T10184] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1180'. [ 307.748934][T10191] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1185'. [ 307.770596][T10191] ip6gre1: entered promiscuous mode [ 307.783417][T10191] ip6gre1: entered allmulticast mode [ 307.933672][T10191] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 307.978383][T10193] gre0: entered promiscuous mode [ 307.987574][T10193] gre0: entered allmulticast mode [ 308.548889][T10204] netlink: 'syz.2.1189': attribute type 5 has an invalid length. [ 308.652417][T10204] geneve2: entered promiscuous mode [ 308.660669][T10204] geneve2: entered allmulticast mode [ 308.669998][ T8930] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 44144 - 0 [ 308.691425][ T8930] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 44144 - 0 [ 308.834012][ T8930] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 44144 - 0 [ 308.899873][ T8930] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 44144 - 0 [ 309.497116][T10238] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20001 [ 309.707130][T10227] veth7: entered allmulticast mode [ 310.210425][T10229] syzkaller0: entered promiscuous mode [ 310.269895][T10229] syzkaller0: entered allmulticast mode [ 317.326823][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.334031][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 326.614730][T10320] __nla_validate_parse: 21 callbacks suppressed [ 326.614754][T10320] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1216'. [ 326.650687][T10320] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1216'. [ 326.828163][T10328] x_tables: duplicate underflow at hook 2 [ 326.920426][T10320] bond4: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 327.061537][T10320] bond4 (unregistering): Released all slaves [ 327.602864][T10354] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1220'. [ 327.660248][T10354] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1220'. [ 327.757668][T10354] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1220'. [ 327.811872][T10354] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1220'. [ 328.184491][T10372] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1226'. [ 328.210954][T10372] openvswitch: netlink: Flow key attr not present in new flow. [ 328.226802][T10373] netlink: 212 bytes leftover after parsing attributes in process `syz.0.1225'. [ 328.302587][T10372] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1226'. [ 328.313400][T10373] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1225'. [ 328.511259][T10383] netlink: 'syz.2.1228': attribute type 10 has an invalid length. [ 329.135728][T10398] netlink: 'syz.4.1231': attribute type 1 has an invalid length. [ 329.686837][T10424] netlink: 'syz.1.1239': attribute type 10 has an invalid length. [ 330.550167][T10445] netlink: 'syz.3.1245': attribute type 12 has an invalid length. [ 331.200363][T10470] netlink: 'syz.1.1251': attribute type 10 has an invalid length. [ 331.485090][T10478] netlink: 'syz.1.1254': attribute type 3 has an invalid length. [ 332.139115][T10497] __nla_validate_parse: 17 callbacks suppressed [ 332.139136][T10497] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1261'. [ 332.176541][T10497] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1261'. [ 332.211708][T10497] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1261'. [ 332.240393][T10497] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1261'. [ 332.261472][T10498] syzkaller0: entered promiscuous mode [ 332.268437][T10498] syzkaller0: entered allmulticast mode [ 332.453432][T10503] netlink: 'syz.1.1264': attribute type 10 has an invalid length. [ 332.462098][T10503] netlink: 16154 bytes leftover after parsing attributes in process `syz.1.1264'. [ 332.471596][T10504] netlink: 'syz.3.1263': attribute type 1 has an invalid length. [ 332.689507][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 334.378964][T10517] bridge0: port 3(syz_tun) entered disabled state [ 334.514873][T10517] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.526048][T10517] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.026493][ T8939] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 336.079484][ T8939] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.118732][ T8939] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 336.148486][ T8939] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.184938][ T8939] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 336.281230][ T8939] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.353113][ T8939] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 336.398846][ T8939] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.439487][T10553] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1274'. [ 336.476051][T10553] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1274'. [ 336.508765][T10553] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1274'. [ 336.553510][T10553] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1274'. [ 336.818151][T10556] netlink: 'syz.4.1275': attribute type 22 has an invalid length. [ 336.874928][T10556] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1275'. [ 336.989441][T10560] --map-set only usable from mangle table [ 337.165493][ T4949] block nbd0: Possible stuck request ffff8880275c5080: control (read@0,1024B). Runtime 150 seconds [ 337.181102][ T4949] block nbd0: Possible stuck request ffff8880275c5240: control (read@1024,1024B). Runtime 150 seconds [ 337.195165][ T4949] block nbd0: Possible stuck request ffff8880275c5400: control (read@2048,1024B). Runtime 150 seconds [ 337.212059][ T4949] block nbd0: Possible stuck request ffff8880275c55c0: control (read@3072,1024B). Runtime 150 seconds [ 337.231718][T10558] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1275'. [ 337.271503][T10558] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1275'. [ 337.299291][T10573] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1278'. [ 337.703054][T10582] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1283'. [ 337.768971][T10560] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 338.038153][T10588] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1285'. [ 338.058150][T10588] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1285'. [ 338.073381][T10584] lo: entered promiscuous mode [ 338.087397][T10584] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 338.138665][T10586] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 338.187051][T10588] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1285'. [ 338.225121][T10588] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1285'. [ 338.365073][T10597] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1287'. [ 338.385457][T10597] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1287'. [ 339.876160][T10645] geneve0: entered promiscuous mode [ 340.090366][T10652] x_tables: duplicate underflow at hook 2 [ 341.159527][T10682] syz_tun: left allmulticast mode [ 341.173829][T10682] syz_tun: left promiscuous mode [ 341.186031][T10682] bridge0: port 3(syz_tun) entered disabled state [ 341.225744][T10682] bridge_slave_1: left allmulticast mode [ 341.238678][T10682] bridge_slave_1: left promiscuous mode [ 341.263762][T10682] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.286046][T10682] bridge_slave_0: left allmulticast mode [ 341.292095][T10682] bridge_slave_0: left promiscuous mode [ 341.299666][T10682] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.877463][T10705] ip6t_srh: unknown srh invflags 4000 [ 342.239927][T10720] __nla_validate_parse: 19 callbacks suppressed [ 342.239954][T10720] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1317'. [ 342.267060][T10720] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1317'. [ 342.556974][T10727] netlink: 'syz.3.1318': attribute type 4 has an invalid length. [ 342.571638][T10727] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1318'. [ 342.574931][T10731] syzkaller0: entered promiscuous mode [ 342.587648][T10731] syzkaller0: entered allmulticast mode [ 342.625176][T10731] TC_ACT_REPEAT abuse ? [ 342.864375][T10727] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 343.758577][T10762] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1330'. [ 343.794908][T10762] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1330'. [ 343.825475][T10762] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1330'. [ 343.875127][T10762] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1330'. [ 344.125459][T10776] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1334'. [ 344.211302][T10776] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1334'. [ 344.223627][T10776] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1334'. [ 344.503743][T10786] openvswitch: netlink: IPv4 tun info is not correct [ 344.587094][T10787] bridge0: entered allmulticast mode [ 345.402320][T10723] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 345.893726][T10798] openvswitch: netlink: IP tunnel dst address not specified [ 347.371579][T10838] x_tables: ip_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 72 [ 347.503440][T10847] __nla_validate_parse: 1 callbacks suppressed [ 347.503465][T10847] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1349'. [ 347.538554][T10847] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1349'. [ 348.376242][T10854] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1353'. [ 349.159489][T10873] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1358'. [ 349.184144][T10875] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1359'. [ 349.508414][T10879] xt_CT: No such helper "syz0" [ 349.721566][T10892] syzkaller0: entered promiscuous mode [ 349.738609][T10892] syzkaller0: entered allmulticast mode [ 349.821455][T10892] vlan0: entered promiscuous mode [ 350.209108][T10896] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1364'. [ 350.412548][T10896] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 350.536705][T10896] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 351.372937][T10941] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1371'. [ 351.438427][T10939] veth0: entered promiscuous mode [ 351.479075][T10939] syzkaller0: entered promiscuous mode [ 351.500423][T10939] syzkaller0: entered allmulticast mode [ 351.982137][T10938] veth0: left promiscuous mode [ 352.007005][T10965] netlink: 'syz.0.1376': attribute type 7 has an invalid length. [ 352.379788][T10967] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1377'. [ 352.417222][T10967] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1377'. [ 352.523053][T10967] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1377'. [ 352.553312][T10967] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1377'. [ 352.597739][T10977] netlink: 'syz.2.1381': attribute type 2 has an invalid length. [ 352.624903][T10977] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1381'. [ 352.801717][T10976] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1379'. [ 352.866406][T10984] netlink: 'syz.3.1379': attribute type 39 has an invalid length. [ 352.931459][T10987] netlink: 'syz.3.1379': attribute type 4 has an invalid length. [ 353.100294][T10996] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 353.569148][T11007] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1386'. [ 353.609617][T11008] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1386'. [ 353.816982][T11011] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1388'. [ 353.885087][T11011] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.923418][T11011] bridge_slave_1: left allmulticast mode [ 353.932166][T11011] bridge_slave_1: left promiscuous mode [ 353.940165][T11011] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.990160][T11011] bond0: (slave bond_slave_0): Releasing backup interface [ 354.028758][T11011] bond0: (slave bond_slave_1): Releasing backup interface [ 354.043202][T11011] team0: Port device team_slave_0 removed [ 354.063472][T11011] team0: Port device team_slave_1 removed [ 354.074128][T11011] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 354.506568][T11023] netlink: 22984 bytes leftover after parsing attributes in process `syz.3.1390'. [ 354.532117][T11023] netlink: 42618 bytes leftover after parsing attributes in process `syz.3.1390'. [ 355.026712][T11030] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1392'. [ 355.384909][T11035] ieee802154 phy0 wpan0: encryption failed: -22 [ 355.433483][T11035] netlink: 'syz.2.1393': attribute type 12 has an invalid length. [ 355.694699][T11035] raw_sendmsg: syz.2.1393 forgot to set AF_INET. Fix it! [ 356.427217][T11059] netlink: 'syz.2.1403': attribute type 1 has an invalid length. [ 356.461663][T11059] netlink: 'syz.2.1403': attribute type 1 has an invalid length. [ 357.094622][T11081] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 357.109056][T11081] netlink: 'syz.1.1408': attribute type 9 has an invalid length. [ 357.225939][T11078] bond4: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 357.262168][T11078] bond4 (unregistering): Released all slaves [ 357.781340][T11082] __nla_validate_parse: 5 callbacks suppressed [ 357.781395][T11082] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1407'. [ 358.423707][T11104] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1413'. [ 358.824177][T11116] bond4: option mode: invalid value (254) [ 358.879553][T11116] bond4 (unregistering): Released all slaves [ 358.894213][T11125] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1417'. [ 359.114643][T11129] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1418'. [ 359.125390][T11129] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1418'. [ 359.525600][T11129] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1418'. [ 359.568363][T11129] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1418'. [ 359.942880][T11139] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1421'. [ 359.966661][ T5756] syzkaller1: tun_net_xmit 90 [ 360.050133][T11145] netlink: 27 bytes leftover after parsing attributes in process `syz.2.1421'. [ 360.443479][ T5637] syzkaller1: tun_net_xmit 90 [ 360.691555][ T8932] syzkaller1: tun_net_xmit 86 [ 360.720806][T11154] erspan0: entered promiscuous mode [ 360.744100][T11154] erspan0: entered allmulticast mode [ 361.051409][T11158] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1424'. [ 361.698903][T11190] netlink: 'syz.4.1429': attribute type 1 has an invalid length. [ 361.751826][T11190] netlink: 'syz.4.1429': attribute type 2 has an invalid length. [ 362.932067][T11207] tipc: Enabled bearer , priority 0 [ 362.954759][T11209] __nla_validate_parse: 4 callbacks suppressed [ 362.954780][T11209] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1432'. [ 362.981069][T11209] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1432'. [ 363.333811][T11210] syzkaller0: entered promiscuous mode [ 363.339576][T11210] syzkaller0: entered allmulticast mode [ 363.354090][T11210] tipc: Resetting bearer [ 363.393404][T11201] tipc: Resetting bearer [ 364.022387][T11220] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1434'. [ 366.547206][T11201] tipc: Disabling bearer [ 366.568802][ T8316] tipc: Node number set to 3381314312 [ 367.256911][ T4949] block nbd0: Possible stuck request ffff8880275c5080: control (read@0,1024B). Runtime 180 seconds [ 367.269325][ T4949] block nbd0: Possible stuck request ffff8880275c5240: control (read@1024,1024B). Runtime 180 seconds [ 367.281866][ T4949] block nbd0: Possible stuck request ffff8880275c5400: control (read@2048,1024B). Runtime 180 seconds [ 367.294103][ T4949] block nbd0: Possible stuck request ffff8880275c55c0: control (read@3072,1024B). Runtime 180 seconds [ 367.358421][T11250] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1443'. [ 367.369172][T11250] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1443'. [ 367.433797][T11254] syzkaller0: entered promiscuous mode [ 367.439460][T11254] syzkaller0: entered allmulticast mode [ 367.685655][T11261] gretap0: entered promiscuous mode [ 367.767553][T11269] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1447'. [ 367.797442][T11261] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1446'. [ 367.899024][T11272] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1448'. [ 367.906300][T11273] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1448'. [ 368.000852][T11261] bridge0: port 3(syz_tun) entered disabled state [ 368.076593][T11261] syz_tun (unregistering): left allmulticast mode [ 368.105427][T11261] syz_tun (unregistering): left promiscuous mode [ 368.125258][T11261] bridge0: port 3(syz_tun) entered disabled state [ 368.184936][T11272] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 368.189979][T11273] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 368.467007][ T5633] block nbd1: Receive control failed (result -32) [ 368.486304][ T5628] block nbd1: Receive control failed (result -32) [ 368.501794][ T4937] block nbd1: Receive control failed (result -32) [ 369.488403][T11313] batman_adv: batadv0: Adding interface: gretap1 [ 369.521009][T11313] batman_adv: batadv0: The MTU of interface gretap1 is too small (1438) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 369.621985][T11325] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1457'. [ 369.653329][T11313] batman_adv: batadv0: Interface activated: gretap1 [ 369.710827][T11325] netlink: 'syz.2.1457': attribute type 4 has an invalid length. [ 369.741554][T11325] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1457'. [ 369.799091][T11325] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 369.967111][T11290] netlink: 'syz.0.1449': attribute type 12 has an invalid length. [ 370.174599][T11342] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1458'. [ 370.198285][T11330] Bluetooth: MGMT ver 1.23 [ 370.228633][T11342] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1458'. [ 371.338152][T11374] ipip0: entered promiscuous mode [ 371.501156][ T5283] veth0_macvtap: left promiscuous mode [ 372.084047][T11396] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1472'. [ 372.363745][T11408] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1473'. [ 372.375137][T11399] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1472'. [ 372.408839][T11399] nbd: device at index 64 is going down [ 372.463905][T11398] 8021q: adding VLAN 0 to HW filter on device bond3 [ 372.545321][T11398] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1473'. [ 373.231542][T11432] netlink: 340 bytes leftover after parsing attributes in process `syz.1.1479'. [ 373.366261][ T5642] udevd[5642]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 373.504709][ T5638] udevd[5638]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 373.568436][T11448] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1479'. [ 374.498133][T11472] netlink: 'syz.0.1486': attribute type 5 has an invalid length. [ 374.878953][T11479] openvswitch: netlink: Tunnel attr 3 has unexpected len 0 expected 1 [ 375.005211][T11479] netlink: 'syz.0.1488': attribute type 1 has an invalid length. [ 375.087892][T11479] __nla_validate_parse: 3 callbacks suppressed [ 375.087943][T11479] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1488'. [ 375.464654][T11484] netdevsim netdevsim4: Direct firmware load for .® failed with error -2 [ 375.525090][T11484] netdevsim netdevsim4: Falling back to sysfs fallback for: .® [ 376.057976][T11499] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1493'. [ 376.100499][T11496] bond4: Removing last ns target with arp_interval on [ 376.405291][T11503] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1495'. [ 376.440760][T11504] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1494'. [ 376.466523][T11504] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1494'. [ 376.503100][T11503] netlink: 'syz.0.1495': attribute type 30 has an invalid length. [ 376.520108][T11504] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1494'. [ 376.557491][T11504] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1494'. [ 376.921207][T11513] syzkaller0: entered promiscuous mode [ 376.932726][T11513] syzkaller0: entered allmulticast mode [ 376.979190][ T24] IPVS: starting estimator thread 0... [ 377.092656][T11520] IPVS: using max 24 ests per chain, 57600 per kthread [ 377.107830][T11524] FAULT_INJECTION: forcing a failure. [ 377.107830][T11524] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 377.178827][T11524] CPU: 1 UID: 0 PID: 11524 Comm: syz.3.1497 Not tainted syzkaller #0 PREEMPT(full) [ 377.178859][T11524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 377.178882][T11524] Call Trace: [ 377.178891][T11524] [ 377.178901][T11524] dump_stack_lvl+0xe8/0x150 [ 377.178984][T11524] should_fail_ex+0x40c/0x560 [ 377.179051][T11524] _copy_from_user+0x2d/0xb0 [ 377.179092][T11524] __sys_bpf+0x2e7/0xd90 [ 377.179152][T11524] ? __pfx___sys_bpf+0x10/0x10 [ 377.179194][T11524] ? __fget_files+0x2a/0x420 [ 377.179268][T11524] ? ksys_write+0x242/0x270 [ 377.179315][T11524] ? __pfx_ksys_write+0x10/0x10 [ 377.179355][T11524] __x64_sys_bpf+0xba/0xd0 [ 377.179379][T11524] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.179419][T11524] do_syscall_64+0x174/0x580 [ 377.179483][T11524] ? trace_irq_disable+0x3b/0x140 [ 377.179512][T11524] ? clear_bhb_loop+0x40/0x90 [ 377.179540][T11524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.179563][T11524] RIP: 0033:0x7f590b59de59 [ 377.179584][T11524] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 377.179603][T11524] RSP: 002b:00007f590c398028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 377.179626][T11524] RAX: ffffffffffffffda RBX: 00007f590b826180 RCX: 00007f590b59de59 [ 377.179642][T11524] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 377.179656][T11524] RBP: 00007f590c398090 R08: 0000000000000000 R09: 0000000000000000 [ 377.179669][T11524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 377.179700][T11524] R13: 00007f590b826218 R14: 00007f590b826180 R15: 00007ffc2b65d7d8 [ 377.179736][T11524] [ 377.939433][T11552] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1507'. [ 377.966106][T11552] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1507'. [ 378.340053][T11566] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1510'. [ 378.387433][T11566] netlink: 'syz.1.1510': attribute type 4 has an invalid length. [ 378.530402][T11575] netlink: 'syz.3.1514': attribute type 4 has an invalid length. [ 378.573063][T11575] netlink: 'syz.3.1514': attribute type 4 has an invalid length. [ 378.768544][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.775624][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.290501][T11575] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.299114][T11575] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.311353][T11600] netlink: 'syz.2.1518': attribute type 3 has an invalid length. [ 379.997406][T11575] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 380.011765][T11575] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 380.252180][T11624] __nla_validate_parse: 5 callbacks suppressed [ 380.264984][T11624] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1521'. [ 380.275200][T11624] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1521'. [ 380.438551][ T597] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 380.470277][ T597] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.484411][ T597] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 380.505490][ T597] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.536877][T11624] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1521'. [ 380.568635][T11624] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1521'. [ 380.610166][ T597] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 380.634302][ T597] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.689406][T11632] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1523'. [ 380.691157][ T597] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 380.735889][ T597] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.809924][T11643] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1523'. [ 382.393621][T11708] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1536'. [ 382.423263][T11708] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1536'. [ 382.879518][T11708] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1536'. [ 382.910768][T11708] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1536'. [ 383.598196][T11746] wg0: entered promiscuous mode [ 383.614550][T11746] wg0: entered allmulticast mode [ 383.825166][T11749] syzkaller0: entered promiscuous mode [ 383.840588][T11749] syzkaller0: entered allmulticast mode [ 384.023966][T11778] FAULT_INJECTION: forcing a failure. [ 384.023966][T11778] name failslab, interval 1, probability 0, space 0, times 0 [ 384.079088][T11778] CPU: 1 UID: 0 PID: 11778 Comm: syz.4.1551 Not tainted syzkaller #0 PREEMPT(full) [ 384.079119][T11778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 384.079132][T11778] Call Trace: [ 384.079139][T11778] [ 384.079149][T11778] dump_stack_lvl+0xe8/0x150 [ 384.079187][T11778] should_fail_ex+0x40c/0x560 [ 384.079217][T11778] should_failslab+0xa8/0x100 [ 384.079266][T11778] __kmalloc_noprof+0xfe/0x720 [ 384.079299][T11778] ? sk_prot_alloc+0xe7/0x210 [ 384.079355][T11778] ? sk_prot_alloc+0xe7/0x210 [ 384.079394][T11778] sk_prot_alloc+0xe7/0x210 [ 384.079424][T11778] ? sk_alloc+0x27/0x390 [ 384.079457][T11778] sk_alloc+0x3a/0x390 [ 384.079492][T11778] bpf_prog_test_run_skb+0x3a6/0x2230 [ 384.079564][T11778] ? __fget_files+0x3a2/0x420 [ 384.079598][T11778] ? __fget_files+0x2a/0x420 [ 384.079629][T11778] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 384.079661][T11778] bpf_prog_test_run+0x2c5/0x340 [ 384.079693][T11778] __sys_bpf+0xa22/0xd90 [ 384.079727][T11778] ? __pfx___sys_bpf+0x10/0x10 [ 384.079765][T11778] ? __fget_files+0x2a/0x420 [ 384.079810][T11778] ? ksys_write+0x242/0x270 [ 384.079844][T11778] ? __pfx_ksys_write+0x10/0x10 [ 384.079882][T11778] __x64_sys_bpf+0xba/0xd0 [ 384.079907][T11778] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.079931][T11778] do_syscall_64+0x174/0x580 [ 384.079961][T11778] ? trace_irq_disable+0x3b/0x140 [ 384.079987][T11778] ? clear_bhb_loop+0x40/0x90 [ 384.080013][T11778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.080035][T11778] RIP: 0033:0x7ff83f19de59 [ 384.080055][T11778] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 384.080079][T11778] RSP: 002b:00007ff8400e9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 384.080103][T11778] RAX: ffffffffffffffda RBX: 00007ff83f426180 RCX: 00007ff83f19de59 [ 384.080118][T11778] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 384.080131][T11778] RBP: 00007ff8400e9090 R08: 0000000000000000 R09: 0000000000000000 [ 384.080143][T11778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 384.080156][T11778] R13: 00007ff83f426218 R14: 00007ff83f426180 R15: 00007fffbb3621c8 [ 384.080189][T11778] [ 386.600831][ T4988] udevd[4988]: worker [5635] /devices/virtual/block/nbd0 timeout; kill it [ 386.622536][ T4988] udevd[4988]: seq 13066 '/devices/virtual/block/nbd0' killed [ 386.953090][T11784] __nla_validate_parse: 5 callbacks suppressed [ 386.953111][T11784] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1553'. [ 387.348249][T11815] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1562'. [ 387.362155][T11808] netlink: 'syz.4.1559': attribute type 83 has an invalid length. [ 387.384930][T11815] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1562'. [ 387.467798][T11820] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1565'. [ 387.572856][T11825] FAULT_INJECTION: forcing a failure. [ 387.572856][T11825] name failslab, interval 1, probability 0, space 0, times 0 [ 387.608542][T11825] CPU: 1 UID: 0 PID: 11825 Comm: syz.2.1564 Not tainted syzkaller #0 PREEMPT(full) [ 387.608572][T11825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 387.608584][T11825] Call Trace: [ 387.608593][T11825] [ 387.608602][T11825] dump_stack_lvl+0xe8/0x150 [ 387.608642][T11825] should_fail_ex+0x40c/0x560 [ 387.608670][T11825] should_failslab+0xa8/0x100 [ 387.608707][T11825] __kmalloc_noprof+0xfe/0x720 [ 387.608736][T11825] ? security_sk_alloc+0x52/0x360 [ 387.608863][T11825] ? security_sk_alloc+0x52/0x360 [ 387.608891][T11825] ? __kmalloc_noprof+0x1ad/0x720 [ 387.608922][T11825] security_sk_alloc+0x52/0x360 [ 387.608953][T11825] sk_prot_alloc+0x101/0x210 [ 387.608986][T11825] ? sk_alloc+0x27/0x390 [ 387.609020][T11825] sk_alloc+0x3a/0x390 [ 387.609057][T11825] bpf_prog_test_run_skb+0x3a6/0x2230 [ 387.609116][T11825] ? __fget_files+0x3a2/0x420 [ 387.609144][T11825] ? __fget_files+0x2a/0x420 [ 387.609187][T11825] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 387.609222][T11825] bpf_prog_test_run+0x2c5/0x340 [ 387.609258][T11825] __sys_bpf+0xa22/0xd90 [ 387.609296][T11825] ? __pfx___sys_bpf+0x10/0x10 [ 387.609335][T11825] ? __fget_files+0x2a/0x420 [ 387.609382][T11825] ? ksys_write+0x242/0x270 [ 387.609417][T11825] ? __pfx_ksys_write+0x10/0x10 [ 387.609455][T11825] __x64_sys_bpf+0xba/0xd0 [ 387.609481][T11825] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.609504][T11825] do_syscall_64+0x174/0x580 [ 387.609537][T11825] ? trace_irq_disable+0x3b/0x140 [ 387.609563][T11825] ? clear_bhb_loop+0x40/0x90 [ 387.609591][T11825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.609612][T11825] RIP: 0033:0x7f7920b9de59 [ 387.609633][T11825] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 387.609651][T11825] RSP: 002b:00007f7921a17028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 387.609675][T11825] RAX: ffffffffffffffda RBX: 00007f7920e26090 RCX: 00007f7920b9de59 [ 387.609691][T11825] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 387.609704][T11825] RBP: 00007f7921a17090 R08: 0000000000000000 R09: 0000000000000000 [ 387.609718][T11825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 387.609731][T11825] R13: 00007f7920e26128 R14: 00007f7920e26090 R15: 00007ffc38494708 [ 387.609765][T11825] [ 387.879693][T11832] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1567'. [ 387.903226][T11832] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1567'. [ 388.103688][T11841] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1569'. [ 388.272769][T11841] ip6gre1: entered promiscuous mode [ 388.307033][T11841] ip6gre1: entered allmulticast mode [ 388.330825][T11848] ip6t_srh: unknown srh match flags 4000 [ 388.399900][T11859] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1577'. [ 388.512075][T11864] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1578'. [ 388.685890][T11870] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1581'. [ 388.958951][T11880] bond6: entered allmulticast mode [ 388.974370][T11880] 8021q: adding VLAN 0 to HW filter on device bond6 [ 389.335270][ T30] audit: type=1800 audit(1783894550.132:5): pid=11905 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1590" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1475 res=0 errno=0 [ 389.635445][T11918] dvmrp0: entered allmulticast mode [ 389.793242][T11935] bridge3: entered promiscuous mode [ 389.812329][T11935] bridge3: entered allmulticast mode [ 389.858704][T11938] netlink: 'syz.3.1598': attribute type 1 has an invalid length. [ 389.989136][T11944] bond4: (slave veth3): Enslaving as an active interface with a down link [ 390.127771][T11938] bond4: (slave veth5): Enslaving as an active interface with a down link [ 390.328606][T11944] 8021q: adding VLAN 0 to HW filter on device bond4 [ 390.719691][T11985] macsec1: entered promiscuous mode [ 390.731363][T11985] bridge0: entered promiscuous mode [ 391.212739][T12006] tipc: Enabled bearer , priority 0 [ 391.236860][T12010] syzkaller0: entered promiscuous mode [ 391.271113][T12010] syzkaller0: entered allmulticast mode [ 391.332920][T12006] tipc: Resetting bearer [ 391.371350][T12005] tipc: Resetting bearer [ 391.477890][T12005] tipc: Disabling bearer [ 391.900899][T12043] veth3: entered allmulticast mode [ 392.047748][T12063] __nla_validate_parse: 18 callbacks suppressed [ 392.047770][T12063] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1630'. [ 392.356327][T12070] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1635'. [ 392.395623][T12074] IPVS: set_ctl: invalid protocol: 135 100.1.1.2:20001 [ 392.416938][T12070] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1635'. [ 392.694027][T12089] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1641'. [ 392.713991][T12087] netlink: 'syz.0.1640': attribute type 1 has an invalid length. [ 392.771604][T12089] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1641'. [ 392.807593][T12090] FAULT_INJECTION: forcing a failure. [ 392.807593][T12090] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 392.821151][T12096] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1643'. [ 392.821277][T12090] CPU: 0 UID: 0 PID: 12090 Comm: syz.3.1642 Not tainted syzkaller #0 PREEMPT(full) [ 392.821303][T12090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 392.821315][T12090] Call Trace: [ 392.821322][T12090] [ 392.821330][T12090] dump_stack_lvl+0xe8/0x150 [ 392.821362][T12090] should_fail_ex+0x40c/0x560 [ 392.821389][T12090] _copy_to_user+0x31/0xb0 [ 392.821418][T12090] bpf_test_finish+0x1cf/0x690 [ 392.821444][T12090] ? __pfx_bpf_test_finish+0x10/0x10 [ 392.821471][T12090] bpf_prog_test_run_skb+0x11fe/0x2230 [ 392.821516][T12090] ? __fget_files+0x3a2/0x420 [ 392.821540][T12090] ? __fget_files+0x2a/0x420 [ 392.821603][T12090] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 392.821632][T12090] bpf_prog_test_run+0x2c5/0x340 [ 392.821683][T12090] __sys_bpf+0xa22/0xd90 [ 392.821864][T12090] ? __pfx___sys_bpf+0x10/0x10 [ 392.821982][T12090] ? __fget_files+0x2a/0x420 [ 392.822103][T12090] ? rcu_is_watching+0x15/0xb0 [ 392.822282][T12090] __x64_sys_bpf+0xba/0xd0 [ 392.822356][T12090] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.822421][T12090] do_syscall_64+0x174/0x580 [ 392.822513][T12090] ? trace_irq_disable+0x3b/0x140 [ 392.822602][T12090] ? clear_bhb_loop+0x40/0x90 [ 392.822686][T12090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.822749][T12090] RIP: 0033:0x7f590b59de59 [ 392.822813][T12090] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 392.822866][T12090] RSP: 002b:00007f590c3b9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 392.822931][T12090] RAX: ffffffffffffffda RBX: 00007f590b826090 RCX: 00007f590b59de59 [ 392.822966][T12090] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 392.823007][T12090] RBP: 00007f590c3b9090 R08: 0000000000000000 R09: 0000000000000000 [ 392.823041][T12090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 392.823081][T12090] R13: 00007f590b826128 R14: 00007f590b826090 R15: 00007ffc2b65d7d8 [ 392.823191][T12090] [ 393.217547][T12094] bond7: (slave veth5): Enslaving as an active interface with a down link [ 393.284378][T12097] bridge2: entered promiscuous mode [ 393.307375][T12097] bridge2: entered allmulticast mode [ 393.337952][T12097] team0: Port device bridge2 added [ 393.354038][T12099] bridge0: port 3(team0) entered blocking state [ 393.363097][T12099] bridge0: port 3(team0) entered disabled state [ 393.369728][T12099] team0: entered allmulticast mode [ 393.378752][T12099] team_slave_0: entered allmulticast mode [ 393.390451][T12108] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1645'. [ 393.403309][T12099] team_slave_1: entered allmulticast mode [ 393.418004][T12108] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1645'. [ 393.418053][T12099] team0: entered promiscuous mode [ 393.435974][T12099] team_slave_0: entered promiscuous mode [ 393.442130][T12099] team_slave_1: entered promiscuous mode [ 393.451722][T12099] bridge0: port 3(team0) entered blocking state [ 393.458865][T12099] bridge0: port 3(team0) entered forwarding state [ 393.481993][T12108] geneve2: entered promiscuous mode [ 393.493969][T12108] geneve2: entered allmulticast mode [ 393.507420][T12108] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1645'. [ 393.509017][ T8939] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.540209][ T8939] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.544455][T12108] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1645'. [ 393.558506][ T8939] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.558554][ T8939] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.700507][T12146] netlink: 'syz.1.1657': attribute type 4 has an invalid length. [ 396.002158][T12195] openvswitch: netlink: Message has 8 unknown bytes. [ 396.021288][T12195] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 396.050884][T12195] block nbd0: Unsupported socket: should be TCP or UNIX. [ 396.481863][T12215] x_tables: unsorted underflow at hook 3 [ 396.669858][ T12] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.700507][ T12] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.781970][ T12] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.819169][ T12] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.288834][T12249] syzkaller0: entered promiscuous mode [ 397.310575][T12249] syzkaller0: entered allmulticast mode [ 397.325534][ T4949] block nbd0: Possible stuck request ffff8880275c5080: control (read@0,1024B). Runtime 210 seconds [ 397.338038][ T4949] block nbd0: Possible stuck request ffff8880275c5240: control (read@1024,1024B). Runtime 210 seconds [ 397.349722][ T4949] block nbd0: Possible stuck request ffff8880275c5400: control (read@2048,1024B). Runtime 210 seconds [ 397.354558][T12263] netlink: 'syz.0.1688': attribute type 4 has an invalid length. [ 397.362753][ T4949] block nbd0: Possible stuck request ffff8880275c55c0: control (read@3072,1024B). Runtime 210 seconds [ 397.533545][T12249] tipc: Started in network mode [ 397.564767][T12249] tipc: Node identity 622844865095, cluster identity 4711 [ 397.613724][T12249] tipc: Enabled bearer , priority 0 [ 397.713790][T12277] __nla_validate_parse: 84 callbacks suppressed [ 397.713829][T12277] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1693'. [ 397.829658][T12243] tipc: Resetting bearer [ 397.841935][T12282] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1695'. [ 397.854729][T12281] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1694'. [ 397.865993][T12281] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1694'. [ 397.910437][T12243] tipc: Disabling bearer [ 397.924885][T12282] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1695'. [ 397.936997][T12281] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1694'. [ 397.954221][T12281] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1694'. [ 398.386452][T12310] netlink: 'syz.2.1704': attribute type 1 has an invalid length. [ 398.462709][T12310] 8021q: adding VLAN 0 to HW filter on device bond5 [ 398.638122][T12317] bond5: (slave dummy0): Enslaving as a backup interface with an up link [ 398.702963][ T6502] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 398.856437][ T13] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 398.956025][T12335] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1707'. [ 398.988631][T12335] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1707'. [ 399.035118][T12335] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1707'. [ 402.853218][T12385] bridge4: entered allmulticast mode [ 403.177516][T12399] syzkaller0: entered promiscuous mode [ 403.205449][T12399] syzkaller0: entered allmulticast mode [ 403.229686][T12405] __nla_validate_parse: 1 callbacks suppressed [ 403.229709][T12405] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1722'. [ 403.250391][T12405] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1722'. [ 403.293479][ T5626] IPVS: starting estimator thread 0... [ 403.319008][T12408] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1724'. [ 403.358912][T12399] tipc: Enabled bearer , priority 0 [ 403.395683][T12409] IPVS: using max 28 ests per chain, 67200 per kthread [ 403.397149][T12408] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1724'. [ 403.463627][T12413] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 403.737014][T12429] FAULT_INJECTION: forcing a failure. [ 403.737014][T12429] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 403.767083][T12429] CPU: 0 UID: 0 PID: 12429 Comm: syz.4.1728 Not tainted syzkaller #0 PREEMPT(full) [ 403.767114][T12429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 403.767128][T12429] Call Trace: [ 403.767137][T12429] [ 403.767147][T12429] dump_stack_lvl+0xe8/0x150 [ 403.767186][T12429] should_fail_ex+0x40c/0x560 [ 403.767218][T12429] _copy_from_user+0x2d/0xb0 [ 403.767252][T12429] __sys_bpf+0x2e7/0xd90 [ 403.767289][T12429] ? __pfx___sys_bpf+0x10/0x10 [ 403.767329][T12429] ? __fget_files+0x2a/0x420 [ 403.767378][T12429] ? ksys_write+0x242/0x270 [ 403.767415][T12429] ? __pfx_ksys_write+0x10/0x10 [ 403.767454][T12429] __x64_sys_bpf+0xba/0xd0 [ 403.767493][T12429] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.767517][T12429] do_syscall_64+0x174/0x580 [ 403.767550][T12429] ? trace_irq_disable+0x3b/0x140 [ 403.767577][T12429] ? clear_bhb_loop+0x40/0x90 [ 403.767604][T12429] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.767626][T12429] RIP: 0033:0x7ff83f19de59 [ 403.767648][T12429] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 403.767667][T12429] RSP: 002b:00007ff84012b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 403.767691][T12429] RAX: ffffffffffffffda RBX: 00007ff83f425fa0 RCX: 00007ff83f19de59 [ 403.767706][T12429] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 403.767720][T12429] RBP: 00007ff84012b090 R08: 0000000000000000 R09: 0000000000000000 [ 403.767734][T12429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 403.767746][T12429] R13: 00007ff83f426038 R14: 00007ff83f425fa0 R15: 00007fffbb3621c8 [ 403.767780][T12429] [ 403.999586][T12398] tipc: Resetting bearer [ 404.221926][T12398] tipc: Disabling bearer [ 404.265677][T12440] netlink: 'syz.4.1731': attribute type 1 has an invalid length. [ 404.561448][T12445] gretap1: entered allmulticast mode [ 404.619294][T12445] bond3: (slave gretap1): making interface the new active one [ 404.660817][T12445] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 405.239752][T12486] FAULT_INJECTION: forcing a failure. [ 405.239752][T12486] name failslab, interval 1, probability 0, space 0, times 0 [ 405.261026][T12485] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1740'. [ 405.277347][T12486] CPU: 0 UID: 0 PID: 12486 Comm: syz.1.1741 Not tainted syzkaller #0 PREEMPT(full) [ 405.277379][T12486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 405.277392][T12486] Call Trace: [ 405.277401][T12486] [ 405.277410][T12486] dump_stack_lvl+0xe8/0x150 [ 405.277450][T12486] should_fail_ex+0x40c/0x560 [ 405.277481][T12486] should_failslab+0xa8/0x100 [ 405.277517][T12486] __kmalloc_noprof+0xfe/0x720 [ 405.277553][T12486] ? bpf_test_init+0x9f/0x150 [ 405.277585][T12486] ? bpf_test_init+0x9f/0x150 [ 405.277624][T12486] bpf_test_init+0x9f/0x150 [ 405.277661][T12486] bpf_prog_test_run_skb+0x31e/0x2230 [ 405.277714][T12486] ? __fget_files+0x3a2/0x420 [ 405.277746][T12486] ? __fget_files+0x2a/0x420 [ 405.277781][T12486] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 405.277827][T12486] bpf_prog_test_run+0x2c5/0x340 [ 405.277862][T12486] __sys_bpf+0xa22/0xd90 [ 405.277900][T12486] ? __pfx___sys_bpf+0x10/0x10 [ 405.277940][T12486] ? __fget_files+0x2a/0x420 [ 405.277987][T12486] ? ksys_write+0x242/0x270 [ 405.278023][T12486] ? __pfx_ksys_write+0x10/0x10 [ 405.278061][T12486] __x64_sys_bpf+0xba/0xd0 [ 405.278087][T12486] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.278111][T12486] do_syscall_64+0x174/0x580 [ 405.278143][T12486] ? trace_irq_disable+0x3b/0x140 [ 405.278170][T12486] ? clear_bhb_loop+0x40/0x90 [ 405.278197][T12486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.278219][T12486] RIP: 0033:0x7f9092b9de59 [ 405.278241][T12486] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 405.278259][T12486] RSP: 002b:00007f9093981028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 405.278282][T12486] RAX: ffffffffffffffda RBX: 00007f9092e25fa0 RCX: 00007f9092b9de59 [ 405.278298][T12486] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 405.278312][T12486] RBP: 00007f9093981090 R08: 0000000000000000 R09: 0000000000000000 [ 405.278326][T12486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 405.278338][T12486] R13: 00007f9092e26038 R14: 00007f9092e25fa0 R15: 00007ffcebd90908 [ 405.278373][T12486] [ 405.281985][T12474] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1737'. [ 405.578989][T12474] netlink: 19 bytes leftover after parsing attributes in process `syz.4.1737'. [ 405.591799][T12474] netlink: 19 bytes leftover after parsing attributes in process `syz.4.1737'. [ 405.616946][T12490] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1742'. [ 405.777587][T12492] syzkaller0: refused to change device tx_queue_len [ 406.030886][T12502] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1745'. [ 406.567650][T12524] FAULT_INJECTION: forcing a failure. [ 406.567650][T12524] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 406.610542][T12524] CPU: 1 UID: 0 PID: 12524 Comm: syz.4.1753 Not tainted syzkaller #0 PREEMPT(full) [ 406.610571][T12524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 406.610584][T12524] Call Trace: [ 406.610592][T12524] [ 406.610601][T12524] dump_stack_lvl+0xe8/0x150 [ 406.610640][T12524] should_fail_ex+0x40c/0x560 [ 406.610672][T12524] _copy_from_user+0x2d/0xb0 [ 406.610717][T12524] bpf_test_init+0xd8/0x150 [ 406.610755][T12524] bpf_prog_test_run_skb+0x31e/0x2230 [ 406.610811][T12524] ? __fget_files+0x3a2/0x420 [ 406.610840][T12524] ? __fget_files+0x2a/0x420 [ 406.610872][T12524] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 406.610906][T12524] bpf_prog_test_run+0x2c5/0x340 [ 406.610938][T12524] __sys_bpf+0xa22/0xd90 [ 406.610972][T12524] ? __pfx___sys_bpf+0x10/0x10 [ 406.611011][T12524] ? __fget_files+0x2a/0x420 [ 406.611057][T12524] ? ksys_write+0x242/0x270 [ 406.611092][T12524] ? __pfx_ksys_write+0x10/0x10 [ 406.611129][T12524] __x64_sys_bpf+0xba/0xd0 [ 406.611154][T12524] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.611177][T12524] do_syscall_64+0x174/0x580 [ 406.611212][T12524] ? clear_bhb_loop+0x40/0x90 [ 406.611238][T12524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.611259][T12524] RIP: 0033:0x7ff83f19de59 [ 406.611279][T12524] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 406.611297][T12524] RSP: 002b:00007ff84012b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 406.611320][T12524] RAX: ffffffffffffffda RBX: 00007ff83f425fa0 RCX: 00007ff83f19de59 [ 406.611335][T12524] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 406.611349][T12524] RBP: 00007ff84012b090 R08: 0000000000000000 R09: 0000000000000000 [ 406.611362][T12524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 406.611374][T12524] R13: 00007ff83f426038 R14: 00007ff83f425fa0 R15: 00007fffbb3621c8 [ 406.611408][T12524] [ 407.264257][T12543] vlan3: entered promiscuous mode [ 407.281357][T12543] team0: entered promiscuous mode [ 407.920926][T12576] FAULT_INJECTION: forcing a failure. [ 407.920926][T12576] name failslab, interval 1, probability 0, space 0, times 0 [ 407.934066][T12576] CPU: 1 UID: 0 PID: 12576 Comm: syz.3.1766 Not tainted syzkaller #0 PREEMPT(full) [ 407.934097][T12576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 407.934110][T12576] Call Trace: [ 407.934121][T12576] [ 407.934133][T12576] dump_stack_lvl+0xe8/0x150 [ 407.934171][T12576] should_fail_ex+0x40c/0x560 [ 407.934220][T12576] should_failslab+0xa8/0x100 [ 407.934255][T12576] __kmalloc_noprof+0xfe/0x720 [ 407.934285][T12576] ? sk_prot_alloc+0xe7/0x210 [ 407.934316][T12576] ? sk_prot_alloc+0xe7/0x210 [ 407.934354][T12576] sk_prot_alloc+0xe7/0x210 [ 407.934381][T12576] ? sk_alloc+0x27/0x390 [ 407.934412][T12576] sk_alloc+0x3a/0x390 [ 407.934445][T12576] bpf_prog_test_run_skb+0x3a6/0x2230 [ 407.934503][T12576] ? __fget_files+0x3a2/0x420 [ 407.934530][T12576] ? __fget_files+0x2a/0x420 [ 407.934576][T12576] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 407.934611][T12576] bpf_prog_test_run+0x2c5/0x340 [ 407.934647][T12576] __sys_bpf+0xa22/0xd90 [ 407.934685][T12576] ? __pfx___sys_bpf+0x10/0x10 [ 407.934726][T12576] ? __fget_files+0x2a/0x420 [ 407.934774][T12576] ? ksys_write+0x242/0x270 [ 407.934810][T12576] ? __pfx_ksys_write+0x10/0x10 [ 407.934848][T12576] __x64_sys_bpf+0xba/0xd0 [ 407.934875][T12576] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.934900][T12576] do_syscall_64+0x174/0x580 [ 407.934937][T12576] ? trace_irq_disable+0x3b/0x140 [ 407.934965][T12576] ? clear_bhb_loop+0x40/0x90 [ 407.934993][T12576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.935015][T12576] RIP: 0033:0x7f590b59de59 [ 407.935036][T12576] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 407.935056][T12576] RSP: 002b:00007f590c3b9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 407.935079][T12576] RAX: ffffffffffffffda RBX: 00007f590b826090 RCX: 00007f590b59de59 [ 407.935094][T12576] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 407.935108][T12576] RBP: 00007f590c3b9090 R08: 0000000000000000 R09: 0000000000000000 [ 407.935120][T12576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 407.935132][T12576] R13: 00007f590b826128 R14: 00007f590b826090 R15: 00007ffc2b65d7d8 [ 407.935167][T12576] [ 408.303714][T12583] tipc: MTU too low for tipc bearer [ 408.315802][T12526] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 408.362109][T12575] tipc: Enabled bearer , priority 0 [ 408.548501][T12580] tipc: Resetting bearer [ 408.578928][T12592] __nla_validate_parse: 9 callbacks suppressed [ 408.578950][T12592] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1771'. [ 408.596603][T12592] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1771'. [ 408.772960][T12574] tipc: Disabling bearer [ 408.964291][T12610] ip6gre1: entered promiscuous mode [ 408.997236][T12610] ip6gre1: entered allmulticast mode [ 409.257993][T12601] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1774'. [ 409.258637][T12627] FAULT_INJECTION: forcing a failure. [ 409.258637][T12627] name failslab, interval 1, probability 0, space 0, times 0 [ 409.323654][T12634] bridge5: entered allmulticast mode [ 409.348210][T12627] CPU: 0 UID: 0 PID: 12627 Comm: syz.1.1780 Not tainted syzkaller #0 PREEMPT(full) [ 409.348241][T12627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 409.348255][T12627] Call Trace: [ 409.348264][T12627] [ 409.348273][T12627] dump_stack_lvl+0xe8/0x150 [ 409.348312][T12627] should_fail_ex+0x40c/0x560 [ 409.348352][T12627] should_failslab+0xa8/0x100 [ 409.348387][T12627] __kmalloc_noprof+0xfe/0x720 [ 409.348417][T12627] ? security_sk_alloc+0x52/0x360 [ 409.348484][T12627] ? security_sk_alloc+0x52/0x360 [ 409.348513][T12627] ? __kmalloc_noprof+0x1ad/0x720 [ 409.348542][T12627] security_sk_alloc+0x52/0x360 [ 409.348583][T12627] sk_prot_alloc+0x101/0x210 [ 409.348636][T12627] ? sk_alloc+0x27/0x390 [ 409.348684][T12627] sk_alloc+0x3a/0x390 [ 409.348727][T12627] bpf_prog_test_run_skb+0x3a6/0x2230 [ 409.348793][T12627] ? __fget_files+0x3a2/0x420 [ 409.348821][T12627] ? __fget_files+0x2a/0x420 [ 409.348855][T12627] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 409.348889][T12627] bpf_prog_test_run+0x2c5/0x340 [ 409.348925][T12627] __sys_bpf+0xa22/0xd90 [ 409.348969][T12627] ? __pfx___sys_bpf+0x10/0x10 [ 409.349009][T12627] ? __fget_files+0x2a/0x420 [ 409.349056][T12627] ? ksys_write+0x242/0x270 [ 409.349091][T12627] ? __pfx_ksys_write+0x10/0x10 [ 409.349135][T12627] __x64_sys_bpf+0xba/0xd0 [ 409.349162][T12627] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.349187][T12627] do_syscall_64+0x174/0x580 [ 409.349219][T12627] ? trace_irq_disable+0x3b/0x140 [ 409.349246][T12627] ? clear_bhb_loop+0x40/0x90 [ 409.349274][T12627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.349296][T12627] RIP: 0033:0x7f9092b9de59 [ 409.349317][T12627] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 409.349337][T12627] RSP: 002b:00007f9093981028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 409.349360][T12627] RAX: ffffffffffffffda RBX: 00007f9092e25fa0 RCX: 00007f9092b9de59 [ 409.349377][T12627] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 409.349391][T12627] RBP: 00007f9093981090 R08: 0000000000000000 R09: 0000000000000000 [ 409.349405][T12627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 409.349418][T12627] R13: 00007f9092e26038 R14: 00007f9092e25fa0 R15: 00007ffcebd90908 [ 409.349454][T12627] [ 409.701190][T12638] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1782'. [ 409.893450][T12646] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1784'. [ 409.907295][T12646] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1784'. [ 409.960708][T12648] netlink: 'syz.0.1785': attribute type 1 has an invalid length. [ 410.002186][T12650] netlink: 'syz.3.1787': attribute type 4 has an invalid length. [ 410.011763][T12650] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1787'. [ 410.256019][T12664] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1791'. [ 410.357887][T12667] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1791'. [ 410.451187][T12669] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1790'. [ 410.510567][T12669] syzkaller0: entered promiscuous mode [ 410.525252][T12669] syzkaller0: entered allmulticast mode [ 411.099227][T12673] syzkaller0: tun_chr_ioctl cmd 35108 [ 412.673164][T12735] syzkaller0: entered promiscuous mode [ 412.690513][T12735] syzkaller0: entered allmulticast mode [ 412.879902][T12745] FAULT_INJECTION: forcing a failure. [ 412.879902][T12745] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 412.920107][T12745] CPU: 0 UID: 0 PID: 12745 Comm: syz.3.1810 Not tainted syzkaller #0 PREEMPT(full) [ 412.920138][T12745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 412.920150][T12745] Call Trace: [ 412.920158][T12745] [ 412.920168][T12745] dump_stack_lvl+0xe8/0x150 [ 412.920207][T12745] should_fail_ex+0x40c/0x560 [ 412.920248][T12745] _copy_to_user+0x31/0xb0 [ 412.920283][T12745] bpf_test_finish+0x1cf/0x690 [ 412.920315][T12745] ? __pfx_bpf_test_finish+0x10/0x10 [ 412.920350][T12745] bpf_prog_test_run_skb+0x11fe/0x2230 [ 412.920409][T12745] ? __fget_files+0x3a2/0x420 [ 412.920438][T12745] ? __fget_files+0x2a/0x420 [ 412.920472][T12745] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 412.920508][T12745] bpf_prog_test_run+0x2c5/0x340 [ 412.920543][T12745] __sys_bpf+0xa22/0xd90 [ 412.920581][T12745] ? __pfx___sys_bpf+0x10/0x10 [ 412.920626][T12745] ? __fget_files+0x2a/0x420 [ 412.920673][T12745] ? ksys_write+0x242/0x270 [ 412.920708][T12745] ? __pfx_ksys_write+0x10/0x10 [ 412.920747][T12745] __x64_sys_bpf+0xba/0xd0 [ 412.920773][T12745] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.920797][T12745] do_syscall_64+0x174/0x580 [ 412.920829][T12745] ? trace_irq_disable+0x3b/0x140 [ 412.920855][T12745] ? clear_bhb_loop+0x40/0x90 [ 412.920881][T12745] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.920903][T12745] RIP: 0033:0x7f590b59de59 [ 412.920924][T12745] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 412.920942][T12745] RSP: 002b:00007f590c3da028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 412.920964][T12745] RAX: ffffffffffffffda RBX: 00007f590b825fa0 RCX: 00007f590b59de59 [ 412.920980][T12745] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 412.920992][T12745] RBP: 00007f590c3da090 R08: 0000000000000000 R09: 0000000000000000 [ 412.921004][T12745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 412.921016][T12745] R13: 00007f590b826038 R14: 00007f590b825fa0 R15: 00007ffc2b65d7d8 [ 412.921048][T12745] [ 413.625777][T12767] __nla_validate_parse: 13 callbacks suppressed [ 413.625801][T12767] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1817'. [ 413.830493][T12775] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1820'. [ 413.863907][T12778] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 413.885564][T12775] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1820'. [ 413.895235][T12778] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1821'. [ 413.905836][T12775] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1820'. [ 413.917566][T12778] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1821'. [ 413.926000][T12775] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1820'. [ 413.974830][T12780] veth7: entered promiscuous mode [ 413.982086][T12780] veth7: entered allmulticast mode [ 413.997195][T12780] team0: Device veth7 is up. Set it down before adding it as a team port [ 414.637459][T12801] bridge0: port 1(syz_tun) entered blocking state [ 414.644219][T12801] bridge0: port 1(syz_tun) entered forwarding state [ 414.665195][T12801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 414.698706][T12801] 8021q: adding VLAN 0 to HW filter on device team0 [ 414.717903][T12812] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1828'. [ 414.746922][T12800] erspan0: entered promiscuous mode [ 414.754482][T12800] erspan0: entered allmulticast mode [ 414.776076][ T36] bond5: (slave dummy0): link status up again after 0 ms [ 414.840279][ T36] bond5: (slave dummy0): failed to get link speed/duplex [ 414.892139][T12817] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1829'. [ 414.912158][T12817] tipc: Enabling of bearer rejected, failed to enable media [ 414.923579][T12818] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1829'. [ 414.945286][T12818] tipc: Enabling of bearer rejected, failed to enable media [ 415.013626][ T8942] bond5: (slave dummy0): failed to get link speed/duplex [ 415.162444][ T8942] bond5: (slave dummy0): failed to get link speed/duplex [ 415.384018][ T6502] bond5: (slave dummy0): failed to get link speed/duplex [ 415.443207][T12840] gretap0: left promiscuous mode [ 415.591481][T12840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 415.643671][T12840] 8021q: adding VLAN 0 to HW filter on device team0 [ 415.716530][T12840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 415.944199][T12840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 415.956812][T12840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 415.977835][T12840] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 415.991153][T12840] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 416.012180][T12840] veth0_vlan: left promiscuous mode [ 416.023428][T12840] veth0_vlan: entered promiscuous mode [ 416.041577][T12840] veth0_macvtap: left promiscuous mode [ 416.050678][T12840] veth0_macvtap: entered promiscuous mode [ 416.070608][T12840] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 416.080456][T12840] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 416.091948][T12840] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 416.105232][T12840] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 416.116750][T12840] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 416.235869][T12846] bond5: entered allmulticast mode [ 416.243627][T12846] 8021q: adding VLAN 0 to HW filter on device bond5 [ 416.254630][ T6511] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.262092][ T6511] bridge0: port 1(bridge_slave_0) entered forwarding state [ 416.296033][ T6511] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.303573][ T6511] bridge0: port 2(bridge_slave_1) entered forwarding state [ 416.352512][ T13] bond5: (slave dummy0): failed to get link speed/duplex [ 416.389823][ T8942] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.423696][ T8942] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.513173][ T6511] bond5: (slave dummy0): failed to get link speed/duplex [ 416.536556][ T8942] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.563058][ T8942] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.643318][ T6511] bond5: (slave dummy0): failed to get link speed/duplex [ 416.772682][ T6502] bond5: (slave dummy0): failed to get link speed/duplex [ 416.847582][T12883] netlink: 'syz.2.1847': attribute type 18 has an invalid length. [ 416.951126][T12887] netlink: 'syz.2.1847': attribute type 18 has an invalid length. [ 416.989673][ T6502] netdevsim netdevsim2 netdevsim0: set [0, 1] type 1 family 0 port 4352 - 0 [ 417.045173][ T6502] netdevsim netdevsim2 netdevsim1: set [0, 1] type 1 family 0 port 4352 - 0 [ 417.079769][ T6502] netdevsim netdevsim2 netdevsim2: set [0, 1] type 1 family 0 port 4352 - 0 [ 417.117522][ T6502] netdevsim netdevsim2 netdevsim3: set [0, 1] type 1 family 0 port 4352 - 0 [ 417.339180][T12902] batman_adv: batadv0: Adding interface: dummy0 [ 417.390502][T12902] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 417.450908][T12902] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 417.634942][T12914] syzkaller1: entered promiscuous mode [ 417.659623][T12914] syzkaller1: entered allmulticast mode [ 417.668982][T12913] FAULT_INJECTION: forcing a failure. [ 417.668982][T12913] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 417.688319][T12913] CPU: 1 UID: 0 PID: 12913 Comm: syz.0.1855 Not tainted syzkaller #0 PREEMPT(full) [ 417.688350][T12913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 417.688364][T12913] Call Trace: [ 417.688374][T12913] [ 417.688383][T12913] dump_stack_lvl+0xe8/0x150 [ 417.688424][T12913] should_fail_ex+0x40c/0x560 [ 417.688457][T12913] _copy_to_user+0x31/0xb0 [ 417.688493][T12913] simple_read_from_buffer+0xe1/0x170 [ 417.688529][T12913] proc_fail_nth_read+0x1bb/0x230 [ 417.688598][T12913] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 417.688630][T12913] ? rw_verify_area+0x24a/0x4c0 [ 417.688662][T12913] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 417.688690][T12913] vfs_read+0x213/0xa80 [ 417.688726][T12913] ? __pfx___mutex_lock+0x10/0x10 [ 417.688816][T12913] ? __pfx_vfs_read+0x10/0x10 [ 417.688872][T12913] ? __fget_files+0x2a/0x420 [ 417.688904][T12913] ? __fget_files+0x3a2/0x420 [ 417.688932][T12913] ? __fget_files+0x2a/0x420 [ 417.688967][T12913] ksys_read+0x150/0x270 [ 417.689003][T12913] ? __pfx_ksys_read+0x10/0x10 [ 417.689045][T12913] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.689069][T12913] do_syscall_64+0x174/0x580 [ 417.689112][T12913] ? trace_irq_disable+0x3b/0x140 [ 417.689139][T12913] ? clear_bhb_loop+0x40/0x90 [ 417.689165][T12913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.689187][T12913] RIP: 0033:0x7f0659d5e68e [ 417.689208][T12913] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 417.689226][T12913] RSP: 002b:00007f065ad4ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 417.689247][T12913] RAX: ffffffffffffffda RBX: 00007f065ad506c0 RCX: 00007f0659d5e68e [ 417.689263][T12913] RDX: 000000000000000f RSI: 00007f065ad500a0 RDI: 0000000000000008 [ 417.689276][T12913] RBP: 00007f065ad50090 R08: 0000000000000000 R09: 0000000000000000 [ 417.689289][T12913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 417.689301][T12913] R13: 00007f065a026038 R14: 00007f065a025fa0 R15: 00007ffd010c5f68 [ 417.689336][T12913] [ 418.415883][T12933] netlink: 'syz.2.1859': attribute type 10 has an invalid length. [ 418.499833][T12933] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 418.520637][T12933] team0: Port device netdevsim1 added [ 418.750310][T12941] __nla_validate_parse: 17 callbacks suppressed [ 418.750334][T12941] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1862'. [ 418.807739][T12945] netlink: 'syz.3.1862': attribute type 1 has an invalid length. [ 418.844909][T12945] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1862'. [ 418.876976][T12945] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1862'. [ 419.106482][T12944] bridge0: port 1(syz_tun) entered disabled state [ 419.528349][T12959] netlink: 'syz.3.1862': attribute type 5 has an invalid length. [ 419.552375][T12959] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1862'. [ 419.585978][ T8944] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 419.631923][ T8944] netdevsim netdevsim2 netdevsim0: unset [0, 1] type 1 family 0 port 4352 - 0 [ 419.651401][ T8944] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 44144 - 0 [ 419.683139][ T8944] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 419.735196][ T8944] netdevsim netdevsim2 netdevsim1: unset [0, 1] type 1 family 0 port 4352 - 0 [ 419.770857][ T8944] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 44144 - 0 [ 419.801258][ T8944] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 419.839985][ T8944] netdevsim netdevsim2 netdevsim2: unset [0, 1] type 1 family 0 port 4352 - 0 [ 419.853879][T12972] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1867'. [ 419.879478][ T8944] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 44144 - 0 [ 419.905746][T12972] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1867'. [ 419.951464][T12972] netlink: 'syz.4.1867': attribute type 1 has an invalid length. [ 420.100992][ T8942] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 420.111582][ T8942] netdevsim netdevsim2 netdevsim3: unset [0, 1] type 1 family 0 port 4352 - 0 [ 420.131478][ T8942] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 44144 - 0 [ 420.181350][T12972] 8021q: adding VLAN 0 to HW filter on device bond4 [ 420.192800][T12973] syzkaller1: entered promiscuous mode [ 420.206395][T12973] syzkaller1: entered allmulticast mode [ 420.309312][T12989] vlan0: entered promiscuous mode [ 420.318405][T12989] bond4: entered promiscuous mode [ 420.325016][T12989] vlan0: entered allmulticast mode [ 420.330577][T12989] bond4: entered allmulticast mode [ 420.367106][T12972] bond4: (slave bridge5): making interface the new active one [ 420.375465][T12972] bridge5: entered promiscuous mode [ 420.381410][T12972] bridge5: entered allmulticast mode [ 420.391685][T12972] bond4: (slave bridge5): Enslaving as an active interface with an up link [ 420.723513][T13006] netlink: 'syz.4.1873': attribute type 1 has an invalid length. [ 420.737226][T13006] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 420.850256][T13012] netlink: 616 bytes leftover after parsing attributes in process `syz.3.1874'. [ 420.967505][T13011] geneve0: entered promiscuous mode [ 420.987527][T13011] macvlan2: entered promiscuous mode [ 421.198082][T13026] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1881'. [ 421.440305][T13037] syzkaller0: entered promiscuous mode [ 421.462133][T13037] syzkaller0: entered allmulticast mode [ 421.916872][T13054] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1887'. [ 421.930928][T13054] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1887'. [ 422.104279][T13071] xt_hashlimit: size too large, truncated to 1048576 [ 423.102586][T13117] Bluetooth: MGMT ver 1.23 [ 423.147276][T13120] netlink: 'syz.0.1899': attribute type 15 has an invalid length. [ 423.436277][T13127] bridge7: entered promiscuous mode [ 423.444294][T13127] bridge7: entered allmulticast mode [ 423.454477][T13127] team0: Port device bridge7 added [ 423.866651][ T24] IPVS: starting estimator thread 0... [ 423.982315][T13160] IPVS: using max 28 ests per chain, 67200 per kthread [ 424.140565][T13173] netlink: 'syz.2.1912': attribute type 1 has an invalid length. [ 424.226435][T13177] __nla_validate_parse: 1 callbacks suppressed [ 424.226458][T13177] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1912'. [ 424.384733][T13173] 8021q: adding VLAN 0 to HW filter on device bond7 [ 424.490259][T13189] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1916'. [ 424.522056][T13189] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1916'. [ 424.546533][T13181] bond5: (slave dummy0): Removing an active aggregator [ 424.596071][T13181] bond5: (slave dummy0): Releasing backup interface [ 424.630204][T13181] bond7: (slave dummy0): making interface the new active one [ 424.645567][T13181] bond7: (slave dummy0): Enslaving as an active interface with an up link [ 424.687785][T13187] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 424.715355][T13193] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 425.141209][T13212] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 1, id = 0 [ 425.299558][T13217] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1924'. [ 425.330822][T13217] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1924'. [ 425.855124][T13245] xt_TPROXY: Can be used only with -p tcp or -p udp [ 425.916987][T13245] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1929'. [ 426.425850][T13275] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1937'. [ 426.643110][T13284] bridge6: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 427.061871][T13305] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1946'. [ 427.072819][T13305] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1946'. [ 427.085402][T13305] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1946'. [ 427.114722][T13305] syzkaller0: entered promiscuous mode [ 427.120912][T13305] syzkaller0: entered allmulticast mode [ 427.405287][ T4949] block nbd0: Possible stuck request ffff8880275c5080: control (read@0,1024B). Runtime 240 seconds [ 427.417447][ T4949] block nbd0: Possible stuck request ffff8880275c5240: control (read@1024,1024B). Runtime 240 seconds [ 427.432134][ T4949] block nbd0: Possible stuck request ffff8880275c5400: control (read@2048,1024B). Runtime 240 seconds [ 427.444066][ T4949] block nbd0: Possible stuck request ffff8880275c55c0: control (read@3072,1024B). Runtime 240 seconds [ 429.263353][T13374] tun0: tun_chr_ioctl cmd 1074025680 [ 429.616858][T13393] __nla_validate_parse: 8 callbacks suppressed [ 429.616883][T13393] netlink: 199784 bytes leftover after parsing attributes in process `syz.4.1967'. [ 429.647249][T13393] netlink: 'syz.4.1967': attribute type 1 has an invalid length. [ 429.900634][T13409] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1972'. [ 429.910863][T13409] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1972'. [ 430.120986][T13420] netlink: 'syz.4.1975': attribute type 1 has an invalid length. [ 430.347228][T13420] 8021q: adding VLAN 0 to HW filter on device bond5 [ 430.719204][T13451] sctp: [Deprecated]: syz.1.1979 (pid 13451) Use of int in max_burst socket option. [ 430.719204][T13451] Use struct sctp_assoc_value instead [ 430.748910][T13450] tipc: Enabled bearer , priority 0 [ 430.767384][T13450] syzkaller0: entered promiscuous mode [ 430.790672][T13450] syzkaller0: entered allmulticast mode [ 430.920636][T13445] netlink: 'syz.1.1979': attribute type 29 has an invalid length. [ 430.962121][T13460] netlink: 292 bytes leftover after parsing attributes in process `syz.3.1983'. [ 430.973037][T13445] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1979'. [ 431.349774][T13467] geneve0: left promiscuous mode [ 431.429875][T13470] macvtap1: entered promiscuous mode [ 431.454979][T13470] vlan0: entered promiscuous mode [ 431.484987][T13470] vlan0: left promiscuous mode [ 431.524021][T13488] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1987'. [ 431.662847][T13448] tipc: Resetting bearer [ 431.731684][T13448] tipc: Disabling bearer [ 431.939410][T13504] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1990'. [ 432.098105][T13504] bond5: option arp_all_targets: invalid value (3) [ 432.125570][T13504] bond5 (unregistering): Released all slaves [ 432.211513][T13510] net_ratelimit: 12 callbacks suppressed [ 432.211536][T13510] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 432.409391][T13523] bridge8: entered promiscuous mode [ 432.423114][T13523] bridge8: entered allmulticast mode [ 432.491065][T13530] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 432.516036][T13530] x_tables: duplicate underflow at hook 2 [ 432.905879][T13543] netlink: 'syz.3.2000': attribute type 12 has an invalid length. [ 432.955481][T13543] netlink: 'syz.3.2000': attribute type 29 has an invalid length. [ 432.978027][T13547] netlink: 'syz.0.2001': attribute type 22 has an invalid length. [ 432.990651][T13543] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2000'. [ 433.001908][T13547] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2001'. [ 433.030099][T13547] netlink: 'syz.0.2001': attribute type 22 has an invalid length. [ 433.069039][T13547] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2001'. [ 433.339405][T13557] syzkaller0: entered promiscuous mode [ 433.368809][T13557] syzkaller0: entered allmulticast mode [ 433.767759][T13581] xt_hashlimit: size too large, truncated to 1048576 [ 433.815068][T13583] @0Ù: renamed from bond_slave_1 [ 434.377105][T13600] bond5: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 434.618358][T13600] bond5 (unregistering): Released all slaves [ 434.725686][T13610] tipc: New replicast peer: 255.255.255.255 [ 434.740594][T13610] tipc: Enabled bearer , priority 10 [ 434.770223][T13606] syzkaller1: entered promiscuous mode [ 434.786158][T13606] syzkaller1: entered allmulticast mode [ 435.481964][T13653] tipc: Enabled bearer , priority 0 [ 435.663780][T13653] syzkaller0: entered promiscuous mode [ 435.674818][T13653] syzkaller0: entered allmulticast mode [ 435.681502][T13653] tipc: Resetting bearer [ 435.705412][T13666] __nla_validate_parse: 4 callbacks suppressed [ 435.705434][T13666] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2023'. [ 435.800696][T13657] bond6: entered promiscuous mode [ 435.815775][T13657] bond6: entered allmulticast mode [ 435.855276][T13647] tipc: Resetting bearer [ 436.077529][T13670] netlink: 'syz.1.2022': attribute type 16 has an invalid length. [ 436.123497][T13670] netlink: 'syz.1.2022': attribute type 17 has an invalid length. [ 436.255304][T13692] netlink: 'syz.4.2027': attribute type 1 has an invalid length. [ 436.291537][T13692] netlink: 'syz.4.2027': attribute type 2 has an invalid length. [ 438.971660][T13647] tipc: Disabling bearer [ 438.983226][ T5756] tipc: Node number set to 4269225786 [ 439.008569][T13678] bridge0: port 3(team0) entered disabled state [ 439.027883][T13678] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.040083][T13678] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.160911][T13670] erspan0: left promiscuous mode [ 439.183296][T13670] erspan0: left allmulticast mode [ 439.197100][T13670] sit0: left promiscuous mode [ 439.225221][T13670] bridge0: port 3(team0) entered blocking state [ 439.234676][T13670] bridge0: port 3(team0) entered forwarding state [ 439.268429][T13670] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.277718][T13670] bridge0: port 1(bridge_slave_0) entered forwarding state [ 439.316855][T13670] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.326166][T13670] bridge0: port 2(bridge_slave_1) entered forwarding state [ 439.392069][T13670] vlan0: left promiscuous mode [ 439.472083][T13670] A link change request failed with some changes committed already. Interface nicvf0 may have been left with an inconsistent configuration, please check. [ 439.519624][ T8318] tipc: Node number set to 851264646 [ 439.530892][T13706] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 440.100026][ T6502] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 440.171675][ T6502] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 440.213906][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 440.217510][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.237824][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.325219][T13739] syzkaller1: entered promiscuous mode [ 440.341296][T13739] syzkaller1: entered allmulticast mode [ 440.486600][T13747] openvswitch: netlink: IP tunnel TTL not specified. [ 440.508411][T13747] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 440.757861][T13769] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2045'. [ 440.918585][ T4937] block nbd2: Receive control failed (result -107) [ 441.235841][T13788] xt_recent: Unsupported userspace flags (000000c5) [ 442.550948][T13844] tipc: Enabling of bearer rejected, failed to enable media [ 443.005400][T13877] netlink: 'syz.4.2067': attribute type 10 has an invalid length. [ 443.137926][T13887] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 443.201738][T13876] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2069'. [ 443.238012][T13876] tipc: Cannot configure node identity twice [ 443.300398][T13877] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 443.335939][T13877] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 443.537079][T13872] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 443.579313][T13872] bond0 (unregistering): Released all slaves [ 443.779566][T13883] [ 443.782587][T13883] ====================================================== [ 443.790424][T13883] WARNING: possible circular locking dependency detected [ 443.798016][T13883] syzkaller #0 Not tainted [ 443.803542][T13883] ------------------------------------------------------ [ 443.810880][T13883] syz.0.2070/13883 is trying to acquire lock: [ 443.818466][T13883] ffffffff8ec848a0 (fs_reclaim){+.+.}-{0:0}, at: __kmalloc_cache_noprof+0x61/0x660 [ 443.828476][T13883] [ 443.828476][T13883] but task is already holding lock: [ 443.836075][T13883] ffff8880575ed530 (&idev->mc_lock){+.+.}-{4:4}, at: __ipv6_dev_mc_inc+0x4e/0xa40 [ 443.846191][T13883] [ 443.846191][T13883] which lock already depends on the new lock. [ 443.846191][T13883] [ 443.857827][T13883] [ 443.857827][T13883] the existing dependency chain (in reverse order) is: [ 443.867383][T13883] [ 443.867383][T13883] -> #7 (&idev->mc_lock){+.+.}-{4:4}: [ 443.875249][T13883] __mutex_lock+0x19d/0x1550 [ 443.880622][T13883] __ipv6_dev_mc_inc+0x4e/0xa40 [ 443.886314][T13883] __ipv6_sock_mc_join+0x4f7/0x740 [ 443.892010][T13883] ipv6_mcast_join_leave+0x1a2/0x240 [ 443.898873][T13883] do_ipv6_setsockopt+0x1990/0x3180 [ 443.906386][T13883] ipv6_setsockopt+0x59/0x170 [ 443.912385][T13883] do_sock_setsockopt+0x17c/0x1b0 [ 443.918883][T13883] __x64_sys_setsockopt+0x13d/0x1b0 [ 443.924736][T13883] do_syscall_64+0x174/0x580 [ 443.930705][T13883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.937286][T13883] [ 443.937286][T13883] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 443.945089][T13883] lock_sock_nested+0x41/0x100 [ 443.950702][T13883] inet_shutdown+0x6a/0x390 [ 443.955886][T13883] nbd_mark_nsock_dead+0x2cb/0x550 [ 443.961755][T13883] recv_work+0x1cee/0x1e10 [ 443.968867][T13883] process_scheduled_works+0xa8e/0x14e0 [ 443.975739][T13883] worker_thread+0xa47/0xfb0 [ 443.981683][T13883] kthread+0x388/0x470 [ 443.986311][T13883] ret_from_fork+0x514/0xb70 [ 443.991508][T13883] ret_from_fork_asm+0x1a/0x30 [ 443.996868][T13883] [ 443.996868][T13883] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 444.005158][T13883] __mutex_lock+0x19d/0x1550 [ 444.010485][T13883] nbd_queue_rq+0x373/0x1150 [ 444.016168][T13883] blk_mq_dispatch_rq_list+0x499/0x1990 [ 444.022455][T13883] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 444.029652][T13883] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 444.036178][T13883] blk_mq_run_work_fn+0x16c/0x300 [ 444.042065][T13883] process_scheduled_works+0xa8e/0x14e0 [ 444.048264][T13883] worker_thread+0xa47/0xfb0 [ 444.053446][T13883] kthread+0x388/0x470 [ 444.058349][T13883] ret_from_fork+0x514/0xb70 [ 444.063597][T13883] ret_from_fork_asm+0x1a/0x30 [ 444.069186][T13883] [ 444.069186][T13883] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 444.077138][T13883] __mutex_lock+0x19d/0x1550 [ 444.083279][T13883] nbd_queue_rq+0xc1/0x1150 [ 444.090499][T13883] blk_mq_dispatch_rq_list+0x499/0x1990 [ 444.097248][T13883] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 444.106039][T13883] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 444.116906][T13883] blk_mq_run_work_fn+0x16c/0x300 [ 444.122959][T13883] process_scheduled_works+0xa8e/0x14e0 [ 444.129183][T13883] worker_thread+0xa47/0xfb0 [ 444.134934][T13883] kthread+0x388/0x470 [ 444.139592][T13883] ret_from_fork+0x514/0xb70 [ 444.145109][T13883] ret_from_fork_asm+0x1a/0x30 [ 444.151406][T13883] [ 444.151406][T13883] -> #3 (set->srcu){.+.+}-{0:0}: [ 444.160784][T13883] __synchronize_srcu+0xc9/0x2f0 [ 444.169957][T13883] elevator_switch+0x1e8/0x7b0 [ 444.175655][T13883] elevator_change+0x2fa/0x480 [ 444.181254][T13883] elevator_set_default+0x375/0x440 [ 444.190407][T13883] blk_register_queue+0x3f3/0x4e0 [ 444.197790][T13883] __add_disk+0x6cb/0xe30 [ 444.204115][T13883] add_disk_fwnode+0xfb/0x4b0 [ 444.212620][T13883] nbd_dev_add+0x733/0xb60 [ 444.220660][T13883] nbd_init+0x15f/0x1e0 [ 444.225970][T13883] do_one_initcall+0x250/0x870 [ 444.232191][T13883] do_initcall_level+0x10a/0x1a0 [ 444.238210][T13883] do_initcalls+0x59/0xa0 [ 444.245061][T13883] kernel_init_freeable+0x29d/0x3e0 [ 444.251139][T13883] kernel_init+0x1d/0x1d0 [ 444.256594][T13883] ret_from_fork+0x514/0xb70 [ 444.262215][T13883] ret_from_fork_asm+0x1a/0x30 [ 444.267783][T13883] [ 444.267783][T13883] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 444.276052][T13883] __mutex_lock+0x19d/0x1550 [ 444.281214][T13883] elevator_change+0x1af/0x480 [ 444.286622][T13883] elevator_set_none+0xb5/0x140 [ 444.292032][T13883] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 444.299100][T13883] nbd_start_device+0x189/0xb30 [ 444.306353][T13883] nbd_genl_connect+0x1597/0x1c10 [ 444.314165][T13883] genl_family_rcv_msg_doit+0x233/0x340 [ 444.320503][T13883] genl_rcv_msg+0x614/0x7a0 [ 444.325969][T13883] netlink_rcv_skb+0x226/0x4a0 [ 444.331302][T13883] genl_rcv+0x28/0x40 [ 444.335861][T13883] netlink_unicast+0x7bb/0x940 [ 444.341210][T13883] netlink_sendmsg+0x813/0xb40 [ 444.346537][T13883] sock_sendmsg_nosec+0x13a/0x180 [ 444.352163][T13883] ____sys_sendmsg+0x54e/0x850 [ 444.358276][T13883] ___sys_sendmsg+0x2a5/0x360 [ 444.363512][T13883] __x64_sys_sendmsg+0x1b1/0x290 [ 444.369009][T13883] do_syscall_64+0x174/0x580 [ 444.374169][T13883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.380779][T13883] [ 444.380779][T13883] -> #1 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 444.389444][T13883] blk_alloc_queue+0x544/0x690 [ 444.395476][T13883] __blk_mq_alloc_disk+0x194/0x390 [ 444.401179][T13883] nbd_dev_add+0x494/0xb60 [ 444.406687][T13883] nbd_init+0x15f/0x1e0 [ 444.412147][T13883] do_one_initcall+0x250/0x870 [ 444.417661][T13883] do_initcall_level+0x10a/0x1a0 [ 444.423652][T13883] do_initcalls+0x59/0xa0 [ 444.428594][T13883] kernel_init_freeable+0x29d/0x3e0 [ 444.434719][T13883] kernel_init+0x1d/0x1d0 [ 444.440057][T13883] ret_from_fork+0x514/0xb70 [ 444.445482][T13883] ret_from_fork_asm+0x1a/0x30 [ 444.451087][T13883] [ 444.451087][T13883] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 444.458636][T13883] __lock_acquire+0x1520/0x2cf0 [ 444.464092][T13883] lock_acquire+0x106/0x350 [ 444.470439][T13883] fs_reclaim_acquire+0x71/0x100 [ 444.476160][T13883] __kmalloc_cache_noprof+0x61/0x660 [ 444.482442][T13883] __ipv6_dev_mc_inc+0x447/0xa40 [ 444.487956][T13883] ipv6_add_dev+0xe36/0x13a0 [ 444.493338][T13883] addrconf_notify+0x771/0x1050 [ 444.499111][T13883] notifier_call_chain+0x1a5/0x3d0 [ 444.505053][T13883] register_netdevice+0x18a4/0x1eb0 [ 444.512395][T13883] br_add_bridge+0xa3/0xf0 [ 444.517631][T13883] br_ioctl_stub+0x908/0xd60 [ 444.522794][T13883] sock_ioctl+0x4e1/0x7e0 [ 444.528005][T13883] __se_sys_ioctl+0xfc/0x170 [ 444.533685][T13883] do_syscall_64+0x174/0x580 [ 444.538840][T13883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.545280][T13883] [ 444.545280][T13883] other info that might help us debug this: [ 444.545280][T13883] [ 444.555711][T13883] Chain exists of: [ 444.555711][T13883] fs_reclaim --> sk_lock-AF_INET6 --> &idev->mc_lock [ 444.555711][T13883] [ 444.568552][T13883] Possible unsafe locking scenario: [ 444.568552][T13883] [ 444.576123][T13883] CPU0 CPU1 [ 444.581524][T13883] ---- ---- [ 444.587258][T13883] lock(&idev->mc_lock); [ 444.591721][T13883] lock(sk_lock-AF_INET6); [ 444.598965][T13883] lock(&idev->mc_lock); [ 444.606386][T13883] lock(fs_reclaim); [ 444.610529][T13883] [ 444.610529][T13883] *** DEADLOCK *** [ 444.610529][T13883] [ 444.619147][T13883] 3 locks held by syz.0.2070/13883: [ 444.624718][T13883] #0: ffffffff9000cfa0 (br_ioctl_mutex){+.+.}-{4:4}, at: sock_ioctl+0x4b8/0x7e0 [ 444.635749][T13883] #1: ffffffff9002c240 (rtnl_mutex){+.+.}-{4:4}, at: br_ioctl_stub+0x1a8/0xd60 [ 444.645073][T13883] #2: ffff8880575ed530 (&idev->mc_lock){+.+.}-{4:4}, at: __ipv6_dev_mc_inc+0x4e/0xa40 [ 444.655035][T13883] [ 444.655035][T13883] stack backtrace: [ 444.660954][T13883] CPU: 1 UID: 0 PID: 13883 Comm: syz.0.2070 Not tainted syzkaller #0 PREEMPT(full) [ 444.660977][T13883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 444.660991][T13883] Call Trace: [ 444.661000][T13883] [ 444.661009][T13883] dump_stack_lvl+0xe8/0x150 [ 444.661042][T13883] print_circular_bug+0x2e1/0x300 [ 444.661063][T13883] check_noncircular+0x12e/0x150 [ 444.661095][T13883] __lock_acquire+0x1520/0x2cf0 [ 444.661121][T13883] ? preempt_schedule_thunk+0x16/0x40 [ 444.661143][T13883] ? preempt_schedule_common+0x82/0xd0 [ 444.661169][T13883] ? preempt_schedule_thunk+0x16/0x40 [ 444.661193][T13883] ? __kmalloc_cache_noprof+0x61/0x660 [ 444.661215][T13883] lock_acquire+0x106/0x350 [ 444.661238][T13883] ? __kmalloc_cache_noprof+0x61/0x660 [ 444.661262][T13883] ? __ipv6_dev_mc_inc+0x4e/0xa40 [ 444.661283][T13883] fs_reclaim_acquire+0x71/0x100 [ 444.661306][T13883] ? __kmalloc_cache_noprof+0x61/0x660 [ 444.661328][T13883] __kmalloc_cache_noprof+0x61/0x660 [ 444.661351][T13883] ? __ipv6_dev_mc_inc+0x447/0xa40 [ 444.661367][T13883] ? __ipv6_dev_mc_inc+0x447/0xa40 [ 444.661388][T13883] __ipv6_dev_mc_inc+0x447/0xa40 [ 444.661410][T13883] ? addrconf_sysctl_register+0x1a9/0x1c0 [ 444.661435][T13883] ipv6_add_dev+0xe36/0x13a0 [ 444.661458][T13883] addrconf_notify+0x771/0x1050 [ 444.661483][T13883] notifier_call_chain+0x1a5/0x3d0 [ 444.661511][T13883] register_netdevice+0x18a4/0x1eb0 [ 444.661537][T13883] ? __pfx_register_netdevice+0x10/0x10 [ 444.661553][T13883] ? __kvmalloc_node_noprof+0x35c/0x860 [ 444.661576][T13883] ? alloc_netdev_mqs+0xd45/0x12b0 [ 444.661598][T13883] ? alloc_netdev_mqs+0xe64/0x12b0 [ 444.661619][T13883] br_add_bridge+0xa3/0xf0 [ 444.661645][T13883] br_ioctl_stub+0x908/0xd60 [ 444.661672][T13883] ? trace_contention_end+0x3d/0x140 [ 444.661690][T13883] ? __mutex_lock+0x30d/0x1550 [ 444.661716][T13883] ? __pfx_br_ioctl_stub+0x10/0x10 [ 444.661742][T13883] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 444.661764][T13883] ? hook_file_ioctl+0x1f0/0x5f0 [ 444.661891][T13883] ? __pfx_br_ioctl_stub+0x10/0x10 [ 444.661918][T13883] sock_ioctl+0x4e1/0x7e0 [ 444.661938][T13883] ? __pfx_sock_ioctl+0x10/0x10 [ 444.661957][T13883] ? __fget_files+0x2a/0x420 [ 444.661979][T13883] ? __fget_files+0x3a2/0x420 [ 444.662001][T13883] ? __fget_files+0x2a/0x420 [ 444.662024][T13883] ? bpf_lsm_file_ioctl+0x9/0x20 [ 444.662061][T13883] ? __pfx_sock_ioctl+0x10/0x10 [ 444.662079][T13883] __se_sys_ioctl+0xfc/0x170 [ 444.662095][T13883] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.662114][T13883] do_syscall_64+0x174/0x580 [ 444.662141][T13883] ? trace_irq_disable+0x3b/0x140 [ 444.662179][T13883] ? clear_bhb_loop+0x40/0x90 [ 444.662201][T13883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.662226][T13883] RIP: 0033:0x7f0659d9de59 [ 444.662247][T13883] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 444.662263][T13883] RSP: 002b:00007f065ad50028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 444.662283][T13883] RAX: ffffffffffffffda RBX: 00007f065a025fa0 RCX: 00007f0659d9de59 [ 444.662296][T13883] RDX: 0000200000000080 RSI: 0000000000008941 RDI: 0000000000000007 [ 444.662308][T13883] RBP: 00007f0659e33e6f R08: 0000000000000000 R09: 0000000000000000 [ 444.662319][T13883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 444.662330][T13883] R13: 00007f065a026038 R14: 00007f065a025fa0 R15: 00007ffd010c5f68 [ 444.662350][T13883] [ 445.060471][T13883] smc: adding net device veth1_to_team with user defined pnetid S