last executing test programs: 5.788706125s ago: executing program 2 (id=8734): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff}) (async) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r3, &(0x7f0000002340)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f00000000c0)='O', 0x1}], 0x1}}], 0x1, 0x0) (async) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f00000002c0)={r5}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f00000001c0)={r5, @in={{0x2, 0x4e23, @empty}}, [0xf0, 0x3ff, 0x8, 0x7f8000, 0x4, 0x4, 0x4, 0x81, 0x7, 0x7, 0x2bb3, 0xe, 0x9, 0x0, 0x9]}, &(0x7f00000002c0)=0x100) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000004c0)={r6, 0xcc, &(0x7f00000003c0)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e23, 0x80000000, @mcast2, 0x6}, @in={0x2, 0x4e21, @loopback}, @in6={0xa, 0x4e21, 0x9, @remote, 0x27}, @in6={0xa, 0x4e24, 0x6eeb1f5a, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6}, @in6={0xa, 0x4e23, 0x703c, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7f}, @in={0x2, 0x4e23, @private=0xa010102}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x20}}, @in6={0xa, 0x4e23, 0x0, @local, 0xfa}]}, &(0x7f0000000500)=0x10) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xe, 0x3, 0x1, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newqdisc={0x170, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x8, 0x5, 0x400, 0x9, 0x81, 0x101, 0x86a4, 0xc40, 0x7fffffff, 0xfffffffd, 0x1, 0xb, 0x16, 0x0, 0xca11, 0xffff}}, @TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x170}, 0x1, 0x0, 0x0, 0x845}, 0x24008004) 4.767911923s ago: executing program 2 (id=8746): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000004000000080000000a"], 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000e00000001000000000000010400000020000001000000000000000d01000000050000000000000c020000000a0000000000000c0200000000696e74006d61696e0073"], 0x0, 0x5a}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f0000000608)="0900000004", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18110000", @ANYRES32=r0, @ANYBLOB="000000000000000018420000060000000000000000000000b703000000000000b70400000000000085000000a4000000b7000000000000009500000000000000b7000000fffffff29500000000000000"], &(0x7f0000000500)='GPL\x00', 0x1, 0x100000, &(0x7f0000000700)=""/1048576, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x8, &(0x7f0000000600)={0x0, 0x3}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) 4.418236354s ago: executing program 2 (id=8749): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev}, 0x2}}, 0x2e) ioctl$sock_SIOCGIFINDEX(r3, 0x8004745a, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r1, 0x5) connect$inet(r2, &(0x7f0000000010)={0x2, 0x4e20, @loopback}, 0x10) r5 = accept(r1, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000020), 0x4) setsockopt$inet_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000030)=@gcm_128={{0x303}}, 0x28) write(r2, &(0x7f0000000400)='N>', 0x2) setsockopt$inet_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000020), 0x4) setsockopt$inet_tcp_TLS_RX(r5, 0x11a, 0x2, &(0x7f0000000030)=@gcm_128={{0x303}}, 0x28) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)}, 0x40) recvmsg(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)=""/256, 0x100}], 0x1}, 0x40) r6 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x2c, 0x44, 0x1, 0x70bd29, 0x4, {0x1}, [@nested={0x4, 0x8}, @nested={0x14, 0x1, 0x0, 0x1, [@nested={0xd, 0x75, 0x0, 0x1, [@nested={0x4, 0x80}, @generic="b48c9bbd89"]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200408d1}, 0x40088d2) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0x20}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=@newtfilter={0x64, 0x2c, 0xf3f, 0x70fc2c, 0x25dfdbbd, {0x0, 0x0, 0x0, r7, {0xc, 0xc}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x34, 0x2, [@TCA_BASIC_EMATCHES={0x30, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_META={0x20, 0x1, 0x0, 0x0, {{0x3, 0x4, 0x1}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x86, 0x1}, {0x5, 0x7}}}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x8]}]}}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20041090}, 0x4880) 3.596299952s ago: executing program 1 (id=8757): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000e00000001000000000000010400000020000001000000000000000d01000000050000000000000c020000000a0000000000000c0200000000696e74006d61696e0073"], 0x0, 0x5a}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f0000000608)="0900000004", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xc, 0x4, 0x0, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18110000", @ANYRES32, @ANYBLOB="0000000000000f0018420000060000000000000000000000b703000000000000b70400000000000085000000a4000000b7000000000000009500000000000000b7000000fffffff29500000000000000"], &(0x7f0000000500)='GPL\x00', 0x1, 0x100000, &(0x7f0000000700)=""/1048576, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x8, &(0x7f0000000600)={0x0, 0x3}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) 3.383552396s ago: executing program 1 (id=8759): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000004000000080000000a"], 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000e00000001000000000000010400000020000001000000000000000d01000000050000000000000c020000000a0000000000000c0200000000696e74006d61696e0073"], 0x0, 0x5a}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f0000000608)="0900000004", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18110000", @ANYRES32=r0, @ANYBLOB="000000000000000018420000060000000000000000000000b703000000000000b70400000000000085000000a4000000b7000000000000009500000000000000b7000000fffffff29500000000000000"], &(0x7f0000000500)='GPL\x00', 0x1, 0x100000, &(0x7f0000000700)=""/1048576, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x8, &(0x7f0000000600)={0x0, 0x3}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) 3.292024782s ago: executing program 2 (id=8760): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000001800010400000000020000000a400000fe0200010000000014000500fe800000000000000000000000000002080004001f2afeed5120b6470dcda1d82bd9e0e3dbc8dee18483cc9e8a9db7a906072e8f4226c54635e940", @ANYRES8=r0, @ANYBLOB="0600150008000000200016801c00010000020101"], 0x60}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000300)={0x0, 0x6, 0x40000, 0x6}, &(0x7f0000000380)=0x10) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) r4 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x2, 0x5, 0x470, 0x0, 0x488, 0xffffffff, 0x0, 0x268, 0x558, 0x558, 0xffffffff, 0x558, 0x558, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@empty, @ipv6=@remote}}}, {{@ipv6={@dev, @loopback, [], [], 'batadv0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x1b}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [0x0, 0xff000000], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000010280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x800c1}, 0x8004) accept4(r5, 0x0, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket(0x28, 0x1, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x3a8, 0xf0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x2d8, 0xffffffff, 0xffffffff, 0x2d8, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x60030000, {0x0, 0xff000000}, [@inet=@rpfilter={{0x28}, {0x4}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@remote, @private2, [0xffffff00, 0xffffffff], [0xffffffff, 0xffffff00, 0xffffffff, 0xff], 'bond_slave_1\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x1c8, 0x1e8, 0x0, {}, [@common=@mh={{0x28}, {"57f8"}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x10, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000040)={0x0, 0x5, 0x8, 0xe327, 0x35a058, 0x8, 0x1, 0x0, r3}, &(0x7f0000000140)=0x20) 3.001757561s ago: executing program 1 (id=8763): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c00040000000000000000000000000b00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c00028005001100de000000"], 0x3c}}, 0x0) syz_emit_ethernet(0xc7b, &(0x7f0000000a80)={@random="61fe71b72b5f", @link_local={0x17, 0x80, 0xc2, 0x2, 0x9, 0x3}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "001958", 0xc45, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x1a}, @mcast2, {[@hopopts={0x5c, 0x0, '\x00', [@pad1]}, @hopopts={0x2, 0x0, '\x00', [@ra={0x5, 0x2, 0x8}]}, @hopopts={0x97688bbb357c7c1e, 0x13, '\x00', [@hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @hao={0xc9, 0x10, @mcast1}, @pad1, @calipso={0x7, 0x58, {0x1, 0x14, 0x50, 0x9d, [0xdba, 0x7037, 0x100000000, 0x0, 0x9652, 0x80000000, 0x5, 0x5f, 0x26, 0xffffffffffffac81]}}, @enc_lim={0x4, 0x1, 0xfa}, @enc_lim={0x4, 0x1, 0x87}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @local}}, @jumbo={0xc2, 0x4, 0x4}]}, @hopopts={0x3a, 0x3, '\x00', [@ra, @enc_lim={0x4, 0x1, 0xea}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}]}, @hopopts={0x32, 0xa, '\x00', [@jumbo={0xc2, 0x4, 0x2}, @pad1, @ra={0x5, 0x2, 0x8}, @hao={0xc9, 0x10, @empty}, @padn, @ra={0x5, 0x2, 0x8001}, @calipso={0x7, 0x28, {0x1, 0x8, 0xd8, 0xfe5, [0x5, 0xffffffffffff8000, 0xd560, 0xc6]}}, @pad1, @ra]}, @dstopts={0x89, 0xd, '\x00', [@pad1, @generic={0x4, 0x18, "c8a112f6d85bf88233a38db89dd29eadb6428ba9edd2661f"}, @calipso={0x7, 0x40, {0x2, 0xe, 0x8, 0x8e80, [0xcc99d33, 0x8, 0x1, 0xfffffffffffffffd, 0x1, 0x0, 0x9]}}, @jumbo={0xc2, 0x4, 0xfffffff7}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}]}, @hopopts={0x67, 0x8, '\x00', [@hao={0xc9, 0x10, @private0}, @calipso={0x7, 0x10, {0x3, 0x2, 0x81, 0x3, [0xa]}}, @enc_lim={0x4, 0x1, 0x5}, @jumbo={0xc2, 0x4, 0x1}, @enc_lim={0x4, 0x1, 0x1}, @hao={0xc9, 0x10, @mcast2}]}], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0, [{0x3, 0xa, "a78ce5400659808000000003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42c60a5c15b37adac15084dbaf736b41d5af1802"}, {0x0, 0x1, "ffffffffffffff8026000400"}, {0x3, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d036397a0acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x6, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a000023f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x1f, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743474671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68f2d2c6393a9f3becd1a9f51a948b5b303f4f025"}, {0x21, 0x8, "fcc1876d4ed6eeba5aba6fbb1496bf6756bdc1876d4e6fa3ce2dfdb43a6f129cb6684530021659ff5c2d6b3d9362ed09bd9281c9fe68a3000000006f0000044e43e740e0"}, {0x1, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1eb91a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d96967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c000000000000000000"}, {0x1f, 0x5, "090000000900000036da018dff16a70b8b1400001600e18e88605aa6be1a02a326a6bce65f81ed"}, {0x1f, 0xb, "d4e77f8854c2b77855807444dd5cbd4b0ddeac8f5280f5d9178b66796b4c15a850e4078c8a61f4a1936bfd2868bfb38d16aa1129954c7c1c102f6eea58a67659ed751b2a1dea57caba3e1ce15024c25eb512471954efdf4de80d7ca3c6"}, {0x0, 0xc8, "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"}]}}}}}}, 0x0) 2.949538291s ago: executing program 3 (id=8764): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, r3, 0x504c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x38, r1, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_LINK={0x8, 0x1, r3}, @GTPA_MS_ADDR6={0x14, 0xc, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1f371693c3ceafd2}, 0x20004880) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x8002, 0x7}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r5, 0x0, &(0x7f0000001700)=""/53}, 0x20) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) 2.762815651s ago: executing program 1 (id=8765): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x14, r3, 0x601, 0x70bd25}, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0x5}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xfffffffffffffee8, 0x2, [@TCA_CODEL_INTERVAL={0x8, 0x3, 0x2}]}}]}, 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x0, 0x200}}]}}]}, 0x48}}, 0x20040084) accept(r6, &(0x7f00000003c0)=@nfc_llcp, &(0x7f0000000440)=0x80) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r12 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=@newtfilter={0x88, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xc, 0xfff3}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x3, 0x4, 0x8001, 0xfffffbff}, 0x80}}]}, {0x4}, {0x0, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8080) r13 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r13, &(0x7f0000000340)={&(0x7f0000000140)=@xdp={0x2c, 0x8, r4, 0x1b}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000380)='\x00', 0x1}], 0x1}, 0x4011) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000611082000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x7e, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x4, 0x0, @broadcast=0x1000000, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @empty, {[@timestamp_addr={0x44, 0x4}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@local}, {}, {@dev={0xac, 0x14, 0x14, 0x36}}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev}]}]}}}}}}}, 0x0) 2.594014255s ago: executing program 4 (id=8767): openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x118}}, 0x0) 2.421227212s ago: executing program 0 (id=8768): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000004000000080000000a"], 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000e00000001000000000000010400000020000001000000000000000d01000000050000000000000c020000000a0000000000000c0200000000696e74006d61696e0073"], 0x0, 0x5a}, 0x28) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0b000000080000000c0000000300000001"], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f0000000608)="0900000004", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18110000", @ANYRES32=r0, @ANYBLOB="000000000900000018420000060000000000000000000000b703000000000000b70400000000000085000000a4000000b7000000000000009500000000000000b7000000000000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x1, 0x100000, &(0x7f0000000700)=""/1048576, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x8, &(0x7f0000000600)={0x0, 0x3}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) 2.2991469s ago: executing program 3 (id=8769): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x9) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000027000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) socket$packet(0x11, 0x2, 0x300) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x400c89c) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r5, 0x28, 0x6, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, 0x0, 0x0, 0x4, 0x0, 0x0) connect$can_bcm(r5, &(0x7f0000000340), 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) shutdown(r2, 0x1) sendmsg$netlink(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0) 2.159159519s ago: executing program 0 (id=8770): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000004000000080000000a"], 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000e00000001000000000000010400000020000001000000000000000d01000000050000000000000c020000000a0000000000000c0200000000696e74006d61696e0073"], 0x0, 0x5a}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f0000000608)="0900000004", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18110000", @ANYRES32=r0, @ANYBLOB="000000000040000018420000060000000000000000000000b703000000000000b70400000000000085000000a4000000b7000000000000009500000000000000b7000000020000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x1, 0x100000, &(0x7f0000000700)=""/1048576, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x8, &(0x7f0000000600)={0x0, 0x3}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) 2.008632038s ago: executing program 4 (id=8771): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0x11, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000003c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)={0x68, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r3}, @WGDEVICE_A_PEERS={0x4c, 0x8, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x0, @loopback, 0x300}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}]}]}, 0x68}}, 0x0) 1.831396198s ago: executing program 0 (id=8772): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x17, 0x0, 0x8400, 0xc5, 0x114}, 0x48) r1 = socket(0x1e, 0x1, 0x0) connect$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r1) nanosleep(&(0x7f00000000c0)={0x77359400}, &(0x7f0000000100)) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f0000000040)) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0xac}}, 0x0) 1.786902109s ago: executing program 3 (id=8773): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) recvmmsg(r0, &(0x7f00000030c0)=[{{&(0x7f0000000540)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, 0x0}, 0x6}, {{0x0, 0x0, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000000240)=""/62, 0x3e}], 0x2}, 0xdc}], 0x2, 0x2, 0x0) (async) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) (async, rerun: 32) r2 = socket(0x200000000000011, 0x2, 0xd) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r4}, &(0x7f0000000840), &(0x7f0000000880)=r5}, 0x20) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r5, r3, 0x25, 0x2, @val=@netfilter={0x0, 0x3, 0x2018}}, 0x20) (async) sendmmsg$inet(r1, &(0x7f00000015c0)=[{{&(0x7f0000000000)={0x2, 0x4e23, @empty}, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)="735ca936c5d66d55fad1c97538ac9d9e87a2fd29f9353969edab797fff31ebdf2c56c4a3cb6ecdc630b0ebddb672b2c6cff7ed249edc288bda918773c444e9a983020c2fe8268a6c4996f426c4f553d6c4e814f9d3c13f200bc9afbbed475b5ae95ead9b62bcb3e8fa0857c9b1b48d3ce425cca44fc46af61dc8bcdbee74e17dcb4c95f242b6665d0bb372b4688ece97eee6cc0f539f8aeaf449c9d272b4cc7853573d9df548b8d953433e3110f6cfe635fd56acc1d46456183e9e327c764da73f1b314d8515f5f8e4455aa9b859024cb03b91c0154b86887e0656559f8fba8fb65a2695e89b853d9ffd"}], 0x0, &(0x7f00000005c0)=[@ip_pktinfo={{0x0, 0x0, 0x8, {r3, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback}}}, @ip_tos_u8={{0x0, 0x0, 0x1, 0x10}}, @ip_tos_int={{0x0, 0x0, 0x1, 0x7fffffff}}, @ip_tos_int={{0x0, 0x0, 0x1, 0x1}}, @ip_retopts={{0x0, 0x0, 0x7, {[@lsrr={0x83, 0x0, 0x8e, [@local, @dev={0xac, 0x14, 0x14, 0x1f}, @local, @empty]}, @cipso={0x86, 0x0, 0x1, [{0x6, 0x0, "a26a5137"}, {0x7, 0x0, "9fbcee70cb"}, {0x1, 0x0, "19b15806bf9ad7"}, {0x7, 0x0, "d771130d0f97fb317cf96435416c172c"}, {0x2, 0x0, "c10c3a6c793e94935f03a9cd8193"}, {0x7, 0x0, "60eddc35e3a8048aa130ba2eecd7dd11"}, {0x2, 0x0, "fd"}, {0x2, 0x0, "a8239897390ef2edc651c45f56b358ac"}, {0x2, 0x0, "fafd4a"}]}, @lsrr={0x83, 0x0, 0xc0, [@remote, @local, @rand_addr=0x64010100]}]}}}, @ip_ttl={{0x0, 0x0, 0x2, 0x7}}, @ip_tos_u8={{0x0, 0x0, 0x1, 0x1}}, @ip_tos_u8={{0x0, 0x0, 0x1, 0x6}}]}}, {{&(0x7f0000000740)={0x2, 0x0, @rand_addr=0x64010100}, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a00)="b46061f1b583f3c237dc45d73ed34007248f597ba6451b23435011e433236d987d3578cd8b6e2bf12a5af5625ca22f6f58285a0e77aa1386e0820c8b238543c3fcdb5aff971493c712a8020e96b60dad4da5695a81fd583f16d1b5a64d353598eaf8ec5508c6943546958f011ffda193315fc1dc08291973399cfc7358de713d22019f250fa195671e58d3f2bd35080d46aa3ebfd1323f6a19d09367fc0da76391ab8f057b84e2ecf6aae3752e7495f70f4594fd2144e46771e4ca925cf4af647f0d1569026cec57"}, {&(0x7f0000000b00)="8a1aafa1e6caa0da8f853c920928cc2ee4fc499229469273f2e74124251400f6f0433ad2a599f63448fb7c446a66a0c1b2c8ba4ae89a46f443a7b80a16a9c549579f3b592660b76a5a82203c13efd766e7b9722bdf03b8ccd5aa8be8179263b1fb66a96ec635bdaaf3c70c88905acd4d69259a9b1f301a02a9aff4"}, {&(0x7f0000000b80)="5b7af46567bbb8f66df5baf3ba8039ca4bbc9ef400eabf250136fc02771bc4aae2bbfa0b2ff86db8a526a89dcab6e3980a6c975dfd7f260aae7d5fec85e7b029dc074eabdb713423a9cd5ec5cc90063216e54df899ac4026f703457e6b0aa58590cec6b799e518769ebb2601ac00db512cec4f8c5b5aa5f9db1e90a0e3501ed4ea235e25bcf8583201a14ad35cdcbd7d9ed369664f9249eb55420a4ab4286ae639e23f0aed61884b44e755b32540ea329c0c4b7e35db7bc9328e6d57ed6a0bbc2aff186521"}, {&(0x7f0000000c80)="fdf457b65cb20761cfe4072b2bb4bf5511044666c50473acdb420c9f8fbc3c3c388fa34b5c27ced19e7db6f576153d221245ef19538b94dc80759af5044c21"}, {&(0x7f0000000cc0)="acd4213e0d3b0e34122f81307018585faa3ee67db7160f23fa7235070f4e7e7cdd421d9a5f15bcc7ef1d78c875a23072b216c9bce13d8d6cc83a8d6dd84f64bdf50aff0cc83236672bd4ee9e6e107da864735894a3af35247b030646fae68f518442d6ab21773a371bfbed31cf1063f3c3ed96e24671e02e0b4d2dee8b04bbb827b9b9568abbd05e7c3d97fa1b5ad127b1ec68c4fa165091909e6e5dd8f42914133d8a1f423b79a0de4db250f233db4962da9512379516123bc0"}, {&(0x7f0000000d80)="c05e30afb23b55dbf086bc5c0c1485e6ee5567f7c3a2b3987add59ffb6cd127e5f2fa08982f9ce2c40dbc03f5631b803ceaf2a77e46f823ccfc78ec1f0c71caf33575b406c5ebef1359d333d543fece667aa7a6164df38e7d28466d34e89a8912783b2e2cb7bf96c8e7cf6dc6d9d140ac71a5327682b352dc2c6b82d988c3ffe334d233abe9f5916ae8bf69263d6ac9df3520d6dea489bd124ad2acd938fa695dc05379b1ef3925eee6bd4197bedc56cfb1d8c53fb5d9b56043334434bf45ae974370b918ea47a7a51dd778b09cc54f83a821aa5aca1697f66c31e0957afcc1dc4272fec7d7d6ff611fb9d"}], 0x0, &(0x7f0000000f00)=[@ip_retopts={{0x0, 0x0, 0x7, {[@timestamp={0x44, 0x0, 0x6, 0x0, 0x6, [0xb, 0x0, 0x4, 0xfffffffd, 0xffff0000, 0x627153cf, 0x800, 0x10, 0x7fffffff]}, @noop]}}}, @ip_retopts, @ip_tos_int={{0x0, 0x0, 0x1, 0x9}}, @ip_pktinfo={{0x0, 0x0, 0x8, {0x0, @multicast1, @remote}}}, @ip_pktinfo={{0x0, 0x0, 0x8, {r3, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_pktinfo={{0x0, 0x0, 0x8, {r3, @rand_addr=0x64010102, @multicast2}}}]}}, {{&(0x7f0000001000)={0x2, 0x6, @multicast2}, 0x0, &(0x7f0000001500)=[{&(0x7f0000001040)="4257bd9f8390f906cb407caea3aec96111783c3d8d4a3336972325eb96aff762d4adffe28f2855d7df58bf5a4ec3ffbfee3bb076829baaa86d1166464e82fc13eb78face7195bcb013cb2252bc1369fd1a"}, {&(0x7f00000010c0)="5a4a85b807bda6b21977a5a45df77824a4b9699cb5ceeef2f7f61ddc9a6d8ba245"}, {&(0x7f0000001100)="2c3676a08f71459513227cb1682b69a7df09243c45a902db2a85b2efe2f2"}, {&(0x7f0000001140)="918db3cc85a7bee07f06a88ae88d16fa2490237a1220c8880e418ca3179a7681c7dee42eab220a27e8b578755eed9e2f0501697d7daaede09218df73af5cefcbeb17d3"}, {&(0x7f00000011c0)="0344137177ee83b15901d991c2ade3a00f814b53c5d272af617810b6435f1181a82d43b54c1276fc2e820810dfc7242ea9006dcfa20f05ccc9cd5a016d75bf5efdb96db9a99b4b3b68d4ca61792b83965e0c4e0f63c1c710285c462c0de4f6552642a11e7cf17c07382564eed3e4638dc42d3f9f62faa6c27f76ccf8bbdefb129d4a3e21a9c0b4613343fe500988c51598f66a64626d408a8e49e09b81829d8cf9e2d209a995d86f0f89014ff18e54dd40b2a076780e04"}, {&(0x7f0000001280)="144c6f30a0937712351641945d6d72c0bb1d977f217ee140fb25b349f468f4d9192de8d2462fe5efb7fbbe0a120eac721f51092fde2ff302967a34c0a403bfa86f5e799c48443bdce2dd28bae513bf71318aaeeeda487ee233e4037a49ad786ee7bbaac71b9b889f2186a76533a3e6aebecf058d750e554a672ef4f7762c62519dd33d978129765f064b6cc769baa6a5df67f83ab8a541be7e20e78004c6589e8a63c0344bb07bbb0e7ece7ba762c7dfe8d82b0f2cf4f7520cbac64ce0234f0aaefa5afebeb4d01cebde23f2f4ac8ebff37a9c69a85d2316877b"}, {&(0x7f0000001380)="eaf85768eae7b97f27e946f64df38bc3176ae6083bea45815c7a3592488c454080dd21f0479e748b67c9b9ac6fe70ecbb49439fc6608839a9dad5efd57708c19167530666e360f25c5dbd9b920ca6cb3911ec2c70c24dff022ca527a5a40d02b303be3e8c0e07a757343157e47e35f2a4be2c9cdaba3229e236fc08fd2c01bdbc85750fee45734959829fee8db6eec075fa79cfe0a35bde8e32396e0ae29be00a925ae8da3feb1af80363dffe0a452e4145b67520651ba416f090878e5bf1b23588691bdb3881bf1bce95430f50f6a325ec7312f4c11a4d45b32c60ed451412b08dad7962c373c91d5213a0758cc3d490fa5581a"}, {&(0x7f0000001480)="2c68b53eeb8ded28bfbd79e9c161f05cc8a51691cf3016fb2f5dbec2b9e2156b4fde343756590ebb9beb73b013161fe19aa89f1b530f3a094d79a5420fc42b01024f9508580e698dd14b2b6132b745049537e7ec80a61724ed4c5973806ff6fc24bdbc463e1b8e0af642daff5e488ec26bea049c5c24f019403aba3c33da"}], 0x0, &(0x7f0000001580)=[@ip_tos_int={{0x0, 0x0, 0x1, 0x1}}]}}], 0x0, 0x4) 1.531065945s ago: executing program 4 (id=8774): r0 = socket(0x10, 0x3, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r1, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x8}, 0x10) write(r0, &(0x7f0000000500)="240000001e005f02141f00fffffffff801000000080000000000000008000902009ea5b1", 0x24) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) 1.471556809s ago: executing program 1 (id=8775): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x28, 0x1, 0x7, 0x201, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xfffffff7}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x90}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x4048000) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="00001000000000000200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400001d000000850000001500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f0000000040)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40d, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x484cb}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_RESEND_IGMP={0x8, 0xf, 0x7fff}]}}}]}, 0x3c}}, 0x0) 1.426837184s ago: executing program 2 (id=8776): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="2c00000011000100000000000000000007000000", @ANYRES32=r4, @ANYBLOB="100a0600090901000c001a80080006"], 0x2c}, 0x1, 0x0, 0x0, 0xc0c0}, 0x14) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000000)={'wlan1\x00', 0x2}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r7, 0x0) connect$x25(r7, &(0x7f0000000000)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3, 0x2}}, 0x12) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x24, r1, 0x5, 0x1, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x24}}, 0x40d4) sendmsg$NL80211_CMD_DEL_INTERFACE(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="11022cbd7000fedbdf250800000008000300", @ANYRES32=r6], 0x28}, 0x1, 0x0, 0x0, 0x48085}, 0x4) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) (async) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="2c00000011000100000000000000000007000000", @ANYRES32=r4, @ANYBLOB="100a0600090901000c001a80080006"], 0x2c}, 0x1, 0x0, 0x0, 0xc0c0}, 0x14) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000000)={'wlan1\x00', 0x2}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) (async) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) listen(r7, 0x0) (async) connect$x25(r7, &(0x7f0000000000)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3, 0x2}}, 0x12) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x24, r1, 0x5, 0x1, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x24}}, 0x40d4) (async) sendmsg$NL80211_CMD_DEL_INTERFACE(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="11022cbd7000fedbdf250800000008000300", @ANYRES32=r6], 0x28}, 0x1, 0x0, 0x0, 0x48085}, 0x4) (async) 1.256070216s ago: executing program 3 (id=8777): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0x8, &(0x7f0000000000), 0x8) sendmsg$inet(r1, &(0x7f0000000380)={&(0x7f0000000600)={0x2, 0x0, @private=0xa010100}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000180)="85adb9ff1d8e809a65e5", 0xa}, {&(0x7f0000000ac0)="4986e59d3df6b0823023b228123af1af02dddf7368c29b3c419bcf52058cedbf760b8db46d089fe741e912929c1f5f37eb79d4ff10b2a1c1bbfca0dc905871e8ad536eb1760eb73e0f8c2a910da2ac96f053487ebb51d93c2efa4831dcb162f169380935fc5ea4b88312f358dee08c0795a862b7ab704023a0e75fdf84624b857bec96467abe347a45b207f3fc88f551d1c841972ccc5b2cb31a16739cf966ceee81ea8a12eb9c4da26388855527d9998641df9fb49f1b73d86bd23a2c6f868bca8b557e", 0xc4}, {&(0x7f0000000e40)="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", 0x13b}, {&(0x7f0000001d00)="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", 0x3a4}], 0x4}, 0x0) (async) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) (async) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) (async) write(r0, &(0x7f00000000c0)="8f2a0a65bd8c202b0304000e0580a7b6070d63e286a5cefe", 0x5ac) 1.255513609s ago: executing program 4 (id=8778): r0 = socket$nl_rdma(0x10, 0x3, 0x14) syz_emit_ethernet(0x68, &(0x7f0000005a40)={@multicast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "75e700", 0x32, 0x3a, 0x0, @dev, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "a3579e", 0x0, 0x2c, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, [], "6be2"}}}}}}}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000180)=@ethtool_drvinfo={0x3, "55c926d748e9219f0595ad24890a6a15b2d52368edf173313fe245fb5ed9af9e", "fc3ebcf63a94a908599549df41158f149c5e1ce4e2082ab95ca423907d3ef289", "11c948cbc903529e681aca17173ac072b9b50f709829a5ec17155fe68a6829dd", "fede46b54094378d3bbcaaebcd42971817a4c31e9ec87f80b16012641e0dce25", "37ad975abe70c433906fdf7d67be68e374ec371af7752d9fb41a35fb9f55f0b5", "93479de76a07e7caf29fc22b", 0x7, 0x404, 0x7f, 0x5d46, 0x6}}) 990.604757ms ago: executing program 4 (id=8779): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x1}, 0x50) r1 = accept4$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14, 0xc00) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000100)={0x0, 0x0, {0x0, @struct, 0x0}, {0x0, @struct}, {0x0, @struct}}) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000500)={{r1}, {@val={r3}, @max}}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x18, 0x800, 0x5) r6 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000540)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r6, &(0x7f0000000580)={'b', ' *:* ', 'rwm\x00'}, 0xa) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r5) sendmsg$NL80211_CMD_GET_WOWLAN(r5, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, r7, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x7c}, @void, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x20008000) socket$nl_route(0x10, 0x3, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000780)=@mangle={'mangle\x00', 0x1f, 0x6, 0x590, 0x3b0, 0x0, 0xd0, 0x1e8, 0x2e0, 0x4c0, 0x4c0, 0x4c0, 0x4c0, 0x4c0, 0x6, &(0x7f0000000700), {[{{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x6, 0x80}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, [0xffffffff, 0xffffff00, 0xff000000, 0xffffff00], [0xffffffff, 0x0, 0xffffff00], 'veth0_virt_wifi\x00', 'tunl0\x00', {}, {0xff}, 0x6, 0xc, 0x4, 0x2}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@unspec=@ipvs={{0x48}, {@ipv6=@mcast1, [0xff, 0xffffff00, 0xff, 0xffffff00], 0x4e22, 0x84, 0x0, 0x4e23, 0x21, 0x8}}]}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [0xffffff00, 0xff, 0xffffffff, 0xffffff00], [0xff000000, 0xffffffff, 0xff000000], 'lo\x00', 'syzkaller0\x00', {}, {}, 0x33, 0x1, 0x3, 0x69}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x10, 0x9, 0x1}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x3f}, @remote, [0xffffffff, 0xff, 0xff, 0xff000000], [0x8d0f10244cc6b771, 0xffffffff, 0x0, 0xff], 'erspan0\x00', 'rose0\x00', {}, {}, 0x33, 0x5, 0x5, 0x8}, 0x0, 0xd0, 0x110, 0x0, {}, [@common=@icmp6={{0x28}, {0x5, "cd03", 0x1}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x7, 0xe33, @ipv4=@dev={0xac, 0x14, 0x14, 0x1e}, 0x4e23}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5f0) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$nl_route(r4, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)=@getlink={0x2c, 0x12, 0x20, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, 0x8540}, [@IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8004}, 0x40854) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r5, 0x10e, 0x8, &(0x7f0000000e80)=0x1e00, 0x4) r8 = socket$packet(0x11, 0x2, 0x300) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = accept$alg(r5, 0x0, 0x0) sendmsg$alg(r9, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001200)=[{&(0x7f0000000ec0)="d7d1dc5523fa64e7a8aeb3df7bd73637af7ca59743895f9f42577bf2f76af22ca6fa6d12566ba406917c8c05ec051cad1561ed9934d1ec875cc40459f60cdf9b57e499c4ea22a555ff4af14c3e2be63c817c503d14aa13bf6a311b9474bf8f851dc019bb90705fed80c5a96405075167f2bf407282ed3bd2009aa4ab01bf0ae03bf71178ffd00e8a5defa9a4a01dffc98cfca3ffa4e5daeda6f4c817ec7fee145dd8447b644e0c70deaff53eafe0fe431465", 0xb2}, {&(0x7f0000000f80)="691dcdb35b1d9ce247c0c5dc539a75e542688f2f7028eaaa7efe42e48191b00a282929f48d785333b35ca2dee26571ec6f6ae119769c7fdd684d8c6b3d9716cde27e8d8916f143bf876d469606f4ebb076ea612f29d758e8a7b12466fb343897d7c1a8242ad5aec4e122d601751b3bc77a5a04d8903bf9a58cf521d0e857f7d2822c254209aa034cdadbee7dde2247a4d457fde2ef16027d22d5d08f54eea32c61eeef63ab7a541a420c49c95576c76b79457661c9e938159effaa0a6a4b94c67f6e6254da857f53f1", 0xc9}, {&(0x7f0000001080)="4b283f333b0861bd3cdb18591cf464d2a65afabb4f0b4590c4a92d98ae17acbd71d40e53c5bab75690b523df02aebea8ebf293ddb66246719137a0aa246907dd52e82b949ab194de282ca46779ccfcaa1490503fdc156804b29fb80eb0c6704606eed66adc3b4df515", 0x69}, {&(0x7f0000001100)="846760ab0762e041804b2368f1884d27227bccad8aa8101684b9a09c1b6832e77d73bd35ad83996cdabd6e782fa8a396eec17c3d535775e0da973a1ba9bc7ade28298c205a07408dea003e742886139887441009262a7eafd001c1b28a0f57c4f04526c256e59773fe07d225ac6ea79dbed4aca16ba9119e9149969e168bf52c5079bcc56eedb950ca1988cedcbce1a207cba6a4787ca2ff6b86ffdfe1df71846f9e3ce957e45c111fc26426c196d22538b84b486b6a441c61a40a8f8111e8587feb98280daee8b9668425e8712429e36e88cb7fc1a783033da4e20c1bf53ca8fc8b5cc71dc56b19d06db22e83d32d647159", 0xf2}], 0x4, &(0x7f0000001240)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x5}], 0x30}, 0x40000) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000012c0)="2f372e26658f3200d3727934526cfcbab74a79a7425011cf2369dbd56aecdea01952229531a6fece04619e0a038cc794fdf02e3acb086e86cbf4aff8cb19b511a7647be514af4da03df8612d5e8ad8a3cdcede3237dc2cb642950e5d5f36", 0x5e) socket$inet(0x2, 0x80000, 0x17) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000013c0)={'syztnl1\x00', &(0x7f0000001340)={'ip6tnl0\x00', r2, 0x4, 0xa, 0x3, 0x7fff, 0x2c, @private2, @empty, 0x40, 0x8000, 0x6, 0x1}}) sendmsg$xdp(r5, &(0x7f00000014c0)={&(0x7f0000001400)={0x2c, 0x6, r10, 0x23}, 0x10, &(0x7f0000001480)=[{&(0x7f0000001440)="fed95b982d43e11b2c", 0x9}], 0x1, 0x0, 0x0, 0x880}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r8, &(0x7f0000001600)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x2c, r11, 0x2, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x9}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x9f1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x40045) ioctl$F2FS_IOC_COMPRESS_FILE(r6, 0xf518, 0x0) getsockopt$PNPIPE_IFINDEX(r5, 0x113, 0x2, &(0x7f0000001640), &(0x7f0000001680)=0x4) sendmsg$TIPC_CMD_DISABLE_BEARER(r5, &(0x7f00000017c0)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001780)={&(0x7f0000001740)={0x2c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {}, {0x10, 0x13, @udp='udp:syz2\x00'}}, ["", "", "", "", "", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x10) 695.598278ms ago: executing program 0 (id=8780): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000e00000001000000000000010400000020000001000000000000000d01000000050000000000000c020000000a0000000000000c0200000000696e74006d61696e0073"], 0x0, 0x5a}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f0000000608)="0900000004", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xc, 0x4, 0x0, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18110000", @ANYRES32, @ANYBLOB="000000ffffff3f0018420000060000000000000000000000b703000000000000b70400000000000085000000a4000000b7000000000000009500000000000000b7000000fffffff29500000000000000"], &(0x7f0000000500)='GPL\x00', 0x1, 0x100000, &(0x7f0000000700)=""/1048576, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x8, &(0x7f0000000600)={0x0, 0x3}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) 430.551305ms ago: executing program 3 (id=8781): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=ANY=[@ANYBLOB='\'\f\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"], 0x13c}, 0x1, 0x0, 0x0, 0x10}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r0}, 0x20) ioctl$sock_SIOCINQ(r0, 0x541b, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x10000, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000180)={'\x00', @multicast}) 339.298033ms ago: executing program 1 (id=8782): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f0000000240)={@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x20) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\b', 0x28, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @remote, @mcast2={0xe}}}}}}}, 0x0) sendto$inet(r0, &(0x7f0000000300)="9e", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0xa0, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0xa0}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xac}}, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000040)) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x23, 0x0, 0x0) 338.61922ms ago: executing program 2 (id=8783): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x9) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000027000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) socket$packet(0x11, 0x2, 0x300) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x400c89c) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r5, 0x28, 0x6, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, 0x0, 0x0, 0x4, 0x0, 0x0) connect$can_bcm(r5, &(0x7f0000000340), 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) shutdown(r2, 0x1) sendmsg$netlink(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0) 269.846565ms ago: executing program 0 (id=8784): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0xfa, "96a9bb0ba1ee7fd83d9f87c8208c6676816d4d18676fb24eb6ffe2e85ff4aceacfd3c3e4308e8e08115250fb949f240cccfcad847f5048f70de2e7b293bdf08fefc494641f6f8fd69a418c1bf82a2250a0fbca02295fa27523c5708932b4733db1ca06fcfc09aaa90074fcd6f7bb9894daa4bd7bc28b5fbacbd6518c251d59a1508dfc07062538cb6540d1a5dc7d3212e48a298348b903b1e5a31c03e8ce7e4cbba81cefb0f4d3e0426ae3b8dcea9369e368f41da6d15f9812356cbb38f2f4a4ff06890436029fd42ae0ecae033d216c98fbe7524538b06f976fa175401b3edbd9a444d26a8552bb1823b0c05509ff6e5e2c426cfe0ec477e1f7"}, &(0x7f0000000140)=0x102) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000180)={r1, 0x8}, 0x8) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f00000001c0)) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000300)='cpu.stat\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000006c0)={r1, 0xdae}, &(0x7f0000000700)=0x8) sendmsg$inet_sctp(r3, &(0x7f00000007c0)={&(0x7f0000000340)=@in6={0xa, 0x4e24, 0x9e5d, @local, 0x20}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000380)="6b80340e6d094860cbb2e31d75f39f8408c735a018c2ff64b859b28c68b23010482c7e166920b8c96a034463cf57893a0ce6b353524db9c6da92f147cf09feee92c0a4be80b85f184b6204169264782c2be36e1f324a9bfd76d64872a451c906d6d6dd056e", 0x65}, {&(0x7f0000000400)="75d9f5c202a985e1fdf4ebb5d2d41120993cd087fb76cfddf5e7df9bf6ef40ccde8ed96e7660c8575f0a1afbf28caae8f4d56cf6fa0cbdcc761b3ffb422650ae3cc3428f590cb72f07e447059d99955c0bfc4b8fec58ab3b500aca9ddf40ef50e773a907add11be2225e68da55a6a7f0932d8a814144c302ffad12c503114eec3017df1b9572df24f520f9e5b6478f4d1dd3c89ed7f36493232b836a34669846eca96f7eed897e0d577a76a8bdfafb55ef84e2a7fb", 0xb5}, {&(0x7f00000004c0)="7f9e71f1acbab07f3df6f83955883f9787ca99cc2fd0906b172103274b2f4c3624dcb9763883db47ceebe5424363a923fb5ebc5242ff09a70f5945ecc9252269bb1ba7038452b92bd41117d58e9c7beb5776d2a7089883772a999f654c355df91eaebff1b2ceddbcca9ab1cd5ef3326872cf8b9c16b97b9f87aa652bfa9b7e22f9af98", 0x83}, {&(0x7f0000000580)="b1e2b459163e9cd689efdf5aa5697f8ae0536022665e9242da367cc28d64f44e8d683c4d672e48c8433fa53473bfbb85124ee9f9a916c2e5c310872165f1df8ca946c4be0e76304482e46e97a8f917484aff5cc8878191d68e1d00cfc53eb721cce20835f7785e2cfd64028157c5d632745dbdcea07231cc761f550fdffb1732e41ff6c11cb838ffc6675b22f34e314dcd18db9439e5891998afa0747eb9ac9c9480df93f90d34003f63719d6e61a071e93f6ff35eb9e943c814a4306c2a5b8a60d559f377badf69aa2a31f1bbbfc584b77285879e7f88bfadc417d68c3bc8c161ee7b6ffc6fbdd66f6adfd101123e6b94b84ebbe280d75c", 0xf8}], 0x4, &(0x7f0000000740)=[@sndrcv={0x30, 0x84, 0x1, {0x8, 0x17, 0x8005, 0x7053, 0x5, 0x4, 0x7, 0x4, r4}}, @sndinfo={0x20, 0x84, 0x2, {0x4, 0x8004, 0x5, 0x8, r1}}], 0x50, 0x8000}, 0x94) setsockopt$inet6_buf(r3, 0x29, 0x6, &(0x7f0000000800)="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", 0xfd) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r3) setsockopt$inet_tcp_int(r3, 0x6, 0x0, &(0x7f0000000900)=0x42e, 0x4) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) sendto$inet(r5, &(0x7f0000000940)="1ef2e74b2091fdfffd96e4e6baded53c9775a48950a218b987a72f6d15f15c0876d61076f4d37195e1484bbdf014b6478edf88a1624a0ea176f6a90d6b4f58a0d90b0c098ccb49de6d7e32b5fae9ab7f59225601ede768ab94240f9010c45b6b3576d4980357f3c7dc0e74806c30d9d58d4f51d94f5b1904d0690c63d42d290dff48dbec3b79080ecff11387fc9895c2ce11f4a3d7b290399da92d96bd775bf3f19d655c3a7dd6829fb29da37e19bd45582527c3eeffb7bd6ca3adb2b8a468b656e8ad8e920602473fa9e9d0efe5", 0xce, 0x1, &(0x7f0000000a40)={0x2, 0x4e23, @broadcast}, 0x10) sendmsg$sock(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000a80)="3b2e5336e92218eb637a60b377df1ef1a88767373141351e99c989aa7b898732f8b05dd3a6fd46ac2ff29c664d6b63031dc1a4589868dc79d795efc751066518a2b8b07f80c35753d4f2cf735af5b533b45094f046bf9a3871bab44c30479102426c8c42532eb33fdb8e64dd40fb733a57c22263554200c84d304fb9cb223ee8ba341b3bbb8fb26e0ad1d1e0f1a5b157e9e7a6ddc9f5cd12cd57236f395f1aaf1fe08555860fc87235d98215a3168a5bc191b248257244f2c9bb321017c18f9667c8d678d411e6dce7572fb306645f08f89c35881093f5", 0xd7}], 0x1, &(0x7f0000000bc0)=[@txtime={{0x18, 0x1, 0x3d, 0x3ef}}, @timestamping={{0x14, 0x1, 0x25, 0xe}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @mark={{0x14}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0x646}}], 0xa8}, 0x200000c0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r3, 0x29, 0x37, &(0x7f0000000cc0)={0x2f, 0x8, '\x00', [@enc_lim, @ra={0x5, 0x2, 0x5}, @jumbo={0xc2, 0x4, 0x4b0}, @calipso={0x7, 0x38, {0x2, 0xc, 0x80, 0x4, [0x8, 0xa56, 0x400, 0x400, 0x1ff, 0x2]}}]}, 0x50) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000d40)={0xd9, 0x0, 0x9, 0xfd, 0x1, 0x6, 0x5, 0x3, 0x5, 0xa9, 0x6, 0x5, 0x2b, 0xe3}, 0xe) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001140)={0x0}, &(0x7f0000001180)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f00000011c0)={{{@in=@broadcast, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@multicast2}}, &(0x7f00000012c0)=0xe8) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000001300)={0x0, 0x0, 0x0}, &(0x7f0000001340)=0xc) r10 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000001380), 0x2, 0x0) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002440)={&(0x7f00000013c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x5, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x1, 0x2}]}, @restrict={0xf, 0x0, 0x0, 0xb, 0x2}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x1, 0x6}}]}, {0x0, [0x0, 0x61, 0x2e]}}, &(0x7f0000001440)=""/4096, 0x55, 0x1000, 0x1, 0x7}, 0x28) r12 = gettid() r13 = getuid() getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000002480)={0x0, 0x0, 0x0}, &(0x7f00000024c0)=0xc) sendmsg$unix(r3, &(0x7f00000025c0)={&(0x7f0000000d80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000010c0)=[{&(0x7f0000000e00)="1f0bc27be5cc38d171c2d7616d4456364adc72ffa6113e4472b57efd32f0e2c83f3b059c4c90db90dfcaa34df28955bf389e4e96eee12c9361560e4d026f9af6d7888245a2a8aab5d1b7e588a54488f4fff3e1517d3dda6cd5dd0b3d69fc390c0470b116a50818cccaa26d55c8ecf1df2b56580821992ab4e8e4abf4aa7d4d347dc8c2d6e42743359aeed87fa182c8262bea8f01a85ba39a2b2c54bd2c10a002c11cc612c1d51a716ce1a87be7a8c66c3fdacdd72800eebd869722b474a4e65a2c3bdec613330c8a96bd55691fdb9a11efc1a8de7016f2ff8f75f5", 0xdb}, {&(0x7f0000000f00)="ea122829e1f8e5af", 0x8}, {&(0x7f0000000f40)="d48d15d2f4e3a25bf8ec0710234767d0664f6b44c16229eb33e9730f0cd475fdef9ba217b4ba05bc11b073d2ceb3dfaf3bb8a5743a9c7aa6833b8caec6f2c49af9c5466f67c965dee2528ff80e228ed9053de740bb4587cf505fdd2c55aa030c3568f429eac7c9a9deece24e9b44df3de14ada83c28a94fdf2361e6298a290a2f723bfa62a2da5208d354659a025145e23f01ff8f7ebf28494ae7bbd58068f25d08ae011cad2360424c8ec67dbb2a2f5fbd02f08dec44f64cfb413", 0xbb}, {&(0x7f0000001000)="2bbdba07bef035ced20aeef1df46be7f2f84f9afeb44a183cd53b4aa1bc607dac9764b85050d85b083a62a48c9dbf6971140fd7374b7e5520cc0d2795bfba40bed1216826c2f031f8b4eb4b7be62f8482e36f00f07e9a2cd7104cf1dce3429504621a8601cbdaf274b014c2e79c7e92311070fbba149583021b8", 0x7a}, {&(0x7f0000001080)="153e6ee2146d8d4fd5d21695140d65a813ad3e", 0x13}], 0x5, &(0x7f0000002500)=[@rights={{0x1c, 0x1, 0x1, [r5, r5, r3]}}, @cred={{0x1c, 0x1, 0x2, {r6, r8, r9}}}, @rights={{0x18, 0x1, 0x1, [r10, r11]}}, @rights={{0x18, 0x1, 0x1, [r3, r0]}}, @cred={{0x1c, 0x1, 0x2, {r12, r13, r14}}}, @rights={{0x18, 0x1, 0x1, [r0, r3]}}], 0xa8, 0x80}, 0x4040) bind$xdp(r3, &(0x7f0000002600)={0x2c, 0x2, r7, 0x3a}, 0x10) sendmsg$IPSET_CMD_SAVE(r3, &(0x7f0000002700)={&(0x7f0000002640)={0x10, 0x0, 0x0, 0x400c04}, 0xc, &(0x7f00000026c0)={&(0x7f0000002680)={0x28, 0x8, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0xc1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x24008084}, 0x4000040) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000027c0)=@nat={'nat\x00', 0x1b, 0x5, 0x3d8, 0x298, 0x0, 0xffffffff, 0x298, 0xb0, 0x340, 0x340, 0xffffffff, 0x340, 0x340, 0x5, &(0x7f0000002740), {[{{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0xf9, 0x4}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x10, @dev={0xac, 0x14, 0x14, 0x12}, @private=0xa010100, @gre_key=0x401, @gre_key=0x32a7}}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[0x4e20, 0x4e24], [0x4e21, 0x4e24], 0x1, 0x8, 0x20, 0x6}}, @common=@inet=@hashlimit1={{0x58}, {'pim6reg0\x00', {0x60, 0x2, 0x0, 0x9, 0x6, 0x3, 0x5, 0x18}, {0x80000001}}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x4, @ipv4=@multicast1, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, @icmp_id=0x66, @port=0x4e22}}}, {{@uncond, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x2, @empty, @private=0xa010100, @icmp_id=0x65, @port=0x4e22}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x438) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000002c00)={r3}, 0x4) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000002c80)={{}, 0x0, 0x10, @unused=[0x5, 0x3, 0x3c, 0x4], @subvolid=0x4}) 80.992724ms ago: executing program 3 (id=8785): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x2710, @host}, 0x10) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r2, 0x28, 0x6, &(0x7f0000000100)={0x0, 0xea60}, 0x10) connect$vsock_stream(r2, &(0x7f0000000300)={0x28, 0x0, 0xffffffff}, 0x10) connect$vsock_stream(r2, 0x0, 0x0) connect$vsock_stream(r2, &(0x7f00000002c0)={0x28, 0x0, 0x2711, @hyper}, 0x10) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000d00007f000000000000000000"], 0x0, 0x26, 0x0, 0x1}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x0, 0xfffffffc}, 0x10}, 0x94) syz_emit_ethernet(0x36, &(0x7f0000000280)={@link_local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "0300", 0x0, 0x2c, 0xff, @remote, @local}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'hsr0\x00', 0x0}) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="400000006800010000000000fddbdf25020000000000000006000700020000001800088014000500fc00000000000000000000000000000108000500", @ANYRES32=r4], 0x40}, 0x1, 0x0, 0x0, 0x404cc83}, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f000000fa00)=0x9) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) socket(0xf, 0x5, 0x5) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) sendmsg$inet(r0, &(0x7f0000000a40)={0x0, 0x0, 0x0}, 0x11) 3.380121ms ago: executing program 4 (id=8786): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)={0x30, r1, 0x1, 0x70bd27, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7ffc}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004010}, 0x20000000) r3 = socket$key(0xf, 0x3, 0x2) ioctl$XFS_IOC_COMMIT_RANGE(r3, 0x40585883, &(0x7f0000000000)={r3, 0x0, 0x1, 0x5, 0x200, 0x8, [0xffffffffffffffd8, 0x48b824e8, 0x3, 0x4372, 0xec66, 0x8000000000000000]}) sendmsg$key(r3, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="02180000100000000000000000000000030006000000000002000004000000000000000000000000080012000000000000000000000000003000000000000000000000000000000002000001000000000000000000000000fc020000000000000000000000000000030005000000000002"], 0x80}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) 0s ago: executing program 0 (id=8787): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000140)={0x4, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @dev}}}, 0x108) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="3000000010000108fdff763f0000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000008001a8004002d"], 0x30}}, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000100)={0x4, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @remote}}}, 0x108) r3 = socket$netlink(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000060000000400000004"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r4}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r5, 0xffffffffffffffff}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r4}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r6}, &(0x7f0000000240), &(0x7f0000000280)=r4}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000a40)={r7, &(0x7f0000000a00)}, 0x20) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000280)="390000001300090468fe0700000000001000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000380)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f00030001332564aaee7b1d58b9a64411f6bbf44d", 0x39}], 0x1) socket$inet6(0xa, 0x2, 0x0) kernel console output (not intermixed with test programs): de [ 799.223580][T31588] syzkaller0: entered allmulticast mode [ 799.642481][T31613] netlink: 2 bytes leftover after parsing attributes in process `syz.3.6649'. [ 800.415441][T31650] xt_esp: unknown flags DD [ 800.431218][T31650] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 801.405461][T31695] __nla_validate_parse: 3 callbacks suppressed [ 801.414943][T31695] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6670'. [ 801.519333][T31695] netlink: 92 bytes leftover after parsing attributes in process `syz.1.6670'. [ 801.675590][T31695] netlink: 'syz.1.6670': attribute type 5 has an invalid length. [ 801.675663][T31695] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6670'. [ 802.462784][T31749] 8021q: adding VLAN 0 to HW filter on device bond1 [ 802.494663][T31749] 8021q: adding VLAN 0 to HW filter on device bond3 [ 802.798228][T31766] netlink: 'syz.1.6689': attribute type 11 has an invalid length. [ 802.798266][T31766] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6689'. [ 802.857965][T31766] netlink: 'syz.1.6689': attribute type 62 has an invalid length. [ 803.007758][T31781] netlink: 'syz.1.6689': attribute type 1 has an invalid length. [ 803.007826][T31781] netlink: 'syz.1.6689': attribute type 268 has an invalid length. [ 803.007890][T31781] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6689'. [ 803.064722][T31766] bond1: entered promiscuous mode [ 803.067749][T31777] netlink: 260 bytes leftover after parsing attributes in process `syz.0.6694'. [ 803.118226][T31786] vcan0: entered allmulticast mode [ 803.392610][T31796] sctp: [Deprecated]: syz.0.6700 (pid 31796) Use of struct sctp_assoc_value in delayed_ack socket option. [ 803.392610][T31796] Use struct sctp_sack_info instead [ 803.415347][T31797] ip_tables: iptables: counters copy to user failed while replacing table [ 803.997682][T31818] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6708'. [ 804.078177][T31821] xt_hashlimit: invalid interval [ 804.355506][T31837] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6715'. [ 804.461126][T31843] bridge0: port 1(bridge_slave_0) entered disabled state [ 804.837731][T31860] netlink: 112 bytes leftover after parsing attributes in process `syz.4.6722'. [ 805.023201][T31860] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6722'. [ 805.703304][T31890] bond2: (slave vlan2): making interface the new active one [ 805.712078][T31890] bond2: (slave vlan2): Enslaving as an active interface with an up link [ 805.833367][T23607] IPVS: starting estimator thread 0... [ 805.852673][T31897] IPVS: set_ctl: invalid protocol: 59 127.0.0.1:20002 [ 805.913969][T31901] netlink: zone id is out of range [ 805.919411][T31901] netlink: zone id is out of range [ 805.926422][T31901] netlink: zone id is out of range [ 805.932815][T31901] netlink: zone id is out of range [ 805.932857][T31901] netlink: zone id is out of range [ 805.933321][T31901] netlink: zone id is out of range [ 805.933329][T31901] netlink: zone id is out of range [ 805.933368][T31901] netlink: zone id is out of range [ 805.933408][T31901] netlink: zone id is out of range [ 805.970072][T31898] IPVS: using max 54 ests per chain, 129600 per kthread [ 806.595372][T31922] netlink: 'syz.1.6735': attribute type 39 has an invalid length. [ 807.162012][T31935] __nla_validate_parse: 12 callbacks suppressed [ 807.162061][T31935] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6738'. [ 807.245603][T31940] ip6t_REJECT: ECHOREPLY is not supported [ 807.663354][T31954] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6744'. [ 808.297490][T31975] netlink: 'syz.4.6747': attribute type 1 has an invalid length. [ 808.462598][T31987] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 808.549321][T31987] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 808.632482][T31980] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 811.817793][T31995] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6756'. [ 811.818101][T31995] netlink: 6 bytes leftover after parsing attributes in process `syz.4.6756'. [ 812.149667][T32016] netlink: 'syz.4.6761': attribute type 2 has an invalid length. [ 812.160155][T32016] netlink: 244 bytes leftover after parsing attributes in process `syz.4.6761'. [ 812.263203][T32020] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6763'. [ 812.263303][T32020] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6763'. [ 812.505359][T32036] netlink: 'syz.3.6768': attribute type 11 has an invalid length. [ 812.514170][T32036] netlink: 4320 bytes leftover after parsing attributes in process `syz.3.6768'. [ 812.584723][T32037] netlink: 'syz.1.6767': attribute type 1 has an invalid length. [ 812.584795][T32037] netlink: 500 bytes leftover after parsing attributes in process `syz.1.6767'. [ 812.636833][T32037] netlink: 'syz.1.6767': attribute type 16 has an invalid length. [ 812.636925][T32037] netlink: 'syz.1.6767': attribute type 17 has an invalid length. [ 812.714296][T32044] netlink: 'syz.4.6772': attribute type 21 has an invalid length. [ 812.714333][T32044] netlink: 128 bytes leftover after parsing attributes in process `syz.4.6772'. [ 812.742479][T32045] netlink: 'syz.4.6772': attribute type 21 has an invalid length. [ 812.742567][T32045] netlink: 128 bytes leftover after parsing attributes in process `syz.4.6772'. [ 812.803555][T32037] bridge0: port 1(bridge_slave_0) entered blocking state [ 812.803707][T32037] bridge0: port 1(bridge_slave_0) entered forwarding state [ 812.868928][T32049] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6773'. [ 812.924342][T32037] net_ratelimit: 5 callbacks suppressed [ 812.934702][T32037] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 812.956344][T32044] netlink: 'syz.4.6772': attribute type 5 has an invalid length. [ 812.956398][T32044] netlink: 3 bytes leftover after parsing attributes in process `syz.4.6772'. [ 812.963593][T32045] netlink: 'syz.4.6772': attribute type 5 has an invalid length. [ 812.963626][T32045] netlink: 3 bytes leftover after parsing attributes in process `syz.4.6772'. [ 813.186471][T32058] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6774'. [ 813.352467][T32069] netlink: 'syz.1.6779': attribute type 7 has an invalid length. [ 813.362282][T32069] netlink: 'syz.1.6779': attribute type 8 has an invalid length. [ 813.391001][T32069] bridge0: entered promiscuous mode [ 813.403066][T32069] syz_tun: entered promiscuous mode [ 813.404359][T32069] gretap0: entered promiscuous mode [ 813.442974][T32075] netlink: 'syz.1.6779': attribute type 7 has an invalid length. [ 813.443042][T32075] netlink: 'syz.1.6779': attribute type 8 has an invalid length. [ 814.088850][T32106] syzkaller1: entered promiscuous mode [ 814.088919][T32106] syzkaller1: entered allmulticast mode [ 814.311223][T32118] netlink: 'syz.2.6788': attribute type 8 has an invalid length. [ 814.764763][T32143] netlink: 'syz.1.6795': attribute type 7 has an invalid length. [ 814.776225][T32135] netlink: 'syz.1.6795': attribute type 1 has an invalid length. [ 815.904757][T32187] openvswitch: netlink: IPv4 frag type 32 is out of range max 2 [ 816.126833][T32200] bridge_slave_0: left allmulticast mode [ 816.126876][T32200] bridge_slave_0: left promiscuous mode [ 816.127121][T32200] bridge0: port 1(bridge_slave_0) entered disabled state [ 816.247815][T32200] bridge_slave_1: left allmulticast mode [ 816.248071][T32200] bridge_slave_1: left promiscuous mode [ 816.248503][T32200] bridge0: port 2(bridge_slave_1) entered disabled state [ 816.354597][T32200] bond0: (slave bond_slave_0): Releasing backup interface [ 816.408810][T32200] bond0: (slave bond_slave_1): Releasing backup interface [ 816.506321][T32200] team0: Port device team_slave_0 removed [ 816.580848][T32200] team0: Port device team_slave_1 removed [ 816.589948][T32200] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 816.590040][T32200] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 816.622449][T32200] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 816.630195][T32200] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 816.642963][T32200] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 816.824708][T32222] bond3: entered promiscuous mode [ 816.832253][T32222] 8021q: adding VLAN 0 to HW filter on device bond3 [ 816.910675][T32228] 8021q: adding VLAN 0 to HW filter on device bond3 [ 816.920676][T32228] bond3: (slave sit1): The slave device specified does not support setting the MAC address [ 816.935129][T32228] bond3: (slave sit1): Error -95 calling set_mac_address [ 816.940805][T32235] IPVS: set_ctl: invalid protocol: 137 172.20.20.170:20003 [ 816.996414][T32229] syzkaller0: entered promiscuous mode [ 816.996489][T32229] syzkaller0: entered allmulticast mode [ 817.255136][T32243] 0{X: renamed from gretap0 [ 817.270166][T32243] 0{X: entered allmulticast mode [ 817.276365][T32247] __nla_validate_parse: 14 callbacks suppressed [ 817.276430][T32247] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6820'. [ 817.300747][T32247] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6820'. [ 817.300838][T32247] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6820'. [ 817.314025][T32243] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 817.769809][T32266] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6825'. [ 817.792192][T32267] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6826'. [ 817.810991][T32261] bond0 (unregistering): Released all slaves [ 817.819454][ T31] audit: type=1804 audit(1788549782.658:79): pid=32265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.6824" name="/newroot/40/cgroup.controllers" dev="tmpfs" ino=223 res=1 errno=0 [ 817.844941][ T31] audit: type=1800 audit(1788549782.688:80): pid=32265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.6824" name="cgroup.controllers" dev="tmpfs" ino=223 res=0 errno=0 [ 818.309240][T32274] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6828'. [ 818.319863][T32282] netlink: 'syz.0.6830': attribute type 12 has an invalid length. [ 818.328118][T32282] netlink: 'syz.0.6830': attribute type 29 has an invalid length. [ 818.336160][T32282] netlink: 'syz.0.6830': attribute type 2 has an invalid length. [ 818.336176][T32282] netlink: 260 bytes leftover after parsing attributes in process `syz.0.6830'. [ 818.554472][T32291] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6834'. [ 819.083858][T32315] ICMPv6: NA: 00:00:00:00:00:00 advertised our address fe80::aa on syz_tun! [ 819.106932][T32300] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6837'. [ 819.803645][T32331] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6846'. [ 820.293297][T32346] IPv6: sit1: Disabled Multicast RS [ 820.304403][T32346] sit1: entered allmulticast mode [ 820.853689][T32361] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 821.115544][T32366] FAULT_INJECTION: forcing a failure. [ 821.115544][T32366] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 821.131335][T32366] CPU: 1 UID: 0 PID: 32366 Comm: syz.3.6858 Not tainted syzkaller #0 PREEMPT(full) [ 821.131362][T32366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 821.131374][T32366] Call Trace: [ 821.131382][T32366] [ 821.131391][T32366] dump_stack_lvl+0xe8/0x150 [ 821.131427][T32366] should_fail_ex+0x410/0x560 [ 821.131463][T32366] _copy_from_user+0x2d/0xb0 [ 821.131486][T32366] ___sys_sendmsg+0x1c6/0x360 [ 821.131623][T32366] ? __lock_acquire+0x6df/0x2e50 [ 821.131649][T32366] ? __pfx____sys_sendmsg+0x10/0x10 [ 821.131703][T32366] ? __fget_files+0x2a/0x420 [ 821.131728][T32366] ? __fget_files+0x3a2/0x420 [ 821.131761][T32366] __x64_sys_sendmsg+0x1b1/0x290 [ 821.131784][T32366] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 821.131825][T32366] do_syscall_64+0x166/0x520 [ 821.131854][T32366] ? trace_irq_disable+0x3b/0x140 [ 821.131871][T32366] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 821.131891][T32366] ? clear_bhb_loop+0x70/0xc0 [ 821.131911][T32366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 821.131929][T32366] RIP: 0033:0x7f63f719e159 [ 821.131947][T32366] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 821.131962][T32366] RSP: 002b:00007f63f7ffd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 821.131982][T32366] RAX: ffffffffffffffda RBX: 00007f63f7425fa0 RCX: 00007f63f719e159 [ 821.131996][T32366] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 821.132006][T32366] RBP: 00007f63f7ffd090 R08: 0000000000000000 R09: 0000000000000000 [ 821.132018][T32366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 821.132029][T32366] R13: 00007f63f7426038 R14: 00007f63f7425fa0 R15: 00007fff78ff6808 [ 821.132058][T32366] [ 821.443693][T32367] netlink: 'syz.1.6857': attribute type 1 has an invalid length. [ 821.598993][T32371] bridge0: port 1(bridge_slave_0) entered disabled state [ 822.251873][T32392] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 822.263861][T32394] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 822.388884][T32394] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 822.924464][T32416] __nla_validate_parse: 6 callbacks suppressed [ 822.924526][T32416] netlink: 14 bytes leftover after parsing attributes in process `syz.4.6872'. [ 823.346913][T32414] team0 (unregistering): Port device team_slave_0 removed [ 823.480656][T32414] team0 (unregistering): Port device team_slave_1 removed [ 823.514991][T32446] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6879'. [ 823.515081][T32446] block nbd9: Unsupported socket: should be TCP or UNIX. [ 823.532430][T32446] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6879'. [ 823.532484][T32446] block nbd9: Unsupported socket: should be TCP or UNIX. [ 823.545996][T32446] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6879'. [ 823.546050][T32446] block nbd9: Unsupported socket: should be TCP or UNIX. [ 823.551696][T32446] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6879'. [ 823.551735][T32446] block nbd9: Unsupported socket: should be TCP or UNIX. [ 823.559651][T32446] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6879'. [ 823.559689][T32446] block nbd9: Unsupported socket: should be TCP or UNIX. [ 823.573878][T32446] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6879'. [ 823.573937][T32446] block nbd9: Unsupported socket: should be TCP or UNIX. [ 823.579354][T32446] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6879'. [ 823.579408][T32446] block nbd9: Unsupported socket: should be TCP or UNIX. [ 823.585081][T32446] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6879'. [ 823.585117][T32446] block nbd9: Unsupported socket: should be TCP or UNIX. [ 823.587762][T32446] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6879'. [ 823.587799][T32446] block nbd9: Unsupported socket: should be TCP or UNIX. [ 823.591767][T32446] block nbd9: Unsupported socket: should be TCP or UNIX. [ 823.594781][T32446] block nbd9: Unsupported socket: should be TCP or UNIX. [ 823.600315][T32446] block nbd9: Unsupported socket: should be TCP or UNIX. [ 823.601338][T32446] block nbd9: Unsupported socket: should be TCP or UNIX. [ 823.612513][T32446] block nbd9: Unsupported socket: should be TCP or UNIX. [ 823.624051][T32446] block nbd9: Unsupported socket: should be TCP or UNIX. [ 823.632433][T32446] block nbd9: Unsupported socket: should be TCP or UNIX. [ 823.633000][T32446] block nbd9: Unsupported socket: should be TCP or UNIX. [ 823.648825][T32446] block nbd9: Unsupported socket: should be TCP or UNIX. [ 823.659011][T32446] block nbd9: Unsupported socket: should be TCP or UNIX. [ 823.668870][T32446] block nbd9: Unsupported socket: should be TCP or UNIX. [ 823.672113][T32446] block nbd9: Unsupported socket: should be TCP or UNIX. [ 823.677530][T32446] block nbd9: Unsupported socket: should be TCP or UNIX. [ 823.680765][T32446] block nbd9: Unsupported socket: should be TCP or UNIX. [ 823.682303][T32446] block nbd9: Unsupported socket: should be TCP or UNIX. [ 823.703058][T32446] block nbd9: Unsupported socket: should be TCP or UNIX. [ 823.704292][T32446] block nbd9: Unsupported socket: should be TCP or UNIX. [ 823.707866][T32446] block nbd9: Unsupported socket: should be TCP or UNIX. [ 823.710784][T32446] block nbd9: Unsupported socket: should be TCP or UNIX. [ 823.714520][T32446] block nbd9: Unsupported socket: should be TCP or UNIX. [ 823.749853][T32446] block nbd9: Unsupported socket: should be TCP or UNIX. [ 823.756460][T32446] block nbd9: Unsupported socket: should be TCP or UNIX. [ 823.757844][T32446] block nbd9: Unsupported socket: should be TCP or UNIX. [ 823.760736][T32446] block nbd9: Unsupported socket: should be TCP or UNIX. [ 823.767932][T32446] block nbd9: Unsupported socket: should be TCP or UNIX. [ 823.782095][T32446] block nbd9: Unsupported socket: should be TCP or UNIX. [ 823.785537][T32446] block nbd9: Unsupported socket: should be TCP or UNIX. [ 823.787700][T32446] block nbd9: Unsupported socket: should be TCP or UNIX. [ 823.800864][T32446] block nbd9: Unsupported socket: should be TCP or UNIX. [ 823.803528][T32446] block nbd9: Unsupported socket: should be TCP or UNIX. [ 823.807053][T32446] block nbd9: Unsupported socket: should be TCP or UNIX. [ 823.811218][T32446] block nbd9: Unsupported socket: should be TCP or UNIX. [ 823.816897][T32446] block nbd9: Unsupported socket: should be TCP or UNIX. [ 823.817950][T32446] block nbd9: Unsupported socket: should be TCP or UNIX. [ 823.821325][T32446] block nbd9: Unsupported socket: should be TCP or UNIX. [ 823.828397][T32446] block nbd9: Unsupported socket: should be TCP or UNIX. [ 823.831641][T32446] block nbd9: Unsupported socket: should be TCP or UNIX. [ 823.832941][T32446] block nbd9: Unsupported socket: should be TCP or UNIX. [ 823.836064][T32446] block nbd9: Unsupported socket: should be TCP or UNIX. [ 823.837018][T32446] block nbd9: Unsupported socket: should be TCP or UNIX. [ 823.839438][T32446] block nbd9: Unsupported socket: should be TCP or UNIX. [ 823.840351][T32446] block nbd9: Unsupported socket: should be TCP or UNIX. [ 823.843988][T32446] block nbd9: Unsupported socket: should be TCP or UNIX. [ 823.844576][T32446] block nbd9: Unsupported socket: should be TCP or UNIX. [ 823.847266][T32446] block nbd9: Unsupported socket: should be TCP or UNIX. [ 823.847898][T32446] block nbd9: Unsupported socket: should be TCP or UNIX. [ 823.852672][T32446] block nbd9: Unsupported socket: should be TCP or UNIX. [ 823.856310][T32446] block nbd9: Unsupported socket: should be TCP or UNIX. [ 823.875055][T32446] block nbd9: Unsupported socket: should be TCP or UNIX. [ 823.876034][T32446] block nbd9: Unsupported socket: should be TCP or UNIX. [ 823.886070][T32446] block nbd9: Unsupported socket: should be TCP or UNIX. [ 823.891465][T32446] block nbd9: Unsupported socket: should be TCP or UNIX. [ 823.894195][T32446] block nbd9: Unsupported socket: should be TCP or UNIX. [ 823.900751][T32446] block nbd9: Unsupported socket: should be TCP or UNIX. [ 823.908311][T32446] block nbd9: Unsupported socket: should be TCP or UNIX. [ 823.915436][T32446] block nbd9: Unsupported socket: should be TCP or UNIX. [ 823.985428][T32448] syz_tun: refused to change device tx_queue_len [ 823.992922][T32442] syz_tun: refused to change device tx_queue_len [ 824.513728][T32452] dvmrp8: entered allmulticast mode [ 825.011872][T32479] syzkaller1: entered promiscuous mode [ 825.201711][T32475] syzkaller0: entered promiscuous mode [ 825.201806][T32475] syzkaller0: entered allmulticast mode [ 825.226425][T23602] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 828.643076][T32531] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 828.792464][T32539] __nla_validate_parse: 58 callbacks suppressed [ 828.805184][T32539] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6901'. [ 828.896493][T32549] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6904'. [ 829.023990][T32554] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6903'. [ 829.372513][ T52] Bluetooth: hci5: unexpected event 0x0e length: 257 > 255 [ 829.373630][T32577] netdevsim netdevsim0: Firmware load for '..' refused, path contains '..' component [ 829.610406][T32590] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6916'. [ 829.743758][T32596] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6919'. [ 829.753742][T32596] netlink: 'syz.0.6919': attribute type 7 has an invalid length. [ 829.761684][T32596] netlink: 'syz.0.6919': attribute type 8 has an invalid length. [ 829.769641][T32596] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6919'. [ 829.851374][T32600] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6921'. [ 830.169107][T32613] netlink: 'syz.0.6925': attribute type 2 has an invalid length. [ 830.183600][T32613] netlink: 9 bytes leftover after parsing attributes in process `syz.0.6925'. [ 830.183726][T32613] 0: renamed from hsr0 (while UP) [ 830.206349][T32613] 0: entered allmulticast mode [ 830.211447][T32613] hsr_slave_0: entered allmulticast mode [ 830.217401][T32613] hsr_slave_1: entered allmulticast mode [ 830.223658][T32613] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check. [ 830.651482][T32631] netlink: 'syz.3.6928': attribute type 12 has an invalid length. [ 831.517972][T32662] macsec1: entered promiscuous mode [ 831.518043][T32662] hsr0: entered promiscuous mode [ 831.672106][T32674] netlink: 'syz.3.6944': attribute type 9 has an invalid length. [ 831.877808][T32684] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6943'. [ 832.270700][T32702] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6953'. [ 832.285130][T32703] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 832.286335][T32703] IPv6: NLM_F_CREATE should be specified when creating new route [ 832.570423][T32720] netlink: 'syz.3.6957': attribute type 1 has an invalid length. [ 832.582348][T32720] netlink: 'syz.3.6957': attribute type 3 has an invalid length. [ 832.591910][T32720] NCSI netlink: No device for ifindex 813332851 [ 832.617194][T32720] netlink: zone id is out of range [ 832.622426][T32720] netlink: set zone limit has 4 unknown bytes [ 832.772595][T32724] netlink: 'syz.2.6960': attribute type 21 has an invalid length. [ 833.293210][T32753] gretap0: entered promiscuous mode [ 833.303753][T32753] vlan4: entered promiscuous mode [ 833.942068][ T319] netlink: 'syz.2.6977': attribute type 3 has an invalid length. [ 833.963577][ T319] syzkaller0: entered promiscuous mode [ 833.963613][ T319] syzkaller0: entered allmulticast mode [ 834.152714][ T327] __nla_validate_parse: 3 callbacks suppressed [ 834.152769][ T327] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6978'. [ 834.152792][ T327] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6978'. [ 834.473466][ T338] tc action pedit unable to extract header offset for header type (0x4) [ 834.473521][ T338] tc action pedit unable to extract header offset for header type (0x4) [ 834.473551][ T338] tc action pedit unable to extract header offset for header type (0x4) [ 834.473568][ T338] tc action pedit unable to extract header offset for header type (0x4) [ 834.473583][ T338] tc action pedit unable to extract header offset for header type (0x4) [ 834.473598][ T338] tc action pedit unable to extract header offset for header type (0x4) [ 834.473613][ T338] tc action pedit unable to extract header offset for header type (0x4) [ 834.473628][ T338] tc action pedit unable to extract header offset for header type (0x4) [ 834.473644][ T338] tc action pedit unable to extract header offset for header type (0x4) [ 834.473659][ T338] tc action pedit unable to extract header offset for header type (0x4) [ 834.473688][ T338] 0: reclassify loop, rule prio 0, protocol 800 [ 834.516233][ T341] ip_tables: iptables: counters copy to user failed while replacing table [ 834.682410][ T346] netlink: 'syz.0.6987': attribute type 1 has an invalid length. [ 834.692398][ T346] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6987'. [ 834.779305][ T350] Bluetooth: MGMT ver 1.23 [ 835.042395][ T361] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6991'. [ 835.067716][ T361] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6991'. [ 835.541260][ T384] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7001'. [ 835.650370][ T385] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7000'. [ 835.712000][ T385] bridge0: port 1(batadv1) entered blocking state [ 835.723467][ T385] bridge0: port 1(batadv1) entered disabled state [ 835.724756][ T385] batadv1: entered allmulticast mode [ 835.747655][ T385] batadv1: entered promiscuous mode [ 835.808304][ T402] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7006'. [ 835.836315][ T405] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7007'. [ 835.846103][ T397] bond2: option mode: unable to set because the bond device has slaves [ 836.167890][T23607] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 836.167924][T23607] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 836.528910][ T440] netlink: 'syz.4.7013': attribute type 39 has an invalid length. [ 837.043059][ T457] bond0: (slave vlan1): Device is not bonding slave [ 837.043099][ T457] bond0: option active_slave: invalid value (vlan1) [ 837.059852][ T457] bond0 (unregistering): Released all slaves [ 837.510714][ T473] veth0_macvtap: entered allmulticast mode [ 837.516952][ T473] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 837.685614][ T483] netlink: 'syz.4.7029': attribute type 1 has an invalid length. [ 837.751573][ T483] 8021q: adding VLAN 0 to HW filter on device bond0 [ 837.861232][ T487] bond0: (slave geneve2): making interface the new active one [ 837.873254][ T487] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 838.065866][ T496] lo speed is unknown, defaulting to 1000 [ 838.415935][ T508] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7036'. [ 838.943694][ T541] bond4: option packets_per_slave: invalid value (18446744073709551615) [ 838.943739][ T541] bond4: option packets_per_slave: allowed values 0 - 65535 [ 838.964062][ T541] bond4 (unregistering): Released all slaves [ 839.213772][ T554] __nla_validate_parse: 31 callbacks suppressed [ 839.213826][ T554] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7049'. [ 839.402158][ T565] xt_CT: You must specify a L4 protocol and not use inversions on it [ 839.501238][ T569] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7051'. [ 839.581648][ T569] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 839.880919][ T582] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 840.036754][ T596] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7062'. [ 840.496769][ T611] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 840.506994][ T611] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 840.701685][ T619] netlink: 72 bytes leftover after parsing attributes in process `syz.4.7070'. [ 840.725985][ T623] netlink: 72 bytes leftover after parsing attributes in process `syz.4.7070'. [ 841.294970][ T651] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7082'. [ 841.448189][ T656] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7082'. [ 841.461605][ T657] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7083'. [ 841.483554][ T651] 8021q: adding VLAN 0 to HW filter on device bond5 [ 841.491621][ T653] bond5: entered promiscuous mode [ 841.491642][ T653] bond5: entered allmulticast mode [ 841.597428][ T651] macvlan2: entered promiscuous mode [ 841.597492][ T651] macvlan2: entered allmulticast mode [ 841.605503][ T651] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 841.764473][ T664] hsr0 speed is unknown, defaulting to 1000 [ 841.849789][ T664] lo speed is unknown, defaulting to 1000 [ 842.350099][ T664] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 842.389736][ T664] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 842.605528][ T692] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7093'. [ 843.309957][ T720] xt_CONNSECMARK: invalid mode: 0 [ 843.409431][ T729] netlink: 284 bytes leftover after parsing attributes in process `syz.4.7103'. [ 845.933742][ T702] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 846.242109][ T748] netlink: 'syz.2.7106': attribute type 21 has an invalid length. [ 846.477991][ T763] netlink: 'syz.0.7114': attribute type 1 has an invalid length. [ 846.541275][ T774] netlink: 'syz.0.7114': attribute type 1 has an invalid length. [ 846.746548][ T783] xt_HMARK: spi-set and port-set can't be combined [ 846.896355][ T789] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7122'. [ 846.958985][ T789] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7122'. [ 847.033862][ T799] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7121'. [ 847.034327][ T799] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7121'. [ 847.034736][ T799] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7121'. [ 847.035101][ T799] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7121'. [ 847.035462][ T799] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7121'. [ 847.056311][ T799] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7121'. [ 847.056737][ T799] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7121'. [ 847.057286][ T799] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7121'. [ 847.356464][ T818] netlink: zone id is out of range [ 847.362405][ T818] netlink: zone id is out of range [ 847.372522][ T818] netlink: zone id is out of range [ 847.378831][ T818] netlink: zone id is out of range [ 847.378855][ T818] netlink: zone id is out of range [ 847.378870][ T818] netlink: zone id is out of range [ 847.378878][ T818] netlink: zone id is out of range [ 847.378886][ T818] netlink: zone id is out of range [ 847.378894][ T818] netlink: zone id is out of range [ 847.378901][ T818] netlink: zone id is out of range [ 847.629523][ T839] netlink: 'syz.0.7134': attribute type 4 has an invalid length. [ 847.769508][ T844] netlink: 'syz.1.7135': attribute type 7 has an invalid length. [ 847.822421][ T847] syzkaller1: entered promiscuous mode [ 847.822457][ T847] syzkaller1: entered allmulticast mode [ 848.530199][ T52] Bluetooth: hci1: link tx timeout [ 848.541433][ T52] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 849.424486][ T909] syzkaller0: entered promiscuous mode [ 849.431005][ T909] syzkaller0: entered allmulticast mode [ 849.804467][ T933] tipc: Started in network mode [ 849.804512][ T933] tipc: Node identity 78563412785634122143658721436587, cluster identity 4711 [ 850.040102][ T940] netlink: 'syz.3.7163': attribute type 1 has an invalid length. [ 850.084519][ T952] netlink: 'syz.4.7164': attribute type 3 has an invalid length. [ 850.582048][ T872] Bluetooth: hci1: command 0x0406 tx timeout [ 851.061303][ T995] syzkaller0: left promiscuous mode [ 851.061345][ T995] syzkaller0: left allmulticast mode [ 851.197582][ T1009] xt_socket: unknown flags 0x8 [ 851.222322][ T1009] xt_socket: unknown flags 0x8 [ 851.230619][ T1007] Cannot find del_set index 0 as target [ 851.589015][ T1036] netlink: 'syz.4.7184': attribute type 1 has an invalid length. [ 851.983397][ T1029] hsr0 speed is unknown, defaulting to 1000 [ 852.183903][ T1042] syz_tun: entered promiscuous mode [ 852.190513][ T1029] lo speed is unknown, defaulting to 1000 [ 852.403995][ T1064] FAULT_INJECTION: forcing a failure. [ 852.403995][ T1064] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 852.404049][ T1064] CPU: 1 UID: 0 PID: 1064 Comm: syz.2.7190 Not tainted syzkaller #0 PREEMPT(full) [ 852.404072][ T1064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 852.404082][ T1064] Call Trace: [ 852.404090][ T1064] [ 852.404097][ T1064] dump_stack_lvl+0xe8/0x150 [ 852.404125][ T1064] should_fail_ex+0x410/0x560 [ 852.404156][ T1064] _copy_from_iter+0x1d3/0x1660 [ 852.404270][ T1064] ? __alloc_skb+0x27a/0x7a0 [ 852.404366][ T1064] ? __alloc_skb+0x27a/0x7a0 [ 852.404393][ T1064] ? __alloc_skb+0x27a/0x7a0 [ 852.404419][ T1064] ? __pfx__copy_from_iter+0x10/0x10 [ 852.404443][ T1064] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 852.404470][ T1064] ? __alloc_skb+0x27a/0x7a0 [ 852.404493][ T1064] ? __alloc_skb+0x27a/0x7a0 [ 852.404524][ T1064] ? netlink_sendmsg+0x650/0xb40 [ 852.404611][ T1064] ? skb_put+0x112/0x210 [ 852.404631][ T1064] netlink_sendmsg+0x6c0/0xb40 [ 852.404662][ T1064] ? __pfx_netlink_sendmsg+0x10/0x10 [ 852.404691][ T1064] ? apparmor_socket_sendmsg+0x98/0x360 [ 852.404768][ T1064] ? __pfx_netlink_sendmsg+0x10/0x10 [ 852.404789][ T1064] sock_sendmsg_nosec+0x13a/0x180 [ 852.404816][ T1064] ____sys_sendmsg+0x54e/0x850 [ 852.404841][ T1064] ? __pfx_____sys_sendmsg+0x10/0x10 [ 852.404869][ T1064] ? import_iovec+0x73/0xa0 [ 852.404894][ T1064] ___sys_sendmsg+0x2a5/0x360 [ 852.404912][ T1064] ? __lock_acquire+0x6df/0x2e50 [ 852.404935][ T1064] ? __pfx____sys_sendmsg+0x10/0x10 [ 852.404988][ T1064] ? __fget_files+0x2a/0x420 [ 852.405011][ T1064] ? __fget_files+0x3a2/0x420 [ 852.405042][ T1064] __x64_sys_sendmsg+0x1b1/0x290 [ 852.405065][ T1064] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 852.405105][ T1064] do_syscall_64+0x166/0x520 [ 852.405130][ T1064] ? trace_irq_disable+0x3b/0x140 [ 852.405146][ T1064] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 852.405172][ T1064] ? clear_bhb_loop+0x70/0xc0 [ 852.405194][ T1064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 852.405212][ T1064] RIP: 0033:0x7f88aef9e159 [ 852.405230][ T1064] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 852.405246][ T1064] RSP: 002b:00007f88afefa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 852.405265][ T1064] RAX: ffffffffffffffda RBX: 00007f88af225fa0 RCX: 00007f88aef9e159 [ 852.405279][ T1064] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000004 [ 852.405291][ T1064] RBP: 00007f88afefa090 R08: 0000000000000000 R09: 0000000000000000 [ 852.405303][ T1064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 852.405314][ T1064] R13: 00007f88af226038 R14: 00007f88af225fa0 R15: 00007ffe4c0b5048 [ 852.405343][ T1064] [ 852.864775][ T1081] __nla_validate_parse: 73 callbacks suppressed [ 852.873365][ T1081] netlink: 9 bytes leftover after parsing attributes in process `syz.1.7195'. [ 852.895479][ T1081] 0{X: left allmulticast mode [ 852.975527][ T1081] netlink: 5 bytes leftover after parsing attributes in process `syz.1.7195'. [ 852.975666][ T1081] 1{X: renamed from 30{X [ 853.000803][ T1081] 1{X: entered allmulticast mode [ 853.003038][ T1081] net_ratelimit: 19 callbacks suppressed [ 853.003055][ T1081] A link change request failed with some changes committed already. Interface 31{X may have been left with an inconsistent configuration, please check. [ 853.107330][ T1084] bridge0: port 1(bridge_slave_0) entered disabled state [ 853.125292][ T1084] bridge0: port 2(bridge_slave_1) entered disabled state [ 853.165428][ T1090] netlink: 'syz.3.7198': attribute type 21 has an invalid length. [ 853.165474][ T1090] IPv6: NLM_F_CREATE should be specified when creating new route [ 853.553881][ T1104] netlink: 256 bytes leftover after parsing attributes in process `syz.4.7204'. [ 853.623878][ T1108] netlink: 'syz.4.7204': attribute type 2 has an invalid length. [ 853.680656][ T1110] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7207'. [ 853.684725][ T1110] xt_CT: You must specify a L4 protocol and not use inversions on it [ 853.783828][ T1116] netlink: 72 bytes leftover after parsing attributes in process `syz.1.7208'. [ 853.799064][ T1114] xt_CT: You must specify a L4 protocol and not use inversions on it [ 854.015666][ T1126] tipc: Enabling of bearer rejected, failed to enable media [ 854.183316][ T1131] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7213'. [ 854.250203][ T1131] ip6gre1: entered promiscuous mode [ 854.250246][ T1131] ip6gre1: entered allmulticast mode [ 854.315845][ T1145] FAULT_INJECTION: forcing a failure. [ 854.315845][ T1145] name failslab, interval 1, probability 0, space 0, times 0 [ 854.315897][ T1145] CPU: 1 UID: 0 PID: 1145 Comm: syz.1.7214 Not tainted syzkaller #0 PREEMPT(full) [ 854.315919][ T1145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 854.315931][ T1145] Call Trace: [ 854.315938][ T1145] [ 854.315945][ T1145] dump_stack_lvl+0xe8/0x150 [ 854.315972][ T1145] should_fail_ex+0x410/0x560 [ 854.316014][ T1145] should_failslab+0xa8/0x100 [ 854.316037][ T1145] ? skb_clone+0x212/0x3a0 [ 854.316057][ T1145] kmem_cache_alloc_noprof+0xa1/0x600 [ 854.316085][ T1145] ? skb_clone+0x212/0x3a0 [ 854.316111][ T1145] skb_clone+0x212/0x3a0 [ 854.316135][ T1145] __netlink_deliver_tap+0x413/0x860 [ 854.316167][ T1145] ? netlink_deliver_tap+0x2e/0x1b0 [ 854.316191][ T1145] netlink_deliver_tap+0x19c/0x1b0 [ 854.316213][ T1145] netlink_unicast+0x781/0x940 [ 854.316260][ T1145] netlink_sendmsg+0x813/0xb40 [ 854.316291][ T1145] ? __pfx_netlink_sendmsg+0x10/0x10 [ 854.316322][ T1145] ? apparmor_socket_sendmsg+0x98/0x360 [ 854.316352][ T1145] ? __pfx_netlink_sendmsg+0x10/0x10 [ 854.316372][ T1145] sock_sendmsg_nosec+0x13a/0x180 [ 854.316399][ T1145] ____sys_sendmsg+0x54e/0x850 [ 854.316423][ T1145] ? __pfx_____sys_sendmsg+0x10/0x10 [ 854.316451][ T1145] ? import_iovec+0x73/0xa0 [ 854.316475][ T1145] ___sys_sendmsg+0x2a5/0x360 [ 854.316493][ T1145] ? __lock_acquire+0x6df/0x2e50 [ 854.316516][ T1145] ? __pfx____sys_sendmsg+0x10/0x10 [ 854.316570][ T1145] ? __fget_files+0x2a/0x420 [ 854.316592][ T1145] ? __fget_files+0x3a2/0x420 [ 854.316625][ T1145] __x64_sys_sendmsg+0x1b1/0x290 [ 854.316648][ T1145] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 854.316688][ T1145] do_syscall_64+0x166/0x520 [ 854.316715][ T1145] ? trace_irq_disable+0x3b/0x140 [ 854.316734][ T1145] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 854.316754][ T1145] ? clear_bhb_loop+0x70/0xc0 [ 854.316776][ T1145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 854.316795][ T1145] RIP: 0033:0x7f491db9e159 [ 854.316813][ T1145] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 854.316829][ T1145] RSP: 002b:00007f491ea9a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 854.316850][ T1145] RAX: ffffffffffffffda RBX: 00007f491de26090 RCX: 00007f491db9e159 [ 854.316864][ T1145] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000004 [ 854.316876][ T1145] RBP: 00007f491ea9a090 R08: 0000000000000000 R09: 0000000000000000 [ 854.316889][ T1145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 854.316901][ T1145] R13: 00007f491de26128 R14: 00007f491de26090 R15: 00007fffb41827d8 [ 854.316933][ T1145] [ 854.399241][ T1143] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7213'. [ 854.808927][ T1158] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7218'. [ 854.819892][ T1161] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 855.268014][ T1182] bond3: Unable to set up delay as MII monitoring is disabled [ 855.298612][ T1182] bond3 (unregistering): Released all slaves [ 855.526545][ T1192] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7229'. [ 855.796786][ T1205] netlink: 'syz.1.7234': attribute type 1 has an invalid length. [ 855.808993][ T1207] IPVS: set_ctl: invalid protocol: 29 100.1.1.1:20004 [ 855.967935][ T1205] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7234'. [ 856.005401][ T1222] xt_TPROXY: Can be used only with -p tcp or -p udp [ 856.052963][ T1209] 8021q: adding VLAN 0 to HW filter on device bond3 [ 856.065294][ T1209] bond2: (slave bond3): making interface the new active one [ 856.078688][ T1209] bond2: (slave bond3): Enslaving as an active interface with an up link [ 856.153800][ T1214] bond2: (slave gretap0): Enslaving as a backup interface with an up link [ 856.174072][ T1205] 8021q: adding VLAN 0 to HW filter on device bond2 [ 856.273268][ T1230] wg0 speed is unknown, defaulting to 1000 [ 856.280726][ T1230] wg0 speed is unknown, defaulting to 1000 [ 856.289104][ T1230] wg0 speed is unknown, defaulting to 1000 [ 856.298286][ T1230] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 856.318337][ T1230] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 856.339809][ T1230] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 856.361584][ T1232] ipt_ECN: cannot use operation on non-tcp rule [ 856.363237][ T1233] ip6t_frag: unknown flags 6 [ 856.386159][ T1230] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 856.461607][ T1230] wg0 speed is unknown, defaulting to 1000 [ 856.502008][ T1230] wg0 speed is unknown, defaulting to 1000 [ 856.510590][ T1230] wg0 speed is unknown, defaulting to 1000 [ 856.522675][ T1230] wg0 speed is unknown, defaulting to 1000 [ 856.539954][ T1230] wg0 speed is unknown, defaulting to 1000 [ 856.545763][ T1230] wg0 speed is unknown, defaulting to 1000 [ 856.554738][ T1230] wg0 speed is unknown, defaulting to 1000 [ 856.564916][ T1230] wg0 speed is unknown, defaulting to 1000 [ 856.609114][ T1230] wg0 speed is unknown, defaulting to 1000 [ 856.611175][ T1230] wg0 speed is unknown, defaulting to 1000 [ 856.612985][ T1230] wg0 speed is unknown, defaulting to 1000 [ 856.890107][ T1258] netlink: NAT attribute has 4 unknown bytes [ 856.890161][ T1258] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 856.995073][ T1262] syzkaller1: entered promiscuous mode [ 857.002021][ T1262] syzkaller1: entered allmulticast mode [ 857.022894][ T1262] netlink: 'syz.1.7247': attribute type 6 has an invalid length. [ 857.246579][ T1276] netlink: 'syz.2.7250': attribute type 1 has an invalid length. [ 857.516668][ T1288] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 857.613666][ T1292] netlink: 'syz.4.7257': attribute type 3 has an invalid length. [ 857.632480][ T1292] xt_cgroup: path and classid specified [ 857.859732][T23594] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 858.414025][ T1334] __nla_validate_parse: 11 callbacks suppressed [ 858.414760][ T1334] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7267'. [ 858.461478][ T1337] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 858.561007][ T1338] netlink: 'syz.4.7270': attribute type 46 has an invalid length. [ 858.634361][ T1342] syzkaller0: entered promiscuous mode [ 858.634409][ T1342] syzkaller0: entered allmulticast mode [ 858.696854][ T1344] netlink: 'syz.3.7272': attribute type 1 has an invalid length. [ 858.696903][ T1344] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7272'. [ 858.811622][ T1347] veth0_to_bridge: entered promiscuous mode [ 858.825647][ T1347] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7273'. [ 858.839703][ T1347] bond1: option mode: unable to set because the bond device is up [ 858.916454][ T1347] bond1: (slave vlan2): making interface the new active one [ 858.942187][ T1347] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 858.955840][ T1346] veth0_to_bridge: left promiscuous mode [ 858.999118][ T1352] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7275'. [ 859.228114][ T1369] netlink: 96 bytes leftover after parsing attributes in process `syz.3.7280'. [ 859.375974][ T1374] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7281'. [ 859.828762][ T1385] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7284'. [ 859.896086][ T1395] netlink: 'syz.2.7289': attribute type 83 has an invalid length. [ 859.955609][ T1398] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7289'. [ 860.016424][ T1396] netlink: 'syz.0.7288': attribute type 1 has an invalid length. [ 860.176487][ T1402] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7290'. [ 860.249360][ T1406] netlink: 292 bytes leftover after parsing attributes in process `syz.0.7291'. [ 860.391262][ T1402] tipc: New replicast peer: 0.0.0.0 [ 860.392627][ T1402] tipc: Enabled bearer , priority 10 [ 860.816482][ T1432] netlink: zone id is out of range [ 860.816518][ T1432] netlink: del zone limit has 4 unknown bytes [ 860.919798][ T1438] netlink: 'syz.4.7299': attribute type 1 has an invalid length. [ 861.064904][ T1438] 8021q: adding VLAN 0 to HW filter on device bond4 [ 861.194710][ T1456] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma? [ 861.507893][T10853] tipc: Node number set to 3299652523 [ 861.857281][ T5634] Bluetooth: hci5: command 0x0406 tx timeout [ 862.768484][T23607] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 862.768553][T23607] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 862.768605][T23607] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 862.768638][T23607] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 863.195627][ T1533] netlink: 'syz.4.7334': attribute type 4 has an invalid length. [ 863.345030][ T1534] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 863.345082][ T1534] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 863.590271][ T1549] netlink: 'syz.3.7338': attribute type 1 has an invalid length. [ 863.590313][ T1549] __nla_validate_parse: 48 callbacks suppressed [ 863.590341][ T1549] netlink: 224 bytes leftover after parsing attributes in process `syz.3.7338'. [ 863.816672][ T1560] netlink: 300 bytes leftover after parsing attributes in process `syz.2.7344'. [ 864.457464][ T1592] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7348'. [ 864.457508][ T1592] tipc: Invalid UDP bearer configuration [ 864.457587][ T1592] tipc: Enabling of bearer rejected, failed to enable media [ 864.690536][ T1610] netlink: 'syz.0.7351': attribute type 17 has an invalid length. [ 864.690571][ T1610] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7351'. [ 864.691750][ T1610] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7351'. [ 864.706251][ T1610] erspan0: entered promiscuous mode [ 864.714828][ T1610] : Slave A (erspan0) is not up; please bring it up to get a fully working HSR network [ 864.714849][ T1610] : Slave B (30{X) is not up; please bring it up to get a fully working HSR network [ 864.756355][ T1612] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7352'. [ 864.855466][ T1612] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7352'. [ 865.249262][ T1629] can: request_module (can-proto-0) failed. [ 865.349210][ T1639] tipc: Failed to remove unknown binding: 66,0,0/0:2324206686/2324206687 [ 865.351560][ T1639] tipc: Failed to remove unknown binding: 66,0,0/0:2324206686/2324206687 [ 865.359979][ T1639] nbd: must specify a size in bytes for the device [ 865.607069][ T1648] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7363'. [ 865.660147][ T1649] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7362'. [ 865.674285][ T1649] tc_dump_action: action bad kind [ 865.914602][ T1661] veth3: entered allmulticast mode [ 866.031946][ T1667] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7370'. [ 866.327455][ T1684] ipvlan2: entered allmulticast mode [ 866.327499][ T1684] mac80211_hwsim hwsim59 wlan0: entered allmulticast mode [ 866.330097][ T1684] batman_adv: batadv0: Adding interface: ipvlan2 [ 866.330111][ T1684] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 866.330303][ T1684] batman_adv: batadv0: Interface activated: ipvlan2 [ 866.711124][ T1701] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 866.742811][ T1693] 8021q: adding VLAN 0 to HW filter on device bond4 [ 866.894886][ T1704] x_tables: duplicate underflow at hook 2 [ 867.593822][ T1739] netlink: 'syz.1.7394': attribute type 3 has an invalid length. [ 868.345540][ T1777] netlink: 'syz.2.7404': attribute type 10 has an invalid length. [ 868.345688][ T1777] dummy0: entered promiscuous mode [ 868.345708][ T1777] dummy0: entered allmulticast mode [ 868.346330][ T1777] bridge0: port 2(dummy0) entered blocking state [ 868.346429][ T1777] bridge0: port 2(dummy0) entered disabled state [ 868.364801][ T1777] bridge0: port 2(dummy0) entered blocking state [ 868.364911][ T1777] bridge0: port 2(dummy0) entered forwarding state [ 868.674754][ T1782] syzkaller0: entered promiscuous mode [ 868.674793][ T1782] syzkaller0: entered allmulticast mode [ 868.684690][T23612] 0: reclassify loop, rule prio 0, protocol 700 [ 868.699281][ T1790] __nla_validate_parse: 13 callbacks suppressed [ 868.699299][ T1790] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7408'. [ 868.719859][ T1782] netlink: 168 bytes leftover after parsing attributes in process `syz.3.7407'. [ 869.058888][ T1798] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7412'. [ 869.060139][ T1799] batman_adv: batadv0: Adding interface: wlan1 [ 869.060175][ T1799] batman_adv: batadv0: The MTU of interface wlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 869.060204][ T1799] batman_adv: batadv0: Interface activated: wlan1 [ 869.191207][ T1805] netlink: 504 bytes leftover after parsing attributes in process `syz.0.7414'. [ 869.316981][ T1811] syzkaller1: entered allmulticast mode [ 869.839750][ T1798] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 870.174668][ T1839] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7423'. [ 870.174767][ T1839] tipc: Invalid UDP bearer configuration [ 870.174871][ T1839] tipc: Enabling of bearer rejected, failed to enable media [ 870.559291][ T1857] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7431'. [ 870.589323][ T1860] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 870.633902][ T1858] blkio.reset_stats is deprecated [ 870.942938][ T1872] netlink: 'syz.0.7436': attribute type 10 has an invalid length. [ 870.967682][ T1874] batman_adv: batadv0: Adding interface: veth0 [ 870.967748][ T1874] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 870.967843][ T1874] batman_adv: batadv0: Interface activated: veth0 [ 870.968852][ T1876] batman_adv: batadv0: Interface deactivated: veth0 [ 871.090941][ T1876] batman_adv: batadv0: Removing interface: veth0 [ 871.303788][ T1884] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7440'. [ 871.372093][ T1862] IPv6: sit1: Disabled Multicast RS [ 871.373133][ T1862] sit1: entered allmulticast mode [ 871.486039][ T1888] erspan0: entered promiscuous mode [ 871.738386][ T1899] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 871.832545][ T1903] netlink: 'syz.2.7447': attribute type 1 has an invalid length. [ 872.101041][ T5634] Bluetooth: hci4: command 0x0406 tx timeout [ 873.515597][ T1968] netlink: 'syz.0.7460': attribute type 21 has an invalid length. [ 873.515641][ T1968] netlink: 128 bytes leftover after parsing attributes in process `syz.0.7460'. [ 873.563013][ T1968] netlink: 3 bytes leftover after parsing attributes in process `syz.0.7460'. [ 873.793114][ T1976] netlink: 'syz.4.7462': attribute type 11 has an invalid length. [ 874.361964][ T2005] syzkaller0: entered promiscuous mode [ 874.371120][ T2005] syzkaller0: entered allmulticast mode [ 874.690852][ T2022] netlink: 'syz.2.7477': attribute type 23 has an invalid length. [ 874.932595][ T2036] netlink: 56 bytes leftover after parsing attributes in process `syz.0.7481'. [ 874.996259][ T2034] netlink: 'syz.0.7481': attribute type 2 has an invalid length. [ 874.996306][ T2034] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7481'. [ 874.998907][ T2038] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7480'. [ 875.025443][ T2042] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7483'. [ 875.025471][ T2042] netlink: 'syz.3.7483': attribute type 3 has an invalid length. [ 875.050226][ T2045] netlink: 'syz.4.7482': attribute type 4 has an invalid length. [ 875.075544][ T2046] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7482'. [ 875.214849][ T2056] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7485'. [ 875.247646][ T2042] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7483'. [ 875.259116][ T2056] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7485'. [ 875.366396][ T2059] team0: Cannot enslave team device to itself [ 875.442042][ T2063] netlink: 288 bytes leftover after parsing attributes in process `syz.0.7488'. [ 875.442330][ T2064] netlink: 288 bytes leftover after parsing attributes in process `syz.0.7488'. [ 875.482906][ T2069] netlink: 'syz.1.7489': attribute type 1 has an invalid length. [ 876.078772][ T2092] bond5: entered allmulticast mode [ 876.195101][ T2099] x_tables: duplicate underflow at hook 1 [ 876.500256][ T2118] syzkaller0: entered promiscuous mode [ 876.500294][ T2118] syzkaller0: entered allmulticast mode [ 876.628353][ T2122] netlink: 'syz.0.7505': attribute type 2 has an invalid length. [ 876.910286][ T2137] netlink: 'syz.4.7512': attribute type 12 has an invalid length. [ 876.910324][ T2137] netlink: 'syz.4.7512': attribute type 29 has an invalid length. [ 876.910678][ T2137] netlink: 'syz.4.7512': attribute type 3 has an invalid length. [ 876.971801][ T2143] openvswitch: netlink: Multiple metadata blocks provided [ 877.233218][ T2152] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 877.348264][ T2159] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 877.679572][ T2169] syzkaller1: entered promiscuous mode [ 877.679615][ T2169] syzkaller1: entered allmulticast mode [ 878.218434][ T2203] nbd: illegal input index -8454144 [ 879.053577][ T2235] veth5: entered allmulticast mode [ 879.366154][T23603] IPVS: starting estimator thread 0... [ 879.447293][ T2254] IPVS: using max 29 ests per chain, 69600 per kthread [ 880.171315][ T2292] __nla_validate_parse: 21 callbacks suppressed [ 880.179867][ T2292] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7558'. [ 881.019606][ T2325] ipvlan3: entered allmulticast mode [ 881.021383][ T2325] batman_adv: batadv0: Adding interface: ipvlan3 [ 881.021398][ T2325] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 881.021425][ T2325] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: ipvlan2 [ 881.021440][ T2325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 881.021453][ T2325] batman_adv: batadv0: Interface activated: ipvlan3 [ 881.283215][ T2335] validate_nla: 2 callbacks suppressed [ 881.283714][ T2335] netlink: 'syz.2.7572': attribute type 13 has an invalid length. [ 881.300052][ T2335] gretap0: refused to change device tx_queue_len [ 881.300453][ T2335] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 882.212070][ T2383] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7582'. [ 883.923749][ T2420] vlan0: entered promiscuous mode [ 884.279732][ T2451] gtp1: entered promiscuous mode [ 884.281572][ T2451] gtp1: entered allmulticast mode [ 884.487480][ T2459] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 884.550713][ T2467] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7604'. [ 884.566504][ T2471] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7605'. [ 884.685652][ T2471] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7605'. [ 884.685703][ T2471] openvswitch: netlink: Flow actions attr not present in new flow. [ 884.695244][ T2478] netlink: 64 bytes leftover after parsing attributes in process `syz.2.7607'. [ 885.018179][ T2494] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 885.294983][ T2505] xt_l2tp: missing protocol rule (udp|l2tpip) [ 885.389948][T17576] wg0 speed is unknown, defaulting to 1000 [ 885.956298][ T2547] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7621'. [ 886.076681][ T2553] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 886.089622][ T2553] syzkaller1: entered promiscuous mode [ 886.089660][ T2553] syzkaller1: entered allmulticast mode [ 886.108235][ T2549] netlink: 'syz.1.7622': attribute type 4 has an invalid length. [ 886.807016][ T2580] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7627'. [ 886.991873][ T2589] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7628'. [ 887.030557][ T2590] team0: Device ipvlan0 failed to register rx_handler [ 887.160024][ T2598] ip6t_hbh: Not strict - not implemented [ 887.331013][ T2611] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7633'. [ 887.635807][ T2626] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7637'. [ 887.647794][ T2626] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7637'. [ 887.783824][ T2631] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7639'. [ 887.861961][ T2631] veth0_to_batadv: mtu less than device minimum [ 888.003143][ T2637] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20002 [ 888.003504][ T2637] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 888.432049][ T2667] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7650'. [ 888.442573][ T2669] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7650'. [ 888.513689][ T2677] xt_IDLETIMER: label is empty or not nul-terminated [ 888.671324][ T2685] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7655'. [ 890.763554][ T2858] netlink: 'syz.2.7674': attribute type 1 has an invalid length. [ 891.000325][ T2858] bridge2: entered promiscuous mode [ 891.037382][ T2858] bond6: (slave bridge2): making interface the new active one [ 891.046254][ T2858] bond6: (slave bridge2): Enslaving as an active interface with an up link [ 891.139715][T23607] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 891.404853][ T2890] __nla_validate_parse: 5 callbacks suppressed [ 891.404919][ T2890] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7681'. [ 891.461247][ T2890] bridge6: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 891.477047][ T2892] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7682'. [ 891.640898][ T2892] bond4: option arp_all_targets: invalid value (18446744073709551613) [ 891.671236][ T2892] bond4 (unregistering): Released all slaves [ 891.706447][ T2904] netlink: 'syz.4.7685': attribute type 9 has an invalid length. [ 892.061260][ T2917] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7689'. [ 892.616530][ T2944] netlink: 'syz.4.7693': attribute type 11 has an invalid length. [ 892.724733][ T2948] xt_TCPMSS: Only works on TCP SYN packets [ 892.822309][ T2955] netlink: NAT attribute type 0 has unexpected length (1 != 0) [ 892.831089][ T2955] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 893.014047][ T2953] syzkaller0: entered promiscuous mode [ 893.014087][ T2953] syzkaller0: entered allmulticast mode [ 893.016669][ T2960] bond1: option mode: unable to set because the bond device has slaves [ 893.023856][ T2960] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7699'. [ 893.023874][ T2960] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7699'. [ 893.029899][ T2965] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 893.029932][ T2965] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 893.029949][ T2965] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 893.107012][ T2960] 8021q: adding VLAN 0 to HW filter on device bond0 [ 893.116446][ T2960] bond1: (slave bond0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 893.163236][ T2968] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 893.284421][ T2975] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 893.338311][T23603] bond1: (slave vlan2): link status definitely down, disabling slave [ 893.409080][T23603] bond1: now running without any active interface! [ 893.459220][ T2973] syz_tun: entered promiscuous mode [ 893.467180][ T2973] vlan2: entered promiscuous mode [ 893.941152][ T2966] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 893.941206][ T2966] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 893.947853][ T2966] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 894.256192][ T2997] netlink: 'syz.3.7707': attribute type 1 has an invalid length. [ 894.355709][ T3004] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7709'. [ 894.383346][ T2997] 8021q: adding VLAN 0 to HW filter on device bond4 [ 894.424587][ T3000] x_tables: duplicate underflow at hook 2 [ 894.424733][ T3003] x_tables: duplicate underflow at hook 2 [ 894.645453][ T3011] wireguard0: entered promiscuous mode [ 894.748322][ T2997] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7707'. [ 894.790467][ T2997] bond4: (slave geneve4): making interface the new active one [ 894.805594][ T2997] bond4: (slave geneve4): Enslaving as an active interface with an up link [ 895.245065][ T3038] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 895.245524][ T3038] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 895.247776][ T3038] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 895.251613][ T3038] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 895.251972][ T3038] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 895.252341][ T3038] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 895.267723][ T3051] netlink: 'syz.2.7718': attribute type 7 has an invalid length. [ 895.267742][ T3051] netlink: 140 bytes leftover after parsing attributes in process `syz.2.7718'. [ 895.414426][ T3055] netlink: 100 bytes leftover after parsing attributes in process `syz.3.7721'. [ 895.433245][ T3055] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7721'. [ 895.606868][ T3060] gretap1: entered promiscuous mode [ 895.633111][ T3060] batman_adv: batadv0: Adding interface: gretap1 [ 895.633147][ T3060] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 895.633178][ T3060] batman_adv: batadv0: Interface activated: gretap1 [ 895.691791][ T3068] netlink: 'syz.3.7725': attribute type 1 has an invalid length. [ 895.911549][ T3076] IPv6: NLM_F_CREATE should be specified when creating new route [ 895.962177][ T3068] bridge2: entered promiscuous mode [ 895.991942][ T3068] bond5: (slave bridge2): making interface the new active one [ 896.014139][ T3068] bond5: (slave bridge2): Enslaving as an active interface with an up link [ 896.243861][ T3080] block nbd0: NBD_DISCONNECT [ 896.243914][ T3080] block nbd0: Send disconnect failed -32 [ 896.243951][ T3080] block nbd0: shutting down sockets [ 896.676469][ T3093] syzkaller0: entered promiscuous mode [ 896.683249][ T3093] syzkaller0: entered allmulticast mode [ 896.991921][ T3108] bond6: (slave bond_slave_0): Device is not our slave [ 896.991968][ T3108] bond6: option active_slave: invalid value (bond_slave_0) [ 897.008745][ T3102] __nla_validate_parse: 1 callbacks suppressed [ 897.009133][ T3108] bond6 (unregistering): Released all slaves [ 897.009499][ T3102] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7736'. [ 897.115508][ T3118] bond6: (slave bond_slave_0): Device is not our slave [ 897.124329][ T3118] bond6: option active_slave: invalid value (bond_slave_0) [ 897.140188][ T3118] bond6 (unregistering): Released all slaves [ 897.469791][ T3134] netlink: 68 bytes leftover after parsing attributes in process `syz.2.7744'. [ 897.497828][ T3126] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7742'. [ 897.690974][ T3142] Bluetooth: ISO socket layer initialized [ 897.793600][ T3146] netlink: 198796 bytes leftover after parsing attributes in process `syz.2.7746'. [ 897.793649][ T3146] netlink: 'syz.2.7746': attribute type 2 has an invalid length. [ 898.299646][ T3167] netlink: 'syz.1.7753': attribute type 2 has an invalid length. [ 898.299714][ T3167] netlink: 'syz.1.7753': attribute type 11 has an invalid length. [ 898.299776][ T3167] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7753'. [ 898.441914][ T3176] netlink: 56 bytes leftover after parsing attributes in process `syz.4.7755'. [ 898.467991][ T3178] x_tables: duplicate underflow at hook 3 [ 898.474776][ T3178] x_tables: duplicate underflow at hook 3 [ 898.549453][ T3183] veth0_to_bridge: entered promiscuous mode [ 898.565817][ T3179] netlink: 64 bytes leftover after parsing attributes in process `syz.0.7756'. [ 898.582171][ T3182] veth0_to_bridge: left promiscuous mode [ 898.968853][ T3206] net_ratelimit: 18 callbacks suppressed [ 898.968902][ T3206] openvswitch: netlink: Flow actions attr not present in new flow. [ 898.989987][ T3226] netlink: 'syz.0.7762': attribute type 13 has an invalid length. [ 898.990023][ T3226] netlink: 'syz.0.7762': attribute type 58 has an invalid length. [ 898.990051][ T3226] netlink: 152 bytes leftover after parsing attributes in process `syz.0.7762'. [ 901.511115][ T3184] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 901.538510][ T3224] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7764'. [ 901.766788][ T3241] netlink: 'syz.1.7765': attribute type 1 has an invalid length. [ 901.776119][ T3241] netlink: 192 bytes leftover after parsing attributes in process `syz.1.7765'. [ 901.799604][ T3241] netlink: 'syz.1.7765': attribute type 1 has an invalid length. [ 901.812844][ T3242] : renamed from virt_wifi0 [ 902.186901][ T3260] __nla_validate_parse: 4 callbacks suppressed [ 902.186947][ T3260] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7770'. [ 902.519522][ T3273] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7774'. [ 902.519578][ T3273] netlink: 'syz.1.7774': attribute type 3 has an invalid length. [ 902.519591][ T3273] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7774'. [ 902.602831][ T3283] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7776'. [ 902.604258][ T3283] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7776'. [ 902.605352][ T3283] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7776'. [ 902.606827][ T3283] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7776'. [ 902.607042][ T3283] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7776'. [ 902.608821][ T3283] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7776'. [ 902.609002][ T3283] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7776'. [ 902.721984][ T3285] tipc: Enabling of bearer rejected, media not registered [ 904.130689][ T3300] bond5 (unregistering): Released all slaves [ 904.424593][ T3329] openvswitch: netlink: Missing key (keys=c0, expected=100) [ 904.429786][ T3329] openvswitch: netlink: Missing key (keys=c0, expected=100) [ 904.681210][ T3339] bridge: RTM_NEWNEIGH with invalid ether address [ 904.684094][ T3340] bridge: RTM_NEWNEIGH with invalid ether address [ 904.720607][ T3334] atomic_op ffff8880354299e0 conn xmit_atomic 0000000000000000 [ 904.891498][ T3347] veth1_to_bond: entered allmulticast mode [ 904.902975][ T3348] veth1_to_bond: entered promiscuous mode [ 904.922410][ T3346] veth1_to_bond: left promiscuous mode [ 904.922605][ T3346] veth1_to_bond: left allmulticast mode [ 905.065827][ T3360] netlink: 'syz.3.7800': attribute type 1 has an invalid length. [ 905.075031][ T3360] netlink: 'syz.3.7800': attribute type 3 has an invalid length. [ 905.265588][ T3369] syz_tun: entered allmulticast mode [ 905.311856][ T3369] lo: entered allmulticast mode [ 905.331152][ T3373] netlink: 'syz.1.7804': attribute type 2 has an invalid length. [ 905.689928][ T3364] syz_tun: left allmulticast mode [ 906.086380][ T3391] syzkaller0: entered promiscuous mode [ 906.086451][ T3391] syzkaller0: entered allmulticast mode [ 906.124760][ T3396] syzkaller0: entered promiscuous mode [ 906.124808][ T3396] syzkaller0: entered allmulticast mode [ 906.521417][ T3405] netlink: 'syz.4.7811': attribute type 1 has an invalid length. [ 906.685548][ T3411] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 906.791604][ T3419] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 907.212007][ T3435] __nla_validate_parse: 43 callbacks suppressed [ 907.212346][ T3435] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7824'. [ 907.449191][ T3446] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7823'. [ 908.063242][ T3449] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 908.063305][ T3449] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 908.117769][ T3459] Unsupported ieee802154 address type: 0 [ 908.334503][ T3449] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 908.334565][ T3449] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 908.512880][ T3470] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7835'. [ 908.512925][ T3470] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7835'. [ 908.628201][ T3449] bond0: (slave netdevsim1): Releasing backup interface [ 908.672539][ T3478] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 908.695352][ T3449] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 908.695408][ T3449] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 908.807942][ T3478] openvswitch: netlink: Missing key (keys=c0, expected=20080) [ 908.974067][ T3449] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 908.988190][ T3449] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 909.108686][ T3495] Bluetooth: hci0: unsupported parameter 5135 [ 909.115198][ T3495] Bluetooth: hci0: unsupported parameter 8192 [ 909.115239][ T3495] Bluetooth: hci0: unsupported parameter 5135 [ 909.115256][ T3495] Bluetooth: hci0: unsupported parameter 8192 [ 909.116404][ T3496] Bluetooth: hci0: unsupported parameter 5135 [ 909.116435][ T3496] Bluetooth: hci0: unsupported parameter 8192 [ 909.116446][ T3496] Bluetooth: hci0: unsupported parameter 5135 [ 909.116473][ T3496] Bluetooth: hci0: unsupported parameter 8192 [ 909.168307][ T3494] netlink: 196 bytes leftover after parsing attributes in process `syz.4.7840'. [ 909.268620][T23607] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 909.268712][T23607] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 909.312077][T23599] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 909.312323][T23599] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 909.388157][ T3501] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7842'. [ 909.399472][ T3501] netlink: 'syz.3.7842': attribute type 10 has an invalid length. [ 909.409241][ T3501] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7842'. [ 909.454419][ T1159] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 909.454540][ T1159] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 909.590274][T23602] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 909.590381][T23602] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 909.924899][ T3527] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 909.946704][ T3527] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 910.018401][T23607] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 910.365883][ T3556] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7855'. [ 910.589460][ T3570] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7855'. [ 910.795616][ T3574] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7861'. [ 911.292395][ T5282] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 911.359225][ T3601] IPv6: NLM_F_CREATE should be specified when creating new route [ 911.359465][ T3601] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 911.359477][ T3601] IPv6: NLM_F_CREATE should be set when creating new route [ 911.376642][ T3601] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 911.376672][ T3601] IPv6: NLM_F_CREATE should be set when creating new route [ 911.564593][ T3614] netlink: 'syz.3.7871': attribute type 5 has an invalid length. [ 911.574873][ T3614] netlink: 'syz.3.7871': attribute type 9 has an invalid length. [ 911.634891][ T3616] openvswitch: netlink: Duplicate key (type 6). [ 912.305101][ T3646] IPVS: set_ctl: invalid protocol: 22 224.0.0.1:20002 [ 912.375424][ T3649] gtp1: entered promiscuous mode [ 912.380875][ T3649] gtp1: entered allmulticast mode [ 912.491384][ T3653] mac80211_hwsim hwsim68 wlan0: entered promiscuous mode [ 912.655260][ T3664] netlink: 'syz.4.7888': attribute type 1 has an invalid length. [ 912.757424][ T3670] netlink: 'syz.2.7890': attribute type 9 has an invalid length. [ 912.794527][ T3666] macvlan3: entered promiscuous mode [ 912.794605][ T3666] macvlan3: entered allmulticast mode [ 912.810213][ T3666] bond5: entered promiscuous mode [ 912.811560][ T3666] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 912.833844][ T3666] bond5: left promiscuous mode [ 913.082307][ T3683] netlink: 'syz.1.7892': attribute type 8 has an invalid length. [ 913.092254][ T3683] __nla_validate_parse: 4 callbacks suppressed [ 913.100683][ T3683] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7892'. [ 913.100733][ T3683] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7892'. [ 913.189133][ T3682] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7892'. [ 913.295311][ T3700] netlink: 'syz.4.7896': attribute type 10 has an invalid length. [ 913.319890][ T3688] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 913.332369][ T3700] veth1_macvtap: left promiscuous mode [ 913.344178][ T3700] veth1_macvtap: entered promiscuous mode [ 913.355867][ T3700] .`: (slave macsec0): Enslaving as an active interface with an up link [ 913.384349][ T3688] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 913.464820][ T3709] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7898'. [ 913.464871][ T3709] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7898'. [ 913.488876][ T3701] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 913.778219][ T872] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 913.787949][ T3727] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7900'. [ 913.806496][ T3720] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7900'. [ 913.811451][ T3720] netlink: 'syz.0.7900': attribute type 16 has an invalid length. [ 913.811485][ T3720] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7900'. [ 914.162889][ T3738] tipc: Failed to obtain node identity [ 914.162967][ T3738] tipc: Enabling of bearer rejected, failed to enable media [ 914.191792][ T3739] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7906'. [ 914.201097][ T3739] openvswitch: netlink: Missing key (keys=c0, expected=20080) [ 914.322312][ T3745] xt_hashlimit: size too large, truncated to 1048576 [ 914.406584][ T3747] netlink: 'syz.3.7909': attribute type 29 has an invalid length. [ 914.486030][ T3751] netlink: 'syz.3.7909': attribute type 29 has an invalid length. [ 914.680293][ T3762] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7913'. [ 914.701044][ T3762] netlink: 'syz.4.7913': attribute type 6 has an invalid length. [ 914.920684][ T3780] openvswitch: netlink: Multiple metadata blocks provided [ 915.090723][ T3784] tipc: Enabling of bearer rejected, failed to enable media [ 915.104691][ T3785] tipc: Enabling of bearer rejected, failed to enable media [ 915.552648][ T3813] SET target dimension over the limit! [ 916.144697][ T3838] bond6: option packets_per_slave: mode dependency failed, not supported in mode balance-xor(2) [ 916.161898][ T3838] bond6 (unregistering): Released all slaves [ 916.861428][ T3884] netlink: 'syz.3.7950': attribute type 32 has an invalid length. [ 917.027702][ T3889] IPv6: NLM_F_CREATE should be specified when creating new route [ 917.121538][ T3890] netlink: 'syz.1.7952': attribute type 3 has an invalid length. [ 917.186655][ T3894] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 917.583064][ T3911] netlink: 'syz.2.7961': attribute type 12 has an invalid length. [ 917.651819][ T3914] veth0: entered promiscuous mode [ 917.702011][ T3913] veth0: left promiscuous mode [ 918.195353][ T3943] netlink: 'syz.4.7971': attribute type 8 has an invalid length. [ 918.195971][ T3943] __nla_validate_parse: 17 callbacks suppressed [ 918.196243][ T3943] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7971'. [ 918.288332][ T3940] netlink: Failed to add batadv0 helper -22 [ 918.288409][ T3940] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 918.376789][ T3943] bond6: entered promiscuous mode [ 918.378006][ T3943] 8021q: adding VLAN 0 to HW filter on device bond6 [ 918.529106][ T3943] 8021q: adding VLAN 0 to HW filter on device bond6 [ 918.531953][ T3943] bond6: (slave sit1): The slave device specified does not support setting the MAC address [ 918.540577][ T3943] bond6: (slave sit1): Error -95 calling set_mac_address [ 918.632364][ T3959] netlink: 'syz.0.7974': attribute type 2 has an invalid length. [ 918.632452][ T3959] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7974'. [ 918.984197][ T3971] syzkaller1: entered promiscuous mode [ 918.984234][ T3971] syzkaller1: entered allmulticast mode [ 919.030703][ T3985] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7980'. [ 919.040777][ T3985] bridge0: port 2(dummy0) entered disabled state [ 919.056235][ T3985] batadv1: left allmulticast mode [ 919.064415][ T3985] batadv1: left promiscuous mode [ 919.069910][ T3985] bridge0: port 1(batadv1) entered disabled state [ 919.720916][ T4016] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7986'. [ 919.737700][ T4016] netlink: 'syz.1.7986': attribute type 16 has an invalid length. [ 919.745693][ T4016] netlink: 'syz.1.7986': attribute type 17 has an invalid length. [ 919.754061][ T4016] netlink: 'syz.1.7986': attribute type 27 has an invalid length. [ 919.825971][ T4016] 1{X: left allmulticast mode [ 919.834859][ T4016] sit0: left promiscuous mode [ 919.902197][ T4022] netlink: 128 bytes leftover after parsing attributes in process `syz.3.7988'. [ 919.929306][ T4016] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 919.936935][ T4016] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 919.951641][ T4016] mac80211_hwsim hwsim68 wlan0: left promiscuous mode [ 919.962091][ T4016] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 920.039730][ T4025] netlink: 64 bytes leftover after parsing attributes in process `syz.2.7989'. [ 920.368788][ T4027] netlink: 22 bytes leftover after parsing attributes in process `syz.1.7991'. [ 920.434651][ T4041] netlink: 'syz.3.7994': attribute type 3 has an invalid length. [ 920.442775][ T4041] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7994'. [ 920.456009][ T4041] netlink: 'syz.3.7994': attribute type 3 has an invalid length. [ 920.465332][ T4041] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7994'. [ 920.483386][ T4041] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7994'. [ 920.584424][ T4048] erspan0: entered promiscuous mode [ 920.584465][ T4048] erspan0: entered allmulticast mode [ 920.612966][ T4048] pimreg: entered allmulticast mode [ 920.615020][ T4041] batadv_slave_0: entered promiscuous mode [ 920.622818][ T4040] batadv_slave_0: left promiscuous mode [ 920.921206][ T4059] bond8: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 920.937048][ T4059] bond8 (unregistering): Released all slaves [ 921.134792][ T4065] Unknown options in mask 4 [ 921.187913][ T1159] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 921.191261][T23612] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 921.191297][T23612] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 921.417781][ T4084] syzkaller1: entered promiscuous mode [ 921.424372][ T4084] syzkaller1: entered allmulticast mode [ 922.036426][ T4105] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 923.224350][ T4116] __nla_validate_parse: 9 callbacks suppressed [ 923.224936][ T4116] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8013'. [ 923.453276][ T4118] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8014'. [ 923.475298][ T4118] bridge0: port 2(bridge_slave_1) entered disabled state [ 924.165773][ T4152] netlink: 52 bytes leftover after parsing attributes in process `syz.1.8022'. [ 924.710162][ T4173] dvmrp0: entered allmulticast mode [ 925.078772][ T4186] validate_nla: 4 callbacks suppressed [ 925.078838][ T4186] netlink: 'syz.1.8031': attribute type 2 has an invalid length. [ 925.078864][ T4186] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8031'. [ 925.284388][ T4198] ip_tables: iptables: counters copy to user failed while replacing table [ 926.035178][ T872] Bluetooth: hci1: link tx timeout [ 926.035213][ T872] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 926.368021][ T872] Bluetooth: hci1: link tx timeout [ 926.368054][ T872] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 926.392044][ T872] Bluetooth: hci1: link tx timeout [ 926.392078][ T872] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 926.430032][ T4240] netlink: 184 bytes leftover after parsing attributes in process `syz.4.8046'. [ 926.462719][ T4243] netlink: 199784 bytes leftover after parsing attributes in process `syz.0.8049'. [ 926.472568][ T4243] netlink: 'syz.0.8049': attribute type 1 has an invalid length. [ 926.484456][ T4243] netlink: 'syz.0.8049': attribute type 83 has an invalid length. [ 926.534513][ T4240] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8046'. [ 926.556008][ T4241] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8047'. [ 926.569974][ T872] Bluetooth: hci1: link tx timeout [ 926.575157][ T872] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 926.717496][ T4256] netlink: 'syz.1.8052': attribute type 1 has an invalid length. [ 926.888820][ T4265] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8053'. [ 926.930229][ T4261] 8021q: adding VLAN 0 to HW filter on device bond7 [ 926.994904][ T4261] bond6: (slave bond7): making interface the new active one [ 927.003078][ T4261] bond6: (slave bond7): Enslaving as an active interface with an up link [ 927.021910][ T872] Bluetooth: hci1: link tx timeout [ 927.021942][ T872] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 927.076274][ T4256] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8052'. [ 927.080444][ T4264] syzkaller1: entered promiscuous mode [ 927.080494][ T4264] syzkaller1: entered allmulticast mode [ 927.125749][ T4256] 8021q: adding VLAN 0 to HW filter on device bond6 [ 927.260438][ T4272] tipc: Enabling of bearer rejected, already enabled [ 927.262730][ T4275] macvlan0: entered promiscuous mode [ 927.620932][ T872] Bluetooth: hci1: link tx timeout [ 927.620967][ T872] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 927.781403][ T4300] netlink: 'syz.4.8059': attribute type 1 has an invalid length. [ 927.832824][ T4298] netdevsim netdevsim0: Direct firmware load for .. failed with error -2 [ 927.867590][ T4298] netdevsim netdevsim0: Falling back to sysfs fallback for: .. [ 927.962654][ T4309] netlink: 'syz.3.8061': attribute type 1 has an invalid length. [ 928.073516][ T4300] 8021q: adding VLAN 0 to HW filter on device bond7 [ 928.119765][ T872] Bluetooth: hci1: command 0x0406 tx timeout [ 928.194510][ T4305] bond7: (slave veth5): Enslaving as an active interface with a down link [ 928.219812][ T4310] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 928.229478][ T4310] bond7: (slave batadv1): making interface the new active one [ 928.238570][ T4310] batadv1: entered promiscuous mode [ 928.245315][ T4310] bond7: (slave batadv1): Enslaving as an active interface with an up link [ 928.286493][ T4311] bond7: (slave veth7): Enslaving as an active interface with a down link [ 928.554885][ T4331] netlink: 'syz.3.8064': attribute type 1 has an invalid length. [ 928.580268][ T4321] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 疽m%AAZZI % [ 928.701776][ T4331] 8021q: adding VLAN 0 to HW filter on device bond7 [ 929.344118][ T4366] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 929.409074][ T4370] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8077'. [ 929.513347][ T4373] ip_tables: iptables: counters copy to user failed while replacing table [ 929.596722][ T4371] netlink: 'syz.0.8072': attribute type 10 has an invalid length. [ 929.614105][ T4371] syz_tun: entered promiscuous mode [ 929.802738][ T4387] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8080'. [ 930.079685][ T4399] netlink: 260 bytes leftover after parsing attributes in process `syz.0.8083'. [ 930.769533][ T4428] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8090'. [ 930.888771][ T4441] tipc: Enabling not permitted [ 930.888818][ T4441] tipc: Enabling of bearer rejected, failed to enable media [ 930.942199][ T4442] netlink: 48 bytes leftover after parsing attributes in process `syz.3.8094'. [ 931.064158][ T4450] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8097'. [ 931.161712][ T4453] sctp: [Deprecated]: syz.1.8095 (pid 4453) Use of struct sctp_assoc_value in delayed_ack socket option. [ 931.161712][ T4453] Use struct sctp_sack_info instead [ 931.643156][ T4464] xt_hl: Unknown TTL match mode: 255 [ 932.058843][ T4488] netlink: 'syz.4.8104': attribute type 1 has an invalid length. [ 932.220983][ T4493] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 932.274937][ T4498] netlink: 'syz.3.8107': attribute type 9 has an invalid length. [ 932.295467][ T4504] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 1, id = 0 [ 932.364809][ T4493] openvswitch: netlink: IP tunnel TTL not specified. [ 932.377305][ T4493] netlink: 'syz.4.8104': attribute type 13 has an invalid length. [ 932.377340][ T4493] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8104'. [ 932.442841][ T4488] 8021q: adding VLAN 0 to HW filter on device bond9 [ 932.471701][ T4488] bond8: (slave bond9): making interface the new active one [ 932.472229][ T4488] bond8: (slave bond9): Enslaving as an active interface with an up link [ 932.610953][ T4511] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8108'. [ 932.822048][ T4517] netlink: 116 bytes leftover after parsing attributes in process `syz.4.8109'. [ 933.003240][ T4526] netlink: 'syz.0.8110': attribute type 1 has an invalid length. [ 933.329015][ T4533] netlink: 324 bytes leftover after parsing attributes in process `syz.3.8112'. [ 933.479277][ T4545] x_tables: duplicate entry at hook 4 [ 933.626398][ T4546] veth0_to_batadv: entered promiscuous mode [ 934.079958][ T4577] ip6t_rt: `--rt-type 0' required before `--rt-0-*' [ 934.846641][ T4618] __nla_validate_parse: 3 callbacks suppressed [ 934.859223][ T4618] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8134'. [ 934.859259][ T4618] IPv6: NLM_F_CREATE should be specified when creating new route [ 935.084762][ T4627] netlink: 'syz.3.8136': attribute type 10 has an invalid length. [ 935.084806][ T4627] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8136'. [ 937.616688][ T4600] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 938.055862][ T4647] policy can only be matched on NF_INET_PRE_ROUTING [ 938.059425][ T4647] unable to load match [ 938.079151][ T4651] netlink: 'syz.4.8145': attribute type 12 has an invalid length. [ 938.088493][ T4651] netlink: 'syz.4.8145': attribute type 29 has an invalid length. [ 938.108182][ T4651] netlink: 148 bytes leftover after parsing attributes in process `syz.4.8145'. [ 938.108289][ T4651] netlink: 59 bytes leftover after parsing attributes in process `syz.4.8145'. [ 938.309838][ T4661] tls_set_device_offload: netdev not found [ 939.026040][ T4701] netlink: 1 bytes leftover after parsing attributes in process `syz.3.8158'. [ 939.026410][ T4701] xt_policy: neither incoming nor outgoing policy selected [ 939.448815][T23618] batadv1: left promiscuous mode [ 939.628276][ T4726] netlink: 'syz.0.8164': attribute type 1 has an invalid length. [ 939.963634][ T4741] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8170'. [ 939.964904][ T4745] netlink: 184 bytes leftover after parsing attributes in process `syz.3.8169'. [ 940.072851][ T4751] sctp: [Deprecated]: syz.1.8171 (pid 4751) Use of int in maxseg socket option. [ 940.072851][ T4751] Use struct sctp_assoc_value instead [ 940.193151][ T4759] veth1_to_bond: entered allmulticast mode [ 940.204714][ T4759] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8173'. [ 940.309009][ T4758] veth1_to_bond: left allmulticast mode [ 940.401628][ T4768] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8176'. [ 940.414468][ T4765] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8175'. [ 940.455147][ T4768] bridge0: port 3(batadv1) entered blocking state [ 940.466376][ T4768] bridge0: port 3(batadv1) entered disabled state [ 940.475234][ T4768] batadv1: entered allmulticast mode [ 940.485849][ T4768] batadv1: entered promiscuous mode [ 940.848363][ T4789] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8182'. [ 940.937702][T23597] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 940.937746][T23597] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 941.439352][ T4823] pimreg: left allmulticast mode [ 941.685356][ T4830] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8191'. [ 941.996957][ T4838] netlink: 'syz.0.8195': attribute type 8 has an invalid length. [ 941.998187][ T4838] sch_fq: defrate 0 ignored. [ 942.239152][ T4835] bond8: option mode: invalid value (10) [ 942.245576][ T4835] bond8 (unregistering): Released all slaves [ 942.300110][ T4849] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8200'. [ 942.762531][T23597] IPVS: starting estimator thread 0... [ 942.847523][ T4869] IPVS: using max 30 ests per chain, 72000 per kthread [ 942.952727][ T4873] netlink: 56 bytes leftover after parsing attributes in process `syz.2.8206'. [ 943.386492][ T4908] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 943.442247][T23597] IPVS: starting estimator thread 0... [ 943.453073][ T4904] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 943.525778][ T4923] openvswitch: netlink: nsh attr 1 has unexpected len 4 expected 8 [ 943.548337][ T4918] IPVS: using max 32 ests per chain, 76800 per kthread [ 943.819728][ T4936] batman_adv: batadv0: Adding interface: gretap2 [ 943.819765][ T4936] batman_adv: batadv0: The MTU of interface gretap2 is too small (1424) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 943.819809][ T4936] batman_adv: batadv0: Interface activated: gretap2 [ 943.912979][ T4939] SET target dimension over the limit! [ 943.979221][ T4943] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8223'. [ 944.031628][ T4943] veth1: entered promiscuous mode [ 944.101703][ T4943] smc: net device team0 applied user defined pnetid SYZ2 [ 944.455410][ T4964] netlink: 'syz.2.8230': attribute type 2 has an invalid length. [ 945.129467][ T5001] __nla_validate_parse: 5 callbacks suppressed [ 945.129726][ T5001] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8238'. [ 945.148411][ T5001] netlink: 'syz.1.8238': attribute type 5 has an invalid length. [ 945.224886][ T872] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 945.401023][ T5011] IPv6: Can't replace route, no match found [ 945.401341][ T5011] IPv6: Can't replace route, no match found [ 945.645345][ T5017] netlink: 148 bytes leftover after parsing attributes in process `syz.4.8245'. [ 945.907045][ T5030] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8249'. [ 946.019217][ T5039] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8253'. [ 946.019277][ T5039] netlink: 'syz.2.8253': attribute type 5 has an invalid length. [ 946.019310][ T5039] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8253'. [ 946.060185][ T5039] geneve2: entered promiscuous mode [ 946.067015][ T5039] geneve2: entered allmulticast mode [ 946.083439][T23618] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 946.083571][T23618] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 946.083637][T23618] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 946.108354][T23597] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 946.126901][ T5042] netlink: 156 bytes leftover after parsing attributes in process `syz.3.8255'. [ 946.140194][T23597] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 946.140260][T23597] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 946.186313][ T5042] x_tables: duplicate underflow at hook 2 [ 946.328217][ T5049] hsr0 speed is unknown, defaulting to 1000 [ 946.339200][ T5049] lo speed is unknown, defaulting to 1000 [ 946.346767][ T5049] wg0 speed is unknown, defaulting to 1000 [ 946.573805][ T5066] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8261'. [ 946.795948][ T5075] netlink: 260 bytes leftover after parsing attributes in process `syz.4.8260'. [ 946.866293][ T5078] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8264'. [ 946.906685][ T5049] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8258'. [ 947.201462][ T5095] netlink: 'syz.1.8265': attribute type 12 has an invalid length. [ 948.006302][T23597] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 948.006338][T23597] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 948.330644][ T5132] syzkaller0: left promiscuous mode [ 948.336398][ T5132] syzkaller0: left allmulticast mode [ 948.606438][ T5147] sch_fq: defrate 4 ignored. [ 948.800157][ T5109] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 949.080001][ T5161] xfrm1: entered promiscuous mode [ 949.080040][ T5161] xfrm1: entered allmulticast mode [ 949.593127][ T5179] syzkaller0: entered promiscuous mode [ 949.593196][ T5179] syzkaller0: entered allmulticast mode [ 950.370441][ T5206] ip_tables: iptables: counters copy to user failed while replacing table [ 950.383845][ T5206] ip_tables: iptables: counters copy to user failed while replacing table [ 950.393604][ T5206] ip_tables: iptables: counters copy to user failed while replacing table [ 950.403393][ T5206] ip_tables: iptables: counters copy to user failed while replacing table [ 950.413798][ T5206] ip_tables: iptables: counters copy to user failed while replacing table [ 950.423304][ T5206] ip_tables: iptables: counters copy to user failed while replacing table [ 950.423656][ T5206] ip_tables: iptables: counters copy to user failed while replacing table [ 950.423950][ T5206] ip_tables: iptables: counters copy to user failed while replacing table [ 950.452112][ T5206] ip_tables: iptables: counters copy to user failed while replacing table [ 950.460522][ T5206] ip_tables: iptables: counters copy to user failed while replacing table [ 950.605360][ T5220] bond0: entered promiscuous mode [ 950.621148][ T5220] batadv0: entered promiscuous mode [ 950.621991][ T5220] debugfs: 'hsr1' already exists in 'hsr' [ 950.622029][ T5220] Cannot create hsr debugfs directory [ 950.622241][ T5220] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 950.658695][ T5220] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 951.363973][ T5244] bond1: option lp_interval: invalid value (0) [ 951.364013][ T5244] bond1: option lp_interval: allowed values 1 - 2147483647 [ 951.403884][ T5244] bond1 (unregistering): Released all slaves [ 951.443013][ T5248] __nla_validate_parse: 13 callbacks suppressed [ 951.443046][ T5248] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8309'. [ 951.443079][ T5248] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8309'. [ 951.834633][ T5261] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8309'. [ 951.848798][ T5261] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8309'. [ 952.085763][ T5258] mac80211_hwsim hwsim60 syzkaller0: entered promiscuous mode [ 952.085805][ T5258] mac80211_hwsim hwsim60 syzkaller0: entered allmulticast mode [ 952.145718][ T5265] tipc: MTU too low for tipc bearer [ 952.165199][ T5265] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8312'. [ 952.165244][ T5265] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8312'. [ 952.222455][ T5268] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 952.222538][ T5268] gretap2: entered promiscuous mode [ 952.222552][ T5268] gretap2: entered allmulticast mode [ 952.351442][ T5286] x_tables: duplicate underflow at hook 1 [ 952.380009][ T5291] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 952.571534][ T5304] veth1_macvtap: left promiscuous mode [ 952.625416][ T5304] bond6: entered allmulticast mode [ 952.626747][ T5304] dvmrp8: left allmulticast mode [ 952.719123][ T5303] bond6: left allmulticast mode [ 952.791676][ T5311] netlink: 'syz.2.8322': attribute type 1 has an invalid length. [ 952.835397][ T5314] mac80211_hwsim hwsim61 wlan0: left promiscuous mode [ 952.946286][ T5317] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8325'. [ 952.966106][ T5317] batadv0: entered promiscuous mode [ 952.966270][ T5317] macsec2: entered promiscuous mode [ 952.972795][ T5317] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 953.318044][ T5348] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8330'. [ 953.318094][ T5348] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8330'. [ 953.548936][ T5357] netlink: 'syz.2.8334': attribute type 2 has an invalid length. [ 953.568459][ T5357] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.8334'. [ 953.799770][ T5365] netlink: 'syz.0.8337': attribute type 7 has an invalid length. [ 953.854070][ T5365] netlink: 'syz.0.8337': attribute type 7 has an invalid length. [ 953.865430][T23597] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 953.866192][T23609] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 953.866720][T23609] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 953.866791][T23609] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 955.093607][ T5400] netlink: 'syz.0.8344': attribute type 15 has an invalid length. [ 955.204633][ T5402] netlink: 'syz.0.8344': attribute type 3 has an invalid length. [ 955.236200][ T5411] netlink: 'syz.3.8350': attribute type 7 has an invalid length. [ 955.240499][ T5411] netlink: 'syz.3.8350': attribute type 7 has an invalid length. [ 955.560240][ T5432] netlink: 'syz.2.8355': attribute type 3 has an invalid length. [ 955.709382][ T5441] sch_fq: defrate 4 ignored. [ 955.843692][ T5443] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 955.843747][ T5443] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 955.843781][ T5443] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 955.924337][ T5443] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 956.343169][ T5462] hsr_slave_0: left promiscuous mode [ 956.353428][ T5464] net_ratelimit: 24 callbacks suppressed [ 956.353475][ T5464] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 956.353597][ T5462] hsr_slave_1: left promiscuous mode [ 956.381661][ T5468] netlink: 'syz.2.8362': attribute type 1 has an invalid length. [ 957.255157][ T5496] vlan2: entered promiscuous mode [ 957.261909][ T5496] bond_slave_0: entered promiscuous mode [ 957.268990][ T5497] __nla_validate_parse: 11 callbacks suppressed [ 957.269068][ T5497] netlink: 224 bytes leftover after parsing attributes in process `syz.2.8369'. [ 957.288065][ T5497] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8369'. [ 957.994199][ T5533] sch_fq: defrate 4 ignored. [ 958.021205][ T5537] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8381'. [ 958.266948][ T5550] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8383'. [ 958.312961][ T5552] lo: entered promiscuous mode [ 958.322549][ T5552] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 958.532981][ T5561] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8388'. [ 958.601972][ T5561] hsr_slave_1 (unregistering): left promiscuous mode [ 958.770056][ T5570] syzkaller0: entered promiscuous mode [ 958.770094][ T5570] syzkaller0: entered allmulticast mode [ 959.029144][ T5572] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8392'. [ 959.504683][ T5586] ip6t_hbh: Not strict - not implemented [ 959.542394][ T5586] validate_nla: 1 callbacks suppressed [ 959.542439][ T5586] netlink: 'syz.1.8396': attribute type 1 has an invalid length. [ 959.542458][ T5586] netlink: 224 bytes leftover after parsing attributes in process `syz.1.8396'. [ 959.542479][ T5586] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8396'. [ 959.853515][ T5609] syzkaller0: entered promiscuous mode [ 959.853557][ T5609] syzkaller0: entered allmulticast mode [ 960.141519][ T5625] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8406'. [ 960.302507][ T5636] netlink: 44 bytes leftover after parsing attributes in process `syz.4.8410'. [ 960.469122][ T5643] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 961.232214][ T5705] netlink: 'syz.0.8424': attribute type 5 has an invalid length. [ 961.474155][ T5726] netlink: 'syz.1.8430': attribute type 6 has an invalid length. [ 961.474189][ T5726] netlink: 'syz.1.8430': attribute type 5 has an invalid length. [ 963.914374][ T5672] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 964.371308][ T5771] __nla_validate_parse: 8 callbacks suppressed [ 964.371359][ T5771] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8440'. [ 964.372359][ T5772] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8442'. [ 964.452482][ T5776] Unsupported ieee802154 address type: 0 [ 964.453829][ T5776] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8444'. [ 964.762543][ T5789] netlink: 512 bytes leftover after parsing attributes in process `syz.3.8447'. [ 965.096401][ T5811] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8451'. [ 965.099094][ T5811] openvswitch: netlink: Multiple metadata blocks provided [ 965.643860][ T5832] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8459'. [ 965.673434][ T5832] netlink: 56 bytes leftover after parsing attributes in process `syz.4.8459'. [ 965.696029][ T5835] netlink: 256 bytes leftover after parsing attributes in process `syz.2.8460'. [ 965.709902][ T5836] netlink: 256 bytes leftover after parsing attributes in process `syz.2.8460'. [ 965.915960][ T5844] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8462'. [ 965.985388][ T5847] netlink: 'syz.2.8463': attribute type 30 has an invalid length. [ 966.222083][ T5856] vcan0: tx address claim with broadcast sa [ 966.467928][ T5873] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 966.467962][ T5873] IPv6: NLM_F_CREATE should be set when creating new route [ 966.783749][ T5897] netlink: 'syz.3.8476': attribute type 1 has an invalid length. [ 966.810592][ T5896] tipc: Started in network mode [ 966.810638][ T5896] tipc: Node identity e0000001, cluster identity 4711 [ 966.810685][ T5896] tipc: Enabling of bearer rejected, failed to enable media [ 967.369362][ T5920] netlink: 'syz.4.8483': attribute type 7 has an invalid length. [ 967.369431][ T5920] netlink: 'syz.4.8483': attribute type 8 has an invalid length. [ 967.731043][ T5941] dvmrp0: entered allmulticast mode [ 967.927022][ T5950] FAULT_INJECTION: forcing a failure. [ 967.927022][ T5950] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 967.927071][ T5950] CPU: 1 UID: 0 PID: 5950 Comm: syz.0.8492 Not tainted syzkaller #0 PREEMPT(full) [ 967.927096][ T5950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 967.927108][ T5950] Call Trace: [ 967.927116][ T5950] [ 967.927125][ T5950] dump_stack_lvl+0xe8/0x150 [ 967.927159][ T5950] should_fail_ex+0x410/0x560 [ 967.927194][ T5950] _copy_from_user+0x2d/0xb0 [ 967.927216][ T5950] __sys_connect+0x155/0x450 [ 967.927324][ T5950] ? __pfx___sys_connect+0x10/0x10 [ 967.927365][ T5950] ? __pfx_ksys_write+0x10/0x10 [ 967.927402][ T5950] __x64_sys_connect+0x7a/0x90 [ 967.927430][ T5950] do_syscall_64+0x166/0x520 [ 967.927459][ T5950] ? trace_irq_disable+0x3b/0x140 [ 967.927478][ T5950] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 967.927499][ T5950] ? clear_bhb_loop+0x70/0xc0 [ 967.927522][ T5950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 967.927542][ T5950] RIP: 0033:0x7fbf3319e159 [ 967.927560][ T5950] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 967.927577][ T5950] RSP: 002b:00007fbf33fde028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 967.927598][ T5950] RAX: ffffffffffffffda RBX: 00007fbf33425fa0 RCX: 00007fbf3319e159 [ 967.927613][ T5950] RDX: 0000000000000010 RSI: 0000200000000180 RDI: 0000000000000003 [ 967.927625][ T5950] RBP: 00007fbf33fde090 R08: 0000000000000000 R09: 0000000000000000 [ 967.927637][ T5950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 967.927649][ T5950] R13: 00007fbf33426038 R14: 00007fbf33425fa0 R15: 00007ffc42c6a868 [ 967.927698][ T5950] [ 968.329096][ T5968] netlink: 'syz.2.8498': attribute type 13 has an invalid length. [ 968.589789][ T5973] bond0: invalid NS target :: specified for addition [ 968.589881][ T5973] bond0: option ns_ip6_target: invalid value (18446744073709551615) [ 968.996945][ T5980] sch_fq: defrate 0 ignored. [ 969.134603][ T5984] syz_tun: entered allmulticast mode [ 969.159150][ T5983] syz_tun: left allmulticast mode [ 969.291213][ T5993] FAULT_INJECTION: forcing a failure. [ 969.291213][ T5993] name failslab, interval 1, probability 0, space 0, times 0 [ 969.307999][ T5993] CPU: 0 UID: 0 PID: 5993 Comm: syz.0.8506 Not tainted syzkaller #0 PREEMPT(full) [ 969.308024][ T5993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 969.308035][ T5993] Call Trace: [ 969.308051][ T5993] [ 969.308060][ T5993] dump_stack_lvl+0xe8/0x150 [ 969.308092][ T5993] should_fail_ex+0x410/0x560 [ 969.308125][ T5993] should_failslab+0xa8/0x100 [ 969.308148][ T5993] ? dst_alloc+0x105/0x170 [ 969.308257][ T5993] kmem_cache_alloc_noprof+0xa1/0x600 [ 969.308288][ T5993] ? __pfx_find_exception+0x10/0x10 [ 969.308356][ T5993] ? dst_alloc+0x105/0x170 [ 969.308378][ T5993] ? fib_lookup+0x76/0x440 [ 969.308403][ T5993] dst_alloc+0x105/0x170 [ 969.308431][ T5993] ip_route_output_key_hash_rcu+0x14ac/0x2720 [ 969.308466][ T5993] ? ip_route_output_key_hash+0xd8/0x2a0 [ 969.308492][ T5993] ip_route_output_key_hash+0x18d/0x2a0 [ 969.308520][ T5993] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 969.308541][ T5993] ? snprintf+0xe8/0x140 [ 969.308569][ T5993] ? begin_current_label_crit_section+0x2a3/0x830 [ 969.308638][ T5993] tcp_v4_connect+0x6fd/0x1950 [ 969.308730][ T5993] ? __pfx_tcp_v4_connect+0x10/0x10 [ 969.308768][ T5993] __inet_stream_connect+0x258/0xe00 [ 969.308848][ T5993] ? do_raw_spin_lock+0x12b/0x2f0 [ 969.308878][ T5993] ? __pfx___inet_stream_connect+0x10/0x10 [ 969.308906][ T5993] ? inet_stream_connect+0x51/0xa0 [ 969.308931][ T5993] ? __local_bh_enable_ip+0xd6/0x140 [ 969.308976][ T5993] inet_stream_connect+0x66/0xa0 [ 969.309004][ T5993] __sys_connect+0x316/0x450 [ 969.309034][ T5993] ? __pfx___sys_connect+0x10/0x10 [ 969.309081][ T5993] ? __pfx_ksys_write+0x10/0x10 [ 969.309116][ T5993] __x64_sys_connect+0x7a/0x90 [ 969.309144][ T5993] do_syscall_64+0x166/0x520 [ 969.309170][ T5993] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 969.309188][ T5993] ? clear_bhb_loop+0x70/0xc0 [ 969.309212][ T5993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 969.309231][ T5993] RIP: 0033:0x7fbf3319e159 [ 969.309249][ T5993] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 969.309266][ T5993] RSP: 002b:00007fbf33fde028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 969.309287][ T5993] RAX: ffffffffffffffda RBX: 00007fbf33425fa0 RCX: 00007fbf3319e159 [ 969.309301][ T5993] RDX: 0000000000000010 RSI: 0000200000000180 RDI: 0000000000000003 [ 969.309314][ T5993] RBP: 00007fbf33fde090 R08: 0000000000000000 R09: 0000000000000000 [ 969.309326][ T5993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 969.309337][ T5993] R13: 00007fbf33426038 R14: 00007fbf33425fa0 R15: 00007ffc42c6a868 [ 969.309370][ T5993] [ 970.074253][ T6030] __nla_validate_parse: 17 callbacks suppressed [ 970.082022][ T6030] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8516'. [ 970.262845][ T6030] 8021q: adding VLAN 0 to HW filter on device bond8 [ 970.305562][ T6041] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 970.328997][ T6031] macvlan2: entered promiscuous mode [ 970.329034][ T6031] macvlan2: entered allmulticast mode [ 970.333781][ T6031] bond8: entered promiscuous mode [ 970.336142][ T6031] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 970.364038][ T6031] bond8: left promiscuous mode [ 970.849417][ T6061] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 971.432856][ T6091] netlink: 'syz.2.8535': attribute type 12 has an invalid length. [ 971.567080][ T6096] team0: entered promiscuous mode [ 971.573526][ T6096] team_slave_0: entered promiscuous mode [ 971.573915][ T6096] team_slave_1: entered promiscuous mode [ 971.656715][ T6101] geneve4: entered promiscuous mode [ 972.054254][ T6118] netlink: 104 bytes leftover after parsing attributes in process `syz.0.8541'. [ 972.074081][ T6120] netlink: 'syz.1.8542': attribute type 10 has an invalid length. [ 972.074170][ T6120] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8542'. [ 972.074195][ T6120] team0: entered allmulticast mode [ 972.074211][ T6120] team_slave_0: entered allmulticast mode [ 972.074228][ T6120] team_slave_1: entered allmulticast mode [ 972.074517][ T6120] bridge0: port 3(team0) entered blocking state [ 972.074672][ T6120] bridge0: port 3(team0) entered disabled state [ 972.910404][ T6143] bond2: option mode: unable to set because the bond device has slaves [ 973.172116][ T6148] netlink: 'syz.4.8549': attribute type 21 has an invalid length. [ 973.172232][ T6148] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8549'. [ 973.176755][ T6148] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8549'. [ 973.477055][ T6160] syzkaller1: entered promiscuous mode [ 973.479632][ T6156] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8552'. [ 973.495657][ T6160] syzkaller1: entered allmulticast mode [ 973.883535][ T6191] netlink: NAT attribute has 8 unknown bytes [ 973.883595][ T6191] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 973.909420][ T6191] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8560'. [ 974.006939][ T6192] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 974.085990][ T6195] veth1_macvtap: left promiscuous mode [ 974.115356][ T6195] syz_tun: entered allmulticast mode [ 974.125594][ T6195] lo: left allmulticast mode [ 974.209764][ T6194] syz_tun: left allmulticast mode [ 975.079555][ T6239] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8572'. [ 975.079603][ T6239] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 975.353287][ T6248] netlink: 656 bytes leftover after parsing attributes in process `syz.3.8576'. [ 975.628572][ T6255] macvtap0: entered allmulticast mode [ 975.628656][ T6255] veth0_macvtap: entered allmulticast mode [ 975.683231][ T6255] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8578'. [ 975.739692][ T6259] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8580'. [ 975.739755][ T6259] openvswitch: netlink: Missing key (keys=c0, expected=40300) [ 976.172723][ T6279] xt_socket: unknown flags 0x50 [ 976.328355][ T6288] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8590'. [ 976.339605][ T6284] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8592'. [ 976.363968][ T6284] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 976.387847][ T6287] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8593'. [ 976.609095][ T6295] ip6gre1: entered promiscuous mode [ 976.614382][ T6266] syzkaller0: left promiscuous mode [ 976.614400][ T6266] syzkaller0: left allmulticast mode [ 976.937993][ T6313] ip_tables: iptables: counters copy to user failed while replacing table [ 977.202847][ T6324] syzkaller0: entered promiscuous mode [ 977.202885][ T6324] syzkaller0: entered allmulticast mode [ 977.271519][ T6329] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8601'. [ 977.734150][ T6351] set_target_v3_checkentry: 55 callbacks suppressed [ 977.734277][ T6351] Cannot find del_set index 4 as target [ 978.175769][ T6373] netlink: 44 bytes leftover after parsing attributes in process `syz.3.8619'. [ 978.233859][ T6377] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8622'. [ 979.018941][ T6404] netlink: 'syz.3.8631': attribute type 2 has an invalid length. [ 979.621033][ T6431] xt_TPROXY: Can be used only with -p tcp or -p udp [ 979.830203][ T6440] skbuff: bad partial csum: csum=65535/2 headroom=178 headlen=65543 [ 979.855900][ T6443] netlink: zone id is out of range [ 980.223498][ T6463] xt_hashlimit: size too large, truncated to 1048576 [ 980.494614][ T6474] vlan0: entered promiscuous mode [ 980.494663][ T6474] bridge0: entered promiscuous mode [ 980.501936][ T6474] vlan0: entered allmulticast mode [ 980.501954][ T6474] bridge0: entered allmulticast mode [ 980.622707][ T6480] __nla_validate_parse: 12 callbacks suppressed [ 980.623996][ T6480] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8656'. [ 980.710955][ T6482] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8657'. [ 980.773867][ T6482] 8021q: adding VLAN 0 to HW filter on device bond9 [ 980.796699][ T6488] bond9: entered promiscuous mode [ 980.796768][ T6488] bond9: entered allmulticast mode [ 980.894546][ T6482] macvlan2: entered promiscuous mode [ 980.894589][ T6482] macvlan2: entered allmulticast mode [ 980.905359][ T6482] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 980.915367][ T6490] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8662'. [ 980.937804][ T6497] netlink: 'syz.4.8661': attribute type 9 has an invalid length. [ 980.961361][ T31] audit: type=1800 audit(1788549945.798:81): pid=6498 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.8660" name="memory.events" dev="tmpfs" ino=2146 res=0 errno=0 [ 980.984099][ T6503] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8662'. [ 981.002787][ T6504] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8662'. [ 981.009462][ T6506] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8662'. [ 981.060020][ T6511] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8659'. [ 981.363858][ T6520] netlink: 'syz.0.8665': attribute type 1 has an invalid length. [ 981.416757][ T6520] bond1: entered promiscuous mode [ 981.417843][ T6520] 8021q: adding VLAN 0 to HW filter on device bond1 [ 981.443813][ T6522] 8021q: adding VLAN 0 to HW filter on device bond1 [ 981.444199][ T6522] bond1: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 981.444217][ T6522] bond1: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 981.484497][ T6522] bond1: (slave ip6gre2): making interface the new active one [ 981.484544][ T6522] ip6gre2: entered promiscuous mode [ 981.503049][ T6522] bond1: (slave ip6gre2): Enslaving as an active interface with an up link [ 981.625666][ T6533] Bluetooth: hci0: unsupported parameter 5135 [ 981.625743][ T6533] Bluetooth: hci0: unsupported parameter 8192 [ 981.625772][ T6533] Bluetooth: hci0: unsupported parameter 5135 [ 981.625784][ T6533] Bluetooth: hci0: unsupported parameter 8192 [ 982.003436][ T6555] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8676'. [ 982.384065][ T6565] netlink: 'syz.4.8679': attribute type 2 has an invalid length. [ 982.441712][ T6564] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8679'. [ 982.562795][ T6574] bond12: option lp_interval: invalid value (0) [ 982.562836][ T6574] bond12: option lp_interval: allowed values 1 - 2147483647 [ 982.592178][ T6574] bond12 (unregistering): Released all slaves [ 982.703523][ T6564] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8679'. [ 982.875496][ T6592] netlink: 'syz.3.8687': attribute type 12 has an invalid length. [ 982.875534][ T6592] netlink: 'syz.3.8687': attribute type 29 has an invalid length. [ 984.370826][ T6649] ip_tables: iptables: counters copy to user failed while replacing table [ 984.402036][ T6649] debugfs: '1^!' already exists in 'ieee80211' [ 986.250468][ T6715] __nla_validate_parse: 72 callbacks suppressed [ 986.250525][ T6715] netlink: 184 bytes leftover after parsing attributes in process `syz.3.8718'. [ 986.294685][ T6718] netlink: 256 bytes leftover after parsing attributes in process `syz.4.8719'. [ 986.300846][ T6722] netlink: 256 bytes leftover after parsing attributes in process `syz.4.8719'. [ 986.325861][ T6724] netlink: 184 bytes leftover after parsing attributes in process `syz.3.8718'. [ 986.433908][ T6726] mac80211_hwsim hwsim62 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 986.840006][ C1] vcan0: j1939_tp_rxtimer: 0xffff888059708400: rx timeout, send abort [ 986.881206][ T6740] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8722'. [ 986.923287][ T6739] netlink: 'syz.1.8725': attribute type 1 has an invalid length. [ 987.006705][ T6744] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8725'. [ 987.223771][ T6739] 8021q: adding VLAN 0 to HW filter on device bond12 [ 987.340181][ C1] vcan0: j1939_tp_rxtimer: 0xffff888059708400: abort rx timeout. Force session deactivation [ 987.816815][ T6788] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8729'. [ 987.840888][ T6788] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8729'. [ 988.202201][ T6795] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8731'. [ 988.210506][ T6795] netlink: 'syz.4.8731': attribute type 7 has an invalid length. [ 988.210524][ T6795] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8731'. [ 988.425749][ T6802] x_tables: duplicate entry at hook 2 [ 989.521765][ T6835] netlink: 'syz.4.8743': attribute type 7 has an invalid length. [ 989.521809][ T6835] netlink: 'syz.4.8743': attribute type 8 has an invalid length. [ 990.195359][ T6861] netlink: zone id is out of range [ 990.195404][ T6861] netlink: set zone limit has 4 unknown bytes [ 991.775764][ T6897] __nla_validate_parse: 5 callbacks suppressed [ 991.785514][ T6897] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8765'. [ 992.078730][ T6897] syzkaller0: entered promiscuous mode [ 992.078769][ T6897] syzkaller0: entered allmulticast mode [ 992.121658][ T6897] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8765'. [ 992.121697][ T6897] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8765'. [ 992.728498][T23599] tipc: Subscription rejected, illegal request [ 993.043470][ T6931] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8776'. [ 993.136520][ T6937] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8776'. [ 993.350724][ T6946] bond13: option resend_igmp: invalid value (32767) [ 993.363601][ T6946] bond13: option resend_igmp: allowed values 0 - 255 [ 993.414419][ T6946] bond13 (unregistering): Released all slaves [ 994.332983][ T6976] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 994.362294][ T6976] netlink: 9 bytes leftover after parsing attributes in process `syz.0.8787'. [ 994.373676][ T6976] netlink: 5 bytes leftover after parsing attributes in process `syz.0.8787'. [ 994.384479][ T6976] 1{X: renamed from 30{X [ 994.394492][ T6976] 1{X: entered allmulticast mode [ 994.402694][ T6974] nbd0: detected capacity change from 0 to 63 [ 994.414034][ T2049] [ 994.416378][ T2049] ====================================================== [ 994.419331][ T6976] A link change request failed with some changes committed already. Interface 31{X may have been left with an inconsistent configuration, please check. [ 994.439199][ T2049] WARNING: possible circular locking dependency detected [ 994.446314][ T2049] syzkaller #0 Not tainted [ 994.450728][ T2049] ------------------------------------------------------ [ 994.457789][ T2049] kworker/1:1H/2049 is trying to acquire lock: [ 994.463944][ T2049] ffff88807e297c68 (&nsock->tx_lock){+.+.}-{4:4}, at: nbd_queue_rq+0x373/0xff0 [ 994.473077][ T2049] [ 994.473077][ T2049] but task is already holding lock: [ 994.480442][ T2049] ffff8880272f0178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc1/0xff0 [ 994.488905][ T2049] [ 994.488905][ T2049] which lock already depends on the new lock. [ 994.488905][ T2049] [ 994.499307][ T2049] [ 994.499307][ T2049] the existing dependency chain (in reverse order) is: [ 994.504696][ T6977] netlink: 'syz.3.8785': attribute type 1 has an invalid length. [ 994.516025][ T2049] [ 994.516025][ T2049] -> #7 (&cmd->lock){+.+.}-{4:4}: [ 994.523338][ T2049] __mutex_lock+0x19d/0x1550 [ 994.528513][ T2049] nbd_queue_rq+0xc1/0xff0 [ 994.533457][ T2049] blk_mq_dispatch_rq_list+0x499/0x1990 [ 994.539611][ T2049] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 994.546506][ T2049] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 994.553019][ T2049] blk_mq_run_work_fn+0x16c/0x300 [ 994.558575][ T2049] process_scheduled_works+0xc3d/0x1630 [ 994.564657][ T2049] worker_thread+0xa47/0xfb0 [ 994.569782][ T2049] kthread+0x38b/0x480 [ 994.574378][ T2049] ret_from_fork+0x514/0xb70 [ 994.579523][ T2049] ret_from_fork_asm+0x1a/0x30 [ 994.584822][ T2049] [ 994.584822][ T2049] -> #6 (set->srcu){.+.+}-{0:0}: [ 994.591951][ T2049] __synchronize_srcu+0xc9/0x2f0 [ 994.597435][ T2049] elevator_switch+0x1e8/0x7b0 [ 994.602819][ T2049] elevator_change+0x2fa/0x480 [ 994.608133][ T2049] elevator_set_default+0x375/0x440 [ 994.613872][ T2049] blk_register_queue+0x3f3/0x4e0 [ 994.619475][ T2049] __add_disk+0x6cb/0xe30 [ 994.624338][ T2049] add_disk_fwnode+0x100/0x3a0 [ 994.629630][ T2049] nbd_dev_add+0x733/0xb60 [ 994.634575][ T2049] nbd_init+0x168/0x1f0 [ 994.639350][ T2049] do_one_initcall+0x250/0x870 [ 994.644650][ T2049] do_initcall_level+0x10a/0x1a0 [ 994.650182][ T2049] do_initcalls+0x59/0xa0 [ 994.655042][ T2049] kernel_init_freeable+0x29d/0x3e0 [ 994.660772][ T2049] kernel_init+0x22/0x1d0 [ 994.665628][ T2049] ret_from_fork+0x514/0xb70 [ 994.670745][ T2049] ret_from_fork_asm+0x1a/0x30 [ 994.676052][ T2049] [ 994.676052][ T2049] -> #5 (&q->elevator_lock){+.+.}-{4:4}: [ 994.683878][ T2049] __mutex_lock+0x19d/0x1550 [ 994.689004][ T2049] elevator_change+0x1af/0x480 [ 994.694307][ T2049] elevator_set_none+0xb5/0x140 [ 994.699690][ T2049] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 994.706025][ T2049] nbd_start_device+0x189/0xb30 [ 994.711406][ T2049] nbd_genl_connect+0x167d/0x1cd0 [ 994.716962][ T2049] genl_family_rcv_msg_doit+0x233/0x340 [ 994.723046][ T2049] genl_rcv_msg+0x614/0x7a0 [ 994.728085][ T2049] netlink_rcv_skb+0x226/0x4a0 [ 994.733374][ T2049] genl_rcv+0x28/0x40 [ 994.737888][ T2049] netlink_unicast+0x7bd/0x940 [ 994.743177][ T2049] netlink_sendmsg+0x813/0xb40 [ 994.748473][ T2049] sock_sendmsg_nosec+0x13a/0x180 [ 994.754029][ T2049] ____sys_sendmsg+0x54e/0x850 [ 994.759323][ T2049] ___sys_sendmsg+0x2a5/0x360 [ 994.764529][ T2049] __x64_sys_sendmsg+0x1b1/0x290 [ 994.769994][ T2049] do_syscall_64+0x166/0x520 [ 994.775125][ T2049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 994.781551][ T2049] [ 994.781551][ T2049] -> #4 (&q->q_usage_counter(io)#52){++++}-{0:0}: [ 994.790233][ T2049] blk_alloc_queue+0x544/0x690 [ 994.795530][ T2049] __blk_mq_alloc_disk+0x194/0x390 [ 994.801167][ T2049] nbd_dev_add+0x494/0xb60 [ 994.806113][ T2049] nbd_init+0x168/0x1f0 [ 994.810797][ T2049] do_one_initcall+0x250/0x870 [ 994.816096][ T2049] do_initcall_level+0x10a/0x1a0 [ 994.821568][ T2049] do_initcalls+0x59/0xa0 [ 994.826425][ T2049] kernel_init_freeable+0x29d/0x3e0 [ 994.832164][ T2049] kernel_init+0x22/0x1d0 [ 994.837025][ T2049] ret_from_fork+0x514/0xb70 [ 994.842151][ T2049] ret_from_fork_asm+0x1a/0x30 [ 994.847454][ T2049] [ 994.847454][ T2049] -> #3 (fs_reclaim){+.+.}-{0:0}: [ 994.854676][ T2049] fs_reclaim_acquire+0x71/0x100 [ 994.860157][ T2049] kmem_cache_alloc_noprof+0x5f/0x600 [ 994.866066][ T2049] mas_alloc_nodes+0x291/0x350 [ 994.871466][ T2049] mas_preallocate+0x42a/0x840 [ 994.876768][ T2049] vma_link+0x123/0x460 [ 994.881458][ T2049] insert_vm_struct+0x352/0x520 [ 994.886838][ T2049] create_init_stack_vma+0x61c/0xa10 [ 994.892658][ T2049] alloc_bprm+0x50c/0x640 [ 994.897522][ T2049] kernel_execve+0x85/0x9c0 [ 994.902560][ T2049] try_to_run_init_process+0x13/0x60 [ 994.908400][ T2049] kernel_init+0xb2/0x1d0 [ 994.913257][ T2049] ret_from_fork+0x514/0xb70 [ 994.918371][ T2049] ret_from_fork_asm+0x1a/0x30 [ 994.923673][ T2049] [ 994.923673][ T2049] -> #2 (&mm->mmap_lock){++++}-{4:4}: [ 994.931239][ T2049] __might_fault+0xcb/0x130 [ 994.936266][ T2049] _copy_from_iter+0x100/0x1660 [ 994.942506][ T2049] copy_page_from_iter+0x219/0x2d0 [ 994.948156][ T2049] tcp_connect+0x26f0/0x54e0 [ 994.953275][ T2049] tcp_v6_connect+0x14ed/0x1cf0 [ 994.958749][ T2049] __inet_stream_connect+0x258/0xe00 [ 994.964565][ T2049] tcp_sendmsg_fastopen+0x3af/0x5f0 [ 994.970382][ T2049] tcp_sendmsg_locked+0x4d3d/0x5640 [ 994.976116][ T2049] tcp_sendmsg+0x2f/0x50 [ 994.980889][ T2049] sock_sendmsg_nosec+0x90/0x180 [ 994.986351][ T2049] __sys_sendto+0x408/0x5a0 [ 994.991384][ T2049] __x64_sys_sendto+0xde/0x100 [ 994.996669][ T2049] do_syscall_64+0x166/0x520 [ 995.001790][ T2049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 995.008206][ T2049] [ 995.008206][ T2049] -> #1 (sk_lock-AF_INET6-NBD){+.+.}-{0:0}: [ 995.016288][ T2049] lock_sock_nested+0x41/0x100 [ 995.021584][ T2049] inet_shutdown+0x6a/0x390 [ 995.026622][ T2049] nbd_mark_nsock_dead+0x2cb/0x550 [ 995.032268][ T2049] recv_work+0x1cee/0x1e10 [ 995.037219][ T2049] process_scheduled_works+0xc3d/0x1630 [ 995.043299][ T2049] worker_thread+0xa47/0xfb0 [ 995.048417][ T2049] kthread+0x38b/0x480 [ 995.053011][ T2049] ret_from_fork+0x514/0xb70 [ 995.058123][ T2049] ret_from_fork_asm+0x1a/0x30 [ 995.063423][ T2049] [ 995.063423][ T2049] -> #0 (&nsock->tx_lock){+.+.}-{4:4}: [ 995.071077][ T2049] __lock_acquire+0x15ff/0x2e50 [ 995.076459][ T2049] lock_acquire+0x115/0x350 [ 995.081488][ T2049] __mutex_lock+0x19d/0x1550 [ 995.086612][ T2049] nbd_queue_rq+0x373/0xff0 [ 995.091646][ T2049] blk_mq_dispatch_rq_list+0x499/0x1990 [ 995.097734][ T2049] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 995.104590][ T2049] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 995.111100][ T2049] blk_mq_run_work_fn+0x16c/0x300 [ 995.116656][ T2049] process_scheduled_works+0xc3d/0x1630 [ 995.122732][ T2049] worker_thread+0xa47/0xfb0 [ 995.127845][ T2049] kthread+0x38b/0x480 [ 995.132440][ T2049] ret_from_fork+0x514/0xb70 [ 995.137551][ T2049] ret_from_fork_asm+0x1a/0x30 [ 995.142853][ T2049] [ 995.142853][ T2049] other info that might help us debug this: [ 995.142853][ T2049] [ 995.153084][ T2049] Chain exists of: [ 995.153084][ T2049] &nsock->tx_lock --> set->srcu --> &cmd->lock [ 995.153084][ T2049] [ 995.165167][ T2049] Possible unsafe locking scenario: [ 995.165167][ T2049] [ 995.172615][ T2049] CPU0 CPU1 [ 995.177979][ T2049] ---- ---- [ 995.183368][ T2049] lock(&cmd->lock); [ 995.187354][ T2049] lock(set->srcu); [ 995.193772][ T2049] lock(&cmd->lock); [ 995.200276][ T2049] lock(&nsock->tx_lock); [ 995.204694][ T2049] [ 995.204694][ T2049] *** DEADLOCK *** [ 995.204694][ T2049] [ 995.212893][ T2049] locks held by kworker/1:1H/2049: 4, last CPU#1: [ 995.219373][ T2049] #0: ffff88801f6d7940 ((wq_completion)kblockd){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 995.230439][ T2049] #1: ffffc90006857c40 ((work_completion)(&(&hctx->run_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 995.243320][ T2049] #2: ffff888026ad4e18 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_work_fn+0x144/0x300 [ 995.252729][ T2049] #3: ffff8880272f0178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc1/0xff0 [ 995.261617][ T2049] [ 995.261617][ T2049] stack backtrace: [ 995.267508][ T2049] CPU: 1 UID: 0 PID: 2049 Comm: kworker/1:1H Not tainted syzkaller #0 PREEMPT(full) [ 995.276966][ T2049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 995.287023][ T2049] Workqueue: kblockd blk_mq_run_work_fn [ 995.292584][ T2049] Call Trace: [ 995.295858][ T2049] [ 995.298793][ T2049] dump_stack_lvl+0xe8/0x150 [ 995.303394][ T2049] print_circular_bug+0x2e2/0x300 [ 995.308432][ T2049] check_noncircular+0x12f/0x150 [ 995.313380][ T2049] __lock_acquire+0x15ff/0x2e50 [ 995.318241][ T2049] ? irqentry_exit+0x218/0x910 [ 995.323022][ T2049] ? __pfx___schedule+0x10/0x10 [ 995.327885][ T2049] ? irqentry_exit+0x218/0x910 [ 995.332664][ T2049] lock_acquire+0x115/0x350 [ 995.337179][ T2049] ? nbd_queue_rq+0x373/0xff0 [ 995.341873][ T2049] __mutex_lock+0x19d/0x1550 [ 995.346477][ T2049] ? nbd_queue_rq+0x373/0xff0 [ 995.351162][ T2049] ? ret_from_fork_asm+0x1a/0x30 [ 995.356113][ T2049] ? unwind_next_frame+0x8f/0x2550 [ 995.361259][ T2049] ? nbd_queue_rq+0x373/0xff0 [ 995.365941][ T2049] ? __pfx___mutex_lock+0x10/0x10 [ 995.370982][ T2049] ? ret_from_fork_asm+0x1a/0x30 [ 995.375938][ T2049] ? stack_trace_save+0xa9/0x100 [ 995.380887][ T2049] ? __pfx_stack_trace_save+0x10/0x10 [ 995.386276][ T2049] nbd_queue_rq+0x373/0xff0 [ 995.390795][ T2049] ? __lock_acquire+0x14b9/0x2e50 [ 995.395828][ T2049] ? __pfx_nbd_queue_rq+0x10/0x10 [ 995.400866][ T2049] blk_mq_dispatch_rq_list+0x499/0x1990 [ 995.406432][ T2049] ? sbitmap_get+0x229/0x390 [ 995.411166][ T2049] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 995.417158][ T2049] ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0 [ 995.422977][ T2049] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 995.429319][ T2049] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 995.436091][ T2049] ? lock_acquire+0x115/0x350 [ 995.440775][ T2049] ? process_scheduled_works+0x97a/0x1630 [ 995.446504][ T2049] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 995.452490][ T2049] ? blk_mq_run_work_fn+0x144/0x300 [ 995.457693][ T2049] blk_mq_run_work_fn+0x16c/0x300 [ 995.462721][ T2049] ? process_scheduled_works+0x97a/0x1630 [ 995.468452][ T2049] process_scheduled_works+0xc3d/0x1630 [ 995.474025][ T2049] ? __pfx_process_scheduled_works+0x10/0x10 [ 995.480023][ T2049] ? assign_work+0x3cf/0x5d0 [ 995.484627][ T2049] worker_thread+0xa47/0xfb0 [ 995.489237][ T2049] ? __kthread_parkme+0x71/0x1f0 [ 995.494187][ T2049] kthread+0x38b/0x480 [ 995.498262][ T2049] ? __pfx_worker_thread+0x10/0x10 [ 995.503372][ T2049] ? __pfx_kthread+0x10/0x10 [ 995.507965][ T2049] ret_from_fork+0x514/0xb70 [ 995.512558][ T2049] ? __pfx_ret_from_fork+0x10/0x10 [ 995.517680][ T2049] ? __switch_to+0xc89/0x1420 [ 995.522373][ T2049] ? __pfx_kthread+0x10/0x10 [ 995.526975][ T2049] ret_from_fork_asm+0x1a/0x30 [ 995.531758][ T2049] [ 995.610841][ T5634] block nbd0: Receive control failed (result -104) [ 995.629659][ T6972] netlink: 'syz.3.8785': attribute type 5 has an invalid length.