last executing test programs: 4.103133955s ago: executing program 4 (id=1997): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000002c0)) socket$nl_generic(0x10, 0x3, 0x10) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000640), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff6) unshare(0x28000600) poll(&(0x7f0000000680), 0x0, 0x80000000) 2.896441871s ago: executing program 4 (id=2009): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0xa, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) close(0x3) (async) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000840)={{r0, &(0x7f00000003c0)='-/:/\x00', 0x100000, &(0x7f0000000400)={@align=0x3ff, {0x8, 0xb0, 0x8, 0x9}}, 0xa2, &(0x7f0000000440)={@_ha_fsid}, &(0x7f0000000480)}, 0x3, &(0x7f00000007c0)=[{0x3, 0x401, &(0x7f00000004c0)='\x00', &(0x7f0000000500)="83092c7eb34b90be91f4eeb2c152e439d6006eb7bcee6ac20a9f9532f49bea29eb0bd6d1ea58454e7f3b2b41b194a972a46cb77d6839219465eb8ef173fbbf954677aac79fb98680726cfc05014545d16f51a67aed4ed597e45b778d912430a3156b51cffbe349d43e10def2ff74adf626cb7eb3e068ad9576ce594b0ef136a33ef5bbdfa24cd24fe1525a987a04725a841eabe9b461fc565c52fef0d22781aebc462ccf69876e032a1b", 0xaa, 0x20}, {0x2, 0x7ff, &(0x7f00000005c0)='\x00', &(0x7f0000000600)="697e1cf6c5a558dbbc572b0c354efc4bf27b2a09fb5448be5585b7f49182a3eebdb99b6fbbbb08bed3afb3def5246b180ad141bed10167620bc07e20eeae216aff04045ba448881b2c861013ac94330a04accb002eb5c6c13ed8a06dde3d85af56d209895e4a6646a083cbaa50b3f4200781fdaa1826beecf563c99d6317", 0x7e}, {0x3, 0x4, &(0x7f0000000680)='GPL\x00', &(0x7f00000006c0)="672f39ab72a7590605045cf8da51e15c7af14298515ac2a961a9c63f6ce8ca71d10adead8e659ed86798c6e988aeb3e7ba997fd6f3a9656cf03c333fb9d444905211374e520752e87d6b40b4d5c90fb6fcf62ebafb53d826acc19d0685e513494411622afa3f15bf239965edacd30a2df32feec0933bcf5476ae1a74f4f2f9af38225c32d1fbfd3da66201a1db75e46b706697a6784ff454c56cfab46153a1d7fff08853a9f5b4a5c0ea75f9228093d69014ab44c6ccfab393bf4027086483f2afb04020", 0xc4, 0x22}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x19, 0x4, 0x4, 0xf}, 0x50) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000940)={'bridge0\x00', 0x0}) (rerun: 32) sendmsg$nl_route(r4, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x44}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x10, 0x10}}]}}}]}, 0x40}}, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x0, 0x10}}]}}}]}, 0x40}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000b00)={0xffffffffffffffff}) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000b40)={0x0, 0x0, 0x0}, &(0x7f0000000b80)=0xc) sendmmsg$unix(r6, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)=[@cred={{0x1c, 0x1, 0x2, {r7, r8, r9}}}], 0x20, 0x40800}}], 0x1, 0x0) (async) setsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000c40)={{{@in=@private=0xa010102, @in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4e22, 0x6, 0x4e20, 0x0, 0x2, 0x20, 0x10, 0x32, r5, r8}, {0x0, 0x7, 0x2, 0x0, 0x2, 0x2, 0x280, 0x7}, {0x0, 0x7188, 0xff, 0x4}, 0x8, 0x0, 0x2, 0x0, 0x2}, {{@in=@multicast2, 0x4d2, 0x3c}, 0x8b2b82596f6c9aa5, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3505, 0x5, 0x2, 0x40, 0x9, 0x18926321, 0x1}}, 0xe8) (async) setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000d40)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@mcast1, 0x4e24, 0x0, 0x4e21, 0x0, 0x2, 0x80, 0x80, 0x1, 0x0, r8}, {0x8000000000000001, 0x5, 0x2, 0x5, 0x1, 0x6, 0x4f9b80000000000, 0x3}, {0x8, 0x7160000000000000, 0x0, 0xfffffffffffff801}, 0x2, 0x0, 0x2, 0x1, 0x3, 0x3}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d3, 0x6c}, 0x2, @in=@rand_addr=0x64010100, 0x0, 0x4, 0x2, 0xc2, 0x83db, 0xfffffff5, 0x3}}, 0xe8) (async) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x11, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x6}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x9, &(0x7f0000000300)=@raw=[@map_fd={0x18, 0x1, 0x1, 0x0, r0}, @alu={0x7, 0x1, 0xb, 0x2, 0xa}, @alu={0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc}, @call={0x85, 0x0, 0x0, 0x1}, @jmp={0x5, 0x0, 0x5, 0x0, 0x0, 0x1}, @exit, @ldst={0x1, 0x0, 0x3, 0x1, 0x0, 0x8}, @exit], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x1a, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x0, 0xffffff15}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3431d}]}, &(0x7f0000000100)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x54, '\x00', 0x0, 0x3d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd4}, 0x94) 2.756255927s ago: executing program 4 (id=2012): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000002c0)) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x3, @remote, 'ip6_vti0\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000040)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r2, 0x40047438, &(0x7f0000000040)) ioctl$PPPIOCCONNECT(r2, 0x4004743a, &(0x7f00000000c0)) r3 = openat$ppp(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$TUNSETOFFLOAD(r3, 0x4004743d, 0x110e22fff6) poll(&(0x7f0000000680)=[{r3, 0x2}], 0x1, 0x80000000) 2.572326339s ago: executing program 0 (id=2014): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000000020", @ANYBLOB="b31ca792ad8afdb8e4fe438595b56e8729d658dc4ed4fed2ad853d3e604f971339cf21c7419b", @ANYRESDEC=0x0], 0x50) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000100)={0x98, 0x1000000}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x1, &(0x7f0000000080)=@raw=[@ldst={0x0, 0x0, 0x0, 0x5, 0x4, 0x2, 0x8}], &(0x7f0000000180)='GPL\x00', 0x9, 0xffe, &(0x7f0000001e40)=""/4094, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) 2.531828853s ago: executing program 3 (id=2015): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="500100001000010427bd70000000000064010101000000000000000000000000ff0100000000000000000000000000011234ffff000000000a00808011000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000001000004d23200000064010101000000000000000000000000ffffffffffffffffffffffffffffffff01ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000a000000000000000000000060001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000800000003132333435363738393031323334353664636261"], 0x150}}, 0x0) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="fc0000001300010400000004feffffff00000000000000000000000000000001fc0100000000000000000000000000011234ffff000000000a00808011000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000080000000000000040000000000000000000000000000000060000000000000001000002000000004400050000000000000000000000000000000001000004d2320000000a00000000000000000000000000000000000001043500"/180], 0xfc}}, 0x0) (async) r1 = socket(0x2, 0x80805, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) (async) socket$inet(0x2, 0x2, 0x1) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000cc0)={'ip6_vti0\x00', &(0x7f0000000d00)={'ip6tnl0\x00', 0x0, 0x29, 0x1, 0x9, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x7830, 0x83, 0x5}}) (async) r2 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$MRT6(r2, 0x29, 0x21, 0x0, &(0x7f0000000d80)) (async) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000dc0)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) (async) r5 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_SIOCADDRT(r5, 0x890b, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000e80)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000f00)={0x2c, 0x2}, 0x10) (async) sendmsg$NFT_BATCH(r7, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) (async) sendmsg$NFT_BATCH(r6, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000001140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) (async) sendmsg$NFT_BATCH(r6, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000140affffffff00000000000002000009080003400000000a0900010073797a30000000000c000640000000000000000214000000020a010100000000000000000000000a14000000110001"], 0x70}}, 0x0) (async) r8 = socket$inet6(0xa, 0x2, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r10, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)={0x2c, r11, 0x301, 0x70bd2c, 0x25dfdbfb, {0x1c}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x84}, 0x40006) getsockopt$sock_timeval(r9, 0x1, 0x48, &(0x7f0000000600), &(0x7f0000000640)=0x10) (async) sendto$inet6(r8, 0x0, 0x0, 0x0, &(0x7f0000000400)={0xa, 0x1234, 0x0, @loopback}, 0x1c) (async) socket$nl_route(0x10, 0x3, 0x0) 2.388033538s ago: executing program 0 (id=2018): socket$inet6_tcp(0xa, 0x1, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x8000000, 0x0, '\x00', 0x0, 0x2}, 0x80) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, 0xffffffffffffffff, 0x215eb000) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) (async) write$cgroup_subtree(r0, &(0x7f0000000280)=ANY=[], 0x10448) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x8, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x14, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000700850000002d"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000600)={r1}, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1001, 0x2, 0x11fe726f7e78fcf0}, 0x28) (async) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, 0xffffffffffffffff, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000080), &(0x7f0000000100)=0xe) (async) bpf$MAP_CREATE(0x0, 0x0, 0x27) 2.306230863s ago: executing program 2 (id=2019): setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000540)={'syzkaller0\x00', 0x7101}) (async) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x68, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x42, 0x2021}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @remote}, {0xa, 0x4, @local}]}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) (async) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000580)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x4, 0xfff3}, {}, {0x9, 0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) (async, rerun: 64) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r6, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) (async, rerun: 32) r7 = socket(0x400000000010, 0x3, 0x0) (rerun: 32) sendmsg$nl_route_sched(r7, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4894}, 0x2) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r1) 2.250548111s ago: executing program 1 (id=2020): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x12, 0xc, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r1}, &(0x7f00000001c0), &(0x7f0000000200)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r1, &(0x7f0000000280)}, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="640000001000ffff2dbd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="38010500b5a10500440012800b000100697036746e6c00003400028008000100", @ANYRES32, @ANYBLOB="14000300ff0537"], 0x64}, 0x1, 0x0, 0x0, 0x24004804}, 0x40000) 2.249367559s ago: executing program 3 (id=2021): r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x38, 0x1403, 0xc23, 0x70bd2a, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syz_tun\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x14f7325d9d03b00}, 0x4000) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x44, 0x11, 0x1, 0x2000003, 0x0, {0x0, 0x0, 0x0, r3, {0xfff3}, {0x3, 0x8}, {0xfff3, 0x6}}, [{0x8, 0xb, 0x7}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x7ec4}, {0x8, 0xb, 0x6}]}, 0x44}}, 0x20000000) socket$unix(0x1, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000140)={&(0x7f00000003c0), 0xc, &(0x7f0000000400)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xffffff38}]}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xdc}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="ac0100001700010000000000000000007f0000010000000000000000000000000000fefffffffffffd8000000000000000000000000000bbac1414bb000000000000000000000000ffffff2b6b57a470b83fce00000000004e210000000000000000006400000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0200000000000000000000000000000000000000000000000000000000000100000000000000000a00802000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000200000000f9ffffff000000000000000000000000840005"], 0x1ac}}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) 1.871404979s ago: executing program 1 (id=2022): r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/pid\x00') r2 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000180)=@qipcrtr={0x2a, 0x0, 0x2}, 0x80, 0x0}, 0x0) (async) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000180)=@qipcrtr={0x2a, 0x0, 0x2}, 0x80, 0x0}, 0x0) unshare(0x2c020400) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) socket(0x10, 0x3, 0x0) (async) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000280)={'lo\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000280)={'lo\x00'}) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400000047000701feffffffffffffff04000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0x24008802) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f00000003c0)=0x471e, 0x4) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000440)=@in={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f0000000480)=[{0x0}, {&(0x7f0000000540)="6e901720a8e113502640dae3daaf9d5f314c8a7f2d8e12a6ab5ca9eebf73ae82904f762e2351a0162ee9b57f6271877f3a36863e9ce360f5987199e3059491664fc752c04893c8b3f06fd49702a5192b2726ab986ba1207abf750274b4b423a62e2af5", 0x63}], 0x2, 0x0, 0x0, 0x10000000}, 0x0) (async) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000440)=@in={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f0000000480)=[{0x0}, {&(0x7f0000000540)="6e901720a8e113502640dae3daaf9d5f314c8a7f2d8e12a6ab5ca9eebf73ae82904f762e2351a0162ee9b57f6271877f3a36863e9ce360f5987199e3059491664fc752c04893c8b3f06fd49702a5192b2726ab986ba1207abf750274b4b423a62e2af5", 0x63}], 0x2, 0x0, 0x0, 0x10000000}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000005c0)={'vcan0\x00'}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001000000000000c04466"], 0x80}, 0x1, 0x0, 0x0, 0x20000040}, 0x8050) connect$inet(r5, &(0x7f00000006c0)={0x2, 0x0, @multicast1}, 0x10) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r6, &(0x7f0000000100)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) (async) connect$bt_l2cap(r6, &(0x7f0000000100)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmmsg(r5, &(0x7f0000000700), 0x800001d, 0x300) (async) sendmmsg(r5, &(0x7f0000000700), 0x800001d, 0x300) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$IP_VS_SO_GET_INFO(r7, 0x0, 0x481, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newlink={0x50, 0x10, 0x401, 0x4000, 0x101, {0x0, 0x0, 0x0, 0x0, 0x20009, 0x1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x1080, 0x4071}}}}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4010}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newlink={0x50, 0x10, 0x401, 0x4000, 0x101, {0x0, 0x0, 0x0, 0x0, 0x20009, 0x1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x1080, 0x4071}}}}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 1.57968475s ago: executing program 3 (id=2023): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r0, 0x0, 0x22, 0x0, &(0x7f00000000c0)="878b0d151fbadeaa8cc0eefb1200be9b0952164716c1845d3e522547b735ce689cbd", 0x0, 0x7ab8e724, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x50) 1.488407973s ago: executing program 4 (id=2024): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x2f00020b, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000009a00000a20000000000a01060000000000000000020000000900010073797a30000000002c000000030a01060000000000000000020000000900010073797a30000000000900030073797a300000000048000000060a01060000000000000000020000000900010073797a30000000000900020073797a30000000001c0004801800018008000100647570000c000280080001"], 0xbc}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000500)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "001b01", 0x8, 0x3a, 0xff, @private1, @mcast2, {[], @mlv2_report={0x8f, 0x0, 0x0, 0x97}}}}}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c00bd6f120a01d00700000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000140affffffff0000000000000200000908000340f500000a0900010073797a30000000000c0006400000000000000002"], 0x70}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r3, 0xffffffffffffffff}, 0x4) close(r4) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r4, 0x6628) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000001f00), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r5, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001f80)={&(0x7f0000001fc0)={0x64, r6, 0x1, 0x70bd2d, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x0, 0xb, 0x4}, {0x6, 0x16, 0xb}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x80}, {0x8, 0xb, 0x6}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7050000080000001c00000000000000bf9800000000000056080000000000008500000005000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) r8 = socket$inet6(0xa, 0x800, 0x9889) sendmsg$inet6(r8, &(0x7f0000000c00)={&(0x7f00000005c0)={0xa, 0x4e24, 0xe, @remote, 0x9}, 0x1c, &(0x7f0000000940)=[{&(0x7f0000000840)="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", 0xff}], 0x1, &(0x7f0000000980)=[@hopopts={{0x60, 0x29, 0x36, {0x29, 0x8, '\x00', [@enc_lim={0x4, 0x1, 0x3}, @pad1, @generic={0x0, 0x3b, "c6c04f9216fc881f34c93f7e691bdedd17564c31ac8a78956671d6f43a9cf2e7fb040bd27780e9813ba7d6b12c149046efe2054e818adb950a94e6"}]}}}, @tclass={{0x14, 0x29, 0x43, 0xb}}, @dstopts_2292={{0xc0, 0x29, 0x4, {0x6, 0x14, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x200}, @hao={0xc9, 0x10, @mcast2}, @ra={0x5, 0x2, 0x9}, @ra, @calipso={0x7, 0x58, {0x3, 0x14, 0x4, 0x9, [0x7, 0x101, 0x1, 0x30862fe1, 0x4, 0x70, 0x6, 0x0, 0x10000, 0x5]}}, @calipso={0x7, 0x28, {0x1, 0x8, 0x6, 0xff, [0x2, 0x8, 0xffffffffffffffe9, 0x9]}}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x6cf}}, @dstopts={{0x100, 0x29, 0x37, {0x0, 0x1c, '\x00', [@jumbo={0xc2, 0x4, 0x3}, @ra, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @pad1, @jumbo={0xc2, 0x4, 0x80000000}, @generic={0x2, 0xc9, "5fa54312b9bee6119acb81918b1d10f74b62e6d7eeb33efda7f3a59e48222349b582495c394293af6d768076c06d052cfd9ebb801ab03198d2bfbd8726c995247bcbb7c4aa83587c804e8ab1dd512a7c5b122db08497b32f95a1ca748703cc8d84b26e7f5b988cc84b01866d13844ef767b2b95fc6913de32db7e0a7da6a59783ee1f05115a83d6952a71ec3e2afcb71f293868380b602c9ebb80c956a1208bc4488d006b2e03d281f01ed1762b6015443dc0f8640207d3d744ebdf9904243112f40f5e872810d9c80"}, @ra={0x5, 0x2, 0x4}]}}}], 0x250}, 0x801) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000c40), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f0000001ec0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x370cd61f0b60ea75}, 0xc, &(0x7f0000001e80)={&(0x7f0000000c80)={0x11d8, r9, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x1130, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "8aeec924177b426554d2e7460d7e767b5d50afaa73a5"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xa, 0x3, "3dfa792a8b75"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x8a, 0x3, "8c20f68e7de9c7c386c2c549ce4cd8d719a8cc00b99522f1295d8ba36ba2f63b92529becabdda2cdafa0bfb00641d271b67500e1f14cb4c5ad03f31e13d754891d51b52d72361a7da1d148e66ceb878369f00cfdb3a5fa510473de38f5e39386c49b19828f3027f1f6be04745e952a5f931e8e635e1d492a968db226a6d5bc29e02548fa2c5a"}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "d02af258cf69b56519ffeeccd906107c98513632cfd545"}}]}, @TIPC_NLA_LINK={0x38, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}]}, @TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'macvlan0\x00'}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'ib', 0x3a, 'veth0_macvtap\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xcc8}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}]}, 0x11d8}}, 0x4881) 1.487977548s ago: executing program 3 (id=2025): r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = epoll_create(0xc05) r2 = socket$pptp(0x18, 0x1, 0x2) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000480)={0x1000000e}) bind$l2tp(r0, &(0x7f00000001c0), 0x10) sendto$l2tp(r0, &(0x7f0000000200)="e5786a0d000000000000003b", 0xc, 0x8000, &(0x7f0000000240)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f00000003c0)=0xfffffffd, 0x4) recvmsg(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x22) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x2, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000440)=[{0x30, 0x5, 0x1, 0xfffff031}]}, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, r4, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r6, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a5f74756e"], 0x38}}, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x1f}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4008040}, 0x800) pipe(&(0x7f0000000000)) 1.356754071s ago: executing program 1 (id=2026): r0 = socket$inet_tcp(0x2, 0x1, 0x6) setsockopt$inet_tcp_buf(r0, 0x6, 0x1f, &(0x7f00000003c0)='espintcp', 0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="44000000180001002cbd7000000000000a0000000002ff000000000008000400", @ANYRES32=r2, @ANYRES8=0x0], 0x44}}, 0x0) syz_emit_ethernet(0x112, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd603000bb00dc2b00fc020000000000000000000000000001fc02000000000000000000000000008119130407"], 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r0) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000009, 0x200000005c832, r0, 0x0) unshare(0x2020600) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r4, &(0x7f0000000140)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x40, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x40000000010003c}, 0x60) connect$inet(r0, &(0x7f0000000500)={0x2, 0x4e20, @local}, 0x10) 1.349704777s ago: executing program 4 (id=2027): r0 = socket$kcm(0x2, 0xa, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x275a, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000440)=@assoc_value, &(0x7f00000007c0)=0x8) write$tun(r1, &(0x7f0000000100)=ANY=[], 0x342) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000200)={'ip_vti0\x00', 0x0}) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x10, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f0000000340)='GPL\x00'}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000800)=ANY=[@ANYBLOB="8713635f4867", @ANYRES32=r1, @ANYBLOB="c774f890afcdc9f1cc59834a7ea4d13e8bd19dd3885dd4b9cc8efcb5f8012bdc55a23318f70d7f15f0c3e414f4fd2447f150f68374046af530d172769012f07b23be61e655295da9151918ed07d3850ab8d6fa793e473065b518605e5cfe52e094478d9d84b31e65192119b965f9abbae7d3f8099cae70d816c8538105a96dbd8c8af1c04d186c2bba1579e176faee8cd6314ef684b120a74818315bb5e05bd08a87713a1a667ae9787ddbb8c6698825bebc258a9cf8600fd5804cb64d3238abe2fa67e41f29a64c7ab185f2c07ff37fd788385314e0dc3b53bd", @ANYRESHEX=r0], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000400)={r5, &(0x7f0000000440), &(0x7f0000000480)=@tcp6=r3}, 0x20) setsockopt$inet6_tcp_int(r3, 0x6, 0x19, &(0x7f0000000540)=0x100000001, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r3) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000003c0)='ns/time_for_children\x00') r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x16, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000740)={r8, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) getsockopt$IP_SET_OP_VERSION(r6, 0x1, 0x2f, &(0x7f0000000100), &(0x7f0000000140)=0x7) recvmmsg(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x400101a0, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f00000000c0)=@ethtool_cmd={0x0, 0x8, 0xff, 0x9, 0xf, 0x3, 0x3, 0xfc, 0x0, 0x9, 0x0, 0x1, 0x3, 0xff, 0x0, 0xfffffeff, [0x8]}}) sendto(r0, 0x0, 0x59, 0x468fd, &(0x7f00000004c0)=@l2={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x94}, 0x9}, 0x80) 1.314815292s ago: executing program 0 (id=2028): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000711201000000000095000000000000009fbeb89ca45b05169bbf58ef2648d1253c9158fd8121fdd7e02a76e4abee33328077476348f6dbe4fd30b6c4c6f0956ff5f01ce7797a710eb2d9e0196b"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 1.183287379s ago: executing program 0 (id=2029): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) 1.168369757s ago: executing program 2 (id=2030): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xc, 0xb}, {0x7, 0xffe0}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3ae, 0x4, 0x69b0, 0x9, 0xffffffff, 0xbb31}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c080) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r7) r8 = socket$unix(0x1, 0x5, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) syz_emit_ethernet(0x46, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0) socket(0x23, 0x4, 0x5) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56441, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xb, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0xfff, 0x7, 0x7, 0x5, 0xfffffdff, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x9, 0xfffd, 0x5, 0x96, 0xfff, 0xc}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2400c045}, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.148547103s ago: executing program 0 (id=2031): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'pimreg1\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETDEBUG(r0, 0x400454c9, 0xffffffffffffffff) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000340)={'veth1_to_team\x00', 0x1000}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) unshare(0x8040480) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r1], 0x20) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0200000004000400"/20, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="0100000003"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="2000000004000000080000000000000001"], 0x40) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r4, &(0x7f0000000280), 0x0, 0x4}, 0x20) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000380)={0x0, r3}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x11, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xcf, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {}, [@jmp={0x5, 0x0, 0x4, 0x0, 0x0, 0xfffffffffffffffe, 0x10}, @jmp={0x5, 0x1, 0x3, 0x0, 0x9, 0xfffffffffffffff8, 0xffffffffffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f00000005c0)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x2e}, 0x94) 961.478367ms ago: executing program 1 (id=2032): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000002c0)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000300)=ANY=[@ANYRESHEX, @ANYBLOB='G'], 0x31) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bind$unix(r2, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000140)=[{{0x0, 0x8c, 0x0}}, {{&(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_lsm={0x6, 0x11, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xb91f, 0x0, 0x0, 0x0, 0x4}, {}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @generic={0x6, 0x5, 0x9, 0xfff7, 0xfffffff9}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0xc}, 0x94) 877.386486ms ago: executing program 1 (id=2033): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond0\x00', 0x0}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x1d, &(0x7f0000000000)=0x4, 0x4) bind$inet(r2, &(0x7f0000001380)={0x2, 0x4e23, @multicast1}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000013c0)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendto$inet(r2, 0x0, 0x0, 0x28040041, &(0x7f0000001440)={0x2, 0x24e23, @loopback}, 0x10) sendmsg$inet(r2, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000001500)="17", 0x1}], 0x1}, 0x48c0) recvmmsg(r2, &(0x7f0000001540), 0x40000000000026c, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001580), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r3, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001640)={0x14, r4, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000001680), r6) sendmsg$NFC_CMD_DISABLE_SE(r6, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001740)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002bbd70000cdcdf251200000007000000", @ANYRES32=0x0, @ANYBLOB="0800150002000000"], 0x24}, 0x1, 0x0, 0x0, 0x4008011}, 0x8) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000001780), 0xffffffffffffffff) syz_genetlink_get_family_id$batadv(&(0x7f0000001540), r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f00000017c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000001880)={0x24, r8, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008040}, 0x4000) sendmsg$BATADV_CMD_SET_VLAN(r3, &(0x7f00000018c0)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001940)={&(0x7f0000001980)={0x24, r8, 0x400, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008040}, 0x20040081) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f00000019c0)={{{@in6=@private2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@local}}, &(0x7f0000001ac0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000001b80)=@newlink={0x38, 0x10, 0x401, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x50888}, [@IFLA_MASTER={0x8, 0xa, r1}, @IFLA_LINK={0x8, 0x5, r11}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0xa4}]}, 0x38}}, 0x4008010) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r13 = socket$kcm(0x29, 0x5, 0x0) getpeername(r13, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0xf, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r12}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3f}, {}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000002c0)='GPL\x00', 0xa, 0x1011, &(0x7f0000000300)=""/4113, 0x41000, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 845.559841ms ago: executing program 0 (id=2034): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000002c0)) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x3, @remote, 'ip6_vti0\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000040)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r2, 0x40047438, &(0x7f0000000040)) ioctl$PPPIOCCONNECT(r2, 0x4004743a, &(0x7f00000000c0)) r3 = openat$ppp(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$TUNSETOFFLOAD(r3, 0x4004743d, 0x110e22fff6) poll(&(0x7f0000000680)=[{r3, 0x2}], 0x1, 0x80000000) 792.917015ms ago: executing program 4 (id=2035): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="220000000400000010"], 0x48) ppoll(&(0x7f00000000c0)=[{r1, 0x1000}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0xf, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000087000000000000000600008006", @ANYRES32], 0x0, 0xa, 0x0, 0x0, 0x41000, 0x4d}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0xd, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000d0000000000010005000093737b8662ff010000006868f8ff0000000018110000", @ANYBLOB, @ANYBLOB="e100000000000000b7080000080000007b8af873e875f522ff00000000bfa200000000000007020000f8ffffffb703000008080000000000f9ebe0f47eae1eaf17183171335700000000000001f94000090000009500"/103, @ANYRES8, @ANYRES8], &(0x7f0000000440)='GPL\x00', 0x4, 0x1000, &(0x7f0000000480)=""/4105, 0x41100, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000014c0)={0x2, 0xa}, 0x2, 0x10, &(0x7f0000001500)={0x0, 0xf, 0x999, 0x3ff}, 0x10, 0x0, 0x0, 0x3f55ca97280b0a2a, &(0x7f0000001540), 0x0, 0x10, 0x6}, 0x95) write$tun(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="080008000203060008001900000001ab817f75da000885a0a9eb882e8afd38c83ba89ac98092fd0973ea16a3243d850c55210bb595bf422b"], 0x39) 581.059436ms ago: executing program 2 (id=2036): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r3, 0x6, 0x4, 0xffffffffffffffff, &(0x7f0000000640)=0x4b) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) close(0x3) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, &(0x7f0000000040)={r4, r2, 0x4, 0x0, 0x0, 0x70, 0x2, 0x4, 0x6, 0x5, 0x2, 0x6, 'syz1\x00'}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x24, r7, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xf9}]}, 0x24}}, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000440)={r5, &(0x7f0000000200)="1e8c19d09f693f5ef3eafe0aa0a50885eaf6a7fda299d67b5ed438924cac5bab1c"}, 0x20) r10 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) getpeername$packet(r11, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000500)=0x14) sendmsg$nl_route(r10, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="6000000010000305f8ffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="a09103003ed80000380012800b0001006d61637365630000280002800c0004000100000100c2800008000500070000000500060000000000050007000000000008000500", @ANYRES32=r12], 0x60}, 0x1, 0x0, 0x0, 0x240488d4}, 0x8020) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x18, r7, 0x4, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20040801}, 0x20044080) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="00000000884e0f58569d733b20c7e55bb90bbc593aec2a78691beab1b9433a998f089567e2f3c61cae4ef4e2ef3025e48346c9554e0dd08ae1c14475574139fee704018880d29029063d", @ANYRES16=r1, @ANYBLOB="010000000000000000ea23000000080009009df3ffff080007000200070000000000"], 0x2c}}, 0x24008080) 529.513569ms ago: executing program 2 (id=2037): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xb, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000200000000000000800000091115d000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x14, 0x3, 0x8, 0x7, 0x141, 0xffffffffffffffff, 0xfca1}, 0x50) socket$unix(0x1, 0x5, 0x0) 508.251835ms ago: executing program 3 (id=2038): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = socket(0x15, 0x6, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00'}) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/net\x00') r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xb, &(0x7f00000008c0)=ANY=[@ANYRES64=r1], &(0x7f0000000940)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000980)={r3, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a00)=@bpf_lsm={0x6, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000b00)='GPL\x00'}, 0x80) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f00)={0x1, 0x10, &(0x7f0000000e40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000410000007b8af8ff000000009408000000001700638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRESOCT=r2, @ANYBLOB="0000000000000000b703000008000000850000006900000095"], &(0x7f0000000d40)='syzkaller\x00', 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000e00)="d2ff0600600100004199dec6aa4a", 0x0, 0x40d5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000b40)={0x0, 0x0}, 0x8) r7 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000b80)=r6, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000bc0)={r7, r4, 0x4, r4}, 0x10) ioctl$XFS_IOC_START_COMMIT(r4, 0x80585882, &(0x7f0000000c00)={0xffffffffffffffff}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r8) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r12, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc00080005000a000000140004"], 0x58}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000780)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="20802abd1800fbdbdf250600000008000300", @ANYRES32=r12, @ANYBLOB="0a00e80008021100000100000a00e80008021100000100000a00e80008021100000100000a0018000303030303030000080005000200000005005300010000000500530000000000"], 0x64}, 0x1, 0x0, 0x0, 0x4004800}, 0x40811) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r14, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x6, 0x3d832047, 0xfff, 0x7, 0x1b8e, 0x0, 0x9, 0x5}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r14, {0x0, 0xd}, {0x0, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x34, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x7fff}, @TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x3ff}, @TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8, 0x8, 0x91c7}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0xd2}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x4}, @TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0x2}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x24024025}, 0xc810) r15 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) setsockopt$MRT_TABLE(r0, 0x0, 0xcf, &(0x7f00000000c0)=0xfd, 0x4) write$tun(r15, &(0x7f00000000c0)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r15, 0x0) 416.811577ms ago: executing program 1 (id=2039): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="2400000043000100000000000000000002000000ffffffffffffffff6361636865000000"], 0x24}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000024000000"], 0x0, 0x44, 0xfffffffffffffe12}, 0x28) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_TABLE(r2, 0x29, 0x24, &(0x7f0000000040), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000540)={0x1, &(0x7f0000000440)="cd52f116a4ea98f3d6295539e58b92af98246947f353785c1f62d7604c8caee77e23af1c1ce309c3b0dabb17817c3c029a0cf0884c80dc2edb437731b6be54f7d2cb6f18e19fbced1d7a86ab22db9fc46487542c41987e6ab315529d30f236cc15ab79dfe4e060974d0733424c4ebc7f6b2cdc209b036ed72059f81d17ca58d7683f53156f0301a478cb26a76da31fd44e7317f8c22b658417cff0b46fd09b20c1b2a95705c5abba17eae1f2c3440bb4809f3688ec8fc2d6ecb7352051d0e55e", &(0x7f0000000500)=""/41}, 0x20) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000840)=ANY=[@ANYBLOB="9feb010018000000000000003c000000340000000a000000000000000200000d00000000000000000202000000000000040000000000000001000005000000000200000002000000000000000000612e2e2e615f6100d5fe2111eb52ef0b1695c6448066c175d0cba5f1802918bec31698d63d9b0456709a4fc0460a15c08c09541628dae27941d5"], &(0x7f0000000000)=""/28, 0x56, 0x1c, 0x1}, 0x28) close(r4) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000005c0)={'syztnl0\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x2f, 0x4, 0x4, 0x2005, 0x0, @mcast2, @mcast2, 0x40, 0x10, 0x8, 0x1}}) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x0, 0xb, &(0x7f0000000680)=@raw=[@call={0x85, 0x0, 0x0, 0xc8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6bf}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}], &(0x7f0000000700)='GPL\x00', 0x4, 0x69, &(0x7f0000000740)=""/105, 0x41100, 0x4, '\x00', 0x0, @fallback=0x11, r1, 0x8, &(0x7f0000000a40)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000a80)={0x1, 0xe, 0xfffffff8, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x2, &(0x7f0000000ec0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000f00)=[{0x0, 0x4, 0x9, 0x2}, {0x5, 0x2, 0xd}], 0x10, 0x1}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000900)=@delqdisc={0x120, 0x25, 0x400, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x8, 0xa}, {0x2, 0xe}, {0xfff3, 0xffe0}}, [@TCA_RATE={0x6, 0x5, {0x6, 0x4}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x7ded}, @qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x10, [0x7, 0x6, 0xb, 0x9, 0xa, 0x6, 0xc, 0xf, 0xf, 0x1, 0xd, 0x9, 0xe, 0xb, 0x1, 0xa], 0x0, [0x2, 0x7, 0xea, 0x8, 0xe6b, 0x5, 0x40, 0x73d7, 0x80, 0x6, 0x4, 0x6, 0x3, 0x6, 0xb334], [0x1000, 0x2, 0x3, 0x778b, 0x9, 0xf90b, 0x8000, 0x1ff, 0x9, 0x6, 0x4, 0xf, 0x5, 0x5, 0x93, 0x9]}}]}}, @qdisc_kind_options=@q_htb={{0x8}, {0x7c, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x437d8000, 0x1}}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x8}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x1}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x80, 0x40000}}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0xffffffe1}}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x3c6, 0x1000}}]}}]}, 0x120}, 0x1, 0x0, 0x0, 0x805}, 0x8000) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x2}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x20) r8 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r8, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r8, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x1c) sendmmsg$inet6(r8, &(0x7f0000002940), 0x40000000000017d, 0x888) setsockopt$inet6_IPV6_HOPOPTS(r8, 0x29, 0x36, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002dc0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0xe4f, 0x400, 0x1000, 0x3, 0x7fffffff, 0x3}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x1d23}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4000884) r9 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r9, 0x0, 0x0, 0x24004095, &(0x7f00000001c0)={0x11, 0x88a8, r7, 0x1, 0x81, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}}, 0x14) 332.983645ms ago: executing program 2 (id=2040): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000006d00000095"], &(0x7f0000000200)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000300)="b9ff030768441a8cb89e14f008008632e7423d1efb039f5d9f1ddab11c0b4b4fa807", 0x0, 0x4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="940000000001050500000000000000000a0000003c0002802c0001801400f5fffe01000000000000000000000000000114000400200100000000000000000000000000020c00028005000100000000003c0001800c00028005000100000000002c00208014000300ffa30e6b3eb35ae2beb4ff0af799c201000000000000000000000000000114000400ff020000000000000000000000000001080007400000000117552af4955e061a697bfebe75b439458c8135c410600963fc9c7d6ff3427d01800000000000003906e4bcc81c7899dd68570c57429c4f464a4450b4ad508fdce392c48b60a7cbda06740db885e8df3994b2b3bcebad6027bd6f278c9c54885eb7ae06464949a50780006dcd387fdb94426cc834afeedaa370d621727de91cfcfb23df1c1b2ce6e6108e2dec91dc4718b4bd7f7990dd2501e37f416f07cac652e67ca2caf445ec2af3053e96061a39e5de3c1be8f9f94d0bf58f8881380fd16dab5ab092a3f56ca76f3536dcd8bdf5346381842ea6162e9e6d34bf04eda98e08ae450e36230a6079bb7afbefcf2afb78a42f6adb0c348cdbd22b693d124d5d9d815c6b22d65dd35e6a746630a72e7da97dfade2ba05b73cf1e943cbc038f9e31211b2c47171daa320575d58c803abd8e90609a512de96714c5ccb8b5a7d21d005c260e7c63a963a1650d9092066c6e68c247df52ee8a3d1831e178ea2c3ce18ec217f863f1812a33ea198af6110a3d09c693681a725665e5dbdf4a8915fdbfc2cc03a15670a52a32f1e001d75048115fa06d621818efa5e751c40a76f69a6b216ffb3c"], 0x94}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="a40000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff02000000050000000000000000000114000400fc0000000000000000000000000000010800074000000000100006"], 0xa4}, 0x1, 0x0, 0x0, 0x4040081}, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000000)={0x2, 0x5}) 62.386082ms ago: executing program 2 (id=2041): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000dc0)={'ip_vti0\x00', &(0x7f0000000e00)=@ethtool_gstrings={0x1b, 0x8}}) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0xa, 0x4, &(0x7f0000000d40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}, [@generic={0x73, 0x1, 0x1, 0x59}]}, &(0x7f0000000d80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) preadv(r5, &(0x7f0000000200)=[{&(0x7f0000000240)=""/96, 0x46}, {0x0, 0xa00}], 0x2, 0xa, 0x6c8) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r6, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000c00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x50, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x24, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2df31ab3}]}, {0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'geneve0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x3951d, 0x4b7bc}, [@IFLA_MASTER={0x8, 0xa, r3}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x44}, 0x1, 0x0, 0x0, 0x24004854}, 0x8000002) r8 = accept4$bt_l2cap(r5, &(0x7f00000000c0), &(0x7f0000000e40)=0xe, 0x800) sendmsg(r8, &(0x7f0000000900)={&(0x7f00000005c0)=@can={0x1d, r7}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000640)="d4b63f23ffec46e30616d4352f703d35a03bf58e9cff26982cf9d0e6a6592cba091cdf8824d2a233b06a3e53b67c8f449a2330fc03dd0fc4eec0d12d059bafb379fc8c42b178f4e018ad0ee57fdf8b08268fa1824d2f7cbd2375f7f932ca131551aa9562a39c4be2871259860fd1c6dd1c73363bb219ae707b77a69cc937a663afcbd5f99d10c2abc77e174e33b5e59883cf", 0x92}, {&(0x7f0000000700)="1819345697b6e15d4ab0cbe7371f3371da0438f150cd34cccf7155ac7228d9edd00429a9c5e282fa8d613966ec31b7c9eabc3d566ec4f28b2b3018febcfdadd654e9076ed7b8", 0x46}, {&(0x7f0000000780)="a3c5cf2f1559ca2d248e462d78f71a6e8d7c64d532dd048306d01055f062955c61164f806673888a37018ddb7077aa2f698593c5d85ef4229d7ad335e7bf8e52aca2657eb4a4da25871345c593b0af24be882dbdfa413f323cd572c75b04352025fb2ba5c5fe9d08a7a86c376b8856339ffffb116a98a01f9fc3520d5242e42851ba28b47bf08519d17edd155b35c317ea8203f5dd249483587a09c225aa90f3fde98ed17d3a69d01d6853a9fd67e2d210762a277d9a9318a648e770913a47636f255ad18f1f70c2ad3ab653364395d102c3cd24f7bf7252f6ecb0", 0xdb}], 0x3, &(0x7f00000008c0)=[{0x20, 0x111, 0xd, "5030e55366c21472e0"}], 0x20}, 0x4000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4805}, 0x20000050) socket$inet6_tcp(0xa, 0x1, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r9, 0x0, 0x40) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x20700, 0x2000000, {0x0, 0x0, 0x0, 0x0, 0x8203}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r10}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) 0s ago: executing program 3 (id=2042): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000002c0)) socket$nl_generic(0x10, 0x3, 0x10) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000640), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff6) unshare(0x28000600) poll(&(0x7f0000000680)=[{r1, 0x2}], 0x1, 0x80000000) (fail_nth: 1) kernel console output (not intermixed with test programs): 0'. [ 184.466601][ T8090] syzkaller0: entered promiscuous mode [ 184.466621][ T8090] syzkaller0: entered allmulticast mode [ 184.517106][ T8090] tipc: Enabled bearer , priority 0 [ 184.692849][ T8089] tipc: Resetting bearer [ 184.723985][ T8089] tipc: Disabling bearer [ 185.463515][ T8147] netlink: Failed to add helper -22 [ 185.463636][ T8147] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 185.565293][ T8158] netlink: 'syz.1.532': attribute type 1 has an invalid length. [ 185.617142][ T8160] openvswitch: netlink: Missing key (keys=c0, expected=20100) [ 185.775330][ T8176] hsr_slave_1 (unregistering): left promiscuous mode [ 185.812221][ T8158] bond3: (slave bridge0): making interface the new active one [ 185.814492][ T8158] bond3: (slave bridge0): Enslaving as an active interface with an up link [ 186.374794][ T8220] netlink: 'syz.2.544': attribute type 1 has an invalid length. [ 186.422730][ T8221] __nla_validate_parse: 5 callbacks suppressed [ 186.422747][ T8221] netlink: 28 bytes leftover after parsing attributes in process `syz.2.544'. [ 186.435511][ T8219] bond3: (slave geneve4): making interface the new active one [ 186.437403][ T8219] bond3: (slave geneve4): Enslaving as an active interface with an up link [ 186.438502][ T8221] bond3: entered promiscuous mode [ 186.438518][ T8221] geneve4: entered promiscuous mode [ 186.439808][ T8221] 8021q: adding VLAN 0 to HW filter on device bond3 [ 186.440800][ T82] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 186.479734][ T1216] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 186.509920][ T82] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 186.511388][ T13] netdevsim netdevsim2 ªªªªªª: set [1, 0] type 2 family 0 port 20000 - 0 [ 186.562880][ T8228] sctp: [Deprecated]: syz.2.548 (pid 8228) Use of int in maxseg socket option. [ 186.562880][ T8228] Use struct sctp_assoc_value instead [ 186.582884][ T8231] IPVS: set_ctl: invalid protocol: 94 172.20.20.44:20065 [ 186.888346][ T8252] netlink: 'syz.0.549': attribute type 1 has an invalid length. [ 186.908406][ T8233] netlink: 12 bytes leftover after parsing attributes in process `syz.3.545'. [ 186.951547][ T8257] netlink: 8 bytes leftover after parsing attributes in process `syz.0.549'. [ 186.974494][ T8231] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 186.981300][ T8231] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 187.180080][ T8252] 8021q: adding VLAN 0 to HW filter on device bond4 [ 187.210366][ T8233] bond3: entered promiscuous mode [ 187.210720][ T8233] 8021q: adding VLAN 0 to HW filter on device bond3 [ 187.249993][ T8258] bond4: (slave bridge5): making interface the new active one [ 187.253590][ T8258] bond4: (slave bridge5): Enslaving as an active interface with an up link [ 187.260297][ T8265] netlink: 16 bytes leftover after parsing attributes in process `syz.4.550'. [ 187.320593][ T8265] ipvlan1: entered promiscuous mode [ 187.325423][ T8265] ipvlan1: left promiscuous mode [ 187.387100][ T1216] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 187.387133][ T1216] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.436737][ T42] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 187.436768][ T42] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.436825][ T42] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 187.436848][ T42] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.436877][ T42] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 187.436900][ T42] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.619334][ T8270] netlink: 'syz.0.553': attribute type 1 has an invalid length. [ 187.624004][ T8284] netlink: 8 bytes leftover after parsing attributes in process `syz.4.559'. [ 187.667550][ T8294] netlink: 12 bytes leftover after parsing attributes in process `syz.1.558'. [ 187.828428][ T8294] netlink: 4 bytes leftover after parsing attributes in process `syz.1.558'. [ 188.211347][ T8341] netlink: 52 bytes leftover after parsing attributes in process `syz.3.567'. [ 188.244595][ T8327] syzkaller0: entered promiscuous mode [ 188.244616][ T8327] syzkaller0: entered allmulticast mode [ 188.258178][ T8339] netlink: 76 bytes leftover after parsing attributes in process `syz.3.567'. [ 188.360735][ T8345] netlink: 'syz.4.568': attribute type 1 has an invalid length. [ 188.360755][ T8345] netlink: 4288 bytes leftover after parsing attributes in process `syz.4.568'. [ 189.625287][ T8339] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.625356][ T8339] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.661531][ T8349] bond0: (slave bond_slave_0): Releasing backup interface [ 189.665895][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 189.684994][ T8349] bond0: (slave bond_slave_1): Releasing backup interface [ 189.698240][ T8349] team0: Port device team_slave_0 removed [ 189.698612][ T8349] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 189.703889][ T8349] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 189.713954][ T8349] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 189.723148][ T8347] team0: Device xfrm0 is of different type [ 189.754592][ T8350] tipc: Started in network mode [ 189.754619][ T8350] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 189.754783][ T8350] tipc: Enabled bearer , priority 0 [ 189.771722][ T8354] team0: Device xfrm0 is of different type [ 189.792139][ T8358] team0: Device xfrm0 is of different type [ 189.816265][ T8339] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.823485][ T8352] tipc: Enabling of bearer rejected, already enabled [ 190.105184][ T8371] bond4: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 190.117907][ T8371] bond4 (unregistering): Released all slaves [ 190.245070][ T8381] netlink: NAT attribute has 8 unknown bytes [ 190.245105][ T8381] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 190.248103][ T8379] syzkaller0: entered promiscuous mode [ 190.248128][ T8379] syzkaller0: entered allmulticast mode [ 190.353349][ T8401] ieee802154 phy0 wpan0: encryption failed: -22 [ 190.748681][ T8439] netlink: 'syz.2.591': attribute type 6 has an invalid length. [ 190.888848][ T6669] tipc: Node number set to 11578026 [ 191.292163][ T8472] macsec0: entered promiscuous mode [ 191.726846][ T8478] __nla_validate_parse: 9 callbacks suppressed [ 191.726865][ T8478] netlink: 40 bytes leftover after parsing attributes in process `syz.3.598'. [ 191.787918][ T8472] macsec0 (unregistering): left promiscuous mode [ 192.083486][ T8495] netlink: 8 bytes leftover after parsing attributes in process `syz.4.603'. [ 192.325365][ T8520] netlink: 8 bytes leftover after parsing attributes in process `syz.3.608'. [ 192.636795][ T8535] netlink: 52 bytes leftover after parsing attributes in process `syz.1.612'. [ 193.303680][ T8545] vxcan0: tx drop: invalid da for name 0x00000000000000c8 [ 193.604499][ T8546] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 193.654018][ T8553] bridge1: entered promiscuous mode [ 193.654039][ T8553] bridge1: entered allmulticast mode [ 193.672015][ T8553] team0: Port device bridge1 added [ 193.684259][ T8553] bridge0: port 1(team0) entered blocking state [ 193.684445][ T8553] bridge0: port 1(team0) entered disabled state [ 193.684764][ T8553] team0: entered allmulticast mode [ 193.684790][ T8553] bridge0: entered allmulticast mode [ 193.746892][ T8553] team0: left allmulticast mode [ 193.746917][ T8553] bridge0: left allmulticast mode [ 193.752448][ T8563] xt_socket: unknown flags 0x4c [ 193.788077][ T8556] netlink: 8 bytes leftover after parsing attributes in process `syz.3.617'. [ 193.788295][ T8563] netlink: 712 bytes leftover after parsing attributes in process `syz.3.617'. [ 193.789275][ T8563] netlink: 48 bytes leftover after parsing attributes in process `syz.3.617'. [ 193.789454][ T8555] netlink: 68 bytes leftover after parsing attributes in process `syz.1.618'. [ 193.878053][ T8568] netlink: 8 bytes leftover after parsing attributes in process `syz.2.621'. [ 194.019285][ T8572] netlink: 8 bytes leftover after parsing attributes in process `syz.0.622'. [ 194.072257][ T8581] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 194.072348][ T8581] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 194.151447][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.207795][ T50] bond0: (slave bond_slave_0): interface is now down [ 194.207817][ T50] bond0: (slave bond_slave_1): interface is now down [ 194.207828][ T50] bond0: (slave syz_tun): interface is now down [ 194.215080][ T8585] 8021q: adding VLAN 0 to HW filter on device bond0 [ 194.217660][ T8585] 8021q: adding VLAN 0 to HW filter on device team0 [ 194.223334][ T8585] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 194.230112][ T85] bond0: (slave bond_slave_0): interface is now down [ 194.230130][ T85] bond0: (slave bond_slave_1): interface is now down [ 194.230141][ T85] bond0: (slave syz_tun): interface is now down [ 194.243720][ T8598] Bluetooth: MGMT ver 1.23 [ 194.248030][ T42] bond0: (slave bond_slave_0): interface is now down [ 194.248047][ T42] bond0: (slave bond_slave_1): interface is now down [ 194.248058][ T42] bond0: (slave syz_tun): interface is now down [ 194.267011][ T42] bond0: (slave bond_slave_0): interface is now down [ 194.267031][ T42] bond0: (slave bond_slave_1): interface is now down [ 194.267042][ T42] bond0: (slave syz_tun): interface is now down [ 194.286868][ T155] bond0: (slave bond_slave_0): interface is now down [ 194.286887][ T155] bond0: (slave bond_slave_1): interface is now down [ 194.286899][ T155] bond0: (slave syz_tun): interface is now down [ 194.306690][ T6609] bond0: (slave bond_slave_0): interface is now down [ 194.306710][ T6609] bond0: (slave bond_slave_1): interface is now down [ 194.306720][ T6609] bond0: (slave syz_tun): interface is now down [ 194.329028][ T13] bond0: (slave bond_slave_0): interface is now down [ 194.329047][ T13] bond0: (slave bond_slave_1): interface is now down [ 194.329058][ T13] bond0: (slave syz_tun): interface is now down [ 194.353381][ T13] bond0: (slave bond_slave_0): interface is now down [ 194.353401][ T13] bond0: (slave bond_slave_1): interface is now down [ 194.353412][ T13] bond0: (slave syz_tun): interface is now down [ 194.368302][ T61] bond0: (slave bond_slave_0): interface is now down [ 194.368322][ T61] bond0: (slave bond_slave_1): interface is now down [ 194.368334][ T61] bond0: (slave syz_tun): interface is now down [ 194.386158][ T6609] bond0: (slave bond_slave_0): interface is now down [ 194.386177][ T6609] bond0: (slave bond_slave_1): interface is now down [ 194.386189][ T6609] bond0: (slave syz_tun): interface is now down [ 194.405837][ T13] bond0: (slave bond_slave_0): interface is now down [ 194.405857][ T13] bond0: (slave bond_slave_1): interface is now down [ 194.430955][ T13] bond0: (slave syz_tun): interface is now down [ 194.448220][ T85] bond0: (slave bond_slave_0): interface is now down [ 194.448242][ T85] bond0: (slave bond_slave_1): interface is now down [ 194.448253][ T85] bond0: (slave syz_tun): interface is now down [ 194.466064][ T82] bond0: (slave bond_slave_0): interface is now down [ 194.466085][ T82] bond0: (slave bond_slave_1): interface is now down [ 194.466128][ T82] bond0: (slave syz_tun): interface is now down [ 194.482710][ T8585] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 194.486780][ T82] bond0: (slave bond_slave_0): interface is now down [ 194.486799][ T82] bond0: (slave bond_slave_1): interface is now down [ 194.486811][ T82] bond0: (slave syz_tun): interface is now down [ 194.494162][ T8585] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 194.506873][ T85] bond0: (slave bond_slave_0): interface is now down [ 194.506893][ T85] bond0: (slave bond_slave_1): interface is now down [ 194.506904][ T85] bond0: (slave syz_tun): interface is now down [ 194.512417][ T8585] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 194.524877][ T8585] veth1_vlan: left promiscuous mode [ 194.526285][ T85] bond0: (slave bond_slave_0): interface is now down [ 194.526303][ T85] bond0: (slave bond_slave_1): interface is now down [ 194.526314][ T85] bond0: (slave syz_tun): interface is now down [ 194.533031][ T8585] veth0_vlan: left promiscuous mode [ 194.546035][ T82] bond0: (slave bond_slave_0): interface is now down [ 194.546055][ T82] bond0: (slave bond_slave_1): interface is now down [ 194.546067][ T82] bond0: (slave syz_tun): interface is now down [ 194.560815][ T8585] veth0_vlan: entered promiscuous mode [ 194.566205][ T82] bond0: (slave bond_slave_0): interface is now down [ 194.566228][ T82] bond0: (slave bond_slave_1): interface is now down [ 194.566239][ T82] bond0: (slave syz_tun): interface is now down [ 194.572606][ T8585] veth1_vlan: entered promiscuous mode [ 194.587308][ T85] bond0: (slave bond_slave_0): interface is now down [ 194.587328][ T85] bond0: (slave bond_slave_1): interface is now down [ 194.587339][ T85] bond0: (slave syz_tun): interface is now down [ 194.605851][ T13] bond0: (slave bond_slave_0): interface is now down [ 194.605871][ T13] bond0: (slave bond_slave_1): interface is now down [ 194.605882][ T13] bond0: (slave syz_tun): interface is now down [ 194.621908][ T8585] veth1_macvtap: left promiscuous mode [ 194.626789][ T13] bond0: (slave bond_slave_0): interface is now down [ 194.626807][ T13] bond0: (slave bond_slave_1): interface is now down [ 194.626819][ T13] bond0: (slave syz_tun): interface is now down [ 194.631394][ T8585] veth0_macvtap: left promiscuous mode [ 194.635186][ T8585] veth0_macvtap: entered promiscuous mode [ 194.641661][ T8585] veth1_macvtap: entered promiscuous mode [ 194.647131][ T12] bond0: (slave bond_slave_0): interface is now down [ 194.647147][ T12] bond0: (slave bond_slave_1): interface is now down [ 194.647158][ T12] bond0: (slave syz_tun): interface is now down [ 194.666867][ T82] bond0: (slave bond_slave_0): interface is now down [ 194.666887][ T82] bond0: (slave bond_slave_1): interface is now down [ 194.666899][ T82] bond0: (slave syz_tun): interface is now down [ 194.686236][ T82] bond0: (slave bond_slave_0): interface is now down [ 194.686256][ T82] bond0: (slave bond_slave_1): interface is now down [ 194.686268][ T82] bond0: (slave syz_tun): interface is now down [ 194.687585][ T8585] 8021q: adding VLAN 0 to HW filter on device ªªªªªª [ 194.699782][ T8585] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 194.706344][ T82] bond0: (slave bond_slave_0): interface is now down [ 194.706363][ T82] bond0: (slave bond_slave_1): interface is now down [ 194.706375][ T82] bond0: (slave syz_tun): interface is now down [ 194.719033][ T8585] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 194.724145][ T8585] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 194.726096][ T8585] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 194.726400][ T1216] bond0: (slave bond_slave_0): interface is now down [ 194.726416][ T1216] bond0: (slave bond_slave_1): interface is now down [ 194.726427][ T1216] bond0: (slave syz_tun): interface is now down [ 194.811731][ T1216] bond0: now running without any active interface! [ 194.872785][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.872884][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.881156][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.881252][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.966823][ T50] netdevsim netdevsim2 ªªªªªª: set [1, 1] type 2 family 0 port 6081 - 0 [ 195.076646][ T13] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 195.078291][ T13] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 195.078328][ T13] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 195.191087][ T8603] syzkaller1: entered promiscuous mode [ 195.191108][ T8603] syzkaller1: entered allmulticast mode [ 195.231500][ T8620] geneve2: entered promiscuous mode [ 195.231520][ T8620] geneve2: entered allmulticast mode [ 195.306966][ T8608] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 195.314123][ T8603] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 195.651106][ T8647] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 195.651203][ T8647] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 195.730737][ T8653] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 196.069155][ T8664] macsec2: entered promiscuous mode [ 196.216486][ T50] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.216819][ T82] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.216894][ T82] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.216942][ T50] netdevsim netdevsim2 ªªªªªª: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.302569][ T8682] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 196.364337][ T8668] netlink: 'syz.1.646': attribute type 16 has an invalid length. [ 196.364357][ T8668] netlink: 'syz.1.646': attribute type 17 has an invalid length. [ 196.418941][ T8678] ieee802154 phy0 wpan0: encryption failed: -22 [ 196.446513][ T8668] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 196.605560][ T8694] syzkaller0: entered promiscuous mode [ 196.605580][ T8694] syzkaller0: entered allmulticast mode [ 196.773708][ T8709] __nla_validate_parse: 12 callbacks suppressed [ 196.773727][ T8709] netlink: 424 bytes leftover after parsing attributes in process `syz.4.657'. [ 196.773746][ T8709] netlink: 424 bytes leftover after parsing attributes in process `syz.4.657'. [ 196.781204][ T8699] netlink: 8 bytes leftover after parsing attributes in process `syz.1.654'. [ 197.179637][ T8732] netlink: 8 bytes leftover after parsing attributes in process `syz.4.663'. [ 197.179659][ T8732] netlink: 24 bytes leftover after parsing attributes in process `syz.4.663'. [ 197.210783][ T8740] netlink: 8 bytes leftover after parsing attributes in process `syz.4.663'. [ 197.210801][ T8740] netlink: 24 bytes leftover after parsing attributes in process `syz.4.663'. [ 197.221466][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 197.221601][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 197.420684][ T8744] netlink: 12 bytes leftover after parsing attributes in process `syz.0.666'. [ 197.420907][ T8744] 8021q: VLANs not supported on wg0 [ 197.851172][ T8772] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 198.039314][ T8784] netlink: 8 bytes leftover after parsing attributes in process `syz.0.678'. [ 198.162998][ T8795] netlink: 36 bytes leftover after parsing attributes in process `syz.1.682'. [ 198.402893][ T8814] ip_tables: iptables: counters copy to user failed while replacing table [ 198.543058][ T8821] 8021q: VLANs not supported on lo [ 198.808479][ T8833] netlink: 'syz.2.690': attribute type 8 has an invalid length. [ 198.861826][ T8831] rxe_eth0 speed is unknown, defaulting to 1000 [ 199.277713][ T8852] syzkaller0: entered promiscuous mode [ 199.277729][ T8852] syzkaller0: entered allmulticast mode [ 199.304729][ T8852] netlink: 'syz.4.694': attribute type 2 has an invalid length. [ 199.304824][ T8852] netlink: 'syz.4.694': attribute type 2 has an invalid length. [ 199.304944][ T8852] netlink: 'syz.4.694': attribute type 2 has an invalid length. [ 199.305010][ T8852] netlink: 'syz.4.694': attribute type 2 has an invalid length. [ 199.305067][ T8852] netlink: 'syz.4.694': attribute type 2 has an invalid length. [ 199.305125][ T8852] netlink: 'syz.4.694': attribute type 2 has an invalid length. [ 199.305181][ T8852] netlink: 'syz.4.694': attribute type 2 has an invalid length. [ 199.987349][ T8879] pimreg: entered allmulticast mode [ 199.991728][ T82] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 200.756565][ T8936] syzkaller0: entered promiscuous mode [ 200.756586][ T8936] syzkaller0: entered allmulticast mode [ 200.802383][ T8937] 8021q: adding VLAN 0 to HW filter on device bond4 [ 200.833968][ T8937] bond4: (slave veth3): Enslaving as an active interface with a down link [ 201.361075][ T8954] bond5: entered promiscuous mode [ 201.361392][ T8954] 8021q: adding VLAN 0 to HW filter on device bond5 [ 201.408571][ T8954] 8021q: adding VLAN 0 to HW filter on device bond5 [ 201.408908][ T8954] bond5: (slave gre1): The slave device specified does not support setting the MAC address [ 201.413801][ T8954] bond5: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 201.433496][ T8954] bond5: (slave gre1): making interface the new active one [ 201.433520][ T8954] gre1: entered promiscuous mode [ 201.443259][ T8954] bond5: (slave gre1): Enslaving as an active interface with an up link [ 201.476693][ T8954] Bluetooth: hci0: invalid length 0, exp 2 for type 15 [ 201.480106][ T8954] net_ratelimit: 1 callbacks suppressed [ 201.480121][ T8954] ip_tables: iptables: counters copy to user failed while replacing table [ 201.483880][ T8954] syzkaller1: entered promiscuous mode [ 201.483898][ T8954] syzkaller1: entered allmulticast mode [ 201.970936][ T8980] x_tables: duplicate underflow at hook 1 [ 202.044557][ T8992] validate_nla: 36 callbacks suppressed [ 202.044575][ T8992] netlink: 'syz.2.732': attribute type 3 has an invalid length. [ 202.214563][ T9000] x_tables: duplicate underflow at hook 2 [ 202.548036][ T9026] netlink: 'syz.2.742': attribute type 39 has an invalid length. [ 202.718026][ T9037] netlink: 'syz.0.745': attribute type 1 has an invalid length. [ 202.745579][ T9042] __nla_validate_parse: 11 callbacks suppressed [ 202.745597][ T9042] netlink: 8 bytes leftover after parsing attributes in process `syz.1.746'. [ 202.759776][ T9036] netlink: 44 bytes leftover after parsing attributes in process `syz.0.745'. [ 202.759977][ T9036] netlink: 44 bytes leftover after parsing attributes in process `syz.0.745'. [ 202.760188][ T9036] netlink: 44 bytes leftover after parsing attributes in process `syz.0.745'. [ 202.760376][ T9036] netlink: 44 bytes leftover after parsing attributes in process `syz.0.745'. [ 202.760555][ T9036] netlink: 44 bytes leftover after parsing attributes in process `syz.0.745'. [ 202.760733][ T9036] netlink: 44 bytes leftover after parsing attributes in process `syz.0.745'. [ 202.760912][ T9036] netlink: 44 bytes leftover after parsing attributes in process `syz.0.745'. [ 202.761089][ T9036] netlink: 44 bytes leftover after parsing attributes in process `syz.0.745'. [ 202.764423][ T9036] netlink: 44 bytes leftover after parsing attributes in process `syz.0.745'. [ 203.199305][ T9070] netlink: 'syz.4.755': attribute type 11 has an invalid length. [ 204.145980][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 205.089073][ T9146] xt_recent: hitcount (268435462) is larger than allowed maximum (65535) [ 205.089268][ T9146] xt_recent: hitcount (268435462) is larger than allowed maximum (65535) [ 205.089569][ T9146] xt_recent: hitcount (268435462) is larger than allowed maximum (65535) [ 205.089709][ T9146] xt_recent: hitcount (268435462) is larger than allowed maximum (65535) [ 205.089848][ T9146] xt_recent: hitcount (268435462) is larger than allowed maximum (65535) [ 205.089989][ T9146] xt_recent: hitcount (268435462) is larger than allowed maximum (65535) [ 205.090122][ T9146] xt_recent: hitcount (268435462) is larger than allowed maximum (65535) [ 205.092950][ T9146] xt_recent: hitcount (268435462) is larger than allowed maximum (65535) [ 205.093102][ T9146] xt_recent: hitcount (268435462) is larger than allowed maximum (65535) [ 205.093230][ T9146] xt_recent: hitcount (268435462) is larger than allowed maximum (65535) [ 205.619910][ T9170] netlink: 'syz.4.777': attribute type 1 has an invalid length. [ 205.665964][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 205.673735][ T9170] bond6: entered promiscuous mode [ 205.674147][ T9170] 8021q: adding VLAN 0 to HW filter on device bond6 [ 205.712914][ T9178] netlink: 'syz.2.779': attribute type 12 has an invalid length. [ 205.780302][ T9170] veth5: entered allmulticast mode [ 205.795381][ T9170] bond6: (slave veth5): making interface the new active one [ 205.795402][ T9170] veth5: entered promiscuous mode [ 205.810887][ T9170] bond6: (slave veth5): Enslaving as an active interface with an up link [ 205.882739][ T9190] netlink: 'syz.2.779': attribute type 12 has an invalid length. [ 205.883150][ T9189] sch_fq: defrate 4294967293 ignored. [ 205.921373][ T9189] tipc: Enabling of bearer rejected, failed to enable media [ 206.171618][ T9208] bridge0: port 3(syz_tun) entered blocking state [ 206.172713][ T9208] bridge0: port 3(syz_tun) entered disabled state [ 206.174021][ T9208] syz_tun: entered allmulticast mode [ 206.180526][ T9208] syz_tun: entered promiscuous mode [ 206.187880][ T9208] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.187987][ T9208] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.214903][ T9208] bridge0: port 3(syz_tun) entered blocking state [ 206.215024][ T9208] bridge0: port 3(syz_tun) entered forwarding state [ 206.361219][ T31] audit: type=1804 audit(1792331406.034:2): pid=9221 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.790" name="/newroot/168/cgroup.controllers" dev="tmpfs" ino=885 res=1 errno=0 [ 206.361265][ T31] audit: type=1800 audit(1792331406.034:3): pid=9221 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.790" name="cgroup.controllers" dev="tmpfs" ino=885 res=0 errno=0 [ 206.797326][ T9222] bond5 (unregistering): Released all slaves [ 206.969391][ T9250] veth0: entered promiscuous mode [ 206.973216][ T9255] bond0: entered promiscuous mode [ 207.382527][ T9278] pimreg1: tun_chr_ioctl cmd 1074025677 [ 207.382616][ T9278] pimreg1: linktype set to 825 [ 207.553934][ T9240] bond0: left promiscuous mode [ 207.554246][ T9240] veth0: left promiscuous mode [ 207.731852][ T9283] bridge: RTM_NEWNEIGH with invalid state 0x20 [ 207.783626][ T9283] ip_tables: iptables: counters copy to user failed while replacing table [ 207.905162][ T9292] netlink: 'syz.4.806': attribute type 1 has an invalid length. [ 207.943120][ T9292] 8021q: adding VLAN 0 to HW filter on device bond7 [ 208.035181][ T9292] can: request_module (can-proto-0) failed. [ 208.124445][ T9303] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 208.124477][ T9303] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 208.124501][ T9303] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 208.320236][ T9304] __nla_validate_parse: 70 callbacks suppressed [ 208.320255][ T9304] netlink: 61440 bytes leftover after parsing attributes in process `syz.3.809'. [ 208.362047][ T9320] netlink: 'syz.4.812': attribute type 2 has an invalid length. [ 208.362087][ T9320] netlink: 'syz.4.812': attribute type 2 has an invalid length. [ 208.401167][ T9319] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 208.404621][ T9319] team0: No ports can be present during mode change [ 208.538132][ T9327] netlink: 'syz.0.815': attribute type 10 has an invalid length. [ 208.538935][ T9325] netlink: 28 bytes leftover after parsing attributes in process `syz.3.814'. [ 208.560787][ T9310] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 208.560819][ T9310] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 208.560843][ T9310] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 208.585138][ T9327] bridge0: port 3(syz_tun) entered disabled state [ 208.585753][ T9327] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.586530][ T9327] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.611626][ T9328] netlink: 68 bytes leftover after parsing attributes in process `syz.3.814'. [ 208.611673][ T9328] netlink: 8 bytes leftover after parsing attributes in process `syz.3.814'. [ 208.611685][ T9328] netlink: 24 bytes leftover after parsing attributes in process `syz.3.814'. [ 208.611696][ T9328] netlink: 8 bytes leftover after parsing attributes in process `syz.3.814'. [ 208.625655][ T9327] bridge0: port 3(syz_tun) entered blocking state [ 208.625831][ T9327] bridge0: port 3(syz_tun) entered forwarding state [ 208.626129][ T9327] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.626257][ T9327] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.626525][ T9327] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.626651][ T9327] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.673249][ T9327] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 208.786831][ T9310] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 208.786862][ T9310] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 208.786885][ T9310] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 208.926762][ T9310] netdevsim netdevsim2 ªªªªªª (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 208.926798][ T9310] netdevsim netdevsim2 ªªªªªª (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 208.926821][ T9310] netdevsim netdevsim2 ªªªªªª (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 208.938524][ T9345] netlink: 8 bytes leftover after parsing attributes in process `syz.1.817'. [ 209.029930][ T9327] syzkaller1: entered promiscuous mode [ 209.029952][ T9327] syzkaller1: entered allmulticast mode [ 209.176736][ T82] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.176769][ T82] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.176790][ T82] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 209.177215][ T82] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.177239][ T82] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.177261][ T82] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 209.177289][ T82] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.177308][ T82] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.177328][ T82] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 209.177357][ T82] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.177375][ T82] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.177396][ T82] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 209.319376][ T9363] netlink: 64 bytes leftover after parsing attributes in process `syz.3.824'. [ 209.624989][ T9379] netlink: 'syz.2.826': attribute type 10 has an invalid length. [ 209.662313][ T9379] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.670580][ T9379] team0: Port device bond0 added [ 209.701369][ T9390] openvswitch: netlink: Key 6 has unexpected len 47 expected 2 [ 209.730907][ T9388] netlink: 92 bytes leftover after parsing attributes in process `syz.3.830'. [ 209.749358][ T9388] netlink: 63 bytes leftover after parsing attributes in process `syz.3.830'. [ 210.295422][ T9432] netlink: 'syz.2.844': attribute type 30 has an invalid length. [ 210.309078][ T9432] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 3356 [ 210.366696][ T9437] Bluetooth: hci0: invalid length 0, exp 2 for type 18 [ 210.373503][ T9439] Bluetooth: hci0: invalid length 0, exp 2 for type 18 [ 210.681640][ T9464] netlink: 'syz.3.853': attribute type 2 has an invalid length. [ 210.755337][ T9466] xt_nat: multiple ranges no longer supported [ 211.037946][ T9483] netlink: 'syz.0.860': attribute type 4 has an invalid length. [ 211.114163][ T9485] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ç–½mÔ%A¯úéiÆâxà?ZøË_½á†˜ow¾Äº| [ 211.210506][ T9496] netlink: 'syz.0.864': attribute type 1 has an invalid length. [ 211.210526][ T9496] netlink: 'syz.0.864': attribute type 1 has an invalid length. [ 211.233137][ T9494] rdma_rxe: rxe_newlink: failed to add wg0 [ 211.498637][ T9520] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 211.504581][ T9520] IPv6: Can't replace route, no match found [ 211.533752][ T31] audit: type=1804 audit(1792331411.204:4): pid=9524 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.871" name="/newroot/182/memory.events" dev="tmpfs" ino=958 res=1 errno=0 [ 211.540243][ T31] audit: type=1800 audit(1792331411.214:5): pid=9524 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.871" name="memory.events" dev="tmpfs" ino=958 res=0 errno=0 [ 211.540523][ T31] audit: type=1800 audit(1792331411.214:6): pid=9524 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.871" name="memory.events" dev="tmpfs" ino=958 res=0 errno=0 [ 211.541565][ T31] audit: type=1800 audit(1792331411.214:7): pid=9524 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.871" name="memory.events" dev="tmpfs" ino=958 res=0 errno=0 [ 211.541605][ T31] audit: type=1800 audit(1792331411.214:8): pid=9524 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.871" name="memory.events" dev="tmpfs" ino=958 res=0 errno=0 [ 211.541640][ T31] audit: type=1800 audit(1792331411.214:9): pid=9524 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.871" name="memory.events" dev="tmpfs" ino=958 res=0 errno=0 [ 211.541675][ T31] audit: type=1800 audit(1792331411.214:10): pid=9524 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.871" name="memory.events" dev="tmpfs" ino=958 res=0 errno=0 [ 211.561047][ T31] audit: type=1800 audit(1792331411.224:11): pid=9524 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.871" name="memory.events" dev="tmpfs" ino=958 res=0 errno=0 [ 211.562461][ T31] audit: type=1800 audit(1792331411.224:12): pid=9524 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.871" name="memory.events" dev="tmpfs" ino=958 res=0 errno=0 [ 211.562796][ T31] audit: type=1800 audit(1792331411.224:13): pid=9524 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.871" name="memory.events" dev="tmpfs" ino=958 res=0 errno=0 [ 211.690632][ T9523] can: request_module (can-proto-0) failed. [ 211.867639][ T9541] IPVS: length: 15 != 8 [ 211.868065][ T9543] IPVS: length: 15 != 8 [ 212.065939][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 212.163980][ T9561] Bluetooth: hci0: unsupported parameter 5135 [ 212.164000][ T9561] Bluetooth: hci0: unsupported parameter 8192 [ 212.164016][ T9561] Bluetooth: hci0: unsupported parameter 5135 [ 212.164028][ T9561] Bluetooth: hci0: unsupported parameter 8192 [ 212.265080][ T9563] 8021q: adding VLAN 0 to HW filter on device bond4 [ 212.648167][ T9591] syzkaller0: entered promiscuous mode [ 212.648188][ T9591] syzkaller0: entered allmulticast mode [ 212.887850][ T9608] team0: Port device dummy0 added [ 213.001405][ T9615] syzkaller0: entered promiscuous mode [ 213.001426][ T9615] syzkaller0: entered allmulticast mode [ 213.003618][ T13] 0: reclassify loop, rule prio 0, protocol 700 [ 213.343595][ T9639] __nla_validate_parse: 54 callbacks suppressed [ 213.343613][ T9639] netlink: 16 bytes leftover after parsing attributes in process `syz.2.909'. [ 213.345139][ T9639] netlink: 12 bytes leftover after parsing attributes in process `syz.2.909'. [ 213.355739][ T9634] validate_nla: 1 callbacks suppressed [ 213.355753][ T9634] netlink: 'syz.0.906': attribute type 1 has an invalid length. [ 213.385092][ T9634] 8021q: adding VLAN 0 to HW filter on device bond5 [ 213.408207][ T9642] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 213.410340][ T9642] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 213.410351][ T9642] IPv6: NLM_F_CREATE should be set when creating new route [ 213.410388][ T9642] IPv6: NLM_F_CREATE should be set when creating new route [ 213.410411][ T9642] IPv6: NLM_F_CREATE should be set when creating new route [ 213.478993][ T9647] netlink: 'syz.0.910': attribute type 10 has an invalid length. [ 213.485920][ T9647] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 213.497939][ T9647] team0: Port device netdevsim1 added [ 213.510087][ T9647] ip_tables: iptables: counters copy to user failed while replacing table [ 213.511780][ T9647] C: renamed from lo (while UP) [ 213.528900][ T9647] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 213.664023][ T9651] netlink: 132 bytes leftover after parsing attributes in process `syz.2.912'. [ 213.673218][ T9653] netlink: 4 bytes leftover after parsing attributes in process `syz.4.913'. [ 213.680653][ T9654] netlink: 4 bytes leftover after parsing attributes in process `syz.4.913'. [ 213.721892][ T9662] netlink: 20 bytes leftover after parsing attributes in process `syz.1.915'. [ 213.802040][ T9664] macvlan1: entered promiscuous mode [ 213.803986][ T9664] macvlan1: left promiscuous mode [ 213.893125][ T9670] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 213.937601][ T9670] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 213.940745][ T9674] batman_adv: batadv0: Adding interface: veth0 [ 213.940759][ T9674] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 213.940928][ T9674] batman_adv: batadv0: Interface activated: veth0 [ 213.968174][ T9675] batman_adv: batadv0: Interface deactivated: veth0 [ 213.968193][ T9675] batman_adv: batadv0: Removing interface: veth0 [ 214.099588][ T9683] netlink: 'syz.1.922': attribute type 30 has an invalid length. [ 214.124942][ T9683] batman_adv: batadv0: Adding interface: geneve0 [ 214.124958][ T9683] batman_adv: batadv0: The MTU of interface geneve0 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 214.124984][ T9683] batman_adv: batadv0: Interface activated: geneve0 [ 214.151099][ T9683] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 214.151121][ T9683] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 214.161264][ T9683] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 214.161283][ T9683] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 214.200114][ T9683] batman_adv: batadv0: Interface deactivated: geneve0 [ 214.200135][ T9683] batman_adv: batadv0: Removing interface: geneve0 [ 214.292357][ T9685] netlink: 4 bytes leftover after parsing attributes in process `syz.2.923'. [ 214.529980][ T9693] ip6erspan0: entered allmulticast mode [ 214.568948][ T4935] block nbd1: Receive control failed (result -22) [ 214.570965][ T9695] nbd1: detected capacity change from 0 to 32 [ 214.590087][ T2025] block nbd1: Dead connection, failed to find a fallback [ 214.590108][ T2025] block nbd1: shutting down sockets [ 214.590192][ T2025] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 214.590283][ T2025] Buffer I/O error on dev nbd1, logical block 0, async page read [ 214.590938][ T2025] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 214.590962][ T2025] Buffer I/O error on dev nbd1, logical block 0, async page read [ 214.591500][ T2025] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 214.591523][ T2025] Buffer I/O error on dev nbd1, logical block 0, async page read [ 214.591837][ T2025] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 214.591860][ T2025] Buffer I/O error on dev nbd1, logical block 0, async page read [ 214.592043][ T2025] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 214.592064][ T2025] Buffer I/O error on dev nbd1, logical block 0, async page read [ 214.593159][ T2025] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 214.593182][ T2025] Buffer I/O error on dev nbd1, logical block 0, async page read [ 214.599863][ T2025] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 214.599888][ T2025] Buffer I/O error on dev nbd1, logical block 0, async page read [ 214.603518][ T2025] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 214.603542][ T2025] Buffer I/O error on dev nbd1, logical block 0, async page read [ 214.603588][ T9315] ldm_validate_partition_table(): Disk read failed. [ 214.603672][ T2025] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 214.603693][ T2025] Buffer I/O error on dev nbd1, logical block 0, async page read [ 214.603815][ T2025] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 214.603836][ T2025] Buffer I/O error on dev nbd1, logical block 0, async page read [ 214.608558][ T9315] Dev nbd1: unable to read RDB block 0 [ 214.610325][ T9315] nbd1: unable to read partition table [ 214.691205][ T9315] ldm_validate_partition_table(): Disk read failed. [ 214.692317][ T9315] Dev nbd1: unable to read RDB block 0 [ 214.698984][ T9315] nbd1: unable to read partition table [ 214.754289][ T9697] netlink: 12 bytes leftover after parsing attributes in process `syz.1.926'. [ 214.754415][ T9697] netlink: 48 bytes leftover after parsing attributes in process `syz.1.926'. [ 215.323861][ T9730] netlink: 4 bytes leftover after parsing attributes in process `syz.2.933'. [ 215.332739][ T9730] netlink: 'syz.2.933': attribute type 1 has an invalid length. [ 215.771662][ T9756] syzkaller1: entered promiscuous mode [ 215.771684][ T9756] syzkaller1: entered allmulticast mode [ 216.352280][ T9767] ipvlan2: entered promiscuous mode [ 216.412142][ T9759] ipvlan3: entered promiscuous mode [ 217.310563][ T9843] Cannot find set identified by id 65534 to match [ 217.633620][ T9850] Bluetooth: hci0: unsupported parameter 5135 [ 217.633643][ T9850] Bluetooth: hci0: invalid length 1, exp 2 for type 24 [ 218.030125][ T9865] netlink: 'syz.2.970': attribute type 6 has an invalid length. [ 218.030145][ T9865] netlink: 'syz.2.970': attribute type 5 has an invalid length. [ 218.052793][ T9865] netlink: 'syz.2.970': attribute type 6 has an invalid length. [ 218.052811][ T9865] netlink: 'syz.2.970': attribute type 5 has an invalid length. [ 218.088273][ T9867] bond0: entered promiscuous mode [ 218.088293][ T9867] bond_slave_0: entered promiscuous mode [ 218.088494][ T9867] bond_slave_1: entered promiscuous mode [ 218.088661][ T9867] bridge0: entered promiscuous mode [ 218.094335][ T9867] batadv0: entered promiscuous mode [ 218.107699][ T9867] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 218.135445][ T9867] bond0: left promiscuous mode [ 218.135465][ T9867] bond_slave_0: left promiscuous mode [ 218.135675][ T9867] bond_slave_1: left promiscuous mode [ 218.154630][ T9867] bridge0: left promiscuous mode [ 218.163522][ T9867] batadv0: left promiscuous mode [ 218.341017][ T9884] syzkaller0: entered promiscuous mode [ 218.341038][ T9884] syzkaller0: entered allmulticast mode [ 218.358325][ T9884] __nla_validate_parse: 13 callbacks suppressed [ 218.358340][ T9884] netlink: 2724 bytes leftover after parsing attributes in process `syz.4.975'. [ 218.358488][ T9884] netlink: 28 bytes leftover after parsing attributes in process `syz.4.975'. [ 218.358504][ T9884] netlink: 28 bytes leftover after parsing attributes in process `syz.4.975'. [ 218.365676][ T9884] TC_ACT_REPEAT abuse ? [ 218.471541][ T9901] x_tables: duplicate underflow at hook 1 [ 218.661394][ T9909] netlink: 'syz.4.983': attribute type 11 has an invalid length. [ 218.714247][ T9912] netlink: 16 bytes leftover after parsing attributes in process `syz.2.985'. [ 218.969760][ T9928] netlink: 4 bytes leftover after parsing attributes in process `syz.2.989'. [ 219.004991][ T9928] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 219.048519][ T9939] netlink: 12 bytes leftover after parsing attributes in process `syz.4.991'. [ 219.055260][ T9937] netlink: 20 bytes leftover after parsing attributes in process `syz.4.991'. [ 219.205279][ T9948] ebt_limit: overflow, try lower: 196608/0 [ 219.305264][ T9955] Bluetooth: MGMT ver 1.23 [ 219.354936][ T9958] Cannot find add_set index 0 as target [ 219.493730][ T9971] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1000'. [ 219.613533][ T9977] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1004'. [ 219.613587][ T9977] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1004'. [ 219.643471][ T9977] syzkaller1: entered promiscuous mode [ 219.643492][ T9977] syzkaller1: entered allmulticast mode [ 219.661847][ T9977] netlink: 'syz.3.1004': attribute type 10 has an invalid length. [ 219.828107][ T9990] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 219.837588][ T9990] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 219.850068][ T9988] netlink: 'syz.0.1006': attribute type 3 has an invalid length. [ 219.944856][ T9999] gtp2: entered promiscuous mode [ 219.944877][ T9999] gtp2: entered allmulticast mode [ 220.166945][T10015] sctp: [Deprecated]: syz.4.1014 (pid 10015) Use of int in max_burst socket option deprecated. [ 220.166945][T10015] Use struct sctp_assoc_value instead [ 220.357818][T10029] netlink: 'syz.3.1016': attribute type 4 has an invalid length. [ 220.422828][T10032] syzkaller0: entered promiscuous mode [ 220.422850][T10032] syzkaller0: entered allmulticast mode [ 220.607525][ T31] kauditd_printk_skb: 56 callbacks suppressed [ 220.607543][ T31] audit: type=1107 audit(1792331420.284:70): pid=10035 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ǘéfù:CY’%…é¦è æ© ÙcåŽéfJ²k¦wäC‚,'N[=Á‡ŸBXsç7ȯQAƒµÿJdNäÏ;&±8g»«S *§ÜÛš²_º…Ð ½Ü[k¢Æ˜’Öi 6΋»zî²Â [ 220.607543][ T31] 3Tx0ÑÉ~…¦+VG6"„§¿ku$é]‹—F^W‰Ÿ¾l_ìAéJÏU^<ËjüÂÏ-´¿C»“|E'Ã"ø [ 220.607543][ T31] `¶É”òסt¾©' [ 220.646080][T10041] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 221.375302][T10089] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 221.425461][T10092] tipc: Enabled bearer , priority 10 [ 221.443506][T10092] 8021q: VLANs not supported on gre0 [ 221.653585][T10106] x_tables: ip6_tables: SNAT target: used from hooks OUTPUT, but only usable from INPUT/POSTROUTING [ 221.769010][T10119] bridge8: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 221.890233][T10126] ip6t_srh: unknown srh match flags 4000 [ 221.973886][T10136] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 223.058091][T10193] netlink: 'syz.1.1060': attribute type 3 has an invalid length. [ 223.282370][T10206] netlink: 'syz.3.1064': attribute type 102 has an invalid length. [ 223.706086][T10235] __nla_validate_parse: 35 callbacks suppressed [ 223.706113][T10235] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1071'. [ 223.905631][T10245] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1071'. [ 223.918300][T10245] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1071'. [ 224.475558][T10261] Bluetooth: hci0: unsupported parameter 5135 [ 224.475579][T10261] Bluetooth: hci0: unsupported parameter 8192 [ 224.475589][T10261] Bluetooth: hci0: unsupported parameter 5135 [ 224.475600][T10261] Bluetooth: hci0: unsupported parameter 8192 [ 224.751069][T10272] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1080'. [ 224.751094][T10272] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1080'. [ 224.751108][T10272] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1080'. [ 224.789701][T10272] netlink: 'syz.3.1080': attribute type 9 has an invalid length. [ 224.789719][T10272] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1080'. [ 224.888877][T10281] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1083'. [ 224.997064][T10283] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1084'. [ 225.550171][T10306] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 225.642873][T10311] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1090'. [ 225.748785][T10318] RDS: rds_bind could not find a transport for 2001::1, load rds_tcp or rds_rdma? [ 225.900539][T10326] netlink: 'syz.4.1093': attribute type 4 has an invalid length. [ 225.901841][T10326] netlink: 'syz.4.1093': attribute type 3 has an invalid length. [ 226.153364][T10338] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 226.211448][T10338] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 226.283164][T10338] netlink: 'syz.2.1097': attribute type 32 has an invalid length. [ 226.347601][T10338] bond4: option coupled_control: invalid value (10) [ 226.352065][T10338] bond4 (unregistering): Released all slaves [ 226.435750][T10337] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 226.461873][T10340] openvswitch: netlink: Flow key attr not present in new flow. [ 226.788243][T10348] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 226.788279][T10348] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.943366][T10359] netlink: 'syz.4.1102': attribute type 1 has an invalid length. [ 227.062964][T10348] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 227.063000][T10348] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.223884][T10348] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 227.223922][T10348] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.381390][T10348] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 227.381423][T10348] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.461631][T10382] syzkaller1: entered promiscuous mode [ 227.461653][T10382] syzkaller1: entered allmulticast mode [ 227.908268][T10407] netlink: 'syz.0.1114': attribute type 1 has an invalid length. [ 228.065989][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 230.191628][T10398] gretap1: entered allmulticast mode [ 230.261832][T10403] syzkaller1: entered promiscuous mode [ 230.261855][T10403] syzkaller1: entered allmulticast mode [ 230.294168][T10411] syzkaller1: left promiscuous mode [ 230.294190][T10411] syzkaller1: left allmulticast mode [ 230.566819][ T6609] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.566851][ T6609] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.736949][ T85] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.736981][ T85] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.737037][ T85] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.737059][ T85] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.737088][ T85] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.737116][ T85] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.932516][T10449] __nla_validate_parse: 17 callbacks suppressed [ 230.932542][T10449] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1127'. [ 231.109015][T10455] openvswitch: netlink: EtherType 300 is less than min 600 [ 231.190202][T10461] openvswitch: netlink: EtherType 300 is less than min 600 [ 231.429965][T10477] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1136'. [ 231.495804][T10471] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1132'. [ 231.539061][T10486] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 231.790347][T10499] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 231.857669][T10505] openvswitch: netlink: IP tunnel dst address not specified [ 231.980878][T10512] netlink: 'syz.0.1142': attribute type 29 has an invalid length. [ 232.035002][T10518] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 232.110510][T10525] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1145'. [ 232.137843][T10525] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1145'. [ 232.363927][T10536] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1151'. [ 232.404782][T10538] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1150'. [ 232.627570][ T31] audit: type=1804 audit(1792331432.304:71): pid=10557 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1158" name="/newroot/257/cgroup.controllers" dev="tmpfs" ino=1324 res=1 errno=0 [ 232.627620][ T31] audit: type=1800 audit(1792331432.304:72): pid=10557 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1158" name="cgroup.controllers" dev="tmpfs" ino=1324 res=0 errno=0 [ 232.836060][T10568] batadv_slave_1: entered promiscuous mode [ 232.853490][T10565] batadv_slave_1: left promiscuous mode [ 233.089695][T10587] ip6tnl2: entered allmulticast mode [ 233.201683][T10592] tipc: Enabled bearer , priority 0 [ 233.203670][T10593] tipc: Enabling of bearer rejected, already enabled [ 233.277516][T10592] syzkaller0: entered promiscuous mode [ 233.277540][T10592] syzkaller0: entered allmulticast mode [ 233.278082][T10592] tipc: Resetting bearer [ 233.283445][T10588] tipc: Resetting bearer [ 233.334690][T10606] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1168'. [ 233.499232][T10611] xt_LOG: prefix is not null-terminated [ 233.503452][T10611] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1171'. [ 233.938364][T10613] ip_tables: iptables: counters copy to user failed while replacing table [ 233.988266][T10613] ip_tables: iptables: counters copy to user failed while replacing table [ 234.892445][T10588] tipc: Disabling bearer [ 235.142429][T10641] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1178'. [ 235.388831][T10666] xt_nfacct: accounting object `syz' does not exist [ 235.524776][T10654] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 235.524814][T10654] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.728628][T10654] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 235.728664][T10654] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.784361][T10690] netlink: 'syz.0.1188': attribute type 20 has an invalid length. [ 235.837061][T10690] netlink: 'syz.0.1188': attribute type 20 has an invalid length. [ 235.847140][ T12] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 235.847181][ T12] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 235.847212][ T12] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 235.847241][ T12] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 236.004591][T10654] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 236.004626][T10654] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.129628][T10654] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 236.129665][T10654] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.228318][T10718] dvmrp0: entered allmulticast mode [ 236.230868][T10718] dvmrp0: left allmulticast mode [ 236.468537][ T1216] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 236.468571][ T1216] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.595915][ T12] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 236.595947][ T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.641697][T10731] xt_hashlimit: size too large, truncated to 1048576 [ 236.667129][ T12] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 236.667161][ T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.667517][ T12] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 236.667541][ T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.876794][T10737] netlink: NAT attribute has 8 unknown bytes [ 236.876828][T10737] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 237.768206][T10772] __nla_validate_parse: 3 callbacks suppressed [ 237.768226][T10772] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1202'. [ 237.804731][T10772] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 237.849250][T10775] syzkaller1: entered promiscuous mode [ 237.849272][T10775] syzkaller1: entered allmulticast mode [ 238.114873][T10787] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1206'. [ 238.126910][T10787] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1206'. [ 238.305875][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 238.491365][T10803] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1208'. [ 238.669205][T10803] syzkaller0: entered promiscuous mode [ 238.669227][T10803] syzkaller0: entered allmulticast mode [ 238.673944][T10812] netlink: 'syz.2.1211': attribute type 3 has an invalid length. [ 238.673963][T10812] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1211'. [ 239.689748][T10863] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1227'. [ 239.755009][T10860] bond4: option active_slave: mode dependency failed, not supported in mode broadcast(3) [ 239.821732][T10860] bond4 (unregistering): Released all slaves [ 239.874779][T10863] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1227'. [ 239.909076][T10881] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1231'. [ 239.912833][T10873] bond4: option active_slave: mode dependency failed, not supported in mode broadcast(3) [ 239.914988][T10873] bond4 (unregistering): Released all slaves [ 240.399018][T10882] macvlan1: entered promiscuous mode [ 240.407640][T10882] macvlan1: entered allmulticast mode [ 240.407658][T10882] veth1_vlan: entered allmulticast mode [ 240.532128][T10893] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1233'. [ 240.534539][T10893] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1233'. [ 240.559845][T10893] netlink: 'syz.4.1233': attribute type 2 has an invalid length. [ 240.583098][T10893] : entered promiscuous mode [ 240.816321][T10911] netlink: 'syz.4.1239': attribute type 5 has an invalid length. [ 240.964569][T10922] netlink: 'syz.4.1242': attribute type 2 has an invalid length. [ 241.809927][T10945] pim6reg: entered allmulticast mode [ 242.127587][T10970] netlink: 'syz.2.1254': attribute type 1 has an invalid length. [ 242.324704][T10977] IPVS: set_ctl: invalid protocol: 115 224.0.0.1:20004 [ 242.690149][T11004] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 243.116552][T11018] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 243.157236][T11024] macsec0: entered promiscuous mode [ 243.257561][T11031] openvswitch: netlink: EtherType 50a is less than min 600 [ 243.275602][T11036] openvswitch: netlink: EtherType 50a is less than min 600 [ 243.452542][T11042] __nla_validate_parse: 13 callbacks suppressed [ 243.452561][T11042] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1273'. [ 243.500548][T11042] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1273'. [ 243.555448][T11045] tipc: Started in network mode [ 243.555477][T11045] tipc: Node identity 6e8f7a16e03a, cluster identity 4711 [ 243.572343][T11045] tipc: Enabled bearer , priority 0 [ 243.588393][T11045] tap0: tun_chr_ioctl cmd 1074025677 [ 243.588499][T11045] tap0: linktype set to 780 [ 243.611148][T11048] tap0: tun_chr_ioctl cmd 1074025673 [ 243.615447][T11047] tipc: Enabling of bearer rejected, already enabled [ 243.619642][T11050] tap0: tun_chr_ioctl cmd 1074025677 [ 243.619763][T11050] tap0: linktype set to 780 [ 243.788388][T11055] IPVS: set_ctl: invalid protocol: 115 255.255.255.255:20001 [ 243.859633][T11059] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1278'. [ 243.890487][T11063] netlink: 'syz.0.1280': attribute type 2 has an invalid length. [ 243.890508][T11063] netlink: 'syz.0.1280': attribute type 2 has an invalid length. [ 244.350490][T11085] syzkaller0: entered promiscuous mode [ 244.350511][T11085] syzkaller0: entered allmulticast mode [ 244.665851][ T6688] tipc: Node number set to 2394257942 [ 244.668974][T11072] virtio_blk virtio4: 1/0/0 default/read/poll queues [ 244.673653][T11072] virtio_blk virtio4: [vda] 262144 512-byte logical blocks (134 MB/128 MiB) [ 244.926370][T11102] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1290'. [ 244.926396][T11102] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1290'. [ 244.926413][T11102] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1290'. [ 244.930656][T11103] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1291'. [ 245.300000][T11106] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1292'. [ 245.316920][T11108] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1293'. [ 245.318869][T11109] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1293'. [ 245.385974][ T6609] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 245.386021][ T6609] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 245.386052][ T6609] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 245.386079][ T6609] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 245.439226][T11113] pim6reg: entered allmulticast mode [ 245.708139][T11128] xt_connbytes: Forcing CT accounting to be enabled [ 245.828287][T11135] ip_tables: iptables: counters copy to user failed while replacing table [ 245.829601][T11135] syzkaller1: left promiscuous mode [ 245.829617][T11135] syzkaller1: left allmulticast mode [ 245.907683][T11132] 8021q: adding VLAN 0 to HW filter on device bond5 [ 246.386162][T11164] bond6: entered promiscuous mode [ 246.386652][T11164] 8021q: adding VLAN 0 to HW filter on device bond6 [ 246.673329][T11182] netlink: 'syz.0.1312': attribute type 62 has an invalid length. [ 248.082319][T11247] TC_ACT_REPEAT abuse ? [ 248.201596][T11254] netlink: 'syz.0.1331': attribute type 8 has an invalid length. [ 248.224199][T11254] veth1_to_team: entered promiscuous mode [ 248.225544][T11254] gretap0: entered promiscuous mode [ 248.238598][T11254] veth1_to_team: left promiscuous mode [ 248.240355][T11254] gretap0: left promiscuous mode [ 248.485229][T11272] netlink: 'syz.1.1336': attribute type 1 has an invalid length. [ 248.485250][T11272] __nla_validate_parse: 8 callbacks suppressed [ 248.485268][T11272] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1336'. [ 248.869652][T11298] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1339'. [ 248.869673][T11298] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1339'. [ 248.869696][T11298] netlink: 'syz.4.1339': attribute type 11 has an invalid length. [ 248.869709][T11298] netlink: 'syz.4.1339': attribute type 14 has an invalid length. [ 249.415455][T11322] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1345'. [ 250.018893][T11355] x_tables: duplicate underflow at hook 1 [ 250.217813][T11363] netlink: 'syz.2.1357': attribute type 1 has an invalid length. [ 250.217834][T11363] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1357'. [ 250.263834][T11369] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1359'. [ 250.282796][T11369] gre2: entered allmulticast mode [ 250.377409][T11372] syzkaller1: entered promiscuous mode [ 250.377430][T11372] syzkaller1: entered allmulticast mode [ 250.614509][T11385] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1364'. [ 250.710954][T11395] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1364'. [ 250.865342][T11397] ip6gretap0: entered promiscuous mode [ 250.934233][T11412] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1372'. [ 250.971491][T11414] ip_tables: iptables: counters copy to user failed while replacing table [ 251.049778][T11419] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1373'. [ 251.072029][T11421] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 251.669874][T11457] x_tables: unsorted entry at hook 1 [ 251.737093][T11460] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 252.395838][T11504] openvswitch: netlink: Flow actions attr not present in new flow. [ 252.516722][T11509] pimreg: entered allmulticast mode [ 252.519645][T11509] pimreg: left allmulticast mode [ 252.974766][T11539] netlink: 'syz.0.1410': attribute type 4 has an invalid length. [ 253.020322][T11543] SET target dimension over the limit! [ 253.038246][T11543] veth1_to_team: entered promiscuous mode [ 253.038952][T11543] veth1_to_team: left promiscuous mode [ 254.053534][T11592] __nla_validate_parse: 11 callbacks suppressed [ 254.053554][T11592] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1421'. [ 254.203304][T11592] veth13: entered allmulticast mode [ 254.674325][T11624] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1429'. [ 255.588501][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.644262][T11634] syzkaller0: entered promiscuous mode [ 256.644283][T11634] syzkaller0: entered allmulticast mode [ 256.809529][T11650] netlink: 'syz.4.1437': attribute type 4 has an invalid length. [ 256.890533][T11660] ip_tables: iptables: counters copy to user failed while replacing table [ 257.108681][T11666] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1439'. [ 257.108706][T11666] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1439'. [ 257.158991][T11666] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1439'. [ 257.159068][T11666] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1439'. [ 257.159285][T11666] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1439'. [ 257.159333][T11666] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1439'. [ 257.159528][T11666] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1439'. [ 257.159576][T11666] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1439'. [ 257.350578][T11693] netlink: 'syz.0.1444': attribute type 39 has an invalid length. [ 257.603400][T11706] IPVS: Unknown mcast interface: macsec0 [ 257.989591][T11732] netlink: NAT attribute type 5 has unexpected length (0 != 2) [ 257.989627][T11732] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 258.052489][T11729] xt_l2tp: invalid flags combination: 8 [ 258.236813][T11743] batman_adv: batadv0: Adding interface: macvtap1 [ 258.236831][T11743] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 258.236854][T11743] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 258.412879][T11760] nbd3: detected capacity change from 0 to 63 [ 258.424259][T11760] block nbd3: NBD_DISCONNECT [ 258.455429][T11760] block nbd3: Disconnected due to user request. [ 258.463116][ T2025] blk_print_req_error: 27 callbacks suppressed [ 258.463134][ T2025] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 258.463160][ T2025] buffer_io_error: 27 callbacks suppressed [ 258.463168][ T2025] Buffer I/O error on dev nbd3, logical block 1, async page read [ 258.463203][ T2025] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 2 prio class 2 [ 258.463223][ T2025] Buffer I/O error on dev nbd3, logical block 2, async page read [ 258.463236][ T2025] Buffer I/O error on dev nbd3, logical block 3, async page read [ 258.463631][T11760] block nbd3: shutting down sockets [ 258.488783][ C1] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 258.488898][ C1] Buffer I/O error on dev nbd3, logical block 0, async page read [ 258.503022][ T2050] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 258.503053][ T2050] Buffer I/O error on dev nbd3, logical block 0, async page read [ 258.503068][ T2050] Buffer I/O error on dev nbd3, logical block 1, async page read [ 258.503082][ T2050] Buffer I/O error on dev nbd3, logical block 2, async page read [ 258.503095][ T2050] Buffer I/O error on dev nbd3, logical block 3, async page read [ 258.506211][ T2025] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 258.506241][ T2025] Buffer I/O error on dev nbd3, logical block 0, async page read [ 258.506257][ T2025] Buffer I/O error on dev nbd3, logical block 1, async page read [ 258.514616][ T2025] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 258.514787][ T2025] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 258.516302][ T2050] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 258.516498][ T2050] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 258.516675][ T2050] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 258.516730][T11644] ldm_validate_partition_table(): Disk read failed. [ 258.518388][T11644] Dev nbd3: unable to read RDB block 0 [ 258.519080][T11644] nbd3: unable to read partition table [ 258.638695][T11644] ldm_validate_partition_table(): Disk read failed. [ 258.641209][T11644] Dev nbd3: unable to read RDB block 0 [ 258.642675][T11770] ip_tables: iptables: counters copy to user failed while replacing table [ 258.650307][T11644] nbd3: unable to read partition table [ 259.127092][T11792] __nla_validate_parse: 71 callbacks suppressed [ 259.127111][T11792] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1472'. [ 259.425913][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 260.091948][T11796] tipc: Enabling of bearer rejected, already enabled [ 260.092288][T11796] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1475'. [ 260.093288][T11796] netlink: 'syz.0.1475': attribute type 1 has an invalid length. [ 260.148327][T11796] bond7: entered promiscuous mode [ 260.148725][T11796] 8021q: adding VLAN 0 to HW filter on device bond7 [ 260.181639][T11796] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1475'. [ 260.202099][T11806] ipvlan2: entered promiscuous mode [ 260.232732][T11796] bond7: entered allmulticast mode [ 260.233126][T11811] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 260.257497][T11811] smc: net device vlan1 applied user defined pnetid SYZ2 [ 260.619376][T11837] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1487'. [ 260.639800][T11838] pim6reg: left allmulticast mode [ 260.748820][T11849] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1488'. [ 260.748945][T11849] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 260.748945][T11849] Please contact the netfilter-devel mailing list or update your nftables rules. [ 260.810804][T11851] tipc: Enabling of bearer rejected, failed to enable media [ 260.863219][T11853] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 260.882573][T11855] netlink: 'syz.3.1491': attribute type 11 has an invalid length. [ 260.882594][T11855] netlink: 'syz.3.1491': attribute type 11 has an invalid length. [ 260.882606][T11855] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1491'. [ 260.948285][T11860] FAULT_INJECTION: forcing a failure. [ 260.948285][T11860] name failslab, interval 1, probability 0, space 0, times 0 [ 260.948317][T11860] CPU: 1 UID: 0 PID: 11860 Comm: syz.4.1493 Not tainted syzkaller #0 PREEMPT(full) [ 260.948338][T11860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 260.948348][T11860] Call Trace: [ 260.948355][T11860] [ 260.948364][T11860] dump_stack_lvl+0xe8/0x150 [ 260.948393][T11860] should_fail_ex+0x410/0x560 [ 260.948423][T11860] should_failslab+0xa8/0x100 [ 260.948448][T11860] ? skb_clone+0x212/0x3a0 [ 260.948472][T11860] kmem_cache_alloc_noprof+0xa1/0x600 [ 260.948493][T11860] ? skb_clone+0x212/0x3a0 [ 260.948522][T11860] skb_clone+0x212/0x3a0 [ 260.948550][T11860] bpf_clone_redirect+0x170/0x4b0 [ 260.948577][T11860] ? bpf_test_run+0x1d1/0x830 [ 260.948596][T11860] bpf_prog_2f59963de350c2d2+0x5e/0x67 [ 260.948618][T11860] ? __kernel_text_address+0xd/0x30 [ 260.948640][T11860] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 260.948659][T11860] ? arch_stack_walk+0xfb/0x150 [ 260.948689][T11860] ? lock_acquire+0x115/0x350 [ 260.948715][T11860] ? ktime_get+0x45/0x220 [ 260.948735][T11860] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 260.948755][T11860] ? lockdep_hardirqs_on+0x7b/0x110 [ 260.948777][T11860] ? ktime_get+0x45/0x220 [ 260.948793][T11860] ? seqcount_lockdep_reader_access+0xea/0x100 [ 260.948811][T11860] ? bpf_test_run+0x1d1/0x830 [ 260.948832][T11860] ? bpf_test_timer_continue+0x10c/0x320 [ 260.948855][T11860] bpf_test_run+0x354/0x830 [ 260.948904][T11860] ? __pfx_bpf_test_run+0x10/0x10 [ 260.948937][T11860] ? __kasan_krealloc+0xec/0x110 [ 260.948964][T11860] ? eth_type_trans+0x33f/0x640 [ 260.948986][T11860] ? skb_dst_set+0x72/0x140 [ 260.949008][T11860] bpf_prog_test_run_skb+0xe35/0x2230 [ 260.949047][T11860] ? __fget_files+0x3a2/0x420 [ 260.949072][T11860] ? __fget_files+0x2a/0x420 [ 260.949103][T11860] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 260.949123][T11860] bpf_prog_test_run+0x2c5/0x340 [ 260.949151][T11860] __sys_bpf+0xa22/0xd90 [ 260.949181][T11860] ? __pfx___sys_bpf+0x10/0x10 [ 260.949213][T11860] ? __fget_files+0x2a/0x420 [ 260.949258][T11860] ? ksys_write+0x242/0x270 [ 260.949279][T11860] ? __pfx_ksys_write+0x10/0x10 [ 260.949303][T11860] __x64_sys_bpf+0xba/0xd0 [ 260.949326][T11860] do_syscall_64+0x166/0x520 [ 260.949349][T11860] ? trace_irq_disable+0x3b/0x140 [ 260.949368][T11860] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.949387][T11860] ? clear_bhb_loop+0x70/0xc0 [ 260.949409][T11860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.949426][T11860] RIP: 0033:0x7f01f399e559 [ 260.949443][T11860] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 260.949458][T11860] RSP: 002b:00007f01f4810028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 260.949478][T11860] RAX: ffffffffffffffda RBX: 00007f01f3c25fa0 RCX: 00007f01f399e559 [ 260.949491][T11860] RDX: 0000000000000028 RSI: 0000200000001600 RDI: 000000000000000a [ 260.949502][T11860] RBP: 00007f01f4810090 R08: 0000000000000000 R09: 0000000000000000 [ 260.949514][T11860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 260.949524][T11860] R13: 00007f01f3c26038 R14: 00007f01f3c25fa0 R15: 00007ffc2c6af868 [ 260.949556][T11860] [ 261.260605][T11867] batadv_slave_1: entered promiscuous mode [ 261.285889][T11869] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1495'. [ 261.285921][T11869] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1495'. [ 261.448616][T11872] xt_IDLETIMER: timeout value is zero [ 261.779192][T11885] netlink: 'syz.0.1499': attribute type 1 has an invalid length. [ 262.097295][T11888] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 262.103508][T11888] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 262.113455][T11888] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 262.120758][T11888] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 262.131168][T11888] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 262.149042][T11888] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 262.159028][T11888] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 262.173557][T11888] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 262.179633][T11888] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 262.188169][T11888] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 262.207040][T11888] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 262.216741][T11888] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 262.225574][T11888] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 262.239061][T11888] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 262.243113][T11888] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 262.264511][T11882] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 262.270883][T11888] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 262.273368][T11888] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 262.275306][T11888] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 262.278438][T11888] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 262.281140][T11888] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 262.281775][T11866] batadv_slave_1: left promiscuous mode [ 262.285529][T11888] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 262.294326][T11888] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 262.304021][T11888] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 262.311362][T11888] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 262.319401][T11888] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 262.324241][T11888] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 262.336128][T11888] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 262.350116][T11888] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 262.362942][T11888] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 262.374971][T11888] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 262.386263][T11888] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 262.398830][T11888] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 262.404322][T11888] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 263.017736][T11937] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1509'. [ 263.017756][T11937] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1509'. [ 263.059210][T11933] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 263.379730][T11957] syzkaller0: left promiscuous mode [ 263.379750][T11957] syzkaller0: left allmulticast mode [ 263.394247][T11960] netlink: 'syz.4.1511': attribute type 1 has an invalid length. [ 263.617537][T11966] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 263.677903][T11970] ip6gre1: entered promiscuous mode [ 263.677926][T11970] ip6gre1: entered allmulticast mode [ 263.772732][T11976] FAULT_INJECTION: forcing a failure. [ 263.772732][T11976] name failslab, interval 1, probability 0, space 0, times 0 [ 263.772762][T11976] CPU: 1 UID: 0 PID: 11976 Comm: syz.0.1518 Not tainted syzkaller #0 PREEMPT(full) [ 263.772778][T11976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 263.772786][T11976] Call Trace: [ 263.772792][T11976] [ 263.772798][T11976] dump_stack_lvl+0xe8/0x150 [ 263.772821][T11976] should_fail_ex+0x410/0x560 [ 263.772850][T11976] should_failslab+0xa8/0x100 [ 263.772868][T11976] ? skb_clone+0x212/0x3a0 [ 263.772888][T11976] kmem_cache_alloc_noprof+0xa1/0x600 [ 263.772904][T11976] ? skb_clone+0x212/0x3a0 [ 263.772928][T11976] skb_clone+0x212/0x3a0 [ 263.772950][T11976] bpf_clone_redirect+0x170/0x4b0 [ 263.772972][T11976] ? bpf_test_run+0x1d1/0x830 [ 263.772986][T11976] bpf_prog_2f59963de350c2d2+0x5e/0x67 [ 263.773002][T11976] ? __kernel_text_address+0xd/0x30 [ 263.773022][T11976] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 263.773037][T11976] ? arch_stack_walk+0xfb/0x150 [ 263.773060][T11976] ? lock_acquire+0x115/0x350 [ 263.773081][T11976] ? ktime_get+0x45/0x220 [ 263.773097][T11976] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 263.773112][T11976] ? lockdep_hardirqs_on+0x7b/0x110 [ 263.773129][T11976] ? ktime_get+0x45/0x220 [ 263.773142][T11976] ? seqcount_lockdep_reader_access+0xea/0x100 [ 263.773158][T11976] ? bpf_test_run+0x1d1/0x830 [ 263.773184][T11976] ? bpf_test_timer_continue+0x10c/0x320 [ 263.773205][T11976] bpf_test_run+0x354/0x830 [ 263.773240][T11976] ? __pfx_bpf_test_run+0x10/0x10 [ 263.773269][T11976] ? __kasan_krealloc+0xec/0x110 [ 263.773291][T11976] ? eth_type_trans+0x33f/0x640 [ 263.773308][T11976] ? skb_dst_set+0x72/0x140 [ 263.773323][T11976] bpf_prog_test_run_skb+0xe35/0x2230 [ 263.773353][T11976] ? __fget_files+0x3a2/0x420 [ 263.773373][T11976] ? __fget_files+0x2a/0x420 [ 263.773399][T11976] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 263.773415][T11976] bpf_prog_test_run+0x2c5/0x340 [ 263.773436][T11976] __sys_bpf+0xa22/0xd90 [ 263.773460][T11976] ? __pfx___sys_bpf+0x10/0x10 [ 263.773491][T11976] ? __fget_files+0x2a/0x420 [ 263.773531][T11976] ? ksys_write+0x242/0x270 [ 263.773549][T11976] ? __pfx_ksys_write+0x10/0x10 [ 263.773569][T11976] __x64_sys_bpf+0xba/0xd0 [ 263.773590][T11976] do_syscall_64+0x166/0x520 [ 263.773611][T11976] ? trace_irq_disable+0x3b/0x140 [ 263.773627][T11976] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.773663][T11976] ? clear_bhb_loop+0x70/0xc0 [ 263.773683][T11976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.773698][T11976] RIP: 0033:0x7f309a79e559 [ 263.773712][T11976] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 263.773726][T11976] RSP: 002b:00007f309b6ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 263.773744][T11976] RAX: ffffffffffffffda RBX: 00007f309aa25fa0 RCX: 00007f309a79e559 [ 263.773756][T11976] RDX: 0000000000000028 RSI: 0000200000001600 RDI: 000000000000000a [ 263.773766][T11976] RBP: 00007f309b6ff090 R08: 0000000000000000 R09: 0000000000000000 [ 263.773776][T11976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 263.773786][T11976] R13: 00007f309aa26038 R14: 00007f309aa25fa0 R15: 00007ffdf73362d8 [ 263.773815][T11976] [ 264.031736][T11978] bond4: entered promiscuous mode [ 264.062590][T11978] 8021q: adding VLAN 0 to HW filter on device bond4 [ 264.066411][ T6608] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 264.066615][ T6608] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 264.100345][ T6670] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 264.268941][T11996] __nla_validate_parse: 4 callbacks suppressed [ 264.268961][T11996] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1522'. [ 264.374201][T11996] bond6: option lacp_active: invalid value (5) [ 264.388010][T11996] bond6 (unregistering): Released all slaves [ 264.417535][T12005] netlink: 'syz.3.1525': attribute type 1 has an invalid length. [ 264.503340][T12007] bond6: (slave geneve4): making interface the new active one [ 264.505328][T12007] bond6: (slave geneve4): Enslaving as an active interface with an up link [ 264.526300][ T6670] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 264.526409][ T61] netdevsim netdevsim3 eth3: set [1, 2] type 2 family 0 port 20000 - 0 [ 264.526679][ T85] netdevsim netdevsim3 eth2: set [1, 2] type 2 family 0 port 20000 - 0 [ 264.526711][ T85] netdevsim netdevsim3 eth1: set [1, 2] type 2 family 0 port 20000 - 0 [ 264.526739][ T85] netdevsim netdevsim3 eth0: set [1, 2] type 2 family 0 port 20000 - 0 [ 264.531172][T12009] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1526'. [ 264.535068][T12005] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1525'. [ 264.535086][T12005] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1525'. [ 264.648816][T12011] rdma_rxe: rxe_newlink: failed to add wg0 [ 264.712588][T12017] vcan0: tx address claim with dest, not broadcast [ 264.725910][T12021] netlink: 'syz.4.1530': attribute type 3 has an invalid length. [ 264.790681][ T6670] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 264.850639][T12017] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 265.040262][T12028] xt_limit: Overflow, try lower: 6/2147483648 [ 265.408282][T12058] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1538'. [ 265.672828][T12077] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 265.672917][T12077] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 265.672998][T12077] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 265.673075][T12077] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 265.673155][T12077] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 265.673233][T12077] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 265.673315][T12077] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 265.673394][T12077] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 265.673472][T12077] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 265.673564][T12077] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 265.673645][T12077] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 265.673730][T12077] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 265.673808][T12077] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 265.673885][T12077] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 265.673966][T12077] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 265.674045][T12077] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 265.674134][T12077] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 265.704751][T12077] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 265.704911][T12077] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 265.704990][T12077] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 265.705067][T12077] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 265.705142][T12077] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 266.051951][T12090] netlink: 'syz.1.1542': attribute type 1 has an invalid length. [ 266.200396][T12090] 8021q: adding VLAN 0 to HW filter on device bond6 [ 266.241596][T12105] netlink: 'syz.2.1545': attribute type 2 has an invalid length. [ 266.241616][T12105] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1545'. [ 266.570867][T12126] FAULT_INJECTION: forcing a failure. [ 266.570867][T12126] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 266.570898][T12126] CPU: 1 UID: 0 PID: 12126 Comm: syz.1.1549 Not tainted syzkaller #0 PREEMPT(full) [ 266.570919][T12126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 266.570929][T12126] Call Trace: [ 266.570936][T12126] [ 266.570944][T12126] dump_stack_lvl+0xe8/0x150 [ 266.570986][T12126] should_fail_ex+0x410/0x560 [ 266.571015][T12126] _copy_from_user+0x2d/0xb0 [ 266.571044][T12126] sctp_setsockopt+0x1c4/0x12c0 [ 266.571070][T12126] ? sock_common_setsockopt+0x36/0xc0 [ 266.571089][T12126] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 266.571111][T12126] do_sock_setsockopt+0x17c/0x1b0 [ 266.571140][T12126] __x64_sys_setsockopt+0x13d/0x1b0 [ 266.571167][T12126] do_syscall_64+0x166/0x520 [ 266.571191][T12126] ? trace_irq_disable+0x3b/0x140 [ 266.571211][T12126] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.571228][T12126] ? clear_bhb_loop+0x70/0xc0 [ 266.571250][T12126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.571267][T12126] RIP: 0033:0x7ff34e59e559 [ 266.571283][T12126] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 266.571298][T12126] RSP: 002b:00007ff34c7f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 266.571316][T12126] RAX: ffffffffffffffda RBX: 00007ff34e825fa0 RCX: 00007ff34e59e559 [ 266.571329][T12126] RDX: 0000000000000001 RSI: 0000000000000084 RDI: 0000000000000003 [ 266.571339][T12126] RBP: 00007ff34c7f6090 R08: 0000000000000014 R09: 0000000000000000 [ 266.571350][T12126] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000001 [ 266.571360][T12126] R13: 00007ff34e826038 R14: 00007ff34e825fa0 R15: 00007ffcc6fd8f38 [ 266.571388][T12126] [ 266.721195][T12129] netlink: 'syz.2.1550': attribute type 10 has an invalid length. [ 266.721224][T12129] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1550'. [ 266.955365][T12145] ±ÿ: renamed from lo (while UP) [ 267.225092][T12157] netlink: 'syz.4.1559': attribute type 1 has an invalid length. [ 267.225657][T12158] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1559'. [ 267.615104][T12163] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 267.967224][T12167] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1561'. [ 267.967575][T12167] syz_tun: Device is already in use. [ 268.225894][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 268.688793][T12176] openvswitch: netlink: Key type 29 is not supported [ 268.709104][T12184] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1562'. [ 268.709125][T12184] openvswitch: netlink: Flow key attr not present in new flow. [ 268.728237][T12183] netlink: 'syz.0.1564': attribute type 1 has an invalid length. [ 268.769830][T12183] 8021q: adding VLAN 0 to HW filter on device bond8 [ 268.788591][T12182] ip_tables: iptables: counters copy to user failed while replacing table [ 268.832295][T12185] tipc: Bearer : already 2 bearers with priority 10 [ 268.832320][T12185] tipc: Bearer : trying with adjusted priority [ 268.865367][T12185] tipc: Enabled bearer , priority 9 [ 268.874603][T12185] tipc: Enabling of bearer rejected, already enabled [ 268.887573][T12185] tipc: Enabling of bearer rejected, already enabled [ 268.888862][T12185] tipc: Enabling of bearer rejected, already enabled [ 268.890254][T12185] tipc: Enabling of bearer rejected, already enabled [ 268.891693][T12185] tipc: Enabling of bearer rejected, already enabled [ 268.893084][T12185] tipc: Enabling of bearer rejected, already enabled [ 268.894517][T12185] tipc: Enabling of bearer rejected, already enabled [ 268.954380][T12185] tipc: Enabling of bearer rejected, already enabled [ 268.965998][T12185] tipc: Enabling of bearer rejected, already enabled [ 268.967457][T12185] tipc: Enabling of bearer rejected, already enabled [ 268.968850][T12185] tipc: Enabling of bearer rejected, already enabled [ 268.970269][T12185] tipc: Enabling of bearer rejected, already enabled [ 268.971624][T12185] tipc: Enabling of bearer rejected, already enabled [ 268.973042][T12185] tipc: Enabling of bearer rejected, already enabled [ 268.974452][T12185] tipc: Enabling of bearer rejected, already enabled [ 269.015402][T12185] tipc: Enabling of bearer rejected, already enabled [ 269.018251][T12185] tipc: Enabling of bearer rejected, already enabled [ 269.020780][T12185] tipc: Enabling of bearer rejected, already enabled [ 269.022519][T12190] syzkaller0: entered promiscuous mode [ 269.022535][T12190] syzkaller0: entered allmulticast mode [ 269.028137][T12185] tipc: Enabling of bearer rejected, already enabled [ 269.031244][T12185] tipc: Enabling of bearer rejected, already enabled [ 269.036794][T12185] tipc: Enabling of bearer rejected, already enabled [ 269.039652][T12185] tipc: Enabling of bearer rejected, already enabled [ 269.044984][T12185] tipc: Enabling of bearer rejected, already enabled [ 269.051409][T12185] tipc: Enabling of bearer rejected, already enabled [ 269.149159][T12197] sctp: [Deprecated]: syz.2.1567 (pid 12197) Use of int in max_burst socket option deprecated. [ 269.149159][T12197] Use struct sctp_assoc_value instead [ 269.149290][T12199] sctp: [Deprecated]: syz.2.1567 (pid 12199) Use of int in max_burst socket option deprecated. [ 269.149290][T12199] Use struct sctp_assoc_value instead [ 269.189043][T12185] tipc: Enabling of bearer rejected, already enabled [ 269.192175][T12185] tipc: Enabling of bearer rejected, already enabled [ 269.193611][T12185] tipc: Enabling of bearer rejected, already enabled [ 269.195375][T12185] tipc: Enabling of bearer rejected, already enabled [ 269.229456][T12185] tipc: Enabling of bearer rejected, already enabled [ 269.230926][T12185] tipc: Enabling of bearer rejected, already enabled [ 269.232530][T12185] tipc: Enabling of bearer rejected, already enabled [ 269.233939][T12185] tipc: Enabling of bearer rejected, already enabled [ 269.301688][T12203] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1569'. [ 269.438578][T12203] sctp: [Deprecated]: syz.3.1569 (pid 12203) Use of int in maxseg socket option. [ 269.438578][T12203] Use struct sctp_assoc_value instead [ 269.650512][T12221] ip_tables: iptables: counters copy to user failed while replacing table [ 269.689315][T12224] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1574'. [ 269.689708][T12223] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1574'. [ 269.800805][T12228] bridge0: port 4(batadv1) entered blocking state [ 269.800918][T12228] bridge0: port 4(batadv1) entered disabled state [ 269.801046][T12228] batadv1: entered allmulticast mode [ 269.803406][T12228] batadv1: entered promiscuous mode [ 270.297054][ T61] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 270.297073][ T61] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 270.520517][T12247] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1579'. [ 270.537053][T12247] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1579'. [ 270.791480][T12251] bond9 (unregistering): Released all slaves [ 270.827381][T12264] netlink: 'syz.1.1585': attribute type 1 has an invalid length. [ 271.034267][T12280] netlink: 'syz.3.1588': attribute type 1 has an invalid length. [ 271.117545][T12280] bond8 (unregistering): Released all slaves [ 271.227483][T12289] bond7: (slave gretap1): making interface the new active one [ 271.227930][T12289] bond7: (slave gretap1): Enslaving as an active interface with an up link [ 271.228180][T12295] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1594'. [ 271.230783][T12295] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1594'. [ 271.230801][T12295] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1594'. [ 271.230813][T12295] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1594'. [ 271.507061][T12304] FAULT_INJECTION: forcing a failure. [ 271.507061][T12304] name failslab, interval 1, probability 0, space 0, times 0 [ 271.507092][T12304] CPU: 0 UID: 0 PID: 12304 Comm: syz.2.1597 Not tainted syzkaller #0 PREEMPT(full) [ 271.507110][T12304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 271.507120][T12304] Call Trace: [ 271.507126][T12304] [ 271.507133][T12304] dump_stack_lvl+0xe8/0x150 [ 271.507156][T12304] should_fail_ex+0x410/0x560 [ 271.507178][T12304] should_failslab+0xa8/0x100 [ 271.507200][T12304] ? skb_clone+0x212/0x3a0 [ 271.507219][T12304] kmem_cache_alloc_noprof+0xa1/0x600 [ 271.507239][T12304] ? skb_clone+0x212/0x3a0 [ 271.507266][T12304] skb_clone+0x212/0x3a0 [ 271.507290][T12304] bpf_clone_redirect+0x170/0x4b0 [ 271.507318][T12304] ? bpf_test_run+0x1d1/0x830 [ 271.507337][T12304] bpf_prog_2f59963de350c2d2+0x5e/0x67 [ 271.507356][T12304] ? __kernel_text_address+0xd/0x30 [ 271.507378][T12304] ? arch_stack_walk+0xfb/0x150 [ 271.507401][T12304] ? __pfx___schedule+0x10/0x10 [ 271.507434][T12304] ? preempt_schedule_thunk+0x16/0x40 [ 271.507454][T12304] ? preempt_schedule_common+0x7f/0xd0 [ 271.507474][T12304] ? bpf_test_run+0x1d1/0x830 [ 271.507496][T12304] ? bpf_test_timer_continue+0x10c/0x320 [ 271.507521][T12304] bpf_test_run+0x354/0x830 [ 271.507563][T12304] ? __pfx_bpf_test_run+0x10/0x10 [ 271.507598][T12304] ? __kasan_krealloc+0xec/0x110 [ 271.507625][T12304] ? eth_type_trans+0x33f/0x640 [ 271.507649][T12304] ? skb_dst_set+0x72/0x140 [ 271.507670][T12304] bpf_prog_test_run_skb+0xe35/0x2230 [ 271.507719][T12304] ? __fget_files+0x3a2/0x420 [ 271.507745][T12304] ? __fget_files+0x2a/0x420 [ 271.507776][T12304] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 271.507796][T12304] bpf_prog_test_run+0x2c5/0x340 [ 271.507824][T12304] __sys_bpf+0xa22/0xd90 [ 271.507854][T12304] ? __pfx___sys_bpf+0x10/0x10 [ 271.507886][T12304] ? __fget_files+0x2a/0x420 [ 271.507931][T12304] ? ksys_write+0x242/0x270 [ 271.507952][T12304] ? __pfx_ksys_write+0x10/0x10 [ 271.507977][T12304] __x64_sys_bpf+0xba/0xd0 [ 271.508000][T12304] do_syscall_64+0x166/0x520 [ 271.508023][T12304] ? trace_irq_disable+0x3b/0x140 [ 271.508042][T12304] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.508060][T12304] ? clear_bhb_loop+0x70/0xc0 [ 271.508084][T12304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.508102][T12304] RIP: 0033:0x7f5d3eb9e559 [ 271.508119][T12304] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 271.508134][T12304] RSP: 002b:00007f5d3cdf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 271.508154][T12304] RAX: ffffffffffffffda RBX: 00007f5d3ee25fa0 RCX: 00007f5d3eb9e559 [ 271.508167][T12304] RDX: 0000000000000028 RSI: 0000200000001600 RDI: 000000000000000a [ 271.508179][T12304] RBP: 00007f5d3cdf6090 R08: 0000000000000000 R09: 0000000000000000 [ 271.508190][T12304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 271.508201][T12304] R13: 00007f5d3ee26038 R14: 00007f5d3ee25fa0 R15: 00007ffdb6afd858 [ 271.508234][T12304] [ 272.841148][T12369] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1617'. [ 272.935955][T12379] ip_tables: iptables: counters copy to user failed while replacing table [ 273.291985][T12400] ip6gre2: entered allmulticast mode [ 273.324181][T12400] batadv_slave_1: entered promiscuous mode [ 273.391577][T12400] netlink: Failed to add helper -22 [ 273.391638][T12400] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 273.449021][T12408] netlink: 'syz.2.1627': attribute type 32 has an invalid length. [ 273.624901][T12416] netlink: 'syz.3.1630': attribute type 1 has an invalid length. [ 273.628311][T12411] ipt_ah: unknown flags FF [ 273.671504][T12415] rxe_eth0 speed is unknown, defaulting to 1000 [ 274.591497][T12460] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 274.626799][T12465] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 274.829529][T12471] __nla_validate_parse: 5 callbacks suppressed [ 274.829549][T12471] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1638'. [ 274.892878][T12476] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1639'. [ 274.942641][T12477] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1639'. [ 274.942662][T12477] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1639'. [ 274.999705][ T6609] IPVS: starting estimator thread 0... [ 274.999846][T12471] bond7: (slave bond_slave_0): Device is not our slave [ 274.999871][T12471] bond7: option active_slave: invalid value (bond_slave_0) [ 275.033578][T12471] bond7 (unregistering): Released all slaves [ 275.087270][T12479] IPVS: using max 30 ests per chain, 72000 per kthread [ 275.250443][T12486] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1643'. [ 275.250478][T12486] netlink: 'syz.0.1643': attribute type 7 has an invalid length. [ 275.250490][T12486] netlink: 'syz.0.1643': attribute type 8 has an invalid length. [ 275.250501][T12486] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1643'. [ 275.264894][T12486] erspan0: entered promiscuous mode [ 275.272904][T12486] gretap0: entered promiscuous mode [ 275.290396][T12486] erspan0: left promiscuous mode [ 275.295460][T12486] gretap0: left promiscuous mode [ 275.311290][T12488] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1644'. [ 275.311477][T12495] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1643'. [ 275.311505][T12495] netlink: 'syz.0.1643': attribute type 7 has an invalid length. [ 275.311517][T12495] netlink: 'syz.0.1643': attribute type 8 has an invalid length. [ 275.311528][T12495] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1643'. [ 275.401648][T12495] erspan0: entered promiscuous mode [ 275.405980][T12495] gretap0: entered promiscuous mode [ 275.417861][T12495] erspan0: left promiscuous mode [ 275.419183][T12495] gretap0: left promiscuous mode [ 275.443849][T12499] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 275.545151][T12507] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1648'. [ 275.792895][T12519] ieee802154 phy0 wpan0: encryption failed: -22 [ 275.970932][T12528] 8021q: adding VLAN 0 to HW filter on device bond5 [ 275.972181][T12528] bridge0: port 5(bond5) entered blocking state [ 275.973973][T12528] bridge0: port 5(bond5) entered disabled state [ 275.974122][T12528] bond5: entered allmulticast mode [ 275.984455][T12528] bond5: entered promiscuous mode [ 276.011893][T12528] bridge0: port 5(bond5) entered blocking state [ 276.012015][T12528] bridge0: port 5(bond5) entered forwarding state [ 276.122386][T12544] netlink: 'syz.1.1656': attribute type 1 has an invalid length. [ 276.196621][T12544] bond7: entered promiscuous mode [ 276.197048][T12544] 8021q: adding VLAN 0 to HW filter on device bond7 [ 276.236844][T12544] vlan2: entered allmulticast mode [ 276.236865][T12544] bond7: entered allmulticast mode [ 276.262278][T12552] pimreg: entered allmulticast mode [ 276.515389][ T4935] block nbd2: Receive control failed (result -32) [ 276.534489][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 276.534508][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 276.555565][ T12] bridge0: port 5(bond5) entered disabled state [ 276.705879][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 278.203903][T12675] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 278.291720][T12680] syzkaller1: entered promiscuous mode [ 278.291742][T12680] syzkaller1: entered allmulticast mode [ 278.683643][T12704] tipc: Enabling of bearer rejected, already enabled [ 279.009699][T12721] syzkaller0: entered promiscuous mode [ 279.009705][T12723] netlink: 'syz.3.1694': attribute type 2 has an invalid length. [ 279.009718][T12721] syzkaller0: entered allmulticast mode [ 279.009722][T12723] netlink: 'syz.3.1694': attribute type 2 has an invalid length. [ 279.012381][T12723] Bluetooth: hci0: invalid length 0, exp 2 for type 19 [ 279.098309][ T4935] block nbd3: Receive control failed (result -32) [ 279.310014][T12732] xt_socket: unknown flags 0x8 [ 279.352357][T12731] bond8: option min_links: invalid value (18446744073709551612) [ 279.352382][T12731] bond8: option min_links: allowed values 0 - 2147483647 [ 279.361093][T12731] bond8 (unregistering): Released all slaves [ 279.467185][T12747] ip6t_srh: unknown srh match flags 4000 [ 279.847251][T12771] __nla_validate_parse: 21 callbacks suppressed [ 279.847270][T12771] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1708'. [ 279.847291][T12771] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1708'. [ 279.877450][T12771] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1708'. [ 279.877477][T12771] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1708'. [ 279.978957][T12771] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1708'. [ 279.978997][T12771] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1708'. [ 280.018136][T12771] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1708'. [ 280.018165][T12771] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1708'. [ 280.060480][T12771] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1708'. [ 280.060507][T12771] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1708'. [ 280.200601][T12771] bridge0: port 3(syz_tun) entered disabled state [ 280.206842][T12771] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.207530][T12771] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.627792][T12819] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 280.979806][T12847] xt_IDLETIMER: label is empty or not nul-terminated [ 281.098158][T12853] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 281.505622][T12873] netlink: 'syz.0.1731': attribute type 1 has an invalid length. [ 281.645065][T12875] syzkaller1: entered promiscuous mode [ 281.645088][T12875] syzkaller1: entered allmulticast mode [ 281.720045][T12878] netlink: 'syz.0.1733': attribute type 10 has an invalid length. [ 281.780996][T12878] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 282.464877][T12927] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 283.065156][T12945] netlink: 'syz.3.1752': attribute type 1 has an invalid length. [ 283.450733][T12978] veth0_macvtap: left promiscuous mode [ 283.710187][T12992] syzkaller0: entered promiscuous mode [ 283.710219][T12992] syzkaller0: entered allmulticast mode [ 283.739378][T12992] tipc: Started in network mode [ 283.739405][T12992] tipc: Node identity 2ef5c6b5b3e3, cluster identity 4711 [ 283.739656][T12992] tipc: Enabled bearer , priority 0 [ 283.745277][T12995] netlink: 'syz.0.1766': attribute type 1 has an invalid length. [ 283.751106][T12990] tipc: Resetting bearer [ 283.761657][T12996] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 283.833154][T12990] tipc: Disabling bearer [ 284.178155][T13022] Bluetooth: hci0: invalid len left 17, exp >= 20 [ 284.218670][T13025] nbd: must specify a size in bytes for the device [ 284.243796][T13030] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 284.265858][T13025] syzkaller0: entered promiscuous mode [ 284.265879][T13025] syzkaller0: entered allmulticast mode [ 284.274501][T13034] netlink: 'syz.0.1778': attribute type 1 has an invalid length. [ 284.355172][T13041] x_tables: duplicate underflow at hook 1 [ 284.660275][T13050] xt_IDLETIMER: timeout value is zero [ 284.715395][T13059] openvswitch: netlink: Key 4 has unexpected len 0 expected 12 [ 284.787983][T13056] bond6: option xmit_hash_policy: invalid value (10) [ 284.792540][T13056] bond6 (unregistering): Released all slaves [ 284.845063][T13067] ip_tables: iptables: counters copy to user failed while replacing table [ 284.899575][T13064] ip6tnl3: entered allmulticast mode [ 284.923368][T13065] syzkaller1: entered promiscuous mode [ 284.923390][T13065] syzkaller1: entered allmulticast mode [ 285.113606][T13083] ip_tables: iptables: counters copy to user failed while replacing table [ 285.139526][T13079] 8021q: adding VLAN 0 to HW filter on device bond6 [ 285.174415][T13079] __nla_validate_parse: 31 callbacks suppressed [ 285.174435][T13079] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1786'. [ 285.174449][T13079] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1786'. [ 285.239136][T13079] team0: Port device bond0 removed [ 285.240708][T13088] syzkaller0: entered promiscuous mode [ 285.240726][T13088] syzkaller0: entered allmulticast mode [ 285.253546][T13093] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1790'. [ 285.260681][T13079] netlink: 'syz.2.1786': attribute type 2 has an invalid length. [ 285.260697][T13079] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1786'. [ 285.309487][T13079] : entered promiscuous mode [ 285.512959][T13115] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 285.824341][T13130] siw: device registration error -23 [ 285.876716][T13134] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 286.064797][T13139] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1804'. [ 286.641014][T13162] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1812'. [ 286.739627][T13164] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1812'. [ 286.781903][T13162] rxe_eth0 speed is unknown, defaulting to 1000 [ 287.167400][T13174] netlink: 'syz.0.1817': attribute type 11 has an invalid length. [ 287.294556][T13178] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1819'. [ 287.845206][T13199] bridge_slave_1: entered promiscuous mode [ 287.845468][T13199] vlan3: entered promiscuous mode [ 290.601967][T13197] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 290.998721][T13217] syzkaller0: left promiscuous mode [ 290.998746][T13217] syzkaller0: left allmulticast mode [ 293.985910][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 301.666108][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 322.146429][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 326.625981][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 351.544765][T13233] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1834'. [ 351.857047][T13240] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1835'. [ 352.146576][T13235] bond7: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 352.327740][T13235] bond7 (unregistering): Released all slaves [ 352.745323][T13264] ip_tables: iptables: counters copy to user failed while replacing table [ 352.786477][T13264] raw_sendmsg: syz.4.1842 forgot to set AF_INET. Fix it! [ 353.006901][T13278] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 353.785487][T13317] syzkaller1: tun_chr_ioctl cmd 1074025672 [ 353.785510][T13317] syzkaller1: ignored: set checksum enabled [ 354.004682][T13327] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1854'. [ 355.091001][T13348] syzkaller0: entered promiscuous mode [ 355.091226][T13348] syzkaller0: entered allmulticast mode [ 355.260243][T13348] 0: reclassify loop, rule prio 0, protocol 800 [ 356.179786][T13377] Bluetooth: hci0: invalid length 0, exp 2 for type 23 [ 356.195200][T13379] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1866'. [ 356.339778][T13389] syzkaller0: entered promiscuous mode [ 356.339800][T13389] syzkaller0: entered allmulticast mode [ 356.362029][T13389] tipc: Started in network mode [ 356.362057][T13389] tipc: Node identity a6c0e768216, cluster identity 4711 [ 356.362299][T13389] tipc: Enabled bearer , priority 0 [ 356.496706][T13389] tipc: Resetting bearer [ 356.550257][T13388] tipc: Resetting bearer [ 356.678178][T13388] tipc: Disabling bearer [ 357.343761][T13417] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1875'. [ 357.408774][T13418] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1875'. [ 358.099664][T13432] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1879'. [ 358.434908][T13460] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1885'. [ 359.285458][T13481] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 359.322240][T13481] block nbd0: reconnected socket [ 359.342920][ T4935] block nbd0: Receive control failed (result -32) [ 359.374405][T13487] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1890'. [ 359.421627][T13495] x_tables: duplicate underflow at hook 2 [ 359.478247][T13499] x_tables: duplicate underflow at hook 2 [ 359.676412][T13507] netlink: 'syz.0.1890': attribute type 3 has an invalid length. [ 359.676434][T13507] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1890'. [ 359.911286][T13504] netlink: 668 bytes leftover after parsing attributes in process `syz.0.1890'. [ 359.911310][T13504] netlink: 1804 bytes leftover after parsing attributes in process `syz.0.1890'. [ 360.003181][T13511] netlink: Invalid conntrack helper [ 360.003211][T13511] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 360.222661][T13519] netlink: 272 bytes leftover after parsing attributes in process `syz.1.1899'. [ 360.274344][T13522] xt_CT: No such helper "snmp" [ 361.474663][T13538] netlink: 'syz.2.1904': attribute type 10 has an invalid length. [ 361.474690][T13538] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1904'. [ 361.555494][T13540] netlink: 'syz.2.1905': attribute type 1 has an invalid length. [ 361.555515][T13540] netlink: 'syz.2.1905': attribute type 2 has an invalid length. [ 361.555527][T13540] netlink: 'syz.2.1905': attribute type 3 has an invalid length. [ 363.493561][T13543] pim6reg: entered allmulticast mode [ 363.510199][T13548] netlink: 'syz.2.1907': attribute type 1 has an invalid length. [ 363.510219][T13548] __nla_validate_parse: 1 callbacks suppressed [ 363.510230][T13548] netlink: 1272 bytes leftover after parsing attributes in process `syz.2.1907'. [ 363.537562][T13543] netlink: 'syz.3.1906': attribute type 1 has an invalid length. [ 363.670275][T13543] 8021q: adding VLAN 0 to HW filter on device bond8 [ 363.703203][T13567] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1911'. [ 364.442018][T13599] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1917'. [ 364.442126][T13599] openvswitch: netlink: Message has 4 unknown bytes. [ 365.139763][T13622] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1923'. [ 365.546828][T13632] ip_tables: iptables: counters copy to user failed while replacing table [ 365.574356][T13633] x_tables: duplicate entry at hook 2 [ 365.927076][T13641] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1928'. [ 366.097754][T13622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 366.134420][T13622] 8021q: adding VLAN 0 to HW filter on device team0 [ 366.206777][T13622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 366.775003][T13622] bridge1: left promiscuous mode [ 366.814706][T13622] 8021q: adding VLAN 0 to HW filter on device bond1 [ 366.856468][T13622] bond2: left promiscuous mode [ 366.905320][T13622] bond3: left promiscuous mode [ 366.974249][T13622] 8021q: adding VLAN 0 to HW filter on device eth0 [ 366.996080][T13622] 8021q: adding VLAN 0 to HW filter on device eth1 [ 367.005640][T13622] 8021q: adding VLAN 0 to HW filter on device eth2 [ 367.029344][T13622] 8021q: adding VLAN 0 to HW filter on device eth3 [ 367.050843][T13622] batman_adv: batadv0: Interface activated: macvtap1 [ 367.052023][T13622] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 367.178451][T13644] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1929'. [ 367.179315][ T5716] geneve0: entered promiscuous mode [ 367.223971][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.224106][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 367.283839][ T1216] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 367.430052][T13668] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1933'. [ 367.515558][T13676] pim6reg: entered allmulticast mode [ 367.518160][T13670] syzkaller1: entered promiscuous mode [ 367.518179][T13670] syzkaller1: entered allmulticast mode [ 367.877932][T13686] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1936'. [ 368.302067][T13709] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 368.347874][T13689] syzkaller0: entered promiscuous mode [ 368.347899][T13689] syzkaller0: entered allmulticast mode [ 369.586562][T13741] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1946'. [ 369.611319][T13742] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1947'. [ 370.384371][T13769] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1949'. [ 370.384394][T13769] netlink: 'syz.0.1949': attribute type 2 has an invalid length. [ 370.384405][T13769] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1949'. [ 370.725663][T13774] netlink: 'syz.0.1952': attribute type 1 has an invalid length. [ 371.030772][ C0] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 372.293625][T13755] tipc: Enabling of bearer rejected, failed to enable media [ 372.306806][T13774] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 372.368634][T13775] 8021q: adding VLAN 0 to HW filter on device bond9 [ 372.507720][T13781] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1953'. [ 373.122470][T13801] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1958'. [ 373.397414][T13803] bond10: Unable to set peer notification delay as MII monitoring is disabled [ 373.400141][T13803] bond10 (unregistering): Released all slaves [ 374.374959][T13831] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1965'. [ 374.534831][T13836] ebt_limit: overflow, try lower: 4294901760/65535 [ 374.564720][T13834] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1965'. [ 374.796054][T13844] digital: digital_start_poll: Unknown protocol [ 374.808870][T13844] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1969'. [ 374.926725][T13843] netlink: 'syz.2.1971': attribute type 2 has an invalid length. [ 374.927936][T13843] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 374.927955][T13843] syzkaller1: Linktype set failed because interface is up [ 375.143482][T13856] syzkaller1: entered promiscuous mode [ 375.143711][T13856] syzkaller1: entered allmulticast mode [ 375.228061][T13871] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1977'. [ 375.247204][T13871] bridge5: the hash_elasticity option has been deprecated and is always 16 [ 375.790738][T13883] bridge6: entered allmulticast mode [ 376.222597][T13902] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1986'. [ 376.250313][T13905] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1986'. [ 376.885167][T13901] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1986'. [ 376.897092][T13906] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode [ 377.038425][T13899] mac80211_hwsim hwsim4 wlan1: left allmulticast mode [ 377.146799][T13926] syzkaller0: entered promiscuous mode [ 377.147022][T13926] syzkaller0: entered allmulticast mode [ 377.179976][T13925] tipc: Enabled bearer , priority 0 [ 377.472027][T13921] tipc: Resetting bearer [ 377.625520][T13921] tipc: Disabling bearer [ 378.252050][T13966] ip_tables: iptables: counters copy to user failed while replacing table [ 378.266476][T13962] netlink: NAT attribute has 8 unknown bytes [ 378.266508][T13962] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 378.473312][T13970] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2000'. [ 378.573650][T13974] xt_hl: Unknown TTL match mode: 237 [ 378.629375][T13977] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2003'. [ 378.632066][T13979] netlink: 'syz.3.2000': attribute type 1 has an invalid length. [ 378.784129][T13984] geneve5: entered promiscuous mode [ 378.784148][T13984] geneve5: entered allmulticast mode [ 379.105888][ C0] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 379.544197][T14009] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2010'. [ 379.663937][T14017] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 379.815384][T14019] 8021q: adding VLAN 0 to HW filter on device ipvlan1 [ 379.845120][T14019] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 379.859492][T14025] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2015'. [ 379.887790][T14024] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2015'. [ 380.146319][T14043] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2020'. [ 380.148076][T14046] siw: device registration error -23 [ 380.152329][T14046] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2021'. [ 380.219677][T14043] ip6tnl2: entered promiscuous mode [ 380.326718][T14046] bridge0: port 3(syz_tun) entered disabled state [ 380.478724][T14046] syz_tun (unregistering): left allmulticast mode [ 380.478753][T14046] syz_tun (unregistering): left promiscuous mode [ 380.478844][T14046] bridge0: port 3(syz_tun) entered disabled state [ 380.557556][T14052] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2022'. [ 380.794365][T14059] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2024'. [ 380.923863][T14061] tipc: Cannot configure node identity twice [ 380.934959][T14061] tipc: Enabling of bearer rejected, failed to enable media [ 381.024751][T14067] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2026'. [ 381.024836][T14067] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 381.024848][T14067] IPv6: NLM_F_CREATE should be set when creating new route [ 381.112677][T14071] pimreg1: tun_chr_ioctl cmd 1074025677 [ 381.112759][T14071] pimreg1: linktype set to 825 [ 381.361046][T14076] syzkaller0: entered promiscuous mode [ 381.361068][T14076] syzkaller0: entered allmulticast mode [ 381.386277][T14076] tipc: Enabling of bearer rejected, already enabled [ 381.452511][T14080] tipc: Resetting bearer [ 381.878749][T14100] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2039'. [ 381.958061][T14101] netlink: 'syz.3.2038': attribute type 11 has an invalid length. [ 381.981244][T14105] syzkaller0: entered promiscuous mode [ 381.981469][T14105] syzkaller0: entered allmulticast mode [ 382.040953][T14107] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2040'. [ 382.046665][T14107] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2040'. [ 382.243835][T14112] ipvlan2: entered promiscuous mode [ 382.252795][T14112] team0: Device ipvlan2 failed to register rx_handler [ 382.325552][T14113] veth0_to_bridge: entered promiscuous mode [ 382.328126][T14113] macvtap0: entered allmulticast mode [ 382.328143][T14113] veth0_to_bridge: entered allmulticast mode [ 382.332810][T14113] veth0_to_bridge: left allmulticast mode [ 382.332834][T14113] veth0_to_bridge: left promiscuous mode [ 382.400482][T14113] [ 382.402855][T14113] ====================================================== [ 382.409870][T14113] WARNING: possible circular locking dependency detected [ 382.416894][T14113] syzkaller #0 Not tainted [ 382.421295][T14113] ------------------------------------------------------ [ 382.428296][T14113] syz.2.2041/14113 is trying to acquire lock: [ 382.434350][T14113] ffff88801d2d4aa0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove+0x35/0x80 [ 382.444176][T14113] [ 382.444176][T14113] but task is already holding lock: [ 382.451533][T14113] ffffffff908044c0 (gdp_mutex){+.+.}-{4:4}, at: cleanup_glue_dir+0xc3/0x220 [ 382.460238][T14113] [ 382.460238][T14113] which lock already depends on the new lock. [ 382.460238][T14113] [ 382.470627][T14113] [ 382.470627][T14113] the existing dependency chain (in reverse order) is: [ 382.479633][T14113] [ 382.479633][T14113] -> #10 (gdp_mutex){+.+.}-{4:4}: [ 382.486834][T14113] __mutex_lock+0x19d/0x1550 [ 382.491937][T14113] get_device_parent+0x16f/0x3a0 [ 382.497383][T14113] device_add+0x2d4/0xb80 [ 382.502221][T14113] device_create+0x269/0x300 [ 382.507323][T14113] msr_device_create+0x33/0x50 [ 382.512601][T14113] cpuhp_invoke_callback+0x434/0x810 [ 382.518394][T14113] cpuhp_thread_fun+0x362/0x780 [ 382.523754][T14113] smpboot_thread_fn+0x565/0xa70 [ 382.529199][T14113] kthread+0x38b/0x480 [ 382.533771][T14113] ret_from_fork+0x514/0xb70 [ 382.538872][T14113] ret_from_fork_asm+0x1a/0x30 [ 382.544149][T14113] [ 382.544149][T14113] -> #9 (cpuhp_state-up){+.+.}-{0:0}: [ 382.551688][T14113] cpuhp_thread_fun+0x127/0x780 [ 382.557052][T14113] smpboot_thread_fn+0x565/0xa70 [ 382.562504][T14113] kthread+0x38b/0x480 [ 382.567078][T14113] ret_from_fork+0x514/0xb70 [ 382.572183][T14113] ret_from_fork_asm+0x1a/0x30 [ 382.577458][T14113] [ 382.577458][T14113] -> #8 (cpu_hotplug_lock){++++}-{0:0}: [ 382.585169][T14113] cpus_read_lock+0x42/0x160 [ 382.590267][T14113] static_key_slow_inc+0x12/0x30 [ 382.595712][T14113] nbd_genl_reconnect_sock_cb+0x69a/0xbb0 [ 382.601941][T14113] nbd_genl_foreach_sock+0x265/0x450 [ 382.607732][T14113] nbd_genl_reconfigure+0xbbb/0x1040 [ 382.613527][T14113] genl_family_rcv_msg_doit+0x233/0x340 [ 382.619585][T14113] genl_rcv_msg+0x614/0x7a0 [ 382.624595][T14113] netlink_rcv_skb+0x226/0x4a0 [ 382.629865][T14113] genl_rcv+0x28/0x40 [ 382.634357][T14113] netlink_unicast+0x8ef/0xa80 [ 382.639630][T14113] netlink_sendmsg+0x813/0xb40 [ 382.644898][T14113] sock_sendmsg_nosec+0x14e/0x190 [ 382.650426][T14113] ____sys_sendmsg+0x54e/0x850 [ 382.655706][T14113] ___sys_sendmsg+0x2a5/0x360 [ 382.660919][T14113] __x64_sys_sendmsg+0x1b1/0x290 [ 382.666375][T14113] do_syscall_64+0x166/0x520 [ 382.671485][T14113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.677890][T14113] [ 382.677890][T14113] -> #7 (&nsock->tx_lock){+.+.}-{4:4}: [ 382.685526][T14113] __mutex_lock+0x19d/0x1550 [ 382.690626][T14113] nbd_queue_rq+0x373/0xff0 [ 382.695645][T14113] blk_mq_dispatch_rq_list+0x499/0x1990 [ 382.701699][T14113] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 382.708539][T14113] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 382.715030][T14113] blk_mq_run_work_fn+0x16c/0x300 [ 382.720564][T14113] process_scheduled_works+0xc3d/0x1630 [ 382.726624][T14113] worker_thread+0xa47/0xfb0 [ 382.731722][T14113] kthread+0x38b/0x480 [ 382.736292][T14113] ret_from_fork+0x514/0xb70 [ 382.741391][T14113] ret_from_fork_asm+0x1a/0x30 [ 382.746665][T14113] [ 382.746665][T14113] -> #6 (&cmd->lock){+.+.}-{4:4}: [ 382.753854][T14113] __mutex_lock+0x19d/0x1550 [ 382.758951][T14113] nbd_queue_rq+0xc1/0xff0 [ 382.763876][T14113] blk_mq_dispatch_rq_list+0x499/0x1990 [ 382.769931][T14113] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 382.776769][T14113] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 382.783258][T14113] blk_mq_run_work_fn+0x16c/0x300 [ 382.788817][T14113] process_scheduled_works+0xc3d/0x1630 [ 382.794870][T14113] worker_thread+0xa47/0xfb0 [ 382.799964][T14113] kthread+0x38b/0x480 [ 382.804539][T14113] ret_from_fork+0x514/0xb70 [ 382.809637][T14113] ret_from_fork_asm+0x1a/0x30 [ 382.814910][T14113] [ 382.814910][T14113] -> #5 (set->srcu){.+.+}-{0:0}: [ 382.822015][T14113] __synchronize_srcu+0xc9/0x2f0 [ 382.827455][T14113] elevator_switch+0x1e8/0x7b0 [ 382.832724][T14113] elevator_change+0x2fa/0x480 [ 382.837996][T14113] elevator_set_default+0x375/0x440 [ 382.843699][T14113] blk_register_queue+0x3f3/0x4e0 [ 382.849237][T14113] __add_disk+0x6b8/0xdb0 [ 382.854068][T14113] add_disk_fwnode+0x100/0x3a0 [ 382.859342][T14113] nbd_dev_add+0x733/0xb60 [ 382.864263][T14113] nbd_init+0x168/0x1f0 [ 382.868923][T14113] do_one_initcall+0x250/0x870 [ 382.874195][T14113] do_initcall_level+0x10a/0x1a0 [ 382.879641][T14113] do_initcalls+0x59/0xa0 [ 382.884478][T14113] kernel_init_freeable+0x29d/0x3e0 [ 382.890184][T14113] kernel_init+0x22/0x1d0 [ 382.895015][T14113] ret_from_fork+0x514/0xb70 [ 382.900114][T14113] ret_from_fork_asm+0x1a/0x30 [ 382.905385][T14113] [ 382.905385][T14113] -> #4 (&q->elevator_lock){+.+.}-{4:4}: [ 382.913185][T14113] __mutex_lock+0x19d/0x1550 [ 382.918282][T14113] elevator_change+0x1af/0x480 [ 382.923550][T14113] elevator_set_none+0xb5/0x140 [ 382.928906][T14113] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 382.935224][T14113] nbd_start_device+0x189/0xb30 [ 382.940578][T14113] nbd_genl_connect+0x167d/0x1cd0 [ 382.946109][T14113] genl_family_rcv_msg_doit+0x233/0x340 [ 382.952168][T14113] genl_rcv_msg+0x614/0x7a0 [ 382.957177][T14113] netlink_rcv_skb+0x226/0x4a0 [ 382.962445][T14113] genl_rcv+0x28/0x40 [ 382.966931][T14113] netlink_unicast+0x8ef/0xa80 [ 382.972209][T14113] netlink_sendmsg+0x813/0xb40 [ 382.977475][T14113] sock_sendmsg_nosec+0x14e/0x190 [ 382.983003][T14113] ____sys_sendmsg+0x54e/0x850 [ 382.988275][T14113] ___sys_sendmsg+0x2a5/0x360 [ 382.993462][T14113] __x64_sys_sendmsg+0x1b1/0x290 [ 382.998905][T14113] do_syscall_64+0x166/0x520 [ 383.004004][T14113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.010399][T14113] [ 383.010399][T14113] -> #3 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 383.018984][T14113] blk_alloc_queue+0x544/0x690 [ 383.024257][T14113] __blk_mq_alloc_disk+0x194/0x390 [ 383.029879][T14113] nbd_dev_add+0x494/0xb60 [ 383.034809][T14113] nbd_init+0x168/0x1f0 [ 383.039468][T14113] do_one_initcall+0x250/0x870 [ 383.044742][T14113] do_initcall_level+0x10a/0x1a0 [ 383.050187][T14113] do_initcalls+0x59/0xa0 [ 383.055025][T14113] kernel_init_freeable+0x29d/0x3e0 [ 383.060733][T14113] kernel_init+0x22/0x1d0 [ 383.065565][T14113] ret_from_fork+0x514/0xb70 [ 383.070665][T14113] ret_from_fork_asm+0x1a/0x30 [ 383.075938][T14113] [ 383.075938][T14113] -> #2 (fs_reclaim){+.+.}-{0:0}: [ 383.083132][T14113] fs_reclaim_acquire+0x71/0x100 [ 383.088574][T14113] kmem_cache_alloc_lru_noprof+0x65/0x5f0 [ 383.094797][T14113] alloc_inode+0xb8/0x1b0 [ 383.099634][T14113] iget_locked+0x131/0x6a0 [ 383.104549][T14113] kernfs_get_inode+0x4f/0x770 [ 383.109816][T14113] kernfs_get_tree+0x5cd/0x980 [ 383.115085][T14113] vfs_get_tree+0x92/0x2a0 [ 383.120003][T14113] do_new_mount+0x325/0xb00 [ 383.125018][T14113] __se_sys_mount+0x31d/0x420 [ 383.130206][T14113] do_syscall_64+0x166/0x520 [ 383.135303][T14113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.141700][T14113] [ 383.141700][T14113] -> #1 (&root->kernfs_rwsem){++++}-{4:4}: [ 383.149679][T14113] down_write+0x96/0x200 [ 383.154432][T14113] kernfs_remove_by_name_ns+0x4e/0x140 [ 383.160398][T14113] device_links_driver_bound+0x4ab/0x1440 [ 383.166622][T14113] driver_bound+0xd8/0x2e0 [ 383.171549][T14113] really_probe+0x774/0xae0 [ 383.176558][T14113] __driver_probe_device+0x1e8/0x360 [ 383.182352][T14113] driver_probe_device+0x4f/0x240 [ 383.187884][T14113] __device_attach_driver+0x270/0x410 [ 383.193773][T14113] bus_for_each_drv+0x258/0x2f0 [ 383.199127][T14113] __device_attach+0x2c4/0x450 [ 383.204398][T14113] device_initial_probe+0xa1/0xd0 [ 383.209929][T14113] bus_probe_device+0x12a/0x220 [ 383.215286][T14113] device_add+0x7d7/0xb80 [ 383.220118][T14113] faux_device_create_with_groups+0x1a5/0x2b0 [ 383.226696][T14113] regulator_dummy_init+0x19/0x40 [ 383.232225][T14113] regulator_init+0xca/0x110 [ 383.237318][T14113] do_one_initcall+0x250/0x870 [ 383.242592][T14113] do_initcall_level+0x10a/0x1a0 [ 383.248039][T14113] do_initcalls+0x59/0xa0 [ 383.252874][T14113] kernel_init_freeable+0x29d/0x3e0 [ 383.258577][T14113] kernel_init+0x22/0x1d0 [ 383.263405][T14113] ret_from_fork+0x514/0xb70 [ 383.268504][T14113] ret_from_fork_asm+0x1a/0x30 [ 383.273781][T14113] [ 383.273781][T14113] -> #0 (&root->kernfs_supers_rwsem){++++}-{4:4}: [ 383.282362][T14113] __lock_acquire+0x164c/0x2de0 [ 383.287719][T14113] lock_acquire+0x115/0x350 [ 383.292727][T14113] down_read+0x4a/0x330 [ 383.297394][T14113] kernfs_remove+0x35/0x80 [ 383.302317][T14113] __kobject_del+0xe0/0x310 [ 383.307329][T14113] kobject_del+0x45/0x60 [ 383.312081][T14113] cleanup_glue_dir+0x1a3/0x220 [ 383.317440][T14113] device_del+0x77d/0x8f0 [ 383.322276][T14113] device_destroy+0xb2/0x1a0 [ 383.327376][T14113] macvtap_device_event+0x226/0x400 [ 383.333082][T14113] notifier_call_chain+0x1a5/0x3d0 [ 383.338700][T14113] unregister_netdevice_many_notify+0x1437/0x1d80 [ 383.345618][T14113] rtnl_newlink_create+0x664/0x7b0 [ 383.351240][T14113] rtnl_newlink+0x167a/0x1c30 [ 383.356437][T14113] rtnetlink_rcv_msg+0x802/0xc00 [ 383.361881][T14113] netlink_rcv_skb+0x226/0x4a0 [ 383.367147][T14113] netlink_unicast+0x8ef/0xa80 [ 383.372419][T14113] netlink_sendmsg+0x813/0xb40 [ 383.377686][T14113] sock_sendmsg_nosec+0x14e/0x190 [ 383.383214][T14113] ____sys_sendmsg+0x54e/0x850 [ 383.388485][T14113] ___sys_sendmsg+0x2a5/0x360 [ 383.393671][T14113] __x64_sys_sendmsg+0x1b1/0x290 [ 383.399117][T14113] do_syscall_64+0x166/0x520 [ 383.404212][T14113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.410611][T14113] [ 383.410611][T14113] other info that might help us debug this: [ 383.410611][T14113] [ 383.420818][T14113] Chain exists of: [ 383.420818][T14113] &root->kernfs_supers_rwsem --> cpuhp_state-up --> gdp_mutex [ 383.420818][T14113] [ 383.434179][T14113] Possible unsafe locking scenario: [ 383.434179][T14113] [ 383.441608][T14113] CPU0 CPU1 [ 383.446958][T14113] ---- ---- [ 383.452303][T14113] lock(gdp_mutex); [ 383.456182][T14113] lock(cpuhp_state-up); [ 383.463011][T14113] lock(gdp_mutex); [ 383.469404][T14113] rlock(&root->kernfs_supers_rwsem); [ 383.474844][T14113] [ 383.474844][T14113] *** DEADLOCK *** [ 383.474844][T14113] [ 383.482966][T14113] locks held by syz.2.2041/14113: 3, last CPU#0: [ 383.489273][T14113] #0: ffffffff917a75d0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 383.498750][T14113] #1: ffffffff9125b7e0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc1d/0x1c30 [ 383.507785][T14113] #2: ffffffff908044c0 (gdp_mutex){+.+.}-{4:4}, at: cleanup_glue_dir+0xc3/0x220 [ 383.516906][T14113] [ 383.516906][T14113] stack backtrace: [ 383.522795][T14113] CPU: 0 UID: 0 PID: 14113 Comm: syz.2.2041 Not tainted syzkaller #0 PREEMPT(full) [ 383.532145][T14113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 383.542188][T14113] Call Trace: [ 383.545454][T14113] [ 383.548376][T14113] dump_stack_lvl+0xe8/0x150 [ 383.552955][T14113] print_circular_bug+0x2e2/0x300 [ 383.557969][T14113] check_noncircular+0x12f/0x150 [ 383.562899][T14113] __lock_acquire+0x164c/0x2de0 [ 383.567741][T14113] ? lockdep_hardirqs_on+0x7b/0x110 [ 383.572925][T14113] ? __pfx___schedule+0x10/0x10 [ 383.577769][T14113] lock_acquire+0x115/0x350 [ 383.582253][T14113] ? kernfs_remove+0x35/0x80 [ 383.586837][T14113] down_read+0x4a/0x330 [ 383.590988][T14113] ? kernfs_remove+0x35/0x80 [ 383.595564][T14113] kernfs_remove+0x35/0x80 [ 383.599966][T14113] __kobject_del+0xe0/0x310 [ 383.604458][T14113] kobject_del+0x45/0x60 [ 383.608693][T14113] cleanup_glue_dir+0x1a3/0x220 [ 383.613536][T14113] device_del+0x77d/0x8f0 [ 383.617858][T14113] ? __pfx_device_del+0x10/0x10 [ 383.622698][T14113] ? kobject_put+0x50f/0x550 [ 383.627278][T14113] device_destroy+0xb2/0x1a0 [ 383.631857][T14113] ? __pfx_device_destroy+0x10/0x10 [ 383.637046][T14113] ? kernfs_remove_by_name_ns+0x101/0x140 [ 383.642754][T14113] macvtap_device_event+0x226/0x400 [ 383.647945][T14113] ? __pfx_ipvlan_device_event+0x10/0x10 [ 383.653568][T14113] ? __pfx_macvtap_device_event+0x10/0x10 [ 383.659273][T14113] ? lockdep_rtnl_is_held+0x26/0x40 [ 383.664468][T14113] notifier_call_chain+0x1a5/0x3d0 [ 383.669570][T14113] unregister_netdevice_many_notify+0x1437/0x1d80 [ 383.675973][T14113] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 383.682729][T14113] ? netdev_upper_dev_unlink+0x99/0xe0 [ 383.688190][T14113] ? __pfx_netdev_upper_dev_unlink+0x10/0x10 [ 383.694165][T14113] ? macvlan_dellink+0x3e4/0x470 [ 383.699096][T14113] rtnl_newlink_create+0x664/0x7b0 [ 383.704205][T14113] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 383.709834][T14113] ? __pfx___mutex_lock+0x10/0x10 [ 383.714857][T14113] ? ns_capable+0x89/0xe0 [ 383.719184][T14113] rtnl_newlink+0x167a/0x1c30 [ 383.723859][T14113] ? __pfx_rtnl_newlink+0x10/0x10 [ 383.728870][T14113] ? __netlink_deliver_tap+0x4f1/0x6e0 [ 383.734314][T14113] ? netlink_deliver_tap+0x19c/0x1b0 [ 383.739582][T14113] ? netlink_unicast+0x8c1/0xa80 [ 383.744522][T14113] ? netlink_sendmsg+0x813/0xb40 [ 383.749443][T14113] ? sock_sendmsg_nosec+0x14e/0x190 [ 383.754626][T14113] ? ____sys_sendmsg+0x54e/0x850 [ 383.759548][T14113] ? ___sys_sendmsg+0x2a5/0x360 [ 383.764385][T14113] ? __x64_sys_sendmsg+0x1b1/0x290 [ 383.769483][T14113] ? do_syscall_64+0x166/0x520 [ 383.774234][T14113] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.780296][T14113] ? kasan_quarantine_put+0xbb/0x1f0 [ 383.785571][T14113] ? lockdep_hardirqs_on+0x7b/0x110 [ 383.790764][T14113] ? nlmon_xmit+0xb0/0x100 [ 383.795167][T14113] ? kmem_cache_free+0x182/0x650 [ 383.800096][T14113] ? __lock_acquire+0x747/0x2de0 [ 383.805021][T14113] ? __dev_queue_xmit+0x29b/0x3920 [ 383.810125][T14113] ? __local_bh_enable_ip+0xd6/0x140 [ 383.815396][T14113] ? lockdep_hardirqs_on+0x7b/0x110 [ 383.820590][T14113] ? __pfx_rtnl_newlink+0x10/0x10 [ 383.825602][T14113] rtnetlink_rcv_msg+0x802/0xc00 [ 383.830531][T14113] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 383.835630][T14113] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 383.841079][T14113] ? __copy_skb_header+0xa3/0x4a0 [ 383.846096][T14113] netlink_rcv_skb+0x226/0x4a0 [ 383.850845][T14113] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 383.856291][T14113] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 383.861563][T14113] ? netlink_deliver_tap+0x2e/0x1b0 [ 383.866747][T14113] ? netlink_deliver_tap+0x2e/0x1b0 [ 383.871932][T14113] netlink_unicast+0x8ef/0xa80 [ 383.876693][T14113] netlink_sendmsg+0x813/0xb40 [ 383.881444][T14113] ? __pfx_netlink_sendmsg+0x10/0x10 [ 383.886716][T14113] ? apparmor_socket_sendmsg+0x98/0x360 [ 383.892255][T14113] ? __pfx_netlink_sendmsg+0x10/0x10 [ 383.897526][T14113] sock_sendmsg_nosec+0x14e/0x190 [ 383.902535][T14113] ____sys_sendmsg+0x54e/0x850 [ 383.907291][T14113] ? __pfx_____sys_sendmsg+0x10/0x10 [ 383.912570][T14113] ? import_iovec+0x73/0xa0 [ 383.917074][T14113] ___sys_sendmsg+0x2a5/0x360 [ 383.921737][T14113] ? __lock_acquire+0x747/0x2de0 [ 383.926662][T14113] ? __pfx____sys_sendmsg+0x10/0x10 [ 383.931847][T14113] ? futex_wait+0x2a2/0x390 [ 383.936345][T14113] ? __fget_files+0x2a/0x420 [ 383.940926][T14113] ? __fget_files+0x3a2/0x420 [ 383.945599][T14113] __x64_sys_sendmsg+0x1b1/0x290 [ 383.950526][T14113] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 383.955981][T14113] do_syscall_64+0x166/0x520 [ 383.960560][T14113] ? trace_irq_disable+0x3b/0x140 [ 383.965569][T14113] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.971619][T14113] ? clear_bhb_loop+0x70/0xc0 [ 383.976280][T14113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.982157][T14113] RIP: 0033:0x7f5d3eb9e559 [ 383.986557][T14113] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 384.006148][T14113] RSP: 002b:00007f5d3cdd5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 384.014545][T14113] RAX: ffffffffffffffda RBX: 00007f5d3ee26090 RCX: 00007f5d3eb9e559 [ 384.022502][T14113] RDX: 0000000000004054 RSI: 00002000000002c0 RDI: 0000000000000003 [ 384.030456][T14113] RBP: 00007f5d3ec35ab8 R08: 0000000000000000 R09: 0000000000000000 [ 384.038409][T14113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 384.046362][T14113] R13: 00007f5d3ee26128 R14: 00007f5d3ee26090 R15: 00007ffdb6afd858 [ 384.054325][T14113] [ 384.249063][T14118] FAULT_INJECTION: forcing a failure. [ 384.249063][T14118] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 384.249095][T14118] CPU: 0 UID: 0 PID: 14118 Comm: syz.3.2042 Not tainted syzkaller #0 PREEMPT(full) [ 384.249115][T14118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 384.249126][T14118] Call Trace: [ 384.249133][T14118] [ 384.249142][T14118] dump_stack_lvl+0xe8/0x150 [ 384.249170][T14118] should_fail_ex+0x410/0x560 [ 384.249196][T14118] _copy_from_user+0x2d/0xb0 [ 384.249223][T14118] do_sys_poll+0x258/0x1110 [ 384.249250][T14118] ? lock_release+0x4b/0x3c0 [ 384.249273][T14118] ? __pfx_do_sys_poll+0x10/0x10 [ 384.249295][T14118] ? is_bpf_text_address+0x26/0x2b0 [ 384.249318][T14118] ? rcu_is_watching+0x16/0xb0 [ 384.249340][T14118] ? rcu_is_watching+0x16/0xb0 [ 384.249390][T14118] ? lock_release+0x4b/0x3c0 [ 384.249406][T14118] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 384.249428][T14118] ? preempt_count_add+0x6a/0x140 [ 384.249464][T14118] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 384.249490][T14118] ? __fget_files+0x3a2/0x420 [ 384.249519][T14118] __x64_sys_poll+0x190/0x360 [ 384.249543][T14118] ? __pfx___x64_sys_poll+0x10/0x10 [ 384.249570][T14118] ? rcu_is_watching+0x16/0xb0 [ 384.249593][T14118] do_syscall_64+0x166/0x520 [ 384.249615][T14118] ? trace_irq_disable+0x3b/0x140 [ 384.249634][T14118] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.249652][T14118] ? clear_bhb_loop+0x70/0xc0 [ 384.249672][T14118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.249689][T14118] RIP: 0033:0x7fc2d2d9e559 [ 384.249705][T14118] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 384.249720][T14118] RSP: 002b:00007fc2d3c00028 EFLAGS: 00000246 ORIG_RAX: 0000000000000007 [ 384.249740][T14118] RAX: ffffffffffffffda RBX: 00007fc2d3026270 RCX: 00007fc2d2d9e559 [ 384.249753][T14118] RDX: 0000000080000000 RSI: 0000000000000001 RDI: 0000200000000680 [ 384.249765][T14118] RBP: 00007fc2d3c00090 R08: 0000000000000000 R09: 0000000000000000 [ 384.249776][T14118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 384.249787][T14118] R13: 00007fc2d3026308 R14: 00007fc2d3026270 R15: 00007fff7f3d2488 [ 384.249808][T14118] [ 388.705981][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!