last executing test programs: 6.990558824s ago: executing program 1 (id=2793): r0 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) r1 = socket(0x5, 0x803, 0x3) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(r2) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) (async, rerun: 64) syz_genetlink_get_family_id$nl80211(0x0, r2) (async) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r2, 0x0, 0x80) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r4 = socket(0x40000000015, 0x5, 0x0) (rerun: 64) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f00000008c0), 0x4) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e21, 0xfffffffe, @local, 0x20009}, 0x1c) r5 = socket$inet_smc(0x2b, 0x1, 0x0) r6 = socket(0x10, 0x3, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="3800000041000100fcff0700040000000100000004004880180001801400108010000b8008000100ac1414bb0400f88008000200", @ANYRES32=r7, @ANYBLOB="740546afd37e4d66f92023865a9794ca3dc4b73d"], 0x38}, 0x1, 0x0, 0x0, 0x404c005}, 0x4008094) (async) write(r6, &(0x7f00000000c0)="240000001e005f0214fffffffffffff80700000001000000000000000500080002000000", 0x24) setsockopt$inet_tcp_TCP_MD5SIG(r5, 0x6, 0x20, &(0x7f00000001c0)={@in={{0x2, 0x4e21, @remote}}, 0x3, 0x0, 0x1002, 0x0, "5e3b86774ef89ec669fabcaff49c2ed78c4614c85b196a0c67a776931c08d43101cb8242bc65b8e0662749000000000000000000c900000000000000000000000200"}, 0xd8) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@o_path={&(0x7f00000000c0)='./file0\x00', 0x0, 0x10}, 0x18) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="48310600003f000008000a00", @ANYRES32=r8, @ANYBLOB="5dbf4c5ceb396649140012800b9221d4c5d2629a"], 0x3c}, 0x1, 0x0, 0x0, 0x20004081}, 0x40000) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000feffffff00000000001300001801000020696c250000000000202020db1af8ff41000000bda102000000000007010000f8ffffffb702000008000000b70300000000000085000000000000000045"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6.38122196s ago: executing program 2 (id=2801): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x8, 0x0, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x22}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000023c0)=@newlink={0x38, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40810, 0x1}, [@IFLA_GROUP={0x8}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x10000}, @IFLA_TXQLEN={0x8, 0xd, 0x80}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040051}, 0x4000000) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000002900)=r1, 0x4) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) syz_genetlink_get_family_id$ethtool(&(0x7f0000000a80), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'veth0_vlan\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4008451}, 0x20000800) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="19000000040000000400000001"], 0x1d) unshare(0x28000600) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r4, 0x0, 0x0}, 0x20) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r5, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) socket$inet6_sctp(0xa, 0x1, 0x84) 4.510113434s ago: executing program 2 (id=2805): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x50}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x42}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) (async) getpeername$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @private}, &(0x7f0000000100)=0x10) getsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, 0x0, 0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x9}, 0x50) 4.426979906s ago: executing program 1 (id=2807): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002b40)=ANY=[@ANYBLOB="1c0000003600010027bd700004000002000000080001800400758000"], 0x1c}, 0x1, 0x0, 0x0, 0x200048d5}, 0x4008094) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendmmsg$inet6(r1, &(0x7f0000000240)=[{{&(0x7f0000000680)={0xa, 0x4e24, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8e}, 0x1c, &(0x7f0000000d80)=[{&(0x7f0000000c40)="ea", 0x1}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x4e1e, 0x2, @ipv4={'\x00', '\xff\xff', @remote}, 0x400}, 0x1c}}], 0x2, 0x80400c0) shutdown(r1, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000009000000dfa2bff372df8cdbeb318ab2bec8fc36903c0ec359caa1af3c914019395cc154010c693709800000000000000016a85adef34bf78c76e6222337923e1bea6ef682cc4375f594425d408ccc58187feb0e3d43347f989007a7c63f6dae2acb4af936461f34a8a32a50bbbb69ec85168947b86df9f2609bf93f7a1be259621818c3c75da31290bce645451b851111dd98ac4d8da9317c2c082020e0b2d634086785f3fe41a3053645cc413790faf7e229c782845b5bb774f7f154263178151ea93ff2cac4b181332c9c9a1c7d85616c8100000000000000d8300d19d585000000fc005774b56a7142047326f940e95b8489e1c5650f5c61299a295f39c88456391cffdef93e29f10f4a11f0cfbfc0ff976b20fef6033495b9b94777db9bb9b678ffc1130000009faa798226a080c01e47151268a02dc1a557cfdcf76305fbf6643df66b1b4d2d5e7bf698fc5a18d984ecb91e6683a5f522d536e2f3c43b89823659d1945258fc668950e5aacfffffffffffffff7f7a266c90e64efc8d8f730867202a9ee94e6a00"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={r3, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffffe74, 0x10, &(0x7f0000000480), 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4000000, @mcast1}}}, 0x32) sendmmsg(r5, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e24, 0x0, @empty, 0x4}}, 0x8, 0x1, 0xfffffe01, 0x0, 0xb3550aa4ba878386, 0x2, 0x2}, 0x9c) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f0000001200)={0x0, 0x81, 0x0, [0xc6, 0x0, 0x3b, 0x809b, 0xe99], [0x7, 0x3, 0x0, 0x6, 0x5, 0xbd, 0x2, 0x7, 0x61482956, 0x8, 0x4, 0x400, 0x0, 0x8, 0x28, 0x4, 0x57c3, 0xffffffffffff0001, 0xd3, 0x9, 0x21e, 0x3ff, 0x3, 0x400, 0x8, 0x7, 0x0, 0x400000005, 0x1, 0x7, 0x4, 0xa, 0x6, 0x5, 0xffffffff, 0x8000000000000001, 0x8000000000000000, 0x7fffffff, 0x4, 0x6, 0x4, 0x0, 0x26, 0x0, 0x100000001, 0x5, 0x3, 0x80, 0x1aa88053, 0x2, 0x0, 0x4, 0x3, 0x1, 0x2, 0x58, 0x52a, 0x5, 0x7, 0x9, 0x5, 0x3, 0x1000, 0x8000000000000000, 0x4, 0xca, 0x4, 0x3ff, 0x3, 0x3, 0xfffffffffffffffd, 0xdffffffffffffff1, 0x0, 0x5, 0x7, 0x7, 0x9, 0x10, 0xc, 0x6, 0x2, 0x6, 0x10000, 0x800, 0xc, 0xf88d, 0x100000001, 0x8, 0x1dba, 0x3, 0x3, 0x8, 0x201, 0x80000001, 0x2, 0x8a70, 0x4, 0x5, 0x9, 0xfffffffffffffff7, 0x10, 0x810a, 0x0, 0x4, 0x5, 0x52, 0x6, 0x0, 0x4, 0x7, 0x8, 0x9, 0x3, 0x7, 0x9, 0x7fffffff, 0x10002, 0xed, 0x1ff, 0x8000000000000000, 0x4]}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001640)={r6, 0xffffffffffff0000, 0x1, [0x6, 0x3, 0x6, 0x63b, 0x6], [0x2, 0x5, 0x0, 0x3, 0x6, 0x2, 0x7fffffffffffffff, 0xd, 0x8, 0x8, 0x7fff, 0x4, 0x6, 0xb0, 0x3, 0x2, 0x4, 0x1000, 0x5, 0x4, 0x9395, 0x1be0, 0x9, 0x8, 0x9, 0x4, 0x2, 0x3, 0x4, 0x20000000, 0x0, 0x9, 0x9, 0x5, 0x49fe, 0x4, 0xd, 0x6, 0x7, 0x6, 0x2, 0x7, 0x3, 0x6, 0x4, 0x9, 0x8000, 0x100000003, 0x3, 0x0, 0x3, 0x4, 0x9, 0x6, 0x0, 0xa, 0x8, 0x10000, 0xc4, 0x79, 0x50, 0x2, 0x1, 0xfffffffffffffff0, 0x13c5, 0x8, 0x1, 0x1, 0x5, 0x400000060, 0x2, 0x9, 0xffffffff, 0x9, 0x0, 0x5, 0x4, 0x3, 0x4, 0x7, 0x5, 0x101, 0x4, 0x1, 0x8000008, 0x6, 0x802, 0xfffffffffffffff1, 0x0, 0xe9, 0x451, 0x100000001, 0x1, 0xe, 0x7ff, 0xfffffffffffffbff, 0x8, 0x4, 0x7fffffff, 0x4, 0x0, 0xfffffffffffffff8, 0x10000, 0xfffffffffffffffb, 0xb, 0xfffffffffffffffe, 0x4, 0x80000001, 0x38b, 0x9, 0x9, 0x1, 0xffffffffffffffff, 0x4, 0x0, 0x4, 0x693, 0x6, 0x3, 0x2, 0xff]}) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$netlink(0x10, 0x3, 0xa) bind$x25(r7, &(0x7f0000000700), 0x12) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e22, 0x100000, @empty, 0x2}}, 0xad7, 0x2, 0x5, 0x3, 0x50, 0x1, 0x6}, &(0x7f0000000440)=0x9c) r8 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r8, &(0x7f0000000100)={0x18, 0x2, {0x2, @broadcast}}, 0x1e) connect$pptp(r8, &(0x7f0000000040)={0x18, 0x2, {0x0, @empty}}, 0x1e) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4800}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a840000000c0a010100002100000000000a0000060900020073797a31000000000900010073797a31000000005800038054"], 0xac}, 0x1, 0x0, 0x0, 0x4000851}, 0x40) 4.381383714s ago: executing program 2 (id=2808): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001080)={0x6, 0x7, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, [@map_idx={0x18, 0x1, 0x5, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x447}]}, &(0x7f0000000100)='syzkaller\x00', 0xfff, 0x6b, &(0x7f0000001180)=""/107, 0x41000, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000f80)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000fc0)={0x2, 0x0, 0x80000000, 0x40000}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000001000), &(0x7f0000001140)=[{0x4, 0x5, 0x2, 0x3}], 0x10, 0x4}, 0x94) r1 = socket(0x400000000010, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000001200)={@rc={0x1f, @none, 0xf}, {&(0x7f0000001040)=""/34, 0x22}, &(0x7f0000001000), 0x42}, 0xa0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffdf, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r5, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r6, {0xf000, 0x1}, {}, {0x7, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1a, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf8, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0)={0x0, 0xfffffffe}, 0x10, 0x0, r0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001080)={0x6, 0x7, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, [@map_idx={0x18, 0x1, 0x5, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x447}]}, &(0x7f0000000100)='syzkaller\x00', 0xfff, 0x6b, &(0x7f0000001180)=""/107, 0x41000, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000f80)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000fc0)={0x2, 0x0, 0x80000000, 0x40000}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000001000), &(0x7f0000001140)=[{0x4, 0x5, 0x2, 0x3}], 0x10, 0x4}, 0x94) (async) socket(0x400000000010, 0x3, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) socket(0x400000000010, 0x3, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000001200)={@rc={0x1f, @none, 0xf}, {&(0x7f0000001040)=""/34, 0x22}, &(0x7f0000001000), 0x42}, 0xa0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffdf, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r5, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) (async) socket$unix(0x1, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv0\x00'}) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r6, {0xf000, 0x1}, {}, {0x7, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1a, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf8, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0)={0x0, 0xfffffffe}, 0x10, 0x0, r0}, 0x94) (async) 4.336002729s ago: executing program 3 (id=2809): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(r2, 0x890b, &(0x7f0000000140)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lapb0') getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@private0, @in6=@local}}, {{@in6=@mcast2}, 0x0, @in6=@initdev}}, &(0x7f0000000380)=0xe8) bind$x25(r2, &(0x7f0000000080), 0x12) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x4, 0xac, 0x100000000}) connect$x25(r2, &(0x7f0000000100)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r5, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c00000022000106"], 0x1c}], 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r6, 0xe0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x8, 0x0, 0x0}}, 0x10) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800f524005a"], &(0x7f00000007c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x40, '\x00', r7}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r8, r7, 0x25, 0x0, @val=@tracing={0x0, 0x751a}}, 0x20) 4.149932946s ago: executing program 3 (id=2810): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f00000004c0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000000)="ea", 0x1) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000840)={'mangle\x00', 0x6e, "61b447f98612600398a78310739fd3c8d4b5c867287da754635402185d371ce7eefac3aa2bcb51e6a4b34ece770f2b3b888f4ee57c6e9b98a714073eb2015ec2c3f842da8fec2f5cddcf6b8f1961348fd1736c8228cde1bb2b28586ab5e921a93565ebf2b752567b6a9cafcdd113"}, &(0x7f0000000900)=0x92) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x8001, &(0x7f0000000080)={0x2, 0x800, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000200)="00000000000000009c", 0x9, 0x0, &(0x7f0000000000)={0x2, 0x4e26, @remote}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{r2, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000200)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r4, 0xffffffffffffffff}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000838500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x4, 0xae, 0x1, 0x3, 0x5, 0x45, 0x1, 0x0, 0x7, 0x1c, 0x6, 0x81, 0x3}, 0xe) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r7}, 0xc) r8 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r8, &(0x7f0000000340)={0x1d, r9, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r8, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) r10 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r10, &(0x7f0000000340)={0x1d, r11, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r10, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r10, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)="050000eb3a49a8d125", 0x9}], 0x1}}], 0x1, 0x4000041) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r6}, 0xc) sendmmsg$alg(r1, &(0x7f0000000340)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000440)="95", 0x1}], 0x1, 0x0, 0x0, 0x400401c}], 0x1, 0x8000) 4.14940255s ago: executing program 1 (id=2811): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r2, &(0x7f00000067c0)=[{{&(0x7f0000000080)={0xa, 0x4e22, 0x4, @mcast2, 0xd5d}, 0x1c, 0x0, 0x0, &(0x7f0000000740)=[@flowinfo={{0x14, 0x29, 0xb, 0x9}}, @flowinfo={{0x14, 0x29, 0xb, 0x774}}], 0x30}}], 0x1, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="540000001800010400000000000000000a004400fe0300010000000008000400010000000600150007000000280016"], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0xfc) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="15020000fe0f00001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="080004"], 0x54}, 0x1, 0xba01, 0x0, 0x4004}, 0x4000000) 3.830877359s ago: executing program 3 (id=2812): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4001}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000180)={'syzkaller1\x00', {0x2, 0x0, @rand_addr=0x64010101}}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', 0x1}) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) write$tun(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="0000080001031400e803140008004500005c000000004084b019640101026401010104d2270f00000000000000000100003c"], 0x6a) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x58, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TUPLE_ORIG={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}]}, 0x58}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@setlink={0x14c, 0x13, 0x100, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x74f3b, 0x4}, [@IFLA_IFNAME={0x14, 0x3, 'dummy0\x00'}, @IFLA_AF_SPEC={0x104, 0x1a, 0x0, 0x1, [@AF_BRIDGE={0x4}, @AF_INET6={0x5c, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_INET6_TOKEN={0x14, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}}, @IFLA_INET6_TOKEN={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x4}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast1}]}, @AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x0, 0x5}]}}, @AF_MPLS={0x4}, @AF_INET={0x58, 0x2, 0x0, 0x1, {0x54, 0x1, 0x0, 0x1, [{0x8, 0x6, 0x0, 0x0, 0x922}, {0x8, 0x4, 0x0, 0x0, 0x4d9}, {0x8, 0x6, 0x0, 0x0, 0x7}, {0x8, 0xe, 0x0, 0x0, 0x10}, {0x8, 0x10, 0x0, 0x0, 0x6}, {0x8, 0x10, 0x0, 0x0, 0x7}, {0x8, 0x1d, 0x0, 0x0, 0x5}, {0x8, 0x21, 0x0, 0x0, 0x5}, {0x8, 0x20, 0x0, 0x0, 0x1}, {0x8, 0x15, 0x0, 0x0, 0x7}]}}, @AF_INET6={0x2c, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast1}]}, @AF_MPLS={0x4}, @AF_BRIDGE={0x4}]}, @IFLA_IFALIAS={0x14, 0x14, 'ip6tnl0\x00'}]}, 0x14c}}, 0x20040850) 1.85432996s ago: executing program 0 (id=2813): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001800dd8d00000000000000000a00000000000006"], 0x30}}, 0x4090) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0x3c}, 0x1, 0x11, 0x0, 0x240000c4}, 0x40114) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xd, 0xfff1}, {0x3, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xc, 0x2, [@TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0xe}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40005}, 0x804) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)="170000000200", 0x6) setsockopt$inet_tcp_int(r9, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000100)=0x1, 0x4) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r8}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000001900010000000000000000000a0000000000c80900000000731bc5c3053b4d34724548bd7419b90ad16e11af876c3a87e3933d453ca6307792376883bc5dd0895d5ce29b064d4c95d3e8844c9d8aa9c160f78c0a005b10104a2984614aeff0d09ef39eee8a9aadda30de9e45207cf505620714ed2a55753595f47c05f992f900dd9262ed4c0927a5998264604e9f81788daf6ba1a47599492fde05e838a128768a73f5f963fa834493f513dfe7eaced03b974bb0dcf90fc66f1efb0d748df50d0def70"], 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) 1.757442191s ago: executing program 2 (id=2815): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0xf3a, 0x0) write$cgroup_pid(r2, &(0x7f0000000000), 0xffffff98) vmsplice(r2, &(0x7f0000000440)=[{&(0x7f0000000040)="f9", 0x1}], 0x1, 0xf) write(r0, 0x0, 0x0) 1.745185599s ago: executing program 1 (id=2816): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x5, 0x5) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000001c0), &(0x7f0000000200)=0x4) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000b80)=@newsa={0x170, 0x10, 0x633, 0x0, 0x0, {{@in6=@private0, @in6=@private1, 0x0, 0x0, 0x0, 0x800, 0xa}, {@in6=@local, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x9}, {0x0, 0x0, 0x4}, {0x0, 0x0, 0x4}, 0x0, 0x0, 0xa, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x20, {0x0, 0x4e21, 0xfffd, @in=@local}}, @encap={0x1c, 0x4, {0x2}}]}, 0x170}, 0x1, 0x0, 0x0, 0x20000841}, 0x0) r2 = socket(0x1, 0x803, 0x0) r3 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000380), r2) ioctl$int_in(r3, 0x2a29, &(0x7f0000000240)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x3, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000880)="6dc029d186242d046f5ecf5bc9de", 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x250}, 0x1, 0x0, 0x0, 0x8080}, 0x24008040) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0x0, 0x268, 0x33a, 0x268, 0x268, 0x3a0, 0x460, 0x460, 0x3a0, 0x460, 0xc, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0, 0xd8000000, {0x9402}}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@rand_addr=0x64010102, 'dvmrp1\x00', {0xfffffffffffff000}}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c0000001500010300000000000000000c00000008000100", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40480121}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000826bd7000fcdbdf251100000008003900f6ffffff08003a00310800000500350003010000"], 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x4044) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r8, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1}], 0x1c) r9 = socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r8, 0x84, 0xa, &(0x7f00000001c0)={0xd, 0x401, 0x6, 0x3, 0x3, 0x8, 0x4, 0x1ec3, r10}, 0x20) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) 1.548398149s ago: executing program 3 (id=2818): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @local}]}}}]}, 0x48}}, 0x2000000) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) poll(&(0x7f00000000c0)=[{r1, 0x2187}], 0x1, 0x403) 1.42274539s ago: executing program 0 (id=2820): mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0xc9bf0000) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0xc9bf0000) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x4000, 0x800, 0x0, 0x3}, 0x20) 1.38942776s ago: executing program 2 (id=2821): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0a41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) socket(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x6c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x3c, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_FWMARK={0x8, 0x12, 0x24}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0xff}, @TCA_CAKE_NAT={0x8}, @TCA_CAKE_WASH={0x8}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x40}, @TCA_CAKE_INGRESS={0xe}]}}]}, 0x6c}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x6c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x3c, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_FWMARK={0x8, 0x12, 0x24}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0xff}, @TCA_CAKE_NAT={0x8}, @TCA_CAKE_WASH={0x8}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x40}, @TCA_CAKE_INGRESS={0xe}]}}]}, 0x6c}}, 0x0) write$tun(r0, &(0x7f0000000040)={@val={0x0, 0x18}, @val={0x3, 0x1, 0x3, 0xffff, 0xc4, 0x10}, @ipv4=@dccp={{0x6, 0x4, 0x0, 0xd, 0xd8, 0x68, 0x0, 0x54, 0x21, 0x0, @private=0xa010101, @private=0xa010102, {[@noop]}}, {{0x4e20, 0x4e20, 0x4, 0x1, 0x9, 0x0, 0x0, 0x7, 0x5, "2d0634", 0x1, "3630be"}, "46c0c3bf13d91d99dd4425eda6cb8e7b015c3c29591b52f7f2c26c04e0602cadb5170f6fc17e1e4a0819fb819167e4eb796ee2b49294d1d580e246c969fb9fec28a5a062f6b614c7fde7d0d12cbb4e49292acb82544621d19ecc2b35683b5aac01aba125dbf66fd7074892c3cf9d26bce6c2c4389b7d9d45d7e6865f8514e9038bd0a166f3c29d94c3f3981bead6bdec0efb768b4a076e7b3654c59481af35cc83ae3cddd5d64027ad0788ec91ed8779"}}}, 0xe6) 1.34881492s ago: executing program 0 (id=2822): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000700)=ANY=[@ANYBLOB="e000000010000b0500000000000200006f6d8864d22a3f2ffaa46c88bcbd0000002b0e13e735a3184f1b3d6da2f1acfac0ee50d2b184b27db1f302de337c0004060000000000bf852c89867f6691b01b2d44e4ff282d2d2c"], 0xe0}], 0x1}, 0x0) (async, rerun: 32) r1 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000040)=0x14) (rerun: 32) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req={0xa, 0x6535, 0x7, 0x732}, 0x10) 1.302604051s ago: executing program 4 (id=2823): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x1b8, 0x12, 0x600, 0x0, 0x202, 0x388, 0x2e8, 0x2e8, 0x388, 0x2c0, 0x4, 0x0, {[{{@uncond, 0x0, 0x190, 0x1b8, 0xd00, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0000000000000019b5115c2aee68d23a465cd431e150c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baeb8989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b500", 0x4}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1776b4318bae1944}}}, {{@uncond, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x7ff, 'system_u:object_r:fuse_device_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000000c0)={r2, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xce024d}, 0x9c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000180)={r2, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x9, 0x0, 0x81, 0x693fffd, 0x80, 0x9}, &(0x7f0000000380)=0x9c) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x110) 1.247398776s ago: executing program 1 (id=2824): socket$pppoe(0x18, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000540)={0xa, 0x4e22, 0x7, @empty, 0x200}, 0x1c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r6 = socket$netlink(0x10, 0x3, 0x9) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @remote}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xe, 0x4, 0x4, 0x100, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xb, 0xd, &(0x7f0000000280)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @generic={0x7a, 0xa, 0x0, 0xfffffff8}, @map_fd={0x18, 0x1, 0x1, 0x0, r8}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r9}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000480)={'veth1_macvtap\x00', &(0x7f00000003c0)=@ethtool_rxnfc={0x32, 0xd, 0x2, {0x3, @sctp_ip4_spec={@remote, @empty, 0x4e21, 0x4a20, 0x7}, {0x0, @multicast, 0x3, 0x8, [0x7, 0xd]}, @sctp_ip6_spec={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, 0x4e21, 0x4e21, 0xfa}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 0x200, 0x6, [0xff, 0x8]}, 0x5, 0x6}}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syz_tun\x00', 0x10d}) r10 = socket(0x2d, 0x2, 0x0) setsockopt(r10, 0x11d, 0x1, &(0x7f0000000200)="01000000", 0x4) ioctl(r10, 0x89e2, &(0x7f0000000300)='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00') sendmsg(r10, &(0x7f0000000400)={&(0x7f0000000500)=@generic={0x2d, "000000000000080118000200"}, 0x34, &(0x7f0000000600)=[{&(0x7f0000000700)='\x00\x00', 0x2}], 0x1}, 0x0) 1.084915391s ago: executing program 4 (id=2825): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x36, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa22}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="2200000004"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r0, 0xffffffffffffffff}, 0x4) r3 = socket$inet6(0xa, 0x3, 0x2) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r4) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x14, r5, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x80) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'bond_slave_0\x00', 0x1}) r7 = accept4(r6, 0x0, 0x0, 0x80000) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) sendto$inet6(r7, &(0x7f0000000000)="0b05", 0x2, 0x200408c4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000020000b7050000080000001c00000000000000bf980000000000000d080000000000008500000006000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 1.055521512s ago: executing program 2 (id=2826): unshare(0x22020600) r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x0, 0x10000000, 0xffffffff, 0x8}}, @TCA_ACT_BPF_FD={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000000)=0x1, 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x0, @vifc_lcl_ifindex=0x1, @empty}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f00000019c0)=0x2, 0x4) connect$inet(r3, &(0x7f0000001a00)={0x2, 0x4e23, @remote}, 0x10) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000000)={0xff}, 0x4) r4 = socket$inet6(0x10, 0x2, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), r0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x1c, r5, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffd}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc080}, 0x4080) sendmsg(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000480)="55000000200009afb72d13b2a4a2719302000000030b43026c26236925000400fe7f00000000000000003942cfd8880f0000bd2dca8a9848a3c728f1c46b7b31afdc1338d509a9a1f8baeb1898000000000100005a", 0x55}], 0x1}, 0x4000) write(r4, &(0x7f0000000040)="1c00000021002551071c0165ff00fc0202000000fd100f000ee1000c", 0x1c) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r4, 0xc0385868, &(0x7f0000000640)={0xffffffffffffffff, &(0x7f00000000c0)='*(]$!\x00', 0x40, &(0x7f0000000580)={@_ha_fsid={[0x1, 0x2]}, {0x9, 0x3, 0x82, 0x2}}, 0x4, &(0x7f00000005c0)={@_ha_fsid}, &(0x7f0000000600)=0xcf}) write(r2, &(0x7f0000000080)="340000001a000100000000000000000002202000000000000000000008000100e001020308000200ac1414bb0800030001000000", 0x34) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000240)={'gretap0\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x40, 0x8091, 0x4, 0x2, {{0x18, 0x4, 0x0, 0x0, 0x60, 0x66, 0x0, 0x1, 0x4, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x1d}, {[@rr={0x7, 0x13, 0xb1, [@loopback, @multicast2, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @rr={0x7, 0x7, 0x49, [@multicast2]}, @timestamp_prespec={0x44, 0x1c, 0x47, 0x3, 0x0, [{@private=0xa010101, 0x123}, {@rand_addr=0x64010101, 0xc}, {@remote, 0x31d9e9d1}]}, @ssrr={0x89, 0x13, 0x79, [@empty, @dev={0xac, 0x14, 0x14, 0x38}, @loopback, @broadcast]}]}}}}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r6, r7, 0x25, 0x18, @void}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0xfffa, @local}, 0x10) close(r0) 846.454998ms ago: executing program 1 (id=2827): r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (rerun: 32) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4102}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x200002, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000640)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0x3, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async, rerun: 64) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (rerun: 64) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a00)=@newqdisc={0x88c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r10, {0x0, 0x5}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x860, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x2}, @TCA_TBF_RTAB={0x404, 0x2, [0x7ff, 0x7, 0x9, 0x7, 0x6, 0x8, 0x2, 0x6, 0xb7e, 0x5, 0x8, 0x0, 0xad6, 0x5, 0x5, 0x6, 0xff, 0x0, 0x4, 0x8, 0x9, 0x6, 0x7, 0x3, 0x9, 0x8, 0x1, 0x8, 0x5, 0x3, 0x5, 0x2, 0x2, 0x35, 0x3, 0x2, 0xffffd9f9, 0xa, 0x5, 0x42, 0x3, 0x2, 0x3, 0x70639f88, 0x9, 0x6, 0x2, 0xfffffff7, 0x10, 0xc, 0x3, 0x84be, 0x1, 0x0, 0x8, 0x1, 0x2f2, 0xffff0001, 0x4fbb45ae, 0x4, 0x8, 0x38, 0x9, 0x8, 0x7, 0x8000, 0x1, 0x7, 0x10000, 0x3, 0x7, 0x9, 0x0, 0x6, 0xefc8, 0x99d, 0x2, 0x5ad, 0x4, 0x17d, 0x401, 0x15, 0x7, 0x7, 0x0, 0x5, 0x4, 0x8, 0x4, 0xe4000000, 0x4b38, 0x38, 0xfda, 0x4, 0x6d, 0x92, 0x0, 0x7, 0x0, 0x53ef, 0x9, 0x1, 0x5, 0x7, 0x9, 0x2, 0x6, 0x4, 0x400, 0x2, 0x91c9, 0x0, 0x76d1b5bd, 0x4, 0x101, 0x0, 0x495, 0x8, 0xd8, 0x7, 0xd, 0x5, 0x374, 0x2, 0x2, 0x1, 0x69, 0x9, 0x1, 0x400, 0x7ff, 0xffffffff, 0x1, 0x0, 0x6, 0x2, 0xfff, 0x8, 0x6, 0xfffffffb, 0x9, 0x80, 0x101, 0x0, 0x7, 0x2, 0x8, 0x200, 0x1, 0x3, 0x81, 0x0, 0x4, 0x8001, 0x9, 0x6, 0x2, 0x2446, 0x7f, 0x0, 0x4, 0x5, 0x2d, 0xfc, 0x5, 0x8, 0x5, 0x8, 0x3, 0xfffffffb, 0x14, 0x0, 0x7, 0xffff, 0x1, 0x7, 0x30000, 0x0, 0x66a, 0x5, 0x401, 0x200, 0x8000, 0x9, 0x263e, 0x5, 0x5, 0x2, 0x7, 0xfffffe01, 0x4, 0x2, 0x7, 0x2, 0x8cb, 0x4, 0xfffffff7, 0x1, 0xfffffff7, 0x0, 0x5, 0x31, 0x4, 0x3, 0xffff, 0xb, 0x5, 0x7ff, 0x6, 0x5f, 0x74, 0x6, 0x1, 0x401, 0xffff6f0d, 0x7, 0x1, 0x9, 0x3, 0x7, 0x0, 0x3ff, 0x2, 0x4, 0x5, 0x800, 0x0, 0x3, 0x8, 0x400, 0x3c, 0x40, 0x2, 0x9, 0x9a2, 0x3, 0x5, 0x1, 0x8, 0x80, 0xebf5, 0x7, 0x3, 0xc405, 0x7, 0x8, 0xffffffff, 0x1, 0x71, 0x1, 0x2, 0x2, 0x3926, 0x4, 0x1, 0x5]}, @TCA_TBF_PRATE64={0xc, 0x5, 0x1ca7e39de7275b39}, @TCA_TBF_PBURST={0x8, 0x7, 0xc1e}, @TCA_TBF_PBURST={0x8, 0x7, 0x3c6}, @TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x0, 0xca5d, 0x4, 0x8, 0x4}, {0xd, 0x2, 0x0, 0x6c7e, 0x2}, 0x3, 0x4, 0x1760}}, @TCA_TBF_BURST={0x8, 0x6, 0xa}, @TCA_TBF_RTAB={0x404, 0x2, [0x4, 0x4, 0x0, 0x3, 0x9, 0x31, 0x6, 0x8, 0xfffffffc, 0x7, 0x3, 0x2, 0xac57, 0x1, 0x4, 0xffffffdd, 0x9, 0x4, 0x9, 0xffffff56, 0x4, 0x8, 0x2, 0x9, 0x2178, 0x2, 0x1fbb349b, 0xc6, 0x3, 0x7, 0x0, 0x5, 0x3d, 0x2, 0x1000, 0xd, 0x2, 0x9, 0x9, 0x9c, 0xb4, 0x4be04035, 0x3ff, 0x4, 0x6591, 0x9e4, 0x7bb6, 0x200, 0xc, 0x5, 0x8, 0xff, 0x1, 0xe, 0xf, 0x4, 0x7, 0x5, 0x7, 0x6, 0x8, 0x6, 0xca, 0x9e, 0x3, 0x800, 0x4, 0x8001, 0x100, 0xfc82, 0x10, 0xfffffff8, 0x1ff, 0xfff, 0xda33, 0x0, 0x2, 0x6, 0x3, 0xffff, 0x6, 0x1ff, 0x2, 0x2, 0x4, 0x1, 0xc, 0x7, 0x0, 0x9, 0x4, 0xfffffff7, 0xb, 0x100, 0x7be6, 0x80000000, 0x4, 0x7e, 0xed98, 0x7, 0x1, 0xfffffffb, 0x7, 0xec, 0xfff, 0x9, 0x4, 0x8001, 0x1000, 0x0, 0xffffdfee, 0x9, 0xe, 0x5, 0xffff, 0x6, 0x9, 0x9, 0xdc3, 0x6, 0x9776, 0x5, 0x3, 0x7, 0x7, 0x7, 0x5, 0x9, 0x0, 0xfffffffe, 0x9, 0x6, 0x7f, 0xfffffff9, 0x48d, 0x5, 0x7ff, 0xf, 0x8, 0x4, 0x83, 0x9, 0x9, 0x5, 0x8, 0xcbd, 0x6, 0x6, 0x8e, 0xc, 0xa23f, 0x9, 0x7, 0x3, 0x7, 0xd84, 0x2, 0x3, 0x5, 0x9, 0x101, 0x2, 0x4, 0x81, 0xfffffffe, 0x10001, 0x7b, 0x1, 0x3, 0x9, 0x1, 0x80000000, 0x7, 0x2, 0x6, 0x6, 0xae, 0x800, 0x8, 0x7ff, 0x20000000, 0x10000, 0xc268, 0x80000001, 0xa2a0, 0xff, 0x7, 0x9, 0x7, 0x3, 0x4a, 0x79b, 0x2, 0x5, 0x2, 0x4, 0x1, 0x4, 0x2, 0x3, 0x1, 0x3, 0x4, 0xffff, 0x9, 0xffffff00, 0x1, 0xffffff01, 0xc000, 0x5c2, 0xffff0001, 0x8000, 0x3, 0x20, 0x7, 0x7, 0x3, 0x6, 0x2a5, 0x2, 0x10, 0x567c278e, 0xb7, 0x8bd72df7, 0x0, 0xf072, 0x3, 0x6ee7, 0x4, 0x40, 0x7, 0x4, 0x400, 0x5458, 0x8, 0xbff50649, 0xe3a, 0x3, 0x9, 0x3, 0xec, 0x9, 0x7, 0x2, 0x2, 0x42, 0x7, 0x3, 0x9, 0x100, 0xd, 0xfffffffa, 0x1, 0x3, 0x2, 0x9]}]}}]}, 0x88c}, 0x1, 0x0, 0x0, 0x40040e0}, 0x0) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200affd14120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) (async, rerun: 64) getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x13, 0x0, &(0x7f0000000540)) (async, rerun: 64) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="500000001000ffff2cbd7000ffdbde2500000000", @ANYRES32=0x0, @ANYBLOB="096d050025100400280012800b00010067656e657665000018000280060005004e240000050008000000000004000600"], 0x50}, 0x1, 0x0, 0x0, 0x14000000}, 0x40040) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000018c0)={&(0x7f00000012c0)={0x320, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x20c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x144, 0x3, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '/dev/net/tun\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, ',:*{/[\'\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '/\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\xac\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xbb\xbb\xbb\xbb\xbb\xbb'}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'syzkaller0\x00'}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '+$.&./\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x60}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '^\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '+@\xb2@:\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\')\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '.\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf43}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '*\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '_\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xbb\xbb\xbb\xbb\xbb\xbb'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x63c00}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}, @ETHTOOL_A_BITSET_BITS={0x30, 0x3, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x15, 0x2, '/dev/virtual_nci\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'tbf\x00'}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}, @ETHTOOL_A_BITSET_VALUE={0x77, 0x4, "62195c22619b8ce329fa385c00a4f5f3a8237805e054bb8fcc0f10688658973a0ecac35280aad9bf97d156e11a131771201ab84eb26738963818031d01fb0729790d789c63cb5f24be7476591933a14825f82a1d00124e90c21f71a5114d800814068d5144641b42f1135287f9077fe588ba63"}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x30, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3f8000}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x1f, 0x4, "747b1f14c3b8e9d979fdb541612c8bf0260b94606f36206e708375"}]}]}, 0x320}, 0x1, 0x0, 0x0, 0x24004844}, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r11) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r13, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async, rerun: 32) recvmsg$unix(r12, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\n'], 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) 713.071569ms ago: executing program 4 (id=2828): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000040)=0x9, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0x7, 0xffe0}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x9}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000010) r2 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[], 0xfe33) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000540)=ANY=[@ANYBLOB="18080000000000000000000002000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000ffe500020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48}, 0x94) 405.737011ms ago: executing program 0 (id=2829): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r1) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x28, r2, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}}, 0x4040814) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x40000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 321.664081ms ago: executing program 4 (id=2830): openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) socket$packet(0x11, 0x2, 0x300) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8153, 0x2000, 0x800, 0x9, 0x3}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000006680)=ANY=[@ANYBLOB="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"/4281], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000001c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r4, r4, 0x2f}, 0x20) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000280)={@cgroup=r3, r4, 0x2f, 0x8, 0x4}, 0x20) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$xdp(r2, &(0x7f00000003c0)={0x2c, 0x2, r6, 0x0, 0x0}, 0x10) r7 = accept(r1, &(0x7f00000002c0)=@caif, &(0x7f0000000340)=0x80) ioctl$SIOCSIFMTU(r7, 0x8922, &(0x7f0000000380)={'veth1_to_bridge\x00', 0xff}) mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r2, 0x80000000) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@dev, @in6=@mcast2, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0xfd, 0x28c, 0x1, 0x0, 0x3}, {0x7}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x2000000, 0x33}, 0x0, @in6=@loopback, 0x0, 0x3, 0x0, 0xb9, 0x0, 0x8000000}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x0) 305.784248ms ago: executing program 3 (id=2831): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000000)=0x80000002, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r1, 0x0, 0x33, &(0x7f0000000000)=0x80000002, 0x4) sendto$inet(r1, &(0x7f00000003c0)='@', 0x1, 0x20040940, &(0x7f0000000400)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r2 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) listen(r0, 0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="2c0000003f00070100000000fddbdf25027c00001800378013000100717472283414d6bba9"], 0x2c}, 0x1, 0x0, 0x0, 0xc880}, 0x0) syz_emit_ethernet(0x9a, &(0x7f0000000200)={@broadcast, @random="2059249b3790", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "000100", 0x64, 0x11, 0x0, @empty, @mcast2, {[], {0xfffe, 0xe22, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x2, "75462d59cf0d72118137e1d8c01d4641aa2936006171375e0c0d70a00038f8cb", "85bf05267ec510575a1cdf03bc75bb00", {"850d58622eee203823d9c122aa9e7075", "0000f900"}}}}}}}}, 0x0) 238.773294ms ago: executing program 0 (id=2832): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x6, 0x11, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x2c}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8006}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5c298795369ca04f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000040)='j\x00'/14, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r0}, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x6, 0x11, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x2c}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8006}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5c298795369ca04f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000040)='j\x00'/14, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) (async) 164.554437ms ago: executing program 4 (id=2833): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0x200, 0x70bd26, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xffff, 0xc}, {0xffe0}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x3, 0x4, 0x0, 0x2, 0x0, 0xc, 0x0, 0xff, 0x2, 0x5, 0x2, 0x1, 0x10, 0x0, 0x5, 0x9], 0x2, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc, 0x0, 0x1000], [0x0, 0x4, 0x0, 0x0, 0xffff, 0x0, 0xfffd, 0x4, 0x0, 0x2, 0x2, 0xfffd, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) write(0xffffffffffffffff, &(0x7f0000000300)="600000001800050601000000000000000a400000fe040001000000001400200020010db8000100000000000000000001080004000100000006", 0x39) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8000}, 0x8) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000001300)={0xffffffffffffffff, &(0x7f0000001200)='\x00', 0x10000, &(0x7f0000001240)={@_ha_fsid={[0xfffffffa, 0x7]}, {0x4, 0x2, 0x1, 0x18}}, 0x0, &(0x7f0000001280)={@_ha_fsid}, &(0x7f00000012c0)=0xff}) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002a00)={&(0x7f0000001480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0x3, [@enum64={0x10, 0x3, 0x0, 0x13, 0x0, 0x1, [{0xd, 0xb561, 0x8}, {0xd, 0x8, 0xfffffff2}, {0x9, 0x7, 0x8}]}, @ptr={0xa, 0x0, 0x0, 0x2, 0x5}, @union={0xa, 0x3, 0x0, 0x5, 0x0, 0x4, [{0x4, 0x4, 0xfffffff8}, {0xd, 0x0, 0x9}, {0x7, 0x1, 0x66a2b9cf}]}]}, {0x0, [0x30]}}, &(0x7f0000001a00)=""/4096, 0x87, 0x1000, 0x1, 0x4}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000002a80)={0x6, 0x0}, 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x1, 0x4, 0x8}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000018"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002ac0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x3}, 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0e00000004000000080000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="001b8400"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xc, 0x14, &(0x7f0000000880)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x20007f}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa0000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x15}}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000002bc0)={{0x1, 0xffffffffffffffff}, &(0x7f0000002b40), &(0x7f0000002b80)='%pB \x00'}, 0x20) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000002c00)=@bloom_filter={0x1e, 0x0, 0x7b, 0x2, 0x10, 0xffffffffffffffff, 0x445, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x5, 0xc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002d80)={0x2, 0x14, &(0x7f0000001340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0xfffffeff}, [@generic={0x3, 0x8, 0xe, 0x7, 0x9}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x231dde01}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @generic={0x6, 0x6, 0x8, 0xc}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffd}, @map_idx={0x18, 0x3, 0x5, 0x0, 0xd}]}, &(0x7f0000001400)='GPL\x00', 0x20000000, 0x1b, &(0x7f0000001440)=""/27, 0x40f00, 0x3, '\x00', 0x0, @fallback=0x2d, r1, 0x8, &(0x7f0000002a40)={0x8, 0x5}, 0x8, 0x10, 0x0, 0x0, r2, r4, 0x3, &(0x7f0000002c80)=[r5, r6, r7, r8, r9], &(0x7f0000002cc0)=[{0x4, 0x3, 0xd, 0xc}, {0x0, 0x4, 0xa, 0x4}, {0x0, 0x5, 0x8, 0x6}]}, 0x94) r10 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r10, &(0x7f0000002d00)=[{{&(0x7f0000001080)={0xa, 0x4e22, 0x1, @private2, 0x10001}, 0x1c, &(0x7f00000010c0)=[{&(0x7f00000011c0)="e6e2", 0x2}], 0x1}}, {{&(0x7f0000001100)={0xa, 0x4e20, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfffffff7}, 0x1c, &(0x7f00000019c0)=[{&(0x7f0000001140)="a5", 0x1}], 0x1}}], 0x2, 0x0) shutdown(r10, 0x1) getsockopt$bt_hci(r10, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000015c0)=ANY=[@ANYBLOB="14000900000021002bbd700000000000dd44d60733862f293c6a748317213cdc337d4ccd41d25b5c83699d0be4c65fc0bb4bbc6fc026444a497aa5fad5b90a0000b0364459a765925d57f77f48b20cd38089c712c021366444678df0c14093d2d8f2c5fe80fb08a2a61aa150ea9dd9d7ac571881a4df082614f0f73a17d3690fd6"], 0x14}, 0x1, 0x0, 0x0, 0x2008800}, 0x0) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000004100010000000000000000000101000000000000040008000400028020000180100004000000000000000000000000000c001c", @ANYRESHEX=r12, @ANYRES32=r12], 0x40}}, 0x0) sendmsg$nl_generic(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="4000000041000100000000000000000001010000000000000400060004000280200001801000040000000000000000000000000004"], 0x40}}, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r13, &(0x7f0000000040)={0x0, 0x35, &(0x7f0000000580)={&(0x7f0000001540)={0x34, r14, 0x1, 0x0, 0x0, {0x2c}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58, 0x3}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x34}}, 0x1) ioctl$AUTOFS_IOC_EXPIRE(r11, 0x810c9365, &(0x7f00000000c0)={{0x0, 0x2}, 0x100, './file0\x00'}) 115.351178ms ago: executing program 3 (id=2834): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000480)=ANY=[@ANYBLOB="911051000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1, 0x0, r1}}, 0x40) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r2, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r3, 0x0, 0x0}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'dummy0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x67038, 0x20000}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @broadcast}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x8, 0xfff1}, {0x7, 0xffff}, {0x0, 0x4}}, [@TCA_RATE={0x6, 0x5, {0x3, 0x80}}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc0}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@newqdisc={0x24, 0x28, 0x10, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xfff3}, {0x0, 0xfff1}, {0x2, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x40098}, 0x4000892) 50.675058ms ago: executing program 0 (id=2835): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f00000002c0)=@ethtool_modinfo={0x42, 0x200}}) 0s ago: executing program 4 (id=2836): sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) poll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x1040, 0x700}, {r1, 0x2187}], 0x2, 0x403) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x10448) (async) unshare(0x2a060000) (async) r2 = socket$igmp(0x2, 0x3, 0x2) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket(0x2, 0x80805, 0x0) unshare(0x10000000) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'lc\x00', 0x4, 0x1, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5c, 0x3}}, 0x44) (async) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000280)={{0x84, @multicast1, 0x4e20, 0x3, 'none\x00', 0x2, 0x3, 0x1a}, {@remote, 0x4e23, 0x2000, 0x0, 0x200}}, 0x44) (async) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000580)={{0x84, @broadcast, 0x4e22, 0x3, 'nq\x00', 0x2, 0x4, 0x38}, {@private=0xa010102, 0x4e22, 0x2, 0xc8, 0x80012d58, 0x12d5c}}, 0x44) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) (async) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r6) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r7, 0x400, 0x70bd2d, 0x0, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40800}, 0x0) (async) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}}, 0x40) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, 0x0, 0x0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r8, &(0x7f0000000680)={0x28, 0x0, 0x0, @hyper}, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_proto_private(r4, 0x89e2, &(0x7f0000000300)="3dec3feeba522357725831d70629c46e20d75e6825efde9c2eb3601cf462cfe990cba302958dc0ea17658597bbe7864767c2edaaa16f0eaa881851b9b576a5649afb925e6cd31074658b38a63b3cd88aa3ab7a16936b5e8a2011ab0015eec2432eba39e8fb4adaec43f97879c7735d00933147563d87061907627c7d9e39fb00c41a66e54fa26de0d19ef474a09b04e193b9ad3112b606cd7d5f80e108438de81ea78e4ecc2e8471b9a7dc8e965fb09a36c6c38e382c534350ab721d8910b1ede48f14831f10adf969d432d60aae502742bd66b6d2f41a6d611aae29b1b8aa696356082e09fa5296ff1a8cea524043ee72db") (async) socket$nl_netfilter(0x10, 0x3, 0xc) kernel console output (not intermixed with test programs): 2.526381][T11894] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1446'. [ 252.529379][ C1] vcan0: j1939_tp_rxtimer: 0xffff888075ddf400: rx timeout, send abort [ 252.529413][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880696ed000: abort rx timeout. Force session deactivation [ 252.631856][T11902] FAULT_INJECTION: forcing a failure. [ 252.631856][T11902] name failslab, interval 1, probability 0, space 0, times 0 [ 252.631912][T11902] CPU: 1 UID: 0 PID: 11902 Comm: syz.0.1448 Not tainted syzkaller #0 PREEMPT(full) [ 252.631935][T11902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 252.631947][T11902] Call Trace: [ 252.631955][T11902] [ 252.631964][T11902] dump_stack_lvl+0xe8/0x150 [ 252.632043][T11902] should_fail_ex+0x410/0x560 [ 252.632092][T11902] should_failslab+0xa8/0x100 [ 252.632121][T11902] __kmalloc_node_track_caller_noprof+0xfb/0x720 [ 252.632144][T11902] ? irqentry_exit+0x218/0x910 [ 252.632166][T11902] ? realloc_array+0x76/0x130 [ 252.632189][T11902] ? realloc_array+0x76/0x130 [ 252.632216][T11902] ? realloc_array+0x76/0x130 [ 252.632241][T11902] krealloc_node_align_noprof+0x19a/0x390 [ 252.632269][T11902] realloc_array+0x76/0x130 [ 252.632297][T11902] check_stack_access_within_bounds+0x6ca/0xb60 [ 252.632327][T11902] ? __pfx_check_stack_access_within_bounds+0x10/0x10 [ 252.632364][T11902] check_mem_access+0xa2c/0x2620 [ 252.632399][T11902] ? __pfx_check_mem_access+0x10/0x10 [ 252.632423][T11902] ? number+0xc60/0xed0 [ 252.632483][T11902] ? __pfx_number+0x10/0x10 [ 252.632517][T11902] check_store_reg+0x664/0xe20 [ 252.632555][T11902] do_check_insn+0x9df/0x18e70 [ 252.632584][T11902] ? vscnprintf+0x5c/0x90 [ 252.632612][T11902] ? bpf_verifier_vlog+0x3d1/0x900 [ 252.632648][T11902] ? format_decode+0xdc/0xda0 [ 252.632672][T11902] ? vsnprintf+0x3a0/0xef0 [ 252.632699][T11902] ? __asan_memcpy+0x40/0x70 [ 252.632731][T11902] ? __pfx_do_check_insn+0x10/0x10 [ 252.632767][T11902] ? vscnprintf+0x5c/0x90 [ 252.632795][T11902] ? bpf_verifier_vlog+0x3d1/0x900 [ 252.632836][T11902] ? verbose+0x11d/0x1a0 [ 252.632854][T11902] ? __pfx_bpf_verifier_log_write+0x10/0x10 [ 252.632877][T11902] ? __pfx_verbose+0x10/0x10 [ 252.632897][T11902] ? bpf_vlog_reset+0x1db/0x340 [ 252.632929][T11902] ? print_insn_state+0x106/0x170 [ 252.632953][T11902] do_check_common+0x3c19/0x5d30 [ 252.633011][T11902] ? __pfx_do_check_common+0x10/0x10 [ 252.633034][T11902] ? __pfx_verbose+0x10/0x10 [ 252.633050][T11902] ? __pfx_bpf_disasm_kfunc_name+0x10/0x10 [ 252.633079][T11902] bpf_check+0x2639/0x2e10 [ 252.633113][T11902] ? ktime_get_with_offset+0x93/0x2d0 [ 252.633138][T11902] ? __pfx_bpf_check+0x10/0x10 [ 252.633162][T11902] ? bpf_obj_name_cpy+0x194/0x1e0 [ 252.633193][T11902] bpf_prog_load+0x14d6/0x1c20 [ 252.633228][T11902] ? __pfx_bpf_prog_load+0x10/0x10 [ 252.633276][T11902] __sys_bpf+0xd0d/0xd90 [ 252.633307][T11902] ? __pfx___sys_bpf+0x10/0x10 [ 252.633340][T11902] ? __fget_files+0x2a/0x420 [ 252.633384][T11902] ? ksys_write+0x242/0x270 [ 252.633415][T11902] ? __pfx_ksys_write+0x10/0x10 [ 252.633449][T11902] __x64_sys_bpf+0xba/0xd0 [ 252.633482][T11902] do_syscall_64+0x166/0x520 [ 252.633502][T11902] ? trace_irq_disable+0x3b/0x140 [ 252.633521][T11902] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.633542][T11902] ? clear_bhb_loop+0x70/0xc0 [ 252.633566][T11902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.633586][T11902] RIP: 0033:0x7efe3379e159 [ 252.633606][T11902] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 252.633624][T11902] RSP: 002b:00007efe34621028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 252.633646][T11902] RAX: ffffffffffffffda RBX: 00007efe33a25fa0 RCX: 00007efe3379e159 [ 252.633661][T11902] RDX: 0000000000000094 RSI: 00002000000006c0 RDI: 0000000000000005 [ 252.633674][T11902] RBP: 00007efe34621090 R08: 0000000000000000 R09: 0000000000000000 [ 252.633686][T11902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 252.633698][T11902] R13: 00007efe33a26038 R14: 00007efe33a25fa0 R15: 00007ffee5f02b78 [ 252.633730][T11902] [ 252.782620][T10600] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.796983][ T6902] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.029423][ C1] vcan0: j1939_tp_rxtimer: 0xffff888075ddf400: abort rx timeout. Force session deactivation [ 253.055603][T11894] ovs-system: entered promiscuous mode [ 253.645879][T11941] x_tables: unsorted entry at hook 3 [ 254.271997][T11964] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1456'. [ 254.276547][T11964] vlan0: entered promiscuous mode [ 254.276570][T11964] bond3: entered promiscuous mode [ 254.276584][T11964] geneve3: entered promiscuous mode [ 254.659452][ T8048] net_ratelimit: 26 callbacks suppressed [ 254.659476][ T8048] bond1: (slave dummy0): failed to get link speed/duplex [ 254.777329][ T8048] bond1: (slave dummy0): failed to get link speed/duplex [ 254.947198][ T6902] bond1: (slave dummy0): failed to get link speed/duplex [ 254.983890][T11984] FAULT_INJECTION: forcing a failure. [ 254.983890][T11984] name failslab, interval 1, probability 0, space 0, times 0 [ 254.983922][T11984] CPU: 0 UID: 0 PID: 11984 Comm: syz.3.1460 Not tainted syzkaller #0 PREEMPT(full) [ 254.983944][T11984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 254.983956][T11984] Call Trace: [ 254.983964][T11984] [ 254.983973][T11984] dump_stack_lvl+0xe8/0x150 [ 254.984005][T11984] should_fail_ex+0x410/0x560 [ 254.984032][T11984] should_failslab+0xa8/0x100 [ 254.984057][T11984] __kmalloc_node_track_caller_noprof+0xfb/0x720 [ 254.984082][T11984] ? lruvec_stat_mod_folio+0x6e/0x3e0 [ 254.984109][T11984] ? realloc_array+0x76/0x130 [ 254.984132][T11984] ? realloc_array+0x76/0x130 [ 254.984158][T11984] ? realloc_array+0x76/0x130 [ 254.984181][T11984] krealloc_node_align_noprof+0x19a/0x390 [ 254.984202][T11984] ? rcu_is_watching+0x16/0xb0 [ 254.984228][T11984] realloc_array+0x76/0x130 [ 254.984255][T11984] check_stack_access_within_bounds+0x6ca/0xb60 [ 254.984285][T11984] ? __pfx_check_stack_access_within_bounds+0x10/0x10 [ 254.984316][T11984] ? diag_append_history+0x12c/0x520 [ 254.984355][T11984] check_mem_access+0xa2c/0x2620 [ 254.984389][T11984] ? __pfx_check_mem_access+0x10/0x10 [ 254.984412][T11984] ? number+0xc60/0xed0 [ 254.984448][T11984] ? __pfx_number+0x10/0x10 [ 254.984479][T11984] check_store_reg+0x664/0xe20 [ 254.984518][T11984] do_check_insn+0x9df/0x18e70 [ 254.984545][T11984] ? vscnprintf+0x5c/0x90 [ 254.984572][T11984] ? bpf_verifier_vlog+0x3d1/0x900 [ 254.984605][T11984] ? format_decode+0xdc/0xda0 [ 254.984626][T11984] ? vsnprintf+0x3a0/0xef0 [ 254.984651][T11984] ? __asan_memcpy+0x40/0x70 [ 254.984679][T11984] ? __pfx_do_check_insn+0x10/0x10 [ 254.984708][T11984] ? vscnprintf+0x5c/0x90 [ 254.984732][T11984] ? bpf_verifier_vlog+0x3d1/0x900 [ 254.984768][T11984] ? verbose+0x11d/0x1a0 [ 254.984784][T11984] ? __pfx_bpf_verifier_log_write+0x10/0x10 [ 254.984806][T11984] ? __pfx_verbose+0x10/0x10 [ 254.984825][T11984] ? bpf_vlog_reset+0x1db/0x340 [ 254.984855][T11984] ? print_insn_state+0x106/0x170 [ 254.984877][T11984] do_check_common+0x3c19/0x5d30 [ 254.984933][T11984] ? __pfx_do_check_common+0x10/0x10 [ 254.984956][T11984] ? __pfx_verbose+0x10/0x10 [ 254.984972][T11984] ? __pfx_bpf_disasm_kfunc_name+0x10/0x10 [ 254.985003][T11984] bpf_check+0x2639/0x2e10 [ 254.985034][T11984] ? ktime_get_with_offset+0x93/0x2d0 [ 254.985060][T11984] ? __pfx_bpf_check+0x10/0x10 [ 254.985083][T11984] ? bpf_obj_name_cpy+0x194/0x1e0 [ 254.985115][T11984] bpf_prog_load+0x14d6/0x1c20 [ 254.985149][T11984] ? __pfx_bpf_prog_load+0x10/0x10 [ 254.985193][T11984] __sys_bpf+0xd0d/0xd90 [ 254.985223][T11984] ? __pfx___sys_bpf+0x10/0x10 [ 254.985256][T11984] ? __fget_files+0x2a/0x420 [ 254.985308][T11984] ? ksys_write+0x242/0x270 [ 254.985339][T11984] ? __pfx_ksys_write+0x10/0x10 [ 254.985372][T11984] __x64_sys_bpf+0xba/0xd0 [ 254.985396][T11984] do_syscall_64+0x166/0x520 [ 254.985416][T11984] ? trace_irq_disable+0x3b/0x140 [ 254.985435][T11984] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.985455][T11984] ? clear_bhb_loop+0x70/0xc0 [ 254.985479][T11984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.985499][T11984] RIP: 0033:0x7f8513d9e159 [ 254.985517][T11984] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 254.985534][T11984] RSP: 002b:00007f8514c6a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 254.985555][T11984] RAX: ffffffffffffffda RBX: 00007f8514025fa0 RCX: 00007f8513d9e159 [ 254.985569][T11984] RDX: 0000000000000094 RSI: 00002000000006c0 RDI: 0000000000000005 [ 254.985580][T11984] RBP: 00007f8514c6a090 R08: 0000000000000000 R09: 0000000000000000 [ 254.985592][T11984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 254.985602][T11984] R13: 00007f8514026038 R14: 00007f8514025fa0 R15: 00007ffd2f610ab8 [ 254.985633][T11984] [ 255.040960][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 255.057649][ T8048] bond1: (slave dummy0): failed to get link speed/duplex [ 255.173171][ T8047] bond1: (slave dummy0): failed to get link speed/duplex [ 255.279880][ T8048] bond1: (slave dummy0): failed to get link speed/duplex [ 255.387455][ T8048] bond1: (slave dummy0): failed to get link speed/duplex [ 255.589992][T11998] bond6: entered promiscuous mode [ 255.594735][T11998] 8021q: adding VLAN 0 to HW filter on device bond6 [ 255.623324][ T8047] bond1: (slave dummy0): failed to get link speed/duplex [ 255.984473][T12023] netlink: 'syz.2.1464': attribute type 1 has an invalid length. [ 256.152862][ T8048] bond0 (unregistering): Released all slaves [ 256.165456][ T8048] bond1 (unregistering): Released all slaves [ 256.250632][T12017] geneve0: entered promiscuous mode [ 256.252803][T12017] geneve0: left promiscuous mode [ 256.348908][ T8048] tipc: Disabling bearer [ 256.355266][ T8048] tipc: Disabling bearer [ 256.377930][ T8048] tipc: Left network mode [ 256.400941][ T8047] bond1: (slave dummy0): failed to get link speed/duplex [ 256.705313][T12040] __nla_validate_parse: 2 callbacks suppressed [ 256.705330][T12040] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1468'. [ 256.755632][T12040] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 256.766580][T12045] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1470'. [ 256.789459][ T6905] bond1: (slave dummy0): failed to get link speed/duplex [ 257.394799][ T6905] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 257.446568][T12060] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 257.582324][T12072] netlink: 'syz.4.1476': attribute type 1 has an invalid length. [ 257.730826][T12072] bond7: entered promiscuous mode [ 257.731476][T12072] bond7: entered allmulticast mode [ 257.735314][T12072] 8021q: adding VLAN 0 to HW filter on device bond7 [ 257.823806][T12072] syz.4.1476 (12072) used obsolete PPPIOCDETACH ioctl [ 258.206726][ T8048] hsr_slave_0: left promiscuous mode [ 258.214451][ T8048] hsr_slave_1: left promiscuous mode [ 258.234908][ T8048] veth1_macvtap: left promiscuous mode [ 258.234979][ T8048] veth0_macvtap: left promiscuous mode [ 258.235859][ T8048] veth1_vlan: left promiscuous mode [ 258.235967][ T8048] veth0_vlan: left promiscuous mode [ 258.823018][T12091] netlink: 'syz.2.1480': attribute type 1 has an invalid length. [ 258.823048][T12091] netlink: 16138 bytes leftover after parsing attributes in process `syz.2.1480'. [ 258.848128][T12091] netlink: 'syz.2.1480': attribute type 1 has an invalid length. [ 258.848151][T12091] netlink: 16138 bytes leftover after parsing attributes in process `syz.2.1480'. [ 258.848431][T12091] netlink: 'syz.2.1480': attribute type 1 has an invalid length. [ 258.848445][T12091] netlink: 16138 bytes leftover after parsing attributes in process `syz.2.1480'. [ 258.848699][T12091] netlink: 'syz.2.1480': attribute type 1 has an invalid length. [ 258.848712][T12091] netlink: 16138 bytes leftover after parsing attributes in process `syz.2.1480'. [ 258.848929][T12091] netlink: 'syz.2.1480': attribute type 1 has an invalid length. [ 258.848941][T12091] netlink: 16138 bytes leftover after parsing attributes in process `syz.2.1480'. [ 258.849158][T12091] netlink: 'syz.2.1480': attribute type 1 has an invalid length. [ 258.849171][T12091] netlink: 16138 bytes leftover after parsing attributes in process `syz.2.1480'. [ 258.849372][T12091] netlink: 'syz.2.1480': attribute type 1 has an invalid length. [ 258.849385][T12091] netlink: 16138 bytes leftover after parsing attributes in process `syz.2.1480'. [ 258.849536][T12091] netlink: 'syz.2.1480': attribute type 1 has an invalid length. [ 258.849544][T12091] netlink: 16138 bytes leftover after parsing attributes in process `syz.2.1480'. [ 259.136984][ T8048] IPVS: stop unused estimator thread 0... [ 259.282841][T12098] syzkaller0: entered promiscuous mode [ 259.282863][T12098] syzkaller0: entered allmulticast mode [ 260.236618][T12064] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 262.340571][T10601] net_ratelimit: 13 callbacks suppressed [ 262.340592][T10601] bond1: (slave dummy0): failed to get link speed/duplex [ 262.392381][T12119] ip_tables: iptables: counters copy to user failed while replacing table [ 262.499217][T12113] block nbd3: shutting down sockets [ 262.547605][ T6905] bond1: (slave dummy0): failed to get link speed/duplex [ 262.679058][T10600] bond1: (slave dummy0): failed to get link speed/duplex [ 262.780087][T12130] FAULT_INJECTION: forcing a failure. [ 262.780087][T12130] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 262.780127][T12130] CPU: 0 UID: 0 PID: 12130 Comm: syz.2.1492 Not tainted syzkaller #0 PREEMPT(full) [ 262.780148][T12130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 262.780160][T12130] Call Trace: [ 262.780167][T12130] [ 262.780175][T12130] dump_stack_lvl+0xe8/0x150 [ 262.780209][T12130] should_fail_ex+0x410/0x560 [ 262.780236][T12130] _copy_to_user+0x31/0xb0 [ 262.780263][T12130] simple_read_from_buffer+0xe1/0x170 [ 262.780295][T12130] proc_fail_nth_read+0x1bb/0x230 [ 262.780323][T12130] ? common_file_perm+0x20e/0x2b0 [ 262.780350][T12130] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 262.780382][T12130] ? rw_verify_area+0x24a/0x4c0 [ 262.780412][T12130] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 262.780442][T12130] vfs_read+0x213/0xa80 [ 262.780474][T12130] ? __pfx___mutex_lock+0x10/0x10 [ 262.780497][T12130] ? __pfx_vfs_read+0x10/0x10 [ 262.780526][T12130] ? __fget_files+0x2a/0x420 [ 262.780557][T12130] ? __fget_files+0x3a2/0x420 [ 262.780581][T12130] ? __fget_files+0x2a/0x420 [ 262.780620][T12130] ksys_read+0x150/0x270 [ 262.780650][T12130] ? __pfx_ksys_read+0x10/0x10 [ 262.780692][T12130] do_syscall_64+0x166/0x520 [ 262.780712][T12130] ? trace_irq_disable+0x3b/0x140 [ 262.780731][T12130] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.780751][T12130] ? clear_bhb_loop+0x70/0xc0 [ 262.780788][T12130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.780807][T12130] RIP: 0033:0x7f711e55e98e [ 262.780825][T12130] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 262.780842][T12130] RSP: 002b:00007f711f4a8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 262.780863][T12130] RAX: ffffffffffffffda RBX: 00007f711f4a96c0 RCX: 00007f711e55e98e [ 262.780878][T12130] RDX: 000000000000000f RSI: 00007f711f4a90a0 RDI: 0000000000000004 [ 262.780890][T12130] RBP: 00007f711f4a9090 R08: 0000000000000000 R09: 0000000000000000 [ 262.780902][T12130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 262.780913][T12130] R13: 00007f711e826038 R14: 00007f711e825fa0 R15: 00007ffc2fb48bf8 [ 262.780944][T12130] [ 262.787913][ T6902] bond1: (slave dummy0): failed to get link speed/duplex [ 262.899227][ T6905] bond1: (slave dummy0): failed to get link speed/duplex [ 263.009540][T10523] bond1: (slave dummy0): failed to get link speed/duplex [ 263.105754][T12143] __nla_validate_parse: 57 callbacks suppressed [ 263.105776][T12143] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1493'. [ 263.106866][T12143] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1493'. [ 263.165556][T12139] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1493'. [ 263.219200][T12143] 8021q: adding VLAN 0 to HW filter on device bond4 [ 263.236785][T12139] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1493'. [ 263.246199][ T6902] bond1: (slave dummy0): failed to get link speed/duplex [ 263.246767][T12139] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1493'. [ 263.348535][ T6902] bond1: (slave dummy0): failed to get link speed/duplex [ 263.401861][T12153] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1496'. [ 263.479662][ T8048] bond1: (slave dummy0): failed to get link speed/duplex [ 263.885727][T12172] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1503'. [ 263.905470][T12175] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1503'. [ 263.990874][T12180] dvmrp0: entered allmulticast mode [ 264.012800][T12182] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1504'. [ 264.158472][T12180] bond2: left promiscuous mode [ 264.175630][T12180] vlan0: left promiscuous mode [ 264.175651][T12180] bond3: left promiscuous mode [ 264.175662][T12180] geneve3: left promiscuous mode [ 264.203774][T12180] gtp0: left promiscuous mode [ 264.215014][T12180] bond0: left promiscuous mode [ 264.215037][T12180] bridge13: left promiscuous mode [ 264.216657][T12180] bond0: entered allmulticast mode [ 264.216676][T12180] bridge13: entered allmulticast mode [ 264.240714][T12180] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 264.241859][T12180] bridge13: entered promiscuous mode [ 264.306810][T12191] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1508'. [ 264.603470][T12207] Bluetooth: hci0: unsupported parameter 5135 [ 264.603493][T12207] Bluetooth: hci0: unsupported parameter 8192 [ 264.603507][T12207] Bluetooth: hci0: unsupported parameter 5135 [ 264.603519][T12207] Bluetooth: hci0: unsupported parameter 8192 [ 265.280640][ T2067] block nbd0: Possible stuck request ffff888027a30000: control (read@0,1024B). Runtime 90 seconds [ 265.280677][ T2067] block nbd0: Possible stuck request ffff888027a301c0: control (read@1024,1024B). Runtime 90 seconds [ 265.280696][ T2067] block nbd0: Possible stuck request ffff888027a30380: control (read@2048,1024B). Runtime 90 seconds [ 265.280715][ T2067] block nbd0: Possible stuck request ffff888027a30540: control (read@3072,1024B). Runtime 90 seconds [ 265.290534][T12235] validate_nla: 57 callbacks suppressed [ 265.290554][T12235] netlink: 'syz.4.1523': attribute type 1 has an invalid length. [ 265.431944][T12217] macvlan0: entered promiscuous mode [ 266.043613][T12277] xt_hashlimit: max too large, truncated to 1048576 [ 266.056740][T12274] xt_hashlimit: max too large, truncated to 1048576 [ 266.240088][T12281] veth15: entered promiscuous mode [ 266.240112][T12281] veth15: entered allmulticast mode [ 266.244463][T12281] team0: Device veth15 is up. Set it down before adding it as a team port [ 266.442255][T12284] veth15: entered promiscuous mode [ 266.442278][T12284] veth15: entered allmulticast mode [ 266.444611][T12284] team0: Device veth15 is up. Set it down before adding it as a team port [ 266.622535][ T5621] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 266.753766][T12297] gtp0: entered promiscuous mode [ 266.753790][T12297] gtp0: entered allmulticast mode [ 266.773474][T12298] syzkaller1: entered promiscuous mode [ 266.773499][T12298] syzkaller1: entered allmulticast mode [ 266.894149][T12316] syz_tun: entered allmulticast mode [ 267.367186][ T6902] net_ratelimit: 35 callbacks suppressed [ 267.367226][ T6902] bond1: (slave dummy0): failed to get link speed/duplex [ 267.478687][T10523] bond1: (slave dummy0): failed to get link speed/duplex [ 267.788100][T10601] bond1: (slave dummy0): failed to get link speed/duplex [ 267.900105][ T8047] bond1: (slave dummy0): failed to get link speed/duplex [ 268.009196][ T6905] bond1: (slave dummy0): failed to get link speed/duplex [ 268.119461][ T6902] bond1: (slave dummy0): failed to get link speed/duplex [ 268.234003][T10601] bond1: (slave dummy0): failed to get link speed/duplex [ 268.341444][ T8047] bond1: (slave dummy0): failed to get link speed/duplex [ 268.447991][ T6905] bond1: (slave dummy0): failed to get link speed/duplex [ 268.561157][ T6902] bond1: (slave dummy0): failed to get link speed/duplex [ 268.869641][T12434] __nla_validate_parse: 4 callbacks suppressed [ 268.869667][T12434] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1553'. [ 269.053846][T12434] bond5: option lacp_active: invalid value (5) [ 269.064003][T12434] bond5 (unregistering): Released all slaves [ 269.465286][T12465] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1559'. [ 269.698468][T12469] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1560'. [ 269.712106][T12472] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1561'. [ 269.742427][T12472] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1561'. [ 269.742453][T12472] nbd: must specify at least one socket [ 270.235452][T12508] netlink: 'syz.1.1571': attribute type 55 has an invalid length. [ 270.259927][T12502] Cannot find del_set index 2 as target [ 270.264845][T12502] nbd3: detected capacity change from 0 to 127 [ 270.272686][T12503] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1570'. [ 270.396694][T12497] syzkaller0: entered promiscuous mode [ 270.396718][T12497] syzkaller0: entered allmulticast mode [ 270.614559][T12519] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.1574'. [ 270.658956][ T30] audit: type=1800 audit(1789173408.278:5): pid=12522 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1575" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1733 res=0 errno=0 [ 270.670862][T12524] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1576'. [ 270.702357][T12514] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1572'. [ 270.978845][ T5621] block nbd3: Receive control failed (result -104) [ 271.116181][T12536] netlink: 'syz.1.1578': attribute type 298 has an invalid length. [ 271.126046][T12536] IPVS: set_ctl: invalid protocol: 327 172.20.20.29:20002 [ 271.253973][T12534] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.516388][T12534] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.982170][T12534] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.225274][T12575] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 272.245292][T12534] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.383852][T12581] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1587'. [ 272.388610][T10600] net_ratelimit: 17 callbacks suppressed [ 272.388627][T10600] bond1: (slave dummy0): failed to get link speed/duplex [ 272.416593][T12579] xt_hashlimit: size too large, truncated to 1048576 [ 272.416838][T12579] xt_hashlimit: invalid interval [ 272.501871][T10523] bond1: (slave dummy0): failed to get link speed/duplex [ 272.678076][T10600] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.678123][T10600] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.678156][T10600] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.761556][ T8047] IPVS: starting estimator thread 0... [ 272.789154][ T8047] bond1: (slave dummy0): failed to get link speed/duplex [ 272.789203][ T8047] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.792614][T12603] openvswitch: netlink: Duplicate or invalid key (type 0). [ 272.848191][T12600] IPVS: using max 34 ests per chain, 81600 per kthread [ 272.899492][T10523] bond1: (slave dummy0): failed to get link speed/duplex [ 273.126900][T12615] syzkaller0: entered promiscuous mode [ 273.126927][T12615] syzkaller0: entered allmulticast mode [ 273.164028][ T8047] bond1: (slave dummy0): failed to get link speed/duplex [ 273.176835][T12629] netlink: 'syz.3.1597': attribute type 11 has an invalid length. [ 273.354283][T12636] nbd: must specify at least one socket [ 273.608423][ T2067] block nbd3: Connection timed out, retrying (0/1 alive) [ 273.609487][ T2067] block nbd3: Connection timed out, retrying (0/1 alive) [ 273.609534][ T2067] block nbd3: Connection timed out, retrying (0/1 alive) [ 273.609571][ T2067] block nbd3: Connection timed out, retrying (0/1 alive) [ 273.610336][ T2067] block nbd3: Dead connection, failed to find a fallback [ 274.271510][T12672] openvswitch: netlink: IP tunnel dst address not specified [ 274.271533][T12672] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 274.539413][T12676] __nla_validate_parse: 41 callbacks suppressed [ 274.539435][T12676] netlink: 6024 bytes leftover after parsing attributes in process `syz.3.1608'. [ 276.112292][T12702] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1610'. [ 276.868451][ T3757] bond1: (slave dummy0): failed to get link speed/duplex [ 276.977378][ T8047] bond1: (slave dummy0): failed to get link speed/duplex [ 277.013107][T12710] --map-set only usable from mangle table [ 277.048353][T12713] dummy0: Device is already in use. [ 277.077878][T12711] netlink: 'syz.0.1613': attribute type 1 has an invalid length. [ 277.174289][T12711] bond3: option mode: invalid value (9) [ 277.178204][T12711] bond3 (unregistering): Released all slaves [ 277.399548][T12731] netlink: 'syz.1.1620': attribute type 5 has an invalid length. [ 277.428106][ T3757] bond1: (slave dummy0): failed to get link speed/duplex [ 277.538262][ T8048] bond1: (slave dummy0): failed to get link speed/duplex [ 277.651836][ T3757] bond1: (slave dummy0): failed to get link speed/duplex [ 278.037652][ T8048] bond1: (slave dummy0): failed to get link speed/duplex [ 278.169375][ T8047] bond1: (slave dummy0): failed to get link speed/duplex [ 278.248848][T12770] syzkaller0: entered promiscuous mode [ 278.248872][T12770] syzkaller0: entered allmulticast mode [ 278.429718][ T8048] bond1: (slave dummy0): failed to get link speed/duplex [ 278.544016][ T3757] bond1: (slave dummy0): failed to get link speed/duplex [ 278.647960][ T8048] bond1: (slave dummy0): failed to get link speed/duplex [ 278.758644][ T6902] bond1: (slave dummy0): failed to get link speed/duplex [ 278.871173][ T8047] bond1: (slave dummy0): failed to get link speed/duplex [ 278.957189][ T5615] Bluetooth: hci1: command 0x0406 tx timeout [ 279.308209][T12814] netlink: 'syz.4.1639': attribute type 1 has an invalid length. [ 279.308234][T12814] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1639'. [ 279.308263][T12814] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1639'. [ 279.512655][T12818] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1642'. [ 279.547943][T12820] pimreg: tun_chr_ioctl cmd 1074025677 [ 279.548069][T12820] pimreg: linktype set to 270 [ 279.629811][T12827] pim6reg: entered allmulticast mode [ 279.630188][T12826] pim6reg: left allmulticast mode [ 279.922267][T12841] netlink: 19 bytes leftover after parsing attributes in process `syz.2.1650'. [ 279.949519][T12841] netlink: 19 bytes leftover after parsing attributes in process `syz.2.1650'. [ 280.053968][ T8048] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 280.115573][T12863] syzkaller1: entered promiscuous mode [ 280.115598][T12863] syzkaller1: entered allmulticast mode [ 282.497448][ T8047] net_ratelimit: 32 callbacks suppressed [ 282.497470][ T8047] bond1: (slave dummy0): failed to get link speed/duplex [ 282.607265][T10601] bond1: (slave dummy0): failed to get link speed/duplex [ 282.718005][ T8047] bond1: (slave dummy0): failed to get link speed/duplex [ 282.827205][T10601] bond1: (slave dummy0): failed to get link speed/duplex [ 282.878301][T12839] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 282.937413][ T8047] bond1: (slave dummy0): failed to get link speed/duplex [ 283.028657][T12877] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1657'. [ 283.288886][ T8048] bond1: (slave dummy0): failed to get link speed/duplex [ 283.304800][T12892] syzkaller0: entered promiscuous mode [ 283.304821][T12892] syzkaller0: entered allmulticast mode [ 283.398441][ T6902] bond1: (slave dummy0): failed to get link speed/duplex [ 283.444435][T12895] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1662'. [ 283.484231][T12895] netlink: 'syz.0.1662': attribute type 1 has an invalid length. [ 283.493275][T12901] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1664'. [ 283.570094][T12895] 8021q: adding VLAN 0 to HW filter on device bond3 [ 283.655867][T12905] bond3: (slave veth5): Enslaving as a backup interface with a down link [ 283.671260][T12905] netlink: 'syz.0.1662': attribute type 10 has an invalid length. [ 283.671313][T12905] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1662'. [ 283.724679][T12895] team0: Port device dummy0 removed [ 283.737947][T12895] bond3: (slave dummy0): Enslaving as a backup interface with a down link [ 283.743724][T12905] dummy0: entered promiscuous mode [ 283.758288][T12905] bond3: (slave dummy0): Releasing backup interface [ 283.827565][T10523] bond1: (slave dummy0): failed to get link speed/duplex [ 283.947297][ T6902] bond1: (slave dummy0): failed to get link speed/duplex [ 284.237654][ T6902] bond1: (slave dummy0): failed to get link speed/duplex [ 284.432474][T12936] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1670'. [ 284.435268][T12935] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1673'. [ 284.701147][T12949] netlink: 'syz.0.1675': attribute type 11 has an invalid length. [ 284.778948][T12952] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1677'. [ 284.778989][T12952] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1677'. [ 284.981429][T12965] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1680'. [ 284.982872][T12968] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1680'. [ 284.984402][T12967] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1680'. [ 285.117500][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 285.171802][T12981] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1684'. [ 285.214759][T12983] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1685'. [ 285.218734][T12983] workqueue: name exceeds WQ_NAME_LEN. Truncating to: '>N95xhˉpn [ 285.403488][T12995] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1687'. [ 285.478876][T12991] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1686'. [ 285.711666][T13014] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1689'. [ 285.752851][T13015] netlink: 'syz.4.1688': attribute type 4 has an invalid length. [ 285.752881][T13015] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1688'. [ 285.781189][T10601] nci: nci_rx_work: unknown MT 0x6 [ 285.938616][T13020] netlink: 'syz.3.1690': attribute type 12 has an invalid length. [ 286.089612][T13026] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1691'. [ 287.547207][ T6902] net_ratelimit: 28 callbacks suppressed [ 287.547231][ T6902] bond1: (slave dummy0): failed to get link speed/duplex [ 287.657423][ T8047] bond1: (slave dummy0): failed to get link speed/duplex [ 287.777230][T10523] bond1: (slave dummy0): failed to get link speed/duplex [ 287.887253][ T6902] bond1: (slave dummy0): failed to get link speed/duplex [ 287.991790][T13044] netlink: 'syz.1.1696': attribute type 4 has an invalid length. [ 287.998262][ T8047] bond1: (slave dummy0): failed to get link speed/duplex [ 288.108810][T10523] bond1: (slave dummy0): failed to get link speed/duplex [ 288.212072][T13050] xt_IDLETIMER: label is empty or not nul-terminated [ 288.219369][T10523] bond1: (slave dummy0): failed to get link speed/duplex [ 288.327651][T10523] bond1: (slave dummy0): failed to get link speed/duplex [ 288.437304][T10601] bond1: (slave dummy0): failed to get link speed/duplex [ 288.478116][ T5621] Bluetooth: hci4: command 0x0406 tx timeout [ 288.547219][T10601] bond1: (slave dummy0): failed to get link speed/duplex [ 288.547968][T13007] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 288.822742][T13065] netlink: 'syz.0.1700': attribute type 15 has an invalid length. [ 288.841820][T13065] netlink: 'syz.0.1700': attribute type 15 has an invalid length. [ 289.053305][T13066] gtp0: left promiscuous mode [ 289.056463][T10523] IPVS: starting estimator thread 0... [ 289.127954][T10523] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 289.128480][T10523] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 289.128516][T10523] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 289.128548][T10523] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 289.137206][T13079] IPVS: using max 39 ests per chain, 93600 per kthread [ 289.232236][T13085] netlink: 'syz.3.1708': attribute type 11 has an invalid length. [ 289.232260][T13085] netlink: 'syz.3.1708': attribute type 4 has an invalid length. [ 289.274147][T13082] syzkaller0: entered promiscuous mode [ 289.274172][T13082] syzkaller0: entered allmulticast mode [ 289.436716][T13098] netlink: 'syz.3.1711': attribute type 1 has an invalid length. [ 289.476502][T13098] 8021q: adding VLAN 0 to HW filter on device bond7 [ 289.504914][T13098] bond7: (slave veth15): Enslaving as an active interface with a down link [ 290.053569][T13131] __nla_validate_parse: 11 callbacks suppressed [ 290.053590][T13131] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1722'. [ 290.159951][T13141] netlink: 'syz.2.1724': attribute type 23 has an invalid length. [ 292.679122][T13171] syzkaller1: entered promiscuous mode [ 292.679138][T13171] syzkaller1: entered allmulticast mode [ 292.700505][ T8047] net_ratelimit: 168 callbacks suppressed [ 292.700526][ T8047] bond1: (slave dummy0): failed to get link speed/duplex [ 292.808711][ T6902] bond1: (slave dummy0): failed to get link speed/duplex [ 292.828276][T13182] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1733'. [ 292.828311][T13182] netlink: 'syz.4.1733': attribute type 30 has an invalid length. [ 292.831357][T13181] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1732'. [ 292.831380][T13181] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1732'. [ 292.831395][T13181] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1732'. [ 292.853427][T13182] vxlan0: entered promiscuous mode [ 292.853450][T13182] vxlan0: entered allmulticast mode [ 292.917664][ T6902] bond1: (slave dummy0): failed to get link speed/duplex [ 293.007982][T13191] bridge0: port 3(team0) entered disabled state [ 293.024424][T13191] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.026700][T13191] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.027561][T10523] bond1: (slave dummy0): link status up again after 0 ms [ 293.047195][ T3757] bond1: (slave dummy0): link status up again after 0 ms [ 293.061809][T13192] netlink: 'syz.2.1737': attribute type 16 has an invalid length. [ 293.061827][T13192] netlink: 'syz.2.1737': attribute type 17 has an invalid length. [ 293.071659][ T3757] bond1: (slave dummy0): link status up again after 0 ms [ 293.088560][ T8048] bond1: (slave dummy0): link status up again after 0 ms [ 293.108358][ T3757] bond1: (slave dummy0): link status up again after 0 ms [ 293.127562][T10523] bond1: (slave dummy0): link status up again after 0 ms [ 293.148867][ T8048] bond1: (slave dummy0): link status up again after 0 ms [ 293.311858][T13192] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.311968][T13192] bridge0: port 1(bridge_slave_0) entered forwarding state [ 293.314388][T13192] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.314564][T13192] bridge0: port 2(bridge_slave_1) entered forwarding state [ 293.328252][T13191] netlink: 260 bytes leftover after parsing attributes in process `syz.2.1737'. [ 293.380141][T13192] macvlan0: left promiscuous mode [ 293.421075][T13192] bond2: left allmulticast mode [ 293.445567][T13192] gtp0: left allmulticast mode [ 293.459044][T13192] macvtap1: left allmulticast mode [ 293.459064][T13192] bond0: left allmulticast mode [ 293.459077][T13192] bridge13: left allmulticast mode [ 293.496288][ T8048] bridge0: port 3(team0) entered blocking state [ 293.496393][ T8048] bridge0: port 3(team0) entered forwarding state [ 293.949921][T13229] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1749'. [ 293.969127][T13230] netlink: 27 bytes leftover after parsing attributes in process `syz.0.1749'. [ 293.983089][T13227] tipc: Started in network mode [ 293.983133][T13227] tipc: Node identity cef700cd914, cluster identity 4711 [ 293.983419][T13227] tipc: Enabled bearer , priority 0 [ 293.987864][T13229] ref_ctr_offset mismatch. inode: 0xa0 offset: 0x0 ref_ctr_offset(old): 0x300000006 ref_ctr_offset(new): 0x0 [ 294.024780][T13234] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1750'. [ 294.028724][T13227] syzkaller0: entered promiscuous mode [ 294.028748][T13227] syzkaller0: entered allmulticast mode [ 294.029666][T13227] tipc: Resetting bearer [ 294.111903][T13226] tipc: Resetting bearer [ 294.270050][T13244] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1752'. [ 295.082751][T13271] __nla_validate_parse: 3 callbacks suppressed [ 295.082771][T13271] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1757'. [ 295.082796][T13271] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1757'. [ 295.360794][T12665] block nbd0: Possible stuck request ffff888027a30000: control (read@0,1024B). Runtime 120 seconds [ 295.360822][T12665] block nbd0: Possible stuck request ffff888027a301c0: control (read@1024,1024B). Runtime 120 seconds [ 295.360836][T12665] block nbd0: Possible stuck request ffff888027a30380: control (read@2048,1024B). Runtime 120 seconds [ 295.360849][T12665] block nbd0: Possible stuck request ffff888027a30540: control (read@3072,1024B). Runtime 120 seconds [ 296.544411][T13226] tipc: Disabling bearer [ 296.612885][T13237] team0: Port device team_slave_0 removed [ 296.654607][ T5733] tipc: Node number set to 1605828813 [ 297.072859][T13302] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1764'. [ 297.100894][T13302] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1764'. [ 297.123184][T13300] tc_dump_action: action bad kind [ 297.230595][T13309] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1766'. [ 297.361645][T13312] syzkaller1: entered promiscuous mode [ 297.361669][T13312] syzkaller1: entered allmulticast mode [ 297.622795][T13324] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1770'. [ 297.646110][T13327] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1771'. [ 297.723873][T13327] IPVS: Scheduler module ip_vs_sip not found [ 297.877577][ T6905] net_ratelimit: 34 callbacks suppressed [ 297.877599][ T6905] bond1: (slave dummy0): failed to get link speed/duplex [ 297.912335][T13337] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1775'. [ 297.983210][T13343] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1776'. [ 297.991082][ T6902] bond1: (slave dummy0): failed to get link speed/duplex [ 298.003048][T13343] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 298.046091][T13347] lo: entered promiscuous mode [ 298.060169][T13347] tunl0: entered promiscuous mode [ 298.064679][T13347] gre0: entered promiscuous mode [ 298.080775][T13353] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 298.243008][T13363] netlink: Unknown conntrack attr (type=12592, max=9) [ 298.243055][T13363] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 298.314714][T13347] erspan0: entered promiscuous mode [ 298.327197][T13347] ip_vti0: entered promiscuous mode [ 298.329264][T13347] ip6_vti0: entered promiscuous mode [ 298.332900][T13347] sit0: entered promiscuous mode [ 298.333578][T13353] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 298.365873][T13347] ip6tnl0: entered promiscuous mode [ 298.386366][T13347] ip6gre0: entered promiscuous mode [ 298.431456][T13347] syz_tun: entered promiscuous mode [ 298.448855][T13347] ip6gretap0: entered promiscuous mode [ 298.458078][T13347] bridge0: port 3(team0) entered disabled state [ 298.458282][T13347] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.458461][T13347] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.463234][T13347] bridge0: entered promiscuous mode [ 298.501271][T13347] nlmon0: entered promiscuous mode [ 298.503884][T13347] batadv0: entered promiscuous mode [ 298.519982][T13347] vxcan0: entered promiscuous mode [ 298.521252][T13347] vxcan1: entered promiscuous mode [ 298.522507][T13347] veth0: entered promiscuous mode [ 298.525261][T13347] veth1: entered promiscuous mode [ 298.554640][T13347] wg0: entered promiscuous mode [ 298.594470][T13347] wg2: entered promiscuous mode [ 298.633753][T13347] veth0_to_bridge: entered promiscuous mode [ 298.670696][T13347] veth1_to_bridge: entered promiscuous mode [ 298.681027][T13347] veth0_to_bond: entered promiscuous mode [ 298.684286][T13347] bond_slave_0: entered promiscuous mode [ 298.689871][T13347] veth1_to_team: entered promiscuous mode [ 298.696273][T13347] veth0_to_batadv: entered promiscuous mode [ 298.700293][T13347] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 298.714212][T13347] batadv_slave_0: entered promiscuous mode [ 298.732337][T13347] veth1_to_batadv: entered promiscuous mode [ 298.736120][T13347] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 298.736173][T13347] batadv_slave_1: entered promiscuous mode [ 298.756501][T13347] veth0_to_hsr: entered promiscuous mode [ 298.814489][T13347] veth1_to_hsr: entered promiscuous mode [ 298.825171][T13347] hsr0: entered promiscuous mode [ 298.838665][T13347] vlan1: entered promiscuous mode [ 298.843177][T13347] macvlan0: entered promiscuous mode [ 298.862716][T13347] macvlan1: entered promiscuous mode [ 298.874247][T13347] ipvlan0: entered promiscuous mode [ 298.883757][T13347] ipvlan1: entered promiscuous mode [ 298.899693][T13347] macvtap0: entered promiscuous mode [ 298.902464][T13347] macsec0: entered promiscuous mode [ 298.905034][T13347] geneve0: entered promiscuous mode [ 298.926905][T13347] geneve1: entered promiscuous mode [ 298.962059][T13347] mac80211_hwsim hwsim9 ..c: entered promiscuous mode [ 298.977592][T13347] batman_adv: batadv0: Interface deactivated: gretap1 [ 298.979733][T13347] gretap1: entered promiscuous mode [ 299.019251][T13347] vlan2: entered promiscuous mode [ 299.024863][T13347] bareudp0: entered promiscuous mode [ 299.028169][T13347] bridge1: entered promiscuous mode [ 299.043223][T13347] netdevsim netdevsim2 eth0: entered promiscuous mode [ 299.056653][T13347] netdevsim netdevsim2 eth1: entered promiscuous mode [ 299.064460][T13347] netdevsim netdevsim2 eth2: entered promiscuous mode [ 299.074452][T13347] netdevsim netdevsim2 eth3: entered promiscuous mode [ 299.082800][T13347] vxlan0: entered promiscuous mode [ 299.153441][T13347] bond1: entered promiscuous mode [ 299.153466][T13347] veth3: entered promiscuous mode [ 299.165002][T13347] veth2: entered promiscuous mode [ 299.185321][T13347] vlan3: entered promiscuous mode [ 299.197852][T13347] bridge2: entered promiscuous mode [ 299.203665][T13347] bridge3: entered promiscuous mode [ 299.220439][T13347] bridge4: entered promiscuous mode [ 299.235874][T13347] macvlan2: entered promiscuous mode [ 299.247986][T13347] macvlan3: entered promiscuous mode [ 299.254460][T13347] bond2: entered promiscuous mode [ 299.263423][T13347] bridge5: entered promiscuous mode [ 299.278176][T13347] bridge6: entered promiscuous mode [ 299.282222][T13347] bridge7: entered promiscuous mode [ 299.296654][T13347] syztnl0: entered promiscuous mode [ 299.329893][T13347] dummy1: entered promiscuous mode [ 299.401795][T13347] bridge8: entered promiscuous mode [ 299.412464][T13347] bridge9: entered promiscuous mode [ 299.420393][T13347] geneve2: entered promiscuous mode [ 299.452176][T13347] bond3: entered promiscuous mode [ 299.452193][T13347] geneve3: entered promiscuous mode [ 299.465042][T13347] vlan0: entered promiscuous mode [ 299.501799][T13347] gtp0: entered promiscuous mode [ 299.519862][T13347] sit1: entered promiscuous mode [ 299.532520][T13347] ip6tnl1: entered promiscuous mode [ 299.546864][T13347] bond0: entered promiscuous mode [ 299.567325][T13347] macvtap1: entered promiscuous mode [ 299.586793][T13347] bridge14: entered promiscuous mode [ 299.600135][T13347] bond4: entered promiscuous mode [ 299.606731][T13347] dvmrp0: entered promiscuous mode [ 299.622237][T13347] gtp1: entered promiscuous mode [ 299.635663][T13347] veth4: entered promiscuous mode [ 299.649814][T13347] veth5: entered promiscuous mode [ 299.665253][T13347] ip6tnl2: entered promiscuous mode [ 299.740033][ T6905] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 299.740071][ T6905] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.740113][ T6905] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 299.740139][ T6905] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.740172][ T6905] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 299.740197][ T6905] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.740230][ T6905] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 299.740255][ T6905] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.866695][T13401] openvswitch: netlink: Multiple metadata blocks provided [ 299.911607][T13395] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 299.912667][T13403] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1789'. [ 299.952788][T13405] macvlan0: left promiscuous mode [ 299.952968][T13405] netlink: 'syz.2.1790': attribute type 2 has an invalid length. [ 300.050936][T13415] netlink: 'syz.2.1792': attribute type 10 has an invalid length. [ 300.237941][T13421] Cannot find set identified by id 0 to match [ 300.239977][T13421] __nla_validate_parse: 1 callbacks suppressed [ 300.240014][T13421] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1794'. [ 300.650255][T13430] netlink: 'syz.0.1796': attribute type 5 has an invalid length. [ 301.102036][T13446] bridge4: entered promiscuous mode [ 301.169582][T13449] SET target dimension over the limit! [ 301.224396][T13450] bridge4: entered promiscuous mode [ 301.662208][T13470] netlink: 'syz.4.1807': attribute type 1 has an invalid length. [ 301.662231][T13470] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1807'. [ 301.662247][T13470] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1807'. [ 301.853677][T13481] netlink: 'syz.3.1809': attribute type 1 has an invalid length. [ 301.861511][T13482] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1809'. [ 301.861540][T13482] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1809'. [ 301.907665][T13481] bond8: entered promiscuous mode [ 301.908722][T13481] 8021q: adding VLAN 0 to HW filter on device bond8 [ 301.983610][T13485] TC_ACT_REPEAT abuse ? [ 302.063762][T13494] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1812'. [ 302.063786][T13494] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 302.064431][T13491] syzkaller0: entered promiscuous mode [ 302.064517][T13491] syzkaller0: entered allmulticast mode [ 302.107457][T13490] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1813'. [ 302.168945][T13490] bridge10: entered promiscuous mode [ 302.580583][T13513] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1818'. [ 302.625164][T13513] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1818'. [ 302.660386][T13516] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1820'. [ 303.001364][T13530] tipc: Resetting bearer [ 303.001855][T13530] tipc: Resetting bearer [ 303.034459][T13530] tipc: Resetting bearer [ 303.036414][T13530] tipc: Resetting bearer [ 303.122788][T13530] veth5: left promiscuous mode [ 303.135695][T13530] bridge6: left promiscuous mode [ 303.139198][T13530] bridge7: left promiscuous mode [ 303.159882][T13530] ip6gre1: left promiscuous mode [ 303.162249][T13530] bond6: left promiscuous mode [ 303.180926][T13530] bond8: left promiscuous mode [ 303.368712][T13535] bond1: (slave dummy0): Releasing backup interface [ 303.654269][T13549] bridge_slave_1 (unregistering): left allmulticast mode [ 303.654300][T13549] bridge_slave_1 (unregistering): left promiscuous mode [ 303.654388][T13549] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.065916][T13572] dvmrp0: left allmulticast mode [ 304.144541][T13579] nbd: nbd0 already in use [ 304.144713][T13580] nbd: nbd0 already in use [ 304.144948][T13580] block nbd0: NBD_DISCONNECT [ 304.144969][T13580] block nbd0: Send disconnect failed -32 [ 304.144985][T13580] block nbd0: shutting down sockets [ 304.176186][ C1] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 304.176499][ C1] Buffer I/O error on dev nbd0, logical block 0, async page read [ 304.182840][ C1] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 304.182933][ C1] Buffer I/O error on dev nbd0, logical block 1, async page read [ 304.184460][ C1] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 304.184525][ C1] Buffer I/O error on dev nbd0, logical block 2, async page read [ 304.184544][ C1] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 304.184597][ C1] Buffer I/O error on dev nbd0, logical block 3, async page read [ 304.184678][T13579] block nbd0: NBD_DISCONNECT [ 304.184698][T13579] block nbd0: Send disconnect failed -32 [ 304.189365][T12665] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 304.189394][T12665] Buffer I/O error on dev nbd0, logical block 0, async page read [ 304.189789][T12665] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 304.189816][T12665] Buffer I/O error on dev nbd0, logical block 1, async page read [ 304.198215][T12665] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 304.198253][T12665] Buffer I/O error on dev nbd0, logical block 2, async page read [ 304.198359][T12665] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 304.198383][T12665] Buffer I/O error on dev nbd0, logical block 3, async page read [ 304.207847][T13583] netlink: 'syz.4.1839': attribute type 1 has an invalid length. [ 304.208941][T12665] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 304.210782][T12665] Buffer I/O error on dev nbd0, logical block 0, async page read [ 304.210959][T12665] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 304.210985][T12665] Buffer I/O error on dev nbd0, logical block 1, async page read [ 304.260511][ T6636] ldm_validate_partition_table(): Disk read failed. [ 304.270729][ T6636] Dev nbd0: unable to read RDB block 0 [ 304.277466][ T6636] nbd0: unable to read partition table [ 304.336599][ T6636] ldm_validate_partition_table(): Disk read failed. [ 304.345510][ T6636] Dev nbd0: unable to read RDB block 0 [ 304.351378][ T6636] nbd0: unable to read partition table [ 304.378243][T13579] netlink: 'syz.0.1838': attribute type 1 has an invalid length. [ 304.382438][T13580] netlink: 'syz.0.1838': attribute type 1 has an invalid length. [ 304.454816][T13579] 8021q: adding VLAN 0 to HW filter on device bond4 [ 304.483781][T13580] netlink: 'syz.0.1838': attribute type 9 has an invalid length. [ 304.485357][T13590] netlink: 'syz.0.1838': attribute type 9 has an invalid length. [ 304.509985][T13581] bond4: (slave veth7): Enslaving as an active interface with a down link [ 304.819022][T13602] sctp: [Deprecated]: syz.0.1842 (pid 13602) Use of int in max_burst socket option. [ 304.819022][T13602] Use struct sctp_assoc_value instead [ 304.821829][T13604] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 305.820536][T13667] ip_tables: iptables: counters copy to user failed while replacing table [ 305.862737][T13669] netlink: 'syz.0.1858': attribute type 4 has an invalid length. [ 305.872637][T13669] netlink: 'syz.0.1858': attribute type 4 has an invalid length. [ 305.883816][T13669] lo: left promiscuous mode [ 306.015527][T13674] syzkaller0: entered promiscuous mode [ 306.015543][T13674] syzkaller0: entered allmulticast mode [ 306.602558][T13695] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 306.685025][T13702] __nla_validate_parse: 13 callbacks suppressed [ 306.685039][T13702] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1869'. [ 306.746788][T13704] : option downdelay: invalid value (18446744073709547007) [ 306.746804][T13704] : option downdelay: allowed values 0 - 2147483647 [ 306.758880][T13704]  (unregistering): Released all slaves [ 306.922679][T13710] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma? [ 306.934085][T13710] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 306.934122][T13710] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 306.934160][T13710] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 306.937782][T13710] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 306.951979][T13710] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 307.068441][T13710] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1872'. [ 307.206749][T13717] xt_CT: You must specify a L4 protocol and not use inversions on it [ 307.556834][T13740] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1879'. [ 307.640467][T13745] x_tables: duplicate underflow at hook 1 [ 307.839347][ T8047] wlan1: Trigger new scan to find an IBSS to join [ 307.991447][T13758] netlink: 'syz.1.1883': attribute type 1 has an invalid length. [ 308.028704][T13758] bond4: entered promiscuous mode [ 308.030688][T13758] bond4: entered allmulticast mode [ 308.031194][T13758] 8021q: adding VLAN 0 to HW filter on device bond4 [ 308.085087][T13758] bridge3: entered promiscuous mode [ 308.085362][T13758] bridge3: entered allmulticast mode [ 308.086172][T13758] bond4: (slave bridge3): Enslaving as a backup interface with an up link [ 308.139104][ T3757] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 308.180188][T13760] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 308.267390][ T3757] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 308.708476][T13795] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1892'. [ 308.708503][T13795] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1892'. [ 308.708952][T13795] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1892'. [ 308.708970][T13795] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1892'. [ 308.840546][T13797] netlink: 'syz.3.1893': attribute type 2 has an invalid length. [ 309.210989][T13812] IPVS: set_ctl: invalid protocol: 60 172.20.20.25:20003 [ 309.296820][T13818] IPVS: persistence engine module ip_vs_pe_ not found [ 309.431499][T13825] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1901'. [ 309.834507][T13847] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1907'. [ 309.848834][T13849] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1907'. [ 309.953325][T13858] : renamed from bond0 (while UP) [ 310.359593][T13877] netlink: 'syz.3.1912': attribute type 11 has an invalid length. [ 310.421915][T13874] 8021q: adding VLAN 0 to HW filter on device bond8 [ 310.424109][T13874] bridge0: port 3(bond8) entered blocking state [ 310.424398][T13874] bridge0: port 3(bond8) entered disabled state [ 310.424537][T13874] bond8: entered allmulticast mode [ 310.428046][T13874] bond8: entered promiscuous mode [ 310.429131][T13874] bridge0: port 3(bond8) entered blocking state [ 310.429248][T13874] bridge0: port 3(bond8) entered forwarding state [ 310.878399][T10523] wlan1: Trigger new scan to find an IBSS to join [ 310.972917][T13903] netlink: 'syz.4.1920': attribute type 1 has an invalid length. [ 311.055043][T13914] netlink: 'syz.1.1923': attribute type 10 has an invalid length. [ 311.055060][T13914] openvswitch: netlink: Flow key attr not present in new flow. [ 311.078302][T13903] bond9: (slave gretap2): making interface the new active one [ 311.078889][T13903] bond9: (slave gretap2): Enslaving as an active interface with an up link [ 311.262816][ T8048] bridge0: port 3(bond8) entered disabled state [ 311.420774][T13934] ip6gretap0: left promiscuous mode [ 311.421362][T13934] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 311.594500][T13945] ip_tables: iptables: counters copy to user failed while replacing table [ 311.651993][T13950] nbd: illegal input index 65508 [ 311.682922][T13950] netlink: 'syz.3.1933': attribute type 49 has an invalid length. [ 311.862054][T13957] netlink: 'syz.4.1935': attribute type 1 has an invalid length. [ 313.772278][T13946] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 313.772647][T13946] __nla_validate_parse: 7 callbacks suppressed [ 313.772657][T13946] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1933'. [ 313.772902][T13946] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 313.837431][ T3757] wlan1: Trigger new scan to find an IBSS to join [ 313.935472][T13968] netlink: 'syz.2.1937': attribute type 4 has an invalid length. [ 313.935496][T13968] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1937'. [ 313.976294][T13970] tipc: Enabling of bearer rejected, failed to enable media [ 314.019259][T13973] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1939'. [ 314.053196][T13973] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1939'. [ 314.053302][T13973] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1939'. [ 314.060544][T13976] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1940'. [ 314.324508][T13992] netlink: 'syz.0.1942': attribute type 1 has an invalid length. [ 314.423177][T13993] veth9: entered promiscuous mode [ 314.424661][T13992] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1942'. [ 314.723154][ T8048] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.971984][T14040] netlink: 'syz.4.1950': attribute type 1 has an invalid length. [ 315.015870][T14040] bond10: entered promiscuous mode [ 315.017577][T14040] 8021q: adding VLAN 0 to HW filter on device bond10 [ 315.045631][T14044] 8021q: adding VLAN 0 to HW filter on device bond10 [ 315.045869][T14044] bond10: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 315.045882][T14044] bond10: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 315.067219][T14044] bond10: (slave ip6gre1): making interface the new active one [ 315.067242][T14044] ip6gre1: entered promiscuous mode [ 315.076706][T14044] bond10: (slave ip6gre1): Enslaving as an active interface with an up link [ 315.084168][T14045] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1952'. [ 315.143360][T14043] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1952'. [ 315.171494][T14047] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1953'. [ 315.296544][T14047] bond9: option broadcast_neighbor: invalid value (3) [ 315.313250][T14047] bond9 (unregistering): Released all slaves [ 315.598430][T14076] netlink: 'syz.1.1960': attribute type 6 has an invalid length. [ 316.070576][T14103] bond5: option arp_validate: invalid value (8192) [ 316.098999][T14103] bond5 (unregistering): Released all slaves [ 316.435202][T14100] virtio_blk virtio4: 1/0/0 default/read/poll queues [ 316.441643][T14100] virtio_blk virtio4: [vda] 262144 512-byte logical blocks (134 MB/128 MiB) [ 316.532025][T14134] netlink: 'syz.3.1968': attribute type 1 has an invalid length. [ 316.876783][T14152] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 317.040630][T14158] netlink: 'syz.0.1975': attribute type 9 has an invalid length. [ 317.040655][T14158] netlink: 'syz.0.1975': attribute type 7 has an invalid length. [ 317.040667][T14158] netlink: 'syz.0.1975': attribute type 8 has an invalid length. [ 317.383686][T14178] bridge0: port 4(bond0) entered blocking state [ 317.383829][T14178] bridge0: port 4(bond0) entered disabled state [ 317.383993][T14178] bond0: entered allmulticast mode [ 317.384009][T14178] bond_slave_0: entered allmulticast mode [ 317.384025][T14178] bond_slave_1: entered allmulticast mode [ 317.428395][T14178] bond0: entered promiscuous mode [ 317.428420][T14178] bond_slave_0: entered promiscuous mode [ 317.428547][T14178] bond_slave_1: entered promiscuous mode [ 317.430127][T14178] bridge0: port 4(bond0) entered blocking state [ 317.430214][T14178] bridge0: port 4(bond0) entered forwarding state [ 317.703205][T14187] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 317.846527][T14200] hsr0: entered allmulticast mode [ 317.846552][T14200] hsr_slave_0: entered allmulticast mode [ 317.846570][T14200] hsr_slave_1: entered allmulticast mode [ 318.228844][T14199] hsr0: left allmulticast mode [ 318.228867][T14199] hsr_slave_0: left allmulticast mode [ 318.228883][T14199] hsr_slave_1: left allmulticast mode [ 318.496331][T14223] smc: removing ib device syz0 [ 318.563876][T14223] smbdirect: ib_dev[syz0] removed [ 319.303787][T14254] __nla_validate_parse: 8 callbacks suppressed [ 319.303806][T14254] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1996'. [ 319.304226][T14253] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1998'. [ 319.608251][T14264] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2000'. [ 319.820876][T14262] veth1_macvtap: entered promiscuous mode [ 319.821057][T14262] macsec0: entered promiscuous mode [ 320.103410][T14294] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2007'. [ 320.257199][T14301] bridge0: port 4(wlan1) entered blocking state [ 320.257302][T14301] bridge0: port 4(wlan1) entered disabled state [ 320.257458][T14301] mac80211_hwsim hwsim30 wlan1: entered allmulticast mode [ 320.329589][T14301] mac80211_hwsim hwsim30 wlan1: entered promiscuous mode [ 320.465448][T14302] sit0: mtu less than device minimum [ 320.835098][T14311] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2011'. [ 321.099558][T14321] netlink: 228 bytes leftover after parsing attributes in process `syz.3.2013'. [ 321.235709][T14326] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2014'. [ 321.280528][T14328] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2015'. [ 321.280557][T14328] netlink: 11 bytes leftover after parsing attributes in process `syz.0.2015'. [ 321.280574][T14328] netlink: 11 bytes leftover after parsing attributes in process `syz.0.2015'. [ 321.346230][T14330] netlink: 'syz.3.2016': attribute type 1 has an invalid length. [ 321.459281][T14330] 8021q: adding VLAN 0 to HW filter on device bond9 [ 321.498468][T14343] bond9 (unregistering): Released all slaves [ 321.564157][T14345] bridge0: port 5(veth0) entered blocking state [ 321.564262][T14345] bridge0: port 5(veth0) entered disabled state [ 321.564439][T14345] veth0: entered allmulticast mode [ 321.593463][T14341] veth1: left promiscuous mode [ 321.596901][T14341] bridge0: port 6(veth1) entered blocking state [ 321.602924][T14341] bridge0: port 6(veth1) entered disabled state [ 321.603107][T14341] veth1: entered allmulticast mode [ 321.617458][T14341] veth1: entered promiscuous mode [ 321.936504][T14365] openvswitch: netlink: Missing key (keys=c0, expected=100) [ 321.951214][T14371] netlink: 'syz.4.2025': attribute type 11 has an invalid length. [ 322.136644][T14379] netlink: 'syz.1.2031': attribute type 3 has an invalid length. [ 322.324920][T14398] netlink: 'syz.1.2036': attribute type 1 has an invalid length. [ 323.050560][T14438] syzkaller0: entered promiscuous mode [ 323.050584][T14438] syzkaller0: entered allmulticast mode [ 323.153528][T14443] netlink: 'syz.3.2050': attribute type 1 has an invalid length. [ 323.231406][T14443] 8021q: adding VLAN 0 to HW filter on device bond9 [ 323.233457][T14443] netlink: 'syz.3.2050': attribute type 1 has an invalid length. [ 323.266062][T14443] 8021q: adding VLAN 0 to HW filter on device bond10 [ 323.266776][T14443] netlink: 'syz.3.2050': attribute type 1 has an invalid length. [ 323.348429][T14443] 8021q: adding VLAN 0 to HW filter on device bond11 [ 323.349189][T14443] netlink: 'syz.3.2050': attribute type 1 has an invalid length. [ 323.419831][T14443] 8021q: adding VLAN 0 to HW filter on device bond12 [ 323.422645][T14443] netlink: 'syz.3.2050': attribute type 1 has an invalid length. [ 323.516242][T14459] macsec2: entered promiscuous mode [ 323.628129][T14443] 8021q: adding VLAN 0 to HW filter on device bond13 [ 323.628942][T14443] netlink: 'syz.3.2050': attribute type 1 has an invalid length. [ 323.669812][T14443] 8021q: adding VLAN 0 to HW filter on device bond14 [ 323.671072][T14443] netlink: 'syz.3.2050': attribute type 1 has an invalid length. [ 323.719512][T14469] macsec2: entered promiscuous mode [ 323.771464][ T6902] tipc: Resetting bearer [ 323.795359][T14443] 8021q: adding VLAN 0 to HW filter on device bond15 [ 323.796072][T14443] netlink: 'syz.3.2050': attribute type 1 has an invalid length. [ 323.834125][T14443] 8021q: adding VLAN 0 to HW filter on device bond16 [ 323.896691][T14443] 8021q: adding VLAN 0 to HW filter on device bond17 [ 323.972167][T14443] 8021q: adding VLAN 0 to HW filter on device bond18 [ 324.263528][T14498] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 324.289606][T14495] syzkaller1: entered promiscuous mode [ 324.289632][T14495] syzkaller1: entered allmulticast mode [ 324.508953][T14524] __nla_validate_parse: 13 callbacks suppressed [ 324.508975][T14524] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2066'. [ 324.508998][T14524] openvswitch: netlink: Missing key (keys=c0, expected=40300) [ 324.826701][T14532] Unknown options in mask 6 [ 324.835452][T14532] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2068'. [ 324.835484][T14532] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2068'. [ 324.847653][T14532] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2068'. [ 325.154489][T14568] bridge0: port 3(vlan2) entered blocking state [ 325.157566][T14568] bridge0: port 3(vlan2) entered disabled state [ 325.157826][T14568] vlan2: entered allmulticast mode [ 325.157843][T14568] geneve0: entered allmulticast mode [ 325.161186][T14568] vlan2: entered promiscuous mode [ 325.161205][T14568] geneve0: entered promiscuous mode [ 325.213777][T14565] openvswitch: netlink: Multiple metadata blocks provided [ 325.214601][T14565] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2076'. [ 325.214620][T14565] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2076'. [ 325.214900][T14565] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2076'. [ 325.214910][T14565] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2076'. [ 325.746307][T14592] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2086'. [ 325.762939][T14592] netlink: 45 bytes leftover after parsing attributes in process `syz.0.2086'. [ 326.026904][T14607] sock: sock_set_timeout: `syz.2.2090' (pid 14607) tries to set negative timeout [ 326.235532][T14614] bond6: option mode: invalid value (7) [ 326.245057][T14614] bond6 (unregistering): Released all slaves [ 326.401445][T14627] v: renamed from veth0_vlan (while UP) [ 327.610330][T14648] syzkaller1: entered promiscuous mode [ 327.610354][T14648] syzkaller1: entered allmulticast mode [ 328.699967][T14681] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 328.765305][T14685] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 328.863883][T14692] validate_nla: 6 callbacks suppressed [ 328.863903][T14692] netlink: 'syz.0.2108': attribute type 2 has an invalid length. [ 328.909658][T14694] SET target dimension over the limit! [ 328.910117][T14694] syzkaller0: entered promiscuous mode [ 328.910136][T14694] syzkaller0: entered allmulticast mode [ 328.998857][T14696] netlink: 'syz.0.2110': attribute type 3 has an invalid length. [ 328.999128][T14696] netlink: 'syz.0.2110': attribute type 3 has an invalid length. [ 328.999343][T14696] netlink: 'syz.0.2110': attribute type 3 has an invalid length. [ 328.999559][T14696] netlink: 'syz.0.2110': attribute type 3 has an invalid length. [ 328.999774][T14696] netlink: 'syz.0.2110': attribute type 3 has an invalid length. [ 329.000062][T14696] netlink: 'syz.0.2110': attribute type 3 has an invalid length. [ 329.000285][T14696] netlink: 'syz.0.2110': attribute type 3 has an invalid length. [ 329.000503][T14696] netlink: 'syz.0.2110': attribute type 3 has an invalid length. [ 329.000724][T14696] netlink: 'syz.0.2110': attribute type 3 has an invalid length. [ 329.602551][T14722] __nla_validate_parse: 6 callbacks suppressed [ 329.602573][T14722] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2117'. [ 329.985079][T14758] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2125'. [ 330.000318][T14758] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2125'. [ 330.011159][T14758] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2125'. [ 330.015360][T14758] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2125'. [ 330.025013][T14758] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2125'. [ 330.029701][T14758] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2125'. [ 330.033798][T14758] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2125'. [ 330.043038][T14758] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2125'. [ 330.050703][T14758] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2125'. [ 330.366295][T14774] bond0: left allmulticast mode [ 330.366318][T14774] bond_slave_0: left allmulticast mode [ 330.366335][T14774] bond_slave_1: left allmulticast mode [ 330.392983][T14774] bond0: left promiscuous mode [ 330.393005][T14774] bond_slave_0: left promiscuous mode [ 330.394494][T14774] bond_slave_1: left promiscuous mode [ 330.394921][T14774] bridge0: port 4(bond0) entered disabled state [ 330.472560][T14774] bridge_slave_0: left allmulticast mode [ 330.472794][T14774] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.509415][T14774] bridge_slave_1: left allmulticast mode [ 330.509441][T14774] bridge_slave_1: left promiscuous mode [ 330.509620][T14774] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.569658][T14774] bond0: (slave bond_slave_0): Releasing backup interface [ 330.621883][T14774] bond0: (slave bond_slave_1): Releasing backup interface [ 330.704755][T14774] team0: Port device team_slave_0 removed [ 330.784475][T14774] team0: Port device team_slave_1 removed [ 330.799229][T14774] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 330.799305][T14774] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 330.835701][T14774] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 330.835725][T14774] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 330.853065][T14774] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 330.860169][T14781] veth0: entered promiscuous mode [ 330.903362][T14773] veth0: left promiscuous mode [ 330.916797][ T5725] syz1: Port: 1 Link DOWN [ 331.028916][T14799] IPVS: set_ctl: invalid protocol: 1 10.1.1.0:20001 [ 331.029388][T14799] IPVS: rr: FWM 3 0x00000003 - no destination available [ 331.534519][T14829] openvswitch: netlink: Actions may not be safe on all matching packets [ 333.894927][T14793] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 334.272706][T14859] syzkaller1: entered promiscuous mode [ 334.272730][T14859] syzkaller1: entered allmulticast mode [ 334.515326][T14862] validate_nla: 30 callbacks suppressed [ 334.515347][T14862] netlink: 'syz.3.2147': attribute type 13 has an invalid length. [ 334.572904][T14880] netlink: 'syz.4.2152': attribute type 1 has an invalid length. [ 334.664567][T14889] openvswitch: netlink: IP tunnel dst address not specified [ 334.673292][T14880] bond13: entered promiscuous mode [ 334.673756][T14880] 8021q: adding VLAN 0 to HW filter on device bond13 [ 334.776362][T14886] bond13: (slave bridge8): making interface the new active one [ 334.776387][T14886] bridge8: entered promiscuous mode [ 334.799736][T14886] bond13: (slave bridge8): Enslaving as an active interface with an up link [ 334.804645][T14893] netlink: 'syz.0.2155': attribute type 1 has an invalid length. [ 334.918666][T14893] 8021q: adding VLAN 0 to HW filter on device bond5 [ 334.965137][T14906] __nla_validate_parse: 9 callbacks suppressed [ 334.965159][T14906] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2157'. [ 335.100406][T14911] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2158'. [ 335.100439][T14911] openvswitch: netlink: Missing key (keys=c0, expected=100) [ 335.533311][T14935] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2162'. [ 335.600247][T14931] ip6gretap1: entered allmulticast mode [ 335.602203][T14931] batman_adv: batadv0: Adding interface: ip6gretap1 [ 335.602217][T14931] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 335.602244][T14931] batman_adv: batadv0: Interface activated: ip6gretap1 [ 335.666449][T14930] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2162'. [ 335.720298][T14943] netlink: Conntrack attr has 4 unknown bytes [ 335.720320][T14943] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 335.932214][T14947] ip6gretap2: entered allmulticast mode [ 335.934269][T14947] batman_adv: batadv0: Adding interface: ip6gretap2 [ 335.934285][T14947] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 335.934315][T14947] batman_adv: batadv0: Interface activated: ip6gretap2 [ 336.048754][T14952] netlink: 'syz.3.2166': attribute type 1 has an invalid length. [ 336.048778][T14952] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2166'. [ 336.223097][T14955] bond6: Unable to set up delay as MII monitoring is disabled [ 336.226546][T14955] bond6 (unregistering): Released all slaves [ 336.256891][T14959] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2168'. [ 336.722329][T14978] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 337.234073][T14999] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 337.283917][T15003] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2181'. [ 337.288456][T14999] netlink: 'syz.4.2178': attribute type 15 has an invalid length. [ 337.288477][T14999] netlink: 666 bytes leftover after parsing attributes in process `syz.4.2178'. [ 337.292625][T14999] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 337.352589][T15006] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 337.374177][T15003] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2181'. [ 337.704221][T15018] syzkaller1: entered allmulticast mode [ 338.051351][T15049] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2191'. [ 338.224946][T15051] netlink: 'syz.2.2196': attribute type 15 has an invalid length. [ 338.690380][T15074] bridge_slave_0: left promiscuous mode [ 338.771261][T15074] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 338.786074][T15074] tipc: Resetting bearer [ 338.805525][T15074] 8021q: adding VLAN 0 to HW filter on device bond2 [ 338.819132][T15074] macvtap1: left promiscuous mode [ 338.822357][T15074] A link change request failed with some changes committed already. Interface geneve3 may have been left with an inconsistent configuration, please check. [ 339.166373][T15106] bridge0: port 1(1x9) entered blocking state [ 339.166508][T15106] bridge0: port 1(1x9) entered forwarding state [ 339.186648][T15106] dummy0: left promiscuous mode [ 339.403128][T15106] gretap1: left promiscuous mode [ 339.435836][T15124] IPVS: set_ctl: invalid protocol: 43 224.0.0.2:20003 [ 339.450045][T15106] macvlan3: left promiscuous mode [ 339.499339][T15106] 8021q: adding VLAN 0 to HW filter on device bond2 [ 339.500174][T15106] ipvlan2: left promiscuous mode [ 339.529055][T15106] bond1: left promiscuous mode [ 339.529421][T15106] 8021q: adding VLAN 0 to HW filter on device bond1 [ 339.565999][T15106] 8021q: adding VLAN 0 to HW filter on device bond0 [ 339.586461][T15106] veth9: left promiscuous mode [ 339.668431][ T8047] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 339.670162][ T8047] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 339.697311][ T8047] netdevsim netdevsim0 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 339.698452][ T8050] netdevsim netdevsim0 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 339.698752][ T8050] netdevsim netdevsim0 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 339.698787][ T8050] netdevsim netdevsim0 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 339.746825][ T8050] bond3: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 339.746901][ T8050] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 339.780261][ T8050] bond3: active interface up! [ 339.795728][T10601] bond4: (slave veth7): link status definitely up, 10000 Mbps full duplex [ 339.830347][T10601] bond4: (slave veth7): making interface the new active one [ 339.876452][T10601] bond4: active interface up! [ 340.118733][T15139] __nla_validate_parse: 5 callbacks suppressed [ 340.118757][T15139] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2214'. [ 340.124618][T15139] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 340.423031][T15161] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 340.435128][T15161] openvswitch: netlink: IP tunnel attribute has 5393 unknown bytes. [ 340.499692][T15164] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2219'. [ 340.505943][T15164] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2219'. [ 340.534526][T15164] netlink: 'syz.4.2219': attribute type 2 has an invalid length. [ 340.535598][T15164] netlink: 'syz.4.2219': attribute type 2 has an invalid length. [ 340.584786][T15167] netlink: 'syz.2.2217': attribute type 13 has an invalid length. [ 340.876298][T15150] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2216'. [ 340.876320][T15150] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2216'. [ 340.876337][T15150] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2216'. [ 340.932810][T15177] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2221'. [ 340.933296][T15177] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2221'. [ 340.987623][T15177] veth7: entered allmulticast mode [ 341.159306][T15188] netlink: 'syz.4.2223': attribute type 3 has an invalid length. [ 341.270592][T15193] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2224'. [ 341.514658][T15205] x_tables: duplicate underflow at hook 1 [ 341.771086][T15217] netlink: 'syz.3.2231': attribute type 10 has an invalid length. [ 341.862638][ T3757] tipc: Subscription rejected, illegal request [ 341.906381][T15225] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2232'. [ 341.924279][T15227] IPVS: rr: FWM 3 0x00000003 - no destination available [ 341.924671][T15225] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 341.995584][T15240] bridge: RTM_NEWNEIGH with invalid state 0x4 [ 342.735345][T15271] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 342.874306][T15285] tipc: Resetting bearer [ 342.878045][T15285] tipc: Resetting bearer [ 342.895148][T15285] tipc: Resetting bearer [ 342.895249][T15285] tipc: Resetting bearer [ 342.923749][T15285] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 343.126925][T15302] virtio_blk virtio5: 1/0/0 default/read/poll queues [ 343.138494][T15302] virtio_blk virtio5: [vdb] 262144 512-byte logical blocks (134 MB/128 MiB) [ 343.517488][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 343.677321][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 343.861625][T15331] netlink: 'syz.4.2256': attribute type 10 has an invalid length. [ 344.093337][T15331] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 344.104301][T15331] team0: Port device netdevsim1 added [ 344.286005][T15335] bond6: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 344.478321][ T5615] Bluetooth: hci1: command 0x0406 tx timeout [ 344.532820][T15335] bond6 (unregistering): Released all slaves [ 345.045547][T15389] xt_bpf: check failed: parse error [ 345.079565][T15392] netlink: 'syz.2.2266': attribute type 23 has an invalid length. [ 345.079589][T15392] netlink: 'syz.2.2266': attribute type 11 has an invalid length. [ 345.225198][T15406] __nla_validate_parse: 77 callbacks suppressed [ 345.225217][T15406] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2270'. [ 345.225242][T15406] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2270'. [ 345.344637][T15410] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2271'. [ 345.471238][T15413] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2272'. [ 345.471289][T15413] bond_slave_0: entered promiscuous mode [ 345.720678][T15438] netlink: 'syz.2.2278': attribute type 2 has an invalid length. [ 345.923978][T15457] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2280'. [ 346.680753][T15472] netlink: zone id is out of range [ 346.680770][T15472] netlink: zone id is out of range [ 346.680782][T15472] netlink: zone id is out of range [ 346.680840][T15472] netlink: zone id is out of range [ 346.906575][T15492] sctp: [Deprecated]: syz.3.2288 (pid 15492) Use of int in max_burst socket option. [ 346.906575][T15492] Use struct sctp_assoc_value instead [ 347.552540][T15498] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2289'. [ 347.552556][T15498] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2289'. [ 349.160301][T15466] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 349.217772][T15502] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 349.328926][T15512] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2294'. [ 349.413336][T15519] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2291'. [ 349.473928][T15513] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 349.515977][T15525] netlink: 'syz.3.2297': attribute type 32 has an invalid length. [ 349.600816][T15531] netlink: 'syz.3.2299': attribute type 9 has an invalid length. [ 349.600839][T15531] netlink: 'syz.3.2299': attribute type 6 has an invalid length. [ 349.600850][T15531] netlink: 'syz.3.2299': attribute type 7 has an invalid length. [ 349.600860][T15531] netlink: 'syz.3.2299': attribute type 8 has an invalid length. [ 349.660425][T15534] netlink: 'syz.4.2298': attribute type 1 has an invalid length. [ 349.660441][T15534] netlink: 244 bytes leftover after parsing attributes in process `syz.4.2298'. [ 349.660514][T15534] NCSI netlink: No device for ifindex 0 [ 349.951929][T15541] hsr_slave_0: left promiscuous mode [ 349.953056][T15541] hsr_slave_1: left promiscuous mode [ 350.435830][T15558] __nla_validate_parse: 4 callbacks suppressed [ 350.435850][T15558] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2307'. [ 350.625165][T15580] openvswitch: netlink: IP tunnel dst address not specified [ 350.786146][T15584] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 351.687215][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 352.022098][T15604] netlink: 'syz.4.2318': attribute type 4 has an invalid length. [ 352.022113][T15604] netlink: 17 bytes leftover after parsing attributes in process `syz.4.2318'. [ 352.317483][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 353.337742][T15558] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 353.360292][T15592] netlink: 'syz.3.2314': attribute type 1 has an invalid length. [ 353.360315][T15592] netlink: 756 bytes leftover after parsing attributes in process `syz.3.2314'. [ 353.483756][T15613] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2320'. [ 353.569641][T15619] xt_nfacct: accounting object `' does not exist [ 353.666478][ T6905] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x2 [ 353.723288][T15607] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2321'. [ 353.822521][T15629] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2324'. [ 353.984412][T15635] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2325'. [ 354.151268][T15653] Unknown options in mask 6 [ 354.151611][T15653] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2331'. [ 354.151643][T15653] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2331'. [ 354.163391][T15635] syz_tun (unregistering): left allmulticast mode [ 354.221313][T15656] netlink: 'syz.3.2331': attribute type 1 has an invalid length. [ 354.221336][T15656] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2331'. [ 354.317656][T15660] netlink: 'syz.0.2333': attribute type 1 has an invalid length. [ 354.491086][T15660] bridge4: entered promiscuous mode [ 354.506599][T15660] bond6: (slave bridge4): making interface the new active one [ 354.515204][T15660] bond6: (slave bridge4): Enslaving as an active interface with an up link [ 354.635143][ T30] audit: type=1800 audit(1789173492.248:6): pid=15679 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2338" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2463 res=0 errno=0 [ 354.636246][T15679] netlink: 'syz.2.2338': attribute type 8 has an invalid length. [ 354.816729][T15687] SET target dimension over the limit! [ 354.980776][T15697] netlink: NAT attribute has 4 unknown bytes [ 354.980811][T15697] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 356.344309][T15747] syzkaller1: entered promiscuous mode [ 356.344331][T15747] syzkaller1: entered allmulticast mode [ 356.978840][T15801] __nla_validate_parse: 3 callbacks suppressed [ 356.978861][T15801] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2359'. [ 357.101106][T15808] debugfs: '.P'G!DES' already exists in 'ieee80211' [ 357.153464][T15808] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2362'. [ 357.153940][T15808] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2362'. [ 357.240775][T15819] x_tables: duplicate underflow at hook 1 [ 357.306130][T15812] tipc: Resetting bearer [ 357.325336][T15812] A link change request failed with some changes committed already. Interface geneve3 may have been left with an inconsistent configuration, please check. [ 357.427023][T15827] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 357.430806][T15827] ip_tables: iptables: counters copy to user failed while replacing table [ 357.479918][T15834] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2370'. [ 357.553310][T15827] bridge0: port 1(1x9) entered disabled state [ 357.563412][T15839] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2367'. [ 357.849010][T15855] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2374'. [ 358.102487][T15867] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2378'. [ 358.120937][T15869] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2379'. [ 358.145710][T15869] xt_connbytes: Forcing CT accounting to be enabled [ 358.257553][T15877] bond0: Device is already in use. [ 358.381124][T15882] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2383'. [ 359.275988][T15882] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 359.307876][T15882] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 359.331031][T15882] bond0 (unregistering): Released all slaves [ 359.506285][T15904] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2387'. [ 359.506311][T15904] nbd: must specify at least one socket [ 359.946794][T15938] bridge0: entered allmulticast mode [ 360.182997][T15955] netlink: 'syz.1.2398': attribute type 1 has an invalid length. [ 360.249835][T15958] vlan4: entered promiscuous mode [ 360.370882][T15966] syzkaller1: entered promiscuous mode [ 360.370908][T15966] syzkaller1: entered allmulticast mode [ 360.858625][T15986] sysfs: cannot create duplicate filename '/class/ieee80211/.P'G!DES' [ 360.858647][T15986] CPU: 0 UID: 0 PID: 15986 Comm: syz.2.2411 Not tainted syzkaller #0 PREEMPT(full) [ 360.858673][T15986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 360.858700][T15986] Call Trace: [ 360.858709][T15986] [ 360.858717][T15986] dump_stack_lvl+0xe8/0x150 [ 360.858754][T15986] sysfs_warn_dup+0x8e/0xa0 [ 360.858785][T15986] sysfs_do_create_link_sd+0xc0/0x110 [ 360.858820][T15986] device_add_class_symlinks+0x1cf/0x240 [ 360.858846][T15986] device_add+0x467/0xb80 [ 360.858869][T15986] wiphy_register+0x1fc8/0x2ff0 [ 360.858918][T15986] ? __pfx_wiphy_register+0x10/0x10 [ 360.858948][T15986] ? __pfx_netdev_run_todo+0x10/0x10 [ 360.858977][T15986] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 360.859011][T15986] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 360.859047][T15986] ieee80211_register_hw+0x3d3d/0x4a50 [ 360.859084][T15986] ? ieee80211_register_hw+0x1941/0x4a50 [ 360.859133][T15986] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 360.859158][T15986] ? __asan_memset+0x22/0x50 [ 360.859189][T15986] ? __hrtimer_setup+0x1b7/0x260 [ 360.859215][T15986] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 360.859243][T15986] mac80211_hwsim_new_radio+0x3258/0x56b0 [ 360.859300][T15986] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 360.859322][T15986] ? kstrndup+0xbd/0x160 [ 360.859349][T15986] ? kstrndup+0xbd/0x160 [ 360.859372][T15986] hwsim_new_radio_nl+0xd8b/0xf90 [ 360.859412][T15986] genl_family_rcv_msg_doit+0x233/0x340 [ 360.859444][T15986] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 360.859481][T15986] ? bpf_lsm_capable+0x9/0x20 [ 360.859498][T15986] ? security_capable+0x7e/0x2c0 [ 360.859536][T15986] genl_rcv_msg+0x614/0x7a0 [ 360.859565][T15986] ? __pfx_genl_rcv_msg+0x10/0x10 [ 360.859588][T15986] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 360.859626][T15986] netlink_rcv_skb+0x226/0x4a0 [ 360.859657][T15986] ? __pfx_genl_rcv_msg+0x10/0x10 [ 360.859681][T15986] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 360.859727][T15986] ? down_read+0x2be/0x330 [ 360.859756][T15986] genl_rcv+0x28/0x40 [ 360.859775][T15986] netlink_unicast+0x7bd/0x940 [ 360.859814][T15986] netlink_sendmsg+0x813/0xb40 [ 360.859854][T15986] ? __pfx_netlink_sendmsg+0x10/0x10 [ 360.859892][T15986] ? apparmor_socket_sendmsg+0x98/0x360 [ 360.859917][T15986] ? __pfx_netlink_sendmsg+0x10/0x10 [ 360.859944][T15986] sock_sendmsg_nosec+0x13a/0x180 [ 360.859979][T15986] ____sys_sendmsg+0x54e/0x850 [ 360.860011][T15986] ? __pfx_____sys_sendmsg+0x10/0x10 [ 360.860047][T15986] ? import_iovec+0x73/0xa0 [ 360.860076][T15986] ___sys_sendmsg+0x2a5/0x360 [ 360.860101][T15986] ? __lock_acquire+0x747/0x2de0 [ 360.860130][T15986] ? __pfx____sys_sendmsg+0x10/0x10 [ 360.860162][T15986] ? futex_wait+0x2a2/0x390 [ 360.860226][T15986] ? __fget_files+0x2a/0x420 [ 360.860253][T15986] ? __fget_files+0x3a2/0x420 [ 360.860292][T15986] __x64_sys_sendmsg+0x1b1/0x290 [ 360.860321][T15986] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 360.860369][T15986] do_syscall_64+0x166/0x520 [ 360.860390][T15986] ? trace_irq_disable+0x3b/0x140 [ 360.860409][T15986] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.860430][T15986] ? clear_bhb_loop+0x70/0xc0 [ 360.860455][T15986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.860475][T15986] RIP: 0033:0x7f711e59e159 [ 360.860496][T15986] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 360.860513][T15986] RSP: 002b:00007f711f4a9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 360.860542][T15986] RAX: ffffffffffffffda RBX: 00007f711e825fa0 RCX: 00007f711e59e159 [ 360.860558][T15986] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 360.860571][T15986] RBP: 00007f711e63503b R08: 0000000000000000 R09: 0000000000000000 [ 360.860584][T15986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 360.860596][T15986] R13: 00007f711e826038 R14: 00007f711e825fa0 R15: 00007ffc2fb48bf8 [ 360.860631][T15986] [ 361.942787][T16022] Cannot find del_set index 3 as target [ 361.998481][T16028] __nla_validate_parse: 10 callbacks suppressed [ 361.998502][T16028] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2420'. [ 362.135082][T16032] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2423'. [ 362.683025][T16050] x_tables: duplicate underflow at hook 1 [ 362.961313][T16067] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2432'. [ 362.980402][T16067] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 363.088130][T16072] syzkaller1: entered promiscuous mode [ 363.088153][T16072] syzkaller1: entered allmulticast mode [ 363.123817][T16076] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2435'. [ 363.196215][T16080] lo: entered allmulticast mode [ 363.217675][T16080] lo: left allmulticast mode [ 363.534272][T16095] netlink: 'syz.1.2441': attribute type 1 has an invalid length. [ 363.603611][T16095] bond6: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 363.604891][T16095] bond6 (unregistering): Released all slaves [ 363.725499][T16095] bridge4: entered promiscuous mode [ 363.859797][T16107] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2443'. [ 363.859887][T16107] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2443'. [ 363.958183][T16107] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2443'. [ 363.958268][T16107] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2443'. [ 364.140379][T16119] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2446'. [ 364.169973][T16120] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2446'. [ 364.389052][T16098] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 365.531477][T16184] netlink: 'syz.3.2461': attribute type 8 has an invalid length. [ 365.773923][T16191] netlink: 'syz.0.2464': attribute type 2 has an invalid length. [ 365.836836][T16197] bond14: entered allmulticast mode [ 365.890867][T16197] tipc: Resetting bearer [ 365.909696][T16202] netlink: 'syz.4.2465': attribute type 1 has an invalid length. [ 365.959617][ T6905] bond5: (slave bridge3): link status up again after 0 ms [ 365.977147][ T6902] bond5: (slave bridge3): link status up again after 0 ms [ 365.998830][ T6902] bond5: (slave bridge3): link status up again after 0 ms [ 366.018179][ T6905] bond5: (slave bridge3): link status up again after 0 ms [ 366.041004][ T6905] bond5: (slave bridge3): link status up again after 0 ms [ 366.060385][T10601] bond5: (slave bridge3): link status up again after 0 ms [ 366.077355][ T6905] bond5: (slave bridge3): link status up again after 0 ms [ 366.099986][ T6905] bond5: (slave bridge3): link status up again after 0 ms [ 366.128354][T10601] bond5: (slave bridge3): link status up again after 0 ms [ 366.132275][T16197] bridge9: entered promiscuous mode [ 366.132298][T16197] bridge9: entered allmulticast mode [ 366.389639][T16213] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 366.638232][T16236] syzkaller0: entered promiscuous mode [ 366.638255][T16236] syzkaller0: entered allmulticast mode [ 367.039645][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 367.122571][T16259] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 367.122571][T16259] Please contact the netfilter-devel mailing list or update your nftables rules. [ 367.177215][T16259] ip6gre2: entered promiscuous mode [ 367.177236][T16259] ip6gre2: entered allmulticast mode [ 367.182210][T16270] __nla_validate_parse: 14 callbacks suppressed [ 367.182229][T16270] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2481'. [ 367.252176][T16271] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2480'. [ 367.252209][T16271] block nbd0: not configured, cannot reconfigure [ 368.419296][T16292] IPVS: set_ctl: invalid protocol: 43 127.0.0.1:21 [ 368.817177][T16318] netlink: 'syz.2.2494': attribute type 4 has an invalid length. [ 368.839539][T16318] netlink: 'syz.2.2494': attribute type 4 has an invalid length. [ 368.959071][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 369.026320][T16330] syzkaller0: entered promiscuous mode [ 369.026344][T16330] syzkaller0: entered allmulticast mode [ 369.452156][T16341] netlink: 'syz.2.2500': attribute type 2 has an invalid length. [ 369.502576][T16341] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2500'. [ 369.668316][T10601] net_ratelimit: 22 callbacks suppressed [ 369.668338][T10601] bond5: (slave bridge3): failed to get link speed/duplex [ 369.718647][T16353] netlink: 'syz.3.2502': attribute type 39 has an invalid length. [ 369.811297][T16355] SET target dimension over the limit! [ 369.824231][T16355] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2503'. [ 369.824252][T16355] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 369.947149][T10601] bond5: (slave bridge3): failed to get link speed/duplex [ 370.068013][ T6902] bond5: (slave bridge3): failed to get link speed/duplex [ 370.153785][T16382] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2510'. [ 370.175234][T16382] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2510'. [ 370.175799][T16382] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2510'. [ 370.176414][T16382] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2510'. [ 370.205451][T16382] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2510'. [ 370.206230][T16382] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2510'. [ 370.248091][ T8047] bond5: (slave bridge3): failed to get link speed/duplex [ 370.357850][T10523] bond5: (slave bridge3): failed to get link speed/duplex [ 370.469561][ T8047] bond5: (slave bridge3): failed to get link speed/duplex [ 370.587407][T10523] bond5: (slave bridge3): failed to get link speed/duplex [ 370.698458][T10523] bond5: (slave bridge3): failed to get link speed/duplex [ 370.799659][T16409] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 372.910840][T16365] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 373.053287][T16421] __nla_validate_parse: 31 callbacks suppressed [ 373.053307][T16421] netlink: 116 bytes leftover after parsing attributes in process `syz.1.2519'. [ 373.101380][T16423] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2519'. [ 373.101416][T16423] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2519'. [ 373.242863][T16441] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2521'. [ 373.338316][T16442] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2522'. [ 373.479146][T16445] nbd: must specify a size in bytes for the device [ 373.479337][T16439] nbd: must specify a size in bytes for the device [ 374.351526][T16456] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2525'. [ 374.479150][T16432] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 374.493110][T16456] xt_IDLETIMER: label is empty or not nul-terminated [ 374.544730][T16432] tipc: Resetting bearer [ 374.549316][T16458] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2525'. [ 374.601097][T16459] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2525'. [ 374.763171][T16432] bridge2: left promiscuous mode [ 374.772502][T16432] bond5: left promiscuous mode [ 374.772534][T16432] bridge3: left promiscuous mode [ 374.773221][T16432] bridge4: left promiscuous mode [ 374.773380][T16432] bond5: left allmulticast mode [ 374.773394][T16432] bridge3: left allmulticast mode [ 374.773456][T16432] bridge4: left allmulticast mode [ 374.827375][ T6636] udevd[6636]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 374.918385][T16432] bond7: left promiscuous mode [ 374.918403][T16432] bond7: left allmulticast mode [ 374.931880][T16432] gtp0: left promiscuous mode [ 374.931895][T16432] gtp0: left allmulticast mode [ 375.042148][T16432] bond10: left promiscuous mode [ 375.042164][T16432] ip6gre1: left promiscuous mode [ 375.064547][T16432] bond13: left promiscuous mode [ 375.064562][T16432] bridge8: left promiscuous mode [ 375.119325][T16432] vlan4: left promiscuous mode [ 375.183703][T16432] bond14: left allmulticast mode [ 375.215596][T16452] netlink: 112 bytes leftover after parsing attributes in process `syz.4.2522'. [ 375.217189][ T8033] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 375.217218][ T8033] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.217257][ T8033] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 375.217280][ T8033] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.217312][ T8033] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 375.217336][ T8033] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.217368][ T8033] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 375.217390][ T8033] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.760791][T16486] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2529'. [ 375.919437][T16506] net_ratelimit: 21 callbacks suppressed [ 375.919458][T16506] netlink: Unknown conntrack attr (0) [ 376.474657][T16539] syzkaller0: create flow: hash 2515973714 index 2 [ 376.777459][T16544] ip6tnl0: mtu less than device minimum [ 377.105240][T16528] syzkaller0: delete flow: hash 2515973714 index 2 [ 378.054531][T16610] netlink: NAT attribute has 8 unknown bytes [ 378.054566][T16610] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 378.055047][T16610] netlink: NAT attribute has 8 unknown bytes [ 378.055073][T16610] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 380.576060][T16624] syzkaller1: entered promiscuous mode [ 380.576083][T16624] syzkaller1: entered allmulticast mode [ 380.661328][T16636] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 380.677519][T16636] syzkaller1: left promiscuous mode [ 380.677541][T16636] syzkaller1: left allmulticast mode [ 380.714091][T16635] __nla_validate_parse: 1 callbacks suppressed [ 380.714111][T16635] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2551'. [ 381.107288][T16659] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2556'. [ 381.437980][T16676] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2561'. [ 381.492353][T16676] macvtap2: entered promiscuous mode [ 381.788498][T16697] ip_tables: iptables: counters copy to user failed while replacing table [ 381.806732][T16697] vlan0: entered promiscuous mode [ 381.831776][T16700] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2568'. [ 381.969296][T16704] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2569'. [ 381.969364][T16704] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2569'. [ 381.972692][T16706] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2571'. [ 382.133883][T16710] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2573'. [ 382.241778][T16720] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2576'. [ 382.243375][T16719] netlink: 'syz.0.2576': attribute type 1 has an invalid length. [ 382.244992][T16719] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2576'. [ 382.460193][T16738] netlink: 'syz.0.2578': attribute type 15 has an invalid length. [ 382.460301][T16735] netlink: 'syz.0.2578': attribute type 15 has an invalid length. [ 383.262042][T16752] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 383.370133][T16754] sctp: [Deprecated]: syz.2.2583 (pid 16754) Use of struct sctp_assoc_value in delayed_ack socket option. [ 383.370133][T16754] Use struct sctp_sack_info instead [ 383.370664][T16754] sctp: [Deprecated]: syz.2.2583 (pid 16754) Use of struct sctp_assoc_value in delayed_ack socket option. [ 383.370664][T16754] Use struct sctp_sack_info instead [ 383.509709][T16759] netlink: 'syz.2.2584': attribute type 4 has an invalid length. [ 383.582467][T16764] netlink: 'syz.2.2586': attribute type 4 has an invalid length. [ 383.585159][T16764] openvswitch: netlink: Multiple metadata blocks provided [ 383.586370][T16764] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 385.153727][T16712] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 385.485188][T16784] can: request_module (can-proto-4) failed. [ 385.506518][T16780] can: request_module (can-proto-4) failed. [ 385.530750][T16792] unsupported nlmsg_type 40 [ 385.771622][T16795] syzkaller1: entered promiscuous mode [ 385.771647][T16795] syzkaller1: entered allmulticast mode [ 385.902961][T16802] __nla_validate_parse: 7 callbacks suppressed [ 385.902983][T16802] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2598'. [ 385.911552][T16802] syzkaller0: entered promiscuous mode [ 385.911588][T16802] syzkaller0: entered allmulticast mode [ 386.051161][T16809] openvswitch: netlink: Missing key (keys=c0, expected=20100) [ 386.095417][T16813] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2600'. [ 386.123077][T16821] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2602'. [ 386.389321][T16834] netlink: 22 bytes leftover after parsing attributes in process `syz.3.2605'. [ 387.479002][T16889] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2620'. [ 387.479129][T16889] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2620'. [ 387.596479][T16888] netlink: ct family unspecified [ 387.596512][T16888] openvswitch: netlink: Actions may not be safe on all matching packets [ 387.726624][T16900] netlink: 'syz.0.2622': attribute type 10 has an invalid length. [ 387.736536][T16896] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 387.789093][T16900] team0: Port device dummy0 added [ 387.922973][T16914] netlink: 400 bytes leftover after parsing attributes in process `syz.1.2627'. [ 388.283328][T16925] netlink: 244 bytes leftover after parsing attributes in process `syz.1.2631'. [ 388.383757][T16925] netlink: 220 bytes leftover after parsing attributes in process `syz.1.2631'. [ 388.620357][T16946] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2635'. [ 389.155193][T16970] syzkaller0: entered promiscuous mode [ 389.155220][T16970] syzkaller0: entered allmulticast mode [ 391.871754][ T4984] udevd[4984]: worker [5629] /devices/virtual/block/nbd3 is taking a long time [ 394.356543][T16995] __nla_validate_parse: 31 callbacks suppressed [ 394.356563][T16995] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2646'. [ 394.756523][T17027] netlink: 232 bytes leftover after parsing attributes in process `syz.2.2652'. [ 394.841078][T17032] bond16: option ad_select: invalid value (34) [ 394.855186][T17032] bond16 (unregistering): Released all slaves [ 395.040867][T17039] bond16: option ad_select: invalid value (34) [ 395.051534][T17039] bond16 (unregistering): Released all slaves [ 395.092521][T17044] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2651'. [ 395.362516][T17061] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2662'. [ 395.362550][T17061] openvswitch: netlink: Flow key attr not present in new flow. [ 395.496042][T17067] netlink: 244 bytes leftover after parsing attributes in process `syz.0.2664'. [ 395.503399][T17072] openvswitch: netlink: Multiple metadata blocks provided [ 395.514590][T17066] netlink: 'syz.0.2664': attribute type 1 has an invalid length. [ 395.549688][T17066] 8021q: adding VLAN 0 to HW filter on device bond8 [ 395.574776][T17070] pim6reg: entered allmulticast mode [ 395.594422][T17070] pim6reg: left allmulticast mode [ 395.645161][T17075] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2661'. [ 395.721608][T17085] netlink: 'syz.3.2668': attribute type 7 has an invalid length. [ 396.214353][T17114] veth1_macvtap: left promiscuous mode [ 396.214383][T17114] macsec0: left promiscuous mode [ 396.214396][T17114] macsec0: entered allmulticast mode [ 396.273203][T17120] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2675'. [ 396.273225][T17120] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2675'. [ 396.334867][T17123] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2675'. [ 396.360984][T17123] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 396.365547][T17123] team0: Port device batadv0 added [ 396.487489][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 397.677106][ T5621] Bluetooth: hci3: command 0x0406 tx timeout [ 398.627106][T17148] netlink: 'syz.2.2682': attribute type 1 has an invalid length. [ 398.711437][T17089] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 398.925329][T17157] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 398.949757][T17157] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 398.969923][T17157] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2684'. [ 398.997951][T17164] xt_hashlimit: size too large, truncated to 1048576 [ 399.279334][T17177] openvswitch: netlink: Missing valid actions attribute. [ 399.425217][T17190] netlink: 'syz.1.2690': attribute type 7 has an invalid length. [ 399.425241][T17190] __nla_validate_parse: 1 callbacks suppressed [ 399.425252][T17190] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2690'. [ 399.425282][T17190] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2690'. [ 399.659005][T17203] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2694'. [ 399.659153][T17203] 0: renamed from hsr0 [ 399.664140][T17203] 0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 399.664157][T17203] 0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 399.664259][T17203] 0: left promiscuous mode [ 399.664291][T17203] 0: entered allmulticast mode [ 399.664299][T17203] hsr_slave_0: entered allmulticast mode [ 399.664308][T17203] hsr_slave_1: entered allmulticast mode [ 399.665041][T17203] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check. [ 400.601674][T17226] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2697'. [ 400.628385][T17226] 8021q: adding VLAN 0 to HW filter on device bond8 [ 400.749015][T17232] netlink: 'syz.2.2699': attribute type 1 has an invalid length. [ 400.828516][T17238] netlink: 196 bytes leftover after parsing attributes in process `syz.4.2701'. [ 400.848248][T17238] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2701'. [ 400.957226][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 401.042444][T17241] xt_hashlimit: size too large, truncated to 1048576 [ 401.097555][T17243] bond10: entered allmulticast mode [ 401.097636][T17243] ip6gre1: entered allmulticast mode [ 401.106280][T17243] dvmrp6: entered allmulticast mode [ 401.198708][T17243] bond10: left allmulticast mode [ 401.198725][T17243] ip6gre1: left allmulticast mode [ 402.234533][T17184] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 402.679989][T17268] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 402.763358][T17270] netlink: 'syz.0.2710': attribute type 11 has an invalid length. [ 402.871914][T17270] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2710'. [ 403.067797][T17276] 8021q: adding VLAN 0 to HW filter on device team0 [ 403.083021][T17276] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 403.101757][T17288] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2713'. [ 403.145899][T17276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 403.155170][T17276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 403.221356][T17276] batman_adv: batadv0: Interface activated: gretap1 [ 403.234493][T17276] 8021q: adding VLAN 0 to HW filter on device eth0 [ 403.240835][T17276] 8021q: adding VLAN 0 to HW filter on device eth1 [ 403.248045][T17276] 8021q: adding VLAN 0 to HW filter on device eth2 [ 403.268521][T17276] 8021q: adding VLAN 0 to HW filter on device eth3 [ 403.276384][T17276] 8021q: adding VLAN 0 to HW filter on device bond1 [ 403.363214][T17276] 8021q: adding VLAN 0 to HW filter on device bond2 [ 403.522748][T17276] 8021q: adding VLAN 0 to HW filter on device bond3 [ 403.570202][T17276] 8021q: adding VLAN 0 to HW filter on device bond0 [ 403.589190][T17276] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 403.609204][T17276] 8021q: adding VLAN 0 to HW filter on device bond4 [ 403.625266][T17276] bridge0: port 4(wlan1) entered blocking state [ 403.625441][T17276] bridge0: port 4(wlan1) entered forwarding state [ 403.644215][T17310] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 403.644820][T17276] 8021q: adding VLAN 0 to HW filter on device bond5 [ 403.674286][T17276] 8021q: adding VLAN 0 to HW filter on device bond6 [ 403.695413][T17276] 8021q: adding VLAN 0 to HW filter on device bond7 [ 403.947827][ T8034] bridge0: port 5(veth0) entered blocking state [ 403.947933][ T8034] bridge0: port 5(veth0) entered forwarding state [ 403.950964][ T8034] bridge0: port 6(veth1) entered blocking state [ 403.951067][ T8034] bridge0: port 6(veth1) entered forwarding state [ 403.954369][ T8034] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.954507][ T8034] bridge0: port 1(bridge_slave_0) entered forwarding state [ 404.001523][ T8034] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.001657][ T8034] bridge0: port 2(bridge_slave_1) entered forwarding state [ 404.071939][ T8034] bridge0: port 4(wlan1) entered disabled state [ 404.161776][ T8034] bridge0: port 3(team0) entered blocking state [ 404.161913][ T8034] bridge0: port 3(team0) entered forwarding state [ 404.250909][T17321] syzkaller0: entered promiscuous mode [ 404.250941][T17321] syzkaller0: entered allmulticast mode [ 404.280175][ T37] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 404.280210][ T37] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.280391][ T37] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 404.280417][ T37] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.280589][ T37] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 404.280614][ T37] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.280770][ T37] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 404.280794][ T37] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.469759][T17327] xt_policy: neither incoming nor outgoing policy selected [ 404.930175][T17337] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2724'. [ 405.152696][T17346] syzkaller1: entered promiscuous mode [ 405.152719][T17346] syzkaller1: entered allmulticast mode [ 405.487115][T17368] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2730'. [ 405.495424][T17370] openvswitch: netlink: Missing key (keys=40, expected=100) [ 405.545753][T17371] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2732'. [ 405.551028][T17371] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2732'. [ 406.052423][T17380] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2735'. [ 406.193274][T17392] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2735'. [ 406.216054][T17400] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2741'. [ 406.273948][T17401] Unknown options in mask 6 [ 406.275469][T17401] netlink: 'syz.0.2741': attribute type 1 has an invalid length. [ 406.275488][T17401] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2741'. [ 406.498774][T17415] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2744'. [ 406.500535][T17415] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2744'. [ 406.500553][T17415] netlink: 'syz.2.2744': attribute type 6 has an invalid length. [ 406.500560][T17415] netlink: 'syz.2.2744': attribute type 5 has an invalid length. [ 406.642954][T17417] netlink: 'syz.2.2745': attribute type 1 has an invalid length. [ 407.051109][T17437] tc_dump_action: action bad kind [ 407.064634][T17441] bond0: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 407.201971][ T5621] block nbd0: Receive control failed (result -1) [ 408.320168][T17485] ip_tables: iptables: counters copy to user failed while replacing table [ 408.390753][T17485] vlan0: entered allmulticast mode [ 408.390776][T17485] bond3: entered allmulticast mode [ 408.390789][T17485] geneve3: entered allmulticast mode [ 408.393913][T17485] team0: Port device vlan0 added [ 408.453582][T17494] 8021q: VLANs not supported on ip6_vti0 [ 408.632582][T17487] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 409.045977][T17528] syzkaller0: entered promiscuous mode [ 409.045994][T17528] syzkaller0: entered allmulticast mode [ 411.436541][T17544] syzkaller0: entered promiscuous mode [ 411.436558][T17544] syzkaller0: entered allmulticast mode [ 411.440600][T17546] tipc: Enabled bearer , priority 0 [ 411.480578][T17533] tipc: Resetting bearer [ 411.550507][T17533] tipc: Disabling bearer [ 411.612671][T17552] __nla_validate_parse: 15 callbacks suppressed [ 411.612693][T17552] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2783'. [ 411.635079][T17552] IPVS: Error connecting to the multicast addr [ 411.745409][T17560] openvswitch: netlink: IP tunnel attribute has 5365 unknown bytes. [ 411.759654][T17556] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2786'. [ 411.800359][T17556] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2786'. [ 412.126539][T17585] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2791'. [ 412.748841][T17623] wg0: entered allmulticast mode [ 412.978862][T17617] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2798'. [ 413.112225][T17590] openvswitch: netlink: VXLAN extension 248 out of range max 1 [ 413.162418][T17598] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2793'. [ 413.172635][T17626] syzkaller0: entered promiscuous mode [ 413.172660][T17626] syzkaller0: entered allmulticast mode [ 413.180635][T17641] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2802'. [ 413.626697][T17656] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2804'. [ 413.678472][T17634] bridge0: port 6(veth1) entered disabled state [ 413.678696][T17634] bridge0: port 5(veth0) entered disabled state [ 413.678805][T17634] bridge0: port 3(team0) entered disabled state [ 413.678906][T17634] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.679009][T17634] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.879099][T17634] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 413.906791][T17634] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 414.053235][T17634] batman_adv: batadv0: Interface deactivated: gretap1 [ 414.751014][T17664] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2806'. [ 415.113295][T17680] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2811'. [ 417.269749][T17680] vlan3: entered allmulticast mode [ 417.309956][T17173] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 417.309990][T17173] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.317395][T17173] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 417.317435][T17173] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.318439][T17173] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 417.318468][T17173] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.318672][T17173] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 417.318696][T17173] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.368388][T17702] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2813'. [ 417.411867][T17704] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2814'. [ 417.412152][T17704] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2814'. [ 417.561941][T17716] netlink: 'syz.1.2816': attribute type 32 has an invalid length. [ 417.696799][T17722] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2819'. [ 417.885360][T17734] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2821'. [ 417.920915][T17736] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2821'. [ 417.959503][T17741] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 417.978092][T17738] syzkaller1: entered promiscuous mode [ 417.978115][T17738] syzkaller1: entered allmulticast mode [ 418.002468][T17738] syzkaller1: left promiscuous mode [ 418.181766][T17747] lo: entered allmulticast mode [ 418.272705][T17749] netlink: 'syz.2.2826': attribute type 4 has an invalid length. [ 418.272731][T17749] netlink: 17 bytes leftover after parsing attributes in process `syz.2.2826'. [ 418.541292][T17755] syzkaller0: entered promiscuous mode [ 418.541318][T17755] syzkaller0: entered allmulticast mode [ 418.574278][T17762] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2827'. [ 418.770420][ T8032] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 418.770467][ T8032] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 418.770501][ T8032] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 418.770533][ T8032] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 419.093484][T17782] openvswitch: netlink: Message has 8 unknown bytes. [ 419.520912][ T31] INFO: task kworker/0:1H:2067 blocked for more than 143 seconds. [ 419.520936][ T31] Not tainted syzkaller #0 [ 419.520944][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 419.520951][ T31] task:kworker/0:1H state:D stack:24936 pid:2067 tgid:2067 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 419.521237][ T31] Workqueue: kblockd blk_mq_requeue_work [ 419.521271][ T31] Call Trace: [ 419.521281][ T31] [ 419.521292][ T31] __schedule+0x17db/0x58f0 [ 419.521339][ T31] ? __pfx___schedule+0x10/0x10 [ 419.521369][ T31] ? schedule+0x90/0x2b0 [ 419.521386][ T31] schedule+0x164/0x2b0 [ 419.521402][ T31] schedule_timeout+0x152/0x2c0 [ 419.521423][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 419.521444][ T31] ? __pfx_process_timeout+0x10/0x10 [ 419.521470][ T31] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 419.521493][ T31] ? prepare_to_wait_event+0x436/0x480 [ 419.521520][ T31] nbd_queue_rq+0x96f/0xff0 [ 419.521545][ T31] ? __pfx_nbd_queue_rq+0x10/0x10 [ 419.521561][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 419.521590][ T31] blk_mq_dispatch_rq_list+0x499/0x1990 [ 419.521618][ T31] ? sbitmap_get+0x229/0x390 [ 419.521640][ T31] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 419.521657][ T31] ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0 [ 419.521679][ T31] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 419.521714][ T31] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 419.521731][ T31] ? lock_acquire+0x115/0x350 [ 419.521758][ T31] ? lock_acquire+0x115/0x350 [ 419.521781][ T31] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 419.521800][ T31] ? blk_mq_run_hw_queue+0x321/0x4f0 [ 419.521843][ T31] blk_mq_run_hw_queue+0x34a/0x4f0 [ 419.521863][ T31] blk_mq_run_hw_queues+0x268/0x3f0 [ 419.521889][ T31] blk_mq_requeue_work+0x703/0x760 [ 419.521913][ T31] ? __pfx_blk_mq_requeue_work+0x10/0x10 [ 419.521936][ T31] ? rcu_is_watching+0x16/0xb0 [ 419.521956][ T31] ? process_scheduled_works+0x97a/0x1630 [ 419.521976][ T31] process_scheduled_works+0xc3d/0x1630 [ 419.522019][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 419.522044][ T31] ? assign_work+0x3cf/0x5d0 [ 419.522067][ T31] worker_thread+0xa47/0xfb0 [ 419.522098][ T31] ? __kthread_parkme+0x71/0x1f0 [ 419.522128][ T31] kthread+0x38b/0x480 [ 419.522144][ T31] ? __pfx_worker_thread+0x10/0x10 [ 419.522162][ T31] ? __pfx_kthread+0x10/0x10 [ 419.522178][ T31] ret_from_fork+0x514/0xb70 [ 419.522196][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 419.522220][ T31] ? __switch_to+0xc89/0x1420 [ 419.522245][ T31] ? __pfx_kthread+0x10/0x10 [ 419.522262][ T31] ret_from_fork_asm+0x1a/0x30 [ 419.522325][ T31] [ 419.522494][ T31] [ 419.522494][ T31] Showing all locks held in the system: [ 419.522505][ T31] locks held by khungtaskd/31: 1, last CPU#1: [ 419.522517][ T31] #0: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 419.522563][ T31] locks held by kworker/u8:2/37: 7, last CPU#0: [ 419.522574][ T31] #0: ffff8880565e1140 ((wq_completion)wg-kex-wg2#12){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 419.522625][ T31] #1: ffffc90000ad7c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 419.522674][ T31] #2: ffff88807af1d0b8 (&peer->endpoint_lock){++-.}-{3:3}, at: wg_socket_send_skb_to_peer+0x54/0x1d0 [ 419.522722][ T31] #3: ffff8880b8624408 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x57/0x7d0 [ 419.522778][ T31] #4: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: ip_output+0x5a/0x450 [ 419.522827][ T31] #5: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0x3de/0x10b0 [ 419.522872][ T31] #6: ffffffff8ed5c900 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x29b/0x3820 [ 419.522937][ T31] locks held by kworker/0:1H/2067: 4, on CPU#0: [ 419.522951][ T31] #0: ffff888020af7940 ((wq_completion)kblockd){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 419.523004][ T31] #1: ffffc900069c7c40 ((work_completion)(&(&q->requeue_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 419.523058][ T31] #2: ffff8880279b2198 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x321/0x4f0 [ 419.523106][ T31] #3: ffff888027b7e6b8 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc1/0xff0 [ 419.523165][ T31] locks held by getty/5370: 2, on CPU#1: [ 419.523179][ T31] #0: ffff8880332160a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 419.523235][ T31] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 419.523287][ T31] locks held by udevd/5629: 1, on CPU#0: [ 419.523300][ T31] #0: ffff888027a79350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70 [ 419.523361][ T31] locks held by kworker/1:19/13393: 3, on CPU#1: [ 419.523375][ T31] #0: ffff88801b06b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 419.523428][ T31] #1: ffffc90006e87c40 ((work_completion)(&pool->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 419.523481][ T31] #2: ffffffff902524a0 (rtnl_mutex){+.+.}-{4:4}, at: xp_release_deferred+0x29/0x180 [ 419.523534][ T31] locks held by kworker/u8:46/17173: 3, on CPU#1: [ 419.523548][ T31] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 419.523601][ T31] #1: ffffc900035efc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 419.523654][ T31] #2: ffffffff902524a0 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 419.523709][ T31] locks held by syz.2.2826/17747: 2, on CPU#1: [ 419.523723][ T31] #0: ffff888076970dc0 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x7a/0x1f0 [ 419.523797][ T31] #1: ffffffff902524a0 (rtnl_mutex){+.+.}-{4:4}, at: mrtsock_destruct+0xeb/0x320 [ 419.523847][ T31] locks held by syz.1.2827/17769: 1, last CPU#1: [ 419.523861][ T31] #0: ffffffff902524a0 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 419.523909][ T31] locks held by syz.3.2834/17789: 1, on CPU#0: [ 419.523923][ T31] #0: ffffffff902524a0 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x767/0xc00 [ 419.523992][ T31] locks held by syz.0.2835/17786: 1, on CPU#0: [ 419.524005][ T31] #0: ffffffff902524a0 (rtnl_mutex){+.+.}-{4:4}, at: dev_ethtool+0x3a0/0x29c0 [ 419.524049][ T31] locks held by syz.4.2836/17792: 1, last CPU#0: [ 419.524062][ T31] #0: ffff888055d183b8 (&mm->mmap_lock){++++}-{4:4}, at: __might_fault+0xaf/0x130 [ 419.524116][ T31] locks held by syz.4.2836/17793: 1, on CPU#0: [ 419.524131][ T31] #0: ffffffff902524a0 (rtnl_mutex){+.+.}-{4:4}, at: ip_mroute_setsockopt+0x137/0x10d0 [ 419.524183][ T31] [ 419.524188][ T31] ============================================= [ 419.524188][ T31] [ 419.524206][ T31] NMI backtrace for cpu 1 [ 419.524223][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 419.524244][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 419.524255][ T31] Call Trace: [ 419.524263][ T31] [ 419.524271][ T31] dump_stack_lvl+0xe8/0x150 [ 419.524301][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 419.524328][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 419.524360][ T31] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 419.524389][ T31] sys_info+0x135/0x170 [ 419.524413][ T31] watchdog+0xfd7/0x1030 [ 419.524441][ T31] ? watchdog+0x1c7/0x1030 [ 419.524467][ T31] kthread+0x38b/0x480 [ 419.524487][ T31] ? __pfx_watchdog+0x10/0x10 [ 419.524504][ T31] ? __pfx_kthread+0x10/0x10 [ 419.524525][ T31] ret_from_fork+0x514/0xb70 [ 419.524547][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 419.524577][ T31] ? __switch_to+0xc89/0x1420 [ 419.524606][ T31] ? __pfx_kthread+0x10/0x10 [ 419.524627][ T31] ret_from_fork_asm+0x1a/0x30 [ 419.524670][ T31] [ 419.524678][ T31] Sending NMI from CPU 1 to CPUs 0: [ 419.524706][ C0] NMI backtrace for cpu 0 [ 419.524719][ C0] CPU: 0 UID: 0 PID: 17792 Comm: syz.4.2836 Not tainted syzkaller #0 PREEMPT(full) [ 419.524738][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 419.524748][ C0] RIP: 0010:____sys_recvmsg+0x209/0x4a0 [ 419.524773][ C0] Code: 89 f2 e8 ca 63 ff ff 41 89 c6 41 89 c5 31 ff 89 c6 e8 cb f3 20 f8 45 85 f6 49 bf 00 00 00 00 00 fc ff df 78 5b 48 8b 54 24 38 <48> 85 d2 74 5b 8b 44 24 0c f7 d0 c1 e8 1f 4c 8b 74 24 28 49 8d 0c [ 419.524788][ C0] RSP: 0018:ffffc9000df678e0 EFLAGS: 00000246 [ 419.524803][ C0] RAX: ffffffff89a6dbe5 RBX: 1ffff92001becfa1 RCX: ffff8880349c5dc0 [ 419.524816][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 419.524827][ C0] RBP: ffffc9000df67a50 R08: ffffc9000df676a7 R09: 1ffff92001beced4 [ 419.524839][ C0] R10: dffffc0000000000 R11: fffff52001beced5 R12: 1ffff92001becf28 [ 419.524852][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: dffffc0000000000 [ 419.524863][ C0] FS: 00007f40fd6426c0(0000) GS:ffff888124cd1000(0000) knlGS:0000000000000000 [ 419.524878][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 419.524894][ C0] CR2: 00002000001c6030 CR3: 0000000036d8e000 CR4: 00000000003526f0 [ 419.524909][ C0] Call Trace: [ 419.524915][ C0] [ 419.524928][ C0] ? __pfx_____sys_recvmsg+0x10/0x10 [ 419.524958][ C0] ? import_iovec+0x73/0xa0 [ 419.524979][ C0] ___sys_recvmsg+0x213/0x5a0 [ 419.525003][ C0] ? __pfx____sys_recvmsg+0x10/0x10 [ 419.525044][ C0] do_recvmmsg+0x31a/0x7f0 [ 419.525069][ C0] ? __pfx_do_recvmmsg+0x10/0x10 [ 419.525091][ C0] ? do_futex+0x3e7/0x4e0 [ 419.525124][ C0] __x64_sys_recvmmsg+0x198/0x250 [ 419.525148][ C0] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 419.525176][ C0] do_syscall_64+0x166/0x520 [ 419.525194][ C0] ? trace_irq_disable+0x3b/0x140 [ 419.525211][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.525227][ C0] ? clear_bhb_loop+0x70/0xc0 [ 419.525254][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.525271][ C0] RIP: 0033:0x7f40fc79e159 [ 419.525285][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 419.525300][ C0] RSP: 002b:00007f40fd642028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 419.525316][ C0] RAX: ffffffffffffffda RBX: 00007f40fca26090 RCX: 00007f40fc79e159 [ 419.525329][ C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 419.525340][ C0] RBP: 00007f40fc83503b R08: 0000000000000000 R09: 0000000000000000 [ 419.525350][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 419.525361][ C0] R13: 00007f40fca26128 R14: 00007f40fca26090 R15: 00007fffc59db4f8 [ 419.525383][ C0] [ 419.525709][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 420.550805][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 420.559907][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 420.569949][ T31] Call Trace: [ 420.573223][ T31] [ 420.576148][ T31] vpanic+0x56d/0xa60 [ 420.580140][ T31] ? __pfx_vpanic+0x10/0x10 [ 420.584646][ T31] ? console_srcu_read_unlock+0x3a/0x60 [ 420.590190][ T31] panic+0xc5/0xd0 [ 420.593912][ T31] ? __pfx_panic+0x10/0x10 [ 420.598326][ T31] ? wq_watchdog_touch+0xf9/0x160 [ 420.603342][ T31] ? nmi_trigger_cpumask_backtrace+0x24d/0x390 [ 420.609494][ T31] watchdog+0x1030/0x1030 [ 420.613829][ T31] ? watchdog+0x1c7/0x1030 [ 420.618244][ T31] kthread+0x38b/0x480 [ 420.622310][ T31] ? __pfx_watchdog+0x10/0x10 [ 420.626987][ T31] ? __pfx_kthread+0x10/0x10 [ 420.631589][ T31] ret_from_fork+0x514/0xb70 [ 420.636201][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 420.641494][ T31] ? __switch_to+0xc89/0x1420 [ 420.646175][ T31] ? __pfx_kthread+0x10/0x10 [ 420.650769][ T31] ret_from_fork_asm+0x1a/0x30 [ 420.655557][ T31] [ 420.658835][ T31] Kernel Offset: disabled [ 420.663189][ T31] Rebooting in 86400 seconds..