last executing test programs: 4.55694934s ago: executing program 3 (id=5644): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000980)={0x2, 0x3, 0x0, 0x3, 0x1df, 0x0, 0x70bd2c, 0x25dfdbff, [@sadb_key={0x3, 0x9, 0x80, 0x0, "1cdc0dca1d9f68846960e56de42944af"}, @sadb_address={0x5, 0x6, 0x3c, 0x0, 0x0, @in6={0xa, 0x4e24, 0x8, @mcast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc, 0xc0000000}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0x9, @empty, 0x6}}, @sadb_key={0x1ce, 0x8, 0x7328, 0x0, "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"}]}, 0xef8}, 0x1, 0x7}, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x80000001, '\x00', 0x0, 0x0}, 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004f40)={{0x14}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x4}]}}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}}, 0x0) close(r2) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0xb}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x4}, {0x7, 0x0, 0xa}, {0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x1d}, {0x18, 0x9, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xc, 0x9, 0x4}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) sendmsg$NFNL_MSG_CTHELPER_GET(r2, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, 0x1, 0x9, 0x801, 0x0, 0x0, {0x4, 0x0, 0xa}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x44}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x80000001}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24004000}, 0x4044800) close(0x3) 4.147384482s ago: executing program 4 (id=5648): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)="db", 0x1}], 0x1}, 0x41) recvmsg(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) sendmsg$inet(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="fc", 0x1}], 0x1}, 0x41) recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x2002) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000003000000000000000040000018420000fdffffff000000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000023cf00008500000006b3d1b0686d4cedb9890000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0xfffffffd, 0x6, 0x40, 0x5020, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x1, 0x4}, 0x50) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="05"], 0x10) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf090000000000004e090100000000009500000000000000b7020000000000007baaf8ff00000000b5090800000000107baaf0ff00000000bf8700000000000007070000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7050000080000004600000076000000bf98000000000000b5080000000000008500000007000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r5, &(0x7f0000000440), &(0x7f0000000040)=@udp=r4}, 0x20) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r9, &(0x7f0000000100)={@val={0x2000}, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0xfffe, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x300, 0x0, 0x28, 0x0, @gue={{0x2, 0x0, 0x0, 0x0, 0x0, @val=0xe0000001}, "ebc7a1e0ff5befe1fdbc66e400d7e83306de422b4a81099b"}}}}}}}, 0x4e) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r11, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000003c0)={0x3c, r12, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0x5b, 0x1, 0x0, 0x1, {0x8}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xfb2e77a8993c191b}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}]}, 0x3c}}, 0x20000040) setsockopt$sock_int(r4, 0x1, 0x20, &(0x7f0000000100)=0xfffffffe, 0x4) r13 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r14, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x38}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r14, {0xfff3, 0x8}, {}, {0x8, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x20, 0x2, [@TCA_CGROUP_EMATCHES={0x1c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xf417}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xc, 0x1, 0x0, 0x0, {{0x6f7, 0x9, 0x1}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x40010) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r2, &(0x7f0000000180)="197ff4db0c450f79d5cf39e9a3fb2f24e082074bbbd6911bac36d6365c59e7298416f417e3ac25ba5279a060438f794cc69e3e673b02df93b3399bfc1d64b5dfbb64a0", &(0x7f0000000200)=@udp6=r3, 0x1}, 0x20) 4.025333135s ago: executing program 3 (id=5650): r0 = socket$kcm(0x2, 0x3, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x41}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) sendmsg$inet(r0, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x12}, @multicast1}}}], 0x20}, 0x4008804) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x86, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x1, "56805c734ee222c29de4125f81f6e030a5441a99f362cd24e0a1ac2291500733", "467f517bd818d5a4a8d26ae61b4cbf13", {"31ffc21d2e9bfb1eb3c03976ed837b6f", "876605ac29dcb96a8901e0711afb3db3"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r2, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f0000000780)=[{0x0}, {&(0x7f00000001c0)=""/195, 0xc3}], 0x2}, 0x7}], 0x1, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f00000002c0)=@in6={0xa, 0x4e23, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x40}, 0x80, &(0x7f0000000180)=[{&(0x7f0000001040)="3282", 0x2}], 0x1}, 0x4008400) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x5, 0x110, 0xffffffffffffffff, 0xc8a66000) 2.703844266s ago: executing program 3 (id=5655): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xc, &(0x7f00000000c0)=0xffffffee, 0x4) pipe(&(0x7f0000000000)={0xffffffffffffffff}) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000140)=0x80, 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0xdc}, [@call={0x85, 0x0, 0x0, 0x28}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80001}}]}, &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', 0x0}) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x5c, r5, 0x1, 0x1, 0x25dfdc01, {}, [{{0x8, 0x1, r6}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}]}, 0x5c}, 0x1, 0x400000000000000}, 0x40810) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c00)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="247603e3373e261ad715b4932eaa", 0x0, 0x59, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.452873156s ago: executing program 4 (id=5659): r0 = socket$qrtr(0x2a, 0x2, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0xfeffffff, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001800efe000000000000000000a00000000000000000000000c00090008000000", @ANYRES32=0x0, @ANYBLOB="1400050000000000000000000000000000000002"], 0x3c}, 0x1, 0x11}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x3f00000000000000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="d66701001800000000000078386d22a554a0eebbe91908d6000c0000000c00000002000000000000b9cac81335a40ca85d7e7871f2f8372ada409be56b25e6d5d4d0b2f6cac1b6bc6510c566f65fd52f3f968e99d0d06284"], &(0x7f0000001f80)=""/226, 0x26, 0x81, 0x2}, 0x20) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000040)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000000640)={{r1}, r4, 0x14, @inherit={0x98, &(0x7f0000000240)={0x0, 0xa, 0x4, 0x8, {0x2, 0x9, 0x3, 0x3, 0x9}, [0x6, 0x4, 0xb0c1, 0xb3, 0x7, 0x3, 0xf9, 0x3, 0x10000, 0x5]}}, @name="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"}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, &(0x7f0000000600)={0x0, 'netdevsim0\x00', {}, 0x3}) 2.245518515s ago: executing program 3 (id=5663): r0 = socket(0x2, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x30, 0x2, 0x1, 0xfffff038}, {0x6, 0x3, 0x6, 0x6}]}, 0x10) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000cbd70100400000005000000080079163405977f52fe0c000000000008000b00000000000600010007000000"], 0x34}, 0x1, 0x0, 0x0, 0x40811}, 0x20) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x32) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r8) sendmsg$IEEE802154_LLSEC_SETPARAMS(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)={0x20, r9, 0x5, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x4000000) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100"], 0x3c}}, 0x0) write$6lowpan_control(r6, &(0x7f0000000040)='disconnect aa:aa:aa:aa:aa:10 1', 0x1e) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xe, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000480)=[{0x3, 0x4, 0xb, 0x5}, {0x1, 0x4, 0xb, 0x5}], 0x10, 0x3}, 0x94) r12 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) sendmsg$nl_route_sched(r12, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) r13 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b595000000000000000002000000", @ANYRES32=r13, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) r14 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r14, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="14010000200001030000000000000000010100800c0001000700000000000000f400a489160a1150bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d08000000", @ANYRES32=0x0, @ANYBLOB], 0x114}], 0x1}, 0xc044) sendmsg$nl_route(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r10}, @IFLA_ADDRESS={0xa}]}, 0x48}}, 0x0) 2.220790632s ago: executing program 4 (id=5664): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="4000000010003904000000000000000080040000", @ANYRES32, @ANYBLOB="019800000000000820"], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00v\x00\t\x00'/20, @ANYRES32=0x0, @ANYBLOB="04000d80080001"], 0x24}, 0x1, 0x5502000000000000}, 0x0) 2.029325567s ago: executing program 4 (id=5668): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r1, 0x0, 0x30, &(0x7f0000000000)="00f589e0be8c68984368c18cb1a51792f0fc64ebcd10f08d4ad201ca72131f9de2adbe7c0ee658d73b468667e360af95484d7e09b9003e882e6ca383ef0eebd756ead670a8c52522e1dd7db8c3f0fadc00bebec207ad4fd96f246e4b36eb12de3ea20b40ce6276f9bde3fbc5d76a7fa2ab4a3dcc8094b72e03ab63986cd5f23fda6c38e74f99470956e8072e21ef7bdb", 0x5000) (async) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) recvmsg(r2, 0x0, 0x0) (async) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f00000000c0)={0x92fd, {{0xa, 0x4e21, 0x1, @empty, 0x9c17}}, {{0xa, 0x4e23, 0x0, @empty, 0x409}}}, 0x108) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0xe, 0x2, 0x9}}]}, 0x38}}, 0x4000010) 1.768191091s ago: executing program 4 (id=5670): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt(0xffffffffffffffff, 0x107, 0x11, 0x0, 0x0) (async) setsockopt(0xffffffffffffffff, 0x107, 0x11, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4010040}, 0x4000) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000047c0)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="180000007a00010600000000fbdbdf2507"], 0x18}], 0x1, 0x0, 0x0, 0x4000050}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYRES64=r0, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRESOCT=r0, @ANYRESDEC=0x0, @ANYRES16=r0, @ANYRESHEX=r0, @ANYRES8=r0], 0xa0}, 0x1, 0x0, 0x0, 0x4c880}, 0x40080) r1 = socket(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELOBJ={0x28, 0x14, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x50}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) 1.724035628s ago: executing program 3 (id=5672): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x29, 0xa, 0x2, 0xfffffff9, 0x1, @mcast2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x700, 0x7aa9, 0x3f}}) sendmsg$DCCPDIAG_GETSOCK(r3, &(0x7f0000000d80)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10020002}, 0xc, &(0x7f0000000d40)={&(0x7f0000000880)={0x4b4, 0x13, 0x300, 0x70bd2c, 0x25dfdbfe, {0x1e, 0xf9, 0x6, 0xdd, {0x4e23, 0x4e23, [0x8, 0x9, 0x3, 0x6], [0x0, 0x6, 0x6], r4, [0x6, 0x81]}, 0xc4ae, 0x6d8}, [@INET_DIAG_REQ_BYTECODE={0xe1, 0x1, "8ec62287c45af72b2431a9dfb1a4562f72e26c2daa38b581daf138d90ed2b66c66395acafb2aa87d159d9bab1c3cc6acac26f3763b75cf29ef06bd7cbffd9995812ac0d2bfcc0a18e437db915a9ff4e36ca5f1a999f1888e7a5bef0464c9d3ec8eb7e44fb766b1a8b6ffa546c535d9a92ed1595a60822f5e5c5e922d2a83c42193352f5a02a76289674ed05543a1f3cbb8bf8731bddf03090eec2669d5b85efb5c1eb7e67d775382772f8ccc494f41d5fc2523d3d6e24c9057e5c82f21f8d399d1744e6cc7d3076ef2fa02e7eb1bef8109eae0bfb74abe77fda9ec79d0"}, @INET_DIAG_REQ_BYTECODE={0x15, 0x1, "bf5d04ee2ff58c6675c85c6f80d8be0c9f"}, @INET_DIAG_REQ_BYTECODE={0xd3, 0x1, "d179a96dbb5a7b3a1531cb44d551d82cac2c57016f3807db8609ff5a343a1d575f9478d3f595b6c7595dabd76ae1fe54759ee57bd1bad0c2ad784a848cd98fe8152c4dc7f9f1c9b9d94bcd21f84a15cd5b4739c6596433a83e2d94b06fccbc6004b26bc8522fb413523e3f11769b07ba47f61e2f89b7eec600218b35faf23d82b5bac9b49131a54465d682c8708180b6fc57699113bbdf5554f08c6a7ec27c4b7d1620584d1f821790627025e711b21a33fe2a925f05e3f0ffc7e39cf7cc1628a714453444f332327836dd8fcb469d"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "0142fa156e4937dc8f1e2a24304526a3224d7faead10af16cd0e1c5508df5a0229fa7dbc44ed5cb0787c7f7698371dd472f0051edd1542170406a272c81d2cc5b542461bd4304b8a9e4a5338c7d2cc8a1181519a74f1508eb90af96997f752d8b9c92b781d628ae374e5d681d50e2ade06d8f7d0ba2e804d9bde928ea7b87d0a5b9d46930e882addead69ac010de99a4e72b563003888bdb94fe6640b657c2f8c4112040fc77f592518c3f9356c8d59ceff14991fc4c34b30f90d92ed1f68f613d5799bba14b51f160873e32bc54022695e59f2813bd978362fa57ddd7b6"}, @INET_DIAG_REQ_BYTECODE={0xc4, 0x1, "2a53f8b3626da21f98c7fe7eeebcc83fb62e9545aecbbb6e6d4a1ede73c58c8dd8b80ded27a5304179354848723672541716acc143deee8068d239f25ce1d5b16c8d14b824ba34862ac13e555e47b1643abb41df28a8084cc0e778f2d19814d9f4bf62d26eeaced194c0f1c5972991b2e2a837ba7c994c3a24e3c14e94fc621152bfb0c78c63f7733a9daf8fae4ddbebd62250b9d9004b4b49317dabb7c5e496b8c8bfa4426bb00c381573d78596b3785e535d7bb61682c617114ed2abc3b160"}, @INET_DIAG_REQ_BYTECODE={0xef, 0x1, "5dfab88a4c57ae8c6a7eebd3e1d690a502dd78d29a8f6cb29ec1db80d90d43f7a5057c99f0802af731e588c3449c072ee3856c82ae675a3d24ccbcc42c633fc3ff0a49a00844efcd16b2003bca94bb1cb5983ec751b56db5bde9cbec2887823181763821db5083b82b620fa0298f6edea187aa0b490427c88b63e182946f3e8f5b04a0c01f5874737237219174256b3fee33b0bc2043394e477947d7b30df5504f1d91f52c6c2403104ab7838aa87083388155bb9ff208913f00fc1a84c7d8a7bd7d804b87e39c14aa0f2201d57ed5a8b8005294a0d88a2b0a1fd932d3c9365877e4826606f09bbde3c1ac"}]}, 0x4b4}, 0x1, 0x0, 0x0, 0x4}, 0x40420d0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xe, 0x11, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xb, 0x9, 0x0, 0x1, 0x81020000}, {0x65, 0x0, 0x0, 0xfaffff7f}}, [@map_fd={0x18, 0x3, 0x1, 0x0, r2}], {{0x7, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfc79, &(0x7f0000000140)=[{&(0x7f00000004c0)="d800000018009f064e81f744db4cb904021d0800fd02fe02e8fe50a10a001100250000000c600e41b0000900ac00200325000000a4000b000a00ff150048035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d31afe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffff5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a4500000000", 0xd8}], 0x1}, 0x0) 1.609527508s ago: executing program 4 (id=5674): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x101042, 0x0) ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, &(0x7f0000000240)={0x2, &(0x7f0000000000)=[{0x48, 0x3, 0x0, 0x66}, {0x6, 0x1, 0xfb, 0x2}]}) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, 0x0) unshare(0x6a040000) r2 = socket(0x8, 0x2, 0xfffffffe) getsockname$packet(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x18) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r5, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x492492492492775, 0x0) r6 = socket$nl_audit(0x10, 0x3, 0x9) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000a80), 0x8) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x4040) r9 = socket$l2tp(0x2, 0x2, 0x73) sendto(r9, 0x0, 0xffffffb0, 0xbf30ccbe47c3e0ec, &(0x7f00000000c0)=@ethernet={0x0, @multicast}, 0x80) sendmsg$unix(r5, &(0x7f0000000b80)={&(0x7f0000000140)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000a00)=[{&(0x7f0000000300)="4d3763ab1a01ed1f53e33a3d25e1451562ffba11faac83f0af64ab15f7dd67fc4052a2b4eff257a45f9c41bca5bcfc1b185da509d5b3df174d431a0472275d67dff2498e5c1950513807719229249d9dbaad92b197a0c8abab1e1aa2e9826baf8a18abb516d30d2205a2e81020fff4", 0x6f}, {&(0x7f0000000480)="f4b1fbc68db6c5814c9296cc004e850537a78c29c6112ec33611d9d8843eb24f12a8949c86a9c2c81f246022919dea79ce80901cf84da64c07b525ef9a07bfc9edc72f2dfd7f7752b8511ebf5438b23b680f5fbf", 0x54}, {&(0x7f0000000540)="e39952b0638b1083ff945d39cc204cfbc6d8d0c2fdd15121cc02f67d0944621031d387f596142028d3c9e684a3ec893e34342adc469cecb2df9d6309b2e350acc4f6af7126f589f2fa7a625b069902be2f620cf627495183a70ea032468b748098077a89e332d7dd0ba318c53b5d8d434ff1fee9b04d9f6a90c3518165ea00cc30299e4e90ce4d5198a1c11f6e28f91402a9ea2d94d2f2b87a602c989696123e40eb3fc63a80f054cb9b3925e46ae9be", 0xb0}, {&(0x7f00000006c0)="2aa0829c067bb4bdf9cbd187ca390eec39f2809e6a07103eb29a1c1d08e8a6257e45fc310d56b47831ab7bb594e514b25e9e3a1f8ad0506b9d", 0x39}, {&(0x7f00000007c0)="c98f7525f0424f3ee51a230a75420df31441fa64e695347736467e0a911c86b77b36e90c0d061b78e334bff35963b8aee05439fcac1be32f5fd59495fcbba0c2cb2aa2db9d14ea9d98059f73249103e732464f7ff074697cc3121232d6f1f370a990a4a3", 0x64}, {&(0x7f0000000840)="86c8f2f0c258a2636f50610f401f78bf98190cba1cb3da85bdc02142e8bd347187ee84d01d14f50e47e60ba420121f69377adefbbe26f8c7c59cc20c0fe02a665bcbbcf44cb38a40a0e490a0fa2d63c00cb8620969c4260236a389b71a51ea76e6b4ca4af4caf84cebda2dc6ffe6c166b953407ce52eae4b48d9a5b53a7abeb99c012862b715189f8ee9d394c5d95bbdc4e501fa960f471322f81b3c15a4a7f3362590d023f6b437196688bfd732e769988f68c231aaa888996895d902df7078664e135121235657e444bf86db0bf7b768184dc58345dbc8a3afac85629bfbabb27cb06e35561c29c8bbe02c4bc5caa9bd90507f", 0xf4}, {&(0x7f0000000940)="289af970863abfb6afe96d18ddae6bfbd55d5a6718a58720f4007faa1d9044f5a9df230e5bda11a642f8a60646ad9c51448dcefed4dc04db3d592d1402151a460264fc5f3d509cc7b34e4c2c3d9af945839715085f6f9b5794995b97913ce984f0b50659cc3790d99188136a0f9be1763e3274d80a82027a9411d5b59215812e47b3d58b1db1acc2015272446d0b8699eab0b1f13e47e48c0482fac5c391f68aa43ab922eb3247278c49e56dd27bd26804e7f67a1a7628ff4a3a8084fd", 0xbd}], 0x7, &(0x7f0000000d40)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r6, @ANYRES32=r3, @ANYRES32=r3, @ANYBLOB="30000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r3, @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=r3, @ANYRES32=r3, @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="1c00f8d5000000000100000001000000285b12fd1787865bb30b981ff5620ebc3af0c0c8041e9c07f0a393a97a117d539f930dbaa65995968f14d13ce2e25553fd4f68e53654ef3bdcb467233970e86be3ad690a1fdded1e4da076f34a27ea4d46a8308ac968a6312521c77dbf0dd34f59b7a39c66b33897892542ed161099e05feee594193ecaa64eece3ab20fd8d8c1928abce5ec2cc5aa7739ec85a09455d0bc4532bb56d2e9b778891246bb0798fa02d879d90256dc20c5ac5aed43d1a9e545640fb6fc75769f00d78f8f55dbbe8107f174535156d14e99d2a241a992dd1d75946fc8cb5f1dfdf862691cd8ccbb2249ae8", @ANYRES32=r4, @ANYRES32=r4, @ANYRES32=r3, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r9], 0x88, 0x4}, 0x8080) write(r0, &(0x7f0000000280)="73a39012", 0x4) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) 1.588423146s ago: executing program 1 (id=5675): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000bc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x300, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x230, 0x2e8, 0x2e8, 0x230, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0xf8, 0x120, 0x0, {0x0, 0x2000000000000}, [@common=@ipv6header={{0x28}, {0x8, 0x80, 0x1}}, @common=@unspec=@state={{0x28}, {0x1000}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x400, 0xa66, 0x2}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x8000000, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x360) (async) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5400000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e000100697036677265744170000000180002801400fdff200100000108001f0004000000"], 0x54}, 0x1, 0x0, 0x0, 0x20}, 0x0) 1.548280942s ago: executing program 3 (id=5676): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r3 = socket(0x8, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'gcm-aes-ce\x00'}, 0x58) ioctl$XFS_IOC_START_COMMIT(r2, 0x80585882, &(0x7f0000000080)) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYRESDEC=r0, @ANYRES16=r1, @ANYRES64=r0, @ANYRESHEX=r4, @ANYBLOB="fcbf50aaf2f7223193d6dd3822e4b8191d6092a902a9384ea4ddaa8771aa3f9d33"], 0x0, 0x26, 0x0, 0x3}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x0, 0x0, 0x0, 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r5}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x3}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x90}, 0x40c0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 1.373788315s ago: executing program 0 (id=5677): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) unshare(0x400) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x20008888) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r4 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r6) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x30, r7, 0x1, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_LINKMODES_OURS={0x10, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x8, 0x3, 0x0, 0x1, [{0x4}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x2004c454}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[], 0x10448) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) (async) ioctl$TUNSETVNETLE(r3, 0x400454dc, &(0x7f0000000100)) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_pid(r8, &(0x7f00000004c0), 0x12) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) (async) ioctl(r8, 0x2, &(0x7f00000003c0)="f0f7d10ac49cc354ba570fa45abace87a043786784ce6fb78d26183903ed4dec865a0741c08643c3cc177f8370525382f3f09863a6b408707d0418ea58950082a5549cc45e01f3d5c7f6a8c8625d3bcc562c6e684422d57543acb8c9fc4c") ioctl$PPPIOCSDEBUG(r8, 0x40047440, &(0x7f0000000080)=0xfef) syz_emit_ethernet(0x7e, &(0x7f0000000000)={@broadcast, @random="6c7621d7cc94", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x48, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "98a350", 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2}, @private1, [@hopopts={0x11}], "fafb17c103001c193eb46558f48ce6b9"}}}}}}}, 0x0) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="0a0000f9babbbbbbbbbbffffffffffff58"], 0x12) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r2}, 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff41, 0x0, 0x0, 0x0, 0x200008}, [@generic={0x91, 0x1, 0x1, 0x22}]}, &(0x7f0000000780)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ff9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x96, 0xfffffffffffffff0}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) 1.179844821s ago: executing program 2 (id=5678): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x844}, 0x0) connect$netlink(r0, &(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbfa, 0x20000000}, 0xc) 1.148532191s ago: executing program 0 (id=5679): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'syztnl2\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x1, 0x700, 0x7, 0x307, {{0x25, 0x4, 0x1, 0x2f, 0x94, 0x67, 0x0, 0x2, 0x2f, 0x0, @broadcast, @empty, {[@cipso={0x86, 0x2f, 0xffffffffffffffff, [{0x5, 0x12, "dd9c73a31d5a9f39ad747963850d608a"}, {0x7, 0x5, '@4{'}, {0x1, 0x3, '$'}, {0x4, 0xf, "9c0b10157933b7781e8eefe6db"}]}, @timestamp_prespec={0x44, 0x24, 0xeb, 0x3, 0xb, [{@multicast2, 0x7}, {@local, 0x2}, {@empty, 0x9}, {@loopback, 0xffff0001}]}, @generic={0x86, 0x6, "77a635db"}, @noop, @ra={0x94, 0x4}, @cipso={0x86, 0x1f, 0x0, [{0x6, 0x4, "f025"}, {0x6, 0xa, "2d64f39e073faf2e"}, {0x1, 0xb, "77d3e5abf737506633"}]}]}}}}}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0x403, 0xfffffffa, 0x3f, {0x0, 0x0, 0x0, 0x0, 0x88adfda5, 0x1}, [@IFLA_CARRIER={0x5, 0x21, 0x77}, @IFLA_ADDRESS={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}, 0x34}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x20044000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@deltaction={0x14, 0x31, 0x8, 0x70bd26, 0x25dfdbfb}, 0x14}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000007000010010ab4be68e8da23507000000", @ANYRES32=r3, @ANYBLOB="10000180", @ANYRES8], 0x28}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf6a, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0xce}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6b, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) 1.148007169s ago: executing program 1 (id=5680): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0xfffffffffffffd62) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x8, &(0x7f0000000100)=@framed={{0x18, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @exit={0x95, 0x0, 0x7b00}, @call={0x85, 0x0, 0x0, 0x13}]}, &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x41000}, 0x94) 1.133654961s ago: executing program 2 (id=5681): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000240)={@loopback={0x0, 0x7ffffffff000}, 0x800, 0x0, 0xff, 0x9, 0xb, 0x5}, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x14, 0x1, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x8d4}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004260000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r5 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r5, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0xfe80, @empty}, 0x71, &(0x7f0000001080)=[{&(0x7f0000001980)="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", 0x1004}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_tos_u8={{0x12, 0x29, 0x34}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0xff00) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x14, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000100900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001800010000000000000000000200000000000006000000000c00090008000000", @ANYRES32, @ANYBLOB="08000400", @ANYRES32, @ANYBLOB="080005"], 0x38}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a38000000030a03000000000000000000020000000900010073797a300000000009000300000000006d0697540c000240000000000000000114000000110001"], 0x60}}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/1664], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffe}, 0x48) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r8], 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r9, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x4c, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000011}, 0x80) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@getspdinfo={0x14, 0x25, 0x8, 0x70bd28, 0x25dfdbfb, 0x9, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x240000c5) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r10}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r10}, 0x4) ioctl$XFS_IOC_EXCHANGE_RANGE(r7, 0x40285881, &(0x7f0000000480)={r10, 0x0, 0x40, 0x5b2, 0x5, 0xf}) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="010029bd7000ffff03000000000000000200", @ANYRES32=0x0, @ANYBLOB="0a0001007770616e30000000"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x40000) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) 1.037812322s ago: executing program 0 (id=5682): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newlink={0xfffffffffffffcd1, 0x10, 0x401, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x66f31}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8010}, 0x2048800) 1.005672111s ago: executing program 1 (id=5683): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x2000002, 0x3a, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (fail_nth: 5) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x20, 0x25, 0x301, 0x670bd24, 0x25dfdffb, {0x20}, [@typed={0x9, 0x15e, 0x0, 0x0, @binary="dacf8d9496"}]}, 0x20}, 0x1, 0x0, 0x0, 0x40008840}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r4, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0xfffff000) mmap(&(0x7f00008b7000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r3, 0x0) mmap(&(0x7f0000071000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000040)) 977.705222ms ago: executing program 0 (id=5684): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'macvlan0\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYRESDEC=r0], 0x3c}}, 0x8080) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe8e, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff96, 0x1000d0, 0x8, 0x34, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x4, &(0x7f0000000300)=ANY=[@ANYRES32=0x0], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000003c0), r3) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000540), 0x23) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r4, 0x0, 0x18, &(0x7f0000000000)=0xffffff7e, 0x50) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0xfffffffffffffef0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x20, 0x0, 0x0, 0x0, 0x802, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @netfilter, r5}, 0x94) r6 = socket$inet6(0xa, 0x5, 0x1) getsockopt$inet6_opts(r6, 0x29, 0x37, &(0x7f0000000800)=""/210, &(0x7f0000000200)=0x4a) getsockopt$IP_SET_OP_GET_BYNAME(r5, 0x1, 0x53, &(0x7f0000000300)={0x6, 0x7, 'syz2\x00'}, &(0x7f0000000340)=0x28) ioctl$XFS_IOC_DIOINFO(r0, 0x800c581e, &(0x7f0000000400)) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4) r8 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(r8, 0x1, 0x2c, &(0x7f0000000600)=0x9, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}], 0x10) listen(r8, 0x7) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xf}}], 0xffffffffffffff80) listen(r7, 0x7) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) 889.744164ms ago: executing program 2 (id=5685): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10) listen(r1, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x4) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000000300)={0x0, 0xb7, 0xfff, 0x93ee38bdb6745a23}) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x5000943a, &(0x7f0000000700)={{r1}, 0x0, 0xa, @inherit={0x70, &(0x7f0000000100)={0x1, 0x5, 0x0, 0x2, {0x0, 0xc, 0x7, 0x0, 0xc214}, [0x4, 0xfffffffffffffffc, 0x8, 0x5, 0x95ab]}}, @devid=r3}) close(r2) accept4(r1, &(0x7f0000000280)=@xdp, &(0x7f00000000c0)=0x80, 0x80800) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x14, 0x14, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) 629.38811ms ago: executing program 2 (id=5686): r0 = socket$kcm(0x1e, 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x65, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'gretap0\x00', 0x0}) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000140)={r0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 521.17731ms ago: executing program 1 (id=5687): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x3d, 0x800000, 0x8, 0x7, 0x2, 0x81}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000002000000000000008000000911152000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x6) socket$inet(0x2, 0xa, 0x3) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r1, 0x0, 0x22, 0x0, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000400)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}, @remote, @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa210104, @local, {[@generic={0x7, 0xc, "064d291a00000000d05c"}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0x2000}}}}}}, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000000040)=0x1) 424.770136ms ago: executing program 1 (id=5688): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r4 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f00000003c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, 0x1402, 0x400, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) (async) connect$can_bcm(r4, &(0x7f00000000c0), 0x10) (async) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES16=r4], 0x448}}, 0x0) sendmsg$can_bcm(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="050000000808"], 0x80}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000640)={'team0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000540)="3e0c1a7c209d58ad962e2a1f42afab143e5ad7f96088cabc512c9c999f78c33586342a49018be6b0349ce522fff5a7086bec1033247eddcc901bfc2807aef9885fe1494d2aa73b1a55b510797b82b2a1c41c321a6cccad5c5015a4f14248164a31bb8b1a5bc822307a5bd926cba7d1ee36d3ca8cd61bbeb0e1a033560c00d46f3d6d221fc6bc10521684092eaeb546d9a85714d2e168c84452f0f7ffda87d4cec8411d9ba341ceeaee03f0d736a667eb04590dafe0f5c08798d17baa5f16dc06578a3904b60f39dbeaf805a4e26e7411ff52fc46d71b342af4cde4d303a213c5", 0xe0, 0x840, &(0x7f00000006c0)={0x11, 0x15, r5, 0x1, 0x5, 0x6, @multicast}, 0x14) sendmmsg$inet(r4, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100), 0x2}}], 0x40000000000003a, 0x0) (async) close(r1) (async) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000700000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014002000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000085000000d0000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000700), r1) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000740)={'wg2\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000780)={'team0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r1, &(0x7f0000000bc0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10910000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000a40)={0x12c, r8, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x44, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x2c}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010101}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}, @MPTCP_PM_ATTR_ADDR={0x44, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010100}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x25}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xb}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r10}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010100}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x8004}, 0x80) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) sendfile(r1, r0, 0x0, 0xf03a0005) 350.430333ms ago: executing program 1 (id=5689): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000058000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000409500000000000000b7020000000000007b9af8ff00000000b5090000010000007baaf0ff00000000bf2700000000000007080000fffdffffbfa400000000000007040000f0ffffff740200000800000018090000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000007ea000000000000056080000000000008500000081000000b70000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x14, r3, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x4e24, @private=0xa010100}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x19}}, {0x2, 0x4e22, @local}, 0x83, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040)='syzkaller0\x00', 0x9, 0x9, 0x4}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x800) setsockopt$sock_int(r6, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x3}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000640)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(anubis)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r8 = accept4(r7, 0x0, 0x0, 0x800) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r10, r9, 0x2f, 0x0, 0x0, @void, @value=r10}, 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=r9, @ANYRES32=r9, @ANYBLOB="2f0000001400000004"], 0x20) sendmsg$OSF_MSG_ADD(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x175c}, 0x1, 0x0, 0x0, 0x4044084}, 0x1dc8b08251aa3334) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_lsm={0x4, 0x4, &(0x7f0000000040)=ANY=[@ANYRES16=r8], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4048014) socket$nl_xfrm(0x10, 0x3, 0x6) 287.420661ms ago: executing program 0 (id=5690): r0 = socket$vsock_stream(0x28, 0x1, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x48) (async) unshare(0x60600) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) r5 = socket(0x1, 0x2, 0x0) setsockopt$sock_timeval(r5, 0x1, 0x14, &(0x7f0000000080)={0x0, 0x2710}, 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000300)=@buf="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"}, 0xffffff7a) (async) recvmmsg(r5, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000005c0)=""/5, 0x5}], 0x1}}], 0x2, 0x0, 0x0) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r6 = socket$unix(0x1, 0x2, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56441, 0x70b925, 0x80000, {0x0, 0x0, 0x0, r8, {}, {0x2, 0xb}, {0x9, 0xfff1}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c061}, 0x0) (async) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (async) syz_emit_ethernet(0x7e, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0) (async) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) (async) listen(r0, 0x0) (async) socket$vsock_stream(0x28, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x4, &(0x7f0000001080)=ANY=[@ANYBLOB="180000000000000000000000feffffdb971be2d95cd24692ff85000000790000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 185.608501ms ago: executing program 2 (id=5691): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x55}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273fa7b49301641184a9"], 0xfdef) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000140)={@val={0x0, 0x8100}, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x4000, 0xe000, 0x6, 0x2f, 0x0, @private=0xa010101, @empty}, {0x4e22, 0x880b, 0x64, 0x0, @wg=@response={0x2, 0x4, 0x0, "b7d2879fed3b856162da9ec434fdaab5c494f1c4e726f95dabb36763d5c353f8", "1000273f716ae909ce00", {"e6b31614bcd2f09095e8a23c966d40fe", "3b0a52f8e75b268188a04a46eb84ebc4"}}}}}}}}, 0x8a) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000780)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000040)={0x0, 0x4, 0x1, [0xe503]}, &(0x7f0000000080)=0xa) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000000c0)={r5, @in6={{0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x4}}}, &(0x7f0000000180)=0x84) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000200), 0x3) 124.278408ms ago: executing program 2 (id=5692): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000280)=ANY=[], 0x10448) (async) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="8c000000", @ANYRES16=0x0, @ANYBLOB="0002290800030006000000080002000100000008000300000000000800040099740000080004000e0000000800020006000000050005008000000004000680080003000600000034000680060001000200000008"], 0x8c}, 0x1, 0x0, 0x0, 0x4000014}, 0x80) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async, rerun: 64) r3 = socket$kcm(0x2, 0xa, 0x2) (rerun: 64) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) (async) writev(r2, &(0x7f00000006c0)=[{&(0x7f0000000080)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9001c2f8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x23}, {&(0x7f0000000100)="051a00000e80006558", 0x2c}], 0x2) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async) getsockopt$IP_SET_OP_GET_BYINDEX(r0, 0x1, 0x53, 0x0, &(0x7f00000002c0)) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1, 0x4, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x40000}, [@call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) (async) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000080)=r4, 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r5}, 0x8) (async) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000af0200000000ee000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2688f54c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 0s ago: executing program 0 (id=5693): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000080), &(0x7f0000000100)=0x4) r1 = socket(0x11, 0x803, 0xfffffff0) unshare(0x2c020400) bind$netlink(r1, 0x0, 0x0) r2 = socket(0x10, 0x2, 0x0) close(0x3) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa687}, 0x94) r4 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r6, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[@cred={{0x1c, 0x1, 0x2, {r4, 0x0, 0xee01}}}], 0x20}, 0x40000) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000000200)=ANY=[@ANYRESHEX=r3], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r9 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r10, 0x0, 0x22, 0x0, &(0x7f00000008c0)="f6f4e9a1000000000000000d0800c32a8bc678bbd404fcd535fdc8a75167efec52a9", 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000700)="0102", 0x0}, 0x50) connect$x25(r9, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000440)=ANY=[@ANYRESDEC=r5, @ANYRES32=r8, @ANYBLOB='/\x00'/12, @ANYRES32, @ANYBLOB="9ccc37e41240ee1b2e2e24d28279b7876b447c492f57db20439da2872e6d77c04c2e6afbda5102c7eebfb6c7f685b6e1adc50cc805", @ANYRES64=0x0], 0x20) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) sendmsg$NBD_CMD_CONNECT(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[], 0x6c}}, 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000140)=ANY=[@ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="2f0000001000000004"], 0x20) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x20001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) kernel console output (not intermixed with test programs): ulticast mode [ 609.348586][T22486] geneve0: entered allmulticast mode [ 609.368919][T22486] vlan2: entered promiscuous mode [ 609.388764][T22486] geneve0: entered promiscuous mode [ 609.691757][T22507] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4202'. [ 609.792515][T22506] bond6 (unregistering): Released all slaves [ 610.058167][T22514] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4204'. [ 610.304311][T22533] netlink: 324 bytes leftover after parsing attributes in process `syz.1.4208'. [ 610.405078][T22535] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4209'. [ 610.405571][T22536] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4209'. [ 610.581676][T22542] netlink: 'syz.4.4211': attribute type 13 has an invalid length. [ 610.683007][ T5774] IPVS: starting estimator thread 0... [ 610.776576][T22544] IPVS: using max 36 ests per chain, 86400 per kthread [ 612.456147][T22641] ip6gre1: entered promiscuous mode [ 612.474419][T22641] ip6gre1: entered allmulticast mode [ 612.485353][T22638] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 612.512777][T22642] vlan3: entered promiscuous mode [ 612.530713][T22642] gretap0: entered promiscuous mode [ 612.556016][T22642] vlan3: entered allmulticast mode [ 612.574576][T22642] gretap0: entered allmulticast mode [ 612.608573][ T6377] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 612.617337][ T6377] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 612.639807][ T7192] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 612.896647][ T7722] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 613.001706][T22662] tipc: Enabled bearer , priority 10 [ 613.678321][ T7722] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 613.723915][T22681] xt_hashlimit: overflow, try lower: 6/0 [ 613.739538][T22681] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4239'. [ 613.926599][T22691] bridge0: entered allmulticast mode [ 613.985523][T22685] lo speed is unknown, defaulting to 1000 [ 614.097064][T22696] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4246'. [ 614.234058][T22696] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4246'. [ 614.278782][T22703] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4244'. [ 614.909250][T22715] lo speed is unknown, defaulting to 1000 [ 616.557020][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 617.599544][T22727] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 617.869849][T22768] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4262'. [ 617.919522][T22768] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4262'. [ 617.975762][T22775] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4265'. [ 617.988064][T22771] bridge5: entered allmulticast mode [ 618.186552][T22782] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4267'. [ 618.199608][T22784] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4268'. [ 618.321925][T22788] smc: net device wlan0 applied user defined pnetid SYZ0 [ 618.597919][T22796] only policy match revision 0 supported [ 618.597946][T22796] unable to load match [ 618.713807][T22796] bond4 (unregistering): Released all slaves [ 618.747595][T22794] lo: Caught tx_queue_len zero misconfig [ 618.786972][T22799] block nbd1: server does not support multiple connections per device. [ 618.799562][T22799] block nbd1: shutting down sockets [ 618.807109][T22801] syzkaller0: entered promiscuous mode [ 618.812965][T22801] syzkaller0: entered allmulticast mode [ 618.905787][T22808] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4273'. [ 618.924524][T22801] TC_ACT_REPEAT abuse ? [ 619.238997][T22818] syzkaller0: entered promiscuous mode [ 619.245004][T22818] syzkaller0: entered allmulticast mode [ 619.650184][T22841] debugfs: '1^!Y [ 619.650184][T22841] 3UH5rBn\' already exists in 'ieee80211' [ 619.690545][T22843] hsr0: entered promiscuous mode [ 619.757159][T22843] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4283'. [ 619.783797][T22843] hsr_slave_0: left promiscuous mode [ 619.798567][T22843] hsr_slave_1: left promiscuous mode [ 619.819218][T22843] hsr0 (unregistering): left promiscuous mode [ 620.182607][T22859] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4285'. [ 620.280650][T22866] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4288'. [ 620.314534][T22861] Cannot find del_set index 14804 as target [ 620.611371][T22882] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4293'. [ 620.672150][T22887] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4295'. [ 620.749816][T22890] syzkaller0: entered promiscuous mode [ 620.750082][T22892] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4298'. [ 620.755945][T22890] syzkaller0: entered allmulticast mode [ 620.826016][T22896] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4299'. [ 620.835490][T22896] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4299'. [ 620.852415][T22896] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4299'. [ 621.091484][T22907] ip6t_srh: unknown srh match flags 4000 [ 621.521130][T22924] syzkaller0: entered promiscuous mode [ 621.528332][T22924] syzkaller0: entered allmulticast mode [ 621.573312][T22934] netlink: 'syz.2.4310': attribute type 21 has an invalid length. [ 621.668091][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 621.830402][T22945] netlink: 'syz.1.4313': attribute type 1 has an invalid length. [ 624.876520][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 625.921193][T22965] netlink: 'syz.2.4318': attribute type 33 has an invalid length. [ 625.932621][T22965] __nla_validate_parse: 4 callbacks suppressed [ 625.932642][T22965] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4318'. [ 625.963579][T22965] `: renamed from team0 [ 626.172089][T22981] x_tables: ip6_tables: eui64 match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT/FORWARD [ 626.179004][T22983] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4323'. [ 626.376991][T22998] xt_cgroup: invalid path, errno=-2 [ 626.427932][T22998] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4327'. [ 626.495179][T23007] netlink: 6024 bytes leftover after parsing attributes in process `syz.4.4330'. [ 626.674515][T23016] netlink: 256 bytes leftover after parsing attributes in process `syz.0.4333'. [ 626.697837][T23016] netlink: 256 bytes leftover after parsing attributes in process `syz.0.4333'. [ 626.840224][T23031] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4340'. [ 626.985454][T23044] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 626.995200][T23046] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 627.010381][T23042] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4341'. [ 627.312841][T23073] netlink: 236 bytes leftover after parsing attributes in process `syz.2.4349'. [ 627.349281][T23073] netlink: 236 bytes leftover after parsing attributes in process `syz.2.4349'. [ 627.608352][T23092] team0: Port device team_slave_0 removed [ 627.660019][T23100] netlink: 'syz.0.4357': attribute type 12 has an invalid length. [ 627.669448][T23100] netlink: 'syz.0.4357': attribute type 29 has an invalid length. [ 627.720774][T23105] netlink: 'syz.0.4358': attribute type 12 has an invalid length. [ 627.729465][T23105] netlink: 'syz.0.4358': attribute type 29 has an invalid length. [ 627.832297][T23047] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 627.848009][T23086] netlink: 'syz.4.4352': attribute type 1 has an invalid length. [ 627.857742][T23086] netlink: 'syz.4.4352': attribute type 1 has an invalid length. [ 627.911255][T23101] 8021q: adding VLAN 0 to HW filter on device ` [ 627.984371][T23101] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 628.052105][T16834] bridge0: port 1(bridge_slave_0) entered blocking state [ 628.059814][T16834] bridge0: port 1(bridge_slave_0) entered forwarding state [ 628.112037][T23120] syzkaller1: entered promiscuous mode [ 628.116892][T23115] netlink: 'syz.3.4360': attribute type 1 has an invalid length. [ 628.136334][T23120] syzkaller1: entered allmulticast mode [ 628.205677][T23115] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 628.451873][T23132] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 628.470815][T23132] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 628.482621][T23132] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 629.551335][T23200] netlink: 'syz.3.4383': attribute type 10 has an invalid length. [ 629.571799][T23200] veth1_virt_wifi: entered allmulticast mode [ 629.613647][T23194] mac80211_hwsim hwsim68 wlan0: entered promiscuous mode [ 629.626691][T23194] mac80211_hwsim hwsim68 wlan0: entered allmulticast mode [ 629.645154][T23194] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 630.886747][T23238] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input13 [ 631.165167][T23265] __nla_validate_parse: 21 callbacks suppressed [ 631.165188][T23265] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4397'. [ 631.229536][T23268] IPVS: set_ctl: invalid protocol: 12 172.30.1.1:20002 [ 631.310973][T23273] netlink: 'syz.0.4399': attribute type 12 has an invalid length. [ 631.319458][T23273] netlink: 'syz.0.4399': attribute type 29 has an invalid length. [ 631.328129][T23273] netlink: 148 bytes leftover after parsing attributes in process `syz.0.4399'. [ 631.433115][ T5637] Bluetooth: hci4: command 0x0406 tx timeout [ 631.475199][T23278] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4401'. [ 633.415216][T23230] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 633.647090][T23282] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4403'. [ 634.036700][T23303] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4409'. [ 634.046825][T23303] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4409'. [ 634.060880][T23303] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4409'. [ 634.074560][T23303] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4409'. [ 634.085686][T23303] netlink: 'syz.0.4409': attribute type 6 has an invalid length. [ 634.379119][T23328] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4417'. [ 634.413500][T23325] bond4: option miimon: invalid value (18446744073709551607) [ 634.421964][T23325] bond4: option miimon: allowed values 0 - 2147483647 [ 634.434785][T23325] bond4 (unregistering): Released all slaves [ 634.453219][T23328] openvswitch: netlink: Key type 302 is out of range max 32 [ 634.761186][T23352] xt_connbytes: Forcing CT accounting to be enabled [ 634.783463][T23352] xt_CT: You must specify a L4 protocol and not use inversions on it [ 634.806206][T23353] sch_tbf: burst 0 is lower than device ip6tnl0 mtu (1452) ! [ 634.917736][T23351] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4421'. [ 636.208693][T23412] lo speed is unknown, defaulting to 1000 [ 636.300735][T23419] netlink: 'syz.1.4444': attribute type 8 has an invalid length. [ 636.332096][T23419] syzkaller0: entered promiscuous mode [ 636.348134][T23419] syzkaller0: entered allmulticast mode [ 637.157284][T23457] sctp: [Deprecated]: syz.1.4455 (pid 23457) Use of int in max_burst socket option. [ 637.157284][T23457] Use struct sctp_assoc_value instead [ 637.264258][T23453] xt_CT: You must specify a L4 protocol and not use inversions on it [ 637.385792][T23470] __nla_validate_parse: 5 callbacks suppressed [ 637.385864][T23470] netlink: 192 bytes leftover after parsing attributes in process `syz.3.4459'. [ 637.392433][T23471] netlink: 192 bytes leftover after parsing attributes in process `syz.3.4459'. [ 637.392459][T23471] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4459'. [ 637.427094][T23470] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4459'. [ 637.509971][T23474] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4461'. [ 637.543064][T23474] syzkaller0: entered promiscuous mode [ 637.561864][T23474] syzkaller0: entered allmulticast mode [ 637.769833][T23484] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4464'. [ 638.013696][T23502] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 638.021729][T23502] IPv6: NLM_F_CREATE should be set when creating new route [ 638.041178][T23502] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4470'. [ 638.248453][T23511] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4472'. [ 638.362699][T23511] lo speed is unknown, defaulting to 1000 [ 638.383853][T23519] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 638.435264][T23521] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4476'. [ 638.489061][T23523] IPv6: Can't replace route, no match found [ 638.622931][T23525] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 638.641806][T23525] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 638.661417][T23525] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 638.697551][T23525] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 639.083492][ T13] smbdirect: ib_dev[syz2] removed [ 639.297579][T23548] team0: Device vlan2 is already an upper device of the team interface [ 639.387793][T23552] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4485'. [ 639.552186][T23562] tipc: Enabled bearer , priority 0 [ 639.600539][T23562] syzkaller0: entered promiscuous mode [ 639.621951][T23562] syzkaller0: entered allmulticast mode [ 639.670503][T23562] tipc: Resetting bearer [ 639.775933][T23558] tipc: Resetting bearer [ 639.853393][T23558] tipc: Disabling bearer [ 639.879042][T23570] syz_tun: entered allmulticast mode [ 639.885197][T23576] syz_tun: left allmulticast mode [ 640.085100][T23590] netlink: 'syz.0.4494': attribute type 1 has an invalid length. [ 640.110544][T23588] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 640.145380][T23588] netlink: 'syz.4.4493': attribute type 1 has an invalid length. [ 640.201744][T23595] SET target dimension over the limit! [ 640.236552][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 640.251274][T23590] bond5: entered promiscuous mode [ 640.269336][T23590] 8021q: adding VLAN 0 to HW filter on device bond5 [ 640.402934][T23590] syzkaller0: entered promiscuous mode [ 640.416896][T23590] syzkaller0: entered allmulticast mode [ 640.447373][T23593] tipc: Enabled bearer , priority 0 [ 640.455880][T23590] xt_hashlimit: max too large, truncated to 1048576 [ 640.477275][T23587] tipc: Resetting bearer [ 640.545526][T23587] tipc: Disabling bearer [ 641.041004][T23638] tc_dump_action: action bad kind [ 641.314274][T23651] netlink: 'syz.3.4507': attribute type 27 has an invalid length. [ 641.341202][ T30] audit: type=1107 audit(1779465010.676:33): pid=23650 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 641.408104][T23647] lo speed is unknown, defaulting to 1000 [ 641.565684][ T5634] Bluetooth: hci3: link tx timeout [ 641.578497][ T5634] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 641.592906][ T5637] Bluetooth: hci3: link tx timeout [ 641.598386][ T5637] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 641.608685][ T5637] Bluetooth: hci3: link tx timeout [ 641.615721][ T5637] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 641.624506][T23651] xt_hashlimit: max too large, truncated to 1048576 [ 642.089470][ T5637] Bluetooth: hci3: link tx timeout [ 642.094861][ T5637] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 642.630130][T23700] __nla_validate_parse: 1 callbacks suppressed [ 642.630150][T23700] netlink: 220 bytes leftover after parsing attributes in process `syz.4.4519'. [ 642.657684][T23700] netlink: 220 bytes leftover after parsing attributes in process `syz.4.4519'. [ 642.683090][T23700] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4519'. [ 642.754660][T23699] syzkaller0: entered promiscuous mode [ 642.816757][T23699] syzkaller0: entered allmulticast mode [ 642.856537][T23707] netlink: 388 bytes leftover after parsing attributes in process `syz.3.4521'. [ 643.064456][T23719] netlink: 'syz.4.4525': attribute type 2 has an invalid length. [ 643.140230][ T5637] Bluetooth: hci3: link tx timeout [ 643.145533][ T5637] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 643.668302][ T5637] Bluetooth: hci3: command 0x0405 tx timeout [ 647.443180][T23737] netlink: 'syz.1.4529': attribute type 1 has an invalid length. [ 647.574302][T23737] bond5: (slave geneve2): making interface the new active one [ 647.611702][T23745] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4529'. [ 647.655026][T23737] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 647.772433][T23758] --map-set only usable from mangle table [ 648.028213][T23771] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4539'. [ 648.149441][T23778] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4543'. [ 648.200237][T23777] netlink: 'syz.1.4542': attribute type 4 has an invalid length. [ 648.223075][T23777] netlink: 17 bytes leftover after parsing attributes in process `syz.1.4542'. [ 648.429586][T23789] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4545'. [ 648.597865][T23797] netlink: 'syz.3.4548': attribute type 1 has an invalid length. [ 648.645786][T23799] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4549'. [ 648.753634][T23797] bond2: entered promiscuous mode [ 648.762094][T23797] 8021q: adding VLAN 0 to HW filter on device bond2 [ 649.272294][T23815] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4554'. [ 649.367814][T23816] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4554'. [ 649.425163][T23816] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4554'. [ 649.450564][T23816] netlink: 'syz.3.4554': attribute type 2 has an invalid length. [ 649.475029][T23816] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4554'. [ 649.635452][T23827] netlink: 212336 bytes leftover after parsing attributes in process `syz.1.4558'. [ 649.647927][T23829] syzkaller0: entered promiscuous mode [ 649.658193][T23829] syzkaller0: entered allmulticast mode [ 649.667630][T23827] openvswitch: netlink: Missing key (keys=40, expected=100) [ 649.705484][T23831] netlink: 'syz.0.4559': attribute type 10 has an invalid length. [ 649.742907][T23831] team0 (unregistering): Port device team_slave_0 removed [ 649.768268][T23831] team0 (unregistering): Port device team_slave_1 removed [ 649.785539][T23831] team0 (unregistering): Port device geneve1 removed [ 649.808590][T23829] wg2: Caught tx_queue_len zero misconfig [ 649.890342][T23840] syzkaller1: entered promiscuous mode [ 649.896804][T23840] syzkaller1: entered allmulticast mode [ 650.109188][T23848] xt_CT: You must specify a L4 protocol and not use inversions on it [ 650.254971][T23856] openvswitch: netlink: Multiple metadata blocks provided [ 650.479139][T23871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 650.492296][T23871] 8021q: adding VLAN 0 to HW filter on device team0 [ 650.508347][T23871] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 650.607166][T23871] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 650.633079][T23871] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 650.674977][T23871] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 650.699669][T23871] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 650.731466][T23871] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 650.814587][T23625] bridge0: port 1(bridge_slave_0) entered blocking state [ 650.821936][T23625] bridge0: port 1(bridge_slave_0) entered forwarding state [ 650.893048][T23625] bridge0: port 2(bridge_slave_1) entered blocking state [ 650.900406][T23625] bridge0: port 2(bridge_slave_1) entered forwarding state [ 651.264307][T23886] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 651.501407][T23925] syzkaller1: entered promiscuous mode [ 651.522002][T23925] syzkaller1: entered allmulticast mode [ 651.997100][T23939] FAULT_INJECTION: forcing a failure. [ 651.997100][T23939] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 652.031319][T23939] CPU: 1 UID: 0 PID: 23939 Comm: syz.4.4588 Not tainted syzkaller #0 PREEMPT(full) [ 652.031347][T23939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 652.031361][T23939] Call Trace: [ 652.031369][T23939] [ 652.031378][T23939] dump_stack_lvl+0xe8/0x150 [ 652.031407][T23939] should_fail_ex+0x412/0x560 [ 652.031439][T23939] _copy_from_user+0x2d/0xb0 [ 652.031468][T23939] ___sys_sendmsg+0x1c6/0x360 [ 652.031491][T23939] ? __lock_acquire+0x6b5/0x2cf0 [ 652.031515][T23939] ? __pfx____sys_sendmsg+0x10/0x10 [ 652.031568][T23939] ? __fget_files+0x2a/0x420 [ 652.031590][T23939] ? __fget_files+0x3a0/0x420 [ 652.031616][T23939] __x64_sys_sendmsg+0x1bd/0x2a0 [ 652.031635][T23939] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 652.031659][T23939] ? __pfx_ksys_write+0x10/0x10 [ 652.031689][T23939] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 652.031707][T23939] do_syscall_64+0x15f/0xf80 [ 652.031726][T23939] ? trace_irq_disable+0x3b/0x140 [ 652.031752][T23939] ? clear_bhb_loop+0x40/0x90 [ 652.031776][T23939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 652.031795][T23939] RIP: 0033:0x7ff7e6f9ce59 [ 652.031813][T23939] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 652.031837][T23939] RSP: 002b:00007ff7e7e47028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 652.031858][T23939] RAX: ffffffffffffffda RBX: 00007ff7e7215fa0 RCX: 00007ff7e6f9ce59 [ 652.031872][T23939] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 652.031884][T23939] RBP: 00007ff7e7e47090 R08: 0000000000000000 R09: 0000000000000000 [ 652.031895][T23939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 652.031907][T23939] R13: 00007ff7e7216038 R14: 00007ff7e7215fa0 R15: 00007ffd4790a0b8 [ 652.031940][T23939] [ 652.451608][T23949] netlink: 'syz.1.4594': attribute type 29 has an invalid length. [ 652.483852][T23955] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 652.503547][T23955] pim6reg0: linktype set to 780 [ 652.708632][T23967] FAULT_INJECTION: forcing a failure. [ 652.708632][T23967] name failslab, interval 1, probability 0, space 0, times 0 [ 652.738823][T23967] CPU: 1 UID: 0 PID: 23967 Comm: syz.0.4601 Not tainted syzkaller #0 PREEMPT(full) [ 652.738851][T23967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 652.738863][T23967] Call Trace: [ 652.738870][T23967] [ 652.738879][T23967] dump_stack_lvl+0xe8/0x150 [ 652.738908][T23967] should_fail_ex+0x412/0x560 [ 652.738939][T23967] should_failslab+0xa8/0x100 [ 652.738971][T23967] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 652.738999][T23967] ? __alloc_skb+0x186/0x7d0 [ 652.739102][T23967] ? __alloc_skb+0x1d0/0x7d0 [ 652.739115][T23967] ? __local_bh_enable_ip+0xd0/0x130 [ 652.739155][T23967] __alloc_skb+0x1d0/0x7d0 [ 652.739177][T23967] netlink_sendmsg+0x5d4/0xb40 [ 652.739278][T23967] ? __pfx_netlink_sendmsg+0x10/0x10 [ 652.739303][T23967] ? aa_sock_msg_perm+0xf1/0x1b0 [ 652.739364][T23967] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 652.739394][T23967] ____sys_sendmsg+0x972/0x9f0 [ 652.739415][T23967] ? __might_fault+0xaf/0x130 [ 652.739444][T23967] ? __pfx_____sys_sendmsg+0x10/0x10 [ 652.739474][T23967] ? import_iovec+0x73/0xa0 [ 652.739505][T23967] ___sys_sendmsg+0x2a5/0x360 [ 652.739525][T23967] ? __lock_acquire+0x6b5/0x2cf0 [ 652.739550][T23967] ? __pfx____sys_sendmsg+0x10/0x10 [ 652.739604][T23967] ? __fget_files+0x2a/0x420 [ 652.739627][T23967] ? __fget_files+0x3a0/0x420 [ 652.739659][T23967] __x64_sys_sendmsg+0x1bd/0x2a0 [ 652.739791][T23967] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 652.739825][T23967] ? __pfx_ksys_write+0x10/0x10 [ 652.739860][T23967] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 652.739881][T23967] do_syscall_64+0x15f/0xf80 [ 652.739903][T23967] ? trace_irq_disable+0x3b/0x140 [ 652.739931][T23967] ? clear_bhb_loop+0x40/0x90 [ 652.739952][T23967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 652.739969][T23967] RIP: 0033:0x7fc29bf9ce59 [ 652.739990][T23967] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 652.740006][T23967] RSP: 002b:00007fc29ceda028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 652.740025][T23967] RAX: ffffffffffffffda RBX: 00007fc29c215fa0 RCX: 00007fc29bf9ce59 [ 652.740037][T23967] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 652.740049][T23967] RBP: 00007fc29ceda090 R08: 0000000000000000 R09: 0000000000000000 [ 652.740061][T23967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 652.740073][T23967] R13: 00007fc29c216038 R14: 00007fc29c215fa0 R15: 00007ffdf70846b8 [ 652.740104][T23967] [ 653.525943][T23990] __nla_validate_parse: 6 callbacks suppressed [ 653.525966][T23990] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4606'. [ 658.371985][T24031] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4616'. [ 658.852085][T24055] netlink: 'syz.1.4623': attribute type 1 has an invalid length. [ 658.993213][T24066] netlink: 1028 bytes leftover after parsing attributes in process `syz.0.4625'. [ 659.005478][T24066] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 659.275450][T24080] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4628'. [ 659.348639][T24081] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4629'. [ 659.422782][T24085] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 659.641420][T24099] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4633'. [ 659.690696][T24099] netlink: 'syz.0.4633': attribute type 20 has an invalid length. [ 659.747549][T24108] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4633'. [ 659.757242][T23626] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 659.781685][T23626] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 659.800181][T23626] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 659.823488][T24108] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 659.895214][T23626] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 660.158163][T24123] syzkaller0: entered promiscuous mode [ 660.178248][T24123] syzkaller0: entered allmulticast mode [ 660.210780][T24131] netlink: 'syz.0.4641': attribute type 12 has an invalid length. [ 660.225155][T24131] netlink: 'syz.0.4641': attribute type 29 has an invalid length. [ 660.235891][T24131] netlink: 148 bytes leftover after parsing attributes in process `syz.0.4641'. [ 660.388814][T24139] netdevsim netdevsim2: Firmware load for './file0/file0/..' refused, path contains '..' component [ 660.440911][T24143] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4644'. [ 660.509919][T24146] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4646'. [ 660.583465][T24149] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4645'. [ 660.652658][T24149] 8021q: adding VLAN 0 to HW filter on device bond3 [ 660.741187][T24149] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4645'. [ 660.853411][T24153] 8021q: adding VLAN 0 to HW filter on device bond4 [ 660.890636][T24153] bond3: (slave bond4): Enslaving as an active interface with an up link [ 660.923787][T24149] bond3 (unregistering): (slave bond4): Releasing backup interface [ 660.959205][T24149] bond3 (unregistering): Released all slaves [ 661.210390][T24181] netlink: 'syz.1.4654': attribute type 12 has an invalid length. [ 661.219313][T24181] netlink: 'syz.1.4654': attribute type 29 has an invalid length. [ 661.658301][T24210] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 661.698153][T24210] ip6gre2: entered promiscuous mode [ 661.710207][T24210] ip6gre2: entered allmulticast mode [ 661.733794][T16834] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 661.744439][T16834] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 661.757544][ T5774] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 661.793641][T24212] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 661.828587][ T5774] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 661.841635][T24217] xt_hashlimit: size too large, truncated to 1048576 [ 661.958442][T24226] netlink: 'syz.2.4665': attribute type 1 has an invalid length. [ 662.068650][ T5774] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 662.080943][T24221] bridge0: port 1(bridge_slave_0) entered disabled state [ 662.143686][T24221] bridge0: port 1(bridge_slave_0) entered disabled state [ 663.284621][T24277] bond7: entered promiscuous mode [ 663.314267][T24277] 8021q: adding VLAN 0 to HW filter on device bond7 [ 663.424362][T24293] 8021q: adding VLAN 0 to HW filter on device bond7 [ 663.458520][T24293] bond7: (slave sit1): The slave device specified does not support setting the MAC address [ 663.487628][T24293] bond7: (slave sit1): Error -95 calling set_mac_address [ 663.559408][T24292] syzkaller0: entered promiscuous mode [ 663.564956][T24292] syzkaller0: entered allmulticast mode [ 663.573294][T24290] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 663.583424][T24290] syzkaller1: Linktype set failed because interface is up [ 663.756792][T20503] syzkaller1: tun_net_xmit 90 [ 666.000649][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 667.439391][T23627] syzkaller1: tun_net_xmit 86 [ 667.448956][T24310] vlan0: entered allmulticast mode [ 667.467095][T24310] veth0_vlan: entered allmulticast mode [ 667.610026][T24314] syzkaller1: entered promiscuous mode [ 667.615674][T24314] syzkaller1: entered allmulticast mode [ 667.651722][T24321] __nla_validate_parse: 14 callbacks suppressed [ 667.651822][T24321] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4684'. [ 667.756898][T24328] lo speed is unknown, defaulting to 1000 [ 667.765815][T24333] x_tables: duplicate underflow at hook 3 [ 668.058503][T24356] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4695'. [ 668.078946][T24355] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4695'. [ 668.193455][T24355] ip6gre2: entered promiscuous mode [ 668.210321][T24355] ip6gre2: entered allmulticast mode [ 668.231916][T24364] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4694'. [ 668.329567][T24369] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4697'. [ 668.343108][T24352] syzkaller0: entered promiscuous mode [ 668.356236][T24352] syzkaller0: entered allmulticast mode [ 668.435250][T24366] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 669.677182][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 672.404438][T24344] lo speed is unknown, defaulting to 1000 [ 672.552293][T24344] lo speed is unknown, defaulting to 1000 [ 672.576162][T24397] ip6gre3: entered promiscuous mode [ 672.583540][T24397] ip6gre3: entered allmulticast mode [ 672.678446][T24344] lo speed is unknown, defaulting to 1000 [ 672.707314][T24406] netlink: 176 bytes leftover after parsing attributes in process `syz.4.4706'. [ 673.052042][T24424] syzkaller1: entered promiscuous mode [ 673.071668][T24424] syzkaller1: entered allmulticast mode [ 673.141881][T24429] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4711'. [ 673.335550][T24433] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4713'. [ 673.417513][T24344] infiniband syz0: set active [ 673.422481][T21598] lo speed is unknown, defaulting to 1000 [ 673.436679][T24344] infiniband syz0: added lo [ 673.445309][T24344] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 673.463416][T24344] infiniband syz0: Couldn't open port 1 [ 673.501799][T24344] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 673.547418][T24344] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 673.554185][T24438] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4714'. [ 673.590910][T24344] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 673.681504][T24344] RDS/IB: syz0: added [ 673.685635][T24344] smc: adding ib device syz0 with port count 1 [ 673.713910][T24344] smc: ib device syz0 port 1 has no pnetid [ 673.731275][ T7722] lo speed is unknown, defaulting to 1000 [ 673.738777][T24344] lo speed is unknown, defaulting to 1000 [ 673.990318][T24446] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4717'. [ 674.067607][T24344] lo speed is unknown, defaulting to 1000 [ 674.283578][T24451] lo speed is unknown, defaulting to 1000 [ 674.301011][T24454] netlink: 120 bytes leftover after parsing attributes in process `syz.0.4721'. [ 674.317660][T24454] netlink: 120 bytes leftover after parsing attributes in process `syz.0.4721'. [ 674.472899][T24344] lo speed is unknown, defaulting to 1000 [ 674.510292][T24459] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4723'. [ 674.712550][T24464] vlan2: entered allmulticast mode [ 674.726525][T24464] bond6: entered allmulticast mode [ 674.786629][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 674.813550][T24469] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4725'. [ 675.028402][T24472] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4726'. [ 675.055965][T24472] syzkaller0: entered promiscuous mode [ 675.063286][T24472] syzkaller0: entered allmulticast mode [ 675.167386][T24344] lo speed is unknown, defaulting to 1000 [ 675.485958][T24344] lo speed is unknown, defaulting to 1000 [ 675.685193][T24487] syzkaller0: entered promiscuous mode [ 675.690933][T24487] syzkaller0: entered allmulticast mode [ 679.903593][T24451] lo speed is unknown, defaulting to 1000 [ 680.026584][T24523] lo speed is unknown, defaulting to 1000 [ 680.351184][T24540] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4748'. [ 680.389215][T24540] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4748'. [ 680.415596][T24344] lo speed is unknown, defaulting to 1000 [ 681.078051][T24523] lo speed is unknown, defaulting to 1000 [ 681.300245][T24574] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4757'. [ 681.424619][T24580] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 684.049014][T24558] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 684.356041][T24625] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4769'. [ 684.376796][T24628] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.4772'. [ 684.402054][T24629] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4773'. [ 687.525708][T24636] syz.2.4775 (24636) used obsolete PPPIOCDETACH ioctl [ 687.748455][T24652] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4781'. [ 687.807857][T24652] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4781'. [ 688.120732][T24674] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4788'. [ 688.157116][T24674] netlink: 312 bytes leftover after parsing attributes in process `syz.4.4788'. [ 688.520810][T24692] bridge0: left allmulticast mode [ 688.651748][T24696] bridge0: port 2(vlan2) entered blocking state [ 688.659446][T24696] bridge0: port 2(vlan2) entered disabled state [ 688.667135][T24681] netlink: 'syz.3.4791': attribute type 13 has an invalid length. [ 688.677930][T24696] vlan2: entered allmulticast mode [ 688.684494][T24696] geneve0: entered allmulticast mode [ 688.692722][T24696] vlan2: entered promiscuous mode [ 688.698501][T24696] geneve0: entered promiscuous mode [ 688.721335][T24684] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4791'. [ 688.742966][T24684] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4791'. [ 688.806603][T24702] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4799'. [ 688.841274][T24684] sch_tbf: burst 6 is lower than device gretap0 mtu (1476) ! [ 689.156533][T24720] netlink: 860 bytes leftover after parsing attributes in process `syz.3.4803'. [ 689.531238][T24751] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4812'. [ 689.548131][T24753] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.4813'. [ 689.563002][T24751] nbd: couldn't find a device at index 65546 [ 690.263037][T23624] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 690.276217][T23624] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.302982][T23624] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 690.323955][T23624] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.343972][T23624] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 690.363172][T23624] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.397962][T23624] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 690.421727][T23624] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.611648][T24779] openvswitch: netlink: Message has 1 unknown bytes. [ 690.634349][T24779] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 690.849480][T24796] netlink: 'syz.2.4826': attribute type 4 has an invalid length. [ 690.948170][T24801] bridge0: port 2(bridge_slave_1) entered disabled state [ 690.959149][T24801] bridge0: port 1(bridge_slave_0) entered disabled state [ 691.332592][T24831] : option downdelay: invalid value (18446744073709547007) [ 691.340271][T24831] : option downdelay: allowed values 0 - 2147483647 [ 691.351713][T24831]  (unregistering): Released all slaves [ 691.426522][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 691.437180][T24837] netlink: zone id is out of range [ 691.444174][T24837] netlink: zone id is out of range [ 691.454010][T24837] netlink: zone id is out of range [ 691.464611][T24837] netlink: zone id is out of range [ 691.470712][T24837] netlink: zone id is out of range [ 691.476591][T24837] netlink: zone id is out of range [ 691.482261][T24837] netlink: zone id is out of range [ 691.496748][T24837] netlink: zone id is out of range [ 691.824533][T24854] lo speed is unknown, defaulting to 1000 [ 692.075465][T24850] lo speed is unknown, defaulting to 1000 [ 692.078534][T24854] lo speed is unknown, defaulting to 1000 [ 692.669439][T24850] lo speed is unknown, defaulting to 1000 [ 695.242268][T24873] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 695.464771][T24922] netlink: 'syz.4.4862': attribute type 9 has an invalid length. [ 695.897493][T24958] __nla_validate_parse: 9 callbacks suppressed [ 695.897517][T24958] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4872'. [ 696.101356][T24972] FAULT_INJECTION: forcing a failure. [ 696.101356][T24972] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 696.115411][T24972] CPU: 0 UID: 0 PID: 24972 Comm: syz.4.4877 Not tainted syzkaller #0 PREEMPT(full) [ 696.115438][T24972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 696.115450][T24972] Call Trace: [ 696.115458][T24972] [ 696.115467][T24972] dump_stack_lvl+0xe8/0x150 [ 696.115495][T24972] should_fail_ex+0x412/0x560 [ 696.115525][T24972] _copy_from_user+0x2d/0xb0 [ 696.115554][T24972] __sys_sendto+0x2b0/0x710 [ 696.115577][T24972] ? __pfx___sys_sendto+0x10/0x10 [ 696.115594][T24972] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 696.115628][T24972] ? __fget_files+0x3a0/0x420 [ 696.115662][T24972] ? ksys_write+0x242/0x270 [ 696.115692][T24972] ? __pfx_ksys_write+0x10/0x10 [ 696.115721][T24972] __x64_sys_sendto+0xde/0x100 [ 696.115740][T24972] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 696.115765][T24972] do_syscall_64+0x15f/0xf80 [ 696.115783][T24972] ? trace_irq_disable+0x3b/0x140 [ 696.115812][T24972] ? clear_bhb_loop+0x40/0x90 [ 696.115837][T24972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 696.115856][T24972] RIP: 0033:0x7ff7e6f9ce59 [ 696.115875][T24972] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 696.115891][T24972] RSP: 002b:00007ff7e7e47028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 696.115912][T24972] RAX: ffffffffffffffda RBX: 00007ff7e7215fa0 RCX: 00007ff7e6f9ce59 [ 696.115926][T24972] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 696.115938][T24972] RBP: 00007ff7e7e47090 R08: 00002000000001c0 R09: 000000000000001c [ 696.115951][T24972] R10: 0000000020000045 R11: 0000000000000246 R12: 0000000000000001 [ 696.115962][T24972] R13: 00007ff7e7216038 R14: 00007ff7e7215fa0 R15: 00007ffd4790a0b8 [ 696.115991][T24972] [ 696.170083][T24977] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4879'. [ 696.318876][T24984] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4875'. [ 696.340185][T24984] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4875'. [ 696.349677][T24984] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4875'. [ 696.358817][T24984] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4875'. [ 696.489975][T24992] batadv_slave_1: entered promiscuous mode [ 696.512459][T24989] batadv_slave_1: left promiscuous mode [ 696.755347][T25009] FAULT_INJECTION: forcing a failure. [ 696.755347][T25009] name failslab, interval 1, probability 0, space 0, times 0 [ 696.783589][T25009] CPU: 1 UID: 0 PID: 25009 Comm: syz.0.4890 Not tainted syzkaller #0 PREEMPT(full) [ 696.783616][T25009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 696.783627][T25009] Call Trace: [ 696.783634][T25009] [ 696.783642][T25009] dump_stack_lvl+0xe8/0x150 [ 696.783670][T25009] should_fail_ex+0x412/0x560 [ 696.783698][T25009] should_failslab+0xa8/0x100 [ 696.783726][T25009] __kmalloc_cache_noprof+0x88/0x660 [ 696.783751][T25009] ? __lock_acquire+0x6b5/0x2cf0 [ 696.783771][T25009] ? tcp_sendmsg_fastopen+0x1de/0x5e0 [ 696.783925][T25009] tcp_sendmsg_fastopen+0x1de/0x5e0 [ 696.783949][T25009] tcp_sendmsg_locked+0x4a88/0x5360 [ 696.783986][T25009] ? tcp_sendmsg_locked+0x361/0x5360 [ 696.784004][T25009] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 696.784029][T25009] ? look_up_lock_class+0x57/0x110 [ 696.784049][T25009] ? register_lock_class+0x31/0x2e0 [ 696.784072][T25009] ? __lock_acquire+0x6b5/0x2cf0 [ 696.784121][T25009] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 696.784148][T25009] ? tcp_sendmsg+0x21/0x50 [ 696.784170][T25009] ? __local_bh_enable_ip+0xd0/0x130 [ 696.784191][T25009] ? __pfx_inet6_sendmsg+0x10/0x10 [ 696.784255][T25009] tcp_sendmsg+0x2f/0x50 [ 696.784275][T25009] __sys_sendto+0x4a3/0x710 [ 696.784297][T25009] ? __pfx___sys_sendto+0x10/0x10 [ 696.784313][T25009] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 696.784348][T25009] ? __fget_files+0x3a0/0x420 [ 696.784382][T25009] ? ksys_write+0x242/0x270 [ 696.784411][T25009] ? __pfx_ksys_write+0x10/0x10 [ 696.784443][T25009] __x64_sys_sendto+0xde/0x100 [ 696.784463][T25009] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 696.784482][T25009] do_syscall_64+0x15f/0xf80 [ 696.784500][T25009] ? trace_irq_disable+0x3b/0x140 [ 696.784528][T25009] ? clear_bhb_loop+0x40/0x90 [ 696.784551][T25009] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 696.784570][T25009] RIP: 0033:0x7fc29bf9ce59 [ 696.784590][T25009] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 696.784606][T25009] RSP: 002b:00007fc29ceda028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 696.784627][T25009] RAX: ffffffffffffffda RBX: 00007fc29c215fa0 RCX: 00007fc29bf9ce59 [ 696.784641][T25009] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 696.784653][T25009] RBP: 00007fc29ceda090 R08: 00002000000001c0 R09: 000000000000001c [ 696.784666][T25009] R10: 0000000020000045 R11: 0000000000000246 R12: 0000000000000001 [ 696.784678][T25009] R13: 00007fc29c216038 R14: 00007fc29c215fa0 R15: 00007ffdf70846b8 [ 696.784710][T25009] [ 697.200431][T25025] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4896'. [ 697.222971][T25025] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4896'. [ 697.355530][T25030] netlink: 'syz.2.4900': attribute type 11 has an invalid length. [ 697.390980][T25030] net_ratelimit: 100 callbacks suppressed [ 697.390996][T25030] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 697.413143][T25033] batadv_slave_0: Caught tx_queue_len zero misconfig [ 697.424230][T25035] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 697.494823][T25038] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4901'. [ 697.511100][T25038] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 697.563208][T25038] bond5: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 697.581831][T25038] bond5: (slave lo): Enslaving as an active interface with an up link [ 697.602265][T25038] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 697.673988][T25048] FAULT_INJECTION: forcing a failure. [ 697.673988][T25048] name failslab, interval 1, probability 0, space 0, times 0 [ 697.688347][T25048] CPU: 1 UID: 0 PID: 25048 Comm: syz.1.4904 Not tainted syzkaller #0 PREEMPT(full) [ 697.688374][T25048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 697.688387][T25048] Call Trace: [ 697.688395][T25048] [ 697.688403][T25048] dump_stack_lvl+0xe8/0x150 [ 697.688431][T25048] should_fail_ex+0x412/0x560 [ 697.688462][T25048] should_failslab+0xa8/0x100 [ 697.688491][T25048] ? dst_alloc+0x105/0x170 [ 697.688639][T25048] kmem_cache_alloc_noprof+0x87/0x650 [ 697.688672][T25048] dst_alloc+0x105/0x170 [ 697.688697][T25048] xfrm_lookup_with_ifid+0x7cf/0x1b90 [ 697.688754][T25048] ? __pfx_ip6_dst_lookup_tail+0x10/0x10 [ 697.688783][T25048] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 697.688804][T25048] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 697.688834][T25048] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 697.688860][T25048] xfrm_lookup_route+0x3c/0x1c0 [ 697.688882][T25048] tcp_v6_connect+0xcec/0x1b10 [ 697.688933][T25048] ? __kmalloc_cache_noprof+0x31c/0x660 [ 697.688956][T25048] ? tcp_sendmsg_fastopen+0x1de/0x5e0 [ 697.688973][T25048] ? tcp_sendmsg_locked+0x4a88/0x5360 [ 697.689010][T25048] ? __pfx_tcp_v6_connect+0x10/0x10 [ 697.689043][T25048] __inet_stream_connect+0x25a/0xdd0 [ 697.689115][T25048] ? __pfx___inet_stream_connect+0x10/0x10 [ 697.689142][T25048] ? __kasan_kmalloc+0x93/0xb0 [ 697.689168][T25048] ? __kmalloc_cache_noprof+0x31c/0x660 [ 697.689192][T25048] ? __lock_acquire+0x6b5/0x2cf0 [ 697.689233][T25048] ? tcp_sendmsg_fastopen+0x1de/0x5e0 [ 697.689251][T25048] ? __kmalloc_cache_noprof+0x15b/0x660 [ 697.689280][T25048] tcp_sendmsg_fastopen+0x3a7/0x5e0 [ 697.689306][T25048] tcp_sendmsg_locked+0x4a88/0x5360 [ 697.689331][T25048] ? tcp_sendmsg_locked+0x361/0x5360 [ 697.689350][T25048] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 697.689376][T25048] ? look_up_lock_class+0x57/0x110 [ 697.689397][T25048] ? register_lock_class+0x31/0x2e0 [ 697.689421][T25048] ? __lock_acquire+0x6b5/0x2cf0 [ 697.689471][T25048] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 697.689499][T25048] ? tcp_sendmsg+0x21/0x50 [ 697.689520][T25048] ? __local_bh_enable_ip+0xd0/0x130 [ 697.689541][T25048] ? __pfx_inet6_sendmsg+0x10/0x10 [ 697.689562][T25048] tcp_sendmsg+0x2f/0x50 [ 697.689582][T25048] __sys_sendto+0x4a3/0x710 [ 697.689604][T25048] ? __pfx___sys_sendto+0x10/0x10 [ 697.689620][T25048] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 697.689654][T25048] ? __fget_files+0x3a0/0x420 [ 697.689688][T25048] ? ksys_write+0x242/0x270 [ 697.689716][T25048] ? __pfx_ksys_write+0x10/0x10 [ 697.689748][T25048] __x64_sys_sendto+0xde/0x100 [ 697.689767][T25048] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 697.689789][T25048] do_syscall_64+0x15f/0xf80 [ 697.689806][T25048] ? trace_irq_disable+0x3b/0x140 [ 697.689834][T25048] ? clear_bhb_loop+0x40/0x90 [ 697.689857][T25048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 697.689876][T25048] RIP: 0033:0x7f666119ce59 [ 697.689895][T25048] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 697.689912][T25048] RSP: 002b:00007f6661fab028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 697.689932][T25048] RAX: ffffffffffffffda RBX: 00007f6661415fa0 RCX: 00007f666119ce59 [ 697.689946][T25048] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 697.689958][T25048] RBP: 00007f6661fab090 R08: 00002000000001c0 R09: 000000000000001c [ 697.689971][T25048] R10: 0000000020000045 R11: 0000000000000246 R12: 0000000000000001 [ 697.689983][T25048] R13: 00007f6661416038 R14: 00007f6661415fa0 R15: 00007fffcd1ffde8 [ 697.690021][T25048] [ 698.300148][T25059] lo speed is unknown, defaulting to 1000 [ 698.390321][T25065] A link change request failed with some changes committed already. Interface vxcan1 may have been left with an inconsistent configuration, please check. [ 698.525503][T25059] lo speed is unknown, defaulting to 1000 [ 698.719082][T25080] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4914'. [ 698.751447][T25080] netlink: 'syz.4.4914': attribute type 12 has an invalid length. [ 698.937225][T25088] FAULT_INJECTION: forcing a failure. [ 698.937225][T25088] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 698.964384][T25088] CPU: 0 UID: 0 PID: 25088 Comm: syz.0.4916 Not tainted syzkaller #0 PREEMPT(full) [ 698.964413][T25088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 698.964425][T25088] Call Trace: [ 698.964433][T25088] [ 698.964442][T25088] dump_stack_lvl+0xe8/0x150 [ 698.964472][T25088] should_fail_ex+0x412/0x560 [ 698.964504][T25088] _copy_from_user+0x2d/0xb0 [ 698.964534][T25088] kstrtouint_from_user+0xd6/0x180 [ 698.964561][T25088] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 698.964602][T25088] proc_fail_nth_write+0x8e/0x210 [ 698.964627][T25088] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 698.964656][T25088] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 698.964682][T25088] vfs_write+0x29a/0xb90 [ 698.964717][T25088] ? __pfx_vfs_write+0x10/0x10 [ 698.964745][T25088] ? __fget_files+0x2a/0x420 [ 698.964772][T25088] ? __fget_files+0x3a0/0x420 [ 698.964793][T25088] ? __fget_files+0x2a/0x420 [ 698.964823][T25088] ksys_write+0x150/0x270 [ 698.964852][T25088] ? __pfx_ksys_write+0x10/0x10 [ 698.964890][T25088] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 698.964911][T25088] do_syscall_64+0x15f/0xf80 [ 698.964931][T25088] ? trace_irq_disable+0x3b/0x140 [ 698.964959][T25088] ? clear_bhb_loop+0x40/0x90 [ 698.964983][T25088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 698.965001][T25088] RIP: 0033:0x7fc29bf5d68e [ 698.965020][T25088] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 698.965036][T25088] RSP: 002b:00007fc29ced9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 698.965057][T25088] RAX: ffffffffffffffda RBX: 00007fc29ceda6c0 RCX: 00007fc29bf5d68e [ 698.965071][T25088] RDX: 0000000000000001 RSI: 00007fc29ceda0a0 RDI: 0000000000000005 [ 698.965083][T25088] RBP: 00007fc29ceda090 R08: 0000000000000000 R09: 0000000000000000 [ 698.965095][T25088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 698.965106][T25088] R13: 00007fc29c216038 R14: 00007fc29c215fa0 R15: 00007ffdf70846b8 [ 698.965138][T25088] [ 699.190139][T25061] dvmrp0: entered allmulticast mode [ 699.229356][T25091] syzkaller0: entered promiscuous mode [ 699.265337][T25091] syzkaller0: entered allmulticast mode [ 701.600837][T25072] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 702.394914][T25117] netlink: 'syz.2.4924': attribute type 21 has an invalid length. [ 702.451631][T25117] netlink: 'syz.2.4924': attribute type 6 has an invalid length. [ 702.491864][T25117] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4924'. [ 702.664450][T25132] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4926'. [ 702.896011][T25137] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4927'. [ 703.024018][T25141] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4927'. [ 703.158521][T25147] FAULT_INJECTION: forcing a failure. [ 703.158521][T25147] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 703.219330][T25147] CPU: 1 UID: 0 PID: 25147 Comm: syz.2.4931 Not tainted syzkaller #0 PREEMPT(full) [ 703.219358][T25147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 703.219370][T25147] Call Trace: [ 703.219379][T25147] [ 703.219387][T25147] dump_stack_lvl+0xe8/0x150 [ 703.219416][T25147] should_fail_ex+0x412/0x560 [ 703.219447][T25147] _copy_from_user+0x2d/0xb0 [ 703.219476][T25147] bpf_obj_get_info_by_fd+0x511/0x32f0 [ 703.219532][T25147] ? __lock_acquire+0x6b5/0x2cf0 [ 703.219567][T25147] ? __pfx_bpf_obj_get_info_by_fd+0x10/0x10 [ 703.219591][T25147] ? __lock_acquire+0x6b5/0x2cf0 [ 703.219616][T25147] ? get_pid_task+0x20/0x1f0 [ 703.219657][T25147] ? get_pid_task+0x20/0x1f0 [ 703.219715][T25147] ? bpf_lsm_bpf+0x9/0x20 [ 703.219733][T25147] ? security_bpf+0x7e/0x2d0 [ 703.219829][T25147] __sys_bpf+0x66e/0x950 [ 703.219860][T25147] ? __pfx___sys_bpf+0x10/0x10 [ 703.219884][T25147] ? kmem_cache_free+0x182/0x650 [ 703.219925][T25147] ? ksys_write+0x1fc/0x270 [ 703.219954][T25147] ? __pfx_ksys_write+0x10/0x10 [ 703.219984][T25147] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 703.220005][T25147] __x64_sys_bpf+0x7c/0x90 [ 703.220030][T25147] do_syscall_64+0x15f/0xf80 [ 703.220050][T25147] ? trace_irq_disable+0x3b/0x140 [ 703.220077][T25147] ? clear_bhb_loop+0x40/0x90 [ 703.220100][T25147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 703.220119][T25147] RIP: 0033:0x7f90a839ce59 [ 703.220137][T25147] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 703.220154][T25147] RSP: 002b:00007f90a9288028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 703.220174][T25147] RAX: ffffffffffffffda RBX: 00007f90a8615fa0 RCX: 00007f90a839ce59 [ 703.220189][T25147] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 000000000000000f [ 703.220201][T25147] RBP: 00007f90a9288090 R08: 0000000000000000 R09: 0000000000000000 [ 703.220213][T25147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 703.220225][T25147] R13: 00007f90a8616038 R14: 00007f90a8615fa0 R15: 00007ffcfa1f78d8 [ 703.220255][T25147] [ 703.605730][T25155] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4934'. [ 703.646129][T25155] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4934'. [ 703.658265][T25159] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4934'. [ 703.675835][T25155] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4934'. [ 703.704211][T25158] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4935'. [ 703.723024][T25159] ip6gre3: entered promiscuous mode [ 703.728180][T25163] FAULT_INJECTION: forcing a failure. [ 703.728180][T25163] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 703.741736][T25163] CPU: 1 UID: 0 PID: 25163 Comm: syz.1.4936 Not tainted syzkaller #0 PREEMPT(full) [ 703.741756][T25163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 703.741765][T25163] Call Trace: [ 703.741771][T25163] [ 703.741778][T25163] dump_stack_lvl+0xe8/0x150 [ 703.741800][T25163] should_fail_ex+0x412/0x560 [ 703.741824][T25163] _copy_from_user+0x2d/0xb0 [ 703.741845][T25163] sk_setsockopt+0x2b3/0x2d60 [ 703.741859][T25163] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 703.741879][T25163] ? get_pid_task+0x20/0x1f0 [ 703.741898][T25163] ? __pfx_sk_setsockopt+0x10/0x10 [ 703.741916][T25163] ? __lock_acquire+0x6b5/0x2cf0 [ 703.741946][T25163] ? aa_sk_perm+0x6d5/0x900 [ 703.741964][T25163] udp_lib_setsockopt+0xbc/0x6b0 [ 703.742057][T25163] ? __pfx_udp_lib_setsockopt+0x10/0x10 [ 703.742075][T25163] ? __fget_files+0x2a/0x420 [ 703.742090][T25163] ? aa_sock_opt_perm+0xff/0x1a0 [ 703.742111][T25163] udp_setsockopt+0x67/0xb0 [ 703.742125][T25163] ? __pfx_udp_push_pending_frames+0x10/0x10 [ 703.742173][T25163] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 703.742194][T25163] do_sock_setsockopt+0x17c/0x1b0 [ 703.742220][T25163] __x64_sys_setsockopt+0x13d/0x1b0 [ 703.742236][T25163] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 703.742252][T25163] do_syscall_64+0x15f/0xf80 [ 703.742266][T25163] ? trace_irq_disable+0x3b/0x140 [ 703.742287][T25163] ? clear_bhb_loop+0x40/0x90 [ 703.742304][T25163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 703.742318][T25163] RIP: 0033:0x7f666119ce59 [ 703.742334][T25163] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 703.742346][T25163] RSP: 002b:00007f6661fab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 703.742362][T25163] RAX: ffffffffffffffda RBX: 00007f6661415fa0 RCX: 00007f666119ce59 [ 703.742373][T25163] RDX: 0000000000000041 RSI: 0000000000000001 RDI: 0000000000000003 [ 703.742381][T25163] RBP: 00007f6661fab090 R08: 0000000000000004 R09: 0000000000000000 [ 703.742391][T25163] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 703.742400][T25163] R13: 00007f6661416038 R14: 00007f6661415fa0 R15: 00007fffcd1ffde8 [ 703.742422][T25163] [ 703.787089][T25159] ip6gre3: entered allmulticast mode [ 703.936725][T25165] netlink: 332 bytes leftover after parsing attributes in process `syz.1.4937'. [ 704.000058][T25165] netlink: 'syz.1.4937': attribute type 9 has an invalid length. [ 704.193638][T25176] veth0_to_team: entered promiscuous mode [ 704.206257][T25170] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 704.399936][T25186] FAULT_INJECTION: forcing a failure. [ 704.399936][T25186] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 704.414348][T25186] CPU: 0 UID: 0 PID: 25186 Comm: syz.0.4944 Not tainted syzkaller #0 PREEMPT(full) [ 704.414374][T25186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 704.414387][T25186] Call Trace: [ 704.414394][T25186] [ 704.414404][T25186] dump_stack_lvl+0xe8/0x150 [ 704.414431][T25186] should_fail_ex+0x412/0x560 [ 704.414461][T25186] _copy_to_user+0x31/0xb0 [ 704.414490][T25186] simple_read_from_buffer+0xe1/0x170 [ 704.414519][T25186] proc_fail_nth_read+0x1bb/0x230 [ 704.414545][T25186] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 704.414571][T25186] ? rw_verify_area+0x2a6/0x4d0 [ 704.414596][T25186] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 704.414621][T25186] vfs_read+0x20c/0xa70 [ 704.414647][T25186] ? bpf_lsm_bpf+0x9/0x20 [ 704.414677][T25186] ? __pfx_vfs_read+0x10/0x10 [ 704.414699][T25186] ? __sys_bpf+0x66e/0x950 [ 704.414727][T25186] ? __pfx___sys_bpf+0x10/0x10 [ 704.414751][T25186] ? kmem_cache_free+0x182/0x650 [ 704.414792][T25186] ksys_read+0x150/0x270 [ 704.414819][T25186] ? __pfx_ksys_read+0x10/0x10 [ 704.414850][T25186] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 704.414871][T25186] do_syscall_64+0x15f/0xf80 [ 704.414889][T25186] ? trace_irq_disable+0x3b/0x140 [ 704.414915][T25186] ? clear_bhb_loop+0x40/0x90 [ 704.414935][T25186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 704.414951][T25186] RIP: 0033:0x7fc29bf5d68e [ 704.414969][T25186] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 704.414983][T25186] RSP: 002b:00007fc29ced9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 704.415002][T25186] RAX: ffffffffffffffda RBX: 00007fc29ceda6c0 RCX: 00007fc29bf5d68e [ 704.415016][T25186] RDX: 000000000000000f RSI: 00007fc29ceda0a0 RDI: 0000000000000004 [ 704.415028][T25186] RBP: 00007fc29ceda090 R08: 0000000000000000 R09: 0000000000000000 [ 704.415040][T25186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 704.415052][T25186] R13: 00007fc29c216038 R14: 00007fc29c215fa0 R15: 00007ffdf70846b8 [ 704.415081][T25186] [ 704.631499][T25181] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 704.681468][T25181] tipc: Resetting bearer [ 704.693553][T25181] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 704.904369][T25199] ipt_rpfilter: unknown options [ 704.912995][T25197] FAULT_INJECTION: forcing a failure. [ 704.912995][T25197] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 704.953658][T25197] CPU: 0 UID: 0 PID: 25197 Comm: syz.0.4947 Not tainted syzkaller #0 PREEMPT(full) [ 704.953686][T25197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 704.953698][T25197] Call Trace: [ 704.953706][T25197] [ 704.953712][T25197] dump_stack_lvl+0xe8/0x150 [ 704.953741][T25197] should_fail_ex+0x412/0x560 [ 704.953773][T25197] _copy_to_user+0x31/0xb0 [ 704.953803][T25197] simple_read_from_buffer+0xe1/0x170 [ 704.953832][T25197] proc_fail_nth_read+0x1bb/0x230 [ 704.953860][T25197] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 704.953888][T25197] ? rw_verify_area+0x2a6/0x4d0 [ 704.953913][T25197] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 704.953939][T25197] vfs_read+0x20c/0xa70 [ 704.953969][T25197] ? __pfx___mutex_lock+0x10/0x10 [ 704.953991][T25197] ? __pfx_vfs_read+0x10/0x10 [ 704.954018][T25197] ? __fget_files+0x2a/0x420 [ 704.954045][T25197] ? __fget_files+0x3a0/0x420 [ 704.954067][T25197] ? __fget_files+0x2a/0x420 [ 704.954097][T25197] ksys_read+0x150/0x270 [ 704.954126][T25197] ? __pfx_ksys_read+0x10/0x10 [ 704.954165][T25197] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 704.954187][T25197] do_syscall_64+0x15f/0xf80 [ 704.954211][T25197] ? clear_bhb_loop+0x40/0x90 [ 704.954235][T25197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 704.954254][T25197] RIP: 0033:0x7fc29bf5d68e [ 704.954272][T25197] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 704.954289][T25197] RSP: 002b:00007fc29ced9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 704.954309][T25197] RAX: ffffffffffffffda RBX: 00007fc29ceda6c0 RCX: 00007fc29bf5d68e [ 704.954323][T25197] RDX: 000000000000000f RSI: 00007fc29ceda0a0 RDI: 0000000000000004 [ 704.954335][T25197] RBP: 00007fc29ceda090 R08: 0000000000000000 R09: 0000000000000000 [ 704.954347][T25197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 704.954359][T25197] R13: 00007fc29c216038 R14: 00007fc29c215fa0 R15: 00007ffdf70846b8 [ 704.954390][T25197] [ 705.252233][T25213] netlink: 'syz.0.4951': attribute type 1 has an invalid length. [ 705.292198][T25213] 8021q: adding VLAN 0 to HW filter on device bond7 [ 705.301492][T25207] syzkaller1: entered promiscuous mode [ 705.310099][T25207] syzkaller1: entered allmulticast mode [ 705.434184][T25216] tipc: New replicast peer: 255.255.255.255 [ 705.442661][T25216] tipc: Enabled bearer , priority 10 [ 705.870093][T25250] syzkaller1: entered promiscuous mode [ 705.881764][T25250] syzkaller1: entered allmulticast mode [ 705.976274][T25257] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 706.002073][T25257] nbd: must specify a device to reconfigure [ 706.029078][T25263] netlink: 'syz.4.4965': attribute type 13 has an invalid length. [ 706.061125][T25263] netlink: 'syz.4.4965': attribute type 17 has an invalid length. [ 706.258832][T25261] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 706.289062][T25261] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 706.526987][T25263] 8021q: adding VLAN 0 to HW filter on device bond0 [ 706.535555][T25263] 8021q: adding VLAN 0 to HW filter on device team0 [ 706.547498][T25263] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 706.573003][T25263] bridge0: port 1(bridge_slave_0) entered blocking state [ 706.580581][T25263] bridge0: port 1(bridge_slave_0) entered listening state [ 706.592773][T25263] bridge0: port 2(bridge_slave_1) entered blocking state [ 706.600014][T25263] bridge0: port 2(bridge_slave_1) entered listening state [ 706.625488][T25263] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 706.639758][T25263] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 706.664109][T25263] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 706.700838][T25272] bond7: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 706.714818][T25272] bond7 (unregistering): Released all slaves [ 707.028759][T25290] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 707.047482][T25290] pim6reg0: linktype set to 780 [ 707.431396][T25312] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 707.470099][T25312] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 707.489311][T25312] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 707.510462][T25315] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 707.517231][T25315] syzkaller1: linktype set to 769 [ 707.524563][T25315] syzkaller1: tun_chr_ioctl cmd 1074812118 [ 707.532786][T25315] __nla_validate_parse: 11 callbacks suppressed [ 707.532818][T25315] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4981'. [ 707.543798][T25312] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 707.602932][T25319] syzkaller1: entered promiscuous mode [ 707.609767][T25319] syzkaller1: entered allmulticast mode [ 707.880649][T25333] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4989'. [ 707.913712][T25336] xt_l2tp: missing protocol rule (udp|l2tpip) [ 708.370594][T25348] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4995'. [ 708.389405][T25348] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4995'. [ 708.400267][T25348] netlink: 'syz.2.4995': attribute type 3 has an invalid length. [ 710.690505][T25385] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 710.894859][T25402] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5007'. [ 710.918409][T25402] ip6gre1: entered promiscuous mode [ 710.927055][T25402] ip6gre1: entered allmulticast mode [ 710.936092][ T6373] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 710.955314][ T6373] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 710.965357][T20503] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 711.314612][T25429] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5015'. [ 711.448971][T25435] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5017'. [ 711.477275][T20503] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 711.551451][T25412] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5011'. [ 711.743307][T25457] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5024'. [ 711.907568][T20503] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 712.110856][T25470] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5028'. [ 712.193071][T25475] bond6: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 712.208166][T25475] bond6 (unregistering): Released all slaves [ 712.236200][T25483] netlink: 'syz.1.5031': attribute type 10 has an invalid length. [ 712.366233][T25483] netlink: 'syz.1.5031': attribute type 10 has an invalid length. [ 712.445754][T25483] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 713.128992][T25521] __nla_validate_parse: 1 callbacks suppressed [ 713.129013][T25521] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5042'. [ 713.211889][T25527] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5043'. [ 713.383091][T25530] bond0: entered promiscuous mode [ 713.400241][T25530] bond_slave_0: entered promiscuous mode [ 713.416307][T25530] bond_slave_1: entered promiscuous mode [ 713.438144][T25530] dummy0: entered promiscuous mode [ 713.474932][T25530] batadv0: entered promiscuous mode [ 713.508305][T25530] debugfs: 'hsr1' already exists in 'hsr' [ 713.526625][T25530] Cannot create hsr debugfs directory [ 713.536112][T25530] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 713.609668][T25552] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5041'. [ 713.799086][T25530] bond0: left promiscuous mode [ 713.807360][T25530] bond_slave_0: left promiscuous mode [ 713.820520][T25530] bond_slave_1: left promiscuous mode [ 713.833572][T25530] dummy0: left promiscuous mode [ 713.854745][T25530] batadv0: left promiscuous mode [ 713.927575][T25562] lo speed is unknown, defaulting to 1000 [ 714.050151][T25573] netlink: 'syz.0.5055': attribute type 1 has an invalid length. [ 714.138971][T25572] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5053'. [ 714.296251][T25572] syzkaller0: entered promiscuous mode [ 714.302493][T25572] syzkaller0: entered allmulticast mode [ 714.319824][T25579] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5053'. [ 714.336062][T25579] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5053'. [ 714.378807][T25593] netlink: 276 bytes leftover after parsing attributes in process `syz.1.5059'. [ 714.388674][T25593] netlink: 256 bytes leftover after parsing attributes in process `syz.1.5059'. [ 714.538547][T25596] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5060'. [ 714.549371][T25596] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 714.579776][T25600] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5060'. [ 714.597473][T25600] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 714.613655][T25562] lo speed is unknown, defaulting to 1000 [ 714.668787][T25595] netlink: 'syz.3.5060': attribute type 1 has an invalid length. [ 714.707015][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 714.950854][T25617] netlink: 'syz.1.5064': attribute type 32 has an invalid length. [ 715.096201][T25617] bond8: option coupled_control: invalid value (64) [ 715.108889][T25617] bond8 (unregistering): Released all slaves [ 715.206275][T25628] Unsupported ieee802154 address type: 0 [ 715.559693][ T30] audit: type=1107 audit(1779465084.896:34): pid=25632 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 715.640943][T25640] lo speed is unknown, defaulting to 1000 [ 716.221919][T25677] bond0: (slave dummy0): Releasing backup interface [ 716.297312][T25677] batman_adv: batadv0: Adding interface: dummy0 [ 716.315991][T25677] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 716.370238][T25677] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 716.547109][T25640] lo speed is unknown, defaulting to 1000 [ 716.597147][T25698] netlink: 'syz.0.5088': attribute type 4 has an invalid length. [ 716.641179][T25698] netlink: 'syz.0.5088': attribute type 4 has an invalid length. [ 716.660900][T20503] lo speed is unknown, defaulting to 1000 [ 716.668049][T20503] sqz0: Port: 1 Link ACTIVE [ 716.675355][T20503] lo speed is unknown, defaulting to 1000 [ 717.118946][T25649] lo speed is unknown, defaulting to 1000 [ 717.977216][T25758] sock: sock_timestamping_bind_phc: sock not bind to device [ 718.194779][T25768] netlink: 'syz.2.5103': attribute type 4 has an invalid length. [ 718.333092][T25762] syzkaller1: entered promiscuous mode [ 718.346791][T25762] syzkaller1: entered allmulticast mode [ 718.375967][T25772] __nla_validate_parse: 11 callbacks suppressed [ 718.375990][T25772] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5104'. [ 718.494869][T25649] lo speed is unknown, defaulting to 1000 [ 718.668734][T25780] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5107'. [ 718.702727][T25780] netlink: 136 bytes leftover after parsing attributes in process `syz.1.5107'. [ 718.734981][T25780] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 719.030726][T25793] can: request_module (can-proto-4) failed. [ 719.493571][T25816] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5117'. [ 719.579742][T25819] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5119'. [ 719.744937][T25821] mac80211_hwsim hwsim59 syzkaller0: entered promiscuous mode [ 719.752962][T25821] mac80211_hwsim hwsim59 syzkaller0: entered allmulticast mode [ 719.765051][T25819] ip6tnl2: entered allmulticast mode [ 719.779862][T25822] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5117'. [ 719.815289][T25822] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5117'. [ 720.422184][T25847] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5127'. [ 720.585205][T25851] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5130'. [ 720.600496][T25851] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5130'. [ 720.681302][T25853] can: request_module (can-proto-5) failed. [ 720.795481][T25864] nbd: must specify at least one socket [ 720.926967][T25869] syzkaller0: entered promiscuous mode [ 720.956671][T25869] syzkaller0: entered allmulticast mode [ 721.313549][ T30] audit: type=1800 audit(1779465090.646:35): pid=25892 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.5142" name="memory.events" dev="tmpfs" ino=2188 res=0 errno=0 [ 721.849810][T25924] syzkaller0: entered promiscuous mode [ 721.881020][T25924] syzkaller0: entered allmulticast mode [ 721.940762][T25929] syzkaller0: entered promiscuous mode [ 721.965455][T25929] syzkaller0: entered allmulticast mode [ 722.786631][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 723.403798][T26003] batman_adv: batadv0: Interface activated: dummy0 [ 723.426649][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 723.445971][T26003] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 723.515770][ T7192] lo speed is unknown, defaulting to 1000 [ 723.594358][T26017] __nla_validate_parse: 16 callbacks suppressed [ 723.594380][T26017] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5172'. [ 723.763667][T26019] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5173'. [ 723.975370][T26030] netlink: 'syz.3.5176': attribute type 5 has an invalid length. [ 724.111087][T26035] hmac(sha2: entered promiscuous mode [ 724.282022][T26028] lo speed is unknown, defaulting to 1000 [ 724.328605][T26044] netlink: 'syz.2.5180': attribute type 1 has an invalid length. [ 724.414401][T26046] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5180'. [ 725.139403][T26028] lo speed is unknown, defaulting to 1000 [ 725.717262][T26087] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5189'. [ 725.792268][T26087] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5189'. [ 726.000888][T26105] x_tables: duplicate underflow at hook 1 [ 726.082209][T26107] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5194'. [ 726.151262][T26107] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5194'. [ 726.539517][T26118] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5195'. [ 726.557133][T26117] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5195'. [ 726.627051][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 726.747588][T26118] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5195'. [ 726.847283][T26133] netlink: 'syz.0.5202': attribute type 1 has an invalid length. [ 726.916258][T26136] netlink: 'syz.3.5203': attribute type 2 has an invalid length. [ 726.960415][T26136] netlink: 'syz.3.5203': attribute type 1 has an invalid length. [ 727.162901][T26138] bond10: (slave geneve3): making interface the new active one [ 727.199114][T26138] bond10: (slave geneve3): Enslaving as an active interface with an up link [ 727.241486][T26139] 8021q: adding VLAN 0 to HW filter on device bond10 [ 727.376810][T21597] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 727.389529][ T6373] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 727.397206][T21597] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 727.416596][ T6373] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 727.546579][ T6373] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 727.560179][ T6373] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 727.726669][ T7192] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 727.735117][T26165] IPVS: sed: FWM 3 0x00000003 - no destination available [ 727.760390][ C0] IPVS: sed: FWM 3 0x00000003 - no destination available [ 727.848292][T26177] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 727.869941][T26177] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 727.889984][T26177] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 727.901605][T26177] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 727.916735][ T7722] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 727.955595][T20503] IPVS: starting estimator thread 0... [ 728.059762][T26187] IPVS: using max 32 ests per chain, 76800 per kthread [ 728.399538][T26201] ip6erspan1: entered allmulticast mode [ 728.505585][T26208] lo speed is unknown, defaulting to 1000 [ 728.648240][T26214] tipc: Enabling of bearer rejected, failed to enable media [ 728.751077][T26220] __nla_validate_parse: 2 callbacks suppressed [ 728.751095][T26220] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5227'. [ 728.920926][T26208] lo speed is unknown, defaulting to 1000 [ 729.144357][T26237] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5232'. [ 729.207504][ T7722] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 729.324427][T26244] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5233'. [ 730.099986][T26285] netlink: 108 bytes leftover after parsing attributes in process `syz.4.5243'. [ 730.147374][T26286] ipip0: entered promiscuous mode [ 730.153834][T26285] netlink: 'syz.4.5243': attribute type 6 has an invalid length. [ 730.169620][T26285] netlink: 'syz.4.5243': attribute type 7 has an invalid length. [ 730.201404][T26285] netlink: 'syz.4.5243': attribute type 8 has an invalid length. [ 730.230934][T21597] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 730.266312][T26293] netlink: 1960 bytes leftover after parsing attributes in process `syz.2.5247'. [ 730.383234][T26298] No such timeout policy "syz1" [ 731.009111][T26306] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5250'. [ 731.028236][T26306] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5250'. [ 731.038640][T26306] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5250'. [ 735.133029][T26306] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5250'. [ 735.142615][T26306] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5250'. [ 735.142926][T26320] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 735.152174][T26306] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5250'. [ 735.330583][T26332] pim6reg: entered allmulticast mode [ 735.382340][T26339] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5259'. [ 735.404883][T26339] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 735.412314][T26339] IPv6: NLM_F_CREATE should be set when creating new route [ 735.457123][T26339] netlink: 'syz.2.5259': attribute type 1 has an invalid length. [ 735.465172][T26345] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5262'. [ 735.872252][T26372] syzkaller0: entered promiscuous mode [ 735.888343][T26372] syzkaller0: entered allmulticast mode [ 736.013424][T26375] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5267'. [ 736.177329][T26380] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5270'. [ 736.304514][T26380] bond8: option fail_over_mac: invalid value (127) [ 736.345694][T26380] bond8 (unregistering): Released all slaves [ 736.648289][T26397] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5276'. [ 736.663554][T26397] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5276'. [ 736.858215][T26406] netlink: 'syz.0.5280': attribute type 14 has an invalid length. [ 736.869462][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 736.879464][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 736.930355][T26411] x9: renamed from bridge_slave_0 (while UP) [ 737.053286][T26413] sysfs: cannot create duplicate filename '/class/ieee80211/1^!Y [ 737.053286][T26413] 3UH5rBn\' [ 737.083931][T26413] CPU: 1 UID: 0 PID: 26413 Comm: syz.0.5282 Not tainted syzkaller #0 PREEMPT(full) [ 737.083968][T26413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 737.083983][T26413] Call Trace: [ 737.083992][T26413] [ 737.084003][T26413] dump_stack_lvl+0xe8/0x150 [ 737.084040][T26413] sysfs_warn_dup+0x8e/0xa0 [ 737.084071][T26413] sysfs_do_create_link_sd+0xc0/0x110 [ 737.084102][T26413] device_add_class_symlinks+0x1cf/0x240 [ 737.084258][T26413] device_add+0x475/0xbb0 [ 737.084290][T26413] wiphy_register+0x1fb1/0x2fe0 [ 737.084414][T26413] ? __pfx_wiphy_register+0x10/0x10 [ 737.084446][T26413] ? __pfx_netdev_run_todo+0x10/0x10 [ 737.084510][T26413] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 737.084580][T26413] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 737.084677][T26413] ieee80211_register_hw+0x3c53/0x4910 [ 737.084747][T26413] ? ieee80211_register_hw+0x1961/0x4910 [ 737.084793][T26413] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 737.084818][T26413] ? __asan_memset+0x22/0x50 [ 737.084842][T26413] ? __hrtimer_setup+0x1b7/0x260 [ 737.084880][T26413] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 737.084986][T26413] mac80211_hwsim_new_radio+0x3306/0x57b0 [ 737.085048][T26413] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 737.085078][T26413] ? __asan_memcpy+0x40/0x70 [ 737.085106][T26413] hwsim_new_radio_nl+0xd96/0xfa0 [ 737.085147][T26413] genl_family_rcv_msg_doit+0x22a/0x330 [ 737.085181][T26413] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 737.085215][T26413] ? bpf_lsm_capable+0x9/0x20 [ 737.085234][T26413] ? security_capable+0x7e/0x2c0 [ 737.085297][T26413] genl_rcv_msg+0x61c/0x7a0 [ 737.085325][T26413] ? __pfx_genl_rcv_msg+0x10/0x10 [ 737.085348][T26413] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 737.085381][T26413] netlink_rcv_skb+0x232/0x4b0 [ 737.085398][T26413] ? __pfx_genl_rcv_msg+0x10/0x10 [ 737.085419][T26413] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 737.085455][T26413] ? down_read+0x270/0x2e0 [ 737.085515][T26413] ? genl_rcv+0xd/0x40 [ 737.085540][T26413] genl_rcv+0x28/0x40 [ 737.085562][T26413] netlink_unicast+0x75c/0x8e0 [ 737.085589][T26413] netlink_sendmsg+0x813/0xb40 [ 737.085618][T26413] ? __pfx_netlink_sendmsg+0x10/0x10 [ 737.085644][T26413] ? aa_sock_msg_perm+0xf1/0x1b0 [ 737.085672][T26413] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 737.085703][T26413] ____sys_sendmsg+0x972/0x9f0 [ 737.085726][T26413] ? __might_fault+0xaf/0x130 [ 737.085776][T26413] ? __pfx_____sys_sendmsg+0x10/0x10 [ 737.085807][T26413] ? import_iovec+0x73/0xa0 [ 737.085837][T26413] ___sys_sendmsg+0x2a5/0x360 [ 737.085853][T26413] ? __lock_acquire+0x6b5/0x2cf0 [ 737.085880][T26413] ? __pfx____sys_sendmsg+0x10/0x10 [ 737.085908][T26413] ? futex_wake+0x4ac/0x580 [ 737.085972][T26413] ? __fget_files+0x2a/0x420 [ 737.085996][T26413] ? __fget_files+0x3a0/0x420 [ 737.086031][T26413] __x64_sys_sendmsg+0x1bd/0x2a0 [ 737.086059][T26413] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 737.086090][T26413] ? rcu_is_watching+0x15/0xb0 [ 737.086135][T26413] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 737.086160][T26413] do_syscall_64+0x15f/0xf80 [ 737.086180][T26413] ? trace_irq_disable+0x3b/0x140 [ 737.086211][T26413] ? clear_bhb_loop+0x40/0x90 [ 737.086234][T26413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 737.086250][T26413] RIP: 0033:0x7fc29bf9ce59 [ 737.086272][T26413] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 737.086292][T26413] RSP: 002b:00007fc29ceda028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 737.086320][T26413] RAX: ffffffffffffffda RBX: 00007fc29c215fa0 RCX: 00007fc29bf9ce59 [ 737.086339][T26413] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000006 [ 737.086352][T26413] RBP: 00007fc29c032d6f R08: 0000000000000000 R09: 0000000000000000 [ 737.086364][T26413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 737.086378][T26413] R13: 00007fc29c216038 R14: 00007fc29c215fa0 R15: 00007ffdf70846b8 [ 737.086413][T26413] [ 737.494520][T26419] pim6reg: entered allmulticast mode [ 737.506574][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 737.542207][T26422] pim6reg: left allmulticast mode [ 737.776272][T26430] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5286'. [ 738.983549][T26453] syzkaller1: entered promiscuous mode [ 738.989220][T26453] syzkaller1: entered allmulticast mode [ 739.131587][T26479] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 739.179461][T26473] ip6gre2: entered promiscuous mode [ 739.187317][T26473] ip6gre2: entered allmulticast mode [ 739.768007][T26509] nbd: must specify at least one socket [ 739.774675][T26510] netlink: 'syz.4.5305': attribute type 9 has an invalid length. [ 739.832541][T26511] ip6gre1: entered promiscuous mode [ 739.859849][T26511] ip6gre1: entered allmulticast mode [ 739.932086][ T34] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 739.953692][ T34] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 739.962644][ T7192] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 740.106326][T26519] vlan5: entered promiscuous mode [ 740.128159][T26519] bond_slave_1: entered promiscuous mode [ 740.342945][T26528] bridge_slave_1: left allmulticast mode [ 740.367603][T26528] bridge_slave_1: left promiscuous mode [ 740.383504][T26528] bridge0: port 2(bridge_slave_1) entered disabled state [ 740.434733][T26528] bond0: (slave bond_slave_0): Releasing backup interface [ 740.458431][T26528] bond0: (slave bond_slave_1): Releasing backup interface [ 740.513561][T26528] `: Port device team_slave_0 removed [ 740.519319][T26543] __nla_validate_parse: 5 callbacks suppressed [ 740.519339][T26543] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5317'. [ 740.536314][ T7192] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 740.556526][T26528] `: Port device team_slave_1 removed [ 740.565990][T26528] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 740.679105][T26523] bridge0: port 2(bridge_slave_1) entered disabled state [ 740.686791][T26523] bridge0: port 1(1x9) entered disabled state [ 740.711212][T26523] batman_adv: batadv0: Interface deactivated: dummy0 [ 740.733444][T26554] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5320'. [ 740.771712][T26523] A link change request failed with some changes committed already. Interface 1x9 may have been left with an inconsistent configuration, please check. [ 740.799851][ T7722] lo speed is unknown, defaulting to 1000 [ 740.813167][T26548] tap0: tun_chr_ioctl cmd 1074025677 [ 740.818950][ T7722] syz0: Port: 1 Link DOWN [ 740.826747][T26548] tap0: linktype set to 6 [ 740.838416][ T7722] lo speed is unknown, defaulting to 1000 [ 740.853438][T26557] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5319'. [ 740.893724][T26557] xt_TCPMSS: Only works on TCP SYN packets [ 740.946700][ T7722] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 740.977477][T26572] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5324'. [ 740.996996][T26572] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5324'. [ 741.205543][T26580] netlink: 'syz.3.5325': attribute type 1 has an invalid length. [ 741.370255][T26595] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5327'. [ 741.824078][T26579] bridge_slave_1: left allmulticast mode [ 741.889424][T26613] IPVS: set_ctl: invalid protocol: 47 10.1.1.2:20004 [ 742.085514][T26579] tipc: Resetting bearer [ 742.138813][T26579] veth1_virt_wifi: left allmulticast mode [ 742.151546][T26579] bridge1: left promiscuous mode [ 742.157115][T26579] bridge1: left allmulticast mode [ 742.162577][T26579] bridge2: left promiscuous mode [ 742.168075][T26579] bridge2: left allmulticast mode [ 742.173493][T26579] bridge4: left promiscuous mode [ 742.178867][T26579] bridge4: left allmulticast mode [ 742.185728][T26579] bond2: left promiscuous mode [ 742.249219][T26583] sit0: left promiscuous mode [ 742.269382][T26583] 8021q: adding VLAN 0 to HW filter on device bond0 [ 742.322139][T26583] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 742.348662][T26590] gretap1: entered allmulticast mode [ 742.490991][T26591] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 742.504673][T26591] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 742.521465][T26620] netlink: 'syz.2.5335': attribute type 7 has an invalid length. [ 742.530109][T26620] netlink: 'syz.2.5335': attribute type 8 has an invalid length. [ 742.591613][T16831] bridge0: port 1(bridge_slave_0) entered blocking state [ 742.599004][T16831] bridge0: port 1(bridge_slave_0) entered forwarding state [ 742.602958][T26623] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5335'. [ 742.622126][T26623] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5335'. [ 742.637224][T26623] netlink: 58 bytes leftover after parsing attributes in process `syz.2.5335'. [ 742.829152][T26630] netlink: 'syz.1.5336': attribute type 290 has an invalid length. [ 743.421804][T26642] netlink: 'syz.3.5342': attribute type 4 has an invalid length. [ 743.523006][T26658] bridge0: port 1(bridge_slave_0) entered disabled state [ 744.008100][T26658] bond2: left promiscuous mode [ 744.011700][T23626] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x30 [ 744.021703][T26658] macvtap1: left promiscuous mode [ 744.030505][T26658] macvtap1: left allmulticast mode [ 744.038588][T26658] geneve2: left promiscuous mode [ 744.043673][T26658] geneve2: left allmulticast mode [ 744.072847][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 744.084980][T26658] ip6gre1: left promiscuous mode [ 744.096739][T26658] ip6gre1: left allmulticast mode [ 744.109680][T26658] bridge5: left allmulticast mode [ 744.161251][T26658] bond5: left promiscuous mode [ 744.211291][T26658] ip6gre2: left promiscuous mode [ 744.230120][T26658] ip6gre2: left allmulticast mode [ 744.244712][T26658] ip6gre3: left promiscuous mode [ 744.261685][T26658] ip6gre3: left allmulticast mode [ 744.344191][T26684] netlink: 'syz.2.5350': attribute type 1 has an invalid length. [ 744.377826][T21597] lo speed is unknown, defaulting to 1000 [ 744.395915][T26649] lo speed is unknown, defaulting to 1000 [ 744.395942][T23626] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 744.402922][T21597] sqz0: Port: 1 Link DOWN [ 744.457474][T23626] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 744.488087][T23626] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 744.519969][T23626] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 744.617832][T26684] bond7: entered promiscuous mode [ 744.650842][T26684] 8021q: adding VLAN 0 to HW filter on device bond7 [ 744.687493][T21598] lo speed is unknown, defaulting to 1000 [ 744.791409][T26686] veth9: entered promiscuous mode [ 744.806897][T26686] veth9: entered allmulticast mode [ 744.834652][T26686] bond7: (slave veth9): Enslaving as a backup interface with a down link [ 744.847450][T23626] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 744.866900][T23626] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 744.869577][T26697] netlink: 'syz.1.5352': attribute type 1 has an invalid length. [ 744.886790][T23626] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 744.896608][T23626] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 744.928024][T26649] lo speed is unknown, defaulting to 1000 [ 744.939017][T26656] lo speed is unknown, defaulting to 1000 [ 745.058024][T26697] 8021q: adding VLAN 0 to HW filter on device bond8 [ 745.119619][T26703] syzkaller0: entered promiscuous mode [ 745.125323][T26703] syzkaller0: entered allmulticast mode [ 745.195860][T26707] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5355'. [ 745.278727][T26707] 8021q: adding VLAN 0 to HW filter on device bond8 [ 745.550603][T26724] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 745.598394][T26725] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 745.716060][T26656] lo speed is unknown, defaulting to 1000 [ 745.776943][T26733] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5362'. [ 745.809851][T26733] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5362'. [ 745.995234][T26733] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5362'. [ 746.006999][T26733] syzkaller0: entered promiscuous mode [ 746.015984][T26733] syzkaller0: entered allmulticast mode [ 746.421084][T26758] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5367'. [ 746.553230][T26763] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 746.977920][T26773] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5371'. [ 746.999587][T26773] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5371'. [ 747.021346][T26773] netlink: 'syz.1.5371': attribute type 14 has an invalid length. [ 747.050755][T26773] netlink: 'syz.1.5371': attribute type 12 has an invalid length. [ 747.067605][T26770] netlink: 'syz.3.5370': attribute type 1 has an invalid length. [ 747.077761][T26770] netlink: 'syz.3.5370': attribute type 2 has an invalid length. [ 747.096403][T26770] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5370'. [ 747.123477][T26774] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5370'. [ 747.201037][T26775] bridge0: port 3(ipvlan2) entered blocking state [ 747.210722][T26775] bridge0: port 3(ipvlan2) entered disabled state [ 747.214039][T26785] netlink: 212320 bytes leftover after parsing attributes in process `syz.0.5374'. [ 747.218944][T26775] ipvlan2: entered allmulticast mode [ 747.256158][T26775] bridge0: entered allmulticast mode [ 747.309362][T26775] ipvlan2: left allmulticast mode [ 747.322036][T26775] bridge0: left allmulticast mode [ 748.017840][T26811] netlink: 'syz.3.5379': attribute type 7 has an invalid length. [ 748.027290][T26811] netlink: 'syz.3.5379': attribute type 8 has an invalid length. [ 748.086928][T26802] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5376'. [ 748.103884][T26811] team_slave_1: Caught tx_queue_len zero misconfig [ 748.467482][T26839] netlink: 'syz.3.5386': attribute type 4 has an invalid length. [ 748.489467][T26842] hsr0: entered promiscuous mode [ 748.496302][T26839] netlink: 'syz.3.5386': attribute type 4 has an invalid length. [ 748.637657][T26849] syzkaller0: entered promiscuous mode [ 748.645775][T26849] syzkaller0: entered allmulticast mode [ 748.717485][T26849] tipc: Enabled bearer , priority 0 [ 748.753503][T26848] tipc: Resetting bearer [ 748.822094][T26848] tipc: Disabling bearer [ 748.846312][T26862] xt_hashlimit: size too large, truncated to 1048576 [ 748.913743][T26866] netlink: 'syz.2.5394': attribute type 1 has an invalid length. [ 749.064853][T26876] netlink: 'syz.1.5398': attribute type 1 has an invalid length. [ 749.111608][T26869] xt_CT: No such helper "snmp" [ 749.217126][T26885] netlink: zone id is out of range [ 749.236495][T26885] netlink: zone id is out of range [ 749.247173][T26885] netlink: zone id is out of range [ 749.271919][T26885] netlink: zone id is out of range [ 749.304309][T26885] netlink: zone id is out of range [ 749.329383][T26885] netlink: zone id is out of range [ 749.353693][T26885] netlink: zone id is out of range [ 749.372932][T26885] netlink: zone id is out of range [ 749.395030][T26885] netlink: zone id is out of range [ 749.567294][T26900] erspan0: left promiscuous mode [ 749.649878][T26900] ip6gretap0: left promiscuous mode [ 749.695023][T26900] 8021q: adding VLAN 0 to HW filter on device bond0 [ 749.719149][T26900] batman_adv: batadv0: Interface activated: dummy0 [ 749.748952][T26900] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 749.953557][T26900] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 749.976169][T26900] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 750.017895][T26900] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 750.056175][T26900] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 750.088053][T20503] lo speed is unknown, defaulting to 1000 [ 750.119454][T20503] syz0: Port: 1 Link ACTIVE [ 750.276120][ T6373] bridge0: port 1(1x9) entered blocking state [ 750.282782][ T6373] bridge0: port 1(1x9) entered forwarding state [ 750.340865][ T6373] bridge0: port 2(bridge_slave_1) entered blocking state [ 750.348122][ T6373] bridge0: port 2(bridge_slave_1) entered forwarding state [ 750.532472][T20503] lo speed is unknown, defaulting to 1000 [ 750.845392][T26956] __nla_validate_parse: 12 callbacks suppressed [ 750.845413][T26956] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5412'. [ 750.977501][T26966] ip6gre2: entered promiscuous mode [ 750.995898][T26964] sit0: Caught tx_queue_len zero misconfig [ 751.211733][T26983] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5419'. [ 751.230186][T26983] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5419'. [ 751.325579][T26983] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5419'. [ 751.337786][T26983] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5419'. [ 751.356992][T26983] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5419'. [ 752.226619][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 754.222779][T26994] ip6gre4: entered promiscuous mode [ 754.229078][T26994] ip6gre4: entered allmulticast mode [ 754.237707][T26999] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 754.264963][T27001] vlan3: entered allmulticast mode [ 754.287900][T27001] veth0_to_bond: entered allmulticast mode [ 754.431129][ T6373] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 754.452512][ T6373] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 754.461528][T21597] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 754.693970][T27029] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5430'. [ 754.727692][T27029] validate_nla: 2 callbacks suppressed [ 754.727713][T27029] netlink: 'syz.1.5430': attribute type 1 has an invalid length. [ 754.757678][T27029] netlink: 'syz.1.5430': attribute type 2 has an invalid length. [ 754.817370][ T30] audit: type=1804 audit(1779465124.146:36): pid=27021 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.5428" name="/newroot/513/memory.events" dev="tmpfs" ino=2677 res=1 errno=0 [ 754.881625][T27044] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5430'. [ 755.105012][T21597] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 755.347292][T21597] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 755.425728][T27030] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 755.901417][T27061] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5438'. [ 755.963635][T27061] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 756.222747][T27068] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5442'. [ 756.241816][T27069] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5441'. [ 756.281153][T27068] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5442'. [ 756.312323][T27068] netlink: 'syz.2.5442': attribute type 11 has an invalid length. [ 756.393119][T16831] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 756.402496][T27068] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5442'. [ 756.426485][T16831] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 756.445275][T27068] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5442'. [ 756.456583][T16831] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 756.480665][T16831] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 756.493283][T27068] netlink: 'syz.2.5442': attribute type 11 has an invalid length. [ 756.832733][ T30] audit: type=1107 audit(1779465126.166:37): pid=27090 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 756.995049][T27105] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5447'. [ 757.073320][T27101] xt_CT: No such helper "netbios-ns" [ 757.240871][T27114] ipip2: entered promiscuous mode [ 757.257623][T27111] lo speed is unknown, defaulting to 1000 [ 757.393218][T27119] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5455'. [ 757.556326][T27130] netlink: 'syz.1.5458': attribute type 1 has an invalid length. [ 757.790266][T27130] ip6erspan1: entered allmulticast mode [ 757.843406][T27111] lo speed is unknown, defaulting to 1000 [ 758.150982][T27154] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5465'. [ 758.254922][T27160] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5466'. [ 758.292662][T27160] netlink: 'syz.3.5466': attribute type 2 has an invalid length. [ 758.307530][ C1] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 758.333472][T27160] netlink: 'syz.3.5466': attribute type 1 has an invalid length. [ 758.352620][T27160] netlink: 'syz.3.5466': attribute type 1 has an invalid length. [ 758.484207][T27152] bridge0: port 2(bridge_slave_1) entered disabled state [ 758.491639][T27152] bridge0: port 1(bridge_slave_0) entered disabled state [ 758.790829][T27152] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 758.818598][T27152] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 759.344969][T27178] netlink: 'syz.0.5471': attribute type 84 has an invalid length. [ 759.980957][T27202] batman_adv: batadv0: Adding interface: macvtap1 [ 760.006447][T27202] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 760.062439][T27202] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 760.587747][T21597] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 760.625215][T27226] 8021q: adding VLAN 0 to HW filter on device bond9 [ 760.945016][T27252] __nla_validate_parse: 5 callbacks suppressed [ 760.945038][T27252] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5486'. [ 761.088281][T27264] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5488'. [ 761.175335][T27264] netlink: 'syz.0.5488': attribute type 1 has an invalid length. [ 761.351946][T27268] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5488'. [ 761.593446][ T7192] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 765.420312][ T34] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 765.531478][T27264] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 765.533230][T27253] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 765.782032][T27288] netlink: 'syz.4.5492': attribute type 1 has an invalid length. [ 766.307623][ C1] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 766.410976][T27319] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5500'. [ 766.552847][T23626] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 766.595669][T23626] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 766.634238][T27331] netlink: 840 bytes leftover after parsing attributes in process `syz.4.5500'. [ 766.986780][T27338] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5505'. [ 767.257941][T27350] : renamed from lo [ 767.433381][T20505] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 767.525245][T27365] netlink: 'syz.3.5514': attribute type 5 has an invalid length. [ 767.599235][T27371] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5515'. [ 767.641205][T27371] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5515'. [ 767.787123][T27365] dvmrp0: left allmulticast mode [ 768.023362][T27397] : entered promiscuous mode [ 768.198612][T27405] xt_connbytes: Forcing CT accounting to be enabled [ 768.455021][T27415] netlink: 'syz.0.5527': attribute type 1 has an invalid length. [ 768.479930][T27415] net_ratelimit: 347 callbacks suppressed [ 768.479949][T27415] openvswitch: netlink: Missing valid actions attribute. [ 768.523026][T27424] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5529'. [ 768.532784][T27415] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 768.564069][T27428] IPVS: set_ctl: invalid protocol: 50 255.255.255.255:20001 [ 768.670893][T27444] netlink: 'syz.3.5532': attribute type 7 has an invalid length. [ 768.728864][T27444] netlink: 29 bytes leftover after parsing attributes in process `syz.3.5532'. [ 768.766232][T27444] netlink: 140 bytes leftover after parsing attributes in process `syz.3.5532'. [ 768.870825][T27457] netlink: 'syz.2.5536': attribute type 1 has an invalid length. [ 768.895498][T27457] IPv6: sit2: Disabled Multicast RS [ 768.931282][T27458] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 768.988412][ T7192] lo speed is unknown, defaulting to 1000 [ 768.994364][ T7192] syz0: Port: 1 Link DOWN [ 769.002374][T21598] lo speed is unknown, defaulting to 1000 [ 769.015116][T27458] sctp: [Deprecated]: syz.1.5535 (pid 27458) Use of int in maxseg socket option. [ 769.015116][T27458] Use struct sctp_assoc_value instead [ 769.072616][T27458] netlink: 232 bytes leftover after parsing attributes in process `syz.1.5535'. [ 769.091708][T27464] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5538'. [ 769.130194][T27464] netlink: 'syz.2.5538': attribute type 5 has an invalid length. [ 769.200907][T27464] geneve3: entered promiscuous mode [ 769.225395][T27479] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 769.229614][T27464] geneve3: entered allmulticast mode [ 769.273420][ T6373] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 769.302848][ T6373] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 769.330177][ T6373] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 769.357695][ T6373] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 769.578041][T27498] gtp1: entered promiscuous mode [ 769.589533][T27498] gtp1: entered allmulticast mode [ 770.306593][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 770.365172][T27537] netlink: 'syz.2.5556': attribute type 21 has an invalid length. [ 770.551569][T27539] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 770.600550][T27539] bridge3: entered allmulticast mode [ 770.817013][T27565] netlink: 'syz.3.5564': attribute type 9 has an invalid length. [ 770.837046][T27565] netlink: 'syz.3.5564': attribute type 6 has an invalid length. [ 770.855605][T27565] netlink: 'syz.3.5564': attribute type 7 has an invalid length. [ 770.864008][T27565] netlink: 'syz.3.5564': attribute type 8 has an invalid length. [ 771.067752][T27580] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 771.104867][T27580] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 771.285785][T27575] bridge0: entered allmulticast mode [ 771.662715][T27559] speed is unknown, defaulting to 1000 [ 771.804061][T27588] __nla_validate_parse: 6 callbacks suppressed [ 771.804083][T27588] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5566'. [ 773.646024][T27559] lo speed is unknown, defaulting to 1000 [ 773.798497][T27596] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5569'. [ 773.864984][T27600] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5569'. [ 773.916462][T27599] xt_CT: No such helper "snmp_trap" [ 773.931537][T27600] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 774.119149][T27615] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5572'. [ 774.339926][T27625] validate_nla: 1 callbacks suppressed [ 774.344144][T27625] netlink: 'syz.2.5575': attribute type 13 has an invalid length. [ 774.395424][T27625] netlink: 'syz.2.5575': attribute type 17 has an invalid length. [ 774.404561][T27628] netlink: 181284 bytes leftover after parsing attributes in process `syz.4.5576'. [ 774.505817][T27633] xt_hashlimit: size too large, truncated to 1048576 [ 774.544294][T27632] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5575'. [ 775.217978][T27639] netlink: 180 bytes leftover after parsing attributes in process `syz.1.5578'. [ 775.227795][T27639] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5578'. [ 775.362346][T27631] pimreg: entered allmulticast mode [ 775.434539][T16831] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 775.453346][T16831] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 256 - 0 [ 775.462079][T16831] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 775.470968][T16831] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 256 - 0 [ 775.486796][T27631] pimreg: left allmulticast mode [ 775.571491][T16831] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 775.593016][T16831] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 256 - 0 [ 775.612985][T16831] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 775.639376][T16831] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 256 - 0 [ 775.681058][T27654] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5581'. [ 775.693203][T27643] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5579'. [ 776.429881][T27649] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 776.681294][T27695] v: renamed from gretap0 [ 777.100101][T27721] __nla_validate_parse: 2 callbacks suppressed [ 777.100121][T27721] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5593'. [ 777.826696][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 778.502907][T27789] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5610'. [ 778.524320][T27788] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5610'. [ 778.543400][T27791] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5611'. [ 778.578266][T27791] netlink: 'syz.2.5611': attribute type 11 has an invalid length. [ 778.602790][T27791] netlink: 'syz.2.5611': attribute type 4 has an invalid length. [ 778.633435][T27791] netlink: 199768 bytes leftover after parsing attributes in process `syz.2.5611'. [ 778.729396][T27801] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5614'. [ 778.745354][T27804] netlink: 'syz.2.5615': attribute type 5 has an invalid length. [ 778.790478][T27805] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5599'. [ 778.838735][T27808] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5616'. [ 778.865255][T27808] netlink: 'syz.1.5616': attribute type 39 has an invalid length. [ 779.083784][T27816] netlink: 'syz.3.5618': attribute type 1 has an invalid length. [ 779.281621][T27823] netlink: 264 bytes leftover after parsing attributes in process `syz.1.5619'. [ 779.291587][T27816] 8021q: adding VLAN 0 to HW filter on device bond5 [ 779.981310][T27839] FAULT_INJECTION: forcing a failure. [ 779.981310][T27839] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 780.023766][T27839] CPU: 1 UID: 0 PID: 27839 Comm: syz.1.5623 Not tainted syzkaller #0 PREEMPT(full) [ 780.023795][T27839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 780.023807][T27839] Call Trace: [ 780.023816][T27839] [ 780.023824][T27839] dump_stack_lvl+0xe8/0x150 [ 780.023855][T27839] should_fail_ex+0x412/0x560 [ 780.023888][T27839] _copy_from_user+0x2d/0xb0 [ 780.023915][T27839] __sys_bpf+0x229/0x950 [ 780.023945][T27839] ? __pfx___sys_bpf+0x10/0x10 [ 780.023985][T27839] ? ksys_write+0x242/0x270 [ 780.024013][T27839] ? __pfx_ksys_write+0x10/0x10 [ 780.024040][T27839] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 780.024062][T27839] __x64_sys_bpf+0x7c/0x90 [ 780.024086][T27839] do_syscall_64+0x15f/0xf80 [ 780.024108][T27839] ? trace_irq_disable+0x3b/0x140 [ 780.024135][T27839] ? clear_bhb_loop+0x40/0x90 [ 780.024158][T27839] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 780.024175][T27839] RIP: 0033:0x7f666119ce59 [ 780.024194][T27839] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 780.024210][T27839] RSP: 002b:00007f6661fab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 780.024231][T27839] RAX: ffffffffffffffda RBX: 00007f6661415fa0 RCX: 00007f666119ce59 [ 780.024248][T27839] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 780.024259][T27839] RBP: 00007f6661fab090 R08: 0000000000000000 R09: 0000000000000000 [ 780.024269][T27839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 780.024297][T27839] R13: 00007f6661416038 R14: 00007f6661415fa0 R15: 00007fffcd1ffde8 [ 780.024320][T27839] [ 780.232210][T27842] bond6: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 780.249973][T27842] bond6 (unregistering): Released all slaves [ 780.557961][ T5634] block nbd1: Receive control failed (result -22) [ 780.586489][T27843] nbd1: detected capacity change from 0 to 32 [ 780.602877][T27584] block nbd1: Dead connection, failed to find a fallback [ 780.643308][T27584] block nbd1: shutting down sockets [ 780.653484][T27584] blk_print_req_error: 138 callbacks suppressed [ 780.653505][T27584] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 780.669934][T27584] buffer_io_error: 138 callbacks suppressed [ 780.669957][T27584] Buffer I/O error on dev nbd1, logical block 0, async page read [ 780.713466][T27584] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 780.735895][T27584] Buffer I/O error on dev nbd1, logical block 0, async page read [ 780.751814][T27584] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 780.783232][T27584] Buffer I/O error on dev nbd1, logical block 0, async page read [ 780.807704][T27584] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 780.836496][T27584] Buffer I/O error on dev nbd1, logical block 0, async page read [ 780.868376][T27584] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 780.910382][T27584] Buffer I/O error on dev nbd1, logical block 0, async page read [ 780.939760][T27584] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 780.969033][T27584] Buffer I/O error on dev nbd1, logical block 0, async page read [ 780.993588][T27584] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 781.006154][T27877] speed is unknown, defaulting to 1000 [ 781.022530][T27584] Buffer I/O error on dev nbd1, logical block 0, async page read [ 781.058070][T27584] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 781.086187][T27584] Buffer I/O error on dev nbd1, logical block 0, async page read [ 781.111289][T27584] ldm_validate_partition_table(): Disk read failed. [ 781.134770][T27584] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 781.162221][T27584] Buffer I/O error on dev nbd1, logical block 0, async page read [ 781.188183][T27584] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 781.212807][T27584] Buffer I/O error on dev nbd1, logical block 0, async page read [ 781.237925][T27584] Dev nbd1: unable to read RDB block 0 [ 781.254796][T27584] nbd1: unable to read partition table [ 781.294668][T27584] ldm_validate_partition_table(): Disk read failed. [ 781.316139][T27584] Dev nbd1: unable to read RDB block 0 [ 781.334820][T27584] nbd1: unable to read partition table [ 781.820721][T27877] lo speed is unknown, defaulting to 1000 [ 782.004959][T27894] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5638'. [ 782.094805][T23626] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 782.112811][T23626] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 782.153700][T23626] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 782.196010][T23626] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 782.437725][T27911] __nla_validate_parse: 4 callbacks suppressed [ 782.437746][T27911] netlink: 256 bytes leftover after parsing attributes in process `syz.3.5640'. [ 782.469371][T27911] netlink: 256 bytes leftover after parsing attributes in process `syz.3.5640'. [ 784.424897][ T5634] block nbd2: Receive control failed (result -107) [ 784.843209][T27972] netlink: 'syz.1.5658': attribute type 8 has an invalid length. [ 785.056583][T27983] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5663'. [ 785.093446][T27979] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5662'. [ 785.110798][T27979] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5662'. [ 785.123694][T27979] netlink: 'syz.1.5662': attribute type 4 has an invalid length. [ 785.164368][T27990] netlink: 'syz.3.5663': attribute type 1 has an invalid length. [ 785.202783][T27990] 8021q: adding VLAN 0 to HW filter on device bond6 [ 785.222864][T27983] netlink: 'syz.3.5663': attribute type 1 has an invalid length. [ 785.239872][T27983] netlink: 'syz.3.5663': attribute type 2 has an invalid length. [ 785.258544][T27983] netlink: 'syz.3.5663': attribute type 1 has an invalid length. [ 785.330831][T27983] bond6: (slave batadv1): Opening slave failed [ 785.344342][T28002] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5668'. [ 785.459202][T28006] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5669'. [ 785.711497][T28016] speed is unknown, defaulting to 1000 [ 785.722185][T28024] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5675'. [ 785.745874][T28021] xt_hashlimit: size too large, truncated to 1048576 [ 786.109049][T28039] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5679'. [ 786.255074][T28029] speed is unknown, defaulting to 1000 [ 786.263015][T28016] lo speed is unknown, defaulting to 1000 [ 786.308220][T28047] FAULT_INJECTION: forcing a failure. [ 786.308220][T28047] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 786.329637][T28047] CPU: 1 UID: 0 PID: 28047 Comm: syz.1.5683 Not tainted syzkaller #0 PREEMPT(full) [ 786.329665][T28047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 786.329677][T28047] Call Trace: [ 786.329685][T28047] [ 786.329693][T28047] dump_stack_lvl+0xe8/0x150 [ 786.329722][T28047] should_fail_ex+0x412/0x560 [ 786.329753][T28047] _copy_to_user+0x31/0xb0 [ 786.329781][T28047] bpf_test_finish+0x22c/0x6b0 [ 786.329811][T28047] ? __pfx____migrate_enable+0x10/0x10 [ 786.329837][T28047] ? __pfx_bpf_test_finish+0x10/0x10 [ 786.329875][T28047] bpf_prog_test_run_flow_dissector+0x478/0x610 [ 786.329911][T28047] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 786.329937][T28047] ? __fget_files+0x2a/0x420 [ 786.329966][T28047] ? __fget_files+0x2a/0x420 [ 786.329993][T28047] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 786.330017][T28047] bpf_prog_test_run+0x2c7/0x340 [ 786.330041][T28047] __sys_bpf+0x643/0x950 [ 786.330072][T28047] ? __pfx___sys_bpf+0x10/0x10 [ 786.330122][T28047] ? ksys_write+0x242/0x270 [ 786.330147][T28047] ? __pfx_ksys_write+0x10/0x10 [ 786.330177][T28047] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 786.330198][T28047] __x64_sys_bpf+0x7c/0x90 [ 786.330224][T28047] do_syscall_64+0x15f/0xf80 [ 786.330245][T28047] ? clear_bhb_loop+0x40/0x90 [ 786.330269][T28047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 786.330287][T28047] RIP: 0033:0x7f666119ce59 [ 786.330306][T28047] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 786.330322][T28047] RSP: 002b:00007f6661fab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 786.330342][T28047] RAX: ffffffffffffffda RBX: 00007f6661415fa0 RCX: 00007f666119ce59 [ 786.330357][T28047] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 786.330369][T28047] RBP: 00007f6661fab090 R08: 0000000000000000 R09: 0000000000000000 [ 786.330381][T28047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 786.330392][T28047] R13: 00007f6661416038 R14: 00007f6661415fa0 R15: 00007fffcd1ffde8 [ 786.330423][T28047] [ 786.772399][T28059] netlink: 'syz.2.5686': attribute type 8 has an invalid length. [ 786.809949][T28059] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5686'. [ 786.840563][T28059] veth1_to_team: entered promiscuous mode [ 786.862580][T28059] veth1_to_team: left promiscuous mode [ 787.053615][T28029] lo speed is unknown, defaulting to 1000 [ 787.054042][T28068] tipc: Enabled bearer , priority 0 [ 787.133152][T28068] tipc: Disabling bearer [ 787.466441][T28083] [ 787.468806][T28083] ====================================================== [ 787.475985][T28083] WARNING: possible circular locking dependency detected [ 787.483043][T28083] syzkaller #0 Not tainted [ 787.487590][T28083] ------------------------------------------------------ [ 787.494715][T28083] syz.0.5693/28083 is trying to acquire lock: [ 787.500809][T28083] ffff888011cd6418 (set->srcu){.+.+}-{0:0}, at: __synchronize_srcu+0xb6/0x300 [ 787.509736][T28083] [ 787.509736][T28083] but task is already holding lock: [ 787.517112][T28083] ffff88802a7a46b8 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1b3/0x450 [ 787.526889][T28083] [ 787.526889][T28083] which lock already depends on the new lock. [ 787.526889][T28083] [ 787.537663][T28083] [ 787.537663][T28083] the existing dependency chain (in reverse order) is: [ 787.546939][T28083] [ 787.546939][T28083] -> #6 (&q->elevator_lock){+.+.}-{4:4}: [ 787.554798][T28083] __mutex_lock+0x1a3/0x1550 [ 787.560109][T28083] elevator_change+0x1b3/0x450 [ 787.565432][T28083] elevator_set_none+0xb5/0x140 [ 787.570842][T28083] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 787.577296][T28083] nbd_start_device+0x17f/0xb10 [ 787.582827][T28083] nbd_genl_connect+0x165b/0x1cf0 [ 787.588411][T28083] genl_family_rcv_msg_doit+0x22a/0x330 [ 787.594596][T28083] genl_rcv_msg+0x61c/0x7a0 [ 787.599666][T28083] netlink_rcv_skb+0x232/0x4b0 [ 787.605015][T28083] genl_rcv+0x28/0x40 [ 787.609552][T28083] netlink_unicast+0x75c/0x8e0 [ 787.614859][T28083] netlink_sendmsg+0x813/0xb40 [ 787.620435][T28083] ____sys_sendmsg+0x972/0x9f0 [ 787.625764][T28083] ___sys_sendmsg+0x2a5/0x360 [ 787.631003][T28083] __x64_sys_sendmsg+0x1bd/0x2a0 [ 787.636510][T28083] do_syscall_64+0x15f/0xf80 [ 787.641663][T28083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 787.648209][T28083] [ 787.648209][T28083] -> #5 (&q->q_usage_counter(io)#70){++++}-{0:0}: [ 787.657048][T28083] blk_alloc_queue+0x546/0x680 [ 787.662492][T28083] __blk_mq_alloc_disk+0x197/0x390 [ 787.668170][T28083] nbd_dev_add+0x499/0xb50 [ 787.673135][T28083] nbd_genl_connect+0x962/0x1cf0 [ 787.678620][T28083] genl_family_rcv_msg_doit+0x22a/0x330 [ 787.684726][T28083] genl_rcv_msg+0x61c/0x7a0 [ 787.689775][T28083] netlink_rcv_skb+0x232/0x4b0 [ 787.695098][T28083] genl_rcv+0x28/0x40 [ 787.699629][T28083] netlink_unicast+0x75c/0x8e0 [ 787.705028][T28083] netlink_sendmsg+0x813/0xb40 [ 787.710338][T28083] ____sys_sendmsg+0x972/0x9f0 [ 787.715654][T28083] ___sys_sendmsg+0x2a5/0x360 [ 787.720889][T28083] __x64_sys_sendmsg+0x1bd/0x2a0 [ 787.726394][T28083] do_syscall_64+0x15f/0xf80 [ 787.731516][T28083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 787.738020][T28083] [ 787.738020][T28083] -> #4 (fs_reclaim){+.+.}-{0:0}: [ 787.745253][T28083] fs_reclaim_acquire+0x71/0x100 [ 787.750771][T28083] kmem_cache_alloc_node_noprof+0x4a/0x690 [ 787.757286][T28083] __alloc_skb+0x1d0/0x7d0 [ 787.762228][T28083] __ip6_append_data+0x2d3c/0x3f60 [ 787.768048][T28083] ip6_append_data+0x10f/0x280 [ 787.773601][T28083] rawv6_sendmsg+0x12d3/0x18e0 [ 787.778988][T28083] ____sys_sendmsg+0x80a/0x9f0 [ 787.784339][T28083] ___sys_sendmsg+0x2a5/0x360 [ 787.789551][T28083] __x64_sys_sendmsg+0x1bd/0x2a0 [ 787.795155][T28083] do_syscall_64+0x15f/0xf80 [ 787.800359][T28083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 787.806899][T28083] [ 787.806899][T28083] -> #3 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 787.814676][T28083] lock_sock_nested+0x41/0x100 [ 787.819972][T28083] inet_shutdown+0x6a/0x390 [ 787.825021][T28083] nbd_mark_nsock_dead+0x2e9/0x560 [ 787.830694][T28083] recv_work+0x1c2e/0x1d40 [ 787.835655][T28083] process_scheduled_works+0xb5d/0x1860 [ 787.841730][T28083] worker_thread+0xa53/0xfc0 [ 787.846867][T28083] kthread+0x389/0x470 [ 787.851459][T28083] ret_from_fork+0x514/0xb70 [ 787.856606][T28083] ret_from_fork_asm+0x1a/0x30 [ 787.861905][T28083] [ 787.861905][T28083] -> #2 (&nsock->tx_lock){+.+.}-{4:4}: [ 787.869628][T28083] __mutex_lock+0x1a3/0x1550 [ 787.874742][T28083] nbd_queue_rq+0x37b/0x1100 [ 787.879859][T28083] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 787.886018][T28083] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 787.893105][T28083] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 787.899641][T28083] blk_mq_run_hw_queue+0x348/0x4f0 [ 787.905310][T28083] blk_mq_dispatch_list+0xd16/0xe10 [ 787.911033][T28083] blk_mq_flush_plug_list+0x48d/0x570 [ 787.916937][T28083] __blk_flush_plug+0x3ed/0x4d0 [ 787.922438][T28083] __submit_bio+0x28d/0x580 [ 787.927457][T28083] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 787.933614][T28083] block_read_full_folio+0x599/0x830 [ 787.939478][T28083] filemap_read_folio+0x137/0x3b0 [ 787.945188][T28083] do_read_cache_folio+0x358/0x590 [ 787.950852][T28083] read_part_sector+0xb6/0x2b0 [ 787.956305][T28083] adfspart_check_ICS+0xb1/0x960 [ 787.961868][T28083] bdev_disk_changed+0x817/0x1770 [ 787.967518][T28083] blkdev_get_whole+0x380/0x510 [ 787.972907][T28083] bdev_open+0x31e/0xd30 [ 787.977744][T28083] blkdev_open+0x470/0x610 [ 787.982674][T28083] do_dentry_open+0x785/0x14e0 [ 787.987961][T28083] vfs_open+0x3b/0x340 [ 787.992549][T28083] path_openat+0x2e08/0x3860 [ 787.997747][T28083] do_file_open+0x23e/0x4a0 [ 788.002795][T28083] do_sys_openat2+0x113/0x200 [ 788.008005][T28083] __x64_sys_openat+0x138/0x170 [ 788.013475][T28083] do_syscall_64+0x15f/0xf80 [ 788.018583][T28083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 788.025009][T28083] [ 788.025009][T28083] -> #1 (&cmd->lock){+.+.}-{4:4}: [ 788.032306][T28083] __mutex_lock+0x1a3/0x1550 [ 788.037689][T28083] nbd_queue_rq+0xc6/0x1100 [ 788.042931][T28083] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 788.049345][T28083] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 788.056199][T28083] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 788.063099][T28083] blk_mq_run_hw_queue+0x348/0x4f0 [ 788.068823][T28083] blk_mq_dispatch_list+0xd16/0xe10 [ 788.074541][T28083] blk_mq_flush_plug_list+0x48d/0x570 [ 788.080428][T28083] __blk_flush_plug+0x3ed/0x4d0 [ 788.085814][T28083] __submit_bio+0x28d/0x580 [ 788.090834][T28083] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 788.097427][T28083] block_read_full_folio+0x599/0x830 [ 788.103419][T28083] filemap_read_folio+0x137/0x3b0 [ 788.109059][T28083] do_read_cache_folio+0x358/0x590 [ 788.114793][T28083] read_part_sector+0xb6/0x2b0 [ 788.120246][T28083] adfspart_check_ICS+0xb1/0x960 [ 788.125707][T28083] bdev_disk_changed+0x817/0x1770 [ 788.131261][T28083] blkdev_get_whole+0x380/0x510 [ 788.136718][T28083] bdev_open+0x31e/0xd30 [ 788.141477][T28083] blkdev_open+0x470/0x610 [ 788.146411][T28083] do_dentry_open+0x785/0x14e0 [ 788.151692][T28083] vfs_open+0x3b/0x340 [ 788.156370][T28083] path_openat+0x2e08/0x3860 [ 788.161491][T28083] do_file_open+0x23e/0x4a0 [ 788.166516][T28083] do_sys_openat2+0x113/0x200 [ 788.171730][T28083] __x64_sys_openat+0x138/0x170 [ 788.177110][T28083] do_syscall_64+0x15f/0xf80 [ 788.182224][T28083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 788.188726][T28083] [ 788.188726][T28083] -> #0 (set->srcu){.+.+}-{0:0}: [ 788.195860][T28083] __lock_acquire+0x15a5/0x2cf0 [ 788.201301][T28083] lock_sync+0x9d/0x120 [ 788.206092][T28083] __synchronize_srcu+0xca/0x300 [ 788.211552][T28083] elevator_switch+0x1e8/0x7a0 [ 788.216863][T28083] elevator_change+0x2cc/0x450 [ 788.222187][T28083] elevator_set_default+0x36c/0x430 [ 788.227939][T28083] blk_register_queue+0x3e9/0x4e0 [ 788.233486][T28083] __add_disk+0x677/0xd50 [ 788.238335][T28083] add_disk_fwnode+0xfb/0x480 [ 788.243544][T28083] nbd_dev_add+0x72c/0xb50 [ 788.248570][T28083] nbd_genl_connect+0x962/0x1cf0 [ 788.254108][T28083] genl_family_rcv_msg_doit+0x22a/0x330 [ 788.260168][T28083] genl_rcv_msg+0x61c/0x7a0 [ 788.265363][T28083] netlink_rcv_skb+0x232/0x4b0 [ 788.270697][T28083] genl_rcv+0x28/0x40 [ 788.275470][T28083] netlink_unicast+0x75c/0x8e0 [ 788.280889][T28083] netlink_sendmsg+0x813/0xb40 [ 788.286191][T28083] ____sys_sendmsg+0x972/0x9f0 [ 788.291474][T28083] ___sys_sendmsg+0x2a5/0x360 [ 788.296676][T28083] __x64_sys_sendmsg+0x1bd/0x2a0 [ 788.302152][T28083] do_syscall_64+0x15f/0xf80 [ 788.307380][T28083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 788.313975][T28083] [ 788.313975][T28083] other info that might help us debug this: [ 788.313975][T28083] [ 788.324237][T28083] Chain exists of: [ 788.324237][T28083] set->srcu --> &q->q_usage_counter(io)#70 --> &q->elevator_lock [ 788.324237][T28083] [ 788.338051][T28083] Possible unsafe locking scenario: [ 788.338051][T28083] [ 788.345530][T28083] CPU0 CPU1 [ 788.350895][T28083] ---- ---- [ 788.356348][T28083] lock(&q->elevator_lock); [ 788.360976][T28083] lock(&q->q_usage_counter(io)#70); [ 788.368874][T28083] lock(&q->elevator_lock); [ 788.376021][T28083] sync(set->srcu); [ 788.379922][T28083] [ 788.379922][T28083] *** DEADLOCK *** [ 788.379922][T28083] [ 788.388072][T28083] 6 locks held by syz.0.5693/28083: [ 788.393272][T28083] #0: ffffffff8fe42788 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 788.401721][T28083] #1: ffffffff8fe425c0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 788.410765][T28083] #2: ffff88806e0659c0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: add_disk_fwnode+0xe7/0x480 [ 788.421124][T28083] #3: ffff88802a7a4740 (&q->sysfs_lock){+.+.}-{4:4}, at: blk_register_queue+0x119/0x4e0 [ 788.431262][T28083] #4: ffff88802a7a41c8 (&q->q_usage_counter(queue)#54){+.+.}-{0:0}, at: elevator_change+0x198/0x450 [ 788.442313][T28083] #5: ffff88802a7a46b8 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1b3/0x450 [ 788.452142][T28083] [ 788.452142][T28083] stack backtrace: [ 788.458126][T28083] CPU: 0 UID: 0 PID: 28083 Comm: syz.0.5693 Not tainted syzkaller #0 PREEMPT(full) [ 788.458144][T28083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 788.458152][T28083] Call Trace: [ 788.458159][T28083] [ 788.458166][T28083] dump_stack_lvl+0xe8/0x150 [ 788.458185][T28083] print_circular_bug+0x2e1/0x300 [ 788.458221][T28083] check_noncircular+0x12e/0x150 [ 788.458246][T28083] __lock_acquire+0x15a5/0x2cf0 [ 788.458313][T28083] ? lockdep_unlock+0x5d/0xd0 [ 788.458327][T28083] ? __lock_acquire+0x146e/0x2cf0 [ 788.458340][T28083] ? __synchronize_srcu+0xb6/0x300 [ 788.458350][T28083] lock_sync+0x9d/0x120 [ 788.458360][T28083] ? __synchronize_srcu+0xb6/0x300 [ 788.458371][T28083] __synchronize_srcu+0xca/0x300 [ 788.458382][T28083] ? do_raw_spin_lock+0x12b/0x2f0 [ 788.458396][T28083] ? __pfx___synchronize_srcu+0x10/0x10 [ 788.458408][T28083] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 788.458424][T28083] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 788.458442][T28083] ? synchronize_srcu+0x20d/0x270 [ 788.458453][T28083] elevator_switch+0x1e8/0x7a0 [ 788.458469][T28083] ? blk_mq_cancel_work_sync+0xa5/0xe0 [ 788.458481][T28083] elevator_change+0x2cc/0x450 [ 788.458496][T28083] ? do_raw_spin_unlock+0xf5/0x210 [ 788.458511][T28083] elevator_set_default+0x36c/0x430 [ 788.458526][T28083] ? __pfx_elevator_set_default+0x10/0x10 [ 788.458542][T28083] ? disk_register_independent_access_ranges+0x2db/0x380 [ 788.458601][T28083] ? blk_crypto_sysfs_register+0x11c/0x170 [ 788.458667][T28083] blk_register_queue+0x3e9/0x4e0 [ 788.458681][T28083] __add_disk+0x677/0xd50 [ 788.458693][T28083] ? down_read+0x270/0x2e0 [ 788.458705][T28083] add_disk_fwnode+0xfb/0x480 [ 788.458717][T28083] nbd_dev_add+0x72c/0xb50 [ 788.458731][T28083] ? __pfx_nbd_dev_add+0x10/0x10 [ 788.458745][T28083] ? bpf_lsm_capable+0x9/0x20 [ 788.458757][T28083] ? security_capable+0x7e/0x2c0 [ 788.458775][T28083] ? radix_tree_lookup+0x25c/0x290 [ 788.458828][T28083] nbd_genl_connect+0x962/0x1cf0 [ 788.458839][T28083] ? __pfx___nla_validate_parse+0x10/0x10 [ 788.458858][T28083] ? __pfx_nbd_genl_connect+0x10/0x10 [ 788.458870][T28083] ? rcu_is_watching+0x15/0xb0 [ 788.458882][T28083] ? trace_kmalloc+0x2a/0xf0 [ 788.458897][T28083] ? __nla_parse+0x40/0x60 [ 788.458912][T28083] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 788.458929][T28083] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 788.458944][T28083] genl_family_rcv_msg_doit+0x22a/0x330 [ 788.458961][T28083] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 788.458977][T28083] ? __lock_acquire+0x6b5/0x2cf0 [ 788.458989][T28083] genl_rcv_msg+0x61c/0x7a0 [ 788.459004][T28083] ? __pfx_genl_rcv_msg+0x10/0x10 [ 788.459017][T28083] ? __pfx_nbd_genl_connect+0x10/0x10 [ 788.459030][T28083] netlink_rcv_skb+0x232/0x4b0 [ 788.459041][T28083] ? __pfx_genl_rcv_msg+0x10/0x10 [ 788.459054][T28083] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 788.459068][T28083] ? down_read+0x270/0x2e0 [ 788.459077][T28083] ? genl_rcv+0xd/0x40 [ 788.459090][T28083] genl_rcv+0x28/0x40 [ 788.459102][T28083] netlink_unicast+0x75c/0x8e0 [ 788.459114][T28083] netlink_sendmsg+0x813/0xb40 [ 788.459127][T28083] ? __pfx_netlink_sendmsg+0x10/0x10 [ 788.459139][T28083] ? aa_sock_msg_perm+0xf1/0x1b0 [ 788.459156][T28083] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 788.459174][T28083] ____sys_sendmsg+0x972/0x9f0 [ 788.459186][T28083] ? __might_fault+0xaf/0x130 [ 788.459201][T28083] ? __pfx_____sys_sendmsg+0x10/0x10 [ 788.459213][T28083] ? import_iovec+0x73/0xa0 [ 788.459230][T28083] ___sys_sendmsg+0x2a5/0x360 [ 788.459240][T28083] ? try_to_wake_up+0x828/0x1380 [ 788.459256][T28083] ? __pfx____sys_sendmsg+0x10/0x10 [ 788.459274][T28083] ? futex_wake+0x4ac/0x580 [ 788.459295][T28083] ? call_rcu+0x644/0x890 [ 788.459309][T28083] __x64_sys_sendmsg+0x1bd/0x2a0 [ 788.459324][T28083] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 788.459337][T28083] ? rcu_is_watching+0x15/0xb0 [ 788.459355][T28083] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 788.459373][T28083] do_syscall_64+0x15f/0xf80 [ 788.459390][T28083] ? trace_irq_disable+0x3b/0x140 [ 788.459414][T28083] ? clear_bhb_loop+0x40/0x90 [ 788.459434][T28083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 788.459447][T28083] RIP: 0033:0x7fc29bf9ce59 [ 788.459459][T28083] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 788.459468][T28083] RSP: 002b:00007fc29ceda028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 788.459481][T28083] RAX: ffffffffffffffda RBX: 00007fc29c215fa0 RCX: 00007fc29bf9ce59 [ 788.459489][T28083] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 000000000000000d [ 788.459496][T28083] RBP: 00007fc29c032d6f R08: 0000000000000000 R09: 0000000000000000 [ 788.459503][T28083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 788.459509][T28083] R13: 00007fc29c216038 R14: 00007fc29c215fa0 R15: 00007ffdf70846b8 [ 788.459522][T28083] [ 789.072957][T28088] udevd[28088]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 789.088404][T28088] udevd[28088]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 791.906750][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!