last executing test programs: 1m21.724196685s ago: executing program 2 (id=6070): r0 = socket(0x80000000000000a, 0x2, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f00000021c0)=0x0, &(0x7f0000002200)=0x4) sendmmsg$inet6(r0, &(0x7f0000002640)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x7e, @local, 0x9}, 0x1c, &(0x7f0000000740)=[{&(0x7f0000000380)="3a289ed85b795f1afc132d298376e318a07e832beb4f6b22385eca1235e04f9b481c4f20f5311b45ccd15765668b7b4284223515fe822c868fa96a7c17f4db06e2265f5e0bf1aa97ed8e470f0d5177d9e8", 0x51}, {&(0x7f0000000400)="38f7cd00375fda4205857a78d1375ebb487f75d0c665e96ffcd1301fe27ebeb91951805fb76463628623b2d66124d4fb119be144ae876abd896c43206b06028add83aaa5f0419a29ba6333d7b1f017855aac304dc40c2bb6ad032bfed7", 0x5d}, {&(0x7f0000000480)="1b23ef88baa59643703a052e49c0e55b4cc500d01da4d5b25cb818245306c9", 0x1f}, {&(0x7f00000004c0)="74bbd64ef3f6078633405248701fe9e0480e05e51d2f50b370cb023e17d3ce277571fc6d8b60f0d78c8e8788a9acadd0e40556a8b763b304681d998592cc7197a13fae4eaf5adfbaeb8df5c325e16be55f072a0e6d20a0b8d4e9a182ff4d12c0f60ccd150c860f95528fe325a70dd81dc711cd15ae2763d42954093d2981ff8872647c69efb75d80f53004249f25636ba7bebb8e0a2f006df6d0", 0x9a}, {&(0x7f0000000580)="416b2656c766dbbaa6f73f7d2f3d11465d6ea2d57bc7f8b69fcb603836919764dda31c45ba74d464277ffb1e7f6dd309a342f6fe31fd9bbb818cf5fa7821834e65cd4b097e24a613514ba03227cfbc5d", 0x50}, {&(0x7f0000000600)="7e090a6bd65fc4c3470c2ca79520eea0f397a949f71386a0696487dd5b28e3de6ede4fca61ae5a12a7211730b963c97d24e3b4", 0x33}, {&(0x7f0000000640)="3eae06ccc8c92b09fd9b33cf72e0fe1a8075b08668565b1f72c4449ce303259f4f79eb638d225e911f70d79f", 0x2c}, {&(0x7f0000000680)="612b56dd76d8c1c82a472cf8a3e74de51f95cde2e934898622634f7660250ad3772db80b7d92964d730421dffad468edd6ee7c26647ca81684fa5fa26e77a993732e419895ae884f8b75ce8ddf1c86a140104f093eec0e304572876c2298be41203172820152732744df9a2964253175ce94a6671a5df0f670cf4eb43348bce37278f7d407f97631419a10f63591d7ddc006066dcbb07f3e", 0x98}], 0x8, &(0x7f00000007c0)=ANY=[@ANYBLOB="1400000000000000290000000b00000000008f04000000001400000000000000290000003e0000000500000000000000580000000000000029000000390000002f08000700000000fe88000000000000000000000000010120010000000000000000000000000001ff010000000000000000000000000001ff010000000000000000000000000001"], 0x88}}, {{&(0x7f0000000880)={0xa, 0x4e21, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c, &(0x7f0000001c40)=[{&(0x7f00000008c0)="0be9472ced24ee7509246f5485a3fa474eb1a8e573956240b9b58158679e3f695702932c932cadedc7bfa0e85f9630be49e0b10b903bfe88057c36d20699e5274b5c5449d9c173ceb16bc44fba", 0x4d}, {&(0x7f0000000940)="3c42fa43e926", 0x6}, {&(0x7f0000000980)="cba0db579abfea0f74871c9c9e51bc2703732e1ace8e59d469bb70d4d5b7ee89a741f8e438aac1ec5b420568933a38a54550b684026526f980ff62a7acf679d359d8a2befb71588672f6f841b2309d387441f26d27d92b999c94ad41ceb2c49b06de2efcd62cdc01c0aabe3b0a83ac9db30d50a0aafd25ebebe31952395a2f250e99bdbbae2b4196df47c301", 0x8c}, {&(0x7f0000000a40)="833b867c9e492da8742daa2faac081fadb6a7f110b060bdc6094835f1979ef9003323aff62917c9aab36277aabf62f5a4b68e9339c92cfa2dd6e9f48d80a3fac37cc3c21c1cb251cc580e6729a727b774f7519b29080ae6078acaa2f2f73f0373a32bae4d9d261af53555af07da93453cdcbeb390040", 0x76}, {&(0x7f0000000ac0)="5cb5bf88850a39c72c1a19c7bb28e248a094f7f33b721a55892fc90b90a74f21feb1e76978bd05d4a93c0edbcd6c34470ebf927cc9b9440c1d7308c10295fc746c852042a1815e66aa4755c82377196e0b6d559bb02ad930aca2828a02d6617b2411", 0x62}, {&(0x7f0000000b40)="eb3865dc172e373bc33b0c4633312a5ea341edbee580d2a2fd704d30ca7e42b75e", 0x21}, {&(0x7f0000000b80)="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", 0x1000}, {&(0x7f0000001b80)="e517c1fdda7d3d625340a7dc2afa071a03f93ed3da92933d44e27c95be9c654a7126d56827fa872fdeb9c088ed1863becfc8e865db57e17bf0255662ff80763b723d1a28449c4348466f949504a61a9e62c7230fc15b67bf4a77befb352f737e2716f6d921168adfb5afb03d985cdd8417e7096244f7d08d09f17ce0776f4197889f93", 0x83}], 0x8, &(0x7f0000001cc0)=[@tclass={{0x14}}, @hopopts={{0x68, 0x29, 0x36, {0x32, 0x9, '\x00', [@calipso={0x7, 0x48, {0x0, 0x10, 0xf8, 0xfff, [0xff, 0x3, 0x9788, 0x3, 0xfe17, 0x3789, 0x13, 0x7]}}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x1}}, @flowinfo={{0x14}}, @dstopts={{0x1c0, 0x29, 0x37, {0x33, 0x34, '\x00', [@generic={0x6, 0xdc, "3d2c4a1359fd61f31cc0ad8ac7aa1f784f89d2877e30448e16754d192541e371c43a2585e4e540218e9ac980cc7ae924aecb07626d333792462247268a4e4884be0ef58c4d73cd8f234aa7ee3e131dbdaa80262a4984b66d389feeae81d463ddc64e4b391406f344f719c622285fa6ac4835f6238db400319be0da5f59f8566648dba9fd7859c504d988bbdb1b7833399a654ffcbb585ea46bc42ac840f8d36372d6fd109ae56ffb1193889663445467f043c078d811017ee12fba4b28635c178adf332bf969477cc9683cbb9283d063b13fede528bfe47a7ec007ab"}, @pad1, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x48, {0x2, 0x10, 0x2, 0x1, [0x1, 0x8, 0x4, 0xfff, 0xc, 0x9, 0x8, 0x0]}}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00'}, @calipso={0x7, 0x20, {0x3, 0x6, 0x56, 0x3, [0x3, 0x9, 0x8]}}, @calipso={0x7, 0x30, {0x0, 0xa, 0x3, 0x5, [0xffffffff, 0xdc, 0x0, 0x7, 0xffffffffffff08eb]}}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x11, 0x2, 0x2, 0x3, 0x0, [@private1]}}}], 0x298}}, {{&(0x7f0000001f80)={0xa, 0x4e20, 0x0, @private1, 0x3ff}, 0x1c, &(0x7f0000002180)=[{&(0x7f0000001fc0)="0040a6de364983fbcdc3aa3f7c6b107e9b1a9a54e32cdf8fa7982eb001a71c8a00", 0x21}, {&(0x7f0000002000)="975c793ddd65e9bea78a720d63004ab6d91ef72d07009998169bb76c1483e4b5b5c8d6f75e3777edc0cb8d8158f9f3ba518d326013cf8b4a499ae4368b666027d59cd9c97098ebf48c2b17d32d708b55129363662a85e746ac37a035aed2c93c3e4301a1f7492e6a50b87cd131e7a685c7c3a9ded9522b2b17312aa2358610b85b70c225e0d266e226dab7a423f6dd2d33a55cd6fd6272ce101c799e0b511bf29c54ac22dc1f40aeb533a2bf502c84f2fad23f094b6dac09f8767eb5c5490daeb798e8cdb454103c1366116bf27e7dbbee5d3f04f4582ac50e28288b323d5017", 0xe0}, {&(0x7f0000002100)="c96c50b4e75c97f27c482a8a2b94a38123e97b457fa35a325fc9d42fa1472723f856c9c08e57aeef51802393cfe0c8f859173cbfe2150dd24eb76079a37bddf880e8e21c12cc4f361cbb113e3d135a349a21277870c0243e637e", 0x5a}], 0x3, &(0x7f0000002240)=[@dstopts={{0x48, 0x29, 0x37, {0x380f749ed53cfd31, 0x5, '\x00', [@padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x8}, @ra={0x5, 0x2, 0x6}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x30}}, @pad1, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@remote, r1}}}], 0x70}}, {{&(0x7f00000022c0)={0xa, 0x4e24, 0x6, @dev={0xfe, 0x80, '\x00', 0x34}, 0x8}, 0x1c, &(0x7f0000002500)=[{&(0x7f0000002300)="9d180b51a23f5778ac67f7dee078c77dac257b6ab26d5b5a119d3916c23429bc0272382da2ebf8ff82382071e8b558f2c957eadef8f47d8448aa29403a130b9ba730310a94140bdf7ac8466ce660405d1467d576076a017fe8664e2779b1a8b467", 0x61}, {&(0x7f0000002380)="e66e39921597820ae0ce5428a1d5a9b1904a3a1ef9f687934ba5fb7b12f83c17f302f1f79a0b6109db5ec8c37629f98e02624c924a83515be521dafaa25bf7bb21f65ac871365d62f075869755015ecc66f5dbd1a2d97e19be760508dc455d175a3477bb3b8b2d12e4d6cea3915b6e", 0x6f}, {&(0x7f0000002400)}, {&(0x7f0000002440)="19f8500f431395bc63cc3c7f2f06ce7dfd640749b051f6b020f82090323de5be6194c49aaf8ff62095dd3450157a5047b846d5801bcd222b0db0f6452f6b6f4cdad88233f30b2be4d6ab63b05fa4fc8fc06f035201772a5efabb6797f3a374d0b41fc6f6af7802d0a2a9150a1025a7267e3139f89683cec1870298ecbbefc3849dbf239a1a069d3411ca474517877b1ef4b76919160654d74410821e9ba1dc5266c306fddba09332ec4256ba88c0b9d4be40", 0xb2}], 0x4, &(0x7f0000002540)=[@flowinfo={{0x14, 0x29, 0xb, 0x2}}, @dstopts_2292={{0xc0, 0x29, 0x4, {0x19, 0x14, '\x00', [@generic={0x2, 0xa2, "73375935c30eacaba37e8d4c45b960e78e851808bb3f7da34b0a4f0d306caeadbb069d2901320f1da5b1e2670dbbafc0e2c49ec6fda9982d508f75ac11697a72f48a210c15a446e94e4b7f3dea390fa3445d0b8591d247719051577b493dcb279cc3fc2ebc093e1005f0c605783ebc8547aa704c2bafc9704695d4206652334277d18268f787bdc4cec7708ddcb2546a8b72b939ec089d2ed8f031ac0fa1947dc9ba"}]}}}], 0xd8}}], 0x4, 0x48005) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000200)={0x8, {{0xa, 0x4e21, 0x6de, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r5, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r4, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) bind$tipc(r4, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(r5, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) bind$tipc(r5, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x3}}, 0x10) bind$tipc(r4, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000048000000030a01010000000000000000020000000900010073797a30000000000900030073797a3200000000080007008b617400140004800800014000000000080002"], 0xa4}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r2, @ANYBLOB="40005200060010"], 0x24}}, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x23}}}, 0xffff0000, 0x4, 0x5, 0x2, 0x2}, &(0x7f00000000c0)=0x98) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000100)={r7, 0x4, 0x0, 0x11e, 0xd82}, &(0x7f0000000140)=0x18) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0xfffc, 0x2, @ipv4={'\x00', '\xff\xff', @empty}, 0x80000}}}, 0x108) close(r0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='dummy0\x00', 0x10) 1m21.562769304s ago: executing program 2 (id=6073): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(sm4)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) (async) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) (async) recvmmsg(r1, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001d00)=""/1, 0x1}], 0x1}, 0xf}], 0x1, 0x10002, 0x0) 1m21.381361253s ago: executing program 2 (id=6077): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f00000005c0)=@assoc_value, &(0x7f0000000580)=0x8) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000c80)={0x34, 0x5, 0x6, 0x201, 0x0, 0x0, {0x9, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4040) 1m21.215246058s ago: executing program 2 (id=6080): sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m21.05683839s ago: executing program 2 (id=6084): r0 = socket(0x18, 0x800, 0x3) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x0, 0xe}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000300)={r1, 0x1000, "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"}, &(0x7f0000001340)=0x1008) (async, rerun: 32) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x6, [{0x0, 0x9}, {0x9, 0x100}, {0x6, 0x80000000}, {0x8001, 0x2}, {0x7fff, 0x5}, {0xff}]}}) (async, rerun: 64) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000000000009110920000000000950000000900001e4c9e1aa5b9813c3cf1b564e9b8e93191685e2171d4c37389be917344f9ed8ef2cb8ff3b6e51a1dd9fa766a7f95bc2a3caa8be141dcdd8e151400"/102], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_int(r3, 0x29, 0x4, 0x0, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a300000000040000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800024000000000080001400000000040000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000140003800800024000000009080001400001"], 0xc8}}, 0x0) 1m20.658728894s ago: executing program 2 (id=6088): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000008c0)="d800000018007b29e00212ba0d8105040a3f1800fe0f040b067c55a1bc000900b80006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ccd40dd601edef3d93452a92307ff0ff0e97031e9f05e9f16e9cb500"/216, 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r2) getsockname$packet(r2, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000010500000000fbdbdf2500000000", @ANYRES32=r3, @ANYBLOB="016000000000000c240012800900010069706970000000001400028008000100", @ANYRES32=r3, @ANYBLOB="08000300ac1e00"], 0x44}}, 0x40848c0) openat$tun(0xffffffffffffff9c, 0x0, 0xa8a00, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r5 = socket(0x10, 0x803, 0x0) r6 = socket$netlink(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x503, 0x40000, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x10061}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000080)=@ethtool_rxfh={0x1}}) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_freezer_state(r9, &(0x7f0000000140), 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) write$cgroup_freezer_state(r10, &(0x7f0000000040)='FROZEN\x00', 0x7) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r11 = openat$cgroup_procs(r9, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r11, &(0x7f0000000180), 0x12) write$cgroup_freezer_state(r10, &(0x7f0000000080)='THAWED\x00', 0x7) r12 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r10}, 0x8) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000100)=r12, 0x4) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r13, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c00000033fcc35d6220ef5b5bca4620cc55f62fe981b0e86eaf792cba5451a9b8eaba240691d3f8ab40705215ca8b9421ec64cb36ab0af54cdef6", @ANYRES16=r14, @ANYBLOB="1709000000000000000001000000050007000000000008000900000000001400200000000000000000000000ffffe000000108000a0000000000060002000100000014001f00"/86], 0x5c}, 0x1, 0x620b}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000001c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, 0x12e1b, 0x1a001}}, 0x20}}, 0xc004) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=r4, @ANYRESOCT=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) 1m5.206839231s ago: executing program 32 (id=6088): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000008c0)="d800000018007b29e00212ba0d8105040a3f1800fe0f040b067c55a1bc000900b80006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ccd40dd601edef3d93452a92307ff0ff0e97031e9f05e9f16e9cb500"/216, 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r2) getsockname$packet(r2, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000010500000000fbdbdf2500000000", @ANYRES32=r3, @ANYBLOB="016000000000000c240012800900010069706970000000001400028008000100", @ANYRES32=r3, @ANYBLOB="08000300ac1e00"], 0x44}}, 0x40848c0) openat$tun(0xffffffffffffff9c, 0x0, 0xa8a00, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r5 = socket(0x10, 0x803, 0x0) r6 = socket$netlink(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x503, 0x40000, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x10061}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000080)=@ethtool_rxfh={0x1}}) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_freezer_state(r9, &(0x7f0000000140), 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) write$cgroup_freezer_state(r10, &(0x7f0000000040)='FROZEN\x00', 0x7) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r11 = openat$cgroup_procs(r9, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r11, &(0x7f0000000180), 0x12) write$cgroup_freezer_state(r10, &(0x7f0000000080)='THAWED\x00', 0x7) r12 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r10}, 0x8) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000100)=r12, 0x4) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r13, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c00000033fcc35d6220ef5b5bca4620cc55f62fe981b0e86eaf792cba5451a9b8eaba240691d3f8ab40705215ca8b9421ec64cb36ab0af54cdef6", @ANYRES16=r14, @ANYBLOB="1709000000000000000001000000050007000000000008000900000000001400200000000000000000000000ffffe000000108000a0000000000060002000100000014001f00"/86], 0x5c}, 0x1, 0x620b}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000001c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, 0x12e1b, 0x1a001}}, 0x20}}, 0xc004) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=r4, @ANYRESOCT=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) 4.060160328s ago: executing program 4 (id=6560): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000009b80)=ANY=[@ANYBLOB="30000000000009000073797a31080000000900010073797a3100"/41], 0x30}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e21, 0x1, @loopback, 0x13}, 0x1c) r4 = socket$inet6(0xa, 0x5, 0x0) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e21, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0xff}, 0x1c) getsockopt$sock_buf(r4, 0x1, 0x1c, 0x0, &(0x7f0000000000)=0x1c) splice(r2, 0x0, r1, 0x0, 0x10000008ebc, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xd, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000000)=@ethtool_cmd={0x8, 0x6, 0x1, 0x389, 0x8, 0x2, 0x4, 0x6, 0x0, 0x1, 0x5, 0x5, 0xfffb, 0x8, 0x5, 0x0, [0xe, 0xff]}}) 4.053176581s ago: executing program 4 (id=6568): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="3000000010000108fdff763f0000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000008001a8004002d"], 0x30}}, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10002}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000008c0), 0x75, r1}, 0x38) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ff16ffb703dad470a1ed66babd00000000000085000000030000009500000000000000"], &(0x7f0000000400)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a}, 0x94) (async, rerun: 64) r3 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@mpls_delroute={0x30, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_VIA={0x4, 0x13, {0x0, "fea22255b36d2a6f2096c248b30c"}}]}, 0x30}}, 0x0) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r2, r1}, 0xc) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240), 0x50) (async) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000000)={0xa, 0x4e23, 0x28000000, @loopback, 0x92}, 0x1c, &(0x7f00000003c0)=[{&(0x7f00000002c0)="d84ad3be9f2f1beccd2e5dc3dff869205bc9b57906a2261f3ae70702b974952872769b7f3f0101d10adc8e41d026843e412f233e2cc0e46f899cae7f225e3da8f455c01b043903a6651361c7a22e92ff454e5729af3d4ae19d6bf2f2d43430aa390c4f334caa757f13f964140a6be2d6fe03c9e7aad38fc4c2b05d1fd2f46e36442bf9d9b5f46cb52d1a910d8329afe64872faca1265263f5b18dd11583ce877be6e2f389c9be02ba1b17d6444ff2dd15335b2b5fb1663c57382d08f3ae89d93b1c9f9c63f", 0xc5}], 0x1, &(0x7f0000000400)=[@dontfrag={{0x14, 0x29, 0x3e, 0x9}}, @hopopts_2292={{0x30, 0x29, 0x36, {0x2b, 0x2, '\x00', [@hao={0xc9, 0x10, @private0}, @pad1]}}}, @rthdrdstopts={{0xa0, 0x29, 0x37, {0x2, 0x10, '\x00', [@enc_lim={0x4, 0x1, 0x3}, @calipso={0x7, 0x48, {0x3, 0x10, 0x80, 0x0, [0x5, 0x4, 0xc, 0x7, 0x5, 0x0, 0x7, 0x9]}}, @calipso={0x7, 0x20, {0x3, 0x6, 0xc5, 0x4, [0x5, 0x7, 0x2]}}, @pad1, @hao={0xc9, 0x10, @private0}]}}}, @hopopts_2292={{0x38, 0x29, 0x36, {0x88, 0x3, '\x00', [@ra={0x5, 0x2, 0x7fff}, @ra={0x5, 0x2, 0xd4d}, @calipso={0x7, 0x8, {0x0, 0x0, 0x7, 0x5}}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @rthdr_2292={{0xb8, 0x29, 0x39, {0x6, 0x14, 0x1, 0x3, 0x0, [@loopback, @mcast2, @local, @local, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1]}}}, @tclass={{0x14, 0x29, 0x43, 0xfffffffe}}], 0x1f0}, 0x1) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x8, 0x40}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x10}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r4}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0xb4}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) r6 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000680)=0x1c, 0x0) (rerun: 32) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000006c0)={0x0, 0x1d}, &(0x7f0000000700)=0x8) ioctl$XFS_IOC_FSBULKSTAT_SINGLE(r0, 0xc0205866, &(0x7f0000001280)={&(0x7f0000000740)=0x8, 0x5, &(0x7f0000000e80)=[{}, {}, {}, {}, {}], &(0x7f0000001240)}) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f00000009c0)={r7, @in6={{0xa, 0x4e22, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}}, 0x9, 0x53f0}, &(0x7f0000000a80)=0x90) 3.790943587s ago: executing program 4 (id=6573): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x2b, 0x1, 0x1) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, 0x0}, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) getsockopt$inet_mptcp_buf(r1, 0x11c, 0x3, &(0x7f0000000300)=""/193, &(0x7f00000002c0)=0xc1) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000100)=0x100000001, 0x4) connect$unix(r3, &(0x7f0000000540)=@abs={0x0, 0x0, 0x4e23}, 0x6e) pselect6(0x900, 0x0, 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x100, 0x0, 0x0, {}, [@NHA_FDB={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc800}, 0x1) r4 = socket$l2tp(0x2, 0x2, 0x73) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r5, &(0x7f0000000440)={0x1f, 0x2, @none, 0xfffe, 0x2}, 0xe) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'erspan0\x00'}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r7, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x804) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x2, 0x0, {}, [{0x8, 0x1, 0x2}]}, 0x20}}, 0x0) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00e20101000008e5ffffff00000000000100000000000000"], 0x18) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000000)={0x0, 0xea60}, 0x10) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) 2.73980762s ago: executing program 4 (id=6589): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="8889a96eef0dcd67bc45e8a0dd71f3089d4188092683e5cd6774fcdd6990eab46c26dd0bffb94973b4be9185bd55633a488f289a19a8deb7e0919df403b29e8fe1532580fdaf6604737b40fb546bead5c9deb4d1796c7b27e9efea75eb21285ec23f64cb1fab01005dc7d43a1dc4e9f9a29406555a010d313272d0d3a2f5a152f4806b7266fe0b94b3c30a102ad6fccbee68c9e83e343059", 0x98}], 0x1, 0x6) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000100)={0x0, 0x1, 0x1}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000180)=@sack_info={r2, 0x5, 0x374b}, 0xc) recvmmsg(r1, &(0x7f0000000700)=[{{&(0x7f00000001c0)=@generic, 0x80, &(0x7f0000000280)=[{&(0x7f0000000240)=""/51, 0x33}], 0x1, &(0x7f00000002c0)=""/29, 0x1d}, 0x1}, {{&(0x7f0000000300)=@ethernet={0x0, @local}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000380)=""/25, 0x19}, {&(0x7f00000003c0)=""/178, 0xb2}, {&(0x7f0000000480)}, {&(0x7f00000004c0)=""/108, 0x6c}, {&(0x7f0000000540)=""/123, 0x7b}], 0x5, &(0x7f0000000640)=""/136, 0x88}, 0x3}], 0x2, 0x10060, &(0x7f0000000780)={0x77359400}) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f00000007c0)=0xb, 0x4) setsockopt$MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000800)={{0xa, 0x4e24, 0x5, @local, 0x45327b0a}, {0xa, 0x4e20, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}, 0x0, {[0x8, 0x3ff, 0x0, 0x8001, 0x9, 0x7, 0x9, 0x6]}}, 0x5c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x34, 0x1, 0x1, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x583b}, @CTA_PROTOINFO={0x10, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0xc, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x2}]}}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0xfff}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x800) r4 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000980)='cpu.max.burst\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f00000009c0)=0x1, 0x12) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r4, 0x4058587a, &(0x7f0000000b80)={{r1, &(0x7f0000000a00)='\x00', 0x8300, &(0x7f0000000a40)={@_ha_fsid={[0xa45, 0x100]}, {0x9b, 0x4, 0xd, 0x7}}, 0x1, &(0x7f0000000a80), &(0x7f0000000ac0)=0x7}, {[0xf1d, 0xb1, 0x46, 0xac0]}, 0x5, 0x60, &(0x7f0000000b00)=""/96}) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r5, 0xc0385869, &(0x7f0000000d00)={r6, &(0x7f0000000c00)='(%%\x00', 0x400100, &(0x7f0000000c40)={@_ha_fsid={[0x3, 0x5]}, {0x7, 0xa50, 0x3ce3e516, 0x10000}}, 0x6, &(0x7f0000000c80), &(0x7f0000000cc0)=0x80}) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_wireguard(r8, 0x8933, &(0x7f0000000d80)={'wg2\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)=@newlink={0x30, 0x10, 0x102, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, 0x0, 0x20008}, [@IFLA_LINKMODE={0x5, 0x11, 0x7f}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0xe}]}, 0x30}, 0x1, 0x0, 0x0, 0x8010}, 0x1000) setsockopt$MRT6_PIM(r7, 0x29, 0xcf, &(0x7f0000000e80), 0x4) connect$inet(r7, &(0x7f0000000ec0)={0x2, 0x4e22, @multicast1}, 0x10) r10 = accept$inet(0xffffffffffffffff, &(0x7f0000000f00)={0x2, 0x0, @loopback}, &(0x7f0000000f40)=0x10) setsockopt$SO_TIMESTAMP(r7, 0x1, 0x3f, &(0x7f0000000f80)=0x7fffffff, 0x4) ioctl$F2FS_IOC_SET_PIN_FILE(r8, 0x4004f50d, &(0x7f0000000fc0)=0x1) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001000)={0x2880}, 0x8) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f0000001040)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r5, 0xd000943e, &(0x7f0000001240)={0x0, r11, "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", "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"}) sendmsg$NFQNL_MSG_VERDICT_BATCH(r5, &(0x7f0000002300)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000022c0)={&(0x7f0000002280)={0x3c, 0x3, 0x3, 0x5, 0x0, 0x0, {0x2}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x1}, @NFQA_MARK={0x8}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x8}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x800}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$sock_FIOGETOWN(r10, 0x8903, &(0x7f0000002340)=0x0) syz_open_procfs$namespace(r12, &(0x7f0000002380)='ns/user\x00') bind$bt_l2cap(r7, &(0x7f00000023c0)={0x1f, 0x295, @none, 0x0, 0x2}, 0xe) 2.532766302s ago: executing program 4 (id=6594): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="00008a7600"/17, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r0, &(0x7f0000000140)='t'}, 0x20) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="0000888eaaaaaaaaaaaa0180c200000e88a80000810020020800450c0024eee02e00001190787f000001e0000001000017c100109078e204000100000000"], 0x3e) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000440)={'ip6_vti0\x00', 0x0, 0x4, 0x29, 0xf8, 0x7, 0x2, @local, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x8, 0x7800, 0x0, 0x20000}}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.stat\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000080)=ANY=[], 0x10448) r5 = openat$cgroup_type(r4, &(0x7f0000000100), 0x2, 0x0) vmsplice(r5, &(0x7f00000008c0)=[{&(0x7f0000000700)="d62c3457e2533193132b68a095746b7e81ec31e010a638a550ae9513fd8d70e8f5a51fb9e9db72b6c82b7230cc11b28524f1a422d834c172944e8636d738b118fdd2ad2f873462372af002ebe6596a0057c83e4105dcaafdfb9b1e5cdf85d6eb08d1e8dc032b8d2e11f70c3f4d52d471e0c34d218a7c1fbb5e90bb9968323e78be669881daa3517a0f3d5a54", 0x8c}, {&(0x7f00000007c0)="9421acffee023a49700e2b52044b18a8d360efbbdc454e0d903c9d1db08dfab69fd183865a3df70b742d6863db95096af986e51a744ab130f9760040d52ae0da9e35145dc3defad032647f4c8c532ea509396c4d52015d541d8ec7790f688503405903ceb9f2ae0b65d119235d245187781344566ee632ca29a46c14b8b49dca06a5fc4366ca5beba71c64bede78b64d6ad8120e8f4e89f217adc35f6fe729a8db39df34fe81ab3e2c9dbd16ca0407cfbfacafa7a6cbae80e1fbb7e956845e3dd2d57655", 0xc4}], 0x2, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x12, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x400}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_fd={0x18, 0x0, 0x1, 0x0, r0}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000380)='syzkaller\x00', 0xfffffffc, 0x57, &(0x7f00000003c0)=""/87, 0x41000, 0x20, '\x00', r3, 0x25, r4, 0x8, &(0x7f0000000500)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x2, 0x7, 0x6, 0x8}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000580), &(0x7f00000005c0)=[{0x1, 0x4, 0x8, 0x5}, {0x0, 0x3, 0x3}, {0x0, 0x5, 0x7, 0x4}, {0x1, 0x4, 0xa, 0x9}, {0x2, 0x1, 0x0, 0x3}, {0x0, 0x2, 0x5, 0x4}], 0x10, 0x9}, 0x94) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8983, &(0x7f0000000080)={0x6, 'veth1_to_hsr\x00', {0x9}, 0x9}) 2.267301966s ago: executing program 3 (id=6597): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x18, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x51bc, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0xe4}, 0x94) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000a40)={'vlan0\x00', &(0x7f0000000a80)=@ethtool_cmd={0x17}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r2, 0x6, 0xb, 0x0, &(0x7f0000000340)) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000140)={'ip6_vti0\x00', 0x0, 0x4, 0x7, 0xb, 0x1ff, 0x8, @private1, @private0, 0x10, 0x40, 0xd7e, 0x3}}) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x88, 0x88, 0x4, [@type_tag={0x2, 0x0, 0x0, 0x12, 0x2}, @decl_tag={0x4, 0x0, 0x0, 0x11, 0x4, 0x1}, @volatile={0xc, 0x0, 0x0, 0x9, 0x5}, @var={0xa, 0x0, 0x0, 0xe, 0x3, 0x2}, @restrict={0x9}, @fwd={0x9}, @decl_tag={0xb, 0x0, 0x0, 0x11, 0x2, 0x9}, @func={0x3, 0x0, 0x0, 0xc, 0x4}, @typedef={0x4, 0x0, 0x0, 0x8, 0x2}, @int={0xa, 0x0, 0x0, 0x1, 0x0, 0x6a, 0x0, 0x7b, 0x2}]}, {0x0, [0x61, 0x5f]}}, &(0x7f00000002c0)=""/79, 0xa4, 0x4f, 0x0, 0x8}, 0x28) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x2, 0x7, 0xeea, 0x4a00, r0, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x5, 0x7}, 0x50) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000480)={0x0, 0x8a05, 0x18}, 0xc) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f00000005c0)={r0, &(0x7f00000004c0)='&&\x00', 0x80, &(0x7f0000000500)={@_ha_fsid={[0x38, 0x2634]}, {0x2, 0x0, 0x0, 0x6}}, 0x7, &(0x7f0000000540)={@_ha_fsid}, &(0x7f0000000580)=0x3}) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000600)={0x0, 0xc06, 0x8}, 0xc) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000740)={r0, &(0x7f0000000640)='GPL\x00', 0x40000, &(0x7f0000000680)={@_ha_fsid={[0xffff, 0xa]}, {0x9, 0x8000, 0x9512, 0x8}}, 0x9a39, &(0x7f00000006c0)={@_ha_fsid}, &(0x7f0000000700)=0x800}) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x3b4, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x4}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000840)=@bpf_lsm={0x1d, 0x8, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2b}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x18}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x2, 0x3, 0xf23c709c1ddec7b7, 0x0, 0x50, 0xfffffffffffffff0}, @generic={0x7f, 0x7, 0x6, 0x3, 0x1}]}, &(0x7f0000000100)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', r3, 0x1b, r4, 0x8, &(0x7f0000000380)={0x4, 0x5}, 0x8, 0x10, &(0x7f00000003c0)={0x0, 0x10, 0x5, 0x2}, 0x10, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000800)=[r5, r6, r7, r8, r9, r10], 0x0, 0x10, 0x40}, 0x94) 2.230590934s ago: executing program 4 (id=6598): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r2, 0xc040ff0b, 0x2000000000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_VOICE(r5, 0x112, 0xb, 0x0, &(0x7f0000001d80)) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) socket$igmp(0x2, 0x3, 0x2) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[], 0x20}}, 0x0) sendmsg$nl_route(r6, 0x0, 0x10) sendmsg$nl_route(r6, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000240)='U', 0x1, 0xc000, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000280)='westwood', 0x8) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000), 0x4) socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={0x2c, 0x7, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}}, 0x0) 2.170927372s ago: executing program 5 (id=6599): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@gettaction={0x48, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x800}, @action_gd=@TCA_ACT_TAB={0x2c, 0x1, [{0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$key(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xf8}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10010}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="50000000100001042591e5ad6000a7842cf52100", @ANYRES32=0x0, @ANYRESHEX=r0], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r2 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$xdp(r2, &(0x7f0000000980)={&(0x7f0000000140)={0x2c, 0x1, 0x0, 0x2b}, 0x10, &(0x7f0000000900)=[{&(0x7f00000003c0)="82aee88955e16cbd5a9923bef074caa90191872249a4785754b342e13d8237f83fcf3a93df81852432aaded7dc658743984cb366adcdec43004025ad8c02fcb4653df4aeb6f843974a33", 0x4a}, {&(0x7f00000004c0)="214f340b960c802f54430d3884e18cb7e78336e305a2dc351266c3f4a80e2c57fc0f56508f5d21", 0x27}, {&(0x7f0000000500)="3451cf483f7ccf57d5631502f8d0609a067ef621ba28c3db0c572820c57e4f51f8bb570b31f54dbf189a8272d5de5e3ff804a2ab9b252215ea07050b9f42b8ed17807ec350df72d4a12cf29eec60f7c8e1a3e6fc8253bd1f151cc68bd69aaa0487969685d1f20ca8c05bb7a5995fa1", 0x6f}, {&(0x7f0000000580)="9daa9359c230b17dec194392c43e8be7e755144fadfffcc752297e29bd05894f7532a74c43359b3ce6e65efe62d8125c38235dc76dd17399e3cb5f05f14989e2f4507994310efffddfd3ed956390eb0c711bef82d42193eb71adb20ec4a2dd5838c61fb41f482de0420106610cc356eaf108eedb836096a49f3b15557e5b2f2a9061bdc3cffaafd5a709424f86c931a6b023be7794833b726b4a3f", 0x9b}, {&(0x7f00000006c0)="de689f8ef99994818bf250a4994ab7c210d407b99697ed2e0d931a9931c9e87e54412a638294aabf60df7e7c3884a13a3fcf06111282f7503e45ddca7859", 0x3e}, {&(0x7f0000000700)="eed288e52f83106890f0fcc9dc8d03ce4c3f506613cc7144bcab402a20b6925bc6d237be4fae144866a051cdbe46126de67111a6edbf30085d6c9ab4ebaecfd904a2d95cf3a6e2de7ea668761ff8cbade12a2ccbd6385a1c94db347e661140e9e2aa34386f052a2d803e8eca70c005dc57502a16a499eb9f29695884e137ce4c915585d46f60b965801a5b69971bb814a705b1c1f7d56acbdcc8cb56e7cec91def0eaff963a62c61282cc185baced5afe36d729f40fbc73a7f103ae9c3d4aafcdb85870023ffd81b8725d2f70dcc203e1e8d4c1bfc9548e6c8e6ff5b918d4e0d447f3be1b7e72139a4", 0xe9}, {&(0x7f0000000800)="850cf5b6d822b71a6918e1a366825ab24beb642fe8de33680e924ea0cda3fe7f98c8a0b9b9371205b58659747d92e8cd29769482c56efa7829eed8c96cdc70bf7971af4db3d1042c0c0fc6aecad9762f2cfe3e1710920c37c803a9380d690bdd6cd8c64f57c7f2b9cfc7480fd11d93c86de7d96f94dead8088f54e76e21fb2cf286b99d77f687b264417c686e526d8ee6bd8f3a17901e483d9d44a698b43adeb4820c3b634e769d5816f5d80b7aa9885269da5088adaacfe042c71a6b1c227c9b9bfe02656126b7767", 0xc9}], 0x7, 0x0, 0x0, 0x4000}, 0x20008044) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b04000000000000000002000000400004803c0001800b00010065787468647200002c0002800800034000000000080001400000000d080006400000008c080004400000001705000200940000000900010073797a30000000000900020073797a32"], 0x94}}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f00000005c0)=ANY=[], 0x8) setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x6, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.936743894s ago: executing program 5 (id=6602): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000140)={'wg0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@deltfilter={0x0, 0x2d, 0x400, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x4, 0xa}, {0x3, 0x9}, {0x10, 0x2}}, [@TCA_CHAIN={0x0, 0xb, 0x1}, @TCA_CHAIN={0x0, 0xb, 0x6}]}, 0xac}}, 0x0) (async) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@gettfilter={0x6c, 0x2e, 0x300, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x3, 0x4912bdfb1367f5d3}, {0xe, 0xfff3}, {0x9, 0x7}}, [{0x8, 0xb, 0x4}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x8000}, {0x8, 0xb, 0x7ff}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0xd}, {0x8}, {0x8, 0xb, 0xd}, {0x8, 0xb, 0x7fff}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040084) 1.654736068s ago: executing program 5 (id=6605): sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c4) r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x7fff, @loopback, 0x9}, @in6={0xa, 0x4e22, 0x7ff, @empty, 0x7}], 0x38) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) 1.580047032s ago: executing program 1 (id=6606): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="620ac4ff00000000711017000000000095000000000000007b2288f540ef43b3f790ce76010ac8d1171af7f2046cb21079129b44b787de7542d5f0e89f1de38484c188ca731d8a0e345abc5b81abfc4ccbfd9e07d998d10bebbc975b8789ab76218d7d50c38f7d43542ca014562f84734903b62304e53a5686584b3b81da179f23266e932555cab7819cd785bb339d768b4fe1ba5e54a39c0fd7d62734b3282277311df73fe30335c381dd583144dd8b1e83209ef58b116af393c379eaeb505c2f7c50fe1f4b4710279934715f838a0cd18e9bd293d2217e7f977986"], &(0x7f0000000480)='GPL\x00'}, 0x90) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x0, 0x0, &(0x7f0000000380)) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@ipv6_getaddr={0x64, 0x15, 0x1, 0x0, 0x0, {}, [@IFA_RT_PRIORITY={0x8}, @IFA_FLAGS={0x8}, @IFA_ADDRESS={0x14, 0x1, @empty}, @IFA_LOCAL={0x14, 0x2, @empty}, @IFA_CACHEINFO={0x3e}]}, 0x64}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xb}}, @in={0x2, 0x4e21, @empty}]}, &(0x7f0000000180)=0x10) 1.325189098s ago: executing program 5 (id=6608): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="2000209c", @ANYRES16, @ANYBLOB="070627bd7000fcdbdf252d0000000a0001"], 0x20}, 0x1, 0x0, 0x0, 0x8015}, 0x4008000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r2, 0x8b32, &(0x7f0000000040)) (async) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x298, 0x150, 0x168, 0x9, 0x150, 0xb, 0x250, 0x250, 0x250, 0x250, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0xa8, 0xf0, 0x0, {0x0, 0x28e}}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f8) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b04, &(0x7f0000000040)={'wlan0\x00'}) (async) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x3ec0) (async) close(r1) 1.313833174s ago: executing program 0 (id=6609): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000003000), 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711105000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffff07}, 0x94) 1.313536726s ago: executing program 1 (id=6610): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd26, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0xfffd, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20000000007, 0xfffffffffffffffb}, {0x0, 0x0, 0x0, 0xfffffffffffffffe}}}, 0xb8}}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x30, 0x0, 0x0, 0xfffff024}, {0x80000006}]}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8, 0x2, 0x3}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0xfffffffe, {{@in=@multicast1=0xe0000002, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x10, 0x20}, {0x0, 0x1, 0x100, 0x0, 0x0, 0x9, 0xffffffff}, {}, 0x0, 0x6e6bb5}}, 0xb8}}, 0x0) 1.115374851s ago: executing program 3 (id=6611): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0xf0, 0x1c, 0x1, 0xfffffffe, 0x102, {{@in=@dev={0xac, 0x14, 0x14, 0x16}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@dev={0xac, 0x14, 0x14, 0x3a}, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0xffffffff, 0x193, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x61}}, 0xf0}, 0x1, 0x0, 0x0, 0x4000881}, 0x20000000) r1 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NFC_CMD_DEP_LINK_UP(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r1, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_COMM_MODE={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008051) r2 = accept(r0, &(0x7f0000000200)=@hci, &(0x7f0000000280)=0x80) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, 0x1, 0x4, 0x701, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7}, @NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_CMD={0x5, 0x1, 0x4}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x8}, @NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x800) 1.115008945s ago: executing program 0 (id=6612): r0 = socket(0x80000000000000a, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async, rerun: 64) r3 = socket$inet6(0xa, 0x2, 0x0) (rerun: 64) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) recvmmsg(r3, &(0x7f0000000740)=[{{0x0, 0x0, 0x0}, 0x4000}], 0x1, 0x120, 0x0) setsockopt$inet6_int(r3, 0x29, 0x31, &(0x7f00000001c0)=0x80000008, 0x4) (async) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r2, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x0, 0x3, 0x6, 0xfdcd, 0x2f, 0x40}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x28, 0x2c, 0x65, 0x0, 0x40, 0x11, 0x0, @private=0xa010104, @broadcast}, {0x4e26, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x7ff, 0x7f}}}}, 0xfdef) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r5, 0x84, 0x1a, &(0x7f0000000200)={r7}, &(0x7f0000000340)=0x8) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'veth1_to_bond\x00', 0x0}) (async, rerun: 32) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x38, r11, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_AKM_SUITES={0x10, 0x4c, [0xfac0d, 0xfac0d, 0xfac04]}]]}, 0x38}}, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', r9}, 0x48) (async) r13 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)) preadv(r13, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, 0x13, 0x0) (async) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000080)={r7, 0x80000001}, &(0x7f00000000c0)=0x8) (async, rerun: 64) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_delrule={0x60, 0x21, 0x20, 0x70bd2b, 0x25dfdbfc, {0xa, 0x14, 0x0, 0xb7, 0x5, 0x0, 0x0, 0x0, 0x10000}, [@FRA_DST={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x4, 0x5}, @FRA_DST={0x14, 0x1, @local}, @FRA_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) (rerun: 64) 1.060429897s ago: executing program 5 (id=6613): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x280000, 0x0) ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x1) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg$qrtr(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/192, 0xc0}], 0x1, 0x0, 0x0, 0x40010121}, 0x38, 0x40) (async) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000000000000000000c300d4a95423bd6b2603597009c7502e5dcb55632b94b6deba2cfcdb4790009c6c7df8130401388d0a01e85d44af7fbb8e214c3d67a600741c9fe004000000000000005d715737ba1169dfd6cce051569409102a3c52ad19df0a079835dc35c81de7940e8814f766a157fa0519c686a4354fb876aa0022d66dba3ff73cc24b702ac92ea0c9e7d6c4fd6eecae61e63a1812631e6b1957d6b72dcd37cb7cde3c57794c6a22ee53eafad6675cb6ae6cc30d28ed8d1e27b9dd7070b5527f63c71f3f02f845ac1e6952613cd1ec45bc37afdcdf0ed5dce47f72a0ec42a5665ca6170e235d4f05ad0353368d"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5c}, 0x90) 1.000850832s ago: executing program 3 (id=6614): sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030e000000000700000000000004000900a000000001d78771b90bd8a3b4914783c58777003d5b953800000000030006000000000002000000000000000009000000000000020001"], 0x70}, 0x1, 0x7}, 0x0) (async) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="89000000120081ae08060cdc016b3f087f03e3520000000000e2ffca1b1f000000000cc00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120800030004010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r1, &(0x7f0000000300)}, 0x20) (async) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000380)=ANY=[@ANYRESOCT, @ANYRES16, @ANYRES16=r1, @ANYRES32, @ANYBLOB="4400028040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x4, 0xff0, &(0x7f000062b000)=""/4080, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0xa0001f98, 0xfe71, 0x1f00, &(0x7f0000000440)="85f17444c5a569f1e21b08c0f264", 0x0, 0xa70a, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) r3 = socket$netlink(0x10, 0x3, 0x0) (async) r4 = socket$inet_sctp(0x2, 0x4, 0x84) setsockopt$inet_mreq(r4, 0x0, 0x23, &(0x7f00000000c0)={@multicast1, @loopback}, 0x8) (async) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) (async) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x20, 0x52, 0x1, 0x0, 0x0, {0x1c}, [@typed={0xc, 0x5, 0x0, 0x0, @u64}]}, 0x20}}, 0x0) (async) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r1, 0x80286722, &(0x7f0000000480)={&(0x7f0000000400), 0x0, 0x5, 0x462}) 839.163859ms ago: executing program 5 (id=6615): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x1, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x303}, "1afc7c14d332bcc6", "a9ba0c85d68723369f51322151d9f41aaa2832bb07cc1e49ad714beac6f1ade8", "49960d8f", "bff2a81527ae4190"}, 0x38) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r3, 0x0, 0x20000000002) r4 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r4, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0xd, {0x2, 0x0, @empty}}, 0x24) r5 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0xda, 0x0, 0x0, @dev, @dev={0xfe, 0x80, '\x00', 0x37}, 0x8000, 0x0, 0x2, 0xc}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x0, 0x0, 0x0, 0x4007}}) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$sock_timeval(r6, 0x1, 0x42, &(0x7f0000000100), &(0x7f0000000140)=0x10) r7 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) r8 = socket(0x2a, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="0600"/16], 0x10) getsockname$packet(r8, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', r9, 0x0, 0x5, 0xff, 0x0, 0x1, @private2, @remote, 0x8, 0x80, 0x1, 0x10000}}) write$cgroup_subtree(r7, &(0x7f0000000280)=ANY=[@ANYBLOB="0b000000000000006574202d68756765746c62202b6d65bef9727920"], 0x1c) 799.862402ms ago: executing program 1 (id=6616): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000200)={'syztnl1\x00', 0x0, 0x2f, 0x9, 0xf, 0x434, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, 0x40, 0x700, 0x5, 0x80}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'ip6_vti0\x00', &(0x7f0000000300)={'ip6gre0\x00', 0x0, 0x4, 0x4, 0x42, 0x5, 0x8, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x0, 0x8, 0xa}}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000003c0)={@remote}, &(0x7f0000000400)=0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000004c0)={'tunl0\x00', &(0x7f0000000440)={'erspan0\x00', 0x0, 0x8020, 0x7, 0x500, 0x1, {{0xb, 0x4, 0x1, 0x1f, 0x2c, 0x65, 0x0, 0x2, 0x6625dded4c2aa125, 0x0, @private=0xa010101, @loopback, {[@lsrr={0x83, 0x7, 0xef, [@rand_addr=0x64010100]}, @generic={0x82, 0x2}, @end, @ssrr={0x89, 0xb, 0x69, [@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) r4 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r5, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x6, 0x0, 0x1, 0xb], 0x0, [0x8, 0x4, 0x2, 0x0, 0x8, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}]}}]}, 0x8c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000680)=@newtaction={0x144, 0x30, 0xb, 0x0, 0x0, {}, [{0x130, 0x1, [@m_mirred={0x12c, 0x20, 0x0, 0x0, {{0xb}, {0xe4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0xe08, 0x7, 0x1, 0x7fbb}, 0x2, r1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x6, 0x7, 0xffffff36, 0x5e}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x200, 0xd3, 0x1, 0xf4, 0xffffff7f}, 0x3, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x5, 0x2, 0xfffffffc, 0x1}, 0x3, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xffff, 0x5, 0xb, 0x3, 0x8001}, 0x2, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x1, 0x5, 0x6, 0x74}, 0x3, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xfffffc00, 0x2, 0x3, 0x2, 0x3}, 0x1, r7}}]}, {0x1e, 0x6, "d86e3a11fe82fdcf2ab48d95389317e7254908b26cb712f58336"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x144}}, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$can_raw(r10, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000000)='bbr', 0x3) socket$inet_smc(0x2b, 0x1, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0xea}, @IFLA_XFRM_LINK={0x8, 0x1, 0x4}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x58}}, 0x0) getsockopt$inet_tcp_buf(r9, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) 712.897987ms ago: executing program 3 (id=6617): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x28, 0x14, 0x20, 0x0, 0x0, {0x28}, [@INET_DIAG_REQ_BYTECODE={0x11, 0x1, "115aa5e9d0c8e22babc259d2ac"}]}, 0x28}}, 0x0) 575.671257ms ago: executing program 0 (id=6618): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xb4}}, 0x0) 575.200993ms ago: executing program 3 (id=6619): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c9, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="c0000000000101040000000000000000020000007400018014000180080001000000000008000200e00000020c00028005000100000000004300028005000100060000000c0003ef05000100000000000c0002"], 0xc0}, 0x1, 0x0, 0x0, 0x44080}, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) bind$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r3, 0x402) r4 = socket$unix(0x1, 0x5, 0x0) connect$unix(r4, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) accept(r3, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r5, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r5], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r7 = socket(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0xffffffffffffff7f}}, 0x800) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=@newtfilter={0x44, 0x28, 0xd27, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {}, {0xa, 0xb}}, [@filter_kind_options=@f_fw={{0x7}, {0x18, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'wlan1\x00'}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x810}, 0x200008c0) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000013000100000000000000000007000001", @ANYRES32=r10, @ANYBLOB="00000000000000001c001a8018000580140006800800020000000000080001"], 0x3c}}, 0x44) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xfc, 0x0, 0x1, 0x3, 0x0, 0x0, {0x1, 0x0, 0xa}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x101}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2402}, @CTA_NAT_DST={0x58, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @mcast2}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @local}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @rand_addr=0x64010102}, @CTA_NAT_V4_MINIP={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x23}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast2}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @broadcast}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @broadcast}, @CTA_NAT_V4_MINIP={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x26}}]}, @CTA_TUPLE_MASTER={0x78, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010102}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x2}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4040000}, 0x44000) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x80049367, &(0x7f0000000400)) 567.693113ms ago: executing program 1 (id=6620): syz_emit_ethernet(0x5e, &(0x7f0000000000)=ANY=[@ANYRES8=0x0], 0x0) 427.005191ms ago: executing program 0 (id=6621): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.dequeue\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r1}, 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x810, r0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYRES16=0x0], 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x10080) 352.315416ms ago: executing program 1 (id=6622): bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000580)={{0x1, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)='%pS \x00'}, 0x20) r1 = socket$inet_sctp(0x2, 0x5, 0x84) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f00000005c0)={&(0x7f0000000140)="e34bac56302953dedbda11051070d1f1fad669fb8bf2b7b2a25aeb81ac02714506b34229a63ef54dee7334b18eca8cf942749ca99a5e876148a258c7cf0a1e67f7cec472492f3b15734eb2d9ea1358b6a8ee1f9be065adcadda3f50dc89247dbeec65ce4ac95ab47de8cbc20950e7d9e63f2746de695d0f2f377d5f62239dc466b8078fa1bbf8be18a5b19eac340bfe0a2370a3756d2639728cad7463eb9562fde2997b2", 0xfffffffffffffffe, &(0x7f0000000200)="dddd6c7860bb74d15cee03992b3e28e866be673f9c335f557ca6b5b5bcf6c067adf548ecd7178d7c229e69256a36e7a45b6f0c6ebc0f046907743ea8a82027e39e88454df4734b4b91945b281dc2556fef10a19597ba815453651261c02a8e79a83420aaebc0c3e6c18471ef3e9b8aa369b6017e14190409d167c3f3068d3f88e80b948275032d31d3b9664a1d4c0f773e8dca9029ee88efe6250d1187f5dd0053a77919aaeeab54", &(0x7f0000000440)="deca55c9b4402d4bd9ab0a4225ff83633402ca1fcf56a19cb75785d76a609ad1d21c3352237e6cf19b1464bd514916eb84bcf4b14107b20d5e2386f0d93479f09d4db7f03e3a2526c57134803709bb705ba5323f53a5187fd30ebc95caf1ffea133bd9ed0b1c5bb62f2c8a12f57b362a0704d4ea7aa9b8baf60b7201eeb9345841304f9c02ede0e0e65aedbc52608e21f59caf23b49467d46c1b3548a15fb73c0d50b3d19034f2805589a6824a", 0x341, r0}, 0x38) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5800000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000300012800b00010067656e657665000020000280140007002001000000000000000000000000000008000100", @ANYRES32], 0x58}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000080), 0xc, &(0x7f0000000880)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x268}, 0x1, 0x0, 0x0, 0x8000}, 0x1) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="120000000c000000080000000300000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000008000000000000000000000b3ae000000000000000000"], 0x48) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000680)=""/153, 0x99}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x0) sendmsg$tipc(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000580)="f153a0e55baf5fec8efd22d77caf2356fa35192a7d1220975cdd1031c3c26e2c5253e78f71593ab70e5577b34777e3e183b8dceb1aef0f143f0d61ffe2efec8cd70c8ce0d7b0ff3b986b1a4ceda894dd1c18ea8a250d02438a087ba5ce971e0b7e80c07286872be97871bb552ed8a33df260cd3416b9045e695adb6365742402", 0x80}, {&(0x7f0000000200)="49ca212b4ee03b192d1048f96cc5eae838645dd5da7cc767a7fa4a8b", 0x1c}], 0x2, 0x0, 0x0, 0x84}, 0x20000000) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0xfb83a000) close(r5) r6 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r3, &(0x7f0000000200), &(0x7f00000002c0)=@udp6=r6}, 0x20) recvmmsg(r6, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x12123, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000900)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000d00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000b00)={0x198, r7, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TX_RATES={0x108, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x5c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7ff, 0x100, 0xa986, 0x5, 0x1, 0x4, 0xa, 0x7]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x2, 0x800, 0xffff, 0x441, 0x7f, 0x5, 0x7fff]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x0, 0x8}, {0x3, 0x5}, {0x4, 0x1}, {0x6}, {0x1, 0x1}, {0x7, 0x6}, {0x1, 0xa}, {0x1, 0x4}, {0x5, 0x8}, {0x1, 0x2}, {0x6, 0x4}, {0x1, 0x6}, {0x6, 0x7}, {0x3, 0x7}, {0x3, 0x9}, {0x6, 0x4}]}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x30, 0x18, 0x1, 0xc, 0x1b, 0x24, 0x0, 0x30]}]}, @NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x7, 0x2, [{0x4, 0x6}, {0x7, 0x9}, {0x4}]}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_5GHZ={0x4}, @NL80211_BAND_5GHZ={0x84, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x47, 0x2, [{0x0, 0x6}, {0x1, 0x9}, {0x0, 0x5}, {0x1, 0x3}, {0x0, 0x5}, {0x5, 0x2}, {0x6, 0x8}, {0x0, 0x9}, {0x3, 0x7}, {0x6, 0x2}, {0x0, 0xa}, {0x6, 0x3}, {0x0, 0x1}, {0x0, 0x3}, {0x0, 0x4}, {0x0, 0x8}, {0x2, 0x1}, {0x3, 0xa}, {0x5, 0x9}, {0x3, 0x4}, {0x5, 0x9}, {0x6, 0x3}, {0x3, 0x8}, {0x3, 0x8}, {0x1, 0x5}, {0x5, 0x3}, {0x1}, {0x5, 0x5}, {0x1, 0x1}, {0x7}, {0x1, 0x9}, {0x0, 0x6}, {0x3, 0x6}, {0x4}, {0x4, 0x6}, {0x6, 0x6}, {0x7, 0x2}, {0x3, 0x3}, {0x7, 0x6}, {0x1, 0x6}, {0x6, 0x3}, {0x4, 0x5}, {0x6, 0x7}, {0x4, 0x3}, {0x5, 0x3}, {0x4}, {0x2, 0x8}, {0x4, 0x8}, {0x0, 0x2}, {0x5, 0xa}, {0x2, 0xa}, {0x4, 0x8}, {0x4, 0x2}, {0x4, 0x6}, {0x1, 0x8}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0xa}, {0x7, 0x1}, {0x2, 0x3}, {0x4, 0x1}, {0x4, 0x4}, {0x2, 0x4}, {0x1, 0x5}, {0x3, 0x1}, {0x1, 0x7}, {0x1, 0x6}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x9}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0xb, 0x24, 0x6, 0x6, 0x4, 0x1b, 0x12, 0x1a, 0x1, 0x4, 0xc, 0x30, 0x12, 0xc, 0x16, 0x12, 0x24, 0x30]}]}]}, @beacon=[@NL80211_ATTR_BEACON_TAIL={0x62, 0xf, [@mesh_id={0x72, 0x6}, @random_vendor={0xdd, 0x54, "143be327be197656189b3be952841d1d959d4e93f50a64438a909bf820c982ac58e04c6f8905a3817e93223787a9009db997f7db2cff869f0ee9ad3d3e0e2375d529d8a9b226644727bf9f0623c65748d77b7059"}]}], @NL80211_ATTR_HE_OBSS_PD={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x8}]}, 0x198}, 0x1, 0x0, 0x0, 0x20}, 0x50) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a117436c379020000000000030058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000a000000224e0000", 0x58}], 0x1) 271.368031ms ago: executing program 3 (id=6623): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) (async) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x2710, 0x0, &(0x7f0000000000)) (async) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e24, 0x6bb, @ipv4={'\x00', '\xff\xff', @empty}, 0x5}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000004c0)=@gcm_256={{0x303, 0x3a}, "56db7a2700f81000", "a8ef1a3a33071799b7bbebfa6dc371290d0e3808802000", "336819df", "4008000000008700"}, 0x38) (async) writev(r0, &(0x7f0000001840)=[{&(0x7f0000000000)="944a7445b7be5b9f0228496174f1ff679b", 0x11}], 0x1) 233.946419ms ago: executing program 0 (id=6624): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f00000002c0)="a609a89c9edd34187123b5adceb3968557f4e107445a53c0815c9636d00f896d1e8cd8de77a79f1e3e2c53ddf1bb9f8ac5cb5257ff4e8b960026bc4244c4b09179a97dffdf02563e23546d3e78f944e7e2fee2a00b6313048fe354223318badb", 0x60}], 0x1) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r1) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, r4, 0x504c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={0x24, r2, 0x1, 0x70bd2d, 0xe, {}, [@GTPA_LINK={0x8, 0x1, r4}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x1f371693c3ceafd2}, 0x20000000) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_EDIT(r5, 0x0, 0x483, &(0x7f0000000040)={0x11, @dev={0xac, 0x14, 0x14, 0x27}, 0x4e23, 0x3, 'nq\x00', 0x8, 0x1b0e, 0x9}, 0x2c) r6 = socket$netlink(0x10, 0x3, 0x0) (async) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r7, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) (async) setsockopt$sock_int(r7, 0x1, 0x20, &(0x7f0000000040)=0x400006, 0x4) (async) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000140)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4e, r4}) (async) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r6, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000042000106"], 0x1c}], 0x1}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0xa, 0x4, &(0x7f0000000100)=@framed={{}, [@alu={0x7, 0x1, 0x3, 0x0, 0x0, 0x1}]}, &(0x7f00000005c0)='GPL\x00', 0xa, 0x0, 0x0, 0x41100}, 0x94) 151.266063ms ago: executing program 1 (id=6625): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x10, @rand_addr=' \x01\x00', 0x9}, 0x1c) socket$can_bcm(0x1d, 0x2, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0xffff, @loopback}, 0x4}}, 0x2e) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)=ANY=[@ANYRESHEX=r1, @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=r3, @ANYRESOCT=r1, @ANYBLOB="040000ffffffffffffffe600"/28], 0x48) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, r4, 0x215eb000) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r5, 0x0, 0x700) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCOUTQ(r6, 0x401061f4, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 0s ago: executing program 0 (id=6626): syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x84, 0x0, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x70, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x4}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5106e42d0d24ed58}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1800000042000701feffffff00000000035c000000004280"], 0x18}, 0x1, 0x0, 0x0, 0xc004}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newtaction={0x94, 0x30, 0x1, 0x0, 0x0, {}, [{0x80, 0x1, [@m_ct={0x2c, 0x19, 0x0, 0x0, {{0x7}, {0x4}, {0x4, 0x2}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x800000, 0x0, 0x20000000}, 0x2}}]}, {0xfffffffffffffe05}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x94}}, 0x0) setsockopt$sock_int(r0, 0x28, 0x2, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000000000000000000000000000711069000000000095"], &(0x7f0000000400)='syzkaller\x00'}, 0x90) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1800000015200100000000000000000002000000", @ANYRES32=0x0], 0x18}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x84, 0x0, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x70, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x4}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5106e42d0d24ed58}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1800000042000701feffffff00000000035c000000004280"], 0x18}, 0x1, 0x0, 0x0, 0xc004}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newtaction={0x94, 0x30, 0x1, 0x0, 0x0, {}, [{0x80, 0x1, [@m_ct={0x2c, 0x19, 0x0, 0x0, {{0x7}, {0x4}, {0x4, 0x2}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x800000, 0x0, 0x20000000}, 0x2}}]}, {0xfffffffffffffe05}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x94}}, 0x0) (async) setsockopt$sock_int(r0, 0x28, 0x2, 0x0, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000000000000000000000000000711069000000000095"], &(0x7f0000000400)='syzkaller\x00'}, 0x90) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1800000015200100000000000000000002000000", @ANYRES32=0x0], 0x18}}, 0x0) (async) kernel console output (not intermixed with test programs): to HW filter on device macvlan3 [ 651.695137][T24657] IPv6: NLM_F_CREATE should be specified when creating new route [ 651.734595][T24657] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4840'. [ 651.752135][T24661] openvswitch: netlink: VXLAN extension 78 out of range max 1 [ 651.785934][T24659] syzkaller1: entered promiscuous mode [ 651.797239][T24662] openvswitch: netlink: VXLAN extension 78 out of range max 1 [ 651.810791][T24659] syzkaller1: entered allmulticast mode [ 651.918068][T24667] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4843'. [ 652.294168][T24691] tipc: Enabling of bearer rejected, failed to enable media [ 652.359062][T24693] netlink: 'syz.1.4848': attribute type 23 has an invalid length. [ 652.387805][T24697] netlink: 'syz.2.4852': attribute type 16 has an invalid length. [ 652.415885][T24697] netlink: 'syz.2.4852': attribute type 30 has an invalid length. [ 652.581716][T24712] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.4857'. [ 652.594733][T24712] netlink: Unknown conntrack attr (type=13058, max=9) [ 652.697202][ T4947] Bluetooth: hci2: command 0x0406 tx timeout [ 652.704426][ T5635] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 652.706506][T24714] veth1_to_hsr: entered promiscuous mode [ 652.796493][T24720] netem: change failed [ 652.900887][ C1] vcan0: j1939_tp_rxtimer: 0xffff888079ed0000: rx timeout, send abort [ 652.987585][T24729] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4860'. [ 653.000112][T24726] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4860'. [ 653.120942][T24731] netlink: 'syz.3.4861': attribute type 4 has an invalid length. [ 653.318528][T24740] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4865'. [ 653.400980][ C1] vcan0: j1939_tp_rxtimer: 0xffff888079ed1400: rx timeout, send abort [ 653.409475][ C1] vcan0: j1939_tp_rxtimer: 0xffff888079ed0000: abort rx timeout. Force session deactivation [ 653.420981][T24747] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 653.447497][ T10] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 653.517847][T24749] syzkaller0: entered promiscuous mode [ 653.542088][T24749] syzkaller0: entered allmulticast mode [ 653.571272][T24754] netlink: 'syz.4.4869': attribute type 1 has an invalid length. [ 653.599526][T24761] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.4871'. [ 653.673058][ T30] audit: type=1800 audit(1781284889.714:19): pid=24766 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4869" name="memory.events" dev="tmpfs" ino=1210 res=0 errno=0 [ 653.770602][ T30] audit: type=1800 audit(1781284889.714:20): pid=24754 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4869" name="memory.events" dev="tmpfs" ino=1210 res=0 errno=0 [ 653.845762][ T30] audit: type=1804 audit(1781284889.714:21): pid=24766 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.4869" name="/newroot/234/memory.events" dev="tmpfs" ino=1210 res=1 errno=0 [ 653.884058][T24755] bond0: entered allmulticast mode [ 653.889942][T24755] bond_slave_0: entered allmulticast mode [ 653.909285][ C1] vcan0: j1939_tp_rxtimer: 0xffff888079ed1400: abort rx timeout. Force session deactivation [ 653.944208][T24770] syzkaller0: entered promiscuous mode [ 653.975749][T24770] syzkaller0: entered allmulticast mode [ 654.067576][T24778] netlink: 'syz.3.4875': attribute type 1 has an invalid length. [ 654.377266][ T10] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 654.434216][T24802] __nla_validate_parse: 2 callbacks suppressed [ 654.434230][T24802] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4882'. [ 654.449925][T24802] netlink: 'syz.4.4882': attribute type 5 has an invalid length. [ 654.476810][T24802] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4882'. [ 654.817724][T24805] netlink: 'syz.2.4883': attribute type 11 has an invalid length. [ 655.020193][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 655.021785][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 655.276421][T24811] x_tables: duplicate underflow at hook 1 [ 658.058368][T24816] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4886'. [ 658.154598][T24822] Cannot find add_set index 65532 as target [ 658.164198][T24816] bridge2: port 1(veth5) entered blocking state [ 658.180410][T24816] bridge2: port 1(veth5) entered disabled state [ 658.188750][T24816] veth5: entered allmulticast mode [ 658.196154][T24816] veth5: entered promiscuous mode [ 658.219739][T24826] bridge2: port 2(veth0_to_bond) entered blocking state [ 658.244581][T24826] bridge2: port 2(veth0_to_bond) entered disabled state [ 658.258168][T24826] veth0_to_bond: entered allmulticast mode [ 658.281025][T24826] veth0_to_bond: entered promiscuous mode [ 658.300000][T24826] bridge2: port 2(veth0_to_bond) entered blocking state [ 658.307175][T24826] bridge2: port 2(veth0_to_bond) entered forwarding state [ 658.443149][T24820] syzkaller0: entered promiscuous mode [ 658.449601][T24820] syzkaller0: entered allmulticast mode [ 658.539111][T24850] xt_ecn: cannot match TCP bits for non-tcp packets [ 658.620493][T24855] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4894'. [ 659.034810][T24875] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4895'. [ 659.045083][T24875] netlink: 'syz.3.4895': attribute type 1 has an invalid length. [ 659.053746][T24875] netlink: 'syz.3.4895': attribute type 1 has an invalid length. [ 659.062065][T24875] netlink: 'syz.3.4895': attribute type 2 has an invalid length. [ 659.070366][T24875] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4895'. [ 662.644030][T24884] : entered promiscuous mode [ 662.884659][T24905] syz_tun: entered allmulticast mode [ 662.897298][T24906] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4903'. [ 663.163097][T24923] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4910'. [ 663.719841][T24959] openvswitch: netlink: IPv4 tun info is not correct [ 663.913358][T24974] netlink: 'syz.0.4923': attribute type 3 has an invalid length. [ 664.004752][T24979] netlink: 'syz.2.4927': attribute type 7 has an invalid length. [ 664.043438][T24976] xt_hashlimit: size too large, truncated to 1048576 [ 664.182331][T24986] netlink: 816 bytes leftover after parsing attributes in process `syz.2.4930'. [ 664.235211][T24991] netlink: 'syz.0.4932': attribute type 5 has an invalid length. [ 664.267466][T24992] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.4931'. [ 664.363743][T24997] 8021q: VLANs not supported on xfrm0 [ 664.380609][T24996] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4935'. [ 664.387827][T25001] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4934'. [ 664.534223][T25017] "syz.3.4936" (25017) uses obsolete ecb(arc4) skcipher [ 664.553312][T25018] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4937'. [ 664.664556][T25014] 8021q: adding VLAN 0 to HW filter on device bond5 [ 664.729278][T25014] bond5 (unregistering): Released all slaves [ 664.772337][T25027] IPVS: set_ctl: invalid protocol: 92 172.30.0.2:20001 [ 664.794787][T25032] netlink: 'syz.4.4939': attribute type 2 has an invalid length. [ 664.882423][T25033] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4940'. [ 664.934019][T25039] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4942'. [ 664.952279][T25039] batadv0: entered promiscuous mode [ 664.959607][T25039] ip6gretap0: entered promiscuous mode [ 664.966088][T25039] hsr1: entered promiscuous mode [ 665.208827][T25047] netlink: 'syz.2.4944': attribute type 1 has an invalid length. [ 665.231311][T25046] netlink: 84 bytes leftover after parsing attributes in process `syz.2.4944'. [ 666.307515][ T4947] Bluetooth: hci3: command 0x0406 tx timeout [ 667.742618][T25026] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 668.195033][T25089] veth5: entered allmulticast mode [ 668.219709][T25095] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4961'. [ 668.304287][T25101] netlink: 'syz.3.4959': attribute type 4 has an invalid length. [ 668.375888][T25108] netlink: 'syz.2.4965': attribute type 3 has an invalid length. [ 668.440240][T25105] netlink: 'syz.1.4964': attribute type 32 has an invalid length. [ 668.546226][T25120] ipt_REJECT: TCP_RESET invalid for non-tcp [ 668.651801][T25126] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4968'. [ 668.672458][T25126] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4968'. [ 668.723210][T25134] netlink: 'syz.0.4970': attribute type 3 has an invalid length. [ 668.780814][T25134] netlink: 'syz.0.4970': attribute type 2 has an invalid length. [ 668.943675][T25143] netlink: 108 bytes leftover after parsing attributes in process `syz.0.4974'. [ 669.280921][T25156] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 669.610495][T25175] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4986'. [ 670.454605][T25234] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 670.521891][T25234] netlink: 'syz.1.5006': attribute type 1 has an invalid length. [ 670.563312][T25236] netlink: 'syz.1.5006': attribute type 1 has an invalid length. [ 670.639642][T25236] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 670.640920][T25234] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 670.841528][T25261] SET target dimension over the limit! [ 671.069164][T25272] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 671.384393][T25282] ip6gre1: entered allmulticast mode [ 671.441603][T25284] xt_CT: You must specify a L4 protocol and not use inversions on it [ 671.586610][T25289] tipc: Enabling of bearer rejected, failed to enable media [ 671.905515][T25312] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5032'. [ 672.102470][T25325] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 672.366445][T25333] netlink: 14560 bytes leftover after parsing attributes in process `syz.0.5037'. [ 672.469343][T25335] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5038'. [ 672.480853][T25335] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5038'. [ 672.543549][T25335] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5038'. [ 672.753119][T25342] netlink: 'syz.3.5040': attribute type 22 has an invalid length. [ 672.949187][T25349] netlink: 'syz.4.5041': attribute type 1 has an invalid length. [ 675.030588][T25320] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 675.108171][T25349] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 675.385230][T25365] netlink: 108 bytes leftover after parsing attributes in process `syz.0.5046'. [ 675.421306][T25365] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5046'. [ 675.515393][T25373] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 675.560671][T25369] team0: Mode changed to "activebackup" [ 675.829400][T25383] netlink: 'syz.4.5053': attribute type 5 has an invalid length. [ 675.912267][T10138] bridge2: port 2(veth0_to_bond) entered disabled state [ 675.939487][T25400] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 676.162161][T25413] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5065'. [ 676.209611][T25417] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5066'. [ 676.361514][T25427] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5071'. [ 676.371839][T25427] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5071'. [ 676.380264][T25432] netlink: 'syz.1.5072': attribute type 8 has an invalid length. [ 676.381995][T25427] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5071'. [ 676.398531][T25427] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5071'. [ 676.408100][T25427] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5071'. [ 676.460290][T25424] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5070'. [ 677.417147][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 677.457391][T25482] bridge_slave_0: default FDB implementation only supports local addresses [ 677.711863][T25497] syzkaller1: entered promiscuous mode [ 677.718266][T25497] syzkaller1: entered allmulticast mode [ 677.738569][T25497] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3952. macoff=96 [ 677.865679][T25506] x_tables: duplicate underflow at hook 2 [ 677.874702][ T5750] IPVS: starting estimator thread 0... [ 677.882550][T25509] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 677.978267][T25511] IPVS: using max 33 ests per chain, 79200 per kthread [ 678.319699][T25533] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 679.624153][T25601] bridge0: port 1(veth1_to_bridge) entered disabled state [ 679.652400][T25607] vlan2: entered promiscuous mode [ 679.672225][T25607] geneve1: entered promiscuous mode [ 679.680037][T25607] vlan2: entered allmulticast mode [ 679.685395][T25607] geneve1: entered allmulticast mode [ 679.951624][T25610] mac80211_hwsim hwsim36 syzkaller0: entered promiscuous mode [ 679.960025][T25610] mac80211_hwsim hwsim36 syzkaller0: entered allmulticast mode [ 679.989583][T25616] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 680.313263][T25639] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 680.545742][T25657] __nla_validate_parse: 18 callbacks suppressed [ 680.545760][T25657] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5138'. [ 680.617417][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 680.649355][T25661] bridge: RTM_NEWNEIGH with invalid state 0x20 [ 680.809570][T25669] syzkaller1: entered promiscuous mode [ 680.817751][T25670] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 680.825640][T25669] syzkaller1: entered allmulticast mode [ 680.881349][T25677] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5141'. [ 680.896073][T25675] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5143'. [ 681.171260][T25692] netlink: 207952 bytes leftover after parsing attributes in process `syz.1.5146'. [ 681.285650][T25696] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5148'. [ 681.382690][T25696] xt_hashlimit: size too large, truncated to 1048576 [ 682.053931][T25733] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5159'. [ 682.364398][T25751] netlink: 'syz.1.5167': attribute type 12 has an invalid length. [ 682.561992][T25769] netlink: 'syz.1.5172': attribute type 1 has an invalid length. [ 682.580134][T25769] netlink: 'syz.1.5172': attribute type 4 has an invalid length. [ 682.589316][T25769] netlink: 9422 bytes leftover after parsing attributes in process `syz.1.5172'. [ 682.664254][T25774] netlink: 'syz.3.5175': attribute type 8 has an invalid length. [ 682.687861][T25778] netlink: 11 bytes leftover after parsing attributes in process `syz.4.5173'. [ 682.769619][T25784] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 683.058802][T25801] syzkaller0: entered promiscuous mode [ 683.074176][T25801] syzkaller0: entered allmulticast mode [ 683.100939][T25801] tipc: Started in network mode [ 683.110618][T25801] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 683.121541][T25801] tipc: Enabled bearer , priority 10 [ 683.173963][T25807] netlink: 'syz.1.5186': attribute type 1 has an invalid length. [ 683.184183][T25807] netlink: 'syz.1.5186': attribute type 4 has an invalid length. [ 683.192232][T25807] netlink: 9422 bytes leftover after parsing attributes in process `syz.1.5186'. [ 683.218990][T25807] netlink: 'syz.1.5186': attribute type 3 has an invalid length. [ 683.227377][T25807] netlink: 'syz.1.5186': attribute type 1 has an invalid length. [ 683.235240][T25807] netlink: 204 bytes leftover after parsing attributes in process `syz.1.5186'. [ 684.260840][T10545] tipc: Node number set to 10136234 [ 685.112416][T25908] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 685.149340][T25909] netlink: 'syz.3.5214': attribute type 2 has an invalid length. [ 685.181424][T25909] netlink: 'syz.3.5214': attribute type 1 has an invalid length. [ 685.249564][T25918] x_tables: duplicate entry at hook 2 [ 685.296719][T25919] : entered promiscuous mode [ 685.310693][T25918] bridge_slave_0: default FDB implementation only supports local addresses [ 685.629093][T25940] openvswitch: netlink: IP tunnel dst address not specified [ 685.742294][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.832218][T25956] __nla_validate_parse: 10 callbacks suppressed [ 685.832237][T25956] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5231'. [ 685.875852][T25960] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5232'. [ 686.571328][T26010] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 686.871277][T26021] netlink: 64985 bytes leftover after parsing attributes in process `syz.3.5248'. [ 686.884443][T26021] netlink: 64985 bytes leftover after parsing attributes in process `syz.3.5248'. [ 687.063151][T26027] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5247'. [ 687.098895][T26022] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5247'. [ 687.237760][T26036] IPv6: Can't replace route, no match found [ 687.258432][T26036] IPv6: Can't replace route, no match found [ 687.375551][T26049] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5255'. [ 687.532328][T26052] netlink: 188 bytes leftover after parsing attributes in process `syz.1.5256'. [ 687.596632][T26062] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5259'. [ 687.689682][T26067] netlink: 15 bytes leftover after parsing attributes in process `syz.3.5259'. [ 687.816489][T26073] validate_nla: 1 callbacks suppressed [ 687.816506][T26073] netlink: 'syz.4.5261': attribute type 1 has an invalid length. [ 687.830473][T26077] xt_hashlimit: size too large, truncated to 1048576 [ 687.900223][T26073] 8021q: adding VLAN 0 to HW filter on device bond7 [ 688.323183][T26099] x_tables: duplicate underflow at hook 2 [ 688.417337][T26117] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 688.438239][T26119] netlink: 'syz.4.5272': attribute type 5 has an invalid length. [ 688.664167][T26133] netlink: 'syz.4.5276': attribute type 21 has an invalid length. [ 688.690966][T26133] netlink: 'syz.4.5276': attribute type 6 has an invalid length. [ 688.748703][T26141] netlink: 'syz.4.5276': attribute type 21 has an invalid length. [ 688.775287][T26141] netlink: 'syz.4.5276': attribute type 6 has an invalid length. [ 688.876475][T26145] netlink: 'syz.2.5280': attribute type 1 has an invalid length. [ 689.518128][T26180] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 689.525409][T26180] IPv6: NLM_F_CREATE should be set when creating new route [ 689.532720][T26180] IPv6: NLM_F_CREATE should be set when creating new route [ 689.632656][T26149] syzkaller0: entered promiscuous mode [ 689.648274][T26149] syzkaller0: entered allmulticast mode [ 690.217139][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 690.874234][T10138] bridge_slave_1: left allmulticast mode [ 690.880105][T10138] bridge_slave_1: left promiscuous mode [ 690.888705][T10138] bridge0: port 2(bridge_slave_1) entered disabled state [ 690.914949][T10138] bond1: left allmulticast mode [ 690.920347][T10138] vti0: left allmulticast mode [ 691.083364][T10138] tipc: Disabling bearer [ 691.094996][T10138] bond1 (unregistering): (slave vti0): Releasing backup interface [ 691.516469][T10138] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 691.525535][T10138] bond_slave_0: left allmulticast mode [ 691.534291][T10138] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 691.543485][T10138] bond_slave_1: left allmulticast mode [ 691.550732][T10138] bond0 (unregistering): Released all slaves [ 691.561328][T10138] bond1 (unregistering): Released all slaves [ 691.576370][T10138] bond2 (unregistering): Released all slaves [ 691.595831][T10138] bond3 (unregistering): Released all slaves [ 691.619362][T10138] bond4 (unregistering): (slave veth5): Releasing active interface [ 691.628774][T10138] bond4 (unregistering): Released all slaves [ 691.644586][T10138] bond5 (unregistering): Released all slaves [ 691.667603][T10138] bond6 (unregistering): Released all slaves [ 691.684593][T10138] bond7 (unregistering): Released all slaves [ 691.698422][T10138] bond8 (unregistering): Released all slaves [ 691.715461][T10138] bond9 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 691.725793][T10138] bond9 (unregistering): Released all slaves [ 691.753391][T10138] bond10 (unregistering): Released all slaves [ 691.768144][T10138] bond11 (unregistering): Released all slaves [ 691.781942][T10138] bond12 (unregistering): Released all slaves [ 691.795968][T10138] bond13 (unregistering): Released all slaves [ 691.810972][T10138] bond14 (unregistering): (slave veth9): Releasing active interface [ 691.824343][T10138] bond14 (unregistering): Released all slaves [ 691.860898][T10138] bond15 (unregistering): Released all slaves [ 691.875197][T10138] bond16 (unregistering): Released all slaves [ 691.888855][T10138] bond17 (unregistering): Released all slaves [ 692.116826][T10138] : left promiscuous mode [ 692.225475][T10138] tipc: Left network mode [ 692.580267][T26200] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 692.853492][T26237] netlink: 'syz.0.5304': attribute type 1 has an invalid length. [ 692.889670][T26239] netlink: 'syz.3.5302': attribute type 13 has an invalid length. [ 692.918143][T26238] __nla_validate_parse: 9 callbacks suppressed [ 692.918160][T26238] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5303'. [ 692.920424][T26239] veth1_macvtap: left promiscuous mode [ 692.969455][T26239] macsec0: entered allmulticast mode [ 693.064568][T26246] netlink: 'syz.0.5307': attribute type 8 has an invalid length. [ 693.268073][T26257] pimreg3: entered allmulticast mode [ 693.511345][T26253] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5310'. [ 693.565087][T26253] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5310'. [ 693.655335][T26253] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5310'. [ 693.723816][T10138] hsr_slave_0: left promiscuous mode [ 693.765817][T10138] hsr_slave_1: left promiscuous mode [ 693.793521][T26293] netlink: 'syz.2.5319': attribute type 1 has an invalid length. [ 693.802100][T26293] netlink: 16179 bytes leftover after parsing attributes in process `syz.2.5319'. [ 693.859673][T10138] pim6reg527 (unregistering): left allmulticast mode [ 694.161639][T10138] team0 (unregistering): Port device team_slave_1 removed [ 694.183831][T10138] team0 (unregistering): Port device team_slave_0 removed [ 694.262305][T10138] team0 (unregistering): Port device dummy0 removed [ 694.898316][T26338] IPVS: set_ctl: invalid protocol: 41 10.1.1.1:20000 [ 695.210291][T26357] netlink: 'syz.2.5336': attribute type 11 has an invalid length. [ 695.247748][T26357] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5336'. [ 695.589824][T26365] netlink: 'syz.0.5339': attribute type 1 has an invalid length. [ 695.627610][T26365] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 695.692208][T26369] netlink: 'syz.2.5340': attribute type 62 has an invalid length. [ 695.786058][T10138] IPVS: stop unused estimator thread 0... [ 695.868640][T26375] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5342'. [ 697.271564][T26377] tunl0: entered promiscuous mode [ 697.279910][T26377] netlink: 'syz.0.5343': attribute type 3 has an invalid length. [ 697.288141][T26377] netlink: 9 bytes leftover after parsing attributes in process `syz.0.5343'. [ 697.299661][T26377] xt_ecn: cannot match TCP bits for non-tcp packets [ 697.308703][T26377] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5343'. [ 697.518965][T26380] syzkaller1: entered promiscuous mode [ 697.524525][T26380] syzkaller1: entered allmulticast mode [ 697.752978][T26383] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5346'. [ 697.824520][T26383] bond5 (unregistering): Released all slaves [ 697.848807][T26392] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 697.920055][T26389] netlink: 'syz.3.5349': attribute type 1 has an invalid length. [ 697.961202][T26395] __nla_validate_parse: 2 callbacks suppressed [ 697.961218][T26395] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5350'. [ 697.991708][T26399] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5347'. [ 698.061195][T26393] bridge0: port 2(bridge_slave_1) entered disabled state [ 698.068687][T26393] bridge0: port 1(bridge_slave_0) entered disabled state [ 698.179484][T26409] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5354'. [ 698.200717][T26409] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5354'. [ 698.252991][T26411] pim6reg: entered allmulticast mode [ 698.285228][T26417] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 698.331197][T26419] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5357'. [ 698.380195][T26419] netlink: 'syz.2.5357': attribute type 10 has an invalid length. [ 698.403839][T26419] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 698.430508][T26426] tipc: Enabled bearer , priority 0 [ 698.448043][T26426] syzkaller0: entered promiscuous mode [ 698.456701][T26426] syzkaller0: entered allmulticast mode [ 698.482286][T26426] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 698.543115][T26426] tipc: Resetting bearer [ 698.601014][T26426] tipc: Disabling bearer [ 698.729682][T26439] netem: change failed [ 698.744959][T26439] netlink: 92 bytes leftover after parsing attributes in process `syz.4.5362'. [ 698.755475][T26438] netlink: 92 bytes leftover after parsing attributes in process `syz.4.5362'. [ 698.903429][T26448] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5364'. [ 698.924316][T26449] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 698.945196][T26448] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5364'. [ 699.261177][T26465] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5371'. [ 699.414050][T26478] netlink: 'syz.2.5373': attribute type 1 has an invalid length. [ 699.737478][T26498] sctp: [Deprecated]: syz.2.5381 (pid 26498) Use of int in max_burst socket option deprecated. [ 699.737478][T26498] Use struct sctp_assoc_value instead [ 699.798135][T26497] sctp: [Deprecated]: syz.2.5381 (pid 26497) Use of int in max_burst socket option deprecated. [ 699.798135][T26497] Use struct sctp_assoc_value instead [ 700.142522][T26510] openvswitch: netlink: Key type 6151 is out of range max 32 [ 700.233737][T26502] ksmbd: Unknown IPC event: 0, ignore. [ 700.254538][T26502] ksmbd: Unknown IPC event: 0, ignore. [ 700.274217][T26502] ksmbd: Unknown IPC event: 0, ignore. [ 700.290953][T26502] ksmbd: Unknown IPC event: 0, ignore. [ 700.303774][T26502] ksmbd: Unknown IPC event: 0, ignore. [ 700.316870][T26502] ksmbd: Unknown IPC event: 0, ignore. [ 700.329563][T26502] ksmbd: Unknown IPC event: 0, ignore. [ 700.342296][T26502] ksmbd: Unknown IPC event: 0, ignore. [ 700.354952][T26502] ksmbd: Unknown IPC event: 0, ignore. [ 700.367288][T26502] ksmbd: Unknown IPC event: 0, ignore. [ 700.381744][T26502] ksmbd: Unknown IPC event: 0, ignore. [ 700.394230][T26502] ksmbd: Unknown IPC event: 0, ignore. [ 700.405988][T26502] ksmbd: Unknown IPC event: 0, ignore. [ 700.426657][T26502] ksmbd: Unknown IPC event: 0, ignore. [ 700.451271][T26502] ksmbd: Unknown IPC event: 0, ignore. [ 700.482190][T26502] ksmbd: Unknown IPC event: 0, ignore. [ 700.512586][T26502] ksmbd: Unknown IPC event: 0, ignore. [ 700.523288][T26502] ksmbd: Unknown IPC event: 0, ignore. [ 700.530902][T26502] ksmbd: Unknown IPC event: 0, ignore. [ 700.542817][T26502] ksmbd: Unknown IPC event: 0, ignore. [ 700.578980][T26502] ksmbd: Unknown IPC event: 0, ignore. [ 700.591988][T26520] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 700.610814][T26502] ksmbd: Unknown IPC event: 0, ignore. [ 700.617594][T26502] ksmbd: Unknown IPC event: 0, ignore. [ 700.624962][T26520] netlink: 'syz.3.5386': attribute type 1 has an invalid length. [ 700.643243][T26502] ksmbd: Unknown IPC event: 0, ignore. [ 700.653357][T26520] netlink: 'syz.3.5386': attribute type 3 has an invalid length. [ 700.667149][T26502] ksmbd: Unknown IPC event: 0, ignore. [ 700.674271][T26502] ksmbd: Unknown IPC event: 0, ignore. [ 700.690301][T26502] ksmbd: Unknown IPC event: 0, ignore. [ 700.811341][T26526] netlink: 'syz.3.5389': attribute type 83 has an invalid length. [ 700.929519][T26534] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 701.791270][T26579] sctp: [Deprecated]: syz.3.5405 (pid 26579) Use of struct sctp_assoc_value in delayed_ack socket option. [ 701.791270][T26579] Use struct sctp_sack_info instead [ 702.554037][T26617] netlink: 'syz.2.5413': attribute type 21 has an invalid length. [ 702.585322][T26617] IPv6: NLM_F_CREATE should be specified when creating new route [ 702.647144][T26617] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 702.654426][T26617] IPv6: NLM_F_CREATE should be set when creating new route [ 702.661718][T26617] IPv6: NLM_F_CREATE should be set when creating new route [ 702.668979][T26617] IPv6: NLM_F_CREATE should be set when creating new route [ 702.971886][T26639] __nla_validate_parse: 44 callbacks suppressed [ 702.971905][T26639] netlink: 108 bytes leftover after parsing attributes in process `syz.2.5421'. [ 703.059345][T26639] netlink: 108 bytes leftover after parsing attributes in process `syz.2.5421'. [ 703.089996][T26639] netlink: 84 bytes leftover after parsing attributes in process `syz.2.5421'. [ 703.130958][T26639] netlink: 108 bytes leftover after parsing attributes in process `syz.2.5421'. [ 703.165969][T26639] netlink: 108 bytes leftover after parsing attributes in process `syz.2.5421'. [ 703.223495][T26639] netlink: 84 bytes leftover after parsing attributes in process `syz.2.5421'. [ 703.278030][T26639] netlink: 108 bytes leftover after parsing attributes in process `syz.2.5421'. [ 703.304454][T26639] netlink: 108 bytes leftover after parsing attributes in process `syz.2.5421'. [ 703.330834][T26639] netlink: 84 bytes leftover after parsing attributes in process `syz.2.5421'. [ 703.359626][T26639] netlink: 108 bytes leftover after parsing attributes in process `syz.2.5421'. [ 703.420183][T10153] bond0: (slave dummy0): interface is now down [ 703.600847][T26666] syzkaller0: entered promiscuous mode [ 703.615898][T26666] syzkaller0: entered allmulticast mode [ 704.292040][T26701] netlink: 'syz.0.5438': attribute type 21 has an invalid length. [ 704.334632][T26701] netlink: 'syz.0.5438': attribute type 21 has an invalid length. [ 704.470222][T26709] bond0: entered allmulticast mode [ 704.500610][T26709] bond_slave_0: entered allmulticast mode [ 704.506483][T26709] bond_slave_1: entered allmulticast mode [ 704.513638][T26709] dummy0: entered allmulticast mode [ 704.520272][T26708] openvswitch: netlink: IP tunnel dst address not specified [ 704.541977][T26717] lo: entered allmulticast mode [ 704.575636][T26717] tunl0: left promiscuous mode [ 704.594070][T26717] tunl0: entered allmulticast mode [ 704.602679][T26717] gre0: entered allmulticast mode [ 704.712371][T26717] bridge0: port 1(gretap0) entered disabled state [ 704.737911][T26717] erspan0: entered allmulticast mode [ 704.782402][T26717] ip_vti0: entered allmulticast mode [ 704.813777][T26717] ip6_vti0: entered allmulticast mode [ 704.825962][T26741] netlink: 'syz.2.5447': attribute type 1 has an invalid length. [ 704.851123][T26717] sit0: entered allmulticast mode [ 704.902855][T26717] ip6tnl0: entered allmulticast mode [ 704.942195][T26717] ip6gre0: entered allmulticast mode [ 704.968737][T26717] syz_tun: entered allmulticast mode [ 705.086260][T26741] 8021q: adding VLAN 0 to HW filter on device bond5 [ 705.122023][T26745] bond5: option ad_user_port_key: mode dependency failed, not supported in mode balance-alb(6) [ 705.298485][T26769] netlink: 'syz.4.5454': attribute type 8 has an invalid length. [ 705.356436][T26777] netlink: 'syz.0.5458': attribute type 4 has an invalid length. [ 705.506036][T26784] netlink: 'syz.3.5457': attribute type 8 has an invalid length. [ 705.536369][T26784] sch_fq: defrate 0 ignored. [ 705.661928][T26801] xt_hashlimit: size too large, truncated to 1048576 [ 705.715101][T26803] openvswitch: netlink: IPv4 tun info is not correct [ 705.827912][T26805] bridge_slave_0 (unregistering): left promiscuous mode [ 705.856941][T26805] bridge0: port 1(bridge_slave_0) entered disabled state [ 705.980704][T10139] bond0: (slave dummy0): interface is now down [ 705.997581][T10139] bond0: now running without any active interface! [ 706.289726][T26823] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 706.323538][T26823] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 706.348437][T26823] gretap2: entered promiscuous mode [ 706.366652][T26823] gretap2: entered allmulticast mode [ 706.741681][T26850] syzkaller1: entered promiscuous mode [ 706.760932][T26850] syzkaller1: entered allmulticast mode [ 707.208898][T26879] bond5: option xmit_hash_policy: invalid value (64) [ 707.218993][T26879] bond5 (unregistering): Released all slaves [ 707.250101][T26885] netlink: 'syz.1.5483': attribute type 4 has an invalid length. [ 707.426548][T26907] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 707.626653][T26917] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 708.017505][T26945] gre1: entered promiscuous mode [ 708.033192][T26943] __nla_validate_parse: 212 callbacks suppressed [ 708.033208][T26943] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5501'. [ 708.311911][T26960] netlink: 708 bytes leftover after parsing attributes in process `syz.3.5506'. [ 708.350181][T26966] netlink: 708 bytes leftover after parsing attributes in process `syz.3.5506'. [ 708.382946][T26972] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5508'. [ 708.401483][T26972] netlink: 'syz.1.5508': attribute type 30 has an invalid length. [ 708.489143][T10139] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 708.500023][T26972] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5508'. [ 708.507367][T10139] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 708.518371][T26972] netlink: 'syz.1.5508': attribute type 30 has an invalid length. [ 708.542865][T10139] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 708.570077][T10139] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 708.997691][T27000] xt_hashlimit: size too large, truncated to 1048576 [ 709.758569][T27029] netlink: 'syz.3.5524': attribute type 1 has an invalid length. [ 709.846672][T27026] syzkaller1: entered promiscuous mode [ 709.869984][T27026] syzkaller1: entered allmulticast mode [ 710.021488][T27040] netlink: 11562 bytes leftover after parsing attributes in process `syz.2.5528'. [ 710.049448][T27036] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5527'. [ 710.058980][T27037] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5527'. [ 710.275853][T27055] netlink: 520 bytes leftover after parsing attributes in process `syz.1.5533'. [ 710.359656][T27061] syzkaller0: entered promiscuous mode [ 710.376003][T27061] syzkaller0: entered allmulticast mode [ 710.452590][T27069] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 710.503484][T27069] syzkaller0: entered promiscuous mode [ 710.522171][T27069] syzkaller0: entered allmulticast mode [ 710.761966][T27082] FAULT_INJECTION: forcing a failure. [ 710.761966][T27082] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 710.809867][T27082] CPU: 0 UID: 0 PID: 27082 Comm: syz.0.5539 Not tainted syzkaller #0 PREEMPT(full) [ 710.809891][T27082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 710.809901][T27082] Call Trace: [ 710.809908][T27082] [ 710.809916][T27082] dump_stack_lvl+0xe8/0x150 [ 710.809943][T27082] should_fail_ex+0x412/0x560 [ 710.809965][T27082] _copy_from_user+0x2d/0xb0 [ 710.810087][T27082] __sys_bind+0x1c6/0x410 [ 710.810149][T27082] ? __pfx___sys_bind+0x10/0x10 [ 710.810181][T27082] ? __pfx_ksys_write+0x10/0x10 [ 710.810206][T27082] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 710.810224][T27082] __x64_sys_bind+0x7a/0x90 [ 710.810244][T27082] do_syscall_64+0x174/0x580 [ 710.810261][T27082] ? trace_irq_disable+0x3b/0x140 [ 710.810283][T27082] ? clear_bhb_loop+0x40/0x90 [ 710.810302][T27082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 710.810324][T27082] RIP: 0033:0x7ff4fb19ce59 [ 710.810340][T27082] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 710.810353][T27082] RSP: 002b:00007ff4fc0e1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 710.810370][T27082] RAX: ffffffffffffffda RBX: 00007ff4fb415fa0 RCX: 00007ff4fb19ce59 [ 710.810380][T27082] RDX: 0000000000000060 RSI: 0000200000000080 RDI: 0000000000000006 [ 710.810390][T27082] RBP: 00007ff4fc0e1090 R08: 0000000000000000 R09: 0000000000000000 [ 710.810399][T27082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 710.810408][T27082] R13: 00007ff4fb416038 R14: 00007ff4fb415fa0 R15: 00007fff194b06c8 [ 710.810435][T27082] [ 711.028833][T27087] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5538'. [ 712.332531][T27164] xt_CT: No such helper "snmp_trap" [ 712.463653][T27169] netlink: 'syz.0.5572': attribute type 1 has an invalid length. [ 712.476863][T27169] netlink: 'syz.0.5572': attribute type 1 has an invalid length. [ 713.074154][T27194] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 713.099284][T27200] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 713.183790][T27207] FAULT_INJECTION: forcing a failure. [ 713.183790][T27207] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 713.213994][T27207] CPU: 1 UID: 0 PID: 27207 Comm: syz.3.5585 Not tainted syzkaller #0 PREEMPT(full) [ 713.214018][T27207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 713.214028][T27207] Call Trace: [ 713.214035][T27207] [ 713.214042][T27207] dump_stack_lvl+0xe8/0x150 [ 713.214068][T27207] should_fail_ex+0x412/0x560 [ 713.214092][T27207] _copy_to_user+0x31/0xb0 [ 713.214115][T27207] simple_read_from_buffer+0xe1/0x170 [ 713.214140][T27207] proc_fail_nth_read+0x1bb/0x230 [ 713.214219][T27207] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 713.214242][T27207] ? rw_verify_area+0x2a6/0x4d0 [ 713.214264][T27207] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 713.214292][T27207] vfs_read+0x20c/0xa70 [ 713.214318][T27207] ? __pfx___mutex_lock+0x10/0x10 [ 713.214399][T27207] ? __pfx_vfs_read+0x10/0x10 [ 713.214421][T27207] ? __fget_files+0x2a/0x420 [ 713.214444][T27207] ? __fget_files+0x3a0/0x420 [ 713.214461][T27207] ? __fget_files+0x2a/0x420 [ 713.214488][T27207] ksys_read+0x150/0x270 [ 713.214512][T27207] ? __pfx_ksys_read+0x10/0x10 [ 713.214542][T27207] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 713.214560][T27207] do_syscall_64+0x174/0x580 [ 713.214577][T27207] ? trace_irq_disable+0x3b/0x140 [ 713.214599][T27207] ? clear_bhb_loop+0x40/0x90 [ 713.214619][T27207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 713.214635][T27207] RIP: 0033:0x7fb5d015d68e [ 713.214652][T27207] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 713.214665][T27207] RSP: 002b:00007fb5d0ff6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 713.214683][T27207] RAX: ffffffffffffffda RBX: 00007fb5d0ff76c0 RCX: 00007fb5d015d68e [ 713.214694][T27207] RDX: 000000000000000f RSI: 00007fb5d0ff70a0 RDI: 0000000000000003 [ 713.214704][T27207] RBP: 00007fb5d0ff7090 R08: 0000000000000000 R09: 0000000000000000 [ 713.214713][T27207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 713.214723][T27207] R13: 00007fb5d0416038 R14: 00007fb5d0415fa0 R15: 00007fff7613bc68 [ 713.214751][T27207] [ 713.477187][T27200] syzkaller0: entered promiscuous mode [ 713.490832][T27200] syzkaller0: entered allmulticast mode [ 713.514545][T27201] __nla_validate_parse: 10 callbacks suppressed [ 713.514565][T27201] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5582'. [ 713.834952][T27231] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5589'. [ 713.859189][T27232] netlink: 'syz.0.5591': attribute type 30 has an invalid length. [ 713.929259][T27238] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5594'. [ 713.939760][T27238] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5594'. [ 714.041180][T27249] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5594'. [ 714.763778][T27285] batadv_slave_1: entered promiscuous mode [ 715.100223][T27338] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 715.112221][T27338] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 715.121095][T27338] gretap2: entered promiscuous mode [ 715.126431][T27338] gretap2: entered allmulticast mode [ 715.133652][T27341] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5610'. [ 715.145408][T27341] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 715.165128][T27341] netlink: 'syz.3.5610': attribute type 10 has an invalid length. [ 715.191574][T27341] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5610'. [ 715.260159][T27341] team0: Port device geneve1 added [ 715.484565][T27352] netlink: 'syz.2.5615': attribute type 32 has an invalid length. [ 715.486128][T27357] Unsupported ieee802154 address type: 0 [ 715.750895][T27370] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5621'. [ 716.327541][T27390] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.5625'. [ 719.414878][T27401] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5631'. [ 719.431851][T27403] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 719.593546][T27413] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5636'. [ 719.622404][T27418] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5635'. [ 719.631698][T27418] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5635'. [ 719.643700][T27418] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5635'. [ 719.696338][T27425] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5637'. [ 719.711204][T27425] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5637'. [ 719.722889][T27425] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5637'. [ 719.748788][T27425] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5637'. [ 719.750566][T27428] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5637'. [ 720.152054][T27456] netlink: 'syz.2.5649': attribute type 21 has an invalid length. [ 720.194280][T27461] SET target dimension over the limit! [ 720.384234][T27477] netlink: 'syz.3.5655': attribute type 18 has an invalid length. [ 720.394310][T27474] netlink: 'syz.2.5652': attribute type 61 has an invalid length. [ 720.466730][T27477] netlink: 'syz.3.5655': attribute type 18 has an invalid length. [ 720.489223][T24608] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 720.506743][T24608] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 720.528639][T24608] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 720.555694][T24608] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 721.024842][T27462] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 721.552149][T27528] netlink: 'syz.4.5669': attribute type 1 has an invalid length. [ 721.580085][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 721.656647][T27528] 8021q: adding VLAN 0 to HW filter on device bond8 [ 721.775101][T27541] vlan2: entered promiscuous mode [ 721.801780][T27541] hsr0: entered promiscuous mode [ 721.812075][T27541] vlan2: entered allmulticast mode [ 721.830141][T27541] hsr0: entered allmulticast mode [ 721.850294][T27541] hsr_slave_0: entered allmulticast mode [ 721.872928][T27541] hsr_slave_1: entered allmulticast mode [ 723.389293][T27601] netlink: 'syz.2.5689': attribute type 7 has an invalid length. [ 723.921520][T27613] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 725.039128][T27560] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 725.240236][T27615] __nla_validate_parse: 34 callbacks suppressed [ 725.240255][T27615] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5694'. [ 725.263453][T27615] netlink: 'syz.4.5694': attribute type 2 has an invalid length. [ 725.294409][T27623] netlink: 'syz.3.5697': attribute type 5 has an invalid length. [ 725.303234][T27623] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5697'. [ 725.508982][T27634] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5699'. [ 725.893333][T27657] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5709'. [ 725.940897][T27657] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 725.988256][T27657] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 726.001124][T27661] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5711'. [ 726.030157][T27657] bond0 (unregistering): Released all slaves [ 726.194227][T27670] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5713'. [ 726.208895][T27670] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5713'. [ 726.391577][T27688] netlink: 'syz.0.5720': attribute type 7 has an invalid length. [ 726.564979][T27686] IPVS: set_ctl: invalid protocol: 24209 224.0.0.2:20000 [ 726.590787][T27691] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5722'. [ 726.809165][T27704] netlink: 'syz.4.5723': attribute type 1 has an invalid length. [ 726.873095][T27704] bond9: (slave bridge3): making interface the new active one [ 726.883898][T27704] bond9: (slave bridge3): Enslaving as an active interface with an up link [ 727.353948][T27732] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5732'. [ 727.655668][T27742] syzkaller0: entered promiscuous mode [ 727.675615][T27742] syzkaller0: entered allmulticast mode [ 727.683227][T27749] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5738'. [ 727.685414][T27744] IPVS: Unknown mcast interface: ry.events [ 727.738765][T27743] IPVS: Unknown mcast interface: ry.events [ 727.812442][T27749] bond8: option xmit_hash_policy: invalid value (64) [ 727.822708][T27749] bond8 (unregistering): Released all slaves [ 730.780198][T27761] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 730.781520][T27768] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 730.810351][T27780] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap0 [ 731.003433][T27788] netlink: zone id is out of range [ 731.015818][T27788] netlink: zone id is out of range [ 731.022382][T27788] netlink: zone id is out of range [ 731.029457][T27788] netlink: zone id is out of range [ 731.034618][T27788] netlink: zone id is out of range [ 731.040423][T27788] netlink: zone id is out of range [ 731.045647][T27788] netlink: zone id is out of range [ 731.051482][T27788] netlink: zone id is out of range [ 731.056648][T27788] netlink: zone id is out of range [ 731.067769][T27788] netlink: zone id is out of range [ 731.079440][T27795] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 731.120763][T27793] syzkaller0: entered promiscuous mode [ 731.138106][T27793] syzkaller0: entered allmulticast mode [ 731.195811][T27801] __nla_validate_parse: 1 callbacks suppressed [ 731.195827][T27801] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5753'. [ 731.278527][T27804] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5755'. [ 731.288969][T27808] netlink: 184 bytes leftover after parsing attributes in process `syz.4.5754'. [ 731.310438][T27804] bond0: (slave dummy0): Releasing backup interface [ 731.332867][T27804] dummy0 (unregistering): left allmulticast mode [ 731.568523][T27804] netlink: 'syz.2.5755': attribute type 8 has an invalid length. [ 731.674767][T27839] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5763'. [ 731.699017][T27818] bond8: invalid ARP target 0.0.0.0 specified for addition [ 731.721119][T27818] bond8: option arp_ip_target: invalid value (0) [ 731.751190][T27818] bond8 (unregistering): Released all slaves [ 731.865355][T27845] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5760'. [ 731.918029][T27810] nbd0: detected capacity change from 0 to 63 [ 731.962926][ T4947] block nbd0: Receive control failed (result -104) [ 731.972112][ T5635] block nbd0: Receive control failed (result -32) [ 732.117962][T27854] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.5766'. [ 732.171243][T27858] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5768'. [ 732.336776][T27873] tipc: Enabling not permitted [ 732.346507][T27873] tipc: Enabling of bearer rejected, failed to enable media [ 732.416787][T27883] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.5775'. [ 732.441767][T27882] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5770'. [ 732.464203][T27882] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5770'. [ 732.479537][T27887] netlink: 'syz.3.5773': attribute type 10 has an invalid length. [ 732.516133][T27886] netdevsim netdevsim2: Direct firmware load for . failed with error -2 [ 732.538689][T27887] tipc: Enabled bearer , priority 0 [ 732.546354][T27887] syzkaller0: entered promiscuous mode [ 732.553359][T27887] syzkaller0: entered allmulticast mode [ 732.573647][T27886] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 733.181643][T27877] tipc: Resetting bearer [ 733.244678][T27877] tipc: Disabling bearer [ 733.669254][T27931] netlink: 'syz.2.5790': attribute type 10 has an invalid length. [ 733.697234][T27931] syz_tun: entered promiscuous mode [ 733.707198][T27931] syz_tun: left allmulticast mode [ 733.723108][T27931] syz_tun: entered allmulticast mode [ 733.767766][T27931] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 733.835971][ T4947] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 733.861551][ T4947] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 733.874177][ T4947] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 733.882433][ T4947] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 733.894774][ T4947] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 734.586155][T27959] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 734.600475][T27959] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 734.868890][T27959] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 734.885565][T27959] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 734.930192][T27981] vlan4: entered allmulticast mode [ 735.066855][T27959] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 735.077924][T27959] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 735.125386][T27986] netlink: 'syz.2.5803': attribute type 30 has an invalid length. [ 735.176024][T27989] netlink: 'syz.2.5803': attribute type 30 has an invalid length. [ 735.193448][T27294] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 735.226421][T27294] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 735.306457][T27959] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 735.319056][T27959] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 735.382068][T27294] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 735.506020][T27294] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 735.839448][T27291] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 735.849073][T27291] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.977325][ T4947] Bluetooth: hci0: command tx timeout [ 735.994168][T27310] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 736.028015][T27310] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 736.055327][T27310] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 736.076287][T27310] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 736.158068][T27294] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 736.196000][T27294] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 736.509867][T28062] netlink: 'syz.2.5822': attribute type 12 has an invalid length. [ 736.510864][ T5750] hid-generic 0005:0007:0007.0001: unknown main item tag 0x0 [ 736.562417][T27938] bridge0: port 1(bridge_slave_0) entered blocking state [ 736.590301][T27938] bridge0: port 1(bridge_slave_0) entered disabled state [ 736.637163][T27938] bridge_slave_0: entered allmulticast mode [ 736.659951][T27938] bridge_slave_0: entered promiscuous mode [ 736.688857][T27938] bridge0: port 2(bridge_slave_1) entered blocking state [ 736.718112][T27938] bridge0: port 2(bridge_slave_1) entered disabled state [ 736.729436][ T5750] hid-generic 0005:0007:0007.0001: hidraw0: BLUETOOTH HID v0.03 Device [syz0] on aa:aa:aa:aa:aa:aa [ 736.740945][T27938] bridge_slave_1: entered allmulticast mode [ 736.754181][T27938] bridge_slave_1: entered promiscuous mode [ 736.865214][T27938] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 736.910811][T27938] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 736.937591][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 737.025907][T27938] team0: Port device team_slave_0 added [ 737.045279][T27938] team0: Port device team_slave_1 added [ 737.141671][T28097] xt_bpf: check failed: parse error [ 737.152853][T27938] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 737.161246][T27938] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 737.240377][T27938] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 737.298376][T27938] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 737.322384][T27938] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 737.353952][T27938] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 737.568555][T27938] hsr_slave_0: entered promiscuous mode [ 737.568827][ T30] audit: type=1107 audit(1781284973.604:22): pid=28118 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5%UA٠0ltݕ/ 6򊨊' [ 737.575221][T27938] hsr_slave_1: entered promiscuous mode [ 737.621834][T27938] debugfs: 'hsr0' already exists in 'hsr' [ 737.637091][T27938] Cannot create hsr debugfs directory [ 737.692311][T28119] xt_ecn: cannot match TCP bits for non-tcp packets [ 737.733393][T28133] x_tables: duplicate underflow at hook 2 [ 737.909296][T28136] __nla_validate_parse: 9 callbacks suppressed [ 737.909314][T28136] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5842'. [ 737.955667][T28146] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5843'. [ 738.069299][ T4947] Bluetooth: hci0: command tx timeout [ 738.073045][T28147] netlink: 'syz.2.5845': attribute type 16 has an invalid length. [ 738.109851][T28147] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5845'. [ 738.526588][T28173] netlink: 1024 bytes leftover after parsing attributes in process `syz.0.5852'. [ 738.659496][T27938] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 738.693027][T27938] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.746672][T28183] netlink: 'syz.0.5857': attribute type 1 has an invalid length. [ 738.818997][T28183] 8021q: adding VLAN 0 to HW filter on device bond6 [ 738.891597][T28192] bond6: (slave veth7): Enslaving as a backup interface with a down link [ 738.958826][T28192] netlink: 'syz.0.5857': attribute type 10 has an invalid length. [ 738.961160][T28183] bond6: (slave dummy0): Enslaving as a backup interface with an up link [ 738.976345][T28192] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5857'. [ 739.046206][T27938] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 739.059769][T24608] net_ratelimit: 794 callbacks suppressed [ 739.059787][T24608] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 739.074615][T27938] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 739.095741][T28192] dummy0: entered promiscuous mode [ 739.115980][T28192] bond6: (slave dummy0): Removing an active aggregator [ 739.135440][T28192] bond6: (slave dummy0): Releasing backup interface [ 739.258204][T24608] bond0: (slave syz_tun): interface is now down [ 739.543024][T27938] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 739.570515][T27938] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 739.648593][T28233] pim6reg: entered allmulticast mode [ 739.708879][T28227] syzkaller0: entered promiscuous mode [ 739.723761][T28227] syzkaller0: entered allmulticast mode [ 739.759960][T27938] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 739.771538][T27938] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 740.140729][T28259] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5876'. [ 740.150134][ T4947] Bluetooth: hci0: command tx timeout [ 740.153126][T28258] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5876'. [ 741.817332][T24608] bond0: (slave syz_tun): interface is now down [ 742.233406][ T4947] Bluetooth: hci0: command tx timeout [ 743.092808][T28242] netlink: 84 bytes leftover after parsing attributes in process `syz.2.5871'. [ 743.103693][T28244] netlink: 'syz.2.5871': attribute type 1 has an invalid length. [ 743.302918][T28265] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5878'. [ 743.508299][T28275] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5883'. [ 743.531543][T28278] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5882'. [ 743.573407][T28278] netlink: 'syz.2.5882': attribute type 1 has an invalid length. [ 743.581844][T28278] netlink: 'syz.2.5882': attribute type 2 has an invalid length. [ 743.618248][T28278] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5882'. [ 743.813314][T27938] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 743.829411][T27938] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 743.841397][T27938] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 743.852435][T28288] netlink: 'syz.2.5886': attribute type 1 has an invalid length. [ 743.867587][T27938] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 743.901754][T27938] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 743.925737][T27938] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 743.953329][T28288] bond8: (slave geneve4): making interface the new active one [ 743.961567][T28288] bond8: (slave geneve4): Enslaving as an active interface with an up link [ 743.972406][T27938] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 743.983388][T27938] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 743.991959][T28290] syzkaller0: entered promiscuous mode [ 744.007220][T28290] syzkaller0: entered allmulticast mode [ 744.018318][T27323] netdevsim netdevsim2 netdevsim0: set [1, 2] type 2 family 0 port 20004 - 0 [ 744.032087][T27323] netdevsim netdevsim2 netdevsim1: set [1, 2] type 2 family 0 port 20004 - 0 [ 744.070004][T27323] netdevsim netdevsim2 netdevsim2: set [1, 2] type 2 family 0 port 20004 - 0 [ 744.084634][T27323] netdevsim netdevsim2 netdevsim3: set [1, 2] type 2 family 0 port 20004 - 0 [ 744.182565][T28308] veth0: entered promiscuous mode [ 744.315789][T28310] veth0: left promiscuous mode [ 744.381364][T10142] bond0: (slave syz_tun): interface is now down [ 744.408023][T27938] 8021q: adding VLAN 0 to HW filter on device bond0 [ 744.464607][T27938] 8021q: adding VLAN 0 to HW filter on device team0 [ 744.511231][T27291] bridge0: port 1(bridge_slave_0) entered blocking state [ 744.518371][T27291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 744.569096][T27291] bridge0: port 2(bridge_slave_1) entered blocking state [ 744.576299][T27291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 744.655337][T27938] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 744.665924][T27938] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 744.849577][T28335] lo: left promiscuous mode [ 744.870603][T28335] tunl0: left promiscuous mode [ 744.987694][T28335] 8021q: adding VLAN 0 to HW filter on device team0 [ 745.039962][T28343] netlink: 10 bytes leftover after parsing attributes in process `syz.0.5899'. [ 745.085734][T28335] geneve2: left promiscuous mode [ 745.096613][T28335] 8021q: adding VLAN 0 to HW filter on device bond1 [ 745.115584][T28335] team1: left promiscuous mode [ 745.129083][T28335] 8021q: adding VLAN 0 to HW filter on device team1 [ 745.139120][T28335] macvtap1: left promiscuous mode [ 745.144179][T28335] vlan0: left promiscuous mode [ 745.168555][T28335] bond3: left promiscuous mode [ 745.173845][T28335] 8021q: adding VLAN 0 to HW filter on device bond3 [ 745.192957][T28335] 8021q: adding VLAN 0 to HW filter on device bond6 [ 745.205802][T28335] vlan2: left promiscuous mode [ 745.218693][T28335] bridge0: left promiscuous mode [ 745.232553][T28335] bond0: left promiscuous mode [ 745.237516][T28335] bridge3: left promiscuous mode [ 745.245984][T28335] erspan0: entered promiscuous mode [ 745.274361][T27294] bridge0: port 1(veth1_to_bridge) entered blocking state [ 745.281708][T27294] bridge0: port 1(veth1_to_bridge) entered forwarding state [ 745.359281][T10142] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 745.364715][T28347] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 745.610510][T27938] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 745.651856][T27938] veth0_vlan: entered promiscuous mode [ 745.666263][T27938] veth1_vlan: entered promiscuous mode [ 745.700915][T27938] veth0_macvtap: entered promiscuous mode [ 745.710871][T27938] veth1_macvtap: entered promiscuous mode [ 745.731664][T27938] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 745.754594][T27938] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 745.777277][T10142] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 745.795143][T10142] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 745.807870][T10142] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 745.816711][T10142] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 746.938014][T27293] bond0: (slave syz_tun): interface is now down [ 747.183813][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.445578][T28317] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 747.658596][T27291] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 747.705460][T27291] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 747.733992][T28369] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5905'. [ 747.745277][T27291] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 747.759988][T28369] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5905'. [ 747.769692][T27291] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 748.005950][T28383] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5787'. [ 748.094986][T28386] bridge0: port 1(gretap0) entered blocking state [ 748.103911][T28386] bridge0: port 1(gretap0) entered disabled state [ 748.111282][T28386] gretap0: entered allmulticast mode [ 748.171317][T28386] gretap0: entered promiscuous mode [ 748.492350][T28412] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5915'. [ 748.501662][T28412] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5915'. [ 748.799638][T28424] netlink: 'syz.0.5919': attribute type 21 has an invalid length. [ 748.820022][T28424] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5919'. [ 748.845357][T28419] A link change request failed with some changes committed already. Interface veth1_to_bridge may have been left with an inconsistent configuration, please check. [ 748.898788][T28424] netlink: 'syz.0.5919': attribute type 21 has an invalid length. [ 748.914166][T28424] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5919'. [ 749.071474][T28431] syzkaller0: entered promiscuous mode [ 749.084692][T28431] syzkaller0: entered allmulticast mode [ 749.104756][T28419] IPVS: set_ctl: invalid protocol: 0 172.20.20.8:8197 [ 749.125108][T28434] xt_bpf: check failed: parse error [ 749.321474][T28444] netlink: 'syz.4.5925': attribute type 10 has an invalid length. [ 749.355029][T28444] netlink: 228 bytes leftover after parsing attributes in process `syz.4.5925'. [ 749.386640][T28444] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5925'. [ 749.443204][T28454] netlink: 'syz.2.5928': attribute type 2 has an invalid length. [ 749.459350][T28454] netlink: 'syz.2.5928': attribute type 11 has an invalid length. [ 749.495531][T28454] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5928'. [ 749.505481][T10142] bond0: (slave syz_tun): interface is now down [ 749.521249][T10142] bond0: now running without any active interface! [ 749.577918][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 749.730333][T28463] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5929'. [ 749.894626][T28473] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5932'. [ 750.276181][T28496] xt_ecn: cannot match TCP bits for non-tcp packets [ 750.336579][T28498] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5941'. [ 750.346010][T28498] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 750.421856][T28500] Bluetooth: MGMT ver 1.23 [ 750.428919][T28500] openvswitch: netlink: IP tunnel dst address not specified [ 750.438581][T28500] openvswitch: netlink: Tunnel attr 78 out of range max 16 [ 750.773566][T28533] xt_l2tp: missing protocol rule (udp|l2tpip) [ 751.215128][T28554] netlink: 'syz.2.5956': attribute type 2 has an invalid length. [ 751.762713][T28588] netlink: 'syz.2.5966': attribute type 18 has an invalid length. [ 751.815602][T28591] netlink: 'syz.2.5966': attribute type 18 has an invalid length. [ 751.832255][T28576] : entered promiscuous mode [ 751.852769][T28576] vlan4: entered promiscuous mode [ 752.009344][T28588] netlink: 'syz.2.5966': attribute type 18 has an invalid length. [ 752.099486][T28591] netlink: 'syz.2.5966': attribute type 18 has an invalid length. [ 752.282629][T28602] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 752.317776][T28603] IPVS: set_ctl: invalid protocol: 50 172.20.20.187:20004 [ 752.815185][T28621] bond9: entered promiscuous mode [ 752.829992][T28632] openvswitch: netlink: IPv6 tunnel dst address is zero [ 752.860973][T28621] bond9: entered allmulticast mode [ 752.884956][T28621] 8021q: adding VLAN 0 to HW filter on device bond9 [ 752.911080][T28637] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 753.231663][T28653] bond10: option all_slaves_active: invalid value (222) [ 753.250456][T28653] bond10 (unregistering): Released all slaves [ 753.529809][T28682] __nla_validate_parse: 9 callbacks suppressed [ 753.529826][T28682] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5991'. [ 753.608357][T28686] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5994'. [ 753.621999][T28682] bond10: Invalid ad_actor_system MAC address. [ 753.630274][T28682] bond10: option ad_actor_system: invalid value (1) [ 753.666235][T28682] bond10 (unregistering): Released all slaves [ 753.675645][T28689] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5996'. [ 753.694954][T28689] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5996'. [ 753.809672][T28689] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5996'. [ 753.822018][T28689] validate_nla: 3 callbacks suppressed [ 753.822034][T28689] netlink: 'syz.1.5996': attribute type 18 has an invalid length. [ 753.835920][T28689] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5996'. [ 753.851712][T28696] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5997'. [ 754.009120][T28703] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.5999'. [ 754.083196][T28712] netlink: 'syz.3.6000': attribute type 21 has an invalid length. [ 754.097842][T28713] netlink: 'syz.1.6003': attribute type 2 has an invalid length. [ 754.151643][T28716] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6004'. [ 754.175056][T28716] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6004'. [ 754.518871][T28736] syzkaller0: entered promiscuous mode [ 754.524701][T28736] syzkaller0: entered allmulticast mode [ 754.628408][T28753] netlink: 'syz.2.6014': attribute type 1 has an invalid length. [ 754.924047][T28766] Cannot find set identified by id 65534 to match [ 754.933704][T28766] netlink: 'syz.2.6018': attribute type 1 has an invalid length. [ 755.114358][T28775] bridge6: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 755.163430][T28727] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 755.728810][T28802] Can't find ip_set type hash:i,port,ip [ 755.983388][T28820] sit2: entered promiscuous mode [ 756.008750][T28820] sit2: entered allmulticast mode [ 756.235694][T28842] netlink: 'syz.0.6041': attribute type 1 has an invalid length. [ 756.386518][T28852] veth0: entered promiscuous mode [ 756.416025][T28852] veth0: left promiscuous mode [ 756.528606][T28852] bridge9: entered promiscuous mode [ 756.535768][T28852] bridge9: entered allmulticast mode [ 756.783338][T27313] wlan1: Trigger new scan to find an IBSS to join [ 756.806810][T28870] bond0: (slave syz_tun): Releasing backup interface [ 756.814983][T28870] syz_tun: left allmulticast mode [ 756.841817][T28870] veth1_to_bridge: left allmulticast mode [ 756.848775][T28870] veth1_to_bridge: left promiscuous mode [ 756.854695][T28870] bridge0: port 1(veth1_to_bridge) entered disabled state [ 756.875132][T28870] bond0: (slave bond_slave_0): Releasing backup interface [ 756.882871][T28870] bond_slave_0: left allmulticast mode [ 756.894756][T28870] bond0: (slave bond_slave_1): Releasing backup interface [ 756.904526][T28870] bond_slave_1: left allmulticast mode [ 756.956318][T28870] team0: Port device team_slave_0 removed [ 757.045395][T28870] team0: Port device team_slave_1 removed [ 757.092914][T28870] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 757.151226][T28877] xfrm0: entered promiscuous mode [ 757.152326][T28895] sctp: [Deprecated]: syz.4.6058 (pid 28895) Use of struct sctp_assoc_value in delayed_ack socket option. [ 757.152326][T28895] Use struct sctp_sack_info instead [ 757.200754][T28877] team0: Device xfrm0 is of different type [ 757.245170][T28885] tipc: Enabled bearer , priority 0 [ 757.707064][T28924] netlink: 'syz.3.6066': attribute type 1 has an invalid length. [ 758.095512][T28950] tipc: Enabling of bearer rejected, media not registered [ 758.358015][ T996] tipc: Node number set to 1985809930 [ 758.476310][T28970] tipc: Trying to set illegal importance in message [ 758.625506][T28982] netlink: 'syz.0.6085': attribute type 1 has an invalid length. [ 758.699706][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 758.883153][T28997] syzkaller0: entered promiscuous mode [ 758.906307][T28997] syzkaller0: entered allmulticast mode [ 759.102459][T29000] 8021q: adding VLAN 0 to HW filter on device bond11 [ 759.120911][T29000] bridge0: port 1(bond11) entered blocking state [ 759.137789][T29000] bridge0: port 1(bond11) entered disabled state [ 759.146679][T29005] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 759.171254][T29000] bond11: entered allmulticast mode [ 759.197125][T29008] netlink: 'syz.3.6089': attribute type 1 has an invalid length. [ 759.219140][T29000] bond11: entered promiscuous mode [ 759.817144][T27293] wlan1: Trigger new scan to find an IBSS to join [ 761.626355][T28985] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 761.835877][T29026] __nla_validate_parse: 17 callbacks suppressed [ 761.835892][T29026] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6095'. [ 761.836717][T29025] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6094'. [ 762.126121][T29035] openvswitch: netlink: nsh attribute has 5 unknown bytes. [ 762.449782][T29039] netlink: 'syz.4.6099': attribute type 11 has an invalid length. [ 762.482253][T29039] netlink: 199788 bytes leftover after parsing attributes in process `syz.4.6099'. [ 762.494016][T29039] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6099'. [ 762.504125][T29039] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6099'. [ 762.513627][T29039] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6099'. [ 762.537569][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 762.591268][ T1036] block nbd0: Connection timed out, retrying (0/2 alive) [ 762.598151][T29042] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6100'. [ 762.604356][ T1036] block nbd0: Connection timed out, retrying (0/2 alive) [ 762.620519][ T1036] block nbd0: Connection timed out, retrying (0/2 alive) [ 762.627758][ T1036] block nbd0: Connection timed out, retrying (0/2 alive) [ 762.637412][ T11] block nbd0: Dead connection, failed to find a fallback [ 762.648453][ T11] block nbd0: shutting down sockets [ 762.650446][T29045] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6101'. [ 762.657801][ T11] blk_print_req_error: 138 callbacks suppressed [ 762.657818][ T11] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 762.685721][ T11] buffer_io_error: 138 callbacks suppressed [ 762.685811][ T11] Buffer I/O error on dev nbd0, logical block 2, async page read [ 762.700427][ T11] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 762.709851][ T11] Buffer I/O error on dev nbd0, logical block 1, async page read [ 762.717877][ T11] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 762.727021][ T11] Buffer I/O error on dev nbd0, logical block 0, async page read [ 762.734848][ T11] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 762.741834][T29048] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6101'. [ 762.744020][ T11] Buffer I/O error on dev nbd0, logical block 3, async page read [ 762.763013][T24900] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 762.793979][T24900] Buffer I/O error on dev nbd0, logical block 0, async page read [ 762.821760][T24900] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 762.858656][T27291] wlan1: Trigger new scan to find an IBSS to join [ 762.875582][T24900] Buffer I/O error on dev nbd0, logical block 1, async page read [ 762.923326][T24900] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 763.001515][T24900] Buffer I/O error on dev nbd0, logical block 2, async page read [ 763.082648][T24900] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 763.102250][T29052] bond8: option arp_all_targets: invalid value (18446744073709551613) [ 763.129872][T24900] Buffer I/O error on dev nbd0, logical block 3, async page read [ 763.148696][T24900] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 763.174283][T24900] Buffer I/O error on dev nbd0, logical block 0, async page read [ 763.191546][T24900] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 763.195782][T29052] bond8 (unregistering): Released all slaves [ 763.206407][T29058] netlink: 'syz.3.6105': attribute type 32 has an invalid length. [ 763.215819][T24900] Buffer I/O error on dev nbd0, logical block 1, async page read [ 763.227472][T29058] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6105'. [ 763.243839][T24900] ldm_validate_partition_table(): Disk read failed. [ 763.262509][T24900] Dev nbd0: unable to read RDB block 0 [ 763.289959][T24900] nbd0: unable to read partition table [ 763.340155][T24900] ldm_validate_partition_table(): Disk read failed. [ 763.349322][T24900] Dev nbd0: unable to read RDB block 0 [ 763.356734][T24900] nbd0: unable to read partition table [ 763.360385][T29058] bond1: option coupled_control: invalid value (192) [ 763.380585][T29058] bond1 (unregistering): Released all slaves [ 763.824493][T27291] wlan1: Creating new IBSS network, BSSID 6e:18:d4:e5:c3:be [ 763.850127][T29089] xt_hashlimit: size too large, truncated to 1048576 [ 763.958706][T29096] veth5: entered allmulticast mode [ 764.592149][T29135] netlink: 'syz.4.6124': attribute type 83 has an invalid length. [ 765.134424][T29179] netlink: 'syz.3.6136': attribute type 8 has an invalid length. [ 765.670006][T29199] netlink: 'syz.0.6142': attribute type 5 has an invalid length. [ 765.818690][T29204] netlink: 'syz.0.6145': attribute type 5 has an invalid length. [ 765.868303][T29209] xt_socket: unknown flags 0x8 [ 765.981736][T29213] syzkaller0: entered promiscuous mode [ 766.000970][T29213] syzkaller0: entered allmulticast mode [ 766.027361][T29211] syzkaller0: entered promiscuous mode [ 766.033422][T29211] syzkaller0: entered allmulticast mode [ 766.782685][T29265] sctp: [Deprecated]: syz.4.6163 (pid 29265) Use of int in max_burst socket option. [ 766.782685][T29265] Use struct sctp_assoc_value instead [ 766.830758][T29265] netlink: 'syz.4.6163': attribute type 1 has an invalid length. [ 766.839278][T29265] __nla_validate_parse: 17 callbacks suppressed [ 766.839296][T29265] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6163'. [ 766.856502][T29265] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 766.929195][T29274] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6168'. [ 767.042992][T29279] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6170'. [ 767.181662][ T4947] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 767.191235][ T4947] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 767.382521][T29306] xt_hashlimit: size too large, truncated to 1048576 [ 767.406543][T29309] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.6176'. [ 767.476714][T29308] bond7: option resend_igmp: invalid value (32767) [ 767.486765][T29308] bond7: option resend_igmp: allowed values 0 - 255 [ 767.501150][T29308] bond7 (unregistering): Released all slaves [ 768.217467][ C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 768.226193][ C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 769.257209][ C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 769.263754][ C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 770.076316][T29295] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 770.262314][T29343] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6188'. [ 770.271963][T29343] openvswitch: netlink: Flow actions attr not present in new flow. [ 770.418814][T29350] netlink: 808 bytes leftover after parsing attributes in process `syz.4.6190'. [ 770.461164][T29350] netlink: 808 bytes leftover after parsing attributes in process `syz.4.6190'. [ 770.611748][T29363] netlink: 'syz.0.6193': attribute type 2 has an invalid length. [ 770.770331][T29375] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 770.911661][T29384] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.6198'. [ 770.923183][T29386] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.6198'. [ 771.281930][T29412] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6204'. [ 771.622489][T29426] netlink: 'syz.1.6209': attribute type 4 has an invalid length. [ 771.655761][T29430] hsr0: entered promiscuous mode [ 771.851255][T29439] netlink: 'syz.3.6213': attribute type 1 has an invalid length. [ 771.870519][T29439] netlink: 'syz.3.6213': attribute type 1 has an invalid length. [ 771.880796][T29440] __nla_validate_parse: 5 callbacks suppressed [ 771.880813][T29440] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6212'. [ 772.147683][T29456] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6218'. [ 772.161348][T29459] geneve4: entered promiscuous mode [ 772.171975][T27293] netdevsim netdevsim1 netdevsim0: set [1, 3] type 2 family 0 port 39831 - 0 [ 772.184518][T27293] netdevsim netdevsim1 netdevsim1: set [1, 3] type 2 family 0 port 39831 - 0 [ 772.210458][T27293] netdevsim netdevsim1 netdevsim2: set [1, 3] type 2 family 0 port 39831 - 0 [ 772.242716][T27293] netdevsim netdevsim1 netdevsim3: set [1, 3] type 2 family 0 port 39831 - 0 [ 772.255407][T29462] netlink: 'syz.3.6221': attribute type 1 has an invalid length. [ 772.264227][T29462] netlink: 'syz.3.6221': attribute type 2 has an invalid length. [ 772.273572][T29462] netlink: 15914 bytes leftover after parsing attributes in process `syz.3.6221'. [ 772.343887][T29466] netlink: 54 bytes leftover after parsing attributes in process `syz.4.6223'. [ 772.358029][T29466] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6223'. [ 772.384392][T29465] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6222'. [ 772.409815][T29465] netlink: 'syz.0.6222': attribute type 1 has an invalid length. [ 772.414771][T29470] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 772.424917][T29470] IPv6: NLM_F_CREATE should be set when creating new route [ 772.432200][T29470] IPv6: NLM_F_CREATE should be set when creating new route [ 772.439844][T29465] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6222'. [ 772.441401][T29470] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 772.494607][T29473] netlink: 'syz.3.6226': attribute type 1 has an invalid length. [ 772.609788][T29479] RDS: rds_bind could not find a transport for ::ffff:172.30.0.4, load rds_tcp or rds_rdma? [ 772.626304][T29480] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6229'. [ 772.831442][T29491] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6233'. [ 772.846795][T29491] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6233'. [ 772.865530][T29486] syzkaller1: entered promiscuous mode [ 772.898540][T29486] syzkaller1: entered allmulticast mode [ 773.336730][T29532] netlink: 'syz.3.6245': attribute type 1 has an invalid length. [ 774.414750][ T5635] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 774.426247][ T5635] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 774.436330][ T5635] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 774.452372][ T5635] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 774.460791][ T5635] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 774.901035][T29537] bridge0: port 1(bridge_slave_0) entered blocking state [ 774.909152][T29537] bridge0: port 1(bridge_slave_0) entered disabled state [ 774.916519][T29537] bridge_slave_0: entered allmulticast mode [ 774.924570][T29537] bridge_slave_0: entered promiscuous mode [ 774.932500][T29537] bridge0: port 2(bridge_slave_1) entered blocking state [ 774.940361][T29537] bridge0: port 2(bridge_slave_1) entered disabled state [ 774.947974][T29537] bridge_slave_1: entered allmulticast mode [ 774.955012][T29537] bridge_slave_1: entered promiscuous mode [ 774.993974][T29537] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 775.005883][T29537] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 775.037661][T29537] team0: Port device team_slave_0 added [ 775.045251][T29537] team0: Port device team_slave_1 added [ 775.068638][T29537] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 775.075653][T29537] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 775.102225][T29537] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 775.114409][T29537] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 775.121515][T29537] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 775.147737][T29537] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 775.195159][T29537] hsr_slave_0: entered promiscuous mode [ 775.201631][T29537] hsr_slave_1: entered promiscuous mode [ 775.208412][T29537] debugfs: 'hsr0' already exists in 'hsr' [ 775.214186][T29537] Cannot create hsr debugfs directory [ 775.338054][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 776.154058][T29510] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 776.209375][T29537] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 776.262152][T29537] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 776.293488][T29537] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 776.348779][T29537] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 776.370210][T29537] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 776.393937][T29537] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 776.402180][T29537] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 776.419355][T29537] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 776.544005][ T4947] Bluetooth: hci5: command tx timeout [ 776.584107][T29578] sock: sock_timestamping_bind_phc: sock not bind to device [ 776.604681][T29580] netlink: 'syz.3.6253': attribute type 26 has an invalid length. [ 776.667972][T29537] 8021q: adding VLAN 0 to HW filter on device bond0 [ 776.694052][T29537] 8021q: adding VLAN 0 to HW filter on device team0 [ 776.714046][T24608] bridge0: port 1(bridge_slave_0) entered blocking state [ 776.721288][T24608] bridge0: port 1(bridge_slave_0) entered forwarding state [ 776.812260][T27313] bridge0: port 2(bridge_slave_1) entered blocking state [ 776.819537][T27313] bridge0: port 2(bridge_slave_1) entered forwarding state [ 776.954007][T29594] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6257'. [ 777.684462][T29620] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6263'. [ 777.786039][T29620] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6263'. [ 778.134510][T29537] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 778.214128][T29643] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6268'. [ 778.234843][T29646] netlink: 'syz.0.6270': attribute type 8 has an invalid length. [ 778.244013][T29643] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6268'. [ 778.262246][T29643] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6268'. [ 778.617049][ T4947] Bluetooth: hci5: command tx timeout [ 778.674830][T29667] FAULT_INJECTION: forcing a failure. [ 778.674830][T29667] name failslab, interval 1, probability 0, space 0, times 0 [ 778.739895][T29667] CPU: 0 UID: 0 PID: 29667 Comm: syz.1.6276 Not tainted syzkaller #0 PREEMPT(full) [ 778.739918][T29667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 778.739929][T29667] Call Trace: [ 778.739935][T29667] [ 778.739941][T29667] dump_stack_lvl+0xe8/0x150 [ 778.739963][T29667] should_fail_ex+0x412/0x560 [ 778.739982][T29667] should_failslab+0xa8/0x100 [ 778.739997][T29667] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 778.740022][T29667] ? __alloc_skb+0x186/0x7d0 [ 778.740041][T29667] ? __alloc_skb+0x1d0/0x7d0 [ 778.740057][T29667] ? __local_bh_enable_ip+0xd0/0x130 [ 778.740075][T29667] __alloc_skb+0x1d0/0x7d0 [ 778.740095][T29667] netlink_sendmsg+0x5d4/0xb40 [ 778.740115][T29667] ? __pfx_netlink_sendmsg+0x10/0x10 [ 778.740130][T29667] ? aa_sock_msg_perm+0xf1/0x1b0 [ 778.740150][T29667] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 778.740170][T29667] ____sys_sendmsg+0x972/0x9f0 [ 778.740183][T29667] ? __might_fault+0xaf/0x130 [ 778.740204][T29667] ? __pfx_____sys_sendmsg+0x10/0x10 [ 778.740223][T29667] ? import_iovec+0x73/0xa0 [ 778.740242][T29667] ___sys_sendmsg+0x2a5/0x360 [ 778.740255][T29667] ? __lock_acquire+0x6b5/0x2cf0 [ 778.740273][T29667] ? __pfx____sys_sendmsg+0x10/0x10 [ 778.740291][T29667] ? kstrtouint+0x6e/0xe0 [ 778.740332][T29667] ? __fget_files+0x2a/0x420 [ 778.740347][T29667] ? __fget_files+0x3a0/0x420 [ 778.740371][T29667] __sys_sendmmsg+0x27c/0x4e0 [ 778.740389][T29667] ? __pfx___sys_sendmmsg+0x10/0x10 [ 778.740402][T29667] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 778.740440][T29667] ? ksys_write+0x242/0x270 [ 778.740461][T29667] ? __pfx_ksys_write+0x10/0x10 [ 778.740483][T29667] __x64_sys_sendmmsg+0xa0/0xc0 [ 778.740498][T29667] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 778.740514][T29667] do_syscall_64+0x174/0x580 [ 778.740530][T29667] ? trace_irq_disable+0x3b/0x140 [ 778.740551][T29667] ? clear_bhb_loop+0x40/0x90 [ 778.740571][T29667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 778.740587][T29667] RIP: 0033:0x7f6ba339ce59 [ 778.740604][T29667] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 778.740618][T29667] RSP: 002b:00007f6ba42e9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 778.740636][T29667] RAX: ffffffffffffffda RBX: 00007f6ba3615fa0 RCX: 00007f6ba339ce59 [ 778.740648][T29667] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 778.740658][T29667] RBP: 00007f6ba42e9090 R08: 0000000000000000 R09: 0000000000000000 [ 778.740668][T29667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 778.740677][T29667] R13: 00007f6ba3616038 R14: 00007f6ba3615fa0 R15: 00007ffd078cc378 [ 778.740705][T29667] [ 779.153052][T29674] xt_nfacct: accounting object `syz1' does not exist [ 779.323659][T29694] netlink: 104 bytes leftover after parsing attributes in process `syz.3.6283'. [ 779.349421][T29537] veth0_vlan: entered promiscuous mode [ 779.414681][T29694] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 779.511082][T29694] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 779.536739][T29537] veth1_vlan: entered promiscuous mode [ 779.554831][T29699] erspan0: entered promiscuous mode [ 779.574738][T29699] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6283'. [ 779.696648][T29537] veth0_macvtap: entered promiscuous mode [ 779.818303][T29718] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6289'. [ 779.839107][T29537] veth1_macvtap: entered promiscuous mode [ 779.878836][T29537] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 779.934597][T29537] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 779.968459][T10142] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 779.975602][T29723] Cannot find add_set index 65532 as target [ 780.001961][T10142] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 780.031622][T10142] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 780.051663][T27291] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 780.331821][T27291] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 780.345743][T27291] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 780.385098][T29740] syzkaller0: entered promiscuous mode [ 780.412338][T29740] syzkaller0: entered allmulticast mode [ 780.451435][T29740] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 780.462191][T29749] netlink: 27 bytes leftover after parsing attributes in process `syz.4.6299'. [ 780.480473][T27301] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 780.498462][T27301] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 780.699514][ T4947] Bluetooth: hci5: command tx timeout [ 780.843833][T29771] netlink: 'syz.0.6305': attribute type 1 has an invalid length. [ 780.997059][T29782] netlink: 'syz.4.6307': attribute type 1 has an invalid length. [ 781.123861][T29782] bond10: entered promiscuous mode [ 781.190150][T29782] 8021q: adding VLAN 0 to HW filter on device bond10 [ 781.300373][T29792] openvswitch: netlink: Missing key (keys=40, expected=100) [ 781.403430][ T5635] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 781.421516][ T5635] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 781.434251][ T5635] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 781.445759][ T5635] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 781.453858][ T5635] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 781.548298][T29797] bond7: option xmit_hash_policy: invalid value (64) [ 781.567446][T29797] bond7 (unregistering): Released all slaves [ 781.655002][T29802] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 781.666012][T29806] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 781.960222][T29817] bond11 (unregistering): Released all slaves [ 782.160919][T29836] __nla_validate_parse: 8 callbacks suppressed [ 782.160938][T29836] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6321'. [ 782.212814][T29828] bond0: (slave bond_slave_0): Releasing backup interface [ 782.306413][T29834] ip6erspan1: entered allmulticast mode [ 782.338404][T17745] syz_tun (unregistering): left allmulticast mode [ 782.778428][ T4947] Bluetooth: hci5: command tx timeout [ 782.881212][T27301] wlan1: Trigger new scan to find an IBSS to join [ 782.982540][T29865] syzkaller1: entered promiscuous mode [ 783.002567][T29865] syzkaller1: entered allmulticast mode [ 783.101508][T29869] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6328'. [ 783.271548][T29853] xt_hashlimit: size too large, truncated to 1048576 [ 783.500127][ T4947] Bluetooth: hci6: command tx timeout [ 783.552826][T29794] bridge0: port 1(bridge_slave_0) entered blocking state [ 783.590248][T29794] bridge0: port 1(bridge_slave_0) entered disabled state [ 783.629464][T29794] bridge_slave_0: entered allmulticast mode [ 783.648619][T29794] bridge_slave_0: entered promiscuous mode [ 783.666637][T29794] bridge0: port 2(bridge_slave_1) entered blocking state [ 783.685141][T29794] bridge0: port 2(bridge_slave_1) entered disabled state [ 783.705860][T29794] bridge_slave_1: entered allmulticast mode [ 783.742919][T29794] bridge_slave_1: entered promiscuous mode [ 783.891168][T29794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 783.924830][T29794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 784.089729][T29794] team0: Port device team_slave_0 added [ 784.117300][T29794] team0: Port device team_slave_1 added [ 784.235878][T29794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 784.265917][T29794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 784.313651][T29794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 784.343955][T29794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 784.351447][T29794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 784.382013][T29794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 784.775917][T29794] hsr_slave_0: entered promiscuous mode [ 784.799927][T29794] hsr_slave_1: entered promiscuous mode [ 784.818760][T29794] debugfs: 'hsr0' already exists in 'hsr' [ 784.844239][T29794] Cannot create hsr debugfs directory [ 785.006356][T29951] sock: sock_set_timeout: `syz.3.6347' (pid 29951) tries to set negative timeout [ 785.234854][T29960] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6349'. [ 785.576792][T29931] infiniband syz2: set down [ 785.594582][ T4947] Bluetooth: hci6: command tx timeout [ 785.614079][T29931] infiniband syz2: added ipvlan0 [ 785.709725][T29931] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 785.728311][T29931] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 785.767196][T29931] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 785.817738][T24608] wlan1: Trigger new scan to find an IBSS to join [ 785.959553][T29931] RDS/IB: syz2: added [ 785.974056][T29931] smc: adding ib device syz2 with port count 1 [ 785.982531][T29931] smc: ib device syz2 port 1 has no pnetid [ 785.999974][T29794] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 786.016527][T29794] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 786.028103][T29794] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20003 - 0 [ 786.039638][T29794] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 786.051982][T29794] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 3] type 2 family 0 port 39831 - 0 [ 786.196807][T29990] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 786.465963][T29794] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 786.478245][T30007] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6361'. [ 786.487957][T29794] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 786.499892][T29794] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20003 - 0 [ 786.527695][T29794] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 786.540134][T29794] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 3] type 2 family 0 port 39831 - 0 [ 786.603641][T30013] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6362'. [ 786.761709][T29794] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 786.787821][T29794] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 786.812957][T29794] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20003 - 0 [ 786.847518][T29794] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 786.859928][T29794] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 3] type 2 family 0 port 39831 - 0 [ 786.889452][T30021] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6365'. [ 787.074800][T29794] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 787.089689][T29794] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 787.101448][T29794] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20003 - 0 [ 787.112290][T29794] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 787.137907][T29794] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 3] type 2 family 0 port 39831 - 0 [ 787.156805][T30029] netlink: 104 bytes leftover after parsing attributes in process `syz.3.6367'. [ 787.377683][T30034] erspan0: entered promiscuous mode [ 787.386000][T30034] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6370'. [ 787.398812][T30034] erspan0: left promiscuous mode [ 787.420770][T30036] netlink: 'syz.0.6371': attribute type 1 has an invalid length. [ 787.472146][T30040] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6371'. [ 787.551569][T30036] 8021q: adding VLAN 0 to HW filter on device bond7 [ 787.612390][T30047] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6372'. [ 787.657414][ T4947] Bluetooth: hci6: command tx timeout [ 787.665623][T30046] bond1: entered promiscuous mode [ 787.926335][T30063] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6375'. [ 787.941928][T30065] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6377'. [ 788.199944][T29794] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 788.230742][T29794] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 788.268453][T29794] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 788.311619][T29794] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 788.331013][T29794] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 788.402230][T29794] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 788.548918][T29794] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 788.656702][T29794] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 788.860595][T27323] wlan1: Trigger new scan to find an IBSS to join [ 788.942948][T30094] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6384'. [ 788.973515][T30094] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6384'. [ 789.022727][T29794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 789.121979][T29794] 8021q: adding VLAN 0 to HW filter on device team0 [ 789.164424][T24608] bridge0: port 1(bridge_slave_0) entered blocking state [ 789.171656][T24608] bridge0: port 1(bridge_slave_0) entered forwarding state [ 789.245052][T24608] bridge0: port 2(bridge_slave_1) entered blocking state [ 789.252553][T24608] bridge0: port 2(bridge_slave_1) entered forwarding state [ 789.288726][T30103] tipc: Enabled bearer , priority 0 [ 789.300949][T30103] syzkaller0: MTU too low for tipc bearer [ 789.309019][T30103] tipc: Disabling bearer [ 789.740211][ T4947] Bluetooth: hci6: command tx timeout [ 789.758901][T27310] wlan1: Creating new IBSS network, BSSID 3a:2b:4b:ef:e1:84 [ 789.806522][T30127] sctp: [Deprecated]: syz.0.6390 (pid 30127) Use of struct sctp_assoc_value in delayed_ack socket option. [ 789.806522][T30127] Use struct sctp_sack_info instead [ 789.855440][T30128] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6390'. [ 790.573276][T29794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 790.756245][T29794] veth0_vlan: entered promiscuous mode [ 790.814026][T29794] veth1_vlan: entered promiscuous mode [ 791.004216][T29794] veth0_macvtap: entered promiscuous mode [ 791.035495][T30186] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6404'. [ 791.050876][T30185] netem: change failed [ 791.132196][T30186] 8021q: adding VLAN 0 to HW filter on device bond2 [ 791.154831][T29794] veth1_macvtap: entered promiscuous mode [ 791.183429][T30193] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6406'. [ 791.212489][T30184] macvlan2: entered promiscuous mode [ 791.217986][T30184] macvlan2: entered allmulticast mode [ 791.224682][T30184] bond2: entered promiscuous mode [ 791.231271][T30184] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 791.241050][T30184] bond2: left promiscuous mode [ 791.415299][T29794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 791.460670][T29794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 791.515118][T24608] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 791.548757][T24608] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 791.615220][T24608] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 791.638695][T24608] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 791.937770][T27313] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 791.980091][T27313] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 792.051984][T27323] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 792.074192][T27323] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 792.360700][T30228] netlink: ct family unspecified [ 792.431198][T30234] __nla_validate_parse: 3 callbacks suppressed [ 792.431215][T30234] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6416'. [ 792.918611][T30248] netlink: 16215 bytes leftover after parsing attributes in process `syz.4.6420'. [ 792.951953][ T5635] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 792.970721][ T5635] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 792.980652][T30251] netlink: 'syz.4.6420': attribute type 3 has an invalid length. [ 792.990631][ T5635] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 793.004791][ T5635] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 793.022923][ T5635] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 793.151259][T30254] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 793.164865][T30254] syzkaller1: Linktype set failed because interface is up [ 793.180775][T10562] syzkaller1: tun_net_xmit 90 [ 793.732204][T27323] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 793.769906][T27323] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 793.863501][T30276] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6427'. [ 793.904486][T30276] netlink: 'syz.5.6427': attribute type 7 has an invalid length. [ 793.928105][T30278] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6427'. [ 793.958760][T30276] netlink: 'syz.5.6427': attribute type 8 has an invalid length. [ 793.990139][T27323] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 794.008262][T30276] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6427'. [ 794.020300][T27323] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.056154][T30276] syz_tun: entered promiscuous mode [ 794.107333][T30276] syz_tun: left promiscuous mode [ 794.195687][T27323] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 794.230473][T27323] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.289428][T30303] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6431'. [ 794.369998][T30302] syzkaller0: entered promiscuous mode [ 794.378295][T30302] syzkaller0: entered allmulticast mode [ 794.433031][T27323] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 794.486435][T27323] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.582756][T30308] tipc: Started in network mode [ 794.588515][T30308] tipc: Node identity ba931718638e, cluster identity 4711 [ 794.601663][T30308] tipc: Enabled bearer , priority 0 [ 794.645498][T30301] tipc: Resetting bearer [ 794.700306][T30301] tipc: Disabling bearer [ 794.917961][T30326] netlink: 'syz.4.6437': attribute type 1 has an invalid length. [ 794.963321][T30324] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6437'. [ 795.034792][T10141] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 795.098367][ T4947] Bluetooth: hci1: command tx timeout [ 795.175749][T10141] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 795.453415][T27313] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 795.547884][T27310] netdevsim netdevsim0 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 795.656592][T27323] gretap0: left promiscuous mode [ 795.662057][T27323] bridge0: port 1(gretap0) entered disabled state [ 795.818354][T27294] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 795.883516][T27323] ip6gretap0 (unregistering): left promiscuous mode [ 796.595022][T27323] bond1 (unregistering): Released all slaves [ 796.613561][T27323] bond0 (unregistering): Released all slaves [ 796.633950][T27323] bond2 (unregistering): Released all slaves [ 796.648296][T27323] bond3 (unregistering): Released all slaves [ 796.663347][T27323] bond4 (unregistering): Released all slaves [ 796.678005][T27323] bond5 (unregistering): Released all slaves [ 796.693261][T27323] bond6 (unregistering): (slave veth7): Releasing backup interface [ 796.705787][T27323] bond6 (unregistering): Released all slaves [ 796.735236][T27323] bond7 (unregistering): Released all slaves [ 797.049797][T27323] : left promiscuous mode [ 797.158395][T30386] sctp: [Deprecated]: syz.1.6451 (pid 30386) Use of struct sctp_assoc_value in delayed_ack socket option. [ 797.158395][T30386] Use struct sctp_sack_info instead [ 797.180958][ T4947] Bluetooth: hci1: command tx timeout [ 797.245308][T30382] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6450'. [ 797.256282][T30382] netlink: 'syz.3.6450': attribute type 30 has an invalid length. [ 797.281858][T30391] netlink: 'syz.4.6452': attribute type 9 has an invalid length. [ 797.299619][T30388] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6450'. [ 797.388249][T30388] netlink: 'syz.3.6450': attribute type 30 has an invalid length. [ 797.396271][T27323] tipc: Disabling bearer [ 797.421350][T27323] tipc: Left network mode [ 797.436044][T27310] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 797.466994][T27310] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 797.536400][T27310] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 797.561640][T27313] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 797.834273][T30412] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6454'. [ 798.065440][T30424] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6456'. [ 798.293592][T10562] IPVS: starting estimator thread 0... [ 798.398116][T30437] IPVS: using max 31 ests per chain, 74400 per kthread [ 798.524101][T30411] syzkaller0: entered promiscuous mode [ 798.529844][T30411] syzkaller0: entered allmulticast mode [ 798.539674][T30249] bridge0: port 1(bridge_slave_0) entered blocking state [ 798.561728][T30249] bridge0: port 1(bridge_slave_0) entered disabled state [ 798.570293][T30249] bridge_slave_0: entered allmulticast mode [ 798.581094][T30249] bridge_slave_0: entered promiscuous mode [ 798.608241][ T5292] 8021q: adding VLAN 0 to HW filter on device eth1 [ 798.683036][T30453] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6461'. [ 799.271314][ T4947] Bluetooth: hci1: command tx timeout [ 801.342234][ T4947] Bluetooth: hci1: command tx timeout [ 802.306553][T30249] bridge0: port 2(bridge_slave_1) entered blocking state [ 802.314151][T30249] bridge0: port 2(bridge_slave_1) entered disabled state [ 802.321786][T30249] bridge_slave_1: entered allmulticast mode [ 802.332004][T30249] bridge_slave_1: entered promiscuous mode [ 802.514897][T30474] netlink: 'syz.3.6467': attribute type 18 has an invalid length. [ 802.575749][T30249] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 802.711232][T30249] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 802.880514][T30249] team0: Port device team_slave_0 added [ 803.153578][T30501] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.6475'. [ 803.302504][T30249] team0: Port device team_slave_1 added [ 803.386652][T27323] batadv0: left promiscuous mode [ 803.486425][T27323] hsr_slave_0: left promiscuous mode [ 803.539732][T27323] hsr_slave_1: left promiscuous mode [ 803.581388][T27323] veth0_to_team: left promiscuous mode [ 803.594811][T27323] veth1_macvtap: left promiscuous mode [ 803.614741][T27323] veth0_macvtap: left promiscuous mode [ 803.627158][T27323] veth1_vlan: left promiscuous mode [ 803.637918][T27323] veth0_vlan: left promiscuous mode [ 804.148596][T30544] netlink: 'syz.4.6483': attribute type 1 has an invalid length. [ 804.156622][T30544] netlink: 16179 bytes leftover after parsing attributes in process `syz.4.6483'. [ 804.636473][T30524] vlan2: entered allmulticast mode [ 804.653208][T30524] bond0: entered allmulticast mode [ 804.667809][T30524] bond_slave_0: entered allmulticast mode [ 804.689622][T30524] bond_slave_1: entered allmulticast mode [ 804.700576][ T5292] 8021q: adding VLAN 0 to HW filter on device eth2 [ 804.710162][T30550] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6485'. [ 804.778886][T30249] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 804.815297][T30249] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 804.852851][T30249] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 804.905880][T30554] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6488'. [ 804.932052][T30249] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 804.955023][T30249] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 804.978152][T30563] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.6489'. [ 804.981810][T30249] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 804.991234][T30563] netlink: Unknown conntrack attr (0) [ 805.028572][T30554] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 805.038116][T30567] Cannot find set identified by id 1 to match [ 805.045516][T30567] netlink: 80 bytes leftover after parsing attributes in process `syz.3.6486'. [ 805.104721][T30249] hsr_slave_0: entered promiscuous mode [ 805.118941][T30249] hsr_slave_1: entered promiscuous mode [ 805.129033][T30249] debugfs: 'hsr0' already exists in 'hsr' [ 805.138235][T30249] Cannot create hsr debugfs directory [ 805.427693][T30579] netlink: 68 bytes leftover after parsing attributes in process `syz.5.6490'. [ 805.476512][T30579] netlink: 104 bytes leftover after parsing attributes in process `syz.5.6490'. [ 805.576271][T27323] IPVS: stop unused estimator thread 0... [ 805.991477][T30605] netlink: 'syz.3.6498': attribute type 11 has an invalid length. [ 806.024964][T30605] netlink: 'syz.3.6498': attribute type 5 has an invalid length. [ 806.055494][T30605] netlink: 6548 bytes leftover after parsing attributes in process `syz.3.6498'. [ 806.120350][T30606] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6498'. [ 806.229665][T30249] netdevsim netdevsim0 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 806.266074][T30613] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 806.492355][T30617] netlink: 'syz.3.6501': attribute type 4 has an invalid length. [ 806.712749][T30249] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 806.759477][T30617] Bluetooth: MGMT ver 1.23 [ 806.871959][ T30] audit: type=1107 audit(1781285042.914:23): pid=30629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5%UA٠0ltݕ/ 6򊨊' [ 807.031073][T30249] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 807.134791][T30656] netlink: 'syz.3.6510': attribute type 10 has an invalid length. [ 807.376031][T30249] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 807.435886][T30672] netlink: 'syz.3.6513': attribute type 4 has an invalid length. [ 807.510641][T30678] netlink: 'syz.3.6513': attribute type 4 has an invalid length. [ 808.341496][T30706] bond2: entered promiscuous mode [ 808.346803][T30706] bond2: entered allmulticast mode [ 808.353839][T30706] 8021q: adding VLAN 0 to HW filter on device bond2 [ 808.361630][T30249] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 808.431556][T30249] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 808.510820][T30249] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 808.552229][T30249] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 808.572962][T30729] lo: entered allmulticast mode [ 808.584325][T30249] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 808.616141][T30249] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 808.625701][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.626185][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 808.646645][T30729] lo: left allmulticast mode [ 808.764752][T30249] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 808.793163][T30249] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 809.140467][T30756] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 809.159320][T30756] x_tables: duplicate underflow at hook 3 [ 809.180443][T30760] netlink: 'syz.3.6530': attribute type 1 has an invalid length. [ 809.340326][T30249] 8021q: adding VLAN 0 to HW filter on device bond0 [ 809.401138][T30249] 8021q: adding VLAN 0 to HW filter on device team0 [ 809.443300][T24608] bridge0: port 1(bridge_slave_0) entered blocking state [ 809.450521][T24608] bridge0: port 1(bridge_slave_0) entered forwarding state [ 809.524077][T24608] bridge0: port 2(bridge_slave_1) entered blocking state [ 809.531331][T24608] bridge0: port 2(bridge_slave_1) entered forwarding state [ 810.196502][T30810] __nla_validate_parse: 6 callbacks suppressed [ 810.196520][T30810] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6541'. [ 810.697828][T30844] openvswitch: netlink: IP tunnel TTL not specified. [ 810.893670][T30854] netlink: 'syz.1.6549': attribute type 1 has an invalid length. [ 810.934039][T30854] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6549'. [ 810.993619][T30857] netlink: 'syz.1.6549': attribute type 1 has an invalid length. [ 811.030085][T30857] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6549'. [ 811.084198][T30249] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 811.336731][T30249] veth0_vlan: entered promiscuous mode [ 811.403792][T30878] ve: renamed from macvlan0 (while UP) [ 811.515715][T30249] veth1_vlan: entered promiscuous mode [ 811.530761][T30890] xt_nat: multiple ranges no longer supported [ 811.642652][T30249] veth0_macvtap: entered promiscuous mode [ 811.689100][T30249] veth1_macvtap: entered promiscuous mode [ 811.782048][T30249] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 811.810294][T30898] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6557'. [ 811.859613][T30249] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 811.887559][T30898] macsec1: entered promiscuous mode [ 811.899698][T30898] bond0: entered promiscuous mode [ 811.920786][T30898] bond_slave_0: entered promiscuous mode [ 811.938669][T30898] bond_slave_1: entered promiscuous mode [ 811.964356][T30898] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 812.006745][T24608] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 812.043201][T24608] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 812.101534][T24608] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 812.124440][T24608] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 812.380211][ T4947] Bluetooth: hci1: command tx timeout [ 812.482206][T27290] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 812.526074][T27290] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 812.681228][T27294] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 812.705889][T27294] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 818.859641][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 819.841348][T27291] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 827.178075][T27291] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 835.495238][T30943] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 835.764193][T30963] vxcan1: tx drop: invalid sa for name 0x0000000000000001 [ 835.956040][T30980] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6575'. [ 836.168407][T30990] netlink: 52 bytes leftover after parsing attributes in process `syz.5.6579'. [ 836.205287][T30990] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6579'. [ 836.245218][T30990] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6579'. [ 836.251475][T30996] sctp: [Deprecated]: syz.0.6580 (pid 30996) Use of struct sctp_assoc_value in delayed_ack socket option. [ 836.251475][T30996] Use struct sctp_sack_info instead [ 836.521226][T31004] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 836.711074][T31009] Cannot find add_set index 0 as target [ 836.790618][T31012] netlink: 'syz.0.6586': attribute type 83 has an invalid length. [ 836.820563][T31015] vlan2: entered promiscuous mode [ 836.847665][T31015] bridge0: entered promiscuous mode [ 836.937698][T31021] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6590'. [ 837.091631][T31032] netdevsim netdevsim3: Direct firmware load for .. failed with error -2 [ 837.102777][T31032] netdevsim netdevsim3: Falling back to sysfs fallback for: .. [ 837.130034][T31038] netlink: 256 bytes leftover after parsing attributes in process `syz.5.6595'. [ 837.459554][T31048] netlink: 48 bytes leftover after parsing attributes in process `syz.5.6599'. [ 837.785295][T31057] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 837.817817][ T5635] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 837.832742][ T5635] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 837.844303][ T5635] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 837.852429][ T5635] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 837.871082][ T5635] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 837.905340][T31064] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 838.093606][T31071] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6606'. [ 838.434721][T31085] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6610'. [ 838.467072][T31089] netlink: 220 bytes leftover after parsing attributes in process `syz.3.6611'. [ 838.873533][ T5635] block nbd3: Receive control failed (result -1) [ 839.488669][T31131] [ 839.491049][T31131] ====================================================== [ 839.498154][T31131] WARNING: possible circular locking dependency detected [ 839.505331][T31131] syzkaller #0 Not tainted [ 839.509788][T31131] ------------------------------------------------------ [ 839.516885][T31131] syz.3.6623/31131 is trying to acquire lock: [ 839.523024][T31131] ffffffff8f0af288 (crypto_alg_sem){++++}-{4:4}, at: crypto_alg_mod_lookup+0x211/0x5f0 [ 839.532884][T31131] [ 839.532884][T31131] but task is already holding lock: [ 839.540262][T31131] ffff88806a62ee60 (sk_lock-AF_INET6){+.+.}-{0:0}, at: tls_setsockopt+0x39a/0x15c0 [ 839.549712][T31131] [ 839.549712][T31131] which lock already depends on the new lock. [ 839.549712][T31131] [ 839.560122][T31131] [ 839.560122][T31131] the existing dependency chain (in reverse order) is: [ 839.569125][T31131] [ 839.569125][T31131] -> #8 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 839.576941][T31131] lock_sock_nested+0x41/0x100 [ 839.582258][T31131] inet_shutdown+0x6a/0x390 [ 839.587337][T31131] nbd_mark_nsock_dead+0x2e9/0x560 [ 839.593126][T31131] recv_work+0x1c2e/0x1d40 [ 839.598049][T31131] process_scheduled_works+0xb5d/0x1860 [ 839.604106][T31131] worker_thread+0xa53/0xfc0 [ 839.609291][T31131] kthread+0x389/0x470 [ 839.613873][T31131] ret_from_fork+0x514/0xb70 [ 839.619001][T31131] ret_from_fork_asm+0x1a/0x30 [ 839.624275][T31131] [ 839.624275][T31131] -> #7 (&nsock->tx_lock){+.+.}-{4:4}: [ 839.631910][T31131] __mutex_lock+0x1a3/0x1550 [ 839.637009][T31131] nbd_queue_rq+0x37b/0x1100 [ 839.642170][T31131] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 839.648294][T31131] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 839.655190][T31131] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 839.661684][T31131] blk_mq_run_hw_queue+0x348/0x4f0 [ 839.667302][T31131] blk_mq_dispatch_list+0xd16/0xe10 [ 839.673007][T31131] blk_mq_flush_plug_list+0x48d/0x570 [ 839.678892][T31131] __blk_flush_plug+0x3ed/0x4d0 [ 839.684342][T31131] __submit_bio+0x28d/0x580 [ 839.689368][T31131] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 839.695538][T31131] block_read_full_folio+0x599/0x830 [ 839.701387][T31131] filemap_read_folio+0x137/0x3b0 [ 839.706972][T31131] do_read_cache_folio+0x358/0x590 [ 839.712699][T31131] read_part_sector+0xb6/0x2b0 [ 839.718011][T31131] adfspart_check_ICS+0xb1/0x960 [ 839.723455][T31131] bdev_disk_changed+0x817/0x1770 [ 839.729433][T31131] blkdev_get_whole+0x380/0x510 [ 839.734899][T31131] bdev_open+0x31e/0xd30 [ 839.739662][T31131] blkdev_open+0x470/0x610 [ 839.744606][T31131] do_dentry_open+0x822/0x13a0 [ 839.749889][T31131] vfs_open+0x3b/0x340 [ 839.754559][T31131] path_openat+0x2e08/0x3860 [ 839.759662][T31131] do_file_open+0x23e/0x4a0 [ 839.764677][T31131] do_sys_openat2+0x113/0x200 [ 839.769891][T31131] __x64_sys_openat+0x138/0x170 [ 839.775334][T31131] do_syscall_64+0x174/0x580 [ 839.780529][T31131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 839.786944][T31131] [ 839.786944][T31131] -> #6 (&cmd->lock){+.+.}-{4:4}: [ 839.794142][T31131] __mutex_lock+0x1a3/0x1550 [ 839.799254][T31131] nbd_queue_rq+0xc6/0x1100 [ 839.804271][T31131] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 839.810330][T31131] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 839.817167][T31131] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 839.823704][T31131] blk_mq_run_hw_queue+0x348/0x4f0 [ 839.829320][T31131] blk_mq_dispatch_list+0xd16/0xe10 [ 839.835110][T31131] blk_mq_flush_plug_list+0x48d/0x570 [ 839.841000][T31131] __blk_flush_plug+0x3ed/0x4d0 [ 839.846368][T31131] __submit_bio+0x28d/0x580 [ 839.851387][T31131] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 839.857529][T31131] block_read_full_folio+0x599/0x830 [ 839.863755][T31131] filemap_read_folio+0x137/0x3b0 [ 839.869292][T31131] do_read_cache_folio+0x358/0x590 [ 839.874915][T31131] read_part_sector+0xb6/0x2b0 [ 839.880184][T31131] adfspart_check_ICS+0xb1/0x960 [ 839.885718][T31131] bdev_disk_changed+0x817/0x1770 [ 839.891247][T31131] blkdev_get_whole+0x380/0x510 [ 839.896601][T31131] bdev_open+0x31e/0xd30 [ 839.901435][T31131] blkdev_open+0x470/0x610 [ 839.906361][T31131] do_dentry_open+0x822/0x13a0 [ 839.911630][T31131] vfs_open+0x3b/0x340 [ 839.916289][T31131] path_openat+0x2e08/0x3860 [ 839.921399][T31131] do_file_open+0x23e/0x4a0 [ 839.926412][T31131] do_sys_openat2+0x113/0x200 [ 839.931624][T31131] __x64_sys_openat+0x138/0x170 [ 839.936982][T31131] do_syscall_64+0x174/0x580 [ 839.942077][T31131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 839.948486][T31131] [ 839.948486][T31131] -> #5 (set->srcu){.+.+}-{0:0}: [ 839.955596][T31131] __synchronize_srcu+0xca/0x300 [ 839.961100][T31131] elevator_switch+0x1e8/0x7a0 [ 839.966398][T31131] elevator_change+0x2cc/0x450 [ 839.972033][T31131] elevator_set_default+0x36c/0x430 [ 839.977756][T31131] blk_register_queue+0x3e9/0x4e0 [ 839.983290][T31131] __add_disk+0x677/0xd50 [ 839.988139][T31131] add_disk_fwnode+0xfb/0x480 [ 839.993320][T31131] nbd_dev_add+0x72c/0xb50 [ 839.998254][T31131] nbd_init+0x168/0x1f0 [ 840.003058][T31131] do_one_initcall+0x250/0x870 [ 840.008370][T31131] do_initcall_level+0x104/0x190 [ 840.013955][T31131] do_initcalls+0x59/0xa0 [ 840.018848][T31131] kernel_init_freeable+0x2a6/0x3e0 [ 840.024573][T31131] kernel_init+0x1d/0x1d0 [ 840.029491][T31131] ret_from_fork+0x514/0xb70 [ 840.035026][T31131] ret_from_fork_asm+0x1a/0x30 [ 840.040299][T31131] [ 840.040299][T31131] -> #4 (&q->elevator_lock){+.+.}-{4:4}: [ 840.048106][T31131] __mutex_lock+0x1a3/0x1550 [ 840.053208][T31131] elevator_change+0x1b3/0x450 [ 840.058565][T31131] elevator_set_none+0xb5/0x140 [ 840.063922][T31131] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 840.070241][T31131] nbd_start_device+0x17f/0xb10 [ 840.075603][T31131] nbd_genl_connect+0x165b/0x1cf0 [ 840.081137][T31131] genl_family_rcv_msg_doit+0x22a/0x330 [ 840.087187][T31131] genl_rcv_msg+0x61c/0x7a0 [ 840.092196][T31131] netlink_rcv_skb+0x232/0x4b0 [ 840.097551][T31131] genl_rcv+0x28/0x40 [ 840.102184][T31131] netlink_unicast+0x75c/0x8e0 [ 840.107907][T31131] netlink_sendmsg+0x813/0xb40 [ 840.113223][T31131] ____sys_sendmsg+0x972/0x9f0 [ 840.118511][T31131] ___sys_sendmsg+0x2a5/0x360 [ 840.123701][T31131] __x64_sys_sendmsg+0x1bd/0x2a0 [ 840.129142][T31131] do_syscall_64+0x174/0x580 [ 840.134263][T31131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 840.140659][T31131] [ 840.140659][T31131] -> #3 (&q->q_usage_counter(io)#70){++++}-{0:0}: [ 840.149250][T31131] blk_alloc_queue+0x546/0x680 [ 840.154535][T31131] __blk_mq_alloc_disk+0x197/0x390 [ 840.160163][T31131] nbd_dev_add+0x499/0xb50 [ 840.165100][T31131] nbd_genl_connect+0x962/0x1cf0 [ 840.170553][T31131] genl_family_rcv_msg_doit+0x22a/0x330 [ 840.176622][T31131] genl_rcv_msg+0x61c/0x7a0 [ 840.181630][T31131] netlink_rcv_skb+0x232/0x4b0 [ 840.186905][T31131] genl_rcv+0x28/0x40 [ 840.191396][T31131] netlink_unicast+0x75c/0x8e0 [ 840.196666][T31131] netlink_sendmsg+0x813/0xb40 [ 840.201938][T31131] ____sys_sendmsg+0x972/0x9f0 [ 840.207248][T31131] ___sys_sendmsg+0x2a5/0x360 [ 840.212445][T31131] __x64_sys_sendmsg+0x1bd/0x2a0 [ 840.217887][T31131] do_syscall_64+0x174/0x580 [ 840.222993][T31131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 840.229400][T31131] [ 840.229400][T31131] -> #2 (fs_reclaim){+.+.}-{0:0}: [ 840.236606][T31131] fs_reclaim_acquire+0x71/0x100 [ 840.242064][T31131] __kmalloc_cache_noprof+0x40/0x660 [ 840.247963][T31131] cryptomgr_notify+0x85/0x930 [ 840.253367][T31131] notifier_call_chain+0x1ad/0x3d0 [ 840.258990][T31131] blocking_notifier_call_chain+0x6a/0x90 [ 840.265584][T31131] crypto_alg_mod_lookup+0x3b1/0x5f0 [ 840.271397][T31131] crypto_alloc_tfm_node+0x13e/0x3f0 [ 840.277210][T31131] crypto_alloc_sync_skcipher+0x39/0xd0 [ 840.283393][T31131] rxkad_init+0x20/0xe0 [ 840.288127][T31131] rxrpc_init_security+0x72/0x120 [ 840.293725][T31131] af_rxrpc_init+0x13d/0x2e0 [ 840.298825][T31131] do_one_initcall+0x250/0x870 [ 840.304101][T31131] do_initcall_level+0x104/0x190 [ 840.309545][T31131] do_initcalls+0x59/0xa0 [ 840.314382][T31131] kernel_init_freeable+0x2a6/0x3e0 [ 840.320094][T31131] kernel_init+0x1d/0x1d0 [ 840.324944][T31131] ret_from_fork+0x514/0xb70 [ 840.330040][T31131] ret_from_fork_asm+0x1a/0x30 [ 840.335316][T31131] [ 840.335316][T31131] -> #1 ((crypto_chain).rwsem){++++}-{4:4}: [ 840.343386][T31131] down_read+0x47/0x2e0 [ 840.348049][T31131] blocking_notifier_call_chain+0x54/0x90 [ 840.354279][T31131] __crypto_register_alg+0x32b/0x3c0 [ 840.360067][T31131] crypto_register_alg+0x447/0x810 [ 840.365682][T31131] do_one_initcall+0x250/0x870 [ 840.370951][T31131] do_initcall_level+0x104/0x190 [ 840.376394][T31131] do_initcalls+0x59/0xa0 [ 840.381256][T31131] kernel_init_freeable+0x2a6/0x3e0 [ 840.386978][T31131] kernel_init+0x1d/0x1d0 [ 840.391829][T31131] ret_from_fork+0x514/0xb70 [ 840.396929][T31131] ret_from_fork_asm+0x1a/0x30 [ 840.402224][T31131] [ 840.402224][T31131] -> #0 (crypto_alg_sem){++++}-{4:4}: [ 840.409771][T31131] __lock_acquire+0x15a5/0x2cf0 [ 840.415134][T31131] lock_acquire+0x106/0x350 [ 840.420139][T31131] down_write+0x96/0x200 [ 840.424898][T31131] crypto_alg_mod_lookup+0x211/0x5f0 [ 840.430699][T31131] crypto_alloc_tfm_node+0x13e/0x3f0 [ 840.436495][T31131] tls_set_sw_offload+0xa33/0x1780 [ 840.442200][T31131] tls_setsockopt+0xef2/0x15c0 [ 840.447816][T31131] do_sock_setsockopt+0x17c/0x1b0 [ 840.453369][T31131] __x64_sys_setsockopt+0x13d/0x1b0 [ 840.459119][T31131] do_syscall_64+0x174/0x580 [ 840.464408][T31131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 840.470815][T31131] [ 840.470815][T31131] other info that might help us debug this: [ 840.470815][T31131] [ 840.481029][T31131] Chain exists of: [ 840.481029][T31131] crypto_alg_sem --> &nsock->tx_lock --> sk_lock-AF_INET6 [ 840.481029][T31131] [ 840.494604][T31131] Possible unsafe locking scenario: [ 840.494604][T31131] [ 840.502213][T31131] CPU0 CPU1 [ 840.507645][T31131] ---- ---- [ 840.513003][T31131] lock(sk_lock-AF_INET6); [ 840.517520][T31131] lock(&nsock->tx_lock); [ 840.524442][T31131] lock(sk_lock-AF_INET6); [ 840.531488][T31131] lock(crypto_alg_sem); [ 840.535822][T31131] [ 840.535822][T31131] *** DEADLOCK *** [ 840.535822][T31131] [ 840.543961][T31131] 1 lock held by syz.3.6623/31131: [ 840.549063][T31131] #0: ffff88806a62ee60 (sk_lock-AF_INET6){+.+.}-{0:0}, at: tls_setsockopt+0x39a/0x15c0 [ 840.558859][T31131] [ 840.558859][T31131] stack backtrace: [ 840.564738][T31131] CPU: 0 UID: 0 PID: 31131 Comm: syz.3.6623 Not tainted syzkaller #0 PREEMPT(full) [ 840.564753][T31131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 840.564762][T31131] Call Trace: [ 840.564770][T31131] [ 840.564779][T31131] dump_stack_lvl+0xe8/0x150 [ 840.564797][T31131] print_circular_bug+0x2e1/0x300 [ 840.564816][T31131] check_noncircular+0x12e/0x150 [ 840.564832][T31131] __lock_acquire+0x15a5/0x2cf0 [ 840.564852][T31131] ? crypto_alg_mod_lookup+0x211/0x5f0 [ 840.564869][T31131] lock_acquire+0x106/0x350 [ 840.564880][T31131] ? crypto_alg_mod_lookup+0x211/0x5f0 [ 840.564915][T31131] down_write+0x96/0x200 [ 840.564930][T31131] ? crypto_alg_mod_lookup+0x211/0x5f0 [ 840.564945][T31131] ? __pfx_down_write+0x10/0x10 [ 840.564960][T31131] ? crypto_larval_alloc+0x1bf/0x290 [ 840.564975][T31131] crypto_alg_mod_lookup+0x211/0x5f0 [ 840.564991][T31131] crypto_alloc_tfm_node+0x13e/0x3f0 [ 840.565007][T31131] ? timer_init_key+0x161/0x2c0 [ 840.565042][T31131] tls_set_sw_offload+0xa33/0x1780 [ 840.565063][T31131] tls_setsockopt+0xef2/0x15c0 [ 840.565083][T31131] ? __pfx_tls_setsockopt+0x10/0x10 [ 840.565102][T31131] ? __fget_files+0x2a/0x420 [ 840.565116][T31131] ? aa_sock_opt_perm+0xff/0x1a0 [ 840.565134][T31131] ? sock_common_setsockopt+0x36/0xc0 [ 840.565150][T31131] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 840.565165][T31131] do_sock_setsockopt+0x17c/0x1b0 [ 840.565185][T31131] __x64_sys_setsockopt+0x13d/0x1b0 [ 840.565202][T31131] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 840.565216][T31131] do_syscall_64+0x174/0x580 [ 840.565229][T31131] ? trace_irq_disable+0x3b/0x140 [ 840.565246][T31131] ? clear_bhb_loop+0x40/0x90 [ 840.565260][T31131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 840.565273][T31131] RIP: 0033:0x7f5dbfd9ce59 [ 840.565286][T31131] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 840.565297][T31131] RSP: 002b:00007f5dc0d05028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 840.565310][T31131] RAX: ffffffffffffffda RBX: 00007f5dc0016090 RCX: 00007f5dbfd9ce59 [ 840.565319][T31131] RDX: 0000000000000001 RSI: 000000000000011a RDI: 0000000000000003 [ 840.565327][T31131] RBP: 00007f5dbfe32d6f R08: 0000000000000038 R09: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 840.565335][T31131] R10: 00002000000004c0 R11: 0000000000000246 R12: 0000000000000000 [ 840.565343][T31131] R13: 00007f5dc0016128 R14: 00007f5dc0016090 R15: 00007fffd1860618 [ 840.565358][T31131] [ 840.866184][ T5635] Bluetooth: hci2: command tx timeout [ 841.045087][T31143] __nla_validate_parse: 1 callbacks suppressed [ 841.045105][T31143] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6626'. [ 841.132161][T31143] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6626'. [ 841.398337][T10141] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 841.419392][T10141] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 841.465945][T10141] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 841.486918][T10141] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 841.602182][T10141] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 841.612713][T10141] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 841.679376][T10141] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 841.689757][T10141] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 841.745008][T27294] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 841.783184][T27290] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 841.802557][T27290] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 841.819300][T27290] netdevsim netdevsim3 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 841.832894][T10141] bridge_slave_1: left allmulticast mode [ 841.840993][T10141] bridge_slave_1: left promiscuous mode [ 841.846740][T10141] bridge0: port 2(bridge_slave_1) entered disabled state [ 841.858418][T10141] bridge_slave_0: left allmulticast mode [ 841.867452][T10141] bridge_slave_0: left promiscuous mode [ 841.873437][T10141] bridge0: port 1(bridge_slave_0) entered disabled state [ 842.173999][T10141] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 842.184252][T10141] bond0 (unregistering): Released all slaves [ 842.191950][T10141] bond1 (unregistering): Released all slaves [ 842.201539][T10141] bond2 (unregistering): Released all slaves [ 842.213176][ T5292] 8021q: adding VLAN 0 to HW filter on device eth1 [ 842.489694][T10141] hsr_slave_0: left promiscuous mode [ 842.495578][T10141] hsr_slave_1: left promiscuous mode [ 842.501963][T10141] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 842.509645][T10141] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 842.521936][T10141] veth1_macvtap: left promiscuous mode [ 842.527987][T10141] veth0_macvtap: left promiscuous mode [ 842.533498][T10141] veth1_vlan: left promiscuous mode [ 842.540109][T10141] veth0_vlan: left promiscuous mode [ 842.622778][T10141] team0 (unregistering): Port device team_slave_1 removed [ 842.640539][T10141] team0 (unregistering): Port device team_slave_0 removed [ 842.688959][ T5292] 8021q: adding VLAN 0 to HW filter on device eth2 [ 843.013515][ T5292] 8021q: adding VLAN 0 to HW filter on device eth3 [ 843.039233][T10141] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 843.074475][T10141] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 843.134732][T10141] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 843.184486][T10141] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 843.278549][ T5292] 8021q: adding VLAN 0 to HW filter on device eth4 [ 843.285391][T27294] netdevsim netdevsim1 eth5: set [1, 0] type 2 family 0 port 6081 - 0 [ 843.294409][T27290] netdevsim netdevsim1 eth6: set [1, 0] type 2 family 0 port 6081 - 0 [ 843.315209][T27290] netdevsim netdevsim1 eth7: set [1, 0] type 2 family 0 port 6081 - 0 [ 843.332985][T27290] netdevsim netdevsim1 eth8: set [1, 0] type 2 family 0 port 6081 - 0 [ 843.349198][T10141] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 843.431969][T10141] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 843.486169][T10141] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 843.549775][T10141] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 843.583119][ T5292] 8021q: adding VLAN 0 to HW filter on device eth5 [ 843.611072][T27290] netdevsim netdevsim0 eth9: set [1, 0] type 2 family 0 port 6081 - 0 [ 843.620644][T27290] netdevsim netdevsim0 eth10: set [1, 0] type 2 family 0 port 6081 - 0 [ 843.634326][T27294] netdevsim netdevsim0 eth11: set [1, 0] type 2 family 0 port 6081 - 0 [ 843.649293][T27294] netdevsim netdevsim0 eth12: set [1, 0] type 2 family 0 port 6081 - 0 [ 843.661887][T10141] bridge_slave_1: left allmulticast mode [ 843.668705][T10141] bridge_slave_1: left promiscuous mode [ 843.674436][T10141] bridge0: port 2(bridge_slave_1) entered disabled state [ 843.684599][T10141] bridge_slave_0: left allmulticast mode [ 843.690502][T10141] bridge_slave_0: left promiscuous mode [ 843.696232][T10141] bridge0: port 1(bridge_slave_0) entered disabled state [ 843.708099][T10141] bridge_slave_1: left allmulticast mode [ 843.713805][T10141] bridge_slave_1: left promiscuous mode [ 843.720204][T10141] bridge0: port 2(bridge_slave_1) entered disabled state [ 843.735965][T10141] bridge_slave_0: left allmulticast mode [ 843.742354][T10141] bridge_slave_0: left promiscuous mode [ 843.748857][T10141] bridge0: port 1(bridge_slave_0) entered disabled state [ 843.920461][T10141] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 843.929628][T10141] bond_slave_0: left allmulticast mode [ 843.942587][T10141] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 843.952226][T10141] bond_slave_1: left allmulticast mode [ 843.958824][T10141] bond0 (unregistering): Released all slaves [ 843.969519][T10141] bond1 (unregistering): Released all slaves [ 843.984072][T10141] bond2 (unregistering): Released all slaves [ 844.100358][T10141] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 844.111454][T10141] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 844.121400][T10141] bond0 (unregistering): Released all slaves [ 844.132471][ T5292] 8021q: adding VLAN 0 to HW filter on device eth6 [ 844.427507][ T5292] 8021q: adding VLAN 0 to HW filter on device eth7 [ 844.671037][T10141] hsr_slave_0: left promiscuous mode [ 844.680897][T10141] hsr_slave_1: left promiscuous mode [ 844.695022][T10141] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 844.721810][T10141] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 844.729976][T10141] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 844.739013][T10141] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 844.755079][T10141] hsr_slave_0: left promiscuous mode [ 844.761142][T10141] hsr_slave_1: left promiscuous mode [ 844.767105][T10141] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 844.774493][T10141] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 844.787629][T10141] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 844.796154][T10141] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 844.810197][T10141] veth1_macvtap: left promiscuous mode [ 844.815688][T10141] veth0_macvtap: left promiscuous mode [ 844.821339][T10141] veth1_vlan: left promiscuous mode [ 844.826649][T10141] veth0_vlan: left promiscuous mode [ 844.832639][T10141] veth1_macvtap: left promiscuous mode [ 844.838219][T10141] veth0_macvtap: left promiscuous mode [ 844.843711][T10141] veth1_vlan: left promiscuous mode [ 844.849363][T10141] veth0_vlan: left promiscuous mode [ 844.987104][T10141] team0 (unregistering): Port device team_slave_1 removed [ 844.998502][T10141] team0 (unregistering): Port device team_slave_0 removed [ 845.079899][T10141] team0 (unregistering): Port device team_slave_1 removed [ 845.090238][T10141] team0 (unregistering): Port device team_slave_0 removed [ 845.145887][ T5292] 8021q: adding VLAN 0 to HW filter on device eth8 [ 845.617334][ T5292] 8021q: adding VLAN 0 to HW filter on device eth9 [ 845.680257][T10141] IPVS: stop unused estimator thread 0... [ 845.840706][ T5292] 8021q: adding VLAN 0 to HW filter on device eth10 [ 846.048727][ T5292] 8021q: adding VLAN 0 to HW filter on device eth11 [ 846.266101][ T5292] 8021q: adding VLAN 0 to HW filter on device eth12