last executing test programs: 3.958232838s ago: executing program 4 (id=5170): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="020104020a0000000000000000000000030006000000000002000000ffffffff00000000000000000300050000000000020000000000000000000000000000000200130006"], 0x50}, 0x1, 0x7}, 0x0) (async) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)={0x40, 0x3, 0x8, 0x201, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_PARTOPEN={0x8}, @CTA_TIMEOUT_DCCP_CLOSEREQ={0x8}, @CTA_TIMEOUT_DCCP_OPEN={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x40}}, 0x0) 3.619434489s ago: executing program 4 (id=5174): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wlan1\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f0000000880)={0x70, r0, 0x4, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3a}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x9}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2d7}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x200}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x80000000}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_MESH_CONFIG={0x4}]}, 0x70}, 0x1, 0x0, 0x0, 0x400}, 0x40) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x7, 0x4) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x1, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x1c) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfb, 0x400000}, 0xc) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x303}, "1afc7c14d332bcc6", "a9ba0c85d68723369f51322151d9f41aaa2832bb07cc1e49ad714beac6f1ade8", "49960d8f", "bff2a81527ae4190"}, 0x38) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r3) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r7) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="500000001000010400000000ffdbdf0000000000", @ANYRES32=0x0, @ANYBLOB="00000000000005001c0012800b00010000020000000000000c00028005000a00000000001400030067656e6576653100"], 0x50}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES8=r8, @ANYBLOB="0100000000f1ff00000004000000080b0500ac1414bb1400060076657468315f746f5f7465616d00000008000500e0000001"], 0x38}}, 0x0) write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), r7) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000340)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000380)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r6, &(0x7f0000000800)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000007c0)={&(0x7f00000005c0)={0x1e0, r9, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_KEY={0x94, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xbb}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x80}, @NL802154_KEY_ATTR_ID={0x80, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x50, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xd7f3e386d59d4955}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x41}]}]}, @NL802154_ATTR_SEC_KEY={0xf8, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "071c2f89f28530b07d4c2f8a2ff40f43f37bbcd36242665f0fa228d252a8e40a"}, @NL802154_KEY_ATTR_ID={0x98, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x60, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0x243babe1e83b88ef}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x200}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x400}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "d5eda77e2470a464f636f2dfdc741011"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "6ddbf985c0f8c69130672bff023d923b"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x20}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x50}, 0x20000000) setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0) sendfile(r1, r5, 0x0, 0x20000000002) 2.561395556s ago: executing program 4 (id=5189): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000003c0)={0x3ff, 0x0}, 0x8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000cc0)={r2}, 0x4) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r4, r4, 0x2f, 0x0, @void}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYRESHEX=r3], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000600)={'gretap0\x00', &(0x7f0000000540)={'ip_vti0\x00', 0x0, 0x80, 0x10, 0x0, 0x7fff, {{0x27, 0x4, 0x2, 0x39, 0x9c, 0x65, 0x0, 0xc, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@timestamp_addr={0x44, 0x24, 0x9e, 0x1, 0x1, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x81}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}, {@remote, 0x2}]}, @cipso={0x86, 0x61, 0xffffffffffffffff, [{0x7, 0x10, "e4486cfdd7d14f0230bf07b82b94"}, {0x2, 0x8, "b1bcf1764a4c"}, {0x7, 0xa, "2afb9ce37f58b384"}, {0x1, 0x4, "8d75"}, {0x5, 0x8, "f3bb06a5e76d"}, {0x1, 0x6, "da7d74ea"}, {0x2, 0xf, "80765928df2c398799b0201f01"}, {0x6, 0xa, "7f64a132941bc944"}, {0x2, 0xb, "0a4694cc6624444971"}, {0x0, 0x3, "14"}]}, @noop]}}}}}) sendmsg$ETHTOOL_MSG_WOL_SET(r3, &(0x7f0000000a40)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000640)={0x390, 0x0, 0x401, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_WOL_SOPASS={0xd8, 0x3, "484d8fa7eb892dcf5439de08a3e941cee9d961eca9c652ab997e7186c0543e450ed970e4538e0a950cb68d5cf9e1deb2d582754bf7a187ebbd46ee4585d5a98f036c14a8b3554d0a19b5a33cd42c6ab19d38dedf31ee59767b866fad4e008d49cc7d78c2225396b82336062ea06908f7f195aa36c02be50eb441a96dc3397c195615796bc3f3f24706c72ed912526abb5cae851378ae72d3617d8efcd7ee618deb505aeb005d66e29d4885d602d5775d06be9428a6ef53737dfe6f681138cd3f5e57cd1602902c98de8ac34fc6ad6055a2f8d61d"}, @ETHTOOL_A_WOL_SOPASS={0x102, 0x3, "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"}, @ETHTOOL_A_WOL_SOPASS={0xe1, 0x3, "ed50d24072c923c2877eb8bd2da5e9b6c4bf9e87b67e5443d5e024b130d3fdbf4af080e00eaed0d951f99606a67a65edef67503cc4fdf8b128404eb9380d8478b7a06e6093aac49d8e7e798fcfc98c5be5f6174bf6ee82308f53aa34c1a3cac07160360ed9ec1f0c48c0d7e674e61ae4468dbc730fd87b4dae98d6ab9387d60cc9b8e5a047ed04f1a78c2070c6ddaff356794130f8668b0075c7865ce7e821d146597ce4c6a6d852806cc463b92a8cca60ae0bb85ed98c7db6598d70382e97c1c532d802b1134fb18ddd15ce95f9e6f159d36f74dad0831733a021a8bd"}, @ETHTOOL_A_WOL_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_WOL_MODES={0x94, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x84, 0x3, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ':\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xdb9}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ')\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ':\x00'}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa3fe506}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7f}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10000}]}]}, @ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7ff}]}]}, 0x390}, 0x1, 0x0, 0x0, 0x408c1}, 0x4000880) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0x2f9, 0xffffca88, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632177fb7f0200017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28) ioctl$sock_inet_tcp_SIOCINQ(r3, 0xff02, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r7, 0x1, 0x1, &(0x7f00000002c0)=0x5f53, 0x4) getsockopt$inet6_tcp_int(r7, 0x6, 0x2, 0x0, &(0x7f0000000340)) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000089000000620a00ff000000007500000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="00000000000000000504000000a48774000000f73b858730deef"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) 2.140206291s ago: executing program 4 (id=5194): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) getpid() sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x28, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, r1, 0xc003}, [@IFLA_MASTER={0x8, 0xa, r1}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)=@dellink={0x54, 0x11, 0x300, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, 0x8840, 0x40000}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0xafbd}, @IFLA_MASTER={0x8, 0xa, r1}, @IFLA_MAP={0x24, 0xe, {0x2, 0x5, 0x10001, 0x9, 0x2, 0x6}}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x2200a060) 1.88377271s ago: executing program 2 (id=5199): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) (async) getsockname$packet(r2, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r0) (async) r6 = socket(0x10, 0x3, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r7) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r7, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="310300000000fbdbdf250b00000008000300", @ANYRES32=r9], 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@gettfilter={0x24, 0x2e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xfff3}, {0x0, 0x3}}}, 0x24}}, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, r5, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x4000c000) (async) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@newtfilter={0x34, 0x28, 0x575ac7824d421509, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, r3, {0x10}, {0x1}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x40) 1.57355168s ago: executing program 2 (id=5200): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001980)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a310000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000058000000050a0102000000008f000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d61637674617000000008000140000000050b00070066696c746572"], 0xf4}, 0x1, 0x0, 0x0, 0x40044}, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) (async) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x80, 0x10, 0x8000, 0xffffffffffffffff}, &(0x7f00000000c0)=0x18) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000780), r3) sendmsg$IEEE802154_LLSEC_DEL_KEY(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000006c0)={0x3c, r4, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x78}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xba26dd98376530ba}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0xc800) (async) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000100)={r2, 0x0, 0x1, 0x4}, &(0x7f0000000140)=0x10) 1.533483514s ago: executing program 2 (id=5201): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1006}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x440b0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f0000000040)=0x2, 0x4) setsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f0000000080), 0x4) sendmsg$802154_dgram(r1, &(0x7f0000000380)={&(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0202}}}, 0x14, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x200088c4}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001800090300000000000000000a808000fd00c8030000000008000400", @ANYRES32=r3, @ANYBLOB="0600150003000000100016"], 0x3c}, 0x1, 0x0, 0x0, 0x20040000}, 0x10004044) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$can_j1939(0x1d, 0x2, 0x7) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_J1939_SEND_PRIO(r5, 0x6b, 0x3, &(0x7f00000003c0)=0x5, 0x4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002180), r4) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r9, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={r7, &(0x7f0000000080)="633d9ac3eb1a1d7880cc263e0e882ed7a76b6eedcaf795fcffcdeae59ec01a8f349ad3171868a8f0fdb16f3d36834573d441db", &(0x7f0000000140)=""/48, 0x4}, 0x20) r10 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a0, 0x1c0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x2d0, 0x20a, 0x278, 0x2d0, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0xffffffff, 0xffffff00], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0xe}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x31}, @mcast2, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000021c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r4, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000002280)={&(0x7f0000002200)={0x28, r6, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x80) 1.398878386s ago: executing program 4 (id=5202): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r1, 0x2) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r3 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$BTRFS_IOC_ENCODED_READ(r3, 0x80809440, &(0x7f0000000ac0)={&(0x7f0000000a40)=[{&(0x7f0000000080)="bd7b4ebb0455a3b69d2c3062f9e6e667aacbf2854d310aef589647380c1264929b949a921780414e1ad115bb52eb8db6bf2cc295e87c777b893f83ae2cbc2751c9b33a522f9766cfb08a7376d77481a3617c614b07f0e743142b8fde40cea57311fecd5b2c8307993eb8318b137d981b2dc096071edd0544870a3ecbd39b85a4a33dde5a3a835eb0f39efede377ca17cee8ad87b502419759fe22e64c87a6f406f37c7a63236b100073084bcbd118902af6ac08f5aee5c2450f6b93c73ebb16a6bfe522c52bc91d6dc5b89204397848ac325a9f423a1e8895e3a5f6f02318655618d61", 0xe3}, {&(0x7f00000002c0)="c2bfbcd7ee87469b842aa90e9e8dcfff5ab86f6e7320efbe3f6bdd7bd569170fd3cf97421207b880d7470c983a0b4f95470ab00d1b2ae29ed717", 0x3a}, {&(0x7f0000000580)="df783520426c47c9f1525a997bd3055bf210402e343db5095556c3e15490e0694da70bbbc61d6d60af65202021e9739b5b1d545205325b4807693f9a6ab7c7746792d514d22929f759506c9db7186d03be19b993a8dc4b4f5b7092f52ab9c61b78047bfd11b1e302985944739793bbf13154d268c4c5cd6f02b348e48a83aef414abc81dfc3a113b2da54c1e47169353014ab3ee737c3fc4f0860185c6d301f840af18ad3bba72b554f7140d236f372e70717b82219eab9523228a2f59a05cc1b1015ad099d6e0916424f28ebbac702facbfe4a8370288f8cd32f8525424ec451cfa7a4adecfdb46c638640239ca352ee60fa0416800d4a3af01212fa023ff", 0xff}, {&(0x7f0000000680)="fef84d2dece4662d8f91015ab6db2c2373d32e0d37714581b0f6e7a9d21cae60891617fbdd957196ed22398b53072791f842fb593a4399e4c204dd9d372ea0b0c10bf03163be42ee4fa74536aa4cc1989dc56c687062036bb5fe394cb3ff1b3f5a08ad79", 0x64}, {&(0x7f0000000700)="47fe48b5567b5c03f47bf6875034922f5480953c4ace0e20c9baa1194e3943467734eb4506e4fafc05920c3228caef7bfb4bc02f45e4ef8085524d2d2badcad76d1f1db2876a09171eb45d3446f83d88f07cb8b1614e9168f4d02c75c09d89cd9fc3061de379d711d61bd0707c054559df9332fef2741762e370e5af678744b5debbfa02bfe57c9f0b579f9bd58918bab1e9cf6e371d6280a3a0761dc38af4e74686", 0xa2}, {&(0x7f00000007c0)="ccf447a84d8756888c5ce698b4e5f28ebcee3566e6338f05fcbeb8e006db9ff5485fecaeba4285856ffd852fd658ffb561bc1f3764c8da3e6c41fb19bb091076d8427e36f8ccbbfd4c8ea1e1c6666ba53589c4f7b9e031b33262b55d0430d23ea8a5105b6d8f456283475d652952d995c0c9040fb04214f4b1e4f75074a27eafe6292c751bbfd4759740ad85119fa30d7a4c8dd21965355c1f2340e89903d99c49a2083918fa2a787b093b696249d679a3e20d921cc60e18499197cd63144c6c5280e53a5d", 0xc5}, {&(0x7f00000008c0)="2f9f3d15834e8accd78d82d9f3180b81b733eaa6fddb499246766216d2e362ef2b77cbb76382cd03b8252bb8b892590d8ade0fcebf0d3ea5668dd4fc25c215c859ad17", 0x43}, {&(0x7f0000000940)="4d4f867ef6a179e65e371af080d826709263be69ad1a0e1d3518fec9f1b0325aff8c3b645a66f9981261cc3535ea320f2335e447ccbf78ccc8aee11b431d495b2d1099dfa77c2e46f9a7e2b2bb3072c7c1228162ac38cae8ed682578e36554ecdaa45a57059a72858a22f8f4de4a8862de2c9de75afc51ac9b4e374ac8ba54523fb5de87daed800cf03733d92ffc2c56d54d593ce52a9785cda6bf238ff5e7d2508c9c64e16341c5741c7f1d503ab2179f52d5a7d78989a31642aa78e61862a05f1b7a7349a0dc76e22a8676177201c9546fc6d49215e62640d571332f3666", 0xdf}], 0x8, 0x100000001, 0x0, 0x4, 0x3, 0xf, 0x1, 0x5db}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmmsg$inet(r5, &(0x7f0000000200)=[{{&(0x7f0000000040)={0x2, 0x0, @empty}, 0x10, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x24, r6, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x24}}, 0x18) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001100010027bd7000fedbdf2500000000", @ANYRES32=r2], 0x20}, 0x1, 0x0, 0x0, 0x50}, 0x80) 1.206658802s ago: executing program 2 (id=5206): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, 0x0, 0xc800) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r4 = accept4(r3, 0x0, 0x0, 0x80000) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="200029bd7000ffdbdf254c000000b30ecc7cd14e7f641d19361fe46b347d79291b34cc4621b888c864248671c253c47eb98fcc2c464a8ab3f3a214439a2c00000000000000819b3084c320c1aa349f072f33195a3b5003488949d881fc24322a5032d2c381cf7e18abb7a40400"], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20000814) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r5, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendmsg$inet(r5, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) recvmsg(r5, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) 978.885815ms ago: executing program 3 (id=5209): socket$netlink(0x10, 0x3, 0x4) (async) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="4800000014001d0d09074beafd0d8c560284606088ffe0064e204e20590000a2bc5603ca00000f7f8907000020008d42188fedc22e6ee11ac3439693b948e142ff0000000309ff5b", 0x48}], 0x1) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000125bd7000fbdbdf2502000000a80004802400078008000400200800000800040007000000080001000e000000080001001600000024000780080001001c0000000800030040000000080004006c03000008000200430200001300010062726f6164636173742d6c696e6b00003c00078008000300000000000800020007000000080004000600000008000300ff0100000800020005000000080002000200000008000100200000000900010073797a3000000000"], 0xbc}, 0x1, 0x0, 0x0, 0xc880}, 0x40) (async) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000125bd7000fbdbdf2502000000a80004802400078008000400200800000800040007000000080001000e000000080001001600000024000780080001001c0000000800030040000000080004006c03000008000200430200001300010062726f6164636173742d6c696e6b00003c00078008000300000000000800020007000000080004000600000008000300ff0100000800020005000000080002000200000008000100200000000900010073797a3000000000"], 0xbc}, 0x1, 0x0, 0x0, 0xc880}, 0x40) r2 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="0000000000009500"/24], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x1ff) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="110000000000000009e2e4da00000000", @ANYRES64=0x0], 0x20) 912.106694ms ago: executing program 4 (id=5210): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20000000}, [@call={0x85, 0x0, 0x0, 0x2e}, @printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r0, r1, 0x81, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xd, 0x12, r2, 0x1f4d2000) write$tun(r2, &(0x7f0000000000)={@val={0x0, 0xf6}, @void, @eth={@empty, @local, @void, {@can={0xc, {{0x2, 0x1, 0x1, 0x1}, 0x4, 0x3, 0x0, 0x0, "6345afc09b81b5ef"}}}}}, 0x22) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x10, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000d26971720c7b3f35f55f0178007f2727719b57453762c8d9dcc0fa7b6f8be1e6f0d54c1d758001c5144eb08028996d132033a4b38fe3d93b7768e9f2d68f7365773ba3c55f78f86798c7b2633074645f7ade8445ebac8000905144e5eed0dc3cb56691eb5955c82b30ae00d5d9484fed97be33d8671ee2c6dab7eede02cdaeacb8ad9eb52f3fcd063aae18"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r6}, &(0x7f0000000280), &(0x7f0000000240)=r3}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r7, 0x4) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 873.790571ms ago: executing program 0 (id=5211): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$nl_netfilter(r0, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x11c, 0x6, 0x7, 0x301, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x4}, [@generic="a41427d7ad4d62440d7d411469ea7335d04c6811e553c5952c6f095c8e3d43208d1e9c9e67dcfaf431d3ca772ba3f841df9a5c1deb329130913abb84244c03fd08bfd4d8fca96e950a2f464ebd2874e39bbf620b666ee6c1e00c265f137571f4d75692c2efc6cac49b519f8880f808a720282e969565c601e82015d41237f4fc060ef7673a92d4c0d9a1c3a34392f16cf07e01517872e8bf1b05c87d3c3ae58fa83bab4ff27d0e8ca1a212c4ca4a7d5dd33e77e59753bd7c0972", @generic="dc90fe4f41850c4a0ac754dc4e97f4917514af0c1ea7ff95c77fdfbaeb5d222437ab78b79f3e636d4e07c11c37fbd8897cdb291d02f0607f6e157fc4e483f60e3d118328e5dd4071692683b7"]}, 0x11c}, 0x1, 0x0, 0x0, 0x24000000}, 0x81) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), r1) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f0000000740)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000700)={&(0x7f0000000500)={0x1cc, r3, 0x0, 0x70bd2c, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x9}, {0xc, 0x90, 0xf6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x1}, {0xc, 0x90, 0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x6}, {0xc, 0x90, 0xffffffffffffffff}}, {@pci={{0x8}, {0x11}}, {0x8}, {0xc, 0x8f, 0x2}, {0xc, 0x90, 0x2b7c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x1}, {0xc, 0x90, 0x10001}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0xc}, {0xc}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x7}, {0xc, 0x90, 0x7}}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x20000800}, 0x4c005) sendmsg$DEVLINK_CMD_GET(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x88, r2, 0x800, 0xff, 0x25dfdbfb, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}]}, 0x88}, 0x1, 0x0, 0x0, 0x8044}, 0x80400c4) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0xa, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa210106, @local, {[@ssrr={0x89, 0xf, 0xe9, [@multicast2, @remote, @multicast2]}, @generic={0x7, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x20, 0x8000}}}}}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="500000000201010300000000000000000a0000040c0019800800020001000000300002802c000180140003"], 0x50}, 0x1, 0x0, 0x0, 0x5}, 0x4000040) 819.00265ms ago: executing program 1 (id=5212): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x17, 0x2, {{0xffff0000, 0x80000001, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0x4, 0x9, 0x80000001, 0x8, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x5, 0x6739, 0x3}}}}]}, 0x78}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000004e40)={0x0, 0x0, &(0x7f0000004e00)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x18, 0x6, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_RULE_COMPAT={0x4}]}, @NFT_MSG_NEWFLOWTABLE={0x30, 0x16, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}]}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELSETELEM={0x70, 0xe, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELOBJ={0x14, 0x14, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x7}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x114}, 0x1, 0x0, 0x0, 0x1}, 0x4) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x4c}}, 0x24000090) 793.40006ms ago: executing program 3 (id=5213): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001a100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@bridge_delneigh={0x24, 0x1d, 0x200, 0x0, 0x25dfdbfc, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@NDA_MASTER={0x8, 0x9, 0x8d}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) 684.356902ms ago: executing program 1 (id=5214): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async, rerun: 32) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000540), &(0x7f0000000580)=0x4) (async, rerun: 32) recvmmsg(r0, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000b80)=""/199, 0xc7}], 0x1}, 0x2}], 0x1, 0x40000020, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) syz_emit_ethernet(0x4f, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa00400000000086dd6c2d01000019840100000000000000000002000000010102fe8000000000000000000000000000aaa5ba94e385673ccfd3fe184ab0643975bcc85fbf438632261b"], 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x408600, 0x0) write$tun(r2, &(0x7f0000000ec0)=ANY=[@ANYBLOB="00000806000000040001020004fb66cfb3b000b03affff01000000000000000000000000000100000000000000000000ffffac1414aa84000148660000005e0c040603080800fe8000000000000000000000000000aafc0200000000000000000000000000bbfc010000000000000000000000000001fc010000000000000000000000000001fc0000000000000000000000000000003c008040670000003c0212660000000000010007100000000302700800000002000000000000ddff810090780b6d7f00fc000000000000000000000000000000000000000000350000000000000000006af80da0c71cb1a35ab82118a48e43f83c1e0aa5a56525ce0035a8a5051bfb899f5a0e3c59b184aa180fcd249162a54008b8a49426935ff8f25ed7e5b3d661a87d7c5e0c710cceb14d609867995f1bdeebd66d2d0fdac5baec43dc92ae217a595e1a943bebeb8e5c20e1096ef9fe3242411019cbe0e58438fa16487089c6aef6c1cf8e05a999c1c9c3f8aa7aa251e4703a06303f9b8f9bac23befbe30f2b83ca28502472588fe8246c370e5ac5bd61bbeae78e8f42a617eb5d6f1aa1098d55bc9175f4319712f4d3062a62a8040b1aa8a2abcb3819d6976942035fe9ce047d334c9493a2842c4e16e77425e9af9889e57ae3537183a447e7e94ab4ea8a246ea700dc99adb30a1fcafd77fe612eb492e34e764cba8162792d9f41b9a31c043ea48a5a507d1c992d8616861447727846d45e5751f3213c1a5a14dabe591f4b778152e9b433fd1ec56041d3cc9c7601c08c097f0393e3"], 0xe6) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000001fc0)=""/4112, 0x1010}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) (async, rerun: 32) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000000c0)={0x0, @remote, @local}, &(0x7f0000000100)=0xc) (rerun: 32) sendto$packet(r0, &(0x7f0000000040)="381aae46a759eb87122b617b92ccdd45d9dd68773e050c77828a7313528595ff544e0dc85167cd2ee938f20b803c011d716bcb12d423ba79637f1eb25b7b0fb35bb423eb0aaafbb197c482ba270232d37cdf19917d2f6a50f76ff4015d4dbd985589b1937290c01884c2e26fd76a8d1c", 0x70, 0x4064000, &(0x7f0000000340)={0x11, 0x1a, r3, 0x1, 0xa, 0x6, @multicast}, 0x14) 634.905733ms ago: executing program 0 (id=5215): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020205d0af8ff00000000bea100000000000007010000f8ffffffb702000008000000b7030000ffee0000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x74, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = socket$inet(0x2, 0x801, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) (async) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f00000014c0)={{r0, &(0x7f0000000000)='#\x00', 0x2a4200, &(0x7f0000000040)={@_ha_fsid={[0xfffffffa, 0xffff]}, {0x6, 0x3, 0x100}}, 0x6777c3d8, &(0x7f0000000080), &(0x7f0000000180)}, {[0x5dffd760, 0x8, 0x1, 0x80000001]}, 0x6, 0x1000, &(0x7f00000004c0)=""/4096}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x70bd2a, 0x2, {0x7, r3}, [@MDBA_SET_ENTRY={0x20, 0x1, {r3, 0x1, 0x2, 0x2, {@ip4=@multicast2, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x40080c0) (async) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001540)=0xffffffffffffffff, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x0, 0x400e, 0xfffffffa, 0x6250, 0x1, 0x6, '\x00', r3, r4, 0x2, 0x5, 0x2}, 0x50) write$nci(0xffffffffffffffff, &(0x7f0000000480)=@NCI_OP_NFCEE_DISCOVER_NTF={0x2, 0x0, 0x3, 0x0, 0x7, {0x7, 0xd}}, 0x5) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000001800000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 632.946404ms ago: executing program 3 (id=5216): socket$kcm(0x10, 0x2, 0x10) (async) r0 = socket$xdp(0x2c, 0x3, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x3f, 0x6, 0x42}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000001a40), 0x1003, r1}, 0x38) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) (async) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/96, 0x2329000, 0x800}, 0x20) (async) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000340)=0x800, 0x4) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) (async) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) r5 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r4, 0x0, r5}, 0x10) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x503, 0x70bd2d, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xffffffffffffffe8, 0x2, 0x0, 0x1, [@IFLA_GTP_RESTART_COUNT={0x5, 0x6, 0x7f}, @IFLA_GTP_ROLE={0x8, 0x4, 0x1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) socket$kcm(0x2, 0x5, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 585.555737ms ago: executing program 1 (id=5217): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001cc0)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000fefffe7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe0000000085000000c0000000b7000000000000009500000000000000c9be17044171e1d3d7b1efd036d7af273bce36015779c4cef58fa35d17c668a4b63e069efb29797573b8538e31ec24925095a163b9d4e76be2661f2a395e41f7e31a8021e00b00104e0801d4de36e5fdc6c42a7b3ff13f2360a6e231fd223bc33091dd61258a1fda45991fbdce6793c8a4785ee8b60092659b941bbd694dff0f0000000000003a45404b04bf97c4fea679c032b363956cd8bac9626b5db1b07a0bd7cc85e961506a35a04617dc0200379e731d3a8d8feac94a4ee293001f6ce7d5b40bf2a7f9be8173a9639a79fae885d05afe042c0e7821d406c967379e7521292d24d6c8034f2fc7c855a8945e9bce678ee9a015abc9daac8876623db56346916674ceb55f60b493f2f4d736acb2f206fc538450a676d71c01175b8454eb92567e8f8a707b590d7219288e23ee0800000000000010a49fc8f4ff0300000000000000000000cb947d6017ad27714772ad790af252e648ef8c313c604324f5b306000000000000cf327a8f5dd89315b8c8650a70162bba30ad7804fa4140f1a754ffff000000ab744d306619dfb3a37d897662bee00189f43da46a908a235c84cbad335fd1d2f2ef93a6a70c8b8ece0e243eab05a34ab0a7e7e497065e5e282e284f8d5e8852a265d528075214af000000000070d42182d8f3a347d48289a824e5b7b238e27263a23c0b865f75331d888c72df1da4b290582f00024227f03204add786a87b23ceb17c25810e769fe2d6a7bd8e504843b66b1a8c7b364bd2194ba9c8f60ac0c9b18d8c1b9e1a736825c91b4dff0000c1c5dcffa295c2930000000000235d84b0193a5ea7c77cdb7de8ce1a59ab4158097b4dd13ebfaf4425c6855530b56a3320d85c8fe85f667998b1a7e589f486c107761108e4e230419fd27b6ad9c10b25c6b6ed84badbb970dcf133279dd355e41de944564bdab99c5c712a9fbc8e9691c775bb94f746505e1e748cf1710d52468b4b1625ce21612ed5e807dfb5f19f3267e5366b2c0b2a0be49ae476263c9407ac6c596bf3cf66204984f5aebf93d1caa220ea6969cea852fe9a7d1eee13f1f48722a69ad9fb850bd093a302b9250245900ad5c8e5f20ddf77ee3d5a168964fad1aa7347d36c502d02b1d96d753ef6fc354fc126070060c65c147651fca62c0a06939f40c90ebc3042e753fe91b5770b24f25c558736dd7e1e9fb214cbb04c5c6ee4c970b320ba6fb6ef4615f4092de54c519f4622e1224153463ea80248a45a95a189958f586d606dcaa9aac656cf95a2d35225cfb0e6f47486d5cbb04a590116d4de92e203e107d68728a189b0d537d2442beab2f8ce7b2dd357200dcd139e47267012fc2a2b6bad79be429d1ddaccbe0139f16ca1b9bc1103000000ed1ece54cfdbe04670bee9b42fe3dc42033997e2e700b6edb2b49b5f2f6001ee0a9e5d1bee199ce9124a5cb479040000000000000049ead5b02d5ea1dcf6cdcf332fe94b3c1932d8d391754774a32c9b7e6ca4023bce2c7281d27a2cb62383ab3a3bb535650fbfb96c89936855eb7a485698f0d20c3eedd6123ef8f218d52ea2c346f80acb8b9a71856d2f2d1a7c6f45ee127b6a1d1ac1e243ed02e49e8aafe835919564af915965a050c37ceff855bd2dec3452c7c38f5dbf1ff1ff00020000000000006a1a029ea6540b40b2f797813af2c7d4ed235c2dc5f1dbbfcc52b2f55fd3f9f100c4891d0cb4c10ed01489bf235c45822594842da1b411346297a40bbf221bbf63ad3822575dcc01a3c34b5aa4e3750400000000000000fc0fd9c746cf0ed4b0343d00a154e6a869346256ffbd666a34414ab0f40bec45b1c24f02ac9bc20e69201968537dd4dc61323c8b6d3643183631664eeca616696fb30fe89c8bdb15037c801fca4a9c220fec5d14582a00b62548ddf2599e5ffc5330cefb8903d276eae21b0b4b20100ead8256636c7e754185e815dd21445cc965a0526da38021a3e540949494ef3041cfa5067f556a0af5c19d27ff4f61fa7762d7963c96853709e773f14c47eef784cb145ae9d6d37fc7b5d83e05ac773fcc429eae6826a9d207d4c39df8eed9cc2ae3f68df1c6495a82d02939b448bf8038521057714e6e644d633d2abe9e0b0025d16b7eff573f78364ed70a62a7b1e55311dc0193d47f9ecc8c7ad268dc6e2e75f8cc83315411bd6c6b88e1850ee757ac2f9e4d6ac510003717d5847a19e750db92d33d6bdc434d0b52b2eb4b1790459e35122f46b205120a54bf657da9fd55d43a89e333481de468f5984a69509e9eac5a5b39c004396e8cb3ab037fd62fa43f259f13ebc4b590e9ea07ea37689049c799cd444d45dabe3e3cf086768daa6816c37793d17a284d2828f5eab2d3f0bedd5334b7bb4c983fa9cd4bd86f0ad227901e83ef4871695380d25bea2929fa66382af6ddb89917ab100046151bd08fce74247955247daa1ea75139b9ce3771526503c7db3a4b3ff39301986c1fd9b5c42d39e768946c9a7ee8dd081bfb6ea5fa132ebdbe72d02ce9f2000000006f63ae8311afc4943c963d39e42c54a3f52d121bfb425fe268892f654febdaee43e95b5ae6749275e1ad8b8b279e1ae296e03a8d9386d8e199dc1f00000008000000000000000026c43493c622f041b47d329b248e8ccd92e9b17007ba2578eefcb59f50343722e6cba3be72fd037eb5fa243a395b5c83376a14414b32c2e8a33de8000000003927da2bec76f4e15c8bf3715c5bfe7b3617d0fcf9b5861554b5b76b8ae69c644a48931306a16cff8a38ea95553867e2c5fb1e99b1802e616345871b4611627874cfbe30fa5793c873ae6f75427f3eeda690147b9615b096d967c2d7f5ddf725f0544f8750a5ed04d6ca0f223506fec5d5e65b467c59459f6113cf41c174a63a17fc79d0b777a0c903c0d2e7f79b6f9ce68a3b72315407040f6a09cadc25e87b7c6b4a3079c7989b4cf04b251fb555fa9a2d74392939b4dbaa9e620e22ab975ac3a5a329157762c1f29075fbdd39451a56b97c90e4fde6782a7c78e7fbe8400054dcafcd51e9eef2d2ea10a3f2636ac2239cef5d8505060de55f472aa89cb8e0188f2ee96cb1ae8dee3c03d0a942c6289cbc4499cea402bd0550520f4aae98c436f18a667ae4efeb5e6a4b1b3f53536145a87578eac8bfc1037acd9d9629449714ed1302714c3519fdd8529b5a86ce2fabb7f285fe73730000000000000000000000000000000073b6f8e9255567374cb2cc80be58fca5b1dc50d85342e56beda632edb7f0a4abcabae102fadfbffecc6b1549315dda8e09d18a7fe5e1574e4fad426b6ca211da39a16dffdd661a20b20c390e00004b002cd83b754c3d32819c823027b3cf8f8da6e63d099712be370bb2aa06debff931ea0a2e7aa0390000000000000045b6720d74c470d49e1e97d1668bb75ad994089d723c2eeaad3f857937fa3df615121a1841ed452dd395788e1a82efda18b41c06c948ef44af8500fbe1ee0828a3b047afb80435935b0f99b381dcf101e9a1593bdaab3bc88c70bf56995a4790a339e1b62516356644ed7df6db419d0976a5169e68e8bd4712552c5ec03f2818c17c4a5bf1e5ecd9bb40074a63c66b61f4779226a99dc5ff9c442e93991570797493569e6f9ccd6d73bcbce41022d4731fc61b6bf0188c74a21471332a546ffe8e9dd738aa2ca782ff5a547a1ad7c348c59ff99d1496404eafcd0333df8f2801d39ad0c82735af24b819efc2fd67c6a53835f0af6a51d1b9123f4b9af7fa2ee2ebf4bc2973cf04380b41aa7577e35bcd28446bfcea19aa85440fe0fdce12e53da7b8842b7527a34d1bcb16fcdc84f2c46a78c01c2ff463cdd0d65267b0822e899e893514a02acd8c21583d181208175d08ff75223da84d53656eb7ab46ad442d70c67a6010029329aaf116308d57e77065464eb94ba18e680c2030b4212c135a3c3bbce5e911453b9e35e5b2a0390ebeb084988880a7b07435188680ce166b8858f00876c191fd4df2c32440ddcce4410199080009ad86d35168a442cfb9d399172c436a744649c810ce30505348d6f7bc87f0c202ab626acfaf0c732a3536fd46796b1bb6a2217834db8066789735a67dc95c679d02e0eaf743911bde21ffe0b6ccda73dee5694020544392d0538a8075706b26b2680555bd5dd1b4e2f59275c02372ff99d5f1066d018016c43541c6374be429d483f513c84a7dc1aced670625a93082a9bfaa86b2aa73ada8945b088d9ec0aa549a8ec8e50060fcace5e89ee1ffc1dc0f8a87"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x2d1, 0xfffffffffffffd85, &(0x7f00000000c0)="b9ff0303000d698cb89e40f086dd6000000e00ff8900630677", 0x0, 0x100, 0x2000000, 0x0, 0x0, &(0x7f0000000440)}, 0x28) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r1, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="1818000004000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x1f00, 0x0, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x7, 0x9, 0x9, 0x9, 0x101, 0x2, 0xffff, 0x10, 0x0}, &(0x7f0000000200)=0x20) setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000240)={r3, 0x642, 0x6, 0x9b, 0x8, 0x5}, 0x14) 515.625908ms ago: executing program 0 (id=5218): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xe, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x7fffffff}, {{0x18, 0x4, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5a}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x7}}, [], {{0x6, 0x1, 0x3, 0x8}, {0x6, 0x0, 0x2, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 443.833065ms ago: executing program 1 (id=5219): ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000080)='}-\x00', 0x84ac3, &(0x7f00000000c0)={@_ha_fsid={[0x0, 0x3]}, {0x4, 0xc, 0x7, 0x4}}, 0x1ff, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)=0xe1}) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f00000001c0)={0xffffffffffffffff}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000030000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000100), &(0x7f0000000140)='%pB \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r4, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000440)={0xffffffffffffffff, &(0x7f0000000280)='#%\x00', 0x20000, &(0x7f00000002c0)={@_ha_fsid={[0x8, 0x5]}, {0x0, 0x2, 0x401, 0x6}}, 0x4, &(0x7f00000003c0)={@_ha_fsid}, &(0x7f0000000400)=0x5}) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001780)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x90, 0x90, 0x7, [@struct={0xf, 0x5, 0x0, 0x4, 0x0, 0x7fffffff, [{0x4, 0x4, 0xa330}, {0x2, 0x2, 0x8001}, {0x6, 0x5, 0x7ff}, {0x5, 0x1, 0xffff}, {0x4, 0x5}]}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x3, 0x5}]}, @enum={0x8, 0x5, 0x0, 0x6, 0x4, [{0xd}, {0x2, 0x7}, {0xf, 0x2}, {0x0, 0x1}, {0xa, 0xb}]}]}, {0x0, [0x2e, 0x0, 0x5f, 0x0, 0x5f]}}, &(0x7f0000000780)=""/4096, 0xaf, 0x1000, 0x1, 0xfffffffd, 0x10000}, 0x28) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001b00)={0x6, 0x1e, &(0x7f0000001800)=@raw=[@btf_id={0x18, 0x7, 0x3, 0x0, 0x5}, @generic={0x3, 0xc, 0x4, 0x9, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x368b}}, @map_fd={0x18, 0x6, 0x1, 0x0, 0x1}], &(0x7f0000001900)='GPL\x00', 0x0, 0x11, &(0x7f0000001940)=""/17, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001980)={0x9, 0x4}, 0x8, 0x10, &(0x7f00000019c0)={0x5, 0x9, 0xcc2, 0x4}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000001a00)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000001a40)=[{0x4, 0x1, 0xf, 0xfe7bb1388673985e}, {0x0, 0x5, 0x2, 0x8}, {0x7, 0x3, 0x2, 0x1}, {0x1, 0x2, 0x1, 0x3}, {0x3, 0x4, 0x9, 0x5}, {0x3, 0x4, 0x9, 0x2}, {0x3, 0x4, 0xd, 0x5}, {0x4, 0x4, 0xf}, {0x5, 0x2, 0x10, 0x5}], 0x10, 0x2}, 0x94) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001bc0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x4}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001c40)={0x1, 0xffffffffffffffff}, 0x4) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000001d80)={0xffffffffffffffff, &(0x7f0000001c80)='\'(\x00', 0x20000, &(0x7f0000001cc0)={@align=0x5d, {0x7, 0x8, 0x800, 0x3ff}}, 0x2, &(0x7f0000001d00)={@_ha_fsid}, &(0x7f0000001d40)=0x4}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001e80)=@bpf_tracing={0x1a, 0x36, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x336c, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x667f}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @map_fd={0x18, 0x5, 0x1, 0x0, r4}, @map_val={0x18, 0x1, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0xac}, @map_val={0x18, 0x1, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0xf}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x198b}}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000640)='GPL\x00', 0x9, 0x0, &(0x7f0000000680), 0x40f00, 0x21, '\x00', 0x0, 0x1c, r7, 0x8, &(0x7f00000017c0)={0x9, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x24e1, r8, 0x7, &(0x7f0000001dc0)=[r9, r10, r11], &(0x7f0000001e00)=[{0x4, 0x3, 0x1, 0xc}, {0x2, 0x4, 0xfffffffd, 0x8}, {0x5, 0x1, 0x8, 0x1}, {0x2, 0x5, 0x10, 0xd}, {0x2, 0x3, 0xb, 0x7}, {0x2, 0x5, 0x3, 0x7}, {0x1, 0x3, 0xb, 0xb}], 0x10, 0x1}, 0x94) 401.114656ms ago: executing program 1 (id=5220): r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2e, 0x1, 0x0, 0x25dddbfb, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x16, 0x0, 0x0, @u64=0xfac09}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @local}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fe2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebdddad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8523b29be82", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCB={0x5, 0xb, 0x1}, @IFLA_MACSEC_ES={0x5, 0xa, 0x1}]}}}]}, 0x44}}, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r3, 0x6, 0x23, &(0x7f0000000040)=""/40, &(0x7f0000000080)=0x28) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r4) sendmsg$NFC_CMD_LLC_SET_PARAMS(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB='n\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010025bd7000fedbdf251000000008000100", @ANYRES32=0x0, @ANYBLOB="050010000f000000"], 0x24}, 0x1, 0x0, 0x0, 0x4040850}, 0x20040880) r6 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r7 = socket(0x10, 0x803, 0x0) (rerun: 64) sendmsg$nl_route_sched(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) (async) getsockname$packet(r7, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@newqdisc={0x3c, 0x24, 0xe0b, 0x70bd24, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0xffe0, 0xa}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x7}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4000080) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @remote}, 0x14) (async) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 396.79773ms ago: executing program 3 (id=5221): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8607}, 0x10) (async) sendmsg$nl_generic(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000001600010a0000000000000000dd93"], 0x20}}, 0x0) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendmsg$kcm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000780)="5b34307b5d5ab4d0da618c917d17d72617b51de3b058db3741c1ad288ab3d41b6393e90e9c35c278107469c5069f9af1b6cce3add48acf544e1ea61e9706b8311fde34712a361da44539559336541173354d63a7443c34bf3956a7d39dfde18f0ef3f45b4a695e6663524020e87c5f94e4bb4fd9243eb345fc806b6a763acb8b0debff7f96696466798cc6d40471c26cf1cd03a40d72ba67c831a1ab417eeedf86904ac662460a2ee7f9830f6ff1e15957580ae75bbcb393ed98850dd00a952a931584869bc3da8f9054dfc58d7309c1d5024afd7c862d21ce", 0xd9}, {&(0x7f0000000880)="90045127107781b2802972e8d927a800a56c62861f6a44957e17a30de6f8e1a6c1fe3056d3cf94594169a8284764158bdbec8292978798", 0x37}], 0x2}, 0x40000000) (async) recvmmsg$unix(r2, &(0x7f0000005980)=[{{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000001040)=""/31, 0x56}, {&(0x7f0000001080)=""/215, 0xd7}], 0x2}}], 0x1, 0x200, 0x0) (async) getsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f0000000000), &(0x7f0000000080)=0x4) 307.829078ms ago: executing program 0 (id=5222): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x3, 0x0, r0}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1}, 0x38) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@cgroup=r2, 0xffffffffffffffff, 0x33, 0x0, 0x4000}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) 258.247287ms ago: executing program 2 (id=5223): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="660a000000000000631121010000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) 224.948313ms ago: executing program 3 (id=5224): r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000000)=0x6, 0x8) shutdown(r0, 0x1) recvmsg(r0, &(0x7f00000003c0)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/248, 0xf8}, {&(0x7f00000001c0)=""/10, 0xa}, {&(0x7f0000000200)=""/42, 0x2a}, {&(0x7f0000000240)=""/14, 0xe}], 0x4, &(0x7f00000002c0)=""/204, 0xcc}, 0x40010002) setsockopt$sock_void(r0, 0x1, 0x0, 0x0, 0x0) close(r0) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x1, @my=0x1}, 0x10) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000440)={0x8, 'gre0\x00', {'nicvf0\x00'}, 0x4}) sendmsg$inet(r0, &(0x7f0000000c40)={&(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000a80)=[{&(0x7f00000004c0)="5caad8ce7fb7d2ba979f9c20f9778a3a71011b2bc8d39d5930aa2e6e842fec67c63993ab4a1cc873720c4ff1d23ba161f37dcd8a2cfadf45bbfc2c3c7c25b9a23ee32420c6611c93c0aa7c4a047f2c036d91c87df0f8", 0x56}, {&(0x7f0000000540)="cee0ff51d3247149fad51be0fddbcf5079592db4e1a758683188af58a78405ece62aab487f4796660c49508f7e75794f8b24eb1808f9d4b533128fc2a66d62a696201a6fe1042807ce7771ba903235cb0d40844e15dec6f84421076124c4428c38878a1e8cbc4c9a7db7ccac12fafb12f99c40898d2ad2000b207d809df4c7876e51a0757fed80fb2ca02f3450e3643c3260126ed374b83ab28045f6a1fee0ae41bd5a36af7282211a0a6b8748aa7f6d4181dc276ae3770e8f03e005cc0cf3c0d7654063866f31bba78621869753649fa0018b1a3cc8a48d5a4fef2d6222498f2a000b244cb841b9d60daa24", 0xec}, {&(0x7f0000000640)="7e9c0981fa68cee5e59f0fe0d223e5c261a76acce6f423a0818d61be6a2cd40a03ef1160df660c1b93c8e5ca0749b3bb4c2aa9f9b23ba389d6c6acd20af476390d6988017b61", 0x46}, {&(0x7f00000006c0)="cb1d9153424984d9b9a742b9ed0ceaf869b93644442f2c93699e49e8fc93a8ea8676d8bcdacaeb94f9e3a065f381d4dfe21f7ff4aaf8d56592022a57c322f64f6cd8e8afa51827562a2f2c5d5e938119107b8ea9", 0x54}, {&(0x7f0000000740)="29acf3aba974b62458011842acb10b46896d68591ff4ddccb565958754885ee4ac682b5941bcfbb99f2a8b3b5d7d06de21b3210835ac4b906aeecf82ff51ea3e89a98b535596ec7b686705268435a42e47f978dadffadff72fa79490093c5e128a66d674ee9809e2e14b65a235d886560e85d83f8eb9bf2b8fbd6e8e97a4de7d62fdc76344712e94a19cb92992088604b5325d958fccced255267330e6cfbc25c89c1b7c35539c9606a351d8cce939", 0xaf}, {&(0x7f0000000800)="a5042635035b0578ebe3f36fd50a2f5504acc1e5f1797bc1e7a92e7f8a1bfa7468f01c0d6edda3bfa156d698aa1b65ee2797820d4bea056891", 0x39}, {&(0x7f0000000840)="afe5bb8f3e4baa9e5a890399bd6767241e68b37a164834573348b42ca03e34172952464ac7628cae9cbef2cf73d3d3dee6d653c9f2b76efdbbd610d76df6ac19cbea1d34f349e5fd08963756f7374e587919d7bdf3aa965f7e4c9c8a6c4f1ff41972adda4901d24216e7a7099639766799e161a80ce6ad54b2", 0x79}, {&(0x7f00000008c0)="ed8b32071c0c5447c10c23601b2afdecb6eceae058f4988f6200aa7131cebb929e745aa3979f55c73d2beab4a2ea3c28be40c0e56c25a5b6bd78d258715b2ca416a19208184c50c8a840c9ee95566d134e75453b2fb8ce3fbb9f6cf51ae9fb1459bd07d93237b19a22eaa0e5857207dc7f51d6038a8e0a0cd54856282901a6888aa8a08953f6450fe8d9d3259622b0b13a9b6c9db2bd4e4491b9acc6c0ae55202b11a9b0a9f7225bbccf3640412bb2", 0xaf}, {&(0x7f0000000980)="836443bdbce493af5f2057864469a830ae9eca7acf376958aaefd29ab82f5661a1a5ee317d205e4a0d08f458020f3fa6dc677fcf4307ea51092ae1985c18191516cca3421ea086f37589676ee9bf4c43eb82ae224fca012bdb8b20687f3f37411490ecc8757fa102c91f1aba558827136af1be79a7b99897adf6029bbc8a159ec544e22148e01a92c2d62f0b51414e43756514b41f1e919d72b250a003c13520ddf01ba3b2263c96d8d3d077a1d2b5844dcb923e3da67f49592b20a9a76aa3f061e657943479fe675bce79270fc006125a5c083fc068a2651424fb7e281ab870785cae1b93", 0xe5}], 0x9, &(0x7f0000000b40)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x7fff}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7d}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5bee}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xc}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xe}}, @ip_ttl={{0x14}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x10}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}], 0xf0}, 0x40040) sendmsg$tipc(r1, &(0x7f0000001080)={&(0x7f0000000c80)=@id={0x1e, 0x3, 0x3, {0x4e24, 0x3}}, 0x10, &(0x7f0000000fc0)=[{&(0x7f0000000cc0)="0313a211475a3e5c931f22d15802ec418170299761313fec36e45ae07b0afc68c88600d2b551114cc0756be30a96379b642ff62b429f2628da3592deb78ffb92e1edd5d8bdd615e87bc5aa0e47755d2b053ef125ccfa50f04d6727f9fd6fea74335ff7f3fecd6357bfa064a5c02acda0a729bb8af9db3c45defd94f985ac5c72a4e81bfeb8b650cd00c7f7c782aef67ee074bd868028223ebb4b7991a8ffe33ca1540cc2c528b01477cf43b45e9d27b294b4ac08991ddb80fd0bf8b3b66c726f11a8633b9ac1986debee95ef9c8a4a076c2bd8e5cea483d08e60071c4fff3f51d0a111fc18", 0xe5}, {&(0x7f0000000dc0)="e5141a8e0dd9ee527518cfa915e7181dd1205773f3f28e0629875eea68240428e1d9b270fddbce20956233f9988bc3e68d41bdec4c283955992b60fb32", 0x3d}, {&(0x7f0000000e00)="4ed7894911f82a5ab3d58ff52bb86051f39ddcebb34e9e21ed6d59d8c49fb73f3ef0013521d52f828557763d47a696612b6647593196405e57e0ca128d4b3a883262f714c273ee8c76fc7f11ae53568a6b2a92231f68e46637541fbe26b66652e3a442761ace8d770566bf4a0a0af79e10762c0c7ba1cc871c53260e2683ea575f993b94345b2520d27a27dd3967fb6698c59bd5f29c", 0x96}, {&(0x7f0000000ec0)="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", 0xfb}], 0x4, &(0x7f0000001000)="7fc96e25ab9dbfbb07fc6a5b00c03cecd0b778daa8ef86657c055976fca45d8a59f26c2f93b3778366770cce4b25dcd3612a07d1fc86367a87bb9766b51c1f03207bc0d7f54af204e3881f18879fb663ecb56d620e4abd25", 0x58, 0x80}, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f00000010c0)={0x7, [0xb6d, 0x2c4, 0x6, 0x24d2, 0x4, 0x8, 0x9]}, 0x12) ioctl$XFS_IOC_EXCHANGE_RANGE(r0, 0x40285881, &(0x7f0000001100)={0xffffffffffffffff, 0x0, 0x7ff, 0xffffffff, 0x7, 0x2}) setsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f0000001140)="45a5638748f5d6536b4a198f8da26cfaedc21294b4ddc3c1ea5879f1b5ef064401158c1e3188aba4cf3698e6c6db188623b8811fd9ac14b60bc23725b29020063e42ffa699b69b55acf2ab4655fedb1d7901282ae599208ac4e4267440f0759f910e416a09bf7b7345891b62f1183d763a8a5188f99384886f18adf82687382e54e6dd9513c350cbc1db3cf17d4858fa3ef1b08ac97e5e12b4cc46b251cc8220a396c92d8518844e4264", 0xaa) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000001200), 0x100, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000001240)={'macvlan0\x00', @multicast}) sendmsg$kcm(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001280)="195271b7b3d8172f39bb1a2d8e7724b6903021779e96637eccb84488b026b62767ae8e6cc5d0728c5dfc909fa3c4fb17e1bbe0d1e605b5583ae89cb5710f694fe0a8af76b16f09cb2520e17d2ccac45a1766980b514d8ae2be9248b9885ebb75ce9d231a8a62aacb538b692d0f2f99b00c27e1026d114c70d4e38306a62abb64d377b36b33dc29bb1488aabebe24333dde1a182902f3", 0x96}, {&(0x7f0000001340)="c82dbca3c153d3ec714ec9e08cb9828aa6f8803d31955e962efdb5437e0706613dea73069f7a41a4c91e9c1ca6fc54eb9133bbbbec6e0397feadb78734da5ed2f1b81769caa72b102afc4532de8f80f29fef897904e558306be045bafa25388cbf8147cef5ef79212c0f3bad9d07d7c5eada48f2ae9315e00b565440d3f19fceef1e06e3fcd933014d5648aca4ede23e7ce38371ca7191672a579abcfb552d8594695f48dac3d18f91bac43d57ee2cb541d846076d4a2ead53f1cda46aa4f7ae4a4a8fb0721dcd5f52b18f5b83d82991c164bf570970abe7801b0b5b6790a7b922dc", 0xe2}, {&(0x7f0000001440)="31e30c79b84d40a89615044755703522d5010936fefb610a2f95052e1837602b1e21fff0aecd06c5b420335bbae2abaa05", 0x31}, {&(0x7f0000001480)="8f7f528c3188b8238dbe5b56b7b916174dd761583513c998629c0426a5b983a46fb853b7fca94796d789ba9609e805c0289251a7bf9e43f965f907df69393952940604ae52d4090e02e0a2b77b1fe381f3dad83f83955139b7a8ce06234460ffc123fffe69c9b201dc58914ba9d107919620d39ee5a56b15", 0x78}], 0x4, &(0x7f0000001540)=[{0x108, 0x111, 0x7, "2f476e047c38364865ee466c45f0a96137dc6b37577ec575b9674483c0665f01b903ddb8c601270363801f0aa5a5bb9adeb3c978d906d428aefe80ca4f26be02a5e2d64a14e50e31d75a76ece0dccdf3eda349c180c3f148129eec4a9e52f600d0fea1fcc6809f72b5a9b8acaf6b6bd555b6e6ab44022485358798fb001a91a872b27b144341661fd3f10c931ae2fc57841421509ceef506c4e0f819bae8aec809f64d9f08c7bf8a78303710a2947d721032f25496adeed4e8021ee92b868682a16770b508ba5bb255aa881b7593bd30dd7b028e3f113715114de1373759e045e4d23badbe484947c80d7e9bddc9fb52545b"}, {0x68, 0x102, 0x1ff, "adfcb897242c0b3a7a912ca6c610aebaefb2e5cf36f87e811d8f78d1ce8c274016e2edf65db3054c6e3e97e57680315e6e37c7a4de26ab75943de46fd7744a78965b68cdd1d05bd5df082afb54c877f413a14022"}, {0x20, 0x3a, 0x1, "a9dc31fb79810da9095a86c3d8a359b1"}, {0x98, 0x3b, 0x10001, "39275784f3bb3934163a6c4cb11206540d18ee8172a310a6f11f47cd1fd9123e98455a637fc4cd514bbdd52b9cc094af2e3272acc413783e4a29b5c1cc0fd3d8b1ebf0f03aa7b5fc215261b2c0af9bce3a076d01c446e80008c0ea96c9f02b289bb9998f8ef30f7c35d7b1e4ee02cb6c7d36ee95c5a59aea336f782f4ee75401f8479ac6134c40b1"}, {0xe0, 0x10b, 0x2, "145c0dc4bbf3d1169a35fc3d73fac5a86466c3ab3327ae06810c6fb39e96a7997f2fc738e9c98136b7f61f66447506f747e85e3cc77e6f42a3c2f25cd2f4773029a8e643e8ae264392f227bc8edf6ef701523d69d7e5b96427ced0402a1c261a17e7f7fa2693cb9de92b372d4e3f13412b0cb4ee154d18db7c30dfcef06553894d1686989e0f7e2b1f7b7d886d7d41edf4bc755f475a6871e338163177ff88369850634fc26e4d123d749d526a4d5bde9ddd821ac95ee98e2cda4602976bd4b2058199ad5930116594c8d194"}, {0x20, 0x102, 0x9, "51a5aedf9c8ed0244155"}, {0x88, 0x108, 0x4, "6f6732037c20cb6c08d6d78c3fc91d670336ea72ea23cd2148b5b3b06705d98f9ef95e5299b15fd28dea40bd821128d24a0d8b5531fc0144aca77d6fd46c4fca5437c11d3184637b821c93d0871a7bb7456136f9be244cf5e516d3ecaa7b7c1e531e03980425eb195acc131ea7a4c4b082"}, {0xc0, 0x117, 0xddf1, "960d6726a19d5878861ebf9f04ba76137e681c9c25b35ebac1681cbce71e74b05c3809ca452dca7d61b7c6ba65693a0b761b16891f8deac925b7eee1540371cc69fceed4d1b0102cd8731962995651460742bd5a06d2acf8ad4006bacad445454ccc2b8ad1932c36f83cd3e1706a7eb145dad8e8aec050d65c0d69f04d2a9873cdb8afcc696a9cb9210c25e9351af0693c3203166135eecd907f801521b6f48ae977d70f9b5eda1408c8feb1d503c9b8"}, {0x100, 0x10d, 0xffffffff, "487e6ca7f1c27635260ecb8c9037bb24b34686513dcd20a43e53201a29201d06c640004ac99e9a632f4059eb5f4125c8d00ade6620d21e9c3e641982f9de16c0e53542dac0edf59a5205d0fcfbc268530e3c1acb1f49acfecd3b1c8740be0888213a726d33e5ad91a31dfb4718fe2f9a2c29c136a3b90afe4176577364a5a075e1a8fb2c3332a9f6f7168f3c078f8ed39bb82b409caa270bfbebc8f724d399ad2d373f7d7e3590fc6e48feb9ac9c5654d2a65175241bbd90dd5ae142bc91dbe2609c8af92fcd4855299bb50c4bbc54c358be0dd189fe30af549f02ed1c71ce9436475765078e9c507240d3"}], 0x570}, 0x8080) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000001b00), &(0x7f0000001b40)=0x8) recvfrom(r0, &(0x7f0000001b80)=""/177, 0xb1, 0x40000062, &(0x7f0000001c40)=@ethernet={0x1, @multicast}, 0x80) connect(r0, &(0x7f0000001cc0)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80) ioctl$XFS_IOC_PATH_TO_HANDLE(r1, 0xc0385869, &(0x7f0000001e40)={r0, &(0x7f0000001d40)='/-!+\x00', 0x104003, &(0x7f0000001d80)={@align=0x1, {0x1, 0x8000, 0x8, 0x3}}, 0x58d, &(0x7f0000001dc0), &(0x7f0000001e00)=0xffffff3c}) sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f0000001f40)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001f00)={&(0x7f0000001ec0)={0x10, 0x1404, 0x100, 0x70bd2b, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x800}, 0x200000e0) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000001f80)={'ipvlan0\x00'}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000002000), r1) sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f00000020c0)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002080)={&(0x7f0000002040)={0x24, r4, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xc3e5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000090}, 0x0) sendmmsg$inet(r1, &(0x7f00000025c0)=[{{&(0x7f0000002100)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000002480)=[{&(0x7f0000002140)="cc3da2e70586cf6753af9e4fd79b039f5a97da984c63c7f41eaeccc8b240fb491d516cc9b8276318190f857fc74df74be6a9b3c93252f7a226230ec6b2a85efa071ce85b4ee4f19ef45e602c99a46d120b31894a69da86fd008626890bfa039d05c5dba30d1d6c94d9da117ea3932b75d3ab141abd51648468347dfa67b92c2678151b3de89af82de848c8da34be3c4f7d72506d6a530e3961f30a2821f583ceed285cf1aefae3019e2a050c9538c157eb21d8e61d64ab38b906ba194a598c543ab85241ee7463f82f", 0xc9}, {&(0x7f0000002240)="aab4b83f2957860f5dd238b580b8a6ebfa36a3a19d07005244ee9d", 0x1b}, {&(0x7f0000002280)="9663b0c6142da32cdc7c5a558214c9420aeb33ed68f372cf8516cb65618a05728a19ac8c200ab611aeae557a070c5580fbe3d06a367b1c0babbfc16e7b07e604a68d6cb2631ca93cde8ec9b0d1a9a77677d37f505b459ff423e7de272927780b9113dfe31a95eacb08f83f6cb83494527385fa13f03961134631edaab1ae798b6b46e017c433efa45d", 0x89}, {&(0x7f0000002340)="f67cd08f03c413bf3a7b3d3d9c41498f6da92c0e1407bc235c2e8cda85e96ea15915b454f376adf4c59ddccc19c1a059177a93cab5582cf1bf2c22517772d421984aa5e9e8eca667ef7224ede1fab076a21e7f10b468472f5c49fc12fb4dc43a", 0x60}, {&(0x7f00000023c0)="d7265162021b9b528f324b49fb7b007f0c2f7463cd38030669e26188175688d12ce93e289a69374cdcade9d3bf693658be71a6e7a9cc3f03f62c1e9763f8fbccf14ff77cc31ac28479b22c23b23cb2e1b77c01d71c683b8e52decbc8d3c5ad394226cf512714bc2cd5ecea32dfc931e4c2be55f98f74c66e080a661aa4f1032007893d51c0ace6d38db30d7e0fd30ce333a24a", 0x93}], 0x5, &(0x7f0000002500)=[@ip_retopts={{0xa4, 0x0, 0x7, {[@lsrr={0x83, 0x2b, 0xeb, [@private=0xa010102, @dev={0xac, 0x14, 0x14, 0x20}, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0xa}, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @multicast2, @multicast2, @multicast2]}, @timestamp={0x44, 0x4, 0xbd, 0x0, 0x8}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x4c, 0x7d, 0x3, 0x4, [{@dev={0xac, 0x14, 0x14, 0x1a}, 0x4}, {@loopback, 0xc}, {@rand_addr=0x64010102, 0xfffffff8}, {@multicast1, 0x8}, {@remote, 0x7bd}, {@multicast2, 0x81}, {@multicast1, 0x6}, {@multicast2, 0x7fff}, {@dev={0xac, 0x14, 0x14, 0xb}, 0x5}]}, @timestamp={0x44, 0x10, 0x3c, 0x0, 0x0, [0x1ff, 0xe60, 0xfff]}, @noop, @noop]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}], 0xc0}}], 0x1, 0x20004814) r5 = openat$cgroup_ro(r3, &(0x7f0000002600)='blkio.bfq.empty_time\x00', 0x0, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002680), r3) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r5, &(0x7f0000002780)={&(0x7f0000002640)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002740)={&(0x7f00000026c0)={0x44, r6, 0x308, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x7fff}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x4800) accept4$inet(r1, &(0x7f00000027c0)={0x2, 0x0, @loopback}, &(0x7f0000002800)=0x10, 0x800) setsockopt$sock_timeval(r3, 0x1, 0x42, &(0x7f0000002840)={0x0, 0x2710}, 0x10) 143.167788ms ago: executing program 0 (id=5225): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="ec05ab14693fc4afe4bde5d3c7f027c323e9fdb213dbe3c9947ee22f556a4e02ae2d998fbedcf9510a195605021155deb827621c7de4a45d078e5a8a0907cd564030e3ecc5eeb2663fcc6c2d525495e1042c7a04c8f78505967c7bbed8de15678fa2cbd6f0d0d2665cd4249f3f0ed641f4d7d5acaa0659d2e72683998fe1bf234bb8c0853e55158a16cf4e30e1b33c515b6660ca3d65b707aac4408d3e", @ANYRES16=r1, @ANYBLOB="010000000000000000003400000008007300000000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x3c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r2, 0xc0385868, &(0x7f00000003c0)={r0, &(0x7f00000002c0)='nl80211\x00', 0x4c002, &(0x7f0000000300)={@_ha_fsid={[0x7, 0x9]}, {0xf, 0x9, 0x9, 0x1}}, 0x5, &(0x7f0000000340), &(0x7f0000000380)=0xf}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000440)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400001}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=@deltclass={0x6c, 0x29, 0x100, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xfff2, 0x8}, {0xa, 0x9}, {0xfff2, 0xfff3}}, [@tclass_kind_options=@c_clsact={0xb}, @TCA_RATE={0x6, 0x5, {0x4, 0x6}}, @TCA_RATE={0x6, 0x5, {0x9, 0x6}}, @TCA_RATE={0x6, 0x5, {0x9, 0x6}}, @TCA_RATE={0x6, 0x5, {0x8, 0x8}}, @tclass_kind_options=@c_multiq={0xb}, @TCA_RATE={0x6, 0x5, {0xff, 0x2}}, @TCA_RATE={0x6, 0x5, {0x7}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20004044}, 0x40001) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c268811000000000000000000002571cd53b9851b30599980bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet(r6, &(0x7f0000002c80)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000001480)=[{&(0x7f0000000140)="96c3f1", 0x3}], 0x1}}, {{&(0x7f0000002980)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000002a80)=[{&(0x7f00000029c0)="93", 0x1}], 0x1}}], 0x2, 0x4040040) recvmsg$kcm(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000780)=""/174, 0xae}, {&(0x7f0000000500)=""/205, 0xcd}, {&(0x7f0000003b80)=""/4050, 0xfd2}, {&(0x7f0000002b40)=""/4117, 0x1015}, {&(0x7f0000000600)=""/212, 0xd4}, {&(0x7f0000000100)=""/20, 0x14}], 0x6}, 0x20) r7 = socket$kcm(0x2, 0x200000000000001, 0x106) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r8, 0x0) setsockopt$sock_attach_bpf(r7, 0x6, 0x5, &(0x7f0000000000), 0x4) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r11) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x38, r12, 0x1, 0x0, 0x0, {0x4}, [@NLBL_UNLABEL_A_IPV4ADDR={0x5, 0x4, @multicast1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_team\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}]}, 0x38}}, 0x0) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x12, 0x8, 0x8, 0x8, 0x100, 0xffffffffffffffff, 0xeaa}, 0x50) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2100, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000040)={0x1c, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}}, 0x1c}}, 0x0) r15 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r15, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x50, r9, 0x400, 0x70bd31, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x20000008, 0x15}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x3}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x8c}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x4}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x4}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xe}, @NL80211_ATTR_BANDS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x10000010}, 0x800) 142.777932ms ago: executing program 2 (id=5226): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x8eb6}]}) (async) write$ppp(r0, &(0x7f0000000440)='\x00\x00', 0x2) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000000)={@none}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) 111.043573ms ago: executing program 1 (id=5227): socket$inet6_sctp(0xa, 0x1, 0x84) socket$kcm(0x23, 0x5, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0xa, 0x922000000003, 0x11) r3 = socket$inet6(0x10, 0x4, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xffeffffe}, {0x16, 0x2}]}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x10448) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r4}, &(0x7f0000000100), &(0x7f0000000140)=r4}, 0x20) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x25, 0x10, @val=@target_btf_id=r7}, 0x14) bpf$TOKEN_CREATE(0x24, &(0x7f0000000400), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1c, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="041800000800000000000000ffffffff18110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000002870f00400000004024010010000000186200000400000000000000040000008520000006000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000440)='GPL\x00', 0x7, 0xbe, &(0x7f0000000840)=""/190, 0x40f00, 0x21, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000540)={0x2, 0xb, 0x3, 0x8}, 0x10, r7, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000480)=[{0x2, 0x4, 0x3, 0x8}, {0x1, 0x3, 0x10}, {0x0, 0x4, 0x7, 0x3}], 0x10, 0x7}, 0x94) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000500)=ANY=[@ANYRESOCT=0x0, @ANYRES64=r6, @ANYRES32=r2], 0x20) write$nci(r4, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x61) sendto$inet6(r3, &(0x7f0000000980)="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", 0x147, 0x4045, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x17, 0x0, 0x0, 0x7fffdfff}, 0x0, 0x0) r8 = socket$kcm(0x2, 0xa, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005", 0x2b}], 0x1}, 0x48000) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x80c0}, 0x40004) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 45.939847ms ago: executing program 3 (id=5228): r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000), &(0x7f0000000080)=0x8) (async) r1 = socket(0x2b, 0x80801, 0x1) connect$inet6(r1, &(0x7f0000000280)={0xa, 0x4e23, 0x3ff, @ipv4={'\x00', '\xff\xff', @local}, 0xfffffffa}, 0x1c) (async) setsockopt$inet6_mtu(r1, 0x29, 0x1e, &(0x7f0000000040), 0x4) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) (async) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f00000000c0)) (async) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x6, 0x4) (async) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6}]}, 0x10) close(r3) (async) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x21dfdbfe, {0x0, 0x0, 0x0, r2, {0xa}, {0xffff, 0xffff}, {0xe, 0xfff3}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x5}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x4000010) 0s ago: executing program 0 (id=5229): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) accept4(r2, &(0x7f0000000380)=@ax25={{0x3, @default}, [@bcast, @bcast, @null, @default, @bcast, @remote, @default, @bcast]}, &(0x7f0000000400)=0x80, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r4, &(0x7f00000000c0), 0x8) listen(r3, 0x1) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r5, &(0x7f0000000000)={0x1f, @none}, 0x8) listen(r5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0b00000007000000010001000d00000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000e5422fff99f98f0e0e825b0c74aa77249d99c69362269ffbeb2d82f3e88a71bd31145180542bd61966609ad7bbeb9ca74170c2fd860deadc01e960863ba2cb21a002988942db5527859e7d90e11a16c5661fb676e913a0a6b792a95c3e"], 0x50) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r9) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r9, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1010000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, r10, 0x20, 0x70bd2a, 0x25df5bfc, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x62}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x4}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x3}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x1}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x7f}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_TDLS_INITIATOR={0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r13) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r12, &(0x7f0000000080)={0x0, 0xe, &(0x7f0000000040)={&(0x7f0000000200)={0x78, r14, 0x1, 0x0, 0x0, {0x4, 0x74, 0x609}, [@NLBL_UNLABEL_A_SECCTX={0x2c, 0x7, 'system_u:object_r:udev_helper_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x8, 0x3, @mcast2}]}, 0x78}, 0x1, 0xffffffff00000003}, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002100090002000000ffdbdf250400000008000800", @ANYRES32=r8], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) r15 = socket(0x10, 0x3, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000040)=0x1000, 0x4) write(r15, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e000000000000ea08000f0001000000", 0x24) kernel console output (not intermixed with test programs): ode [ 379.116177][T19028] syzkaller0: entered allmulticast mode [ 379.139175][T19024] tipc: Started in network mode [ 379.144941][T19024] tipc: Node identity , cluster identity 4711 [ 379.153076][T19024] tipc: Failed to obtain node identity [ 379.159913][T19024] tipc: Enabling of bearer rejected, failed to enable media [ 379.265330][T19034] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3527'. [ 379.639956][T19051] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3531'. [ 382.363811][T16937] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 382.373939][T16937] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 382.496152][T16937] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 382.542073][T16937] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 382.652109][T19071] __nla_validate_parse: 1 callbacks suppressed [ 382.652128][T19071] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3532'. [ 382.740719][T19071] netlink: 'syz.3.3532': attribute type 7 has an invalid length. [ 382.801715][T19071] netlink: 'syz.3.3532': attribute type 8 has an invalid length. [ 382.843622][T19071] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3532'. [ 383.051224][T19085] syzkaller0: entered promiscuous mode [ 383.057001][T19089] netlink: 'syz.4.3537': attribute type 1 has an invalid length. [ 383.070959][T19085] syzkaller0: entered allmulticast mode [ 383.121685][T19089] netlink: 'syz.4.3537': attribute type 2 has an invalid length. [ 383.128180][T19085] netlink: 'syz.0.3538': attribute type 4 has an invalid length. [ 383.181013][T19094] netlink: 'syz.0.3538': attribute type 4 has an invalid length. [ 383.181525][T19089] netlink: 'syz.4.3537': attribute type 2 has an invalid length. [ 383.219536][T19089] netlink: 'syz.4.3537': attribute type 2 has an invalid length. [ 383.243596][T19089] netlink: 'syz.4.3537': attribute type 2 has an invalid length. [ 383.432721][ T6623] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.340723][T19159] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3556'. [ 385.852713][T19178] xt_hashlimit: size too large, truncated to 1048576 [ 386.622333][T19219] netlink: 'syz.4.3570': attribute type 1 has an invalid length. [ 386.684140][T19220] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3570'. [ 386.694494][T19220] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3570'. [ 387.028757][T19219] bond4: entered promiscuous mode [ 387.045395][T19219] 8021q: adding VLAN 0 to HW filter on device bond4 [ 387.473032][T19234] syzkaller0: entered promiscuous mode [ 387.479548][T19234] syzkaller0: entered allmulticast mode [ 390.647779][T19268] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3582'. [ 390.944367][T19280] xt_cgroup: xt_cgroup: no path or classid specified [ 391.124705][T19290] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 391.164038][T19290] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3589'. [ 391.305340][T19290] erspan0: entered promiscuous mode [ 391.321349][T19296] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3592'. [ 391.335156][T19296] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3592'. [ 391.746846][T19306] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3595'. [ 391.886736][T19309] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3597'. [ 391.971689][ T5761] IPVS: starting estimator thread 0... [ 391.980206][T19314] openvswitch: netlink: Missing key (keys=40, expected=80) [ 392.078596][T19317] IPVS: using max 28 ests per chain, 67200 per kthread [ 392.168978][T19325] validate_nla: 1 callbacks suppressed [ 392.169013][T19325] netlink: 'syz.2.3599': attribute type 18 has an invalid length. [ 392.194920][T19323] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3601'. [ 392.248736][T19323] netlink: 'syz.0.3601': attribute type 30 has an invalid length. [ 392.282359][T19323] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3601'. [ 392.459714][T19332] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.3603'. [ 392.579859][T19338] tipc: Started in network mode [ 392.642001][T19338] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 392.720144][T19338] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 392.800307][T19338] tipc: Enabled bearer , priority 10 [ 392.935409][T19346] syzkaller0: entered promiscuous mode [ 392.982508][T19346] syzkaller0: entered allmulticast mode [ 393.049909][T19351] netlink: 766 bytes leftover after parsing attributes in process `syz.0.3607'. [ 393.956639][ T5761] tipc: Node number set to 1 [ 394.178683][T19395] netlink: 'syz.2.3621': attribute type 2 has an invalid length. [ 394.355318][T19395] pim6reg1: entered promiscuous mode [ 394.378312][T19395] pim6reg1: entered allmulticast mode [ 395.523921][T19412] IPVS: set_ctl: invalid protocol: 25 224.0.0.2:65533 [ 395.720746][ T48] wlan1: Trigger new scan to find an IBSS to join [ 396.038283][T19447] __nla_validate_parse: 5 callbacks suppressed [ 396.038321][T19447] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3635'. [ 396.116251][T19449] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3636'. [ 396.130033][T19449] netlink: 100 bytes leftover after parsing attributes in process `syz.2.3636'. [ 396.459546][T19459] netlink: 'syz.4.3638': attribute type 8 has an invalid length. [ 396.514268][T19459] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3638'. [ 396.553841][T19459] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.561564][T19459] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.045923][T19476] gtp2: entered promiscuous mode [ 397.064613][T19476] gtp2: entered allmulticast mode [ 397.083425][T19483] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3647'. [ 397.100348][T19480] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3642'. [ 397.109739][T19483] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3647'. [ 397.113577][T19478] syzkaller0: entered promiscuous mode [ 397.126353][T19478] syzkaller0: entered allmulticast mode [ 397.476836][T19488] pimreg3: entered allmulticast mode [ 397.583989][T19501] netlink: 'syz.4.3652': attribute type 1 has an invalid length. [ 398.083392][T19522] netlink: 'syz.4.3655': attribute type 12 has an invalid length. [ 398.602421][T19541] x_tables: unsorted entry at hook 1 [ 398.611251][T19537] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3659'. [ 398.683034][T19541] netlink: 'syz.4.3658': attribute type 5 has an invalid length. [ 398.962241][T19550] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 399.339396][T19566] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3665'. [ 399.377181][T19567] netlink: 'syz.1.3666': attribute type 3 has an invalid length. [ 399.517956][T19572] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3668'. [ 399.640191][T19575] netlink: 'syz.0.3669': attribute type 2 has an invalid length. [ 399.892364][T19588] netlink: 'syz.0.3673': attribute type 1 has an invalid length. [ 399.961173][T19588] netlink: 'syz.0.3673': attribute type 9 has an invalid length. [ 399.982189][T19588] netlink: 'syz.0.3673': attribute type 6 has an invalid length. [ 400.006290][T19591] syzkaller1: entered promiscuous mode [ 400.025689][T19591] syzkaller1: entered allmulticast mode [ 400.435389][T19604] lo: Caught tx_queue_len zero misconfig [ 400.743153][T19612] netlink: 'syz.4.3681': attribute type 12 has an invalid length. [ 400.759198][ T6623] wlan1: Trigger new scan to find an IBSS to join [ 401.253986][T19631] IPVS: set_ctl: invalid protocol: 1 127.0.0.1:20002 [ 401.659838][T19648] __nla_validate_parse: 6 callbacks suppressed [ 401.659854][T19648] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3693'. [ 401.706585][T16939] wlan1: Creating new IBSS network, BSSID aa:e1:6f:9f:d6:84 [ 401.753789][T19647] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3691'. [ 401.831867][T19647] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 401.879560][T19647] openvswitch: netlink: Actions may not be safe on all matching packets [ 402.255449][T19668] sit2: entered promiscuous mode [ 402.263036][T19668] sit2: entered allmulticast mode [ 402.536270][T19675] netlink: 'syz.2.3699': attribute type 1 has an invalid length. [ 402.606022][T19675] bond3: entered promiscuous mode [ 402.616028][T19675] 8021q: adding VLAN 0 to HW filter on device bond3 [ 402.645084][T19676] bond3: (slave bridge2): making interface the new active one [ 402.654020][T19676] bridge2: entered promiscuous mode [ 402.661158][T19676] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 403.096900][T19694] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3704'. [ 403.111014][T19693] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3704'. [ 403.132737][T19694] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 403.146497][T19694] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 403.165600][T19694] bond0 (unregistering): Released all slaves [ 403.476462][T19703] syzkaller0: entered promiscuous mode [ 403.488725][T19703] syzkaller0: entered allmulticast mode [ 403.526096][T19703] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3707'. [ 404.566176][T19650] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 404.883295][T19712] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3710'. [ 404.946329][T19720] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3711'. [ 405.026132][T19725] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3712'. [ 405.064614][T19730] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3714'. [ 405.240100][T19740] netlink: 272 bytes leftover after parsing attributes in process `syz.4.3710'. [ 405.686883][T19754] netlink: 'syz.3.3717': attribute type 11 has an invalid length. [ 407.142096][T19790] ip6tnl0: Caught tx_queue_len zero misconfig [ 407.947258][T19822] __nla_validate_parse: 2 callbacks suppressed [ 407.993647][T19822] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3733'. [ 408.056661][T19819] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3732'. [ 408.408652][T19845] openvswitch: netlink: IP tunnel dst address not specified [ 408.450722][T19847] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3737'. [ 408.795500][T19859] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3741'. [ 409.061475][T19871] SET target dimension over the limit! [ 409.390863][T16946] bridge_slave_1: left allmulticast mode [ 409.407101][T16946] bridge_slave_1: left promiscuous mode [ 409.444042][T16946] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.540947][T16946] bridge_slave_0: left allmulticast mode [ 409.581511][T16946] bridge_slave_0: left promiscuous mode [ 409.604842][T16946] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.658914][T19890] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 409.892688][T16946] pimreg: left allmulticast mode [ 409.972839][T19897] x_tables: duplicate underflow at hook 1 [ 410.042831][T19901] openvswitch: netlink: Message has 4 unknown bytes. [ 410.324065][T19915] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3756'. [ 410.387049][T16946] bond9 (unregistering): (slave ip6gretap3): Releasing active interface [ 411.206060][T16946] bond13 (unregistering): (slave geneve4): Releasing active interface [ 411.234540][T16946] bond10 (unregistering): (slave geneve3): Releasing active interface [ 411.775291][T16946] bond1 (unregistering): Released all slaves [ 411.820875][T16946] bond2 (unregistering): Released all slaves [ 411.872940][T16946] bond3 (unregistering): Released all slaves [ 411.921545][T16946] bond4 (unregistering): Released all slaves [ 411.944676][T16946] bond5 (unregistering): Released all slaves [ 411.979532][T16946] bond6 (unregistering): Released all slaves [ 412.001847][T16946] bond7 (unregistering): Released all slaves [ 412.022600][T16946] bond8 (unregistering): Released all slaves [ 412.071528][T16946] bond9 (unregistering): Released all slaves [ 412.098646][T16946] bond10 (unregistering): Released all slaves [ 412.133890][T16946] bond0 (unregistering): Released all slaves [ 412.155654][T16946] bond11 (unregistering): Released all slaves [ 412.176650][T16946] bond12 (unregistering): Released all slaves [ 412.198884][T16946] bond13 (unregistering): Released all slaves [ 412.231344][T16946] bond14 (unregistering): Released all slaves [ 412.253377][T16946] bond15 (unregistering): Released all slaves [ 412.276910][T16946] bond16 (unregistering): Released all slaves [ 412.780045][T16946] tipc: Disabling bearer [ 412.838647][T16946] tipc: Disabling bearer [ 412.911267][T16946] tipc: Left network mode [ 413.002102][T19978] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3764'. [ 413.036810][T19982] lo: entered promiscuous mode [ 413.050432][T16946] IPVS: stopping master sync thread 6512 ... [ 413.125647][T19982] netlink: 'syz.4.3764': attribute type 2 has an invalid length. [ 413.171682][T19982] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 413.760451][T20004] netlink: 'syz.4.3770': attribute type 29 has an invalid length. [ 414.174031][T20016] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3772'. [ 414.526453][T20047] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 414.607786][T20055] netlink: 'syz.0.3776': attribute type 3 has an invalid length. [ 414.671523][T20055] netlink: 766 bytes leftover after parsing attributes in process `syz.0.3776'. [ 414.985019][T20062] syzkaller1: entered promiscuous mode [ 415.034599][T20062] syzkaller1: entered allmulticast mode [ 415.095615][T20070] netlink: 22 bytes leftover after parsing attributes in process `syz.1.3780'. [ 415.173468][T20073] netlink: 216 bytes leftover after parsing attributes in process `syz.2.3781'. [ 415.201323][T20073] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3781'. [ 415.330101][T20079] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3782'. [ 415.368987][T20079] tc_dump_action: action bad kind [ 415.574335][T20086] netlink: 252 bytes leftover after parsing attributes in process `syz.4.3782'. [ 415.649797][T20088] netlink: 'syz.3.3784': attribute type 3 has an invalid length. [ 415.752072][T20094] Bluetooth: MGMT ver 1.23 [ 415.979845][T20099] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3786'. [ 416.144228][T20102] netlink: 10 bytes leftover after parsing attributes in process `syz.3.3787'. [ 416.150796][T20104] openvswitch: netlink: IP tunnel dst address not specified [ 416.233458][T20102] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 416.320600][T20106] netlink: 'syz.0.3788': attribute type 1 has an invalid length. [ 416.859925][T20106] 8021q: adding VLAN 0 to HW filter on device bond1 [ 416.968452][T16946] hsr_slave_0: left promiscuous mode [ 416.999247][T16946] hsr_slave_1: left promiscuous mode [ 417.040522][T16946] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 417.075724][T16946] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 417.352727][T20152] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 417.873297][T16946] team0 (unregistering): Port device team_slave_1 removed [ 418.664256][T20189] __nla_validate_parse: 2 callbacks suppressed [ 418.664287][T20189] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3804'. [ 418.764724][T20189] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3804'. [ 419.503755][T20181] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 419.676811][T20185] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 419.763123][T20201] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.774696][T20201] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.807582][T20210] ±ÿª¨úrBº“: renamed from lo (while UP) [ 419.841352][T20217] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 420.065192][T16946] IPVS: stop unused estimator thread 0... [ 420.166343][T20224] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3808'. [ 420.822853][T20251] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3815'. [ 421.142835][T20263] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3815'. [ 421.532056][T20273] netlink: 'syz.0.3819': attribute type 1 has an invalid length. [ 421.866439][T20284] netlink: 'syz.0.3822': attribute type 61 has an invalid length. [ 422.106638][T20294] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3825'. [ 422.542145][T20309] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3830'. [ 422.568880][T20309] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3830'. [ 422.635431][T20313] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3832'. [ 422.652824][T20310] netlink: 14012 bytes leftover after parsing attributes in process `syz.1.3830'. [ 422.736423][T20313] vlan4: entered allmulticast mode [ 422.759561][T20313] mac80211_hwsim hwsim33 wlan0: entered allmulticast mode [ 423.584733][T20347] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 423.895204][T20361] __nla_validate_parse: 2 callbacks suppressed [ 423.895226][T20361] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3840'. [ 423.987079][T20362] IPVS: sed: FWM 3 0x00000003 - no destination available [ 424.215839][T20373] netlink: 'syz.0.3847': attribute type 1 has an invalid length. [ 424.420828][T20379] netlink: 'syz.0.3847': attribute type 1 has an invalid length. [ 424.488675][T20379] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3847'. [ 424.559243][T20365] erspan0: entered promiscuous mode [ 424.581660][T20365] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3840'. [ 424.615458][T20379] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3847'. [ 424.681037][T20379] netlink: 658 bytes leftover after parsing attributes in process `syz.0.3847'. [ 424.807845][T20373] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3847'. [ 425.178501][T20406] veth0: entered promiscuous mode [ 425.265549][T20406] veth0: left promiscuous mode [ 425.850487][T20354] lo speed is unknown, defaulting to 1000 [ 426.167796][T20437] netlink: 'syz.4.3857': attribute type 1 has an invalid length. [ 426.281722][T20440] SET target dimension over the limit! [ 426.387041][T20439] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 426.404196][T20439] syzkaller1: Linktype set failed because interface is up [ 426.415950][ T807] syzkaller1: tun_net_xmit 90 [ 426.483848][T20437] 8021q: adding VLAN 0 to HW filter on device bond5 [ 426.555825][T20442] bond5: (slave geneve3): making interface the new active one [ 426.566600][T20442] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 426.604872][T20453] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3858'. [ 426.979362][T16945] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 427.032046][T16945] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 427.101807][T16945] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 427.173256][T16945] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 427.413883][T20466] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3860'. [ 428.037256][T20491] openvswitch: netlink: Tunnel attr 50 out of range max 16 [ 428.287919][T20499] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3867'. [ 428.461237][T20510] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3871'. [ 428.542964][T20505] vlan1: entered allmulticast mode [ 428.623218][T20505] veth1_virt_wifi: entered allmulticast mode [ 428.696970][T20518] netlink: 'syz.3.3872': attribute type 29 has an invalid length. [ 428.740177][T20518] netlink: 'syz.3.3872': attribute type 29 has an invalid length. [ 428.952319][T20525] __nla_validate_parse: 3 callbacks suppressed [ 428.952338][T20525] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3874'. [ 429.336846][T20540] netlink: 'syz.0.3878': attribute type 21 has an invalid length. [ 429.400274][T20541] netlink: 'syz.0.3878': attribute type 21 has an invalid length. [ 429.436204][T20540] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3878'. [ 429.498699][T20550] netlink: 'syz.0.3878': attribute type 21 has an invalid length. [ 429.503488][T20543] netlink: 'syz.3.3879': attribute type 21 has an invalid length. [ 429.514572][T20541] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3878'. [ 429.539692][T20543] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3879'. [ 429.561369][T20550] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3878'. [ 429.620570][T20540] netlink: 'syz.0.3878': attribute type 4 has an invalid length. [ 429.659624][T20540] netlink: 'syz.0.3878': attribute type 5 has an invalid length. [ 429.720901][T20540] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3878'. [ 429.776458][T20541] netlink: 'syz.0.3878': attribute type 4 has an invalid length. [ 429.809942][T20541] netlink: 'syz.0.3878': attribute type 5 has an invalid length. [ 429.833644][T20541] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3878'. [ 429.861162][T20550] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3878'. [ 430.313329][T20569] netlink: 6024 bytes leftover after parsing attributes in process `syz.4.3886'. [ 430.418005][T20566] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.3884'. [ 432.044380][T20632] vlan2: entered promiscuous mode [ 432.416904][T20646] dvmrp1: entered allmulticast mode [ 434.982822][T20636] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 435.469473][T20677] __nla_validate_parse: 5 callbacks suppressed [ 435.469508][T20677] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3910'. [ 436.221625][T20697] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3917'. [ 436.476100][T20706] Unsupported ieee802154 address type: 0 [ 436.496352][T20706] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 436.660016][T20714] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3921'. [ 436.827746][ T5627] Bluetooth: hci5: command 0x0406 tx timeout [ 437.026433][T20715] ip6t_srh: unknown srh invflags 4000 [ 437.039574][T20715] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3919'. [ 437.236078][T20729] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3923'. [ 437.289195][T20729] tipc: Invalid UDP bearer configuration [ 437.289300][T20729] tipc: Enabling of bearer rejected, failed to enable media [ 437.725390][T20746] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3928'. [ 437.794889][T20746] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3928'. [ 437.858825][T20746] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3928'. [ 437.918852][T20755] validate_nla: 4 callbacks suppressed [ 437.918870][T20755] netlink: 'syz.4.3932': attribute type 1 has an invalid length. [ 438.032265][T20755] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3932'. [ 438.076342][T20755] netlink: 658 bytes leftover after parsing attributes in process `syz.4.3932'. [ 438.127208][T20755] netlink: 'syz.4.3932': attribute type 1 has an invalid length. [ 438.609217][T20786] macvlan0: entered promiscuous mode [ 441.281327][T20867] netlink: 'syz.4.3953': attribute type 39 has an invalid length. [ 441.304937][T20869] netlink: 'syz.4.3953': attribute type 39 has an invalid length. [ 441.424917][T20874] netlink: 'syz.0.3955': attribute type 2 has an invalid length. [ 441.450030][T20874] netlink: 'syz.0.3955': attribute type 11 has an invalid length. [ 441.459350][T20874] __nla_validate_parse: 1 callbacks suppressed [ 441.459385][T20874] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3955'. [ 446.325108][T20863] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.360988][T20863] bridge_slave_0 (unregistering): left allmulticast mode [ 446.384473][T20863] bridge_slave_0 (unregistering): left promiscuous mode [ 446.392532][T20863] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.591823][T20825] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 446.696414][T20825] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 446.776834][T20825] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 446.990846][T20825] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 447.036089][T20891] netlink: 'syz.1.3958': attribute type 4 has an invalid length. [ 447.135622][T20892] nbd: socks must be embedded in a SOCK_ITEM attr [ 447.180374][T20891] netlink: 244 bytes leftover after parsing attributes in process `syz.1.3958'. [ 447.395791][T20901] netlink: 'syz.1.3961': attribute type 39 has an invalid length. [ 447.522803][T20906] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.3962'. [ 447.913421][T20914] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3964'. [ 447.924770][T16938] smbdirect: ib_dev[syz2] removed [ 448.318664][T20927] xt_hashlimit: size too large, truncated to 1048576 [ 448.355578][T20928] xt_hashlimit: size too large, truncated to 1048576 [ 448.850335][T20940] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3971'. [ 449.088175][T20944] netlink: 'syz.1.3973': attribute type 1 has an invalid length. [ 449.112223][T20942] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3972'. [ 449.225238][T20944] 8021q: adding VLAN 0 to HW filter on device bond3 [ 450.091807][T20987] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3984'. [ 450.135306][T20983] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 450.151537][T20983] bond2 (unregistering): Released all slaves [ 450.553376][T21003] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3988'. [ 450.620411][T20997] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3988'. [ 450.817101][T21011] veth0: entered promiscuous mode [ 450.876248][T21011] veth0: left promiscuous mode [ 451.115555][T21018] can: request_module (can-proto-0) failed. [ 451.414856][T21037] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3999'. [ 451.848044][T21044] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4001'. [ 452.029473][ T5626] Bluetooth: hci1: command tx timeout [ 452.193103][ T5626] Bluetooth: hci0: command 0x0406 tx timeout [ 452.195102][ T4943] Bluetooth: hci3: command 0x0406 tx timeout [ 453.062319][T21056] __nla_validate_parse: 2 callbacks suppressed [ 453.062338][T21056] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4004'. [ 453.344388][T21063] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4007'. [ 453.533807][T21066] netlink: 'syz.4.4009': attribute type 1 has an invalid length. [ 453.641371][T21066] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4009'. [ 453.725976][T21066] netlink: 'syz.4.4009': attribute type 5 has an invalid length. [ 453.758834][T21066] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4009'. [ 453.783835][T21066] geneve4: entered promiscuous mode [ 453.839710][T21066] geneve4: entered allmulticast mode [ 453.897262][T16946] netdevsim netdevsim4 netdevsim0: set [1, 2] type 2 family 0 port 256 - 0 [ 453.942427][T16946] netdevsim netdevsim4 netdevsim1: set [1, 2] type 2 family 0 port 256 - 0 [ 453.993285][T16946] netdevsim netdevsim4 netdevsim2: set [1, 2] type 2 family 0 port 256 - 0 [ 454.053051][T16946] netdevsim netdevsim4 netdevsim3: set [1, 2] type 2 family 0 port 256 - 0 [ 454.130073][T21087] netlink: 'syz.1.4014': attribute type 12 has an invalid length. [ 454.231680][T21093] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4017'. [ 454.521490][T21104] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4022'. [ 455.100432][T21130] netlink: 'syz.1.4027': attribute type 11 has an invalid length. [ 455.114197][T21129] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4029'. [ 455.483046][T21141] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4031'. [ 455.506292][T21141] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4031'. [ 455.966880][T21145] workqueue: name exceeds WQ_NAME_LEN. Truncating to: KŠŸu ™crµ±K:‘£ÿˆÌ¥ÝBßÝ£| “¼Ú [ 457.045422][T21169] netlink: 'syz.4.4039': attribute type 1 has an invalid length. [ 457.099506][T21167] netlink: 112 bytes leftover after parsing attributes in process `syz.4.4039'. [ 457.808933][T21194] syzkaller0: entered promiscuous mode [ 457.828413][T21194] syzkaller0: entered allmulticast mode [ 457.849205][T21194] tipc: Started in network mode [ 457.854303][T21194] tipc: Node identity , cluster identity 4711 [ 457.866008][T21194] tipc: Failed to obtain node identity [ 457.882352][T21194] tipc: Enabling of bearer rejected, failed to enable media [ 458.086639][T21200] netlink: 'syz.3.4048': attribute type 4 has an invalid length. [ 459.143801][T21227] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4058'. [ 459.184288][T21225] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4058'. [ 459.437937][T21232] lo: entered promiscuous mode [ 459.478376][T21232] netlink: 'syz.2.4060': attribute type 2 has an invalid length. [ 459.502168][T21232] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 459.623734][T21236] netlink: 'syz.3.4062': attribute type 1 has an invalid length. [ 459.674505][T21237] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4062'. [ 459.751023][T21240] netlink: 100 bytes leftover after parsing attributes in process `syz.4.4063'. [ 460.306677][T21259] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4067'. [ 460.356085][T21266] IPVS: set_ctl: invalid protocol: 108 172.20.20.170:20004 [ 460.664216][T21274] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4071'. [ 461.000992][T21285] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4073'. [ 461.745500][T21307] Cannot find del_set index 49151 as target [ 462.014764][T21319] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4083'. [ 462.364170][T21333] xt_hashlimit: size too large, truncated to 1048576 [ 462.427679][ T5627] Bluetooth: hci4: command 0x0406 tx timeout [ 462.561900][T21336] netlink: 'syz.4.4088': attribute type 1 has an invalid length. [ 462.614418][T21342] netlink: 312 bytes leftover after parsing attributes in process `syz.3.4089'. [ 462.734790][T21336] 8021q: adding VLAN 0 to HW filter on device bond6 [ 463.015644][T21355] macvlan0: entered promiscuous mode [ 463.113256][T21354] netlink: 'syz.1.4093': attribute type 1 has an invalid length. [ 463.130834][T21363] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4096'. [ 463.154550][T21354] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 463.444202][T21372] openvswitch: netlink: Flow key attr not present in new flow. [ 463.685837][T21391] pim6reg: entered allmulticast mode [ 464.129158][T21406] bond2: option tlb_dynamic_lb: mode dependency failed, not supported in mode active-backup(1) [ 464.153257][T21406] bond2 (unregistering): Released all slaves [ 464.473598][T21416] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 464.535166][T21420] __nla_validate_parse: 2 callbacks suppressed [ 464.535189][T21420] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4109'. [ 464.718431][T21427] netlink: 'syz.3.4112': attribute type 4 has an invalid length. [ 464.820766][T21435] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4115'. [ 464.850242][T21426] netlink: 228 bytes leftover after parsing attributes in process `syz.4.4111'. [ 464.872936][T21437] netlink: 187468 bytes leftover after parsing attributes in process `syz.0.4113'. [ 465.403893][T21449] bond7: option arp_all_targets: invalid value (18446744073709551613) [ 465.424145][T21449] bond7 (unregistering): Released all slaves [ 465.926492][T21472] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4126'. [ 466.084372][T21479] tipc: Failed to remove unknown binding: 66,0,0/0:471320110/471320112 [ 466.139868][T21479] tipc: Failed to remove unknown binding: 66,0,0/0:471320110/471320111 [ 466.180872][T21479] tipc: Failed to remove unknown binding: 66,0,0/0:471320110/471320112 [ 466.193586][T21483] netlink: 'syz.2.4128': attribute type 29 has an invalid length. [ 466.228522][T21483] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4128'. [ 466.248616][T21482] netlink: 81 bytes leftover after parsing attributes in process `syz.0.4127'. [ 466.265828][T21479] tipc: Failed to remove unknown binding: 66,0,0/0:471320110/471320111 [ 466.287604][T21485] netlink: 'syz.2.4128': attribute type 29 has an invalid length. [ 466.325875][T21485] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4128'. [ 466.370607][T21479] veth0: entered promiscuous mode [ 466.403227][T21474] veth0: left promiscuous mode [ 466.577116][T21501] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1500) ! [ 466.646693][T21501] syzkaller0: entered promiscuous mode [ 466.670105][T21501] syzkaller0: entered allmulticast mode [ 467.166518][T21510] netlink: 192 bytes leftover after parsing attributes in process `syz.0.4136'. [ 467.372683][T21529] netlink: 9 bytes leftover after parsing attributes in process `syz.4.4141'. [ 467.445768][T21529] 0·: renamed from hsr0 (while UP) [ 467.514224][T21529] 0·: entered allmulticast mode [ 467.553412][T21529] hsr_slave_0: entered allmulticast mode [ 467.603652][T21529] hsr_slave_1: entered allmulticast mode [ 467.655654][T21529] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 467.655715][T21513] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 467.699337][T21513] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 467.806315][T21543] tipc: Enabling of bearer rejected, failed to enable media [ 468.026544][T21550] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 468.159179][T21559] netlink: 'syz.1.4150': attribute type 32 has an invalid length. [ 468.398516][T21572] netlink: 'syz.4.4152': attribute type 39 has an invalid length. [ 468.453795][T21559] bond5: option coupled_control: invalid value (31) [ 468.489912][T21559] bond5 (unregistering): Released all slaves [ 468.743281][T21583] netlink: 'syz.3.4153': attribute type 4 has an invalid length. [ 469.152184][T21598] x_tables: duplicate underflow at hook 1 [ 469.718002][T16946] bond0: (slave bond_slave_0): interface is now down [ 469.762488][T16946] bond0: (slave bond_slave_1): interface is now down [ 469.860746][T21562] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 469.884341][T21562] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 469.950625][ T6608] bond0: (slave bond_slave_0): interface is now down [ 469.976245][ T6608] bond0: (slave bond_slave_1): interface is now down [ 470.153924][ T6608] bond0: (slave bond_slave_0): interface is now down [ 470.163908][ T6608] bond0: (slave bond_slave_1): interface is now down [ 470.275705][T21609] __nla_validate_parse: 10 callbacks suppressed [ 470.275725][T21609] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4158'. [ 470.318429][ T48] bond0: (slave bond_slave_0): interface is now down [ 470.327072][ T48] bond0: (slave bond_slave_1): interface is now down [ 470.399053][T21562] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 470.422817][T21562] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 470.482130][ T111] bond0: (slave bond_slave_0): interface is now down [ 470.499644][ T111] bond0: (slave bond_slave_1): interface is now down [ 470.575046][T21562] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 470.599412][T21562] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 470.649264][T16939] bond0: (slave bond_slave_0): interface is now down [ 470.682189][T16939] bond0: (slave bond_slave_1): interface is now down [ 470.726561][T21619] netlink: 'syz.0.4160': attribute type 5 has an invalid length. [ 470.736027][T21562] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 470.760088][T21562] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 470.859918][T16939] bond0: (slave bond_slave_0): interface is now down [ 470.862290][T21562] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 470.896406][T16939] bond0: (slave bond_slave_1): interface is now down [ 470.919549][T21562] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 470.975210][T21626] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4163'. [ 470.986074][T20050] IPVS: starting estimator thread 0... [ 471.030858][T16939] bond0: now running without any active interface! [ 471.098516][T21633] IPVS: using max 31 ests per chain, 74400 per kthread [ 471.170063][T21630] syzkaller0: entered promiscuous mode [ 471.185038][T21630] syzkaller0: entered allmulticast mode [ 471.483327][T21650] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 471.495319][T21650] openvswitch: netlink: Missing key (keys=40, expected=100) [ 471.591698][T21648] IPVS: set_ctl: invalid protocol: 4 172.20.20.170:20003 [ 471.655159][T21641] bond2: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 471.763007][T21641] bond2 (unregistering): Released all slaves [ 472.265575][T21682] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4177'. [ 472.419715][T21690] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 472.490724][T21691] netlink: 'syz.1.4180': attribute type 8 has an invalid length. [ 472.775156][T21705] netlink: 'syz.3.4185': attribute type 6 has an invalid length. [ 472.799234][T21703] xt_cgroup: path and classid specified [ 472.824953][T21695] x_tables: duplicate entry at hook 2 [ 473.356989][T21728] netlink: 'syz.2.4192': attribute type 9 has an invalid length. [ 473.399498][T21728] netlink: 'syz.2.4192': attribute type 6 has an invalid length. [ 473.433056][T21734] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4193'. [ 473.504086][T21734] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4193'. [ 473.568973][T21739] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4195'. [ 473.601937][T21734] netlink: 288 bytes leftover after parsing attributes in process `syz.4.4193'. [ 473.884873][T21754] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4201'. [ 474.321835][T21767] netlink: 160 bytes leftover after parsing attributes in process `syz.0.4206'. [ 474.334917][T21767] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4206'. [ 474.373032][T21767] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 474.682005][T21773] veth0: entered promiscuous mode [ 475.306777][T21800] syzkaller1: entered promiscuous mode [ 475.348552][T21800] syzkaller1: entered allmulticast mode [ 475.686351][T21810] netlink: 'syz.2.4221': attribute type 1 has an invalid length. [ 475.951011][T21822] __nla_validate_parse: 6 callbacks suppressed [ 475.951029][T21822] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4223'. [ 476.155961][T16940] bridge_slave_1: left allmulticast mode [ 476.181317][T16940] bridge_slave_1: left promiscuous mode [ 476.207016][T16940] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.269657][T16940] bridge_slave_0: left allmulticast mode [ 476.280517][T16940] bridge_slave_0: left promiscuous mode [ 476.291444][T16940] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.377210][T21845] netlink: 596 bytes leftover after parsing attributes in process `syz.1.4228'. [ 476.460506][T21851] netlink: 220 bytes leftover after parsing attributes in process `syz.0.4231'. [ 476.539655][T16940] bond1 (unregistering): (slave ip6gre1): Releasing backup interface [ 476.571831][T16940] ip6gre1 (unregistering): left promiscuous mode [ 476.610723][T21855] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4234'. [ 477.017223][T16940] bond5 (unregistering): (slave gretap2): Releasing backup interface [ 477.043179][T16940] batman_adv: batadv0: Removing interface: gretap4 [ 477.255245][T16940] bond4 (unregistering): (slave bridge2): Releasing active interface [ 477.319119][T16940] bond7 (unregistering): (slave bridge3): Releasing backup interface [ 477.327689][T16940] bridge3 (unregistering): left promiscuous mode [ 477.364799][T16940] bond8 (unregistering): (slave bridge4): Releasing backup interface [ 477.373688][T16940] bridge4 (unregistering): left promiscuous mode [ 477.458380][T16940] bond1 (unregistering): Released all slaves [ 477.479419][T16940] bond2 (unregistering): Released all slaves [ 477.504526][T16940] bond3 (unregistering): Released all slaves [ 477.533073][T16940] bond4 (unregistering): Released all slaves [ 477.556762][T16940] bond5 (unregistering): (slave bond6): Releasing backup interface [ 477.573310][T16940] bond5 (unregistering): Released all slaves [ 477.593631][T16940] bond6 (unregistering): Released all slaves [ 477.614135][T16940] bond7 (unregistering): Released all slaves [ 477.635981][T16940] bond8 (unregistering): Released all slaves [ 477.664128][T16940] bond9 (unregistering): (slave veth5): Releasing active interface [ 477.678811][T16940] bond9 (unregistering): Released all slaves [ 477.701094][T16940] bond10 (unregistering): Released all slaves [ 477.879424][T21869] bond4: option lp_interval: invalid value (0) [ 477.887171][T21869] bond4: option lp_interval: allowed values 1 - 2147483647 [ 477.929416][T21869] bond4 (unregistering): Released all slaves [ 477.963659][T16940] : left promiscuous mode [ 478.146910][T21886] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4240'. [ 478.160722][T21886] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4240'. [ 478.526746][T21896] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4244'. [ 478.545884][T21899] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4242'. [ 478.611777][T21896] bond5: entered promiscuous mode [ 478.630607][T21899] netlink: 'syz.2.4242': attribute type 1 has an invalid length. [ 478.673331][T21899] netlink: 'syz.2.4242': attribute type 2 has an invalid length. [ 478.712071][T21896] macvlan2: entered promiscuous mode [ 478.718660][T21896] macvlan2: entered allmulticast mode [ 478.738958][T21896] bond5: (slave macvlan2): Opening slave failed [ 478.781046][T21908] netlink: 'syz.0.4245': attribute type 1 has an invalid length. [ 478.940431][T21908] bond2: entered promiscuous mode [ 478.946066][T21908] 8021q: adding VLAN 0 to HW filter on device bond2 [ 479.020231][T21918] netlink: 'syz.4.4248': attribute type 1 has an invalid length. [ 479.108829][T21920] xt_CT: You must specify a L4 protocol and not use inversions on it [ 479.192454][T21913] bond4: option fail_over_mac: invalid value (16) [ 479.266130][T21913] bond4 (unregistering): Released all slaves [ 479.317605][T21928] netlink: 'syz.0.4251': attribute type 83 has an invalid length. [ 479.358300][T21930] netlink: 'syz.3.4252': attribute type 4 has an invalid length. [ 479.373176][T21928] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4251'. [ 479.386920][T21930] netlink: 17 bytes leftover after parsing attributes in process `syz.3.4252'. [ 479.499499][T21918] 8021q: adding VLAN 0 to HW filter on device bond7 [ 479.911526][T21944] debugfs: 'KŠŸu ™crµ±K:‘£ÿˆÌ¥ÝBßÝ£| “¼ÚÞlS·œ-!' already exists in 'ieee80211' [ 480.001496][T21952] netlink: 'syz.1.4258': attribute type 9 has an invalid length. [ 480.046259][T21952] netlink: 'syz.1.4258': attribute type 6 has an invalid length. [ 480.219933][T21960] syzkaller0: entered promiscuous mode [ 480.240805][T21960] syzkaller0: entered allmulticast mode [ 480.541821][T21972] IPv6: NLM_F_CREATE should be specified when creating new route [ 480.723712][T21977] netlink: 'syz.2.4265': attribute type 1 has an invalid length. [ 481.203887][T21977] 8021q: adding VLAN 0 to HW filter on device bond4 [ 481.215040][T22002] __nla_validate_parse: 3 callbacks suppressed [ 481.215058][T22002] netlink: 556 bytes leftover after parsing attributes in process `syz.0.4271'. [ 481.330546][T21984] netlink: 'syz.4.4266': attribute type 4 has an invalid length. [ 481.353308][T22004] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4271'. [ 482.050633][T22028] macvtap1: entered allmulticast mode [ 482.056727][T22028] veth0_macvtap: entered allmulticast mode [ 482.151528][T16940] hsr_slave_0: left promiscuous mode [ 482.170894][T16940] hsr_slave_1: left promiscuous mode [ 482.664310][T16940] team0 (unregistering): Port device team_slave_1 removed [ 482.694954][T16940] team0 (unregistering): Port device team_slave_0 removed [ 482.941618][T16937] smbdirect: ib_dev[syz0] removed [ 483.123395][T22043] 8021q: adding VLAN 0 to HW filter on device bond5 [ 483.179859][T22055] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4286'. [ 483.190306][T22055] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4286'. [ 483.294752][T22059] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4287'. [ 483.355012][T22064] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4287'. [ 483.433351][T22064] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4287'. [ 483.602994][T22059] bond8: (slave bridge4): Enslaving as an active interface with an up link [ 483.735897][T22059] macvlan4: entered promiscuous mode [ 483.762904][T22059] macvlan4: entered allmulticast mode [ 483.790847][T22059] bond8: entered promiscuous mode [ 483.806733][T22059] bridge4: entered promiscuous mode [ 483.835554][T22059] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 483.874408][T22059] bond8: left promiscuous mode [ 483.892968][T22059] bridge4: left promiscuous mode [ 483.905960][T22089] skbuff: bad partial csum: csum=65535/2 headroom=4 headlen=65543 [ 484.235621][T22099] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4296'. [ 484.364994][T22105] validate_nla: 3 callbacks suppressed [ 484.365013][T22105] netlink: 'syz.0.4298': attribute type 1 has an invalid length. [ 484.635878][T22105] 8021q: adding VLAN 0 to HW filter on device bond3 [ 484.638376][T22114] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 484.683885][T16940] IPVS: stop unused estimator thread 0... [ 484.941784][T22128] ksmbd: Unknown IPC event: 3, ignore. [ 485.015537][T16940] bridge_slave_1: left allmulticast mode [ 485.034646][T16940] bridge_slave_1: left promiscuous mode [ 485.059446][T16940] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.073487][T22133] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4306'. [ 485.099112][T22134] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4307'. [ 485.130436][T16940] veth0_to_bond: left allmulticast mode [ 485.137026][T16940] veth0_to_bond: left promiscuous mode [ 485.145027][T16940] bridge6: port 2(veth0_to_bond) entered disabled state [ 485.169068][T16940] veth7: left allmulticast mode [ 485.174479][T16940] veth7: left promiscuous mode [ 485.181528][T16940] bridge6: port 1(veth7) entered disabled state [ 485.259279][T16940] tipc: Resetting bearer [ 485.602259][T16940] tipc: Disabling bearer [ 485.833530][T16940] bond5 (unregistering): (slave geneve4): Releasing active interface [ 486.053016][T16940] bond0 (unregistering): (slave bridge3): Releasing backup interface [ 486.106600][T16940] bond1 (unregistering): (slave bridge4): Releasing backup interface [ 486.115540][T16940] bridge4 (unregistering): left promiscuous mode [ 486.451148][T16937] smc: removing ib device sy‡1 [ 486.462893][T16940] .`¹ (unregistering): (slave bond_slave_0): Releasing backup interface [ 486.474190][T16940] bond_slave_0: left allmulticast mode [ 486.488395][T16940] .`¹ (unregistering): (slave bond_slave_1): Releasing backup interface [ 486.498729][T16940] bond_slave_1: left allmulticast mode [ 486.508469][T16940] .`¹ (unregistering): Released all slaves [ 486.535986][T16940] bond0 (unregistering): Released all slaves [ 486.565365][T16940] bond1 (unregistering): Released all slaves [ 486.598839][T16940] bond2 (unregistering): Released all slaves [ 486.618468][T16940] bond3 (unregistering): Released all slaves [ 486.642709][T16940] bond4 (unregistering): Released all slaves [ 486.664561][T16940] bond5 (unregistering): Released all slaves [ 486.887906][T22134] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 486.955429][T22153] netlink: 'syz.4.4311': attribute type 33 has an invalid length. [ 487.065864][T22158] netlink: 'syz.0.4313': attribute type 30 has an invalid length. [ 487.156077][T22162] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4314'. [ 487.249640][T16937] smbdirect: ib_dev[sy‡1] removed [ 487.263084][T22153] bond9: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 487.303578][T22153] bond9 (unregistering): Released all slaves [ 487.364417][T22172] netlink: 'syz.2.4315': attribute type 1 has an invalid length. [ 487.552329][T22158] bond4: option arp_missed_max: invalid value (0) [ 487.572275][T22158] bond4: option arp_missed_max: allowed values 1 - 255 [ 487.606490][T22158] bond4 (unregistering): Released all slaves [ 487.934969][T22162] bond5: option xmit_hash_policy: invalid value (64) [ 487.955912][T22186] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4317'. [ 487.991429][T22162] bond5 (unregistering): Released all slaves [ 488.345856][T22172] 8021q: adding VLAN 0 to HW filter on device bond6 [ 489.113421][T22216] netlink: 'syz.0.4326': attribute type 10 has an invalid length. [ 489.140120][T22212] netlink: 'syz.4.4324': attribute type 1 has an invalid length. [ 489.528036][T22231] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4329'. [ 489.695856][T22235] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4330'. [ 489.801617][T22238] netlink: 'syz.2.4331': attribute type 1 has an invalid length. [ 490.296730][T22238] 8021q: adding VLAN 0 to HW filter on device bond7 [ 490.341616][T22256] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4335'. [ 490.929646][T22257] bond6: entered promiscuous mode [ 490.958001][T22257] bond6: entered allmulticast mode [ 491.030824][T22283] sctp: [Deprecated]: syz.2.4341 (pid 22283) Use of struct sctp_assoc_value in delayed_ack socket option. [ 491.030824][T22283] Use struct sctp_sack_info instead [ 491.317047][T22290] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4342'. [ 491.611546][T16940] tipc: Left network mode [ 492.034495][T22300] netlink: 'syz.3.4345': attribute type 7 has an invalid length. [ 492.115049][T22300] netlink: 140 bytes leftover after parsing attributes in process `syz.3.4345'. [ 492.656753][T22336] netlink: 'syz.0.4351': attribute type 75 has an invalid length. [ 492.920564][T22349] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4354'. [ 492.989032][T22351] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4355'. [ 493.694311][T16940] hsr_slave_0: left promiscuous mode [ 493.733996][T16940] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 493.743126][T22383] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4364'. [ 493.766187][T16940] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 493.778755][T16940] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 493.898329][T22389] netlink: 212360 bytes leftover after parsing attributes in process `syz.0.4365'. [ 493.992718][T16940] veth0_virt_wifi: left allmulticast mode [ 494.009296][T16940] veth0_virt_wifi: left promiscuous mode [ 494.842067][T16940] team0 (unregistering): Port device team_slave_1 removed [ 494.845127][T22419] nbd: must specify an index to disconnect [ 495.097246][T22421] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4374'. [ 495.160495][T22378] ip6erspan0: entered allmulticast mode [ 495.351068][T22423] bond8: entered promiscuous mode [ 495.404342][T22423] bond8: entered allmulticast mode [ 495.454957][T22431] netlink: 156 bytes leftover after parsing attributes in process `syz.4.4378'. [ 495.554613][T22431] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4378'. [ 495.722513][T22442] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4380'. [ 495.797406][T22443] netlink: 'syz.2.4381': attribute type 11 has an invalid length. [ 495.828098][T22443] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.4381'. [ 495.882663][T16940] IPVS: stop unused estimator thread 0... [ 495.932223][T22447] netlink: 'syz.2.4381': attribute type 6 has an invalid length. [ 496.025357][T22449] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 496.064714][T22449] syzkaller0: entered promiscuous mode [ 496.081866][T22449] syzkaller0: entered allmulticast mode [ 496.460822][T16940] bond9 (unregistering): (slave ip6gre1): Releasing backup interface [ 496.469913][T16940] ip6gre1 (unregistering): left promiscuous mode [ 496.786460][T16940] bond7 (unregistering): (slave geneve2): Releasing active interface [ 496.805397][T16940] smc: removing net device geneve1 with user defined pnetid SYZ0 [ 497.004746][T16940] bond8 (unregistering): (slave bridge4): Releasing active interface [ 497.055691][T16940] bond10 (unregistering): (slave bridge5): Releasing active interface [ 497.104947][T16940] bond13 (unregistering): (slave bridge6): Releasing backup interface [ 497.390586][T16940] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 497.399887][T16940] bond_slave_0: left promiscuous mode [ 497.405471][T16940] bond_slave_0: left allmulticast mode [ 497.413623][T16940] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 497.428378][T16940] bond_slave_1: left promiscuous mode [ 497.433980][T16940] bond_slave_1: left allmulticast mode [ 497.441806][T16940] bond0 (unregistering): Released all slaves [ 497.455080][T16940] bond1 (unregistering): Released all slaves [ 497.473887][T16940] bond2 (unregistering): Released all slaves [ 497.492972][T16940] bond3 (unregistering): Released all slaves [ 497.516231][T16940] bond4 (unregistering): Released all slaves [ 497.544292][T16940] bond5 (unregistering): Released all slaves [ 497.566644][T16940] bond6 (unregistering): Released all slaves [ 497.591174][T16940] bond7 (unregistering): Released all slaves [ 497.614546][T16940] bond8 (unregistering): Released all slaves [ 497.645076][T16940] bond9 (unregistering): Released all slaves [ 497.665124][T16940] bond10 (unregistering): Released all slaves [ 497.685989][T16940] bond11 (unregistering): Released all slaves [ 497.712915][T16940] bond12 (unregistering): Released all slaves [ 497.735003][T16940] bond13 (unregistering): Released all slaves [ 497.755827][T16940] bond14 (unregistering): Released all slaves [ 497.786370][T16940] bond15 (unregistering): Released all slaves [ 497.811495][T22460] tipc: Started in network mode [ 497.816474][T22460] tipc: Node identity 2ae02e391001, cluster identity 4711 [ 497.831592][T22460] tipc: Enabled bearer , priority 0 [ 497.872006][T22467] sit0: entered promiscuous mode [ 497.900406][T22467] netlink: 'syz.1.4386': attribute type 1 has an invalid length. [ 497.910869][T22467] netlink: 1 bytes leftover after parsing attributes in process `syz.1.4386'. [ 497.937013][T22448] tipc: Resetting bearer [ 498.146184][T22448] tipc: Disabling bearer [ 498.186789][T16940] tipc: Left network mode [ 498.191141][T22492] ipt_REJECT: TCP_RESET invalid for non-tcp [ 498.229372][T22494] netlink: 'syz.2.4393': attribute type 1 has an invalid length. [ 498.341902][T16940] IPVS: stopping backup sync thread 7015 ... [ 498.414513][T22494] 8021q: adding VLAN 0 to HW filter on device bond9 [ 498.653124][T22511] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4398'. [ 498.715649][T22511] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4398'. [ 498.750470][T22511] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4398'. [ 498.778947][T22508] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4395'. [ 498.803096][T22515] xt_policy: output policy not valid in PREROUTING and INPUT [ 498.923250][T22515] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4399'. [ 498.993222][T22509] syzkaller0: entered promiscuous mode [ 499.004671][T22509] syzkaller0: entered allmulticast mode [ 501.311333][ T1314] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 502.951925][T22579] netlink: 212340 bytes leftover after parsing attributes in process `syz.4.4412'. [ 502.962847][T22579] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 503.008397][T16940] hsr_slave_0: left promiscuous mode [ 503.031438][T16940] hsr_slave_1: left promiscuous mode [ 503.040291][T16940] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 503.049983][T16940] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 503.058673][T16940] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 503.066304][T16940] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 503.083454][T22583] xt_l2tp: missing protocol rule (udp|l2tpip) [ 503.096832][T16940] veth1_macvtap: left promiscuous mode [ 503.103828][T16940] veth0_macvtap: left promiscuous mode [ 504.034322][T22615] netlink: 'syz.0.4423': attribute type 1 has an invalid length. [ 504.137495][T22615] 8021q: adding VLAN 0 to HW filter on device bond4 [ 504.152706][T22617] bond4: (slave veth0_to_bond): making interface the new active one [ 504.166770][T22617] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 504.181250][T16940] IPVS: stop unused estimator thread 0... [ 504.190387][T22615] bond4: entered promiscuous mode [ 504.196722][T22615] veth0_to_bond: entered promiscuous mode [ 504.206114][T22615] bond4: entered allmulticast mode [ 504.212324][T22615] veth0_to_bond: entered allmulticast mode [ 505.931545][T22593] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 505.956843][T22629] netlink: 'syz.0.4426': attribute type 1 has an invalid length. [ 506.154583][T22652] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4427'. [ 506.177508][T22652] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 506.219901][T22657] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.4430'. [ 506.257635][T22659] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4429'. [ 506.271225][T22659] netlink: 'syz.3.4429': attribute type 1 has an invalid length. [ 506.280218][T22659] netlink: 'syz.3.4429': attribute type 1 has an invalid length. [ 506.290783][T22659] netlink: 'syz.3.4429': attribute type 2 has an invalid length. [ 506.322342][T22659] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4429'. [ 506.496368][T22665] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4434'. [ 506.816607][T22686] netlink: 88 bytes leftover after parsing attributes in process `syz.1.4438'. [ 507.001844][T22690] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4439'. [ 507.054405][T22690] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4439'. [ 507.083405][T22690] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4439'. [ 507.179710][T22690] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4439'. [ 507.259857][T22710] netlink: 'syz.2.4442': attribute type 3 has an invalid length. [ 507.310068][T22710] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 507.589887][T22716] bond0: entered promiscuous mode [ 507.617765][T22716] bond_slave_0: entered promiscuous mode [ 507.650593][T22716] bond_slave_1: entered promiscuous mode [ 507.672735][T22716] gretap0: entered promiscuous mode [ 507.701134][T22716] hsr1: entered promiscuous mode [ 508.060538][T22742] netlink: 'syz.0.4448': attribute type 1 has an invalid length. [ 508.441433][T22757] Cannot find set identified by id 1 to match [ 508.450407][T22751] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 508.833416][T22775] 8021q: adding VLAN 0 to HW filter on device bond5 [ 508.843026][T22776] IPv6: Can't replace route, no match found [ 509.990832][T22823] netlink: 'syz.1.4472': attribute type 9 has an invalid length. [ 510.248907][T22833] netlink: 'syz.1.4476': attribute type 1 has an invalid length. [ 510.399708][T22836] netlink: 'syz.0.4477': attribute type 2 has an invalid length. [ 510.618456][T22841] netlink: 'syz.2.4478': attribute type 1 has an invalid length. [ 511.376092][T22869] sctp: [Deprecated]: syz.0.4488 (pid 22869) Use of int in maxseg socket option. [ 511.376092][T22869] Use struct sctp_assoc_value instead [ 511.406301][T22869] __nla_validate_parse: 14 callbacks suppressed [ 511.406319][T22869] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4488'. [ 511.590868][T22878] netlink: 'syz.0.4491': attribute type 4 has an invalid length. [ 511.633505][T22878] netlink: 'syz.0.4491': attribute type 4 has an invalid length. [ 511.758805][T22880] bridge: RTM_NEWNEIGH with invalid state 0x20 [ 511.841852][T22885] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4494'. [ 512.089374][T22900] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4495'. [ 512.090672][T16946] nci: nci_rsp_packet: unsupported rsp opcode 0xf00 [ 512.178123][T22909] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 512.212388][T22900] pimreg: entered allmulticast mode [ 512.277171][T22913] bridge_slave_0: left allmulticast mode [ 512.293046][T22913] bridge_slave_0: left promiscuous mode [ 512.301253][T22913] bridge0: port 1(bridge_slave_0) entered disabled state [ 512.345968][T22913] bridge_slave_1: left allmulticast mode [ 512.396804][T22913] bridge_slave_1: left promiscuous mode [ 512.426467][T22913] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.489287][T22913] bond0: (slave bond_slave_0): Releasing backup interface [ 512.526578][T22913] bond0: (slave bond_slave_1): Releasing backup interface [ 512.559838][T22913] team0: Port device team_slave_0 removed [ 512.573752][T22913] team0: Port device team_slave_1 removed [ 512.585400][T22913] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 512.596975][T22913] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 512.606961][T22913] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 512.615099][T22913] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 512.625392][T22913] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 514.917086][T22889] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 515.163189][T22939] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4507'. [ 515.273406][T22950] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4509'. [ 515.451950][T22960] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4513'. [ 515.472192][T22956] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4510'. [ 515.495375][T22960] IPVS: Unknown mcast interface: vcan0 [ 515.720538][T22969] netlink: 'syz.2.4517': attribute type 20 has an invalid length. [ 515.741003][T22969] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4517'. [ 515.759350][T22968] xt_hashlimit: size too large, truncated to 1048576 [ 515.839870][T22969] netlink: 'syz.2.4517': attribute type 20 has an invalid length. [ 515.859606][T22969] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4517'. [ 515.971528][T22972] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4515'. [ 516.193783][T22994] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 516.496399][T23005] netlink: 'syz.4.4525': attribute type 1 has an invalid length. [ 516.606219][T23005] 8021q: adding VLAN 0 to HW filter on device bond9 [ 516.633558][T23020] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4526'. [ 516.665624][T23020] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4526'. [ 516.697821][T23022] netlink: 112 bytes leftover after parsing attributes in process `syz.1.4528'. [ 517.065336][T23035] syzkaller0: entered promiscuous mode [ 517.078740][T23035] syzkaller0: entered allmulticast mode [ 517.301792][T23056] netlink: 277 bytes leftover after parsing attributes in process `syz.0.4540'. [ 517.585732][T23064] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4543'. [ 517.699920][T23068] --map-set only usable from mangle table [ 517.725029][T23064] bond10: invalid ARP target 0.0.0.0 specified for addition [ 517.737909][T23064] bond10: option arp_ip_target: invalid value (0) [ 517.784278][T23064] bond10 (unregistering): Released all slaves [ 518.214106][T23099] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4551'. [ 518.623930][ T6608] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 518.655852][ T6608] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 519.086679][T23136] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.4562'. [ 519.109967][T23139] netlink: 'syz.3.4561': attribute type 1 has an invalid length. [ 519.124187][T23136] netlink: Conntrack attr has 3 unknown bytes [ 519.125424][T23138] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 519.179301][T23139] bond8: entered promiscuous mode [ 519.184930][T23139] 8021q: adding VLAN 0 to HW filter on device bond8 [ 519.264750][T23143] 8021q: adding VLAN 0 to HW filter on device bond8 [ 519.273112][T23143] bond8: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 519.284116][T23143] bond8: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 519.306894][T23143] bond8: (slave ip6gre1): making interface the new active one [ 519.310229][T23139] netlink: 203980 bytes leftover after parsing attributes in process `syz.3.4561'. [ 519.328454][T23143] ip6gre1: entered promiscuous mode [ 519.353662][T23143] bond8: (slave ip6gre1): Enslaving as an active interface with an up link [ 519.432803][T23139] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4561'. [ 519.443439][T23139] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4561'. [ 519.562954][T23153] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 519.589309][T23153] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 519.772946][T23153] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 519.784950][T23168] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 520.669510][T23199] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 520.671162][T16940] tipc: Subscription rejected, illegal request [ 520.784443][T23201] netlink: 'syz.1.4581': attribute type 1 has an invalid length. [ 521.422636][T23229] netlink: 'syz.0.4590': attribute type 3 has an invalid length. [ 521.440840][T23232] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 521.461345][T23232] batadv_slave_0: entered promiscuous mode [ 521.822247][T23245] netlink: 'syz.4.4593': attribute type 11 has an invalid length. [ 522.242832][T23257] __nla_validate_parse: 10 callbacks suppressed [ 522.242870][T23257] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4597'. [ 522.307337][T23259] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4598'. [ 522.589520][T23269] bridge0: port 1(syz_tun) entered blocking state [ 522.621175][T23269] bridge0: port 1(syz_tun) entered disabled state [ 522.636578][T23269] syz_tun: entered allmulticast mode [ 522.647754][T23269] syz_tun: entered promiscuous mode [ 522.687105][T23269] bridge0: port 1(syz_tun) entered blocking state [ 522.694515][T23269] bridge0: port 1(syz_tun) entered forwarding state [ 522.824124][T23274] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4603'. [ 523.243437][T23290] netdevsim netdevsim1: Direct firmware load for . failed with error -2 [ 523.271611][T23290] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 523.664191][T23298] netlink: 148 bytes leftover after parsing attributes in process `syz.4.4610'. [ 523.733808][T23298] netlink: 'syz.4.4610': attribute type 1 has an invalid length. [ 523.754921][T23298] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4610'. [ 523.941699][T23306] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4612'. [ 524.383239][T23324] syzkaller0: entered promiscuous mode [ 524.390013][T23324] syzkaller0: entered allmulticast mode [ 524.410249][T23324] tc action pedit offset must be on 32 bit boundaries [ 527.220110][T23316] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 527.726954][T23360] netlink: 'syz.0.4625': attribute type 10 has an invalid length. [ 527.760280][T23360] syz_tun: entered promiscuous mode [ 527.835367][T23360] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 527.918369][T23374] netlink: 'syz.3.4630': attribute type 1 has an invalid length. [ 527.947233][T23373] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4629'. [ 528.044027][T23374] 8021q: adding VLAN 0 to HW filter on device bond9 [ 528.054253][ T6625] bond0: (slave syz_tun): interface is now down [ 528.080397][ T6625] bond0: now running without any active interface! [ 528.352384][T23391] bond10: entered promiscuous mode [ 528.359453][T23391] bond10: entered allmulticast mode [ 528.365255][T23391] 8021q: adding VLAN 0 to HW filter on device bond10 [ 528.376655][T23394] lo speed is unknown, defaulting to 1000 [ 528.440167][T23399] netlink: 220 bytes leftover after parsing attributes in process `syz.3.4636'. [ 528.465126][T23399] netlink: 220 bytes leftover after parsing attributes in process `syz.3.4636'. [ 528.500349][T23394] lo speed is unknown, defaulting to 1000 [ 528.561310][T23399] bridge4: entered promiscuous mode [ 528.581146][T23399] bridge4: entered allmulticast mode [ 528.596122][T23405] netlink: 80 bytes leftover after parsing attributes in process `syz.1.4635'. [ 528.612026][T23394] lo speed is unknown, defaulting to 1000 [ 528.926758][T23409] bond11: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 528.965703][T23409] bond11 (unregistering): Released all slaves [ 529.087154][T23425] netlink: 3648 bytes leftover after parsing attributes in process `syz.3.4641'. [ 529.150999][T23425] netlink: 3648 bytes leftover after parsing attributes in process `syz.3.4641'. [ 529.320352][T23441] netlink: 'syz.4.4643': attribute type 1 has an invalid length. [ 529.420504][T23441] 8021q: adding VLAN 0 to HW filter on device bond11 [ 529.587631][T23456] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 529.609966][T23394] infiniband syz0: set active [ 529.614777][T20049] lo speed is unknown, defaulting to 1000 [ 529.624187][T23394] infiniband syz0: added lo [ 529.635191][T23394] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 529.640548][T23394] infiniband syz0: Couldn't open port 1 [ 529.655337][T23394] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 529.671124][T23394] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 529.688855][T23394] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 529.734519][T23394] RDS/IB: syz0: added [ 529.742142][T23394] smc: adding ib device syz0 with port count 1 [ 529.748468][T23394] smc: ib device syz0 port 1 has no pnetid [ 529.758897][T20049] lo speed is unknown, defaulting to 1000 [ 529.767074][T23394] lo speed is unknown, defaulting to 1000 [ 530.054163][T23394] lo speed is unknown, defaulting to 1000 [ 530.279951][T23394] lo speed is unknown, defaulting to 1000 [ 530.492156][T23394] lo speed is unknown, defaulting to 1000 [ 530.704509][T23394] lo speed is unknown, defaulting to 1000 [ 531.058777][T23464] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4648'. [ 531.068539][T23465] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4648'. [ 532.050848][T23428] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 532.374180][T23488] netlink: 'syz.4.4656': attribute type 1 has an invalid length. [ 532.531289][T23488] 8021q: adding VLAN 0 to HW filter on device bond12 [ 532.840500][T23508] netlink: 620 bytes leftover after parsing attributes in process `syz.4.4661'. [ 532.863946][T23508] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 532.958093][T23513] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4662'. [ 532.968655][T23513] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4662'. [ 533.036381][T23513] "syz.0.4662" (23513) uses obsolete ecb(arc4) skcipher [ 533.054338][T23515] netlink: 'syz.4.4663': attribute type 5 has an invalid length. [ 533.816213][T23550] veth0_vlan: mtu less than device minimum [ 534.136930][T23559] block nbd1: Unsupported socket: should be TCP or UNIX. [ 534.275640][T23561] xt_CT: You must specify a L4 protocol and not use inversions on it [ 534.320780][T23563] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4673'. [ 534.703820][T23576] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4680'. [ 535.214752][T23593] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4684'. [ 535.242434][T23593] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4684'. [ 535.286425][T23602] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4685'. [ 535.592883][T23612] ip6tnl3: entered promiscuous mode [ 535.605233][T23608] veth0_macvtap: Caught tx_queue_len zero misconfig [ 535.624401][T23610] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 535.652343][T23613] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4690'. [ 535.675989][T23610] tipc: Enabling not permitted [ 535.688891][T23610] tipc: Enabling of bearer rejected, failed to enable media [ 535.829865][T23617] netem: change failed [ 535.841832][T23618] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4691'. [ 535.863134][T23617] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4691'. [ 535.897972][T23618] netlink: 'syz.3.4691': attribute type 1 has an invalid length. [ 535.937619][T23618] netlink: 'syz.3.4691': attribute type 2 has an invalid length. [ 535.970314][T23617] netlink: 'syz.3.4691': attribute type 1 has an invalid length. [ 535.991683][T23617] netlink: 'syz.3.4691': attribute type 2 has an invalid length. [ 536.054508][T23623] ipt_ECN: cannot use operation on non-tcp rule [ 536.080681][T23626] netlink: 'syz.2.4694': attribute type 1 has an invalid length. [ 536.232860][T23626] 8021q: adding VLAN 0 to HW filter on device bond10 [ 536.367227][T23633] bond10: (slave geneve3): making interface the new active one [ 536.428665][T23633] bond10: (slave geneve3): Enslaving as an active interface with an up link [ 536.605064][T23654] netlink: 'syz.1.4702': attribute type 9 has an invalid length. [ 536.858951][T23665] pim6reg527: entered allmulticast mode [ 537.168290][T23686] sctp: [Deprecated]: syz.1.4709 (pid 23686) Use of struct sctp_assoc_value in delayed_ack socket option. [ 537.168290][T23686] Use struct sctp_sack_info instead [ 537.210615][T23686] sctp: [Deprecated]: syz.1.4709 (pid 23686) Use of struct sctp_assoc_value in delayed_ack socket option. [ 537.210615][T23686] Use struct sctp_sack_info instead [ 537.377625][T23694] netlink: 'syz.4.4714': attribute type 1 has an invalid length. [ 537.585716][T23694] 8021q: adding VLAN 0 to HW filter on device bond13 [ 537.606100][T23708] netlink: 'syz.1.4717': attribute type 33 has an invalid length. [ 537.768891][T23699] bond13: (slave geneve5): making interface the new active one [ 537.806043][T23699] bond13: (slave geneve5): Enslaving as an active interface with an up link [ 537.998430][T23720] __nla_validate_parse: 1 callbacks suppressed [ 537.998466][T23720] netlink: 240 bytes leftover after parsing attributes in process `syz.4.4720'. [ 538.018449][T23720] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4720'. [ 538.053670][T23704] 8021q: adding VLAN 0 to HW filter on device bond1 [ 538.084936][T23704] 8021q: adding VLAN 0 to HW filter on device bond0 [ 538.100101][T23704] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 538.115987][T23704] 8021q: adding VLAN 0 to HW filter on device bond8 [ 538.275462][T23708] bond7: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 538.313331][T23708] bond7 (unregistering): Released all slaves [ 538.439264][T23722] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4721'. [ 538.650218][T23738] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4724'. [ 538.697182][T23741] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4725'. [ 539.241548][T23765] IPv6: NLM_F_CREATE should be specified when creating new route [ 539.593191][T23782] tipc: Failed to remove unknown binding: 66,0,0/1:844824800/844824801 [ 539.606076][T23784] vlan2: entered allmulticast mode [ 539.613748][T23784] bond0: entered allmulticast mode [ 539.760737][T23785] nbd: must specify a device to reconfigure [ 539.776484][T23790] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4740'. [ 539.798354][T23785] tipc: Failed to remove unknown binding: 66,0,0/1:844824800/844824801 [ 539.810212][T23790] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4740'. [ 539.935299][T23800] netlink: 'syz.1.4741': attribute type 1 has an invalid length. [ 539.990067][T23802] FAULT_INJECTION: forcing a failure. [ 539.990067][T23802] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 540.024135][T23800] 8021q: adding VLAN 0 to HW filter on device bond7 [ 540.049016][T23802] CPU: 0 UID: 0 PID: 23802 Comm: syz.1.4741 Not tainted syzkaller #0 PREEMPT(full) [ 540.049045][T23802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 540.049058][T23802] Call Trace: [ 540.049068][T23802] [ 540.049075][T23802] dump_stack_lvl+0xe8/0x150 [ 540.049099][T23802] should_fail_ex+0x412/0x560 [ 540.049125][T23802] _copy_from_user+0x2d/0xb0 [ 540.049150][T23802] ___sys_sendmsg+0x1c6/0x360 [ 540.049171][T23802] ? __lock_acquire+0x6b5/0x2cf0 [ 540.049193][T23802] ? __pfx____sys_sendmsg+0x10/0x10 [ 540.049250][T23802] ? __fget_files+0x2a/0x420 [ 540.049269][T23802] ? __fget_files+0x3a0/0x420 [ 540.049300][T23802] __x64_sys_sendmsg+0x1bd/0x2a0 [ 540.049322][T23802] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 540.049355][T23802] ? __pfx_ksys_write+0x10/0x10 [ 540.049376][T23802] ? handle_softirqs+0x715/0x840 [ 540.049409][T23802] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.049428][T23802] do_syscall_64+0x15f/0xf80 [ 540.049450][T23802] ? clear_bhb_loop+0x40/0x90 [ 540.049470][T23802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.049486][T23802] RIP: 0033:0x7f42ed59cdd9 [ 540.049507][T23802] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 540.049521][T23802] RSP: 002b:00007f42ee507028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 540.049540][T23802] RAX: ffffffffffffffda RBX: 00007f42ed816090 RCX: 00007f42ed59cdd9 [ 540.049551][T23802] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000004 [ 540.049560][T23802] RBP: 00007f42ee507090 R08: 0000000000000000 R09: 0000000000000000 [ 540.049571][T23802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 540.049581][T23802] R13: 00007f42ed816128 R14: 00007f42ed816090 R15: 00007ffd20fb4f88 [ 540.049610][T23802] [ 540.264464][T23805] netlink: 'syz.2.4742': attribute type 2 has an invalid length. [ 540.495505][T23813] netlink: 'syz.2.4743': attribute type 1 has an invalid length. [ 540.543514][T23813] 8021q: adding VLAN 0 to HW filter on device bond11 [ 540.932552][T23840] tipc: Enabling of bearer rejected, failed to enable media [ 541.291376][T23863] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4755'. [ 541.329694][T23864] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4755'. [ 541.373384][T23863] bridge0: port 1(geneve0) entered blocking state [ 541.380051][T23871] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 541.399371][T23863] bridge0: port 1(geneve0) entered disabled state [ 541.417549][T23863] geneve0: entered allmulticast mode [ 541.442871][T23863] geneve0: entered promiscuous mode [ 541.443142][T23874] netlink: 'syz.3.4758': attribute type 1 has an invalid length. [ 541.465269][T23863] bridge0: port 1(geneve0) entered blocking state [ 541.465453][T23863] bridge0: port 1(geneve0) entered forwarding state [ 541.528306][T23874] 8021q: adding VLAN 0 to HW filter on device bond11 [ 541.589027][ C0] bridge0: received packet on geneve0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 541.654797][T23884] ipt_REJECT: ECHOREPLY no longer supported. [ 541.704592][T23885] x_tables: ip_tables: REJECT target: only valid in filter table, not À [ 541.933627][T23908] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4764'. [ 542.017419][ C0] bridge0: received packet on geneve0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 542.035954][T23908] bond4: (slave veth0_to_bond): Releasing active interface [ 542.043314][T23908] veth0_to_bond: left promiscuous mode [ 542.049201][T23908] veth0_to_bond: left allmulticast mode [ 542.075544][T23905] netlink: 'syz.2.4768': attribute type 1 has an invalid length. [ 542.375095][T23921] netlink: 'syz.0.4772': attribute type 1 has an invalid length. [ 542.421532][T23921] 8021q: adding VLAN 0 to HW filter on device bond5 [ 542.476837][T23921] bond5: (slave ip6gretap1): making interface the new active one [ 542.492044][T23921] bond5: (slave ip6gretap1): Enslaving as an active interface with an up link [ 542.834732][T23943] bridge0: port 2(bridge_slave_1) entered blocking state [ 542.842007][T23943] bridge0: port 2(bridge_slave_1) entered forwarding state [ 542.849554][T23943] bridge0: port 1(bridge_slave_0) entered blocking state [ 542.856736][T23943] bridge0: port 1(bridge_slave_0) entered forwarding state [ 542.961261][T23943] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 543.211523][T23962] netlink: 'syz.3.4783': attribute type 21 has an invalid length. [ 543.242041][T23962] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4783'. [ 543.452463][T23966] lo speed is unknown, defaulting to 1000 [ 543.490833][T23972] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4786'. [ 543.519611][T23972] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4786'. [ 543.534641][T23969] IPVS: set_ctl: invalid protocol: 0 172.30.1.2:19997 [ 543.560899][T23972] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 543.594874][T23969] netlink: 'syz.1.4785': attribute type 4 has an invalid length. [ 543.634514][T23969] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4785'. [ 544.131640][T23987] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 544.218427][T23993] netlink: 'syz.3.4794': attribute type 10 has an invalid length. [ 544.292165][T23993] team0: Port device vlan0 added [ 544.372227][T23997] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4796'. [ 544.788340][T24021] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4802'. [ 544.792617][T24011] batadv1: entered allmulticast mode [ 544.815988][T24013] macvlan0: entered promiscuous mode [ 545.351951][T24036] netlink: 666 bytes leftover after parsing attributes in process `syz.0.4805'. [ 545.379621][T24034] netlink: 666 bytes leftover after parsing attributes in process `syz.0.4805'. [ 545.610890][T24045] netlink: 'syz.4.4807': attribute type 1 has an invalid length. [ 545.751941][T24045] 8021q: adding VLAN 0 to HW filter on device bond14 [ 545.926535][T24056] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4814'. [ 546.002885][T24062] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4810'. [ 546.244231][T24074] syzkaller0: entered promiscuous mode [ 546.249752][T24074] syzkaller0: entered allmulticast mode [ 546.802299][T24107] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 546.891970][T24112] vlan1: entered promiscuous mode [ 546.897308][T24112] bridge0: entered promiscuous mode [ 547.435714][T24135] netlink: 'syz.2.4833': attribute type 1 has an invalid length. [ 547.660151][T24135] 8021q: adding VLAN 0 to HW filter on device bond13 [ 547.696191][T24141] bond13: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 547.724831][T24141] bond13: entered allmulticast mode [ 547.790261][T24143] bond13: (slave ip6gretap1): Enslaving as an active interface with an up link [ 548.037100][T24165] xt_l2tp: missing protocol rule (udp|l2tpip) [ 548.434141][T24182] __nla_validate_parse: 9 callbacks suppressed [ 548.434161][T24182] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4849'. [ 548.449192][T24182] netlink: 'syz.2.4849': attribute type 30 has an invalid length. [ 548.474283][T24182] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4849'. [ 548.905127][T24197] netlink: 'syz.0.4851': attribute type 1 has an invalid length. [ 551.164162][T24197] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 551.164666][T24198] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4852'. [ 551.189224][T24198] bond0: Caught tx_queue_len zero misconfig [ 551.401978][T24205] netlink: 'syz.3.4854': attribute type 178 has an invalid length. [ 551.633796][T24218] syzkaller0: entered promiscuous mode [ 551.645753][T24218] syzkaller0: entered allmulticast mode [ 551.655985][T24219] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4858'. [ 551.683597][T24219] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4858'. [ 551.749851][T24220] syzkaller1: entered promiscuous mode [ 551.770790][T24220] syzkaller1: entered allmulticast mode [ 551.949433][T24233] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 552.119305][T24220] team0: Port device vlan0 removed [ 552.162724][T24232] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4862'. [ 552.385140][T24248] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4867'. [ 553.202384][T24284] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4881'. [ 553.242259][T24284] netlink: 13 bytes leftover after parsing attributes in process `syz.1.4881'. [ 553.302799][T24284] veth7: entered promiscuous mode [ 553.334189][T24293] IPVS: length: 4096 != 8 [ 553.745908][T24315] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 553.886554][T24323] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4892'. [ 553.968450][T24327] netlink: 'syz.4.4893': attribute type 1 has an invalid length. [ 562.750366][ T1314] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 569.864127][T24350] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4894'. [ 569.962471][T24360] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4899'. [ 570.048205][T24360] sctp: [Deprecated]: syz.3.4899 (pid 24360) Use of struct sctp_assoc_value in delayed_ack socket option. [ 570.048205][T24360] Use struct sctp_sack_info instead [ 570.067646][T24361] syzkaller1: entered promiscuous mode [ 570.086510][T24361] syzkaller1: entered allmulticast mode [ 570.103654][T24360] netlink: 'syz.3.4899': attribute type 6 has an invalid length. [ 570.445381][T24387] sctp: [Deprecated]: syz.4.4908 (pid 24387) Use of int in maxseg socket option. [ 570.445381][T24387] Use struct sctp_assoc_value instead [ 570.514543][T24391] netlink: 'syz.4.4908': attribute type 11 has an invalid length. [ 570.535246][T24389] xt_SECMARK: invalid mode: 9 [ 570.576368][T24392] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 570.679752][T24395] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 570.909628][T24412] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4915'. [ 570.938667][T24412] block nbd2: Unsupported socket: should be TCP or UNIX. [ 571.147463][T24422] lo: entered allmulticast mode [ 571.224995][T24412] netlink: 'syz.2.4915': attribute type 32 has an invalid length. [ 571.232862][T24412] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4915'. [ 571.235985][T24432] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4922'. [ 571.306197][T24412] bond14: option coupled_control: invalid value (17) [ 571.337497][T24412] bond14 (unregistering): Released all slaves [ 571.418349][T24436] syzkaller0: entered promiscuous mode [ 571.423874][T24436] syzkaller0: entered allmulticast mode [ 571.478892][T24436] tipc: Started in network mode [ 571.483816][T24436] tipc: Node identity 0283eec4ca8, cluster identity 4711 [ 571.491276][T24436] tipc: Enabled bearer , priority 0 [ 571.500083][T24453] netlink: 'syz.4.4927': attribute type 1 has an invalid length. [ 571.530254][T24453] 8021q: adding VLAN 0 to HW filter on device bond16 [ 571.545382][T24453] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4927'. [ 571.549512][T24437] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4924'. [ 571.580662][T24437] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4924'. [ 571.612018][T24435] tipc: Resetting bearer [ 571.688302][T24435] tipc: Disabling bearer [ 571.717148][T24461] syzkaller0: entered promiscuous mode [ 571.722732][T24461] syzkaller0: entered allmulticast mode [ 571.797505][T24464] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4930'. [ 571.874838][T24466] bond0: entered allmulticast mode [ 571.947553][T24471] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4934'. [ 572.172784][ T73] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 572.193039][T16943] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 572.201792][T16943] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 572.254591][T16943] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 572.547997][T24497] bond8: entered promiscuous mode [ 572.567763][T24497] bond8: entered allmulticast mode [ 572.585160][T24497] 8021q: adding VLAN 0 to HW filter on device bond8 [ 572.620483][T24504] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 572.906867][T24531] openvswitch: netlink: IP tunnel dst address not specified [ 573.152361][T24546] netlink: 'syz.2.4953': attribute type 7 has an invalid length. [ 573.180382][T24550] netlink: 'syz.2.4953': attribute type 7 has an invalid length. [ 573.194864][T24547] netlink: 'syz.4.4954': attribute type 3 has an invalid length. [ 573.364944][T24557] netlink: 'syz.1.4956': attribute type 30 has an invalid length. [ 573.512108][T24564] netlink: 'syz.1.4956': attribute type 1 has an invalid length. [ 573.656729][T24561] bridge0: port 2(bridge_slave_1) entered blocking state [ 573.663987][T24561] bridge0: port 2(bridge_slave_1) entered forwarding state [ 573.671562][T24561] bridge0: port 1(bridge_slave_0) entered blocking state [ 573.678758][T24561] bridge0: port 1(bridge_slave_0) entered forwarding state [ 573.731088][T24561] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 573.808552][T24561] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 573.838805][T24561] 8021q: adding VLAN 0 to HW filter on device bond3 [ 573.856523][T24574] xt_hashlimit: size too large, truncated to 1048576 [ 573.872895][T24561] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check. [ 573.905616][T20051] team_slave_0: entered promiscuous mode [ 573.914001][T20051] team_slave_1: entered promiscuous mode [ 574.126102][T24585] syzkaller0: entered promiscuous mode [ 574.151349][T24585] syzkaller0: entered allmulticast mode [ 574.619043][T24612] xt_hashlimit: size too large, truncated to 1048576 [ 574.625978][T24610] xt_hashlimit: size too large, truncated to 1048576 [ 574.846337][T24606] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 574.892453][T24625] netlink: 'syz.1.4974': attribute type 1 has an invalid length. [ 574.985859][T24625] 8021q: adding VLAN 0 to HW filter on device bond9 [ 575.144377][T24629] FAULT_INJECTION: forcing a failure. [ 575.144377][T24629] name failslab, interval 1, probability 0, space 0, times 1 [ 575.215664][T24629] CPU: 1 UID: 0 PID: 24629 Comm: syz.1.4974 Not tainted syzkaller #0 PREEMPT(full) [ 575.215690][T24629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 575.215701][T24629] Call Trace: [ 575.215709][T24629] [ 575.215717][T24629] dump_stack_lvl+0xe8/0x150 [ 575.215744][T24629] should_fail_ex+0x412/0x560 [ 575.215773][T24629] should_failslab+0xa8/0x100 [ 575.215803][T24629] __kmalloc_cache_noprof+0x88/0x660 [ 575.215829][T24629] ? __hw_addr_create+0x60/0x250 [ 575.215858][T24629] __hw_addr_create+0x60/0x250 [ 575.215886][T24629] ? stack_depot_init+0x36/0x1a0 [ 575.215911][T24629] __hw_addr_add_ex+0x1c2/0x520 [ 575.215940][T24629] dev_addr_init+0x15e/0x240 [ 575.215968][T24629] ? __pfx_dev_addr_init+0x10/0x10 [ 575.215994][T24629] ? alloc_netdev_mqs+0xa8/0x1210 [ 575.216029][T24629] alloc_netdev_mqs+0x2b3/0x1210 [ 575.216052][T24629] ? __pfx_geneve_setup+0x10/0x10 [ 575.216083][T24629] rtnl_create_link+0x31f/0xd70 [ 575.216116][T24629] rtnl_newlink_create+0x277/0xb70 [ 575.216140][T24629] ? __pfx___nla_validate_parse+0x10/0x10 [ 575.216171][T24629] ? __mutex_lock+0x608/0x1550 [ 575.216197][T24629] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 575.216228][T24629] ? __pfx___mutex_lock+0x10/0x10 [ 575.216262][T24629] ? ns_capable+0x89/0xe0 [ 575.216283][T24629] rtnl_newlink+0x166a/0x1bb0 [ 575.216320][T24629] ? __pfx_rtnl_newlink+0x10/0x10 [ 575.216338][T24629] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.216395][T24629] ? kasan_quarantine_put+0xbb/0x1f0 [ 575.216417][T24629] ? lockdep_hardirqs_on+0x7a/0x110 [ 575.216443][T24629] ? nlmon_xmit+0xb0/0x100 [ 575.216461][T24629] ? kmem_cache_free+0x182/0x650 [ 575.216504][T24629] ? __lock_acquire+0x6b5/0x2cf0 [ 575.216538][T24629] ? __dev_queue_xmit+0x2b6/0x3950 [ 575.216565][T24629] ? __local_bh_enable_ip+0xd0/0x130 [ 575.216584][T24629] ? lockdep_hardirqs_on+0x7a/0x110 [ 575.216604][T24629] ? __dev_queue_xmit+0x2b6/0x3950 [ 575.216629][T24629] ? __local_bh_enable_ip+0xd0/0x130 [ 575.216645][T24629] ? __dev_queue_xmit+0x2b6/0x3950 [ 575.216676][T24629] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 575.216711][T24629] ? __pfx_rtnl_newlink+0x10/0x10 [ 575.216730][T24629] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 575.216759][T24629] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 575.216779][T24629] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 575.216797][T24629] ? ref_tracker_free+0x693/0x840 [ 575.216823][T24629] ? __pfx_ref_tracker_free+0x10/0x10 [ 575.216857][T24629] netlink_rcv_skb+0x232/0x4b0 [ 575.216878][T24629] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 575.216899][T24629] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 575.216931][T24629] ? netlink_deliver_tap+0x2e/0x1b0 [ 575.216951][T24629] ? netlink_deliver_tap+0x2e/0x1b0 [ 575.216977][T24629] netlink_unicast+0x75c/0x8e0 [ 575.217008][T24629] netlink_sendmsg+0x813/0xb40 [ 575.217040][T24629] ? __pfx_netlink_sendmsg+0x10/0x10 [ 575.217066][T24629] ? aa_sock_msg_perm+0xf1/0x1b0 [ 575.217092][T24629] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 575.217120][T24629] ____sys_sendmsg+0x972/0x9f0 [ 575.217143][T24629] ? __might_fault+0xaf/0x130 [ 575.217172][T24629] ? __pfx_____sys_sendmsg+0x10/0x10 [ 575.217205][T24629] ? import_iovec+0x73/0xa0 [ 575.217240][T24629] ___sys_sendmsg+0x2a5/0x360 [ 575.217261][T24629] ? __lock_acquire+0x6b5/0x2cf0 [ 575.217284][T24629] ? __pfx____sys_sendmsg+0x10/0x10 [ 575.217345][T24629] ? __fget_files+0x2a/0x420 [ 575.217364][T24629] ? __fget_files+0x3a0/0x420 [ 575.217404][T24629] __x64_sys_sendmsg+0x1bd/0x2a0 [ 575.217430][T24629] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 575.217464][T24629] ? __pfx_ksys_write+0x10/0x10 [ 575.217498][T24629] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.217518][T24629] do_syscall_64+0x15f/0xf80 [ 575.217539][T24629] ? trace_irq_disable+0x3b/0x140 [ 575.217564][T24629] ? clear_bhb_loop+0x40/0x90 [ 575.217587][T24629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.217604][T24629] RIP: 0033:0x7f42ed59cdd9 [ 575.217622][T24629] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 575.217637][T24629] RSP: 002b:00007f42ee507028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 575.217656][T24629] RAX: ffffffffffffffda RBX: 00007f42ed816090 RCX: 00007f42ed59cdd9 [ 575.217668][T24629] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000004 [ 575.217679][T24629] RBP: 00007f42ee507090 R08: 0000000000000000 R09: 0000000000000000 [ 575.217690][T24629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 575.217701][T24629] R13: 00007f42ed816128 R14: 00007f42ed816090 R15: 00007ffd20fb4f88 [ 575.217733][T24629] [ 576.246087][T24668] __nla_validate_parse: 86 callbacks suppressed [ 576.246104][T24668] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4985'. [ 576.291828][T24676] netlink: 'syz.1.4987': attribute type 3 has an invalid length. [ 576.476221][T24691] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4990'. [ 576.500970][T24693] netlink: 'syz.0.4991': attribute type 1 has an invalid length. [ 576.588974][T24693] 8021q: adding VLAN 0 to HW filter on device bond6 [ 576.652025][T24697] FAULT_INJECTION: forcing a failure. [ 576.652025][T24697] name failslab, interval 1, probability 0, space 0, times 0 [ 576.666961][T24704] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4992'. [ 576.676758][T24697] CPU: 0 UID: 0 PID: 24697 Comm: syz.0.4991 Not tainted syzkaller #0 PREEMPT(full) [ 576.676781][T24697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 576.676791][T24697] Call Trace: [ 576.676798][T24697] [ 576.676806][T24697] dump_stack_lvl+0xe8/0x150 [ 576.676831][T24697] should_fail_ex+0x412/0x560 [ 576.676858][T24697] should_failslab+0xa8/0x100 [ 576.676888][T24697] __kvmalloc_node_noprof+0x178/0x8a0 [ 576.676915][T24697] ? alloc_netdev_mqs+0x8fb/0x1210 [ 576.676950][T24697] alloc_netdev_mqs+0x8fb/0x1210 [ 576.676982][T24697] rtnl_create_link+0x31f/0xd70 [ 576.677015][T24697] rtnl_newlink_create+0x277/0xb70 [ 576.677037][T24697] ? __pfx___nla_validate_parse+0x10/0x10 [ 576.677074][T24697] ? __mutex_lock+0x608/0x1550 [ 576.677099][T24697] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 576.677126][T24697] ? __pfx___mutex_lock+0x10/0x10 [ 576.677160][T24697] ? ns_capable+0x89/0xe0 [ 576.677182][T24697] rtnl_newlink+0x166a/0x1bb0 [ 576.677220][T24697] ? __pfx_rtnl_newlink+0x10/0x10 [ 576.677237][T24697] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.677292][T24697] ? kasan_quarantine_put+0xbb/0x1f0 [ 576.677316][T24697] ? lockdep_hardirqs_on+0x7a/0x110 [ 576.677340][T24697] ? nlmon_xmit+0xb0/0x100 [ 576.677359][T24697] ? kmem_cache_free+0x182/0x650 [ 576.677395][T24697] ? __lock_acquire+0x6b5/0x2cf0 [ 576.677420][T24697] ? __dev_queue_xmit+0x2b6/0x3950 [ 576.677447][T24697] ? __local_bh_enable_ip+0xd0/0x130 [ 576.677466][T24697] ? lockdep_hardirqs_on+0x7a/0x110 [ 576.677487][T24697] ? __dev_queue_xmit+0x2b6/0x3950 [ 576.677509][T24697] ? __local_bh_enable_ip+0xd0/0x130 [ 576.677526][T24697] ? __dev_queue_xmit+0x2b6/0x3950 [ 576.677557][T24697] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 576.677594][T24697] ? __pfx_rtnl_newlink+0x10/0x10 [ 576.677614][T24697] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 576.677639][T24697] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 576.677659][T24697] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 576.677677][T24697] ? ref_tracker_free+0x693/0x840 [ 576.677704][T24697] ? __pfx_ref_tracker_free+0x10/0x10 [ 576.677738][T24697] netlink_rcv_skb+0x232/0x4b0 [ 576.677763][T24697] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 576.677785][T24697] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 576.677821][T24697] ? netlink_deliver_tap+0x2e/0x1b0 [ 576.677842][T24697] ? netlink_deliver_tap+0x2e/0x1b0 [ 576.677869][T24697] netlink_unicast+0x75c/0x8e0 [ 576.677901][T24697] netlink_sendmsg+0x813/0xb40 [ 576.677933][T24697] ? __pfx_netlink_sendmsg+0x10/0x10 [ 576.677960][T24697] ? aa_sock_msg_perm+0xf1/0x1b0 [ 576.677984][T24697] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 576.678012][T24697] ____sys_sendmsg+0x972/0x9f0 [ 576.678036][T24697] ? __might_fault+0xaf/0x130 [ 576.678071][T24697] ? __pfx_____sys_sendmsg+0x10/0x10 [ 576.678104][T24697] ? import_iovec+0x73/0xa0 [ 576.678132][T24697] ___sys_sendmsg+0x2a5/0x360 [ 576.678153][T24697] ? __lock_acquire+0x6b5/0x2cf0 [ 576.678176][T24697] ? __pfx____sys_sendmsg+0x10/0x10 [ 576.678238][T24697] ? __fget_files+0x2a/0x420 [ 576.678258][T24697] ? __fget_files+0x3a0/0x420 [ 576.678289][T24697] __x64_sys_sendmsg+0x1bd/0x2a0 [ 576.678316][T24697] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 576.678348][T24697] ? __pfx_ksys_write+0x10/0x10 [ 576.678382][T24697] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.678402][T24697] do_syscall_64+0x15f/0xf80 [ 576.678424][T24697] ? trace_irq_disable+0x3b/0x140 [ 576.678450][T24697] ? clear_bhb_loop+0x40/0x90 [ 576.678472][T24697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.678490][T24697] RIP: 0033:0x7f01a459cdd9 [ 576.678507][T24697] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 576.678522][T24697] RSP: 002b:00007f01a27d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 576.678541][T24697] RAX: ffffffffffffffda RBX: 00007f01a4816090 RCX: 00007f01a459cdd9 [ 576.678553][T24697] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000004 [ 576.678564][T24697] RBP: 00007f01a27d5090 R08: 0000000000000000 R09: 0000000000000000 [ 576.678575][T24697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 576.678585][T24697] R13: 00007f01a4816128 R14: 00007f01a4816090 R15: 00007ffe24fd7f68 [ 576.678617][T24697] [ 577.209254][T24704] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 577.236635][T24704] bond_slave_0: left allmulticast mode [ 577.271832][T24704] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 577.301670][T24704] bond_slave_1: left allmulticast mode [ 577.309097][T24704] bond0 (unregistering): Released all slaves [ 577.525398][T24725] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4998'. [ 577.727937][T24738] netlink: 149 bytes leftover after parsing attributes in process `syz.3.5004'. [ 577.747301][ T6608] wlan1: Trigger new scan to find an IBSS to join [ 577.768177][T24739] netlink: 212328 bytes leftover after parsing attributes in process `syz.4.5002'. [ 577.849956][T24743] netlink: 'syz.3.5005': attribute type 1 has an invalid length. [ 577.882638][T24743] 8021q: adding VLAN 0 to HW filter on device bond0 [ 577.890976][T24743] FAULT_INJECTION: forcing a failure. [ 577.890976][T24743] name failslab, interval 1, probability 0, space 0, times 0 [ 577.900379][T24748] Cannot find del_set index 49151 as target [ 577.915139][T24743] CPU: 0 UID: 0 PID: 24743 Comm: syz.3.5005 Not tainted syzkaller #0 PREEMPT(full) [ 577.915160][T24743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 577.915169][T24743] Call Trace: [ 577.915176][T24743] [ 577.915183][T24743] dump_stack_lvl+0xe8/0x150 [ 577.915210][T24743] should_fail_ex+0x412/0x560 [ 577.915238][T24743] should_failslab+0xa8/0x100 [ 577.915265][T24743] __kvmalloc_node_noprof+0x178/0x8a0 [ 577.915287][T24743] ? __raw_spin_lock_init+0x45/0x100 [ 577.915309][T24743] ? alloc_netdev_mqs+0xaa6/0x1210 [ 577.915341][T24743] alloc_netdev_mqs+0xaa6/0x1210 [ 577.915370][T24743] rtnl_create_link+0x31f/0xd70 [ 577.915400][T24743] rtnl_newlink_create+0x277/0xb70 [ 577.915420][T24743] ? __pfx___nla_validate_parse+0x10/0x10 [ 577.915453][T24743] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 577.915477][T24743] ? __pfx___mutex_lock+0x10/0x10 [ 577.915508][T24743] ? ns_capable+0x89/0xe0 [ 577.915529][T24743] rtnl_newlink+0x166a/0x1bb0 [ 577.915562][T24743] ? __pfx_rtnl_newlink+0x10/0x10 [ 577.915579][T24743] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.915631][T24743] ? kasan_quarantine_put+0xbb/0x1f0 [ 577.915653][T24743] ? lockdep_hardirqs_on+0x7a/0x110 [ 577.915685][T24743] ? nlmon_xmit+0xb0/0x100 [ 577.915701][T24743] ? kmem_cache_free+0x182/0x650 [ 577.915735][T24743] ? __lock_acquire+0x6b5/0x2cf0 [ 577.915759][T24743] ? __dev_queue_xmit+0x2b6/0x3950 [ 577.915784][T24743] ? __local_bh_enable_ip+0xd0/0x130 [ 577.915802][T24743] ? lockdep_hardirqs_on+0x7a/0x110 [ 577.915821][T24743] ? __dev_queue_xmit+0x2b6/0x3950 [ 577.915842][T24743] ? __local_bh_enable_ip+0xd0/0x130 [ 577.915858][T24743] ? __dev_queue_xmit+0x2b6/0x3950 [ 577.915888][T24743] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 577.915923][T24743] ? __pfx_rtnl_newlink+0x10/0x10 [ 577.915943][T24743] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 577.915966][T24743] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 577.915985][T24743] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 577.916003][T24743] ? ref_tracker_free+0x693/0x840 [ 577.916036][T24743] ? __pfx_ref_tracker_free+0x10/0x10 [ 577.916069][T24743] netlink_rcv_skb+0x232/0x4b0 [ 577.916092][T24743] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 577.916114][T24743] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 577.916149][T24743] ? netlink_deliver_tap+0x2e/0x1b0 [ 577.916170][T24743] ? netlink_deliver_tap+0x2e/0x1b0 [ 577.916197][T24743] netlink_unicast+0x75c/0x8e0 [ 577.916229][T24743] netlink_sendmsg+0x813/0xb40 [ 577.916261][T24743] ? __pfx_netlink_sendmsg+0x10/0x10 [ 577.916285][T24743] ? aa_sock_msg_perm+0xf1/0x1b0 [ 577.916310][T24743] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 577.916338][T24743] ____sys_sendmsg+0x972/0x9f0 [ 577.916361][T24743] ? __might_fault+0xaf/0x130 [ 577.916389][T24743] ? __pfx_____sys_sendmsg+0x10/0x10 [ 577.916422][T24743] ? import_iovec+0x73/0xa0 [ 577.916450][T24743] ___sys_sendmsg+0x2a5/0x360 [ 577.916471][T24743] ? __lock_acquire+0x6b5/0x2cf0 [ 577.916494][T24743] ? __pfx____sys_sendmsg+0x10/0x10 [ 577.916555][T24743] ? __fget_files+0x2a/0x420 [ 577.916574][T24743] ? __fget_files+0x3a0/0x420 [ 577.916606][T24743] __x64_sys_sendmsg+0x1bd/0x2a0 [ 577.916631][T24743] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 577.916670][T24743] ? __pfx_ksys_write+0x10/0x10 [ 577.916702][T24743] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.916722][T24743] do_syscall_64+0x15f/0xf80 [ 577.916743][T24743] ? trace_irq_disable+0x3b/0x140 [ 577.916768][T24743] ? clear_bhb_loop+0x40/0x90 [ 577.916791][T24743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.916808][T24743] RIP: 0033:0x7fb9a8f9cdd9 [ 577.916825][T24743] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 577.916840][T24743] RSP: 002b:00007fb9a9ece028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 577.916859][T24743] RAX: ffffffffffffffda RBX: 00007fb9a9215fa0 RCX: 00007fb9a8f9cdd9 [ 577.916870][T24743] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000004 [ 577.916881][T24743] RBP: 00007fb9a9ece090 R08: 0000000000000000 R09: 0000000000000000 [ 577.916891][T24743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 577.916900][T24743] R13: 00007fb9a9216038 R14: 00007fb9a9215fa0 R15: 00007fffc66430f8 [ 577.916929][T24743] [ 578.523575][T24759] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5008'. [ 578.620382][T24763] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5010'. [ 578.652307][T24754] bond10: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 578.680254][T24754] bond10 (unregistering): Released all slaves [ 578.747710][T24767] xt_l2tp: v2 doesn't support IP mode [ 578.830074][T24772] netlink: 'syz.0.5015': attribute type 3 has an invalid length. [ 579.393636][T24809] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5024'. [ 579.628691][T24816] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5029'. [ 579.660478][T24821] netlink: 'syz.0.5030': attribute type 1 has an invalid length. [ 579.775005][T24824] netlink: 'syz.1.5027': attribute type 1 has an invalid length. [ 580.019560][T24837] syzkaller0: entered promiscuous mode [ 580.045710][T24837] syzkaller0: entered allmulticast mode [ 580.722424][T24866] xt_hashlimit: size too large, truncated to 1048576 [ 580.726969][T24867] netlink: 'syz.0.5042': attribute type 1 has an invalid length. [ 581.016455][T24867] bond7: entered promiscuous mode [ 581.061179][T24867] 8021q: adding VLAN 0 to HW filter on device bond7 [ 581.214054][T24874] bond7: (slave bridge2): making interface the new active one [ 581.222873][T24874] bridge2: entered promiscuous mode [ 581.254816][T24874] bond7: (slave bridge2): Enslaving as an active interface with an up link [ 581.527582][T24903] netlink: 'syz.2.5049': attribute type 83 has an invalid length. [ 581.546182][T24905] netlink: 'syz.3.5050': attribute type 1 has an invalid length. [ 581.708347][T16937] wlan1: Trigger new scan to find an IBSS to join [ 581.718043][T24914] __nla_validate_parse: 9 callbacks suppressed [ 581.718061][T24914] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5050'. [ 581.739139][T24913] openvswitch: netlink: IP tunnel dst address not specified [ 581.810426][T24905] 8021q: adding VLAN 0 to HW filter on device bond12 [ 581.909396][T24919] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5055'. [ 582.003473][T24922] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5055'. [ 582.077906][T24929] Cannot find del_set index 4 as target [ 582.085185][T24920] bond10: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 582.463966][T24944] netdevsim netdevsim3: Direct firmware load for . failed with error -2 [ 582.513526][T24944] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 582.554858][T24952] netlink: 'syz.2.5066': attribute type 1 has an invalid length. [ 582.623681][T24955] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5067'. [ 582.648820][T16937] wlan1: Creating new IBSS network, BSSID 5e:f1:2d:68:67:b3 [ 582.669566][T24952] 8021q: adding VLAN 0 to HW filter on device bond14 [ 582.677151][T24959] netlink: 'syz.1.5069': attribute type 11 has an invalid length. [ 582.686072][T24959] netlink: 'syz.1.5069': attribute type 11 has an invalid length. [ 582.698620][T24959] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5069'. [ 582.712406][T24961] netlink: 51 bytes leftover after parsing attributes in process `syz.0.5068'. [ 582.713686][T24952] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5066'. [ 582.849576][T24965] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5071'. [ 582.861625][T24965] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5071'. [ 582.883918][T24967] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5070'. [ 582.987596][T24970] gretap1: entered promiscuous mode [ 583.008561][T24970] batman_adv: batadv0: Adding interface: gretap1 [ 583.036533][T24970] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 583.059715][T24970] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 583.688775][T25012] netlink: 'syz.1.5082': attribute type 1 has an invalid length. [ 583.741369][T25020] FAULT_INJECTION: forcing a failure. [ 583.741369][T25020] name failslab, interval 1, probability 0, space 0, times 0 [ 583.765127][T25020] CPU: 1 UID: 0 PID: 25020 Comm: syz.1.5082 Not tainted syzkaller #0 PREEMPT(full) [ 583.765152][T25020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 583.765162][T25020] Call Trace: [ 583.765170][T25020] [ 583.765177][T25020] dump_stack_lvl+0xe8/0x150 [ 583.765201][T25020] should_fail_ex+0x412/0x560 [ 583.765230][T25020] should_failslab+0xa8/0x100 [ 583.765255][T25020] ? skb_clone+0x212/0x3a0 [ 583.765278][T25020] kmem_cache_alloc_noprof+0x87/0x650 [ 583.765309][T25020] skb_clone+0x212/0x3a0 [ 583.765335][T25020] __netlink_deliver_tap+0x404/0x850 [ 583.765370][T25020] ? netlink_deliver_tap+0x2e/0x1b0 [ 583.765395][T25020] netlink_deliver_tap+0x19c/0x1b0 [ 583.765418][T25020] netlink_sendskb+0x68/0x140 [ 583.765440][T25020] netlink_rcv_skb+0x2b6/0x4b0 [ 583.765462][T25020] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 583.765490][T25020] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 583.765527][T25020] ? netlink_deliver_tap+0x2e/0x1b0 [ 583.765547][T25020] ? netlink_deliver_tap+0x2e/0x1b0 [ 583.765572][T25020] netlink_unicast+0x75c/0x8e0 [ 583.765603][T25020] netlink_sendmsg+0x813/0xb40 [ 583.765633][T25020] ? __pfx_netlink_sendmsg+0x10/0x10 [ 583.765657][T25020] ? aa_sock_msg_perm+0xf1/0x1b0 [ 583.765679][T25020] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 583.765704][T25020] ____sys_sendmsg+0x972/0x9f0 [ 583.765727][T25020] ? __might_fault+0xaf/0x130 [ 583.765763][T25020] ? __pfx_____sys_sendmsg+0x10/0x10 [ 583.765795][T25020] ? import_iovec+0x73/0xa0 [ 583.765824][T25020] ___sys_sendmsg+0x2a5/0x360 [ 583.765845][T25020] ? __lock_acquire+0x6b5/0x2cf0 [ 583.765869][T25020] ? __pfx____sys_sendmsg+0x10/0x10 [ 583.765929][T25020] ? __fget_files+0x2a/0x420 [ 583.765948][T25020] ? __fget_files+0x3a0/0x420 [ 583.765979][T25020] __x64_sys_sendmsg+0x1bd/0x2a0 [ 583.766005][T25020] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 583.766038][T25020] ? __pfx_ksys_write+0x10/0x10 [ 583.766072][T25020] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.766098][T25020] do_syscall_64+0x15f/0xf80 [ 583.766119][T25020] ? trace_irq_disable+0x3b/0x140 [ 583.766145][T25020] ? clear_bhb_loop+0x40/0x90 [ 583.766167][T25020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.766185][T25020] RIP: 0033:0x7f42ed59cdd9 [ 583.766202][T25020] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 583.766216][T25020] RSP: 002b:00007f42ee507028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 583.766235][T25020] RAX: ffffffffffffffda RBX: 00007f42ed816090 RCX: 00007f42ed59cdd9 [ 583.766248][T25020] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000004 [ 583.766259][T25020] RBP: 00007f42ee507090 R08: 0000000000000000 R09: 0000000000000000 [ 583.766270][T25020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 583.766280][T25020] R13: 00007f42ed816128 R14: 00007f42ed816090 R15: 00007ffd20fb4f88 [ 583.766311][T25020] [ 584.145120][T25012] 8021q: adding VLAN 0 to HW filter on device bond11 [ 584.544673][T25042] can: request_module (can-proto-4) failed. [ 584.604615][T25052] netlink: 'syz.3.5091': attribute type 1 has an invalid length. [ 584.694576][T25052] 8021q: adding VLAN 0 to HW filter on device bond13 [ 584.702231][T25034] lo speed is unknown, defaulting to 1000 [ 585.199620][T25073] xt_HMARK: spi-set and port-set can't be combined [ 585.328355][T25079] netlink: 'syz.2.5098': attribute type 7 has an invalid length. [ 585.346216][T25077] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 585.520167][T25083] netlink: 'syz.3.5099': attribute type 1 has an invalid length. [ 585.642421][T25083] 8021q: adding VLAN 0 to HW filter on device bond14 [ 585.652577][T25086] FAULT_INJECTION: forcing a failure. [ 585.652577][T25086] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 585.677650][T25086] CPU: 0 UID: 0 PID: 25086 Comm: syz.3.5099 Not tainted syzkaller #0 PREEMPT(full) [ 585.677678][T25086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 585.677688][T25086] Call Trace: [ 585.677695][T25086] [ 585.677702][T25086] dump_stack_lvl+0xe8/0x150 [ 585.677728][T25086] should_fail_ex+0x412/0x560 [ 585.677755][T25086] _copy_to_user+0x31/0xb0 [ 585.677782][T25086] simple_read_from_buffer+0xe1/0x170 [ 585.677809][T25086] proc_fail_nth_read+0x1bb/0x230 [ 585.677835][T25086] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 585.677861][T25086] ? rw_verify_area+0x2a6/0x4d0 [ 585.677883][T25086] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 585.677902][T25086] vfs_read+0x20c/0xa70 [ 585.677936][T25086] ? __pfx___mutex_lock+0x10/0x10 [ 585.677959][T25086] ? __pfx_vfs_read+0x10/0x10 [ 585.677984][T25086] ? __fget_files+0x2a/0x420 [ 585.678008][T25086] ? __fget_files+0x3a0/0x420 [ 585.678028][T25086] ? __fget_files+0x2a/0x420 [ 585.678056][T25086] ksys_read+0x150/0x270 [ 585.678082][T25086] ? __pfx_ksys_read+0x10/0x10 [ 585.678114][T25086] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.678137][T25086] do_syscall_64+0x15f/0xf80 [ 585.678161][T25086] ? trace_irq_disable+0x3b/0x140 [ 585.678184][T25086] ? clear_bhb_loop+0x40/0x90 [ 585.678204][T25086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.678220][T25086] RIP: 0033:0x7fb9a8f5d60e [ 585.678236][T25086] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 585.678250][T25086] RSP: 002b:00007fb9a9eacfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 585.678266][T25086] RAX: ffffffffffffffda RBX: 00007fb9a9ead6c0 RCX: 00007fb9a8f5d60e [ 585.678277][T25086] RDX: 000000000000000f RSI: 00007fb9a9ead0a0 RDI: 0000000000000006 [ 585.678286][T25086] RBP: 00007fb9a9ead090 R08: 0000000000000000 R09: 0000000000000000 [ 585.678296][T25086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 585.678306][T25086] R13: 00007fb9a9216128 R14: 00007fb9a9216090 R15: 00007fffc66430f8 [ 585.678337][T25086] [ 585.944087][T25088] bridge0: port 1(syz_tun) entered disabled state [ 585.951260][T25088] bridge0: port 2(bridge_slave_1) entered disabled state [ 586.150060][T25104] netlink: 'syz.3.5103': attribute type 1 has an invalid length. [ 586.174427][T25106] netlink: 'syz.1.5106': attribute type 1 has an invalid length. [ 586.187939][T25107] netlink: 'syz.1.5106': attribute type 1 has an invalid length. [ 586.299925][T25104] 8021q: adding VLAN 0 to HW filter on device bond15 [ 586.366354][T25107] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 586.383152][T25106] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 586.478141][T25109] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 586.746594][T25142] netlink: 'syz.0.5114': attribute type 1 has an invalid length. [ 586.833808][T25142] bond8: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 586.846058][T25142] __nla_validate_parse: 15 callbacks suppressed [ 586.846076][T25142] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5114'. [ 586.852478][T25150] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5116'. [ 586.876977][T25150] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 586.889356][T25150] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 586.897890][T25150] gretap1: entered promiscuous mode [ 586.905366][T25150] gretap1: entered allmulticast mode [ 587.409628][T25167] netlink: 'syz.2.5120': attribute type 1 has an invalid length. [ 587.422966][T25164] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5120'. [ 588.653535][T25210] bond12 (unregistering): Released all slaves [ 589.112489][T25249] lo: left promiscuous mode [ 589.126650][T25249] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 589.160889][T25254] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5143'. [ 589.395872][T25273] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5148'. [ 589.432636][T25276] netlink: 'syz.4.5149': attribute type 15 has an invalid length. [ 589.438646][T25275] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5147'. [ 589.455969][T25276] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5149'. [ 589.575677][T25278] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5152'. [ 589.587076][T25280] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5151'. [ 589.691984][T25287] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5153'. [ 589.777606][T25291] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 589.782383][T25287] : entered promiscuous mode [ 589.787771][T25290] "syz.2.5155" (25290) uses obsolete ecb(arc4) skcipher [ 590.062085][T25302] netlink: 'syz.0.5159': attribute type 1 has an invalid length. [ 590.073375][T25300] netlink: 'syz.4.5158': attribute type 25 has an invalid length. [ 590.092638][T25306] openvswitch: netlink: Invalid VLAN frame [ 590.823379][T25339] xt_TPROXY: Can be used only with -p tcp or -p udp [ 590.881752][T25339] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 591.248480][ T5631] block nbd2: Receive control failed (result -107) [ 591.374297][T25377] netlink: 'syz.3.5176': attribute type 4 has an invalid length. [ 591.912982][T25407] openvswitch: netlink: IP tunnel dst address not specified [ 592.004390][T25411] __nla_validate_parse: 11 callbacks suppressed [ 592.004410][T25411] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5187'. [ 592.064773][T25411] macsec1: entered promiscuous mode [ 592.090746][T25411] bridge0: entered promiscuous mode [ 592.096173][T25411] macsec1: entered allmulticast mode [ 592.101477][T25411] bridge0: entered allmulticast mode [ 592.107383][T25411] bridge0: port 3(macsec1) entered blocking state [ 592.125905][T25411] bridge0: port 3(macsec1) entered disabled state [ 592.154116][T25411] bridge0: left allmulticast mode [ 592.174700][T20050] bridge0: left promiscuous mode [ 592.215900][T25417] netlink: 248 bytes leftover after parsing attributes in process `syz.2.5188'. [ 592.221314][T25420] netlink: 'syz.1.5190': attribute type 20 has an invalid length. [ 592.236041][T25420] IPv6: NLM_F_CREATE should be specified when creating new route [ 592.327714][T25426] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5190'. [ 592.552530][T25444] netlink: 'syz.2.5197': attribute type 1 has an invalid length. [ 592.995972][T25445] team0: Cannot enslave team device to itself [ 593.153538][T25463] IPv6: NLM_F_CREATE should be specified when creating new route [ 593.162580][T25463] netlink: 'syz.2.5201': attribute type 1 has an invalid length. [ 593.301672][T25465] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 593.321930][T25465] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 593.363025][T25465] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 593.403557][T25465] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 593.795963][T25499] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5212'. [ 593.823036][T25500] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5211'. [ 594.246447][T25526] netlink: 'syz.1.5220': attribute type 11 has an invalid length. [ 594.266820][T25526] netlink: 'syz.1.5220': attribute type 11 has an invalid length. [ 594.286598][T25526] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5220'. [ 594.311962][T25526] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5220'. [ 594.478269][T25543] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5225'. [ 594.491422][T25543] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5225'. [ 594.594380][T25547] [ 594.596763][T25547] ====================================================== [ 594.603782][T25547] WARNING: possible circular locking dependency detected [ 594.610811][T25547] syzkaller #0 Not tainted [ 594.615211][T25547] ------------------------------------------------------ [ 594.622208][T25547] syz.3.5228/25547 is trying to acquire lock: [ 594.628251][T25547] ffffffff8ea854e0 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_node_noprof+0x4a/0x690 [ 594.638079][T25547] [ 594.638079][T25547] but task is already holding lock: [ 594.645424][T25547] ffff88803286ee60 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: inet_stream_connect+0x51/0xa0 [ 594.655070][T25547] [ 594.655070][T25547] which lock already depends on the new lock. [ 594.655070][T25547] [ 594.665454][T25547] [ 594.665454][T25547] the existing dependency chain (in reverse order) is: [ 594.674447][T25547] [ 594.674447][T25547] -> #7 (k-sk_lock-AF_INET6){+.+.}-{0:0}: [ 594.682338][T25547] lock_sock_nested+0x41/0x100 [ 594.687606][T25547] do_tcp_setsockopt+0x8fb/0x2060 [ 594.693136][T25547] mptcp_setsockopt+0x1133/0x35d0 [ 594.698672][T25547] do_sock_setsockopt+0x17c/0x1b0 [ 594.704211][T25547] __x64_sys_setsockopt+0x13d/0x1b0 [ 594.709915][T25547] do_syscall_64+0x15f/0xf80 [ 594.715013][T25547] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.721411][T25547] [ 594.721411][T25547] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 594.729129][T25547] lock_sock_nested+0x41/0x100 [ 594.734407][T25547] inet_shutdown+0x6a/0x390 [ 594.739438][T25547] nbd_mark_nsock_dead+0x2e9/0x560 [ 594.745071][T25547] recv_work+0x1c2e/0x1d40 [ 594.750007][T25547] process_scheduled_works+0xb5d/0x1860 [ 594.756066][T25547] worker_thread+0xa53/0xfc0 [ 594.761171][T25547] kthread+0x388/0x470 [ 594.765758][T25547] ret_from_fork+0x514/0xb70 [ 594.770855][T25547] ret_from_fork_asm+0x1a/0x30 [ 594.776131][T25547] [ 594.776131][T25547] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 594.783772][T25547] __mutex_lock+0x1a3/0x1550 [ 594.788889][T25547] nbd_queue_rq+0x37b/0x1100 [ 594.793993][T25547] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 594.800054][T25547] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 594.806896][T25547] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 594.813387][T25547] blk_mq_run_hw_queue+0x348/0x4f0 [ 594.819008][T25547] blk_mq_dispatch_list+0xd16/0xe10 [ 594.824726][T25547] blk_mq_flush_plug_list+0x48d/0x570 [ 594.830612][T25547] __blk_flush_plug+0x3ed/0x4d0 [ 594.835988][T25547] __submit_bio+0x28d/0x580 [ 594.841009][T25547] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 594.847151][T25547] block_read_full_folio+0x599/0x830 [ 594.852961][T25547] filemap_read_folio+0x137/0x3b0 [ 594.858504][T25547] do_read_cache_folio+0x358/0x590 [ 594.864130][T25547] read_part_sector+0xb6/0x2b0 [ 594.869403][T25547] adfspart_check_ICS+0xb1/0x960 [ 594.874854][T25547] bdev_disk_changed+0x817/0x1770 [ 594.880388][T25547] blkdev_get_whole+0x380/0x510 [ 594.885751][T25547] bdev_open+0x31e/0xd30 [ 594.890505][T25547] blkdev_open+0x470/0x610 [ 594.895425][T25547] do_dentry_open+0x785/0x14e0 [ 594.900691][T25547] vfs_open+0x3b/0x340 [ 594.905262][T25547] path_openat+0x2e08/0x3860 [ 594.910361][T25547] do_file_open+0x23e/0x4a0 [ 594.915378][T25547] do_sys_openat2+0x113/0x200 [ 594.920561][T25547] __x64_sys_openat+0x138/0x170 [ 594.925917][T25547] do_syscall_64+0x15f/0xf80 [ 594.931017][T25547] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.937412][T25547] [ 594.937412][T25547] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 594.944608][T25547] __mutex_lock+0x1a3/0x1550 [ 594.949706][T25547] nbd_queue_rq+0xc6/0x1100 [ 594.954711][T25547] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 594.960762][T25547] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 594.967604][T25547] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 594.974094][T25547] blk_mq_run_hw_queue+0x348/0x4f0 [ 594.979711][T25547] blk_mq_dispatch_list+0xd16/0xe10 [ 594.985426][T25547] blk_mq_flush_plug_list+0x48d/0x570 [ 594.991312][T25547] __blk_flush_plug+0x3ed/0x4d0 [ 594.996671][T25547] __submit_bio+0x28d/0x580 [ 595.001689][T25547] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 595.007831][T25547] block_read_full_folio+0x599/0x830 [ 595.013629][T25547] filemap_read_folio+0x137/0x3b0 [ 595.019173][T25547] do_read_cache_folio+0x358/0x590 [ 595.024799][T25547] read_part_sector+0xb6/0x2b0 [ 595.030082][T25547] adfspart_check_ICS+0xb1/0x960 [ 595.035537][T25547] bdev_disk_changed+0x817/0x1770 [ 595.041077][T25547] blkdev_get_whole+0x380/0x510 [ 595.046447][T25547] bdev_open+0x31e/0xd30 [ 595.051198][T25547] blkdev_open+0x470/0x610 [ 595.056123][T25547] do_dentry_open+0x785/0x14e0 [ 595.061393][T25547] vfs_open+0x3b/0x340 [ 595.065968][T25547] path_openat+0x2e08/0x3860 [ 595.071067][T25547] do_file_open+0x23e/0x4a0 [ 595.076077][T25547] do_sys_openat2+0x113/0x200 [ 595.081264][T25547] __x64_sys_openat+0x138/0x170 [ 595.086618][T25547] do_syscall_64+0x15f/0xf80 [ 595.091714][T25547] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 595.098116][T25547] [ 595.098116][T25547] -> #3 (set->srcu){.+.+}-{0:0}: [ 595.105234][T25547] __synchronize_srcu+0xca/0x300 [ 595.110679][T25547] elevator_switch+0x1e8/0x7a0 [ 595.115952][T25547] elevator_change+0x2cc/0x450 [ 595.121229][T25547] elevator_set_default+0x36c/0x430 [ 595.126934][T25547] blk_register_queue+0x3e9/0x4e0 [ 595.132472][T25547] __add_disk+0x677/0xd50 [ 595.137305][T25547] add_disk_fwnode+0xfb/0x480 [ 595.142484][T25547] nbd_dev_add+0x72c/0xb50 [ 595.147409][T25547] nbd_init+0x168/0x1f0 [ 595.152075][T25547] do_one_initcall+0x250/0x870 [ 595.157349][T25547] do_initcall_level+0x104/0x190 [ 595.162794][T25547] do_initcalls+0x59/0xa0 [ 595.167631][T25547] kernel_init_freeable+0x2a6/0x3e0 [ 595.173336][T25547] kernel_init+0x1d/0x1d0 [ 595.178179][T25547] ret_from_fork+0x514/0xb70 [ 595.183278][T25547] ret_from_fork_asm+0x1a/0x30 [ 595.188548][T25547] [ 595.188548][T25547] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 595.196350][T25547] __mutex_lock+0x1a3/0x1550 [ 595.201451][T25547] elevator_change+0x1b3/0x450 [ 595.206727][T25547] elevator_set_none+0xb5/0x140 [ 595.212083][T25547] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 595.218392][T25547] nbd_start_device+0x17f/0xb10 [ 595.223745][T25547] nbd_genl_connect+0x165b/0x1cf0 [ 595.229271][T25547] genl_family_rcv_msg_doit+0x22a/0x330 [ 595.235326][T25547] genl_rcv_msg+0x61c/0x7a0 [ 595.240336][T25547] netlink_rcv_skb+0x232/0x4b0 [ 595.245605][T25547] genl_rcv+0x28/0x40 [ 595.250098][T25547] netlink_unicast+0x75c/0x8e0 [ 595.255366][T25547] netlink_sendmsg+0x813/0xb40 [ 595.260631][T25547] ____sys_sendmsg+0x972/0x9f0 [ 595.265903][T25547] ___sys_sendmsg+0x2a5/0x360 [ 595.271083][T25547] __x64_sys_sendmsg+0x1bd/0x2a0 [ 595.276529][T25547] do_syscall_64+0x15f/0xf80 [ 595.281624][T25547] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 595.288023][T25547] [ 595.288023][T25547] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 595.296614][T25547] blk_alloc_queue+0x546/0x680 [ 595.301888][T25547] __blk_mq_alloc_disk+0x197/0x390 [ 595.307512][T25547] nbd_dev_add+0x499/0xb50 [ 595.312429][T25547] nbd_init+0x168/0x1f0 [ 595.317086][T25547] do_one_initcall+0x250/0x870 [ 595.322358][T25547] do_initcall_level+0x104/0x190 [ 595.327807][T25547] do_initcalls+0x59/0xa0 [ 595.332644][T25547] kernel_init_freeable+0x2a6/0x3e0 [ 595.338359][T25547] kernel_init+0x1d/0x1d0 [ 595.343208][T25547] ret_from_fork+0x514/0xb70 [ 595.348303][T25547] ret_from_fork_asm+0x1a/0x30 [ 595.353578][T25547] [ 595.353578][T25547] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 595.360773][T25547] __lock_acquire+0x15a5/0x2cf0 [ 595.366133][T25547] lock_acquire+0x106/0x350 [ 595.371139][T25547] fs_reclaim_acquire+0x71/0x100 [ 595.376585][T25547] kmem_cache_alloc_node_noprof+0x4a/0x690 [ 595.382895][T25547] __alloc_skb+0x1d0/0x7d0 [ 595.387823][T25547] tcp_stream_alloc_skb+0x3f/0x580 [ 595.393439][T25547] tcp_connect+0x15a9/0x53a0 [ 595.398537][T25547] tcp_v4_connect+0x10f7/0x19b0 [ 595.403894][T25547] tcp_v6_connect+0xbbb/0x1b10 [ 595.409169][T25547] __inet_stream_connect+0x25a/0xdd0 [ 595.414966][T25547] inet_stream_connect+0x66/0xa0 [ 595.420409][T25547] __sys_connect+0x312/0x450 [ 595.425504][T25547] __x64_sys_connect+0x7a/0x90 [ 595.430771][T25547] do_syscall_64+0x15f/0xf80 [ 595.435866][T25547] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 595.442261][T25547] [ 595.442261][T25547] other info that might help us debug this: [ 595.442261][T25547] [ 595.452466][T25547] Chain exists of: [ 595.452466][T25547] fs_reclaim --> sk_lock-AF_INET6 --> k-sk_lock-AF_INET6 [ 595.452466][T25547] [ 595.465398][T25547] Possible unsafe locking scenario: [ 595.465398][T25547] [ 595.472827][T25547] CPU0 CPU1 [ 595.478171][T25547] ---- ---- [ 595.483782][T25547] lock(k-sk_lock-AF_INET6); [ 595.488448][T25547] lock(sk_lock-AF_INET6); [ 595.495456][T25547] lock(k-sk_lock-AF_INET6); [ 595.502636][T25547] lock(fs_reclaim); [ 595.506605][T25547] [ 595.506605][T25547] *** DEADLOCK *** [ 595.506605][T25547] [ 595.514729][T25547] 1 lock held by syz.3.5228/25547: [ 595.519821][T25547] #0: ffff88803286ee60 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: inet_stream_connect+0x51/0xa0 [ 595.529904][T25547] [ 595.529904][T25547] stack backtrace: [ 595.535781][T25547] CPU: 0 UID: 0 PID: 25547 Comm: syz.3.5228 Not tainted syzkaller #0 PREEMPT(full) [ 595.535809][T25547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 595.535824][T25547] Call Trace: [ 595.535830][T25547] [ 595.535838][T25547] dump_stack_lvl+0xe8/0x150 [ 595.535855][T25547] print_circular_bug+0x2e1/0x300 [ 595.535875][T25547] check_noncircular+0x12e/0x150 [ 595.535895][T25547] __lock_acquire+0x15a5/0x2cf0 [ 595.535915][T25547] ? __lock_acquire+0x6b5/0x2cf0 [ 595.535931][T25547] ? kmem_cache_alloc_node_noprof+0x4a/0x690 [ 595.535949][T25547] lock_acquire+0x106/0x350 [ 595.535963][T25547] ? kmem_cache_alloc_node_noprof+0x4a/0x690 [ 595.535986][T25547] fs_reclaim_acquire+0x71/0x100 [ 595.536005][T25547] ? kmem_cache_alloc_node_noprof+0x4a/0x690 [ 595.536022][T25547] kmem_cache_alloc_node_noprof+0x4a/0x690 [ 595.536040][T25547] ? __alloc_skb+0x1d0/0x7d0 [ 595.536055][T25547] ? ipv4_default_advmss+0x20/0x340 [ 595.536076][T25547] __alloc_skb+0x1d0/0x7d0 [ 595.536093][T25547] tcp_stream_alloc_skb+0x3f/0x580 [ 595.536106][T25547] ? __asan_memset+0x22/0x50 [ 595.536123][T25547] tcp_connect+0x15a9/0x53a0 [ 595.536152][T25547] ? get_random_u16+0x139/0x910 [ 595.536168][T25547] ? __pfx_tcp_connect+0x10/0x10 [ 595.536196][T25547] ? __asan_memset+0x22/0x50 [ 595.536214][T25547] ? __pfx_tcp_fastopen_defer_connect+0x10/0x10 [ 595.536229][T25547] ? secure_tcp_seq_and_ts_off+0xf2/0x1d0 [ 595.536248][T25547] ? sk_setup_caps+0x9ef/0xc40 [ 595.536266][T25547] ? sk_setup_caps+0x29/0xc40 [ 595.536283][T25547] tcp_v4_connect+0x10f7/0x19b0 [ 595.536306][T25547] ? __pfx_tcp_v4_connect+0x10/0x10 [ 595.536320][T25547] ? aa_label_sk_perm+0x52b/0x6e0 [ 595.536335][T25547] ? tcp_v6_connect+0x62d/0x1b10 [ 595.536357][T25547] tcp_v6_connect+0xbbb/0x1b10 [ 595.536377][T25547] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 595.536395][T25547] ? __lock_acquire+0x6b5/0x2cf0 [ 595.536410][T25547] ? __pfx_tcp_v6_connect+0x10/0x10 [ 595.536434][T25547] __inet_stream_connect+0x25a/0xdd0 [ 595.536456][T25547] ? do_raw_spin_lock+0x12b/0x2f0 [ 595.536474][T25547] ? lock_sock_nested+0x6a/0x100 [ 595.536487][T25547] ? __pfx___inet_stream_connect+0x10/0x10 [ 595.536508][T25547] ? inet_stream_connect+0x51/0xa0 [ 595.536527][T25547] ? __local_bh_enable_ip+0xd0/0x130 [ 595.536543][T25547] inet_stream_connect+0x66/0xa0 [ 595.536563][T25547] __sys_connect+0x312/0x450 [ 595.536579][T25547] ? __pfx___sys_connect+0x10/0x10 [ 595.536598][T25547] ? rcu_is_watching+0x15/0xb0 [ 595.536616][T25547] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 595.536630][T25547] __x64_sys_connect+0x7a/0x90 [ 595.536646][T25547] do_syscall_64+0x15f/0xf80 [ 595.536663][T25547] ? trace_irq_disable+0x3b/0x140 [ 595.536682][T25547] ? clear_bhb_loop+0x40/0x90 [ 595.536698][T25547] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 595.536712][T25547] RIP: 0033:0x7fb9a8f9cdd9 [ 595.536725][T25547] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 595.536737][T25547] RSP: 002b:00007fb9a9ece028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 595.536752][T25547] RAX: ffffffffffffffda RBX: 00007fb9a9215fa0 RCX: 00007fb9a8f9cdd9 [ 595.536762][T25547] RDX: 000000000000001c RSI: 0000200000000280 RDI: 0000000000000004 [ 595.536771][T25547] RBP: 00007fb9a9032d69 R08: 0000000000000000 R09: 0000000000000000 [ 595.536780][T25547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 595.536788][T25547] R13: 00007fb9a9216038 R14: 00007fb9a9215fa0 R15: 00007fffc66430f8 [ 595.536804][T25547] [ 595.990737][T25555] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5229'.