last executing test programs: 12.197329997s ago: executing program 4 (id=4785): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000500)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3b8, 0x0, 0x98, 0x130, 0x1c8, 0x288, 0x0, 0x98, 0x130, 0x288, 0x320, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x1}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x9}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x450) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x8}, {}, {0x5, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x62b9, 0x5, 0xfffffff7, 0x5, 0x3, 0xe1cb, 0x5, 0x1, 0x3, 0x0, 0x1, 0x2, 0x6, 0xacd, 0x0, 0x364, 0x1, 0x2, 0xffffff44, 0x3, 0x2, 0x8, 0x3, 0x6, 0xffffffc0, 0xb, 0x688, 0xffff, 0xfffffffe, 0x2, 0xfffffeff, 0x0, 0xb, 0x5, 0x0, 0x5, 0xffffadc0, 0x8001, 0xf, 0x1, 0x8d2a00, 0x8, 0xf, 0xc, 0x1, 0x80, 0xffff, 0x1, 0x7, 0x0, 0x400, 0xe5, 0x93, 0x2, 0x45a5, 0x8, 0x6, 0x4, 0x0, 0x59, 0x3, 0x80, 0x9, 0x5, 0x8, 0x5, 0x3, 0x9, 0x2, 0x3, 0x4, 0x7f, 0x101, 0xde, 0x10, 0x7, 0x6, 0x7f, 0xfff, 0x6, 0x9, 0xf7, 0x5, 0x2, 0x81, 0x0, 0x6, 0x7, 0x1, 0x437, 0x6, 0x3, 0x2, 0x7000000, 0x5, 0x9, 0xecc, 0x6, 0x4, 0x8, 0x400, 0x7a5, 0x9, 0x9, 0x0, 0x9, 0x8, 0x0, 0x3, 0x7ff, 0x5, 0x6, 0x4, 0x7, 0x10, 0x4001d1da, 0x8, 0xbdb, 0x1, 0x8, 0x8001, 0xe3c8, 0xffffffff, 0xd, 0x6, 0x4, 0x9, 0x7fffffff, 0x3, 0xb8b4, 0x723, 0x15, 0x9367, 0x81, 0x400000, 0x9, 0x6, 0x75, 0x1ff, 0xc695, 0x4, 0xf, 0x7, 0x3, 0x0, 0x3ff, 0x8000, 0xff, 0x4, 0x0, 0x6496, 0x7f, 0x3, 0x0, 0xf528, 0x6, 0x80000000, 0x6, 0x157b, 0x7, 0x42, 0x1, 0x10001, 0x3, 0x9, 0x2, 0x98de, 0x2450, 0x86d, 0x2, 0x7, 0x7, 0xfffffffa, 0x800, 0xfffffffb, 0x4, 0xb6, 0x5, 0x7fff, 0x9f4c, 0x1, 0x8, 0xe, 0x11d, 0x7fff, 0xf, 0x8, 0x3, 0xa, 0x9, 0x9, 0x2, 0x4, 0x2, 0x8, 0x5, 0x5, 0x401, 0x9, 0x4b8, 0xa78, 0xec8, 0x1, 0xfffffffa, 0x80020000, 0x0, 0x0, 0x7f, 0x8c1, 0x5, 0xfffffffa, 0x6, 0x175b, 0x7fffffff, 0x4, 0x4, 0xffff8001, 0x8001, 0xffff, 0x5, 0x0, 0x401, 0x5, 0x10, 0x7fff, 0xffffff00, 0x3, 0x8, 0x9268, 0x80000000, 0x2, 0x7, 0x4, 0x3, 0x4, 0xced, 0x5, 0xa524, 0x7, 0x81f, 0x3, 0x10, 0x80, 0x1ff, 0x1109, 0x9, 0x1, 0x0, 0x2, 0x0, 0x8, 0x3, 0x3, 0x6, 0x4]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x2004009c}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000d80)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000e40)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r10, {0xffff}, {}, {0x2, 0xc}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x81, '\x00', 0xfffff000, 0x31, 0x3, 0x581}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000ec0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000f80)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r11, {0xfff3}, {0x0, 0xfff1}, {0x4, 0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0xdb, 0x7ff, 0x2, 0x9, 0x4, 0x2, 0xfffffffb, 0xc00000}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) r12 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r12, &(0x7f0000003b80)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x35}}, 0x10) setsockopt$sock_int(r12, 0x1, 0x6, &(0x7f0000003bc0)=0x4, 0x4) connect$inet(r12, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r12, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 11.029014677s ago: executing program 2 (id=4792): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000070000000900010073797a300000000040000000030a01010000000000000000070000000900030073797a310000000014000480080002400000000008000140000000000900010073797a30000000004c000000060a010400000000000000000700000024000480200001800700010072740000140002800800024000000003080001400000000808000b4000000000090001007379f6979eb365bed73400001100010000000000000000000000000a"], 0xd4}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000070000000900010073797a300000000040000000030a01010000000000000000070000000900030073797a310000000014000480080002400000000008000140000000000900010073797a30000000004c000000060a010400000000000000000700000024000480200001800700010072740000140002800800024000000003080001400000000808000b4000000000090001007379f6979eb365bed73400001100010000000000000000000000000a"], 0xd4}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) (async) 9.764143633s ago: executing program 2 (id=4793): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r1) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f00000003c0)={0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000500)={'ip6_vti0\x00', &(0x7f0000000480)={'ip6tnl0\x00', 0x0, 0x56, 0x7, 0xe, 0x2, 0x10, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x301187aba831abdf, 0x40, 0xfa2d, 0x7}}) sendmsg$nl_route(r3, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)=@ipv6_newaddr={0x48, 0x14, 0x4, 0x70bd25, 0x25dfdbff, {0xa, 0x20, 0xac, 0xfd, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}, @IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IFA_RT_PRIORITY={0x8, 0x9, 0x9}]}, 0x48}, 0x1, 0x0, 0x0, 0x4008081}, 0x4014) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000002f010000100001800a000200626f6e6430000000140002800800010000000000080002"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, 0x0, &(0x7f0000000080)) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x6}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, 0x1, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}, [@CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c400}, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @multicast2=0xe0001b59, @rand_addr, {[@timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@private}, {@private}, {@dev}, {@remote}, {@private}]}]}}}}}}}, 0x0) 9.409877043s ago: executing program 4 (id=4795): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000080)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000003000000b704000000000400850000003300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newlink={0x44, 0x10, 0x40d, 0x70bd21, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x600b2, 0x40c41}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9, 0x14}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x44}, 0x1, 0x0, 0x0, 0x8840}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x5, 0xe, 0x0, &(0x7f0000000440)="79933ba8190000e5ffa53b00008f", 0x0, 0x568, 0x503, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff80fe}, 0x50) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) r8 = socket$unix(0x1, 0x2, 0x0) bind$unix(r8, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r9 = socket$unix(0x1, 0x2, 0x0) connect$unix(r9, &(0x7f0000000740)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r9, &(0x7f00000007c0), 0x307017fdb7a66cb, 0x3ec0) bind$unix(r9, &(0x7f0000000800)=@file={0x1, './file0\x00'}, 0x6e) recvmmsg$unix(r8, &(0x7f0000000880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40030040, 0x0) r10 = accept$inet_tcp(r0, 0x0, &(0x7f00000000c0)) getsockopt$inet_tcp_buf(r10, 0x6, 0xd, &(0x7f0000000480)=""/195, &(0x7f0000000580)=0xc3) write$nci(r0, &(0x7f00000009c0)=ANY=[@ANYBLOB="6105c307030406100c0a093c485fa7ceae78945b0636010fad22ae99be4e25add679c7343cd9bcd926a8f5ff679cc1cf6e2ef593e8deae82a2e51c8b1af35246f76863e075be7d3e56c021d7f03f1ef4460543e8ad66723693dd2d4b7cef0064440fbabf31341e9ae052fcf2d7c6626af56ddeb54fd5a8ae027a7a468a77fd42fb33ce1b4fd48f6e2fb6edf99915d81a2aaba424d24c0688ff0ff34d7738fcfea92b3e62db63c48045864c7c04780a4c8b41997ed13311753ac78c171ef0a23bbace49e5b2ed"], 0xc6) 8.0053747s ago: executing program 2 (id=4798): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0a000000040000000800000006"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xd, &(0x7f0000000b80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001000000850000002a00000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000c40)={r1}, 0xc) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x10, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000a40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) (async) r2 = socket(0xa, 0x1, 0x0) listen(r2, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000500)={0x0, 0x2710}, 0x10) (async) accept$alg(r2, 0x0, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x6, &(0x7f0000000680)=@raw=[@generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x3, 0x0, 0x0, 0xc}, @generic={0x85, 0x0, 0x0, 0x0, 0x50}, @generic={0x15, 0x0, 0x0, 0xfffb}, @generic={0x95, 0x0, 0x1, 0x2}], &(0x7f00000006c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000280)={'geneve0\x00', 0x0}) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'geneve0\x00', 0x0}) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r8, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x70, 0x1, 0x90, [0x0, 0x0, 0x0, 0x0, 0x200000000100, 0x200000000130], 0x0, 0x0, &(0x7f0000000080)=[{0x0, '\x00', 0x600, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x108) setsockopt$inet_group_source_req(r8, 0x0, 0x2c, &(0x7f0000000140)={0x2, {{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {{0x2, 0x4e23, @loopback}}}, 0x108) (async) socket$inet_tcp(0x2, 0x1, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000700)={0x0, r3}, 0x8) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r6, @ANYRESHEX=r8, @ANYRES8=r3], 0x0, 0x32, 0x0, 0x1, 0x8003}, 0x28) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x50, 0x10, 0x401, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xb, 0xa}}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}, 0x1, 0x0, 0x0, 0x48000}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newlink={0x50, 0x10, 0x401, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xb, 0x7}}, @IFLA_VLAN_ID={0x6, 0x1, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x50}, 0x1, 0x0, 0x0, 0x48000}, 0x0) 7.828792825s ago: executing program 4 (id=4800): socket$packet(0x11, 0x2, 0x300) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x59) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}, 0xc4ca}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "25fd2d990f0981b2", "f511161d94f179ecf85eb61b6a4762eb", "1e59ddbe", "06ed010001809f9b"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x4) sendto$inet6(r0, &(0x7f0000000140)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000180)=0x2100e6d4, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000004680), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000004780)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000005a40)={'syzkaller1\x00', 0x1}) write$tun(r1, &(0x7f0000005a80)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffa888}}}}}}}, 0xfdef) 6.646721256s ago: executing program 3 (id=4801): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000880)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x1a0, 0x270, 0xffffffff, 0xffffffff, 0xd0, 0x1a0, 0x270, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1, 0x7, 0x5a0}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_DESC={0x10, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x8}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x74}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x318, 0x138, 0x5c, 0x160, 0x138, 0x3e0, 0x248, 0x228, 0x25a, 0x248, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, [0x0, 0x0, 0x0, 0xffffff00], [], 'veth0_to_batadv\x00', 'pim6reg\x00', {0xff}, {}, 0x3a}, 0x5002, 0xf8, 0x138, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x12, "d176", 0x1}}, @common=@unspec=@state={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x7fffffff, 0x9, 0x1000, 0x0, 0xe691, 0x4, 0xa, 0x2]}}}, {{@ipv6={@rand_addr=' \x01\x00', @empty, [0xffffffff], [], 'veth1_to_hsr\x00', 'dummy0\x00', {}, {}, 0x24, 0x4}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00', {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x378) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0xc) 6.593639896s ago: executing program 0 (id=4802): r0 = socket(0x2c, 0x2, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) read$alg(r0, &(0x7f0000000300)=""/74, 0x4a) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) socket$kcm(0x2, 0xa, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000002900)=r3, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010029bd7000040000000200000008000300", @ANYRES32=r5, @ANYBLOB="0c009900410000005700000008002600fd1600000800270003"], 0x60}}, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010027bd7000fddbdf252500000008000300", @ANYRES32=0x0, @ANYBLOB="0800357c519600010101010101e768f80000000800000000000000000000004d8fd6d83df2da86a0e32e068df7495f6c6344d3c03b773c27e2b4bb8d9f30f32e3c33d84bc6451f650eafa117c0bcf74b34"], 0x38}, 0x1, 0x0, 0x0, 0x84}, 0x40) epoll_create1(0x80000) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x220c) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x3) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r9, 0x40001) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r10, 0x0) r11 = socket(0xa, 0x1, 0x0) listen(r11, 0x7f) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r12, 0x7) socket$inet6_tcp(0xa, 0x1, 0x0) 6.591041772s ago: executing program 2 (id=4803): ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000340)={{0xffffffffffffffff, &(0x7f00000001c0)=':\'/.*&(\xbd*-%-\x00', 0x2000, &(0x7f0000000200)={@align=0x1, {0x6, 0x5, 0x6, 0x2}}, 0x0, &(0x7f0000000240)={@_ha_fsid}, &(0x7f0000000280)=0xe7}, {[0x3, 0x7, 0x7]}, 0xffff0ffb, 0x6f, &(0x7f00000002c0)=""/111}) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000004c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000440), &(0x7f0000000480)='%pS \x00'}, 0x20) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x21, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4554}, {}, {}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fffffff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x4}, @generic={0x8, 0xe, 0x7, 0x293, 0x4}, @generic={0x9, 0x3, 0x0, 0x8, 0x1e70}, @generic={0x95, 0x9, 0x6, 0x8, 0x7}, @call={0x85, 0x0, 0x0, 0xca}, @ldst={0x1, 0x0, 0x1, 0xffe3bffd80c0d669, 0x2, 0x20, 0xffffffffffffffff}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='syzkaller\x00', 0x4, 0x22, &(0x7f0000000180)=""/34, 0x40f00, 0x0, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x2, 0x10, 0x8, 0xffff}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000500)=[r1, 0x1, r2], &(0x7f0000000540)=[{0x2, 0x1, 0x4, 0xb}, {0x0, 0x5, 0xd, 0x9}, {0x5, 0x4, 0x4, 0x3}, {0x5, 0x5, 0x5, 0x2}, {0x0, 0x4, 0xc, 0x2}, {0x5de, 0x5, 0x9, 0x7}], 0x10, 0x2}, 0x94) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) close(r1) (async) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000680)={{0x84, @empty, 0x4e23, 0x4, 'lblc\x00', 0x24, 0x0, 0x31}, {@remote, 0x4e22, 0x2, 0x28b7, 0xffffffff, 0x8}}, 0x44) pselect6(0x40, &(0x7f0000000700)={0x401, 0x400, 0x0, 0x1ff, 0xffff, 0x3, 0x6, 0xe}, &(0x7f0000000740)={0xfffffffffffffffd, 0x3df8, 0xcf, 0x7, 0x7b7d, 0x108, 0x2, 0x1}, &(0x7f0000000780)={0x2, 0x4, 0x8b, 0x200, 0x5, 0x0, 0x2, 0x9}, &(0x7f00000007c0)={0x0, 0x989680}, &(0x7f0000000840)={&(0x7f0000000800)={[0x6]}, 0x8}) (async) r5 = socket$inet(0x2, 0x80000, 0x8) ioctl$sock_SIOCGIFBR(r5, 0x8940, &(0x7f0000000880)=@generic={0x2, 0x5, 0x1ff}) (async) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000008c0)='pim6reg0\x00', 0x10) (async) socket$netlink(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000940)={0x0, 0x40, &(0x7f0000000900)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x40}}, @in={0x2, 0x4e22, @local}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000980)=0x10) (async) getsockopt$X25_QBITINCL(r0, 0x106, 0x1, &(0x7f00000009c0), &(0x7f0000000a00)=0x4) ioctl$XFS_IOC_OPEN_BY_HANDLE(r2, 0xc038586b, &(0x7f0000000b40)={r3, &(0x7f0000000a40)='lblc\x00', 0x240, &(0x7f0000000a80)={@_ha_fsid={[0x3, 0xc]}, {0x400, 0x9, 0x6f, 0x5}}, 0x3, &(0x7f0000000ac0), &(0x7f0000000b00)=0x8}) (async) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000b80)={0x8, 0x0, 0x101, 0x8, 0x7}, 0x14) (async) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000bc0)={0x6, 0x400, 0x7, 0x4, 0x8, 0x0, [{0xe, 0xd, 0xb, '\x00', 0x1008}, {0x939e, 0x1, 0xc0, '\x00', 0x400}, {0x9, 0x7, 0xfffffffffffffffa, '\x00', 0x2000}, {0x7, 0x2283e091, 0x5, '\x00', 0x402}, {0x1, 0x3ff, 0x800000000000000, '\x00', 0x800}, {0xb, 0x1, 0x100000001, '\x00', 0x2000}, {0x9, 0x4, 0x8, '\x00', 0x4}, {0x9, 0x5, 0x2, '\x00', 0x204}]}) (async) sendmsg(r5, &(0x7f0000003240)={&(0x7f0000000dc0)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(blake2b-384-generic,cbc-aes-aesni)\x00'}, 0x80, &(0x7f0000001f80)=[{&(0x7f0000000e40)="91f6315c7adbe985191136ecad09d3d53bebb0a12a9c86abad1c2cd75adc82adde6588225582f629eaa6cce94602e2179d6acd781bd382d40376cd10a4f8e6933f8ebad201678f64f81ac9c986f2ae12302c3311f57cd23a28b500be45fa23698ed3dfe56e63ca298ad355979e66b5a26170751d3801afdfd0bf4120995e3a282c6eee3ea59e98e0", 0x88}, {&(0x7f0000000f00)="cc6037a8d7f482e286f2d539d1db224883", 0x11}, {&(0x7f0000000f40)="2c7fbbd669e747625161e1332efa83c1de6a35b21c88271706bb195a209513b13eb4fd4ed3c0fe2bf6ad80750bf9e13d3e2609a48aabf6c61defd56203bb", 0x3e}, {&(0x7f0000000f80)="25d54a4dbef2299fd7edbbae43060a8be483dceef821c251f7fe886599d735fe54c9789873fbd54056670fa952dd8dfa1d7546eb81e6b93d36ba96ec33049088e14fb5678a7af7272188cce446827591d7501ffad21db584ce19abb5538d8b60506b15597418dd28b84757d900f4e1c84d5d163c710fb1786d7e618983f69fff15e1a471b1dc97bc9f68fa9e3d2a42c2ccf65595a37d9172284d071be7455063684facc2ef919d8d3ce4cd8f13a5e1a4636839b19691589689e808d710225f338ee8c4e1e79728c4d1545d196461ff9921b76238a34cc3952de23a93a952f909dbd525a72fa91ebb885c74a9170f2744cc1ba11d91b1b1f302927e74a932c86537d4033bcc856671e9fd25c830fdd423f9df9aecedfe23a607a667dc9f29c009c809b2b429739a6879080c78ea8a308fbf9e65c72360678889fd4fdb3700912a61c254e61521136f6609db1b34ea44f65bf1cab4decf4f2f07958f1d1d0a30cb908c2bf748aeec43edbdd946eebf59bac9342271973eb4fcf5a2d98334947c73be7fba90185a95cb89a46b0f9256cbdaebc583ce0e388745d8cc40547bc0d821285518ab179aa77b18f5364d1dca5dedcd35c8c8967266a0030af57188fa3820331e3a3a1825f651b152b18ec9bf358f5fc1faba5dbad1517ad212a31388cb8d6d019cd09b6d764e68827ad9fa5ef55b7951f35da9de89ef7ac97d0d08513853b3bb5946bc2a917fa3135fdfac5209bce71a5af6100556419431813efe6e2a54dfd04982344f5085883ad5626061072b3e7a253adc417a5681d428a28c9bc9e58d0e7225c64f571408ff0949bc753eb833054d00dcdc3e0245c90d96afa9516acba63f88a6076f261dc343d2232895154e6d7b24180affe3427622731e23bdad8342cc956c6c7e0a64054b2b60c18f9ae8056a3c76d297cb8520909e1323deac2aa02c0e49055fa9cda5b087d7f052af71474feac9cc1e7594c3aa8adaa82aad59e38e3ce0739a1fe85ae3f5656ac2857e495bab4aca9e64d012db358569bf4a710433ab96f57771ba747050ce564a9884c3963f4e2cdf9e9b709e621f4ac15daa2613e3ef466cc5d4485890b2eaf59cbbed6cf0d814c01b68acea6f020b8598a5acfb418d39ca2896f14be59ffe084b0b4109edcff7e47d68c2ce7eb5596ae301642154e4fafc02b2f57d3fb1b3e095002e2c04d7784259a78773b27b84da768c37401986434d27ff6a913d9484cd4a4966922c87caae76cc849fe2fce4315e1e0021a497b37378eb4eee0dfd4fb37d4ce80af0f6d4f50708b4e0832bf2ebf05c3deb805e8a41fed5603cc489571a3a9ef4550ade9835673e5cc2ce9108bbe33b9d3e9898b5100c336d0a98493363f4e27c55267a957090c1c1de188ae2dd800539da7306df9628083b216e8b5144aa0ff4d241e41e3a503efbc9eb11a67772ed9c6fadd9f5a8f894d2bebc2c7c388f9372efa95555e670d0c9bae08aea0b28baf6278516ce65716d1a3bb42f379ae559a06658fc5f8a44faa9955e6d6b8c764ca712a45a45454d00e29bc8dcaab4e434f4c1ca336dea77cb30038691ea0694515a75e82e69f8e66c06671f058541c190e62d501fdd85e15980a890acbed8ac1b93e9c67bd75036b1a1e7ff44030f70d8443bfde51109f44c14f07aa9c635408cbe0ed1404de8fe0611fd9df969aa1ff6a93dc85c9d8c86c8e2f7eb6edac2e6e0dd7cfc124dbe522a822fe6f6271e0950b6c157a39898528256e029bc06e1e636af11c292f99fd5950dec3fd91a7cc5856f7551459eab1b4899da35916afe6e4b3c031c4743c708f5ef82a1db6355e9ba3d87387af86b3cbc3e5c99655629917321afd01def74cfcbb3bf204a4c708a7216a27150b4323684484fc01dee810be98d4cfc4e73d145b96afa63b5b8041039e3e761d13ae4e1bd9f45ba129e075f0b48d7b0119f33bebf24c0b5708786c281bd4a4dfdee8460935776692b8a1de76e8b27bb8ae9051cd3a566488eb40ae4ed2480b9bd5f54b8f97f1f9c59aee710d4fa9820f8e213bceaca54a22d8a5b366fb8c2e64983a68f867ac47921d3e0365736c2c30ca9c48cf159208b6f3b250b4d720903c6c0c48bd7c9652bca28853d09725b590a161183a17163de796f842dcf419f08968700a78975901731c50bd80271efd3db879c817c845e638daca49c62a046e1b47daa0665b8bd14a996479186f8d520ed8a049eaac7d7a5cdc84a0b0dc94829658d803590a9cc490228cd75c34d89a850e6dd3a71a6b7da1162999100bccf301b88c30f4082560c092d2bf2ada891c156793378b37c5b71364a2e9ad2faf12c06f80f03887a044ba07bb041b9a943601c6360f17bce0ca5a1c56f7787d4e4231b152e00c66803d4b31a2a578c00c9dbfe03ad559b9447fc460e931b0596c5cc8de259dfeced50e58c341ead90e5a1f14f42691395ed9ac9ff6395701d8487e1a0918b1e0d9aeacc4a48e8409e363884da16f7752cbec9a92fd9995d81456f416b130a5d9892eb0ca4afb010ecde12e0557f8607b986138a81dce5018140394c70680e64637370cc3e4f928479df9c592e73cfd588949eb43bc7a09748484f78b885dd87f48bf194acaeaf81ba1f8cda22056215437ce8a5647eed53e5399ecf46fc0126d34cdc49450fd1e4cd03d81773e391b8ffc223316f5f16e52f34e00cb9c2b6efb71015c1c860dca2bc81cb0f1c7ac7dab7479a4f98100523575b1a93144e99e43aca8f299322d15805d3d13297ec5ae76ac0cbb98cb82a643a73619a16e3e46af4e04f5a9b4e6d9e63dc47d66bc1a11903ada3c06d13f6a06ada339edfd4a2fc6b0b57c5541d4b03fc454011cba6ae5ec373e27881542cd6651feff6e42fcff0f54c5a235817ea6d581a6568237fd0f528ec34199600e520c9afc45c63fc0f0c827e00355d61133c38440445f535f400be84ffe008635bdff683e36319f3fea69eeec069ddc004a909a4a2598fc9097ef8586a6a0430dc7fc35a28236223adeb8bd3931a6b6f57f0c4d40d7956e37d7eab31af69f5e9ac338514e58d941ee9f671bcd6cdc8b6f09ddd0555ce96be6061b78fb6e28a136bea6c04ab309d9cb0578383919c776685c970e1046b7af1890b8bf1a5a18c2db3d214d403ecbb5afc9a6ac1ccd5e6b8aad70ccb34b814495c98e6505286a4cae93f9955094dce7ac4299308f9433c1d54af49ae3a4f0140c61dcb77b1f88bc394d2d8e0685b26f9a674c6c7479693acabb8d62efaeef991856a853c49a131eb32ef041de6f34b7d5ebde378d1c14db5ad76056aa0149ecd10a5fa1c47ff98f3d230c1c025a5d78054029aa8504929f0a4fa162f07be7a10682b656897f042761e86ef79e50d6d9a27a110e4650e19b541c95dd53b7da2e82b66729e5d15f75071d931fd217ee26548e1f11bfeeeb9876e2613226d140064f3728b10711295684e39e62d7e0e53744655eda82462913a952609f8dfce35ffb2f3d36c29f51b65b96a020eb04b677c175d57673bebb15d1281d6edec77cf4c13fc5d8ef23c34fd9dd90cedd7ee7acb3914a9fc121be6816ca5c0646525c895557c702e5891544140ac0a64414f9d9a2500e85aa1451b5d1b9aa6aa13004881e111349281d44ebd10e52c38c910d1defc7a4bd497e5f09e8a96cc4bf352b4ec97626a87393ed543561850380880e841ca7bb151e19b1de4f7cf7501d2f14b85df18757c21d29d56c709190526ecee4a015d78bf8bf0072de476a054e1098d3e8f4f8d45fdfc0fffd50a7921329e7ab2f4ade573d3bb770a8da91d354217b4d7650765f1fc0751156764a9f7868707ff0a92604c794ed29a1157dd88870dd85df23ead571228936eb95881311b42f1e3eb3dc76786946573567d3f0f87072fe5fac38e07d130d45d919796bb7a8096b94284b8345bbaf3249b7bde61bb6eadda2cf0a35fdf9c2e526bd8aa6b9502c278edd9ff02cacff8da0ab08d0fd0bc4126a6b0f28efb2d72cf2f306faa97ce5a451b4bd20167688cf8951db161f0dd5a2d77e3cb9e5a3bafd9dd24ecd598c2cc79162b6a63cb755c29f39fc68b870ac0ae5f95f2624a6c5fb2b7d0b0de5df9eaf1f9a6e0bd13b47e480e9d3714f31f7e73b5869ac161bddb3a1de89487472d87ebfb73c85f074ab1bd75da741936d16c8a57efc92d736caf4a3b4f6943da199809d9ffb0b63a25f8f50f7d94b1b500986f2a6ffbf83dbcc5f12001d1c396f4a7fffe032313662cddd437162ebcafbe2a1d495edb257d7de5d64c877b618e6a6c77c6ecde8df58ab84283a4b903cf7be48a2cce952a46f022415d81a85c700fe3f4301a99c7c170d6c37875d18a3acb01746cc14529f7e635b1450dbe3e5a38385983fd172d79ad8b8450051e5b22671a6d4179dac53e9c6529d2a20b89506aa8934120dfddb940bd1c7f9e8951fb615822f58759c2f51fb79cd6fe0408db25a5e5af48f093a765c97b4c5d7ac3dea67acc032e38619162728f2e3bd50124c5fe7aed005b31a7515b66d1e93488d9fb191f4e66fa029edc8e07d5c6127d9a1e1336050840abc89050a619b1513b34269f77214f7cd188d77bbfff2983ba9da34a99cda32f86e845eaa968c155b3cc2433364f8c49200f752bb2deb038605a2a701fca2ed2afe1f488738069bdbd784241d27f2bddda94479f1fa72c9c3f8ad67aef1c8c1a0e78198a34993b0a2f6a486cd633de71abf055de8f1bf9a7eccc2baeedb13428ccbe5d598b2f851d4645891d331c1205e85e4e0a1c1ce6c198dbb8205df2faae358031c001a5b104c7f8fd45d584e57fbe7ae79328f4290a1e53bdda45fbf5892492edf9c14d630dd4c41d4b4b96a1d6ecc11935f9acbb08119139eb9618d530a0c91e5b07addf9cc5de7ef2755eb99fb56d562a398abdbecd4aa6752f4ab8c9c577fa0681a79c529a875bcd73cbf86a8b1828420777c990ae341f18981d020c908607208a5d373d77da1c17002068649144c47f0791fc489ce0540f2ea918eb506bc033a08d53ca6e32c6b4c80e945b451b903ec4c2eaac98d7104b1ad12fe217ff8d3daf9d3cde51402346a55f178557cb3d0aab356bfea12411476bd956f1d7d8cd2916a64ab656abf649f84c8d59a54aa333a513aae6abb0b201e31ffba0fa7316918ec1d5ea9014c0424c2b8724f426a2731e834e0e74d6dbf175ef1dac412f51ab0b9dc5b344ea55314606411f810ac89f3ece0ba1670cfd77cf48adcf50994c9e85feca162a78aca62d0ff29b6e3c2f482daab869ec30871234953e9658f62a72a9d8130eb92ea3c86ab6a47bbfe42e97dc7faba42dbf2c417cbbbc8c12f1e2a38e64f18d6f55afeb1bc756639ef2f8974ec53238623cd89705007b9a0be29f2a50f0c5842198fa735e94a31a8a2cf9c80867a0d0658d46fdbad04f3f24d56b3758761425e1be76876d694e016aef7b4c3cd820f77bf58bbc14488f9e6d9cb5e7736c8b1ecbc5584797f72276004d038008c7dfab11811c1613271e3c3b9ad317b30fd0685eeef184800ffdd53542123638bb5d1575678eb05fd946969d0eb1d70d5a8e7e78bc43b1245360c99c960ee0c70544b27f709942e37b2f0dddde6454cec4eb52e7f12a3193e24d952d9ea469ba6cbf63f2e299099927bd281ba0fd30eddeae7f61ea755c961914fd1040895367d3e232627708e8c46040c80daddef0e4408c7f694b0b77d71e92a84e2c26db4f4a6d031fa8404504f1f7f62dbc4e00442e62f816e02f4ef5bea03008620dd9b50daf92cec80d29be165e699285337b70a4b9", 0x1000}], 0x4, &(0x7f0000001fc0)=[{0x88, 0x113, 0x6, "ae2207c25a00d70fa46f75de87721005a9741697d1980d8bdc7cad20e2321cbc796fb528fe1fd586f1b0e373e2c181a40d5c914dddd835e425a7836357cbd897d99dbb683f6e390c56b0f114d5c27fc2d37599af5698ad340f765f9e62db195c0d78582fa38904ae8b7b4538a16abf248711bc"}, {0x90, 0xff, 0x0, "110a6778aa97039af30e508f824808432f322a90565077b325e635214cb24ebe141cb43bec22563cdceb4cb4c6552c61eb95f12d87271db7a94fef067fc1d3d54d1dbef0e2f48c67c2dbc085eee3419bcaacda1a60977ccb4f6d55f68d65335d047baafd974f289ef363e33354f82733d4b7b1c91c69c1729178e062921e4dc1"}, {0x98, 0x108, 0xe, "3f4dcc39f0a6d7a0af76180aecf2d6fad314d17f095fcadcac78d4aa2f128c5817b903825c6dad3ff3d6c1f893331b95ca6d9fdc8a890bad2cf7db23d5f0b574e7a839c303300eedc39d27b6f5a775a4b15c04500fbc9bf46c15a4e255c17c9e15cd3b17c38cc9999624f5fbd19ca5adf24586a5eac8ec66bccd1c7a8dcdb9adad0f6f2b"}, {0x1010, 0x10d, 0x61a1, "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"}, {0x90, 0x10c, 0x8, "167f927e45fed9d9e89598be99621f13e7d743c532a751650a55ffc9cde3531338939e1c7c192525e737f9835aeff2c35af59056d301a4c6a412bdbcfec4ecd257101eb75c1c50f516ae2459627972c0742fdf526d34884c66498978196ff33db375efc9a2f803fe0b9f06e82208ebce71a409e2d4d0dad4f26e1fadb6f2"}], 0x1250}, 0x20000000) (async) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000032c0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000003380)={&(0x7f0000003280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003340)={&(0x7f0000003300)={0x3c, r7, 0x0, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4044000) (async) socket$pptp(0x18, 0x1, 0x2) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000003400), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(r8, &(0x7f0000003500)={&(0x7f00000033c0)={0x10, 0x0, 0x0, 0x800010}, 0xc, &(0x7f00000034c0)={&(0x7f0000003440)={0x64, r9, 0x100, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast1}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x4008000) syz_genetlink_get_family_id$ieee802154(&(0x7f0000003540), r8) (async) bind$inet(r5, &(0x7f0000003580)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x35}}, 0x10) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(r0, 0x84, 0x7a, &(0x7f00000035c0)={r6, 0xffffffffffffffff}, &(0x7f0000003600)=0xc) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000003700)={r6, 0x94, &(0x7f0000003640)=[@in6={0xa, 0x4e22, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, @in6={0xa, 0x4e24, 0x4, @mcast2}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1a}}, @in6={0xa, 0x4e24, 0x3, @loopback, 0x22}, @in={0x2, 0x4e24, @multicast1}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000003740)=0x10) (async) ioctl$XFS_IOC_FSGEOMETRY_V1(r5, 0x80705864, &(0x7f0000003780)) (async) socket$rds(0x15, 0x5, 0x0) 5.739628104s ago: executing program 3 (id=4805): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000500)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3b8, 0x0, 0x98, 0x130, 0x1c8, 0x288, 0x0, 0x98, 0x130, 0x288, 0x320, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x1}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x9}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x450) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x8}, {}, {0x5, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x62b9, 0x5, 0xfffffff7, 0x5, 0x3, 0xe1cb, 0x5, 0x1, 0x3, 0x0, 0x1, 0x2, 0x6, 0xacd, 0x0, 0x364, 0x1, 0x2, 0xffffff44, 0x3, 0x2, 0x8, 0x3, 0x6, 0xffffffc0, 0xb, 0x688, 0xffff, 0xfffffffe, 0x2, 0xfffffeff, 0x0, 0xb, 0x5, 0x0, 0x5, 0xffffadc0, 0x8001, 0xf, 0x1, 0x8d2a00, 0x8, 0xf, 0xc, 0x1, 0x80, 0xffff, 0x1, 0x7, 0x0, 0x400, 0xe5, 0x93, 0x2, 0x45a5, 0x8, 0x6, 0x4, 0x0, 0x59, 0x3, 0x80, 0x9, 0x5, 0x8, 0x5, 0x3, 0x9, 0x2, 0x3, 0x4, 0x7f, 0x101, 0xde, 0x10, 0x7, 0x6, 0x7f, 0xfff, 0x6, 0x9, 0xf7, 0x5, 0x2, 0x81, 0x0, 0x6, 0x7, 0x1, 0x437, 0x6, 0x3, 0x2, 0x7000000, 0x5, 0x9, 0xecc, 0x6, 0x4, 0x8, 0x400, 0x7a5, 0x9, 0x9, 0x0, 0x9, 0x8, 0x0, 0x3, 0x7ff, 0x5, 0x6, 0x4, 0x7, 0x10, 0x4001d1da, 0x8, 0xbdb, 0x1, 0x8, 0x8001, 0xe3c8, 0xffffffff, 0xd, 0x6, 0x4, 0x9, 0x7fffffff, 0x3, 0xb8b4, 0x723, 0x15, 0x9367, 0x81, 0x400000, 0x9, 0x6, 0x75, 0x1ff, 0xc695, 0x4, 0xf, 0x7, 0x3, 0x0, 0x3ff, 0x8000, 0xff, 0x4, 0x0, 0x6496, 0x7f, 0x3, 0x0, 0xf528, 0x6, 0x80000000, 0x6, 0x157b, 0x7, 0x42, 0x1, 0x10001, 0x3, 0x9, 0x2, 0x98de, 0x2450, 0x86d, 0x2, 0x7, 0x7, 0xfffffffa, 0x800, 0xfffffffb, 0x4, 0xb6, 0x5, 0x7fff, 0x9f4c, 0x1, 0x8, 0xe, 0x11d, 0x7fff, 0xf, 0x8, 0x3, 0xa, 0x9, 0x9, 0x2, 0x4, 0x2, 0x8, 0x5, 0x5, 0x401, 0x9, 0x4b8, 0xa78, 0xec8, 0x1, 0xfffffffa, 0x80020000, 0x0, 0x0, 0x7f, 0x8c1, 0x5, 0xfffffffa, 0x6, 0x175b, 0x7fffffff, 0x4, 0x4, 0xffff8001, 0x8001, 0xffff, 0x5, 0x0, 0x401, 0x5, 0x10, 0x7fff, 0xffffff00, 0x3, 0x8, 0x9268, 0x80000000, 0x2, 0x7, 0x4, 0x3, 0x4, 0xced, 0x5, 0xa524, 0x7, 0x81f, 0x3, 0x10, 0x80, 0x1ff, 0x1109, 0x9, 0x1, 0x0, 0x2, 0x0, 0x8, 0x3, 0x3, 0x6, 0x4]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x2004009c}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000d80)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000e40)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r10, {0xffff}, {}, {0x2, 0xc}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x81, '\x00', 0xfffff000, 0x31, 0x3, 0x581}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000ec0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000f80)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r11, {0xfff3}, {0x0, 0xfff1}, {0x4, 0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0xdb, 0x7ff, 0x2, 0x9, 0x4, 0x2, 0xfffffffb, 0xc00000}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) r12 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r12, &(0x7f0000003b80)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x35}}, 0x10) setsockopt$sock_int(r12, 0x1, 0x6, &(0x7f0000003bc0)=0x4, 0x4) connect$inet(r12, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r12, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 5.157460831s ago: executing program 2 (id=4806): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x7, 0xb, &(0x7f0000000080)=@raw=[@map_idx_val={0x18, 0x2, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, @cb_func={0x18, 0x9, 0x4, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x1, 0x5, 0x5, 0x2, 0x40, 0x4}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x1a8, 0x0, 0x0, 0x0, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @alu={0x7, 0x0, 0x0, 0x6, 0x6, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], &(0x7f00000001c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x2, r0, 0x8, &(0x7f0000000280)={0x3, 0x5}, 0x8, 0x10, &(0x7f00000002c0)={0x4, 0x5, 0x3fe000, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x1, &(0x7f00000003c0)=[r1, r1, r1, r1], &(0x7f0000000480)=[{0x0, 0x5, 0x0, 0xc}], 0x10, 0xe}, 0x94) recvmsg(0xffffffffffffffff, 0x0, 0x1f00) (async) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) (rerun: 32) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000001d40)={'syzkaller0\x00', 0x1}) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000001d80)={'syzkaller0\x00', 0x0}) r7 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000001dc0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r5, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001e40)={&(0x7f0000001e80)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001f00)={&(0x7f0000001f40)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x1, 0xfff8}, {0x1, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x9, 0x6, 0x5, 0x1}, @loopback, @multicast2, 0x0, 0x8001}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0xfcb8}}, 0x8880) (async) write$tun(r4, &(0x7f0000002000)=ANY=[], 0xfdef) (async) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r9, 0xfffff000, 0xe, 0x0, &(0x7f00000007c0)="61df7100c80400d5721ff59fe864", 0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 32) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000900)={@ifindex, 0x11, 0x0, 0x4, &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000840)=[0x0, 0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000008c0)=[0x0], 0x0}, 0x40) (async, rerun: 32) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b40)={0x18, 0x4, &(0x7f0000000980)=@raw=[@exit, @call={0x85, 0x0, 0x0, 0xbe}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x4}], &(0x7f00000009c0)='syzkaller\x00', 0x76, 0x1000, &(0x7f0000000a00)=""/4096, 0x41000, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000001a00)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000001a40)={0x2, 0xf, 0x0, 0x4}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000001a80)=[r1, r1, r1, r1, r1, r1, r1], &(0x7f0000001ac0)=[{0x0, 0x2, 0xf, 0xc}, {0x0, 0x1, 0xd, 0x8}, {0x4, 0x1, 0x2, 0x2}, {0x0, 0x1, 0xc, 0x1}, {0x3, 0x1, 0x9, 0x3}], 0x10, 0x3}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001c00)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="2f00000018000000", @ANYRES32=r9, @ANYBLOB="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", @ANYRES32=r11, @ANYBLOB, @ANYRES64=r10], 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB="bfa200000000000007020000fcfeffff620200000000000018110000", @ANYRES32=r1, @ANYBLOB="000000000000000085000000010000001500070000001100bf06000000000000bf610000000000000701000004000000850000005d000000bf610000000000000701000004000000850000005e000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.657523894s ago: executing program 4 (id=4807): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x28) getpeername$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000004c0)=0x14) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000540), 0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000580)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x8, '\x00', r1, r2, 0x2, 0x3, 0x4}, 0x50) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x8, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x5, 0x2}}, @ptr={0xa, 0x0, 0x0, 0x2, 0x4}]}, {0x0, [0x2e, 0x61, 0x61, 0x61, 0x30, 0x2e]}}, &(0x7f0000000300)=""/106, 0x44, 0x6a, 0x1, 0x37, 0x10000, @value=r5}, 0x28) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x50103}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000500), r0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x58}}, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, 0x0, 0x0) 4.015175595s ago: executing program 0 (id=4808): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40800) sendmsg$NFT_BATCH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000000e000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000001b701000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x22}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="000000001f7e4f038212550b9dc9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 3.913094171s ago: executing program 1 (id=4809): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r0, &(0x7f0000000000)={0x23, 0x4, 0x1, 0x2}, 0x10) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0xfffff000, 0xe, 0x0, &(0x7f0000000440)="882f1242a03c3f98722780b605a7", 0x0, 0x375, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) connect$phonet_pipe(r2, &(0x7f00000001c0)={0x23, 0x10, 0x8, 0x3}, 0x10) bind$phonet(r2, &(0x7f0000000040)={0x23, 0x14}, 0x10) bind$phonet(r1, &(0x7f0000000180)={0x23, 0x4, 0x1}, 0x10) syz_emit_ethernet(0xe3, &(0x7f0000000200)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb86dd6000000000ad0000fe8000000000000000000000000000aafe800000000600000000000000000000aa73030000000000000502000007180000000304090600000000000000000000080000000000000000983ef907cf0fdf3c1884fed50816e30ed00439d26128ba37f184054e4596458a6ae9849af9b740ef12c629ba2e6993e457381bd7d46a7be981eb84f29db24b428ea14ca90c624e10680e85e32cee70c6f3c22f118d2e0b90812ecf96cbf911514212a5fc37715fae9c6b887368cadfd0586d0d2c3a3f8a2bbe010000005a1c3e5001efd7ff"], 0x0) 3.318878526s ago: executing program 0 (id=4810): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x3, 0x8, &(0x7f0000001080)=ANY=[@ANYBLOB="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"], &(0x7f00000021c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) writev(r0, &(0x7f0000002200)=[{&(0x7f0000002240)="5cde63ab30", 0x5}, {0x0}], 0x2) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0}}, 0x80) socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x6, 0x4, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x16, 0xc, &(0x7f0000000980)=ANY=[@ANYBLOB="180000000000000000000000000000007a0af0ff00000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffffbfa300000000000007030000f0ffffffb7040000ff070000850000000200000095"], &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r2, 0x0, 0xe, 0x0, &(0x7f0000000ac0)='\x00'/14, 0x0, 0x3b66, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000b00), 0x4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000b40)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000b80)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) writev(0xffffffffffffffff, &(0x7f0000000bc0)=[{&(0x7f0000000c00)="2e9b3d0007e03dd65193dfb6c575963f8864", 0x12}, {&(0x7f0000000c40)="1100f8ae", 0x4}, {&(0x7f0000000c80)="00050090b4", 0x5}, {&(0x7f0000000cc0)="237f7c", 0x3}], 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000d40)=@hci={0x1f, 0x0, 0x12}, 0x80, &(0x7f0000000dc0)=[{&(0x7f0000000e00)="62042720920101000001ad2f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a710292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9a4de33", 0xda}, {&(0x7f0000000f00)="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", 0x114}, {&(0x7f0000002280)="0a985d7879f1bbff16c7d66e33657e452299fd0ef8c2afda588eb05891b7da030e01452a7986bea19b59c98dc2996c0ea09604d00ea48336d0c813d83025aca8623a5915ddddce2c11c5e374f2e0f387d2398fe0b899ff60dc7a73addcf253cf32aafbe2b9f90799e7fc583bdd9b564697ba988080270bdceb4714219a2d4c229fffb0d86fb286e3553a8b3ac02badc66ada5fceabe5f63c79da96e641a45901128063d6e1e31b11bcfbc3e70bd3c8c6c0be9f653f977f16", 0xfff0}, {&(0x7f0000002340)="6f4720baeb54", 0x6}], 0x4}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000002380)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000002400)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0x2}, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x20004004) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000024c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000002500)={0x0, 0x0, &(0x7f0000002540)={&(0x7f0000002580)=@newlink={0x50, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x11d15}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1a, 0x1a}}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x50}, 0x1, 0x0, 0x0, 0x28041}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000002600)={0x0, 0x0, &(0x7f0000002640)={&(0x7f0000002680)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20, 0x29}, {0x0, 0xfffffffffffffffc, 0x9, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x200000000, 0x0, 0xffffffffffffffff}, 0x7}}, 0xb8}}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f0000002740)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000027c0)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0xfffffffd, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x97, 0x0, [{}, {}]}, [{}, {}, {}, {}, {}, {0x448eade7}, {0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x0, 0x20000000, 0x0, 0x0, 0x3}, {}, {}, {}, {0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x9}, {}, {0x1021}, {}, {0x0, 0x0, 0x80000000}, {0xfffffffc, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {}, {}, {}, {0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0xfffffffe}, {}, {0xd5}, {}, {}, {}, {0x9}, {}, {}, {}, {}, {}, {0x0, 0x10}, {0x80000000}, {0x8eb9, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0x0, 0x4, 0x0, 0x7ee}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x9}, {}, {}, {}, {}, {0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, {}, {0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x8}, {}, {0x4, 0x0, 0x0, 0x0, 0x6}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {0x0, 0x0, 0x0, 0x4, 0x2}, {}, {}, {}, {}, {}, {0x10000}, {}, {0x0, 0x0, 0x1}, {0x0, 0x0, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x7}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x3}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000036c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000003740)={&(0x7f0000003780)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) 3.254768485s ago: executing program 1 (id=4811): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000540)="cab9540700000007000400b55467", 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.073361136s ago: executing program 1 (id=4812): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f00000000c0)='%pB \x00'}, 0x20) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x29, 0xff, 0x3, 0x0, 0x0, @private0, @loopback, 0x7800, 0x7, 0xfffffff8, 0x4}}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r0}, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="2100000000000000000000002c00000000040200", @ANYRES32=r2, @ANYBLOB="0700000000000000000000000000000000000000f77601778cec9120030000002aa339e3996e4fa1260606b001a1b66200f40473817a0e91eae396b1fa136bbb9727103330b4e1dd0dd7d1db724e04b27e229f16d7057d28", @ANYRES32=r3, @ANYRES32, @ANYBLOB="01000000030000000200"/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, &(0x7f0000000200), &(0x7f0000000240), 0x800, r4}, 0x38) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000980), r5) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000d80)={0x30, r6, 0x11, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x30}}, 0x2000c110) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x3a, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[], 0x128}, 0x0) r9 = socket$pppl2tp(0x18, 0x1, 0x1) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000006c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r11, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000009c0)=ANY=[@ANYBLOB="1c514b0a9302f2fae2ad7de842bf61a09aa23ae02058a7a3a7bed44a001c3e82b4b3fdec5f04218788ebc6e2bd37678c", @ANYRES16=r10, @ANYBLOB="010026bd7000fcdbdf255300000008000300", @ANYRES32=r12, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x4000010) recvmsg$unix(r7, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x50}, 0x12080) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[], 0x48) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1f, 0xd, &(0x7f00000007c0)=ANY=[@ANYBLOB="180085000000a8000000181100"/28, @ANYBLOB="6c5592fea70c31c452a03816c7973c12246f3a180f58f22d2cb53fa690f238489cb17bf61577d13dba490fccdca8bdeb2bed7f5150ace78ef8a86bf9ee0a30b15edf4473405c19177838c04d678bcacd420c05c4476890d48c26ac10b65141a44f428f4d6040b87df8f591498b45a6e59b82e999ef6a848509863b47d9e6e067718d144856a1f403ef7c7d0b6eb8cb7c4cd25c2d17eba702b7f9f89eb4abdc97d62127dc357972c0f6fb4648636f6d8145445952b854e6f95cea428da60dffb21563f9376373ab324d1c7a0273328f9710a622ced27b23bea1a2290d5dc188bb0aa4ba1795d2", @ANYRES8=r11], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x4010, 0xffffffffffffffff, 0xffffd000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x11, 0x13, &(0x7f0000000dc0)=ANY=[@ANYRES16=r14, @ANYRESOCT=r13, @ANYRESDEC=r10], &(0x7f0000000bc0)='GPL\x00', 0xfffffffe, 0xea, &(0x7f0000000c00)=""/234}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000780)={r14}, 0xc) r15 = socket(0x21, 0x4, 0x0) getsockopt(r15, 0x200000000114, 0x2718, 0x0, &(0x7f0000000480)) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000300), 0x6c, r4}, 0x38) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000000)=0x5, 0x2) sendmmsg$inet(r0, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000) close(r1) 2.557693896s ago: executing program 3 (id=4813): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt(r0, 0x5, 0x7fff, 0x0, &(0x7f0000000140)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x5, 0x5, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd0ffffff, 0x0, 0x0, 0x0, 0xd0ffffff}, [@ldst={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff0}, @ldst={0x6, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff}]}, &(0x7f0000000100)='syzkaller\x00', 0x6}, 0x94) 2.355897297s ago: executing program 3 (id=4814): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4008804) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$sock(r0, &(0x7f0000000780)={&(0x7f0000000500)=@vsock, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000580)="7e1d6dd4c542cd91e16413fe6faa55f95fd6a807e57e531343b9df40b59dc1615f7590a7", 0x24}, {&(0x7f00000005c0)="531b860de6155f94575eaa5878cd23b7c9b395aed5a91b0ad5ca0d86f99ff7cb59b1820082d330eb55b77225e9d2c0f856d46a2774104d86ea7a390b6ef409e090", 0x41}, {&(0x7f0000000640)="8f38b02ab7eaae65d0a3ba6c1d178ea93393b0c700e1d96b7b50025fef7a665bf6c3eb3669f956b1e666477a6a1f12ef814b0b6c06ee77751f1f093d0a218cea4ed23bf4f1178dc50b70033eaa1711cbeb77a54e9449d3", 0x57}], 0x3, &(0x7f0000000700)=[@mark={{0x14, 0x1, 0x24, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x7fffffff}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x200}}, @mark={{0x14, 0x1, 0x24, 0x8}}], 0x78}, 0x4000) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000180)='%pB \x00'}, 0x20) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'ip6gre0\x00', 0x0}) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000440)={r0, &(0x7f0000000240)='#\x00', 0x40c080, &(0x7f0000000380)={@_ha_fsid={[0x9, 0x80]}, {0x0, 0x800, 0x7fff, 0x5}}, 0x8, &(0x7f00000003c0)={@_ha_fsid}, &(0x7f0000000400)=0x9}) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x20, 0x8, 0x3d57, 0xff, 0x4041, r1, 0x5, '\x00', r2, r3, 0x4, 0x2, 0x4}, 0x50) 1.65377162s ago: executing program 1 (id=4815): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$inet(0x2, 0x1, 0x100) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000000)=0x7f, 0x4) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f00000000c0)=0x7f, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) (async) listen(r1, 0x7) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$netlink(0x10, 0x3, 0x15) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000140)="3900000013000b4700bb65e1c3e4ffff0100000035390000560000022500000019000a00100000ad07fd17e5ffff080c38000000000000000a", 0x39}], 0xc) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendmsg$nl_netfilter(r3, &(0x7f0000000200)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f00000002c0)={0x1f4, 0xf, 0xa, 0x801, 0x70bd28, 0x25dfdbfd, {0x3, 0x0, 0x8}, [@generic="a595f98765a04db3b01ab620efd97005f61b9782b380ffe3a9f91843f2820a3231870542e83fe3ce418bfb5ce37107201610e97a15d9b8d062d739664da602751a4288dc0dfc39510d82dc02f5d581b5a13d57eba87e9c46c92c7b97f009e24bfc995a1ab719630db7b0c37dfafe283a38cb1d2af948d231f9801a40b2384f31137cd162c1d39a1bbc871eed4ce638bab1d7f92a056a6465b94961536a94acffa42f7aee8eeae393db78980dc2a47acbc19814367e2cc56234013ac7230ad0ecdd94f5adadf141b3c672544bf3abe59a16e1675e1cc4975c0ce22f3c8e111489f7bec3dcedad34d7f1003c2ac88a5d", @generic="6684f11982b5609cde45f4b06d1c4a9e6459a902a96802a66e761c355a9c4b542e38d695d503b34ff9bdd50905b98cc825b0483c424e61570e7abd30f88a1fe38469c5d370abc58cdd8d556a6333b572516357261d892a1dff4b9c9d86d544657c44891afcaa712840acfa5f4133b1048ec868b84c6cdb13c4ec04750bb06b00f6baefb080fb331cd05fbbb9e850e261f219ed9c1aa7bc2777dabfb58b23e9c17d7c4308d8fd880e2d4e1260d564ac872edec46fb73862c84c021a0aab1f75273be998f9920682f5badccf7d0b603a8402b676985e118d8fe3657ffe833d42ab07fb38f672af82445afac199eb734850bc"]}, 0x1f4}, 0x1, 0x0, 0x0, 0x5}, 0x0) (async) bind$inet(0xffffffffffffffff, &(0x7f00000004c0)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet_udp(0x2, 0x2, 0x0) (async) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000010c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha256\x00'}, 0x58) (async) r7 = accept$alg(r6, 0x0, 0x0) sendmmsg$alg(r7, &(0x7f0000001140)=[{0x0, 0x0, &(0x7f0000001180)=[{&(0x7f00000011c0)="ca", 0x1}], 0x1, 0x0, 0x0, 0x4800}], 0x1, 0xe803) (async) accept4(r7, 0x0, 0x0, 0x80000) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) (async) connect$inet(r5, &(0x7f0000000540)={0x2, 0x0, @multicast1}, 0x10) connect$pppl2tp(r4, &(0x7f0000000580)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) sendmmsg(r4, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) (async, rerun: 32) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000600)={'netpci0\x00', &(0x7f0000000640)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x1, 0x107fff, 0x1, 0x4, 0x89, 0x0, 0xffb, 0x7, 0xb6b, 0x0, 0x4, 0x1, 0x1, 0x9, 0x100, 0x1003, 0x2, 0x3, 0x3, 0x80000001, 0xfffffffa, 0x0, 0x1, 0x9, 0x4, 0xa, 0x5, 0x100000, 0x9, 0x3, 0x63c, 0x400010, 0x10001006, 0x2, 0x8, 0x1bf7, 0xb, 0x40, 0xa0d1ae, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x85, 0x79f, 0x3, 0x40001, 0x7f, 0x4, 0x6, 0x9, 0x8001, 0x101, 0xa, 0x1fa0860a, 0x401, 0x100aa, 0x1000, 0x2, 0x0, 0x7, 0x8b, 0x5, 0x2af, 0x9, 0x5, 0x2, 0x1, 0x9, 0x5, 0x7, 0x1, 0x0, 0x4, 0x3, 0x8, 0x6, 0x3, 0x3, 0x480, 0x10000, 0x3f6, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x0, 0x81, 0x100, 0x5f9, 0x252, 0x2f, 0xb, 0x4, 0x9, 0xc50, 0xffffffff, 0xe, 0x2, 0xd9a, 0x3, 0xc102, 0xfffffffd, 0x3, 0x2, 0x8927, 0x8, 0xfe, 0x4, 0x2, 0x40, 0x8, 0x0, 0x5, 0x402, 0x66cd, 0x8000008, 0x8, 0x799e, 0x1fc, 0x1ff, 0xffffffff]}}) (async) socket(0x2b, 0x1, 0x1) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000880)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f00000008c0)=ANY=[], 0x32600) 1.467781418s ago: executing program 4 (id=4816): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000014c0)={0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000001500)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0x20, 0x4040}}], 0x2, 0x4040080) ioctl$SIOCSIFHWADDR(r1, 0x89f0, &(0x7f0000001480)={'sit0\x00', @random="5600230d1100"}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ip6erspan0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x4, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}]}, &(0x7f00000003c0)='GPL\x00', 0x4, 0x1007, &(0x7f0000000400)=""/4103, 0x41100, 0x68}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001800)=ANY=[@ANYBLOB="0b000000050000001d00010009000000010000003256a9df6cc5ecfe3668", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x11, 0xd, &(0x7f0000001700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000001780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000017c0)={r7}, 0xc) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}, {0x10, 0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@delqdisc={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000005b76bfc00800000053886d1c00010429", @ANYRES32=r3, @ANYBLOB="020000030a000200aaaaaaaaaa0c000008000f0000000000"], 0x30}, 0x1, 0x0, 0x0, 0x44801}, 0x840) 1.025196174s ago: executing program 1 (id=4817): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x13, &(0x7f0000000dc0)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="000000000000001166080000000006001800000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa1b4000000000007010000f8ffffffb7020000780009000000000000000000850000000600000095000000000000000000de00"/120], &(0x7f0000000e80)='GPL\x00', 0xa, 0xde, &(0x7f0000000ec0)=""/222, 0x0, 0x8}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000001fc0)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000002040)=ANY=[@ANYBLOB="2000000046000901fefffffffeffffff017c00000c0003804e2d"], 0x20}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) 875.479111ms ago: executing program 0 (id=4818): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f0000000240)=0x10) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000280)={0x2, 0x4}, 0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x20004000}, 0x4040) openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05000000640000004300000002"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0), 0xfffffffe, r2}, 0x38) bpf$BPF_GET_PROG_INFO(0x4, &(0x7f0000000200)={r2, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000030, 0x8, 0x0, 0x0}}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x452000, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'\x00', 0x1}) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000040)={'ipvtap0\x00', @multicast}) 509.783323ms ago: executing program 0 (id=4819): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x58, &(0x7f0000000200)}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0xd, &(0x7f00000003c0)=@framed={{}, [@generic={0x61, 0x8, 0x1, 0x30}, @generic={0x7a, 0xa, 0x0, 0xfffffff8}, @map_fd={0x18, 0x1}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000480)=r3, 0x4) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000500)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r5 = accept4(r4, 0x0, 0x0, 0x80800) sendmmsg$alg(r5, &(0x7f0000000680)=[{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000700)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000740)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb09587304856755200db549e13d64a3489bfc1961cc504fc1175ce7e3335c86d231c5d64829c1ebfac649a1787882b454975a71a18ece31ee6f69e99707e2a13f4f826a57837744a810058f73e25119f8e0b8787ed2f318a1df960df58a7c091b9a7a60e5a2f546d0fe807dab278a08cb2056295185213037adcec5da72763d52734d7dfd51c27", 0xcf}, {&(0x7f0000000840)="e8700e444d50a969ff67247cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece98ad3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xfe67}], 0x3, &(0x7f0000000940)}], 0x1, 0x40800) recvmsg(r5, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000a00)=""/81, 0x7ffff000}, {&(0x7f0000000b00)=""/83, 0x20000253}], 0x2}, 0x0) sendmsg(r1, &(0x7f0000000d80)={&(0x7f0000000040)=@nfc={0x27, 0x0, 0xffffffffffffffff, 0x3}, 0x80, &(0x7f0000000ac0)=[{0x0}, {&(0x7f0000000580)="4fc748263e92a3135d703c220139cb8d15ab286e2410100d19d3960c1eaeb027c05ef9e577bf70d328899325f94416dd3c3329df1d2f078fc6b54c2cd49b977cc83a4aa36bfccce08ae5b9dd0802a3a11016dea8eb98a2e62b5e5757e18c4c20a0eedf1540c89793ee76dfb0226846e148e314bfc7cfc79adba26d3c961d17ff81d55c115ea41f9228098de26d8e05772aecb55f34a531d036c7e08dcca7df4d75fa20c8df1def3e354bcd25ca751e35ecdd7fb563bad639236a931b56d655d0aaa1b544e6399d4d84d7ff1bb93008e927f5ac73f5423112efb971d0e88d17", 0xdf}, {&(0x7f0000000680)}, {&(0x7f0000000780)}], 0x4, &(0x7f0000000b80)=[{0x10, 0x29, 0x81}], 0x10}, 0x4044) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_subtree(r6, &(0x7f0000000180)=ANY=[], 0x6) write(r6, &(0x7f0000000dc0)="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", 0xffb) sendmsg$inet(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) 460.739379ms ago: executing program 1 (id=4820): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = accept(r0, &(0x7f0000000280), &(0x7f0000000300)=0x80) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x161042, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000015c0)=ANY=[@ANYBLOB="0600000004000000060000000b00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001640)=ANY=[], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, 0xca, r3, 0x18}, 0x38) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000400)=0x1000002) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440), 0x42000, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000480)=0x124) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000016c0)={0x18, 0x3, &(0x7f0000001780)=ANY=[@ANYBLOB="180000040000005d8006cc00000000009500000000000000"], &(0x7f00000017c0)='syzkaller\x00'}, 0x80) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000001800)=@generic={&(0x7f0000001840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r6}, 0x18) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110c230000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001"], 0xcdc}, 0x1, 0x0, 0x0, 0x8000}, 0x20040010) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) close(0x3) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000001580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001540)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="489a4800c3a063471a0251b99ff75000c0", @ANYRES16=r9, @ANYBLOB="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"], 0xd48}, 0x1, 0x0, 0x0, 0x20040810}, 0x4000) socket(0x1e, 0x4, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000001a40), 0x0, 0x9200000000000000) bpf$PROG_LOAD(0x5, &(0x7f0000001a80)={0x7, 0x4, &(0x7f0000001b40)=ANY=[@ANYBLOB="850000009e000000720a00ff0000000079"], 0x0, 0x2}, 0x94) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r10) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x2c000010) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404c830}, 0x0) 401.849987ms ago: executing program 3 (id=4821): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r0) 364.418904ms ago: executing program 2 (id=4822): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) (async) r1 = socket$inet6(0xa, 0x1, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x10c0}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @gre={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x5}, @IFLA_GRE_PMTUDISC={0x5, 0xa, 0x1}, @IFLA_GRE_TTL={0x5, 0x8, 0x8}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x2}]}}}]}, 0x50}}, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014640000000c0a050000000000000000000a0000060900020073797a31000000000900010073797a310000000038000380340000800400018014000b8010233be49678552d066d7000040002800c000440000000000000000f0c0005"], 0xd0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9c940000, 0x0, 0x3, 0x1}, 0x20) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000001c0)={@private2, 0x9c940000, 0x2, 0x3, 0x8, 0x8001, 0x3}, 0x20) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f0000000180), 0x40000000000009f, 0x0) (async) r5 = socket(0x2d, 0x2, 0x0) connect$unix(r5, 0x0, 0x0) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r4) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r5, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x38, r6, 0x100, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x9, 0x3f}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x400}, 0x44084) ioctl(r0, 0x400452c8, &(0x7f0000000000)="000000000000000003000000000000000000000001") (async) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f00000000c0)=0x7) 210.331939ms ago: executing program 4 (id=4823): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000500)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3b8, 0x0, 0x98, 0x130, 0x1c8, 0x288, 0x0, 0x98, 0x130, 0x288, 0x320, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x1}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x9}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x450) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x8}, {}, {0x5, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x62b9, 0x5, 0xfffffff7, 0x5, 0x3, 0xe1cb, 0x5, 0x1, 0x3, 0x0, 0x1, 0x2, 0x6, 0xacd, 0x0, 0x364, 0x1, 0x2, 0xffffff44, 0x3, 0x2, 0x8, 0x3, 0x6, 0xffffffc0, 0xb, 0x688, 0xffff, 0xfffffffe, 0x2, 0xfffffeff, 0x0, 0xb, 0x5, 0x0, 0x5, 0xffffadc0, 0x8001, 0xf, 0x1, 0x8d2a00, 0x8, 0xf, 0xc, 0x1, 0x80, 0xffff, 0x1, 0x7, 0x0, 0x400, 0xe5, 0x93, 0x2, 0x45a5, 0x8, 0x6, 0x4, 0x0, 0x59, 0x3, 0x80, 0x9, 0x5, 0x8, 0x5, 0x3, 0x9, 0x2, 0x3, 0x4, 0x7f, 0x101, 0xde, 0x10, 0x7, 0x6, 0x7f, 0xfff, 0x6, 0x9, 0xf7, 0x5, 0x2, 0x81, 0x0, 0x6, 0x7, 0x1, 0x437, 0x6, 0x3, 0x2, 0x7000000, 0x5, 0x9, 0xecc, 0x6, 0x4, 0x8, 0x400, 0x7a5, 0x9, 0x9, 0x0, 0x9, 0x8, 0x0, 0x3, 0x7ff, 0x5, 0x6, 0x4, 0x7, 0x10, 0x4001d1da, 0x8, 0xbdb, 0x1, 0x8, 0x8001, 0xe3c8, 0xffffffff, 0xd, 0x6, 0x4, 0x9, 0x7fffffff, 0x3, 0xb8b4, 0x723, 0x15, 0x9367, 0x81, 0x400000, 0x9, 0x6, 0x75, 0x1ff, 0xc695, 0x4, 0xf, 0x7, 0x3, 0x0, 0x3ff, 0x8000, 0xff, 0x4, 0x0, 0x6496, 0x7f, 0x3, 0x0, 0xf528, 0x6, 0x80000000, 0x6, 0x157b, 0x7, 0x42, 0x1, 0x10001, 0x3, 0x9, 0x2, 0x98de, 0x2450, 0x86d, 0x2, 0x7, 0x7, 0xfffffffa, 0x800, 0xfffffffb, 0x4, 0xb6, 0x5, 0x7fff, 0x9f4c, 0x1, 0x8, 0xe, 0x11d, 0x7fff, 0xf, 0x8, 0x3, 0xa, 0x9, 0x9, 0x2, 0x4, 0x2, 0x8, 0x5, 0x5, 0x401, 0x9, 0x4b8, 0xa78, 0xec8, 0x1, 0xfffffffa, 0x80020000, 0x0, 0x0, 0x7f, 0x8c1, 0x5, 0xfffffffa, 0x6, 0x175b, 0x7fffffff, 0x4, 0x4, 0xffff8001, 0x8001, 0xffff, 0x5, 0x0, 0x401, 0x5, 0x10, 0x7fff, 0xffffff00, 0x3, 0x8, 0x9268, 0x80000000, 0x2, 0x7, 0x4, 0x3, 0x4, 0xced, 0x5, 0xa524, 0x7, 0x81f, 0x3, 0x10, 0x80, 0x1ff, 0x1109, 0x9, 0x1, 0x0, 0x2, 0x0, 0x8, 0x3, 0x3, 0x6, 0x4]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x2004009c}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000d80)={'syzkaller0\x00'}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000ec0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000f80)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {0xfff3}, {0x0, 0xfff1}, {0x4, 0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0xdb, 0x7ff, 0x2, 0x9, 0x4, 0x2, 0xfffffffb, 0xc00000}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) r11 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r11, &(0x7f0000003b80)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x35}}, 0x10) setsockopt$sock_int(r11, 0x1, 0x6, &(0x7f0000003bc0)=0x4, 0x4) connect$inet(r11, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r11, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 65.007918ms ago: executing program 0 (id=4824): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0x18, &(0x7f0000000840)=ANY=[@ANYBLOB="bf16000000000000b7000000000000007b0af8ff000000007b0af0ff000000007b0ae8ff000000007b0ae0ff000000007b0ad8ff000000007b0ad0ff000000007b0ac8ff000000007b0ac0ff00000000b702000002000000732ac0ff00000000b702000001000000632ac8ff00000000b70200007f000001632ae0ff00000000bf61000000000000bfa200000000000007020000c0ffffffb703000040000000b7040000000000008500000045000000b70000000000000095"], &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendmmsg$inet6(r1, &(0x7f0000000000)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x1ff, @private0, 0x401}, 0x1c, &(0x7f0000000080)=[{&(0x7f00000000c0)='s', 0x1}], 0x1}}], 0x1, 0x0) shutdown(r1, 0x1) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_EXPOSE_POTENTIALLY_FAILED_STATE(r1, 0x84, 0x83, &(0x7f0000000180)={r3}, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r0, 0x0, 0xe, 0x0, &(0x7f00000009c0)="e0278f7c5768793f40cc764532db", 0x0, 0x2800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 0s ago: executing program 3 (id=4825): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xd, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff41, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0xbe}]}, &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000140)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000180)=ANY=[], 0x8) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000200)=ANY=[], 0x8) setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000240)=0x8, 0x4) recvmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/124, 0x7c}, 0xd}], 0x1, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendmsg$inet6(r0, &(0x7f00000018c0)={&(0x7f0000000380)={0xa, 0x4e20, 0xe, @private0={0xfc, 0x0, '\x00', 0x1}, 0xc}, 0x1c, &(0x7f0000001780)=[{&(0x7f00000006c0)="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", 0x1000}, {&(0x7f00000016c0)="3b0f8473001b547340761d", 0xb}, {&(0x7f0000001700)="b13f8846d562cdf70f94d23aedea165e4ea6976be00aee9279714b2f4643ff420794129225a2fc", 0x27}, {&(0x7f0000001740)="8f076cad3289ce4b", 0x8}], 0x4, &(0x7f00000017c0)=[@pktinfo={{0x24, 0x29, 0x32, {@private2={0xfc, 0x2, '\x00', 0x1}}}}, @rthdr={{0xb8, 0x29, 0x39, {0x32, 0x14, 0x1, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, @remote, @loopback, @loopback, @mcast1, @mcast1, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}}, @dstopts_2292={{0x20, 0x29, 0x4, {0x2f, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0xfa}]}}}], 0x100}, 0x4) unshare(0x22020400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x5, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x2e0}, [@map_idx_val={0x18, 0x1, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f0000000500)='syzkaller\x00', 0x5, 0x1d, &(0x7f0000000540)=""/29, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x0, 0x10, 0xad}, 0x94) kernel console output (not intermixed with test programs): 1_vlan: entered promiscuous mode [ 565.348825][T22140] tipc: Resetting bearer [ 565.349614][T22140] veth1_macvtap: left promiscuous mode [ 565.359611][T22140] veth0_macvtap: left promiscuous mode [ 565.364566][T22140] veth0_macvtap: entered promiscuous mode [ 565.368257][T22140] veth1_macvtap: entered promiscuous mode [ 565.394220][T22140] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 565.401778][T22140] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 565.419801][T22140] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 565.438841][T22140] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 565.466911][T22140] 8021q: adding VLAN 0 to HW filter on device bond1 [ 565.471483][T22140] 8021q: adding VLAN 0 to HW filter on device bond3 [ 565.491384][T22140] 8021q: adding VLAN 0 to HW filter on device bond4 [ 565.512578][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.592081][T12702] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.592238][T12702] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.592376][T12702] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.768854][T22168] rxe_eth0 speed is unknown, defaulting to 1000 [ 566.157453][T22168] lo speed is unknown, defaulting to 1000 [ 566.162574][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 566.528973][T22183] SET target dimension over the limit! [ 567.069914][T22197] netlink: zone id is out of range [ 567.403676][T22189] bond8: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 567.406045][T22189] bond8 (unregistering): Released all slaves [ 567.530680][T22207] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3900'. [ 567.759607][T22209] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 569.140781][T22256] netlink: 'syz.3.3908': attribute type 14 has an invalid length. [ 569.200228][T22254] ±ÿ: renamed from lo (while UP) [ 569.785992][T22267] SET target dimension over the limit! [ 570.246301][T22276] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3913'. [ 570.246487][T22276] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3913'. [ 570.638826][T22301] Dead loop on virtual device 04±ÿ (net 977), fix it urgently! [ 570.639007][T22301] Dead loop on virtual device 04±ÿ (net 977), fix it urgently! [ 570.639153][T22301] Dead loop on virtual device 04±ÿ (net 977), fix it urgently! [ 570.677620][T22301] Dead loop on virtual device 04±ÿ (net 977), fix it urgently! [ 570.677781][T22301] Dead loop on virtual device 04±ÿ (net 977), fix it urgently! [ 570.677925][T22301] Dead loop on virtual device 04±ÿ (net 977), fix it urgently! [ 570.681424][T22301] Dead loop on virtual device 04±ÿ (net 977), fix it urgently! [ 570.681588][T22301] Dead loop on virtual device 04±ÿ (net 977), fix it urgently! [ 570.681728][T22301] Dead loop on virtual device 04±ÿ (net 977), fix it urgently! [ 570.733244][T22301] Dead loop on virtual device 04±ÿ (net 977), fix it urgently! [ 570.834962][T22310] SET target dimension over the limit! [ 571.375990][T22334] tap0: tun_chr_ioctl cmd 21731 [ 573.651725][T22311] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 574.267287][T22368] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3940'. [ 574.321272][T22378] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3940'. [ 574.355216][T22368] bond8: entered promiscuous mode [ 574.358960][T22368] 8021q: adding VLAN 0 to HW filter on device bond8 [ 574.380849][T22376] vxlan0: entered promiscuous mode [ 574.579390][T22394] xt_NFQUEUE: number of total queues is 0 [ 574.677164][T22384] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3944'. [ 575.207307][T22410] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3952'. [ 575.270872][T22416] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3954'. [ 575.340228][ T3389] IPVS: starting estimator thread 0... [ 575.422339][T22424] IPVS: using max 32 ests per chain, 76800 per kthread [ 575.521095][T22429] tipc: Enabled bearer , priority 0 [ 575.571386][T22429] syzkaller0: entered promiscuous mode [ 575.571411][T22429] syzkaller0: entered allmulticast mode [ 575.593798][T22429] tipc: Resetting bearer [ 575.597194][T22429] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3956'. [ 575.717171][T19532] tipc: Resetting bearer [ 575.759148][T22429] bond6: option arp_validate: invalid value (262147) [ 575.775289][T22429] bond6 (unregistering): Released all slaves [ 575.839551][T22430] bond5: option arp_validate: invalid value (262147) [ 575.936846][T22428] tipc: Resetting bearer [ 576.214289][T22452] netlink: 'syz.3.3962': attribute type 1 has an invalid length. [ 576.333295][T22453] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3962'. [ 579.024402][T22428] tipc: Disabling bearer [ 579.039018][T22452] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 579.338466][T22485] x_tables: duplicate entry at hook 3 [ 579.338895][T22484] syzkaller0: entered promiscuous mode [ 579.338948][T22484] syzkaller0: entered allmulticast mode [ 579.346129][T22482] net_ratelimit: 43 callbacks suppressed [ 579.346164][T22482] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 579.570973][T22491] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 579.684324][T22498] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3974'. [ 579.684355][T22498] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3974'. [ 579.927851][T22507] Bluetooth: hci0: unsupported parameter 5135 [ 579.927874][T22507] Bluetooth: hci0: unsupported parameter 8192 [ 579.927886][T22507] Bluetooth: hci0: unsupported parameter 5135 [ 579.927895][T22507] Bluetooth: hci0: unsupported parameter 8192 [ 580.097241][T22498] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3974'. [ 580.717815][T22531] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 580.884685][ C1] Dead loop on virtual device 04±ÿ (net 977), fix it urgently! [ 580.902919][T22531] veth1_to_bond: entered allmulticast mode [ 580.975311][T22531] mac80211_hwsim hwsim45 nicvf0: entered promiscuous mode [ 580.978950][T22531] mac80211_hwsim hwsim45 nicvf0: entered allmulticast mode [ 580.982243][T22531] ipip0: entered promiscuous mode [ 580.982264][T22531] ipip0: entered allmulticast mode [ 580.982964][T22531] bridge0: entered promiscuous mode [ 581.016480][T22531] bridge0: entered allmulticast mode [ 581.880334][T22567] set match dimension is over the limit! [ 581.910180][T22541] bond0: (slave veth0_to_bond): Releasing backup interface [ 581.911543][T22541] veth0_to_bond: left promiscuous mode [ 581.911722][T22541] veth0_to_bond: left allmulticast mode [ 581.914068][T22566] netlink: 'syz.0.3989': attribute type 16 has an invalid length. [ 581.914101][T22566] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3989'. [ 581.994971][T22541] bond2: (slave geneve2): Releasing active interface [ 582.046688][T22541] bond0: (slave bond3): Releasing backup interface [ 582.046727][T22541] bond0: (slave bond3): the permanent HWaddr of slave - a6:c7:20:49:a9:c8 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 582.118722][T22541] bond0: (slave bond4): Releasing backup interface [ 582.190314][T22541] bond6: (slave geneve3): Releasing active interface [ 582.199946][T22584] netlink: 'syz.2.3992': attribute type 5 has an invalid length. [ 582.199982][T22584] netlink: 608 bytes leftover after parsing attributes in process `syz.2.3992'. [ 582.261454][T22589] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3994'. [ 582.268111][T22541] bond7: (slave bridge2): Releasing backup interface [ 582.282637][T22590] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3994'. [ 582.313468][T12702] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 582.313701][T12702] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 582.313796][T12702] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 582.393499][ T63] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 582.634633][T22600] IPVS: length: 102 != 8 [ 582.634663][T22600] IPVS: length: 102 != 8 [ 582.634682][T22600] IPVS: length: 102 != 8 [ 582.634702][T22600] IPVS: length: 102 != 8 [ 582.634720][T22600] IPVS: length: 102 != 8 [ 582.634739][T22600] IPVS: length: 102 != 8 [ 582.634757][T22600] IPVS: length: 102 != 8 [ 582.634774][T22600] IPVS: length: 102 != 8 [ 582.634792][T22600] IPVS: length: 102 != 8 [ 582.634811][T22600] IPVS: length: 102 != 8 [ 582.634829][T22600] IPVS: length: 102 != 8 [ 582.634848][T22600] IPVS: length: 102 != 8 [ 582.634880][T22600] IPVS: length: 102 != 8 [ 582.634899][T22600] IPVS: length: 102 != 8 [ 582.634917][T22600] IPVS: length: 102 != 8 [ 582.634936][T22600] IPVS: length: 102 != 8 [ 582.634954][T22600] IPVS: length: 102 != 8 [ 582.634972][T22600] IPVS: length: 102 != 8 [ 582.634991][T22600] IPVS: length: 102 != 8 [ 582.635010][T22600] IPVS: length: 102 != 8 [ 582.635028][T22600] IPVS: length: 102 != 8 [ 582.635046][T22600] IPVS: length: 102 != 8 [ 582.635065][T22600] IPVS: length: 102 != 8 [ 582.635083][T22600] IPVS: length: 102 != 8 [ 582.635101][T22600] IPVS: length: 102 != 8 [ 582.635120][T22600] IPVS: length: 102 != 8 [ 582.635138][T22600] IPVS: length: 102 != 8 [ 582.635156][T22600] IPVS: length: 102 != 8 [ 582.635174][T22600] IPVS: length: 102 != 8 [ 582.635192][T22600] IPVS: length: 102 != 8 [ 582.635210][T22600] IPVS: length: 102 != 8 [ 582.635229][T22600] IPVS: length: 102 != 8 [ 582.635247][T22600] IPVS: length: 102 != 8 [ 582.635265][T22600] IPVS: length: 102 != 8 [ 582.635291][T22600] IPVS: length: 102 != 8 [ 582.635310][T22600] IPVS: length: 102 != 8 [ 582.635328][T22600] IPVS: length: 102 != 8 [ 582.635347][T22600] IPVS: length: 102 != 8 [ 582.635365][T22600] IPVS: length: 102 != 8 [ 582.635384][T22600] IPVS: length: 102 != 8 [ 582.635402][T22600] IPVS: length: 102 != 8 [ 582.635421][T22600] IPVS: length: 102 != 8 [ 582.635438][T22600] IPVS: length: 102 != 8 [ 582.635456][T22600] IPVS: length: 102 != 8 [ 582.635475][T22600] IPVS: length: 102 != 8 [ 582.635493][T22600] IPVS: length: 102 != 8 [ 582.635518][T22600] IPVS: length: 102 != 8 [ 582.635538][T22600] IPVS: length: 102 != 8 [ 582.635556][T22600] IPVS: length: 102 != 8 [ 582.635575][T22600] IPVS: length: 102 != 8 [ 582.635593][T22600] IPVS: length: 102 != 8 [ 582.635612][T22600] IPVS: length: 102 != 8 [ 582.635630][T22600] IPVS: length: 102 != 8 [ 582.635649][T22600] IPVS: length: 102 != 8 [ 582.635667][T22600] IPVS: length: 102 != 8 [ 582.635685][T22600] IPVS: length: 102 != 8 [ 582.635704][T22600] IPVS: length: 102 != 8 [ 582.635722][T22600] IPVS: length: 102 != 8 [ 582.635740][T22600] IPVS: length: 102 != 8 [ 582.635757][T22600] IPVS: length: 102 != 8 [ 582.635775][T22600] IPVS: length: 102 != 8 [ 582.635792][T22600] IPVS: length: 102 != 8 [ 582.635810][T22600] IPVS: length: 102 != 8 [ 582.635827][T22600] IPVS: length: 102 != 8 [ 582.635846][T22600] IPVS: length: 102 != 8 [ 582.857362][T22609] set match dimension is over the limit! [ 582.921113][T22609] set match dimension is over the limit! [ 583.401709][T22595] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 583.629006][T22640] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4006'. [ 583.946982][T22656] xt_TCPMSS: Only works on TCP SYN packets [ 584.404733][T22659] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4011'. [ 584.438393][T22659] openvswitch: netlink: Key type 31 is not supported [ 584.460265][T22673] FAULT_INJECTION: forcing a failure. [ 584.460265][T22673] name failslab, interval 1, probability 0, space 0, times 0 [ 584.460295][T22673] CPU: 1 UID: 0 PID: 22673 Comm: syz.3.4015 Not tainted syzkaller #0 PREEMPT(full) [ 584.460316][T22673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 584.460327][T22673] Call Trace: [ 584.460336][T22673] [ 584.460345][T22673] dump_stack_lvl+0xe8/0x150 [ 584.460382][T22673] should_fail_ex+0x3eb/0x540 [ 584.460409][T22673] ? __alloc_skb+0x1db/0x7a0 [ 584.460430][T22673] should_failslab+0xa8/0x100 [ 584.460451][T22673] ? __alloc_skb+0x1db/0x7a0 [ 584.460463][T22673] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 584.460486][T22673] ? __alloc_skb+0x18d/0x7a0 [ 584.460505][T22673] ? __alloc_skb+0x1db/0x7a0 [ 584.460529][T22673] __alloc_skb+0x1db/0x7a0 [ 584.460552][T22673] netlink_sendmsg+0x5cd/0xb20 [ 584.460580][T22673] ? __pfx_netlink_sendmsg+0x10/0x10 [ 584.460600][T22673] ? aa_sock_msg_perm+0x144/0x210 [ 584.460625][T22673] ? apparmor_socket_sendmsg+0x98/0x360 [ 584.460653][T22673] ? __pfx_netlink_sendmsg+0x10/0x10 [ 584.460670][T22673] sock_sendmsg_nosec+0x14e/0x190 [ 584.460697][T22673] ____sys_sendmsg+0x54e/0x850 [ 584.460723][T22673] ? __pfx_____sys_sendmsg+0x10/0x10 [ 584.460752][T22673] ? import_iovec+0x73/0xa0 [ 584.460778][T22673] ___sys_sendmsg+0x2a5/0x360 [ 584.460795][T22673] ? __lock_acquire+0x747/0x2de0 [ 584.460822][T22673] ? __pfx____sys_sendmsg+0x10/0x10 [ 584.460880][T22673] ? __fget_files+0x3a2/0x420 [ 584.460902][T22673] ? __fget_files+0x2a/0x420 [ 584.460933][T22673] __x64_sys_sendmsg+0x1b1/0x290 [ 584.460956][T22673] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 584.460999][T22673] do_syscall_64+0x166/0x520 [ 584.461022][T22673] ? trace_irq_disable+0x3b/0x140 [ 584.461044][T22673] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.461061][T22673] ? clear_bhb_loop+0x70/0xc0 [ 584.461082][T22673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.461107][T22673] RIP: 0033:0x7f6797ba8f19 [ 584.461125][T22673] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 584.461140][T22673] RSP: 002b:00007f6798a59028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 584.461158][T22673] RAX: ffffffffffffffda RBX: 00007f6797e25fa0 RCX: 00007f6797ba8f19 [ 584.461172][T22673] RDX: 0000000004000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 584.461182][T22673] RBP: 00007f6798a59090 R08: 0000000000000000 R09: 0000000000000000 [ 584.461193][T22673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 584.461206][T22673] R13: 00007f6797e26038 R14: 00007f6797e25fa0 R15: 00007ffff72043b8 [ 584.461235][T22673] [ 584.770579][T22679] sctp: [Deprecated]: syz.3.4017 (pid 22679) Use of int in max_burst socket option. [ 584.770579][T22679] Use struct sctp_assoc_value instead [ 585.654320][T22688] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4017'. [ 585.714429][T22690] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4017'. [ 585.918012][T22693] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4020'. [ 586.199153][T22697] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4021'. [ 587.626133][T22695] batman_adv: batadv0: Interface deactivated: veth0 [ 587.626162][T22695] batman_adv: batadv0: Removing interface: veth0 [ 587.648539][T22695] bridge0: port 1(veth0) entered blocking state [ 587.648653][T22695] bridge0: port 1(veth0) entered disabled state [ 587.648807][T22695] veth0: entered allmulticast mode [ 587.661651][T22695] veth0: entered promiscuous mode [ 587.664417][T22695] bridge0: port 1(veth0) entered blocking state [ 587.664527][T22695] bridge0: port 1(veth0) entered forwarding state [ 587.665888][T22696] __nla_validate_parse: 1 callbacks suppressed [ 587.665902][T22696] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4021'. [ 588.187202][T22713] x_tables: duplicate underflow at hook 2 [ 588.208217][T22707] xt_CT: You must specify a L4 protocol and not use inversions on it [ 588.452519][T22720] netlink: 1 bytes leftover after parsing attributes in process `syz.0.4028'. [ 588.533408][T22723] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4029'. [ 588.562738][ C1] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 588.910211][T22735] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4029'. [ 588.910235][T22735] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4029'. [ 588.949482][T22711] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4025'. [ 588.949542][T22711] netlink: 88 bytes leftover after parsing attributes in process `syz.3.4025'. [ 589.009484][T22732] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4031'. [ 589.014013][T22738] vxlan2: entered promiscuous mode [ 589.404874][T22744] netlink: 'syz.4.4030': attribute type 30 has an invalid length. [ 589.599387][T22744] SET target dimension over the limit! [ 589.624621][T22744] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4030'. [ 589.853142][T22763] netlink: 'syz.1.4035': attribute type 64 has an invalid length. [ 589.853164][T22763] netlink: 5 bytes leftover after parsing attributes in process `syz.1.4035'. [ 589.927571][T22761] tc_dump_action: action bad kind [ 589.986055][T22766] netlink: 'syz.4.4039': attribute type 16 has an invalid length. [ 589.986077][T22766] netlink: 'syz.4.4039': attribute type 17 has an invalid length. [ 590.028402][T22761] netlink: 'syz.3.4036': attribute type 1 has an invalid length. [ 590.028438][T22761] netlink: 'syz.3.4036': attribute type 2 has an invalid length. [ 590.058913][T22766] dummy0: left promiscuous mode [ 590.079500][T22766] wg0: left promiscuous mode [ 590.115986][T22774] FAULT_INJECTION: forcing a failure. [ 590.115986][T22774] name failslab, interval 1, probability 0, space 0, times 0 [ 590.116033][T22774] CPU: 0 UID: 0 PID: 22774 Comm: syz.1.4040 Not tainted syzkaller #0 PREEMPT(full) [ 590.116053][T22774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 590.116063][T22774] Call Trace: [ 590.116070][T22774] [ 590.116077][T22774] dump_stack_lvl+0xe8/0x150 [ 590.116111][T22774] should_fail_ex+0x3eb/0x540 [ 590.116140][T22774] should_failslab+0xa8/0x100 [ 590.116161][T22774] __kmalloc_noprof+0xf9/0x710 [ 590.116184][T22774] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 590.116208][T22774] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 590.116239][T22774] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 590.116269][T22774] genl_family_rcv_msg_doit+0xda/0x340 [ 590.116298][T22774] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 590.116324][T22774] ? __pfx_genl_get_cmd+0x10/0x10 [ 590.116342][T22774] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 590.116479][T22774] ? __lock_acquire+0x747/0x2de0 [ 590.116511][T22774] genl_rcv_msg+0x614/0x7a0 [ 590.116539][T22774] ? __pfx_genl_rcv_msg+0x10/0x10 [ 590.116560][T22774] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 590.116595][T22774] netlink_rcv_skb+0x226/0x4a0 [ 590.116624][T22774] ? __pfx_genl_rcv_msg+0x10/0x10 [ 590.116647][T22774] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 590.116692][T22774] ? down_read+0x2b9/0x320 [ 590.116722][T22774] genl_rcv+0x28/0x40 [ 590.116741][T22774] netlink_unicast+0x8ef/0xa80 [ 590.116796][T22774] netlink_sendmsg+0x7f0/0xb20 [ 590.116822][T22774] ? __pfx_netlink_sendmsg+0x10/0x10 [ 590.116845][T22774] ? aa_sock_msg_perm+0x144/0x210 [ 590.116869][T22774] ? apparmor_socket_sendmsg+0x98/0x360 [ 590.116897][T22774] ? __pfx_netlink_sendmsg+0x10/0x10 [ 590.116914][T22774] sock_sendmsg_nosec+0x14e/0x190 [ 590.116944][T22774] ____sys_sendmsg+0x54e/0x850 [ 590.116969][T22774] ? __pfx_____sys_sendmsg+0x10/0x10 [ 590.117001][T22774] ? import_iovec+0x73/0xa0 [ 590.117028][T22774] ___sys_sendmsg+0x2a5/0x360 [ 590.117047][T22774] ? __lock_acquire+0x747/0x2de0 [ 590.117076][T22774] ? __pfx____sys_sendmsg+0x10/0x10 [ 590.117139][T22774] ? __fget_files+0x3a2/0x420 [ 590.117162][T22774] ? __fget_files+0x2a/0x420 [ 590.117193][T22774] __x64_sys_sendmsg+0x1b1/0x290 [ 590.117216][T22774] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 590.117257][T22774] do_syscall_64+0x166/0x520 [ 590.117279][T22774] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 590.117297][T22774] ? clear_bhb_loop+0x70/0xc0 [ 590.117327][T22774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 590.117345][T22774] RIP: 0033:0x7fb66f5a8f19 [ 590.117364][T22774] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 590.117379][T22774] RSP: 002b:00007fb670422028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 590.117400][T22774] RAX: ffffffffffffffda RBX: 00007fb66f825fa0 RCX: 00007fb66f5a8f19 [ 590.117413][T22774] RDX: 0000000000040008 RSI: 00002000000006c0 RDI: 0000000000000006 [ 590.117426][T22774] RBP: 00007fb670422090 R08: 0000000000000000 R09: 0000000000000000 [ 590.117437][T22774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 590.117449][T22774] R13: 00007fb66f826038 R14: 00007fb66f825fa0 R15: 00007ffde7263798 [ 590.117482][T22774] [ 590.510295][T22766] ipvtap0: left allmulticast mode [ 590.528808][T22766] veth0_vlan: left allmulticast mode [ 590.584361][T22787] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 590.735451][T22766] bond2: left promiscuous mode [ 590.735515][T22766] bond2: left allmulticast mode [ 590.746464][T22766] ip6gre1: left allmulticast mode [ 590.778121][T22766] bond3: left promiscuous mode [ 590.957372][T22766] 8021q: adding VLAN 0 to HW filter on device bond5 [ 590.992651][T22766] 8021q: adding VLAN 0 to HW filter on device bond6 [ 591.701350][T22805] 1ªX¹¦Dö»: renamed from 00ªX¹¦Dö» (while UP) [ 591.711575][T22805] 1ªX¹¦Dö»: left promiscuous mode [ 592.160587][T22829] netlink: 'syz.2.4053': attribute type 18 has an invalid length. [ 592.600224][T22846] netlink: 'syz.0.4060': attribute type 2 has an invalid length. [ 592.600246][T22846] netlink: 'syz.0.4060': attribute type 1 has an invalid length. [ 592.706014][T22849] openvswitch: netlink: Key 6 has unexpected len 13 expected 2 [ 593.160722][T22859] netlink: 'syz.0.4063': attribute type 1 has an invalid length. [ 593.220661][T22859] __nla_validate_parse: 6 callbacks suppressed [ 593.220683][T22859] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4063'. [ 593.221005][T22859] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4063'. [ 593.387683][T22867] nbd: couldn't find a device at index 1 [ 593.387772][T22867] FAULT_INJECTION: forcing a failure. [ 593.387772][T22867] name failslab, interval 1, probability 0, space 0, times 0 [ 593.387810][T22867] CPU: 0 UID: 0 PID: 22867 Comm: syz.1.4066 Not tainted syzkaller #0 PREEMPT(full) [ 593.387833][T22867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 593.387843][T22867] Call Trace: [ 593.387851][T22867] [ 593.387860][T22867] dump_stack_lvl+0xe8/0x150 [ 593.387895][T22867] should_fail_ex+0x3eb/0x540 [ 593.387922][T22867] ? __alloc_skb+0x1db/0x7a0 [ 593.387940][T22867] should_failslab+0xa8/0x100 [ 593.387960][T22867] ? __alloc_skb+0x1db/0x7a0 [ 593.387976][T22867] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 593.387998][T22867] ? __alloc_skb+0x18d/0x7a0 [ 593.388016][T22867] ? __alloc_skb+0x1db/0x7a0 [ 593.388041][T22867] __alloc_skb+0x1db/0x7a0 [ 593.388064][T22867] netlink_ack+0x136/0xb30 [ 593.388089][T22867] ? __pfx_genl_rcv_msg+0x10/0x10 [ 593.388128][T22867] netlink_rcv_skb+0x2a4/0x4a0 [ 593.388156][T22867] ? __pfx_genl_rcv_msg+0x10/0x10 [ 593.388180][T22867] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 593.388223][T22867] ? down_read+0x2b9/0x320 [ 593.388253][T22867] genl_rcv+0x28/0x40 [ 593.388272][T22867] netlink_unicast+0x8ef/0xa80 [ 593.388316][T22867] netlink_sendmsg+0x7f0/0xb20 [ 593.388341][T22867] ? __pfx_netlink_sendmsg+0x10/0x10 [ 593.388362][T22867] ? aa_sock_msg_perm+0x144/0x210 [ 593.388386][T22867] ? apparmor_socket_sendmsg+0x98/0x360 [ 593.388413][T22867] ? __pfx_netlink_sendmsg+0x10/0x10 [ 593.388430][T22867] sock_sendmsg_nosec+0x14e/0x190 [ 593.388458][T22867] ____sys_sendmsg+0x54e/0x850 [ 593.388485][T22867] ? __pfx_____sys_sendmsg+0x10/0x10 [ 593.388516][T22867] ? import_iovec+0x73/0xa0 [ 593.388543][T22867] ___sys_sendmsg+0x2a5/0x360 [ 593.388561][T22867] ? __lock_acquire+0x747/0x2de0 [ 593.388589][T22867] ? __pfx____sys_sendmsg+0x10/0x10 [ 593.388657][T22867] ? __fget_files+0x3a2/0x420 [ 593.388679][T22867] ? __fget_files+0x2a/0x420 [ 593.388711][T22867] __x64_sys_sendmsg+0x1b1/0x290 [ 593.388735][T22867] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 593.388778][T22867] do_syscall_64+0x166/0x520 [ 593.388799][T22867] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 593.388815][T22867] ? clear_bhb_loop+0x70/0xc0 [ 593.388838][T22867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 593.388854][T22867] RIP: 0033:0x7fb66f5a8f19 [ 593.388873][T22867] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 593.388888][T22867] RSP: 002b:00007fb670422028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 593.388907][T22867] RAX: ffffffffffffffda RBX: 00007fb66f825fa0 RCX: 00007fb66f5a8f19 [ 593.388919][T22867] RDX: 0000000000040008 RSI: 00002000000006c0 RDI: 0000000000000006 [ 593.388928][T22867] RBP: 00007fb670422090 R08: 0000000000000000 R09: 0000000000000000 [ 593.388939][T22867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 593.388949][T22867] R13: 00007fb66f826038 R14: 00007fb66f825fa0 R15: 00007ffde7263798 [ 593.388978][T22867] [ 594.163809][T22882] FAULT_INJECTION: forcing a failure. [ 594.163809][T22882] name failslab, interval 1, probability 0, space 0, times 0 [ 594.163838][T22882] CPU: 1 UID: 0 PID: 22882 Comm: syz.3.4070 Not tainted syzkaller #0 PREEMPT(full) [ 594.163859][T22882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 594.163871][T22882] Call Trace: [ 594.163879][T22882] [ 594.163888][T22882] dump_stack_lvl+0xe8/0x150 [ 594.163922][T22882] should_fail_ex+0x3eb/0x540 [ 594.163954][T22882] should_failslab+0xa8/0x100 [ 594.163975][T22882] __kmalloc_cache_noprof+0x9e/0x600 [ 594.164008][T22882] ? rtnl_newlink+0x147/0x1c30 [ 594.164028][T22882] ? rtnl_newlink+0x147/0x1c30 [ 594.164048][T22882] ? stack_trace_save+0xa9/0x100 [ 594.164112][T22882] rtnl_newlink+0x147/0x1c30 [ 594.164130][T22882] ? stack_depot_save_flags+0x33/0x810 [ 594.164152][T22882] ? __lock_acquire+0x740/0x2de0 [ 594.164179][T22882] ? kasan_save_track+0x4f/0x80 [ 594.164201][T22882] ? kasan_save_track+0x3e/0x80 [ 594.164238][T22882] ? kasan_save_free_info+0x40/0x50 [ 594.164257][T22882] ? __kasan_slab_free+0x5c/0x80 [ 594.164282][T22882] ? __pfx_rtnl_newlink+0x10/0x10 [ 594.164300][T22882] ? __netlink_deliver_tap+0x4f1/0x6e0 [ 594.164324][T22882] ? netlink_deliver_tap+0x19c/0x1b0 [ 594.164348][T22882] ? netlink_unicast+0x8c1/0xa80 [ 594.164369][T22882] ? netlink_sendmsg+0x7f0/0xb20 [ 594.164383][T22882] ? sock_sendmsg_nosec+0x14e/0x190 [ 594.164406][T22882] ? ____sys_sendmsg+0x54e/0x850 [ 594.164424][T22882] ? ___sys_sendmsg+0x2a5/0x360 [ 594.164441][T22882] ? __x64_sys_sendmsg+0x1b1/0x290 [ 594.164460][T22882] ? do_syscall_64+0x166/0x520 [ 594.164480][T22882] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.164534][T22882] ? kasan_quarantine_put+0xbb/0x1f0 [ 594.164558][T22882] ? lockdep_hardirqs_on+0x7b/0x110 [ 594.164584][T22882] ? nlmon_xmit+0xb0/0x100 [ 594.164713][T22882] ? kmem_cache_free+0x182/0x650 [ 594.164745][T22882] ? __lock_acquire+0x747/0x2de0 [ 594.164774][T22882] ? __pfx_hook_capable+0x10/0x10 [ 594.164826][T22882] ? __dev_queue_xmit+0x29b/0x3920 [ 594.164904][T22882] ? __pfx_hook_capable+0x10/0x10 [ 594.164922][T22882] ? lockdep_hardirqs_on+0x7b/0x110 [ 594.164953][T22882] ? lock_acquire+0x115/0x350 [ 594.164975][T22882] ? __pfx_rtnl_newlink+0x10/0x10 [ 594.165015][T22882] ? __pfx_rtnl_newlink+0x10/0x10 [ 594.165033][T22882] rtnetlink_rcv_msg+0x802/0xc00 [ 594.165058][T22882] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 594.165076][T22882] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 594.165099][T22882] ? __copy_skb_header+0xa3/0x4a0 [ 594.165132][T22882] netlink_rcv_skb+0x226/0x4a0 [ 594.165160][T22882] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 594.165182][T22882] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 594.165221][T22882] ? netlink_deliver_tap+0x2e/0x1b0 [ 594.165247][T22882] ? netlink_deliver_tap+0x2e/0x1b0 [ 594.165279][T22882] netlink_unicast+0x8ef/0xa80 [ 594.165321][T22882] netlink_sendmsg+0x7f0/0xb20 [ 594.165345][T22882] ? __pfx_netlink_sendmsg+0x10/0x10 [ 594.165366][T22882] ? aa_sock_msg_perm+0x144/0x210 [ 594.165389][T22882] ? apparmor_socket_sendmsg+0x98/0x360 [ 594.165417][T22882] ? __pfx_netlink_sendmsg+0x10/0x10 [ 594.165433][T22882] sock_sendmsg_nosec+0x14e/0x190 [ 594.165460][T22882] ____sys_sendmsg+0x54e/0x850 [ 594.165486][T22882] ? __pfx_____sys_sendmsg+0x10/0x10 [ 594.165516][T22882] ? import_iovec+0x73/0xa0 [ 594.165542][T22882] ___sys_sendmsg+0x2a5/0x360 [ 594.165561][T22882] ? __lock_acquire+0x747/0x2de0 [ 594.165588][T22882] ? __pfx____sys_sendmsg+0x10/0x10 [ 594.165645][T22882] ? __fget_files+0x3a2/0x420 [ 594.165667][T22882] ? __fget_files+0x2a/0x420 [ 594.165699][T22882] __x64_sys_sendmsg+0x1b1/0x290 [ 594.165722][T22882] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 594.165765][T22882] do_syscall_64+0x166/0x520 [ 594.165788][T22882] ? trace_irq_disable+0x3b/0x140 [ 594.165812][T22882] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.165829][T22882] ? clear_bhb_loop+0x70/0xc0 [ 594.165850][T22882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.165868][T22882] RIP: 0033:0x7f6797ba8f19 [ 594.165885][T22882] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 594.165901][T22882] RSP: 002b:00007f6798a59028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 594.165918][T22882] RAX: ffffffffffffffda RBX: 00007f6797e25fa0 RCX: 00007f6797ba8f19 [ 594.165932][T22882] RDX: 0000000004000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 594.165944][T22882] RBP: 00007f6798a59090 R08: 0000000000000000 R09: 0000000000000000 [ 594.165954][T22882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 594.165964][T22882] R13: 00007f6797e26038 R14: 00007f6797e25fa0 R15: 00007ffff72043b8 [ 594.166001][T22882] [ 594.599859][T22885] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4071'. [ 595.297436][T22890] xt_hashlimit: size too large, truncated to 1048576 [ 596.552006][T22902] netlink: 'syz.3.4075': attribute type 11 has an invalid length. [ 596.552028][T22902] netlink: 'syz.3.4075': attribute type 5 has an invalid length. [ 596.746857][T22914] FAULT_INJECTION: forcing a failure. [ 596.746857][T22914] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 596.746886][T22914] CPU: 1 UID: 0 PID: 22914 Comm: syz.3.4078 Not tainted syzkaller #0 PREEMPT(full) [ 596.746907][T22914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 596.746918][T22914] Call Trace: [ 596.746925][T22914] [ 596.746934][T22914] dump_stack_lvl+0xe8/0x150 [ 596.746977][T22914] should_fail_ex+0x3eb/0x540 [ 596.747005][T22914] _copy_from_user+0x2d/0xb0 [ 596.747030][T22914] kstrtouint_from_user+0xd6/0x180 [ 596.747053][T22914] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 596.747083][T22914] ? lock_acquire+0x115/0x350 [ 596.747112][T22914] proc_fail_nth_write+0x8e/0x210 [ 596.747132][T22914] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 596.747160][T22914] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 596.747178][T22914] vfs_write+0x296/0xba0 [ 596.747213][T22914] ? __pfx_vfs_write+0x10/0x10 [ 596.747239][T22914] ? __fget_files+0x2a/0x420 [ 596.747260][T22914] ? __fget_files+0x3a2/0x420 [ 596.747281][T22914] ? __fget_files+0x2a/0x420 [ 596.747306][T22914] ? fdget+0x1ac/0x250 [ 596.747337][T22914] ksys_write+0x150/0x270 [ 596.747364][T22914] ? __pfx_ksys_write+0x10/0x10 [ 596.747401][T22914] do_syscall_64+0x166/0x520 [ 596.747424][T22914] ? trace_irq_disable+0x3b/0x140 [ 596.747448][T22914] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.747465][T22914] ? clear_bhb_loop+0x70/0xc0 [ 596.747487][T22914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.747506][T22914] RIP: 0033:0x7f6797b6974e [ 596.747522][T22914] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 596.747538][T22914] RSP: 002b:00007f6798a58fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 596.747557][T22914] RAX: ffffffffffffffda RBX: 00007f6798a596c0 RCX: 00007f6797b6974e [ 596.747571][T22914] RDX: 0000000000000001 RSI: 00007f6798a590a0 RDI: 0000000000000005 [ 596.747582][T22914] RBP: 00007f6798a59090 R08: 0000000000000000 R09: 0000000000000000 [ 596.747594][T22914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 596.747605][T22914] R13: 00007f6797e26038 R14: 00007f6797e25fa0 R15: 00007ffff72043b8 [ 596.747637][T22914] [ 596.987217][T22908] rxe_eth0 speed is unknown, defaulting to 1000 [ 597.217367][T22925] FAULT_INJECTION: forcing a failure. [ 597.217367][T22925] name failslab, interval 1, probability 0, space 0, times 0 [ 597.217397][T22925] CPU: 1 UID: 0 PID: 22925 Comm: syz.3.4081 Not tainted syzkaller #0 PREEMPT(full) [ 597.217417][T22925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 597.217428][T22925] Call Trace: [ 597.217436][T22925] [ 597.217445][T22925] dump_stack_lvl+0xe8/0x150 [ 597.217479][T22925] should_fail_ex+0x3eb/0x540 [ 597.217506][T22925] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 597.217670][T22925] should_failslab+0xa8/0x100 [ 597.217693][T22925] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 597.217713][T22925] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 597.217738][T22925] ? alloc_inode+0x6a/0x1b0 [ 597.217790][T22925] ? alloc_inode+0x6a/0x1b0 [ 597.217816][T22925] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 597.217837][T22925] alloc_inode+0x6a/0x1b0 [ 597.217860][T22925] new_inode+0x1f/0x170 [ 597.217887][T22925] __debugfs_create_file+0xb8/0x400 [ 597.217927][T22925] debugfs_create_file_full+0x3f/0x60 [ 597.217954][T22925] ref_tracker_dir_debugfs+0x197/0x360 [ 597.217980][T22925] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 597.218033][T22925] ? __kvmalloc_node_noprof+0x52a/0x820 [ 597.218060][T22925] ? __kvmalloc_node_noprof+0x340/0x820 [ 597.218089][T22925] ? __raw_spin_lock_init+0x45/0x100 [ 597.218113][T22925] alloc_netdev_mqs+0x275/0x1240 [ 597.218136][T22925] ? __pfx_snprintf+0x10/0x10 [ 597.218189][T22925] ? __pfx_vxlan_setup+0x10/0x10 [ 597.218272][T22925] rtnl_create_link+0x321/0xd70 [ 597.218335][T22925] rtnl_newlink_create+0x258/0x7b0 [ 597.218365][T22925] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 597.218392][T22925] ? __pfx___mutex_lock+0x10/0x10 [ 597.218425][T22925] ? ns_capable+0x84/0xe0 [ 597.218455][T22925] rtnl_newlink+0x167a/0x1c30 [ 597.218492][T22925] ? __pfx_rtnl_newlink+0x10/0x10 [ 597.218507][T22925] ? __netlink_deliver_tap+0x4f1/0x6e0 [ 597.218532][T22925] ? netlink_deliver_tap+0x19c/0x1b0 [ 597.218554][T22925] ? netlink_unicast+0x8c1/0xa80 [ 597.218575][T22925] ? netlink_sendmsg+0x7f0/0xb20 [ 597.218591][T22925] ? sock_sendmsg_nosec+0x14e/0x190 [ 597.218614][T22925] ? ____sys_sendmsg+0x54e/0x850 [ 597.218633][T22925] ? ___sys_sendmsg+0x2a5/0x360 [ 597.218650][T22925] ? __x64_sys_sendmsg+0x1b1/0x290 [ 597.218669][T22925] ? do_syscall_64+0x166/0x520 [ 597.218690][T22925] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.218751][T22925] ? kasan_quarantine_put+0xbb/0x1f0 [ 597.218775][T22925] ? lockdep_hardirqs_on+0x7b/0x110 [ 597.218802][T22925] ? nlmon_xmit+0xb0/0x100 [ 597.218822][T22925] ? kmem_cache_free+0x182/0x650 [ 597.218856][T22925] ? __lock_acquire+0x747/0x2de0 [ 597.218886][T22925] ? __pfx_hook_capable+0x10/0x10 [ 597.218904][T22925] ? __dev_queue_xmit+0x29b/0x3920 [ 597.218940][T22925] ? __pfx_hook_capable+0x10/0x10 [ 597.218957][T22925] ? lockdep_hardirqs_on+0x7b/0x110 [ 597.219008][T22925] ? __pfx_rtnl_newlink+0x10/0x10 [ 597.219027][T22925] rtnetlink_rcv_msg+0x802/0xc00 [ 597.219051][T22925] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 597.219071][T22925] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 597.219094][T22925] ? __copy_skb_header+0xa3/0x4a0 [ 597.219128][T22925] netlink_rcv_skb+0x226/0x4a0 [ 597.219156][T22925] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 597.219179][T22925] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 597.219220][T22925] ? netlink_deliver_tap+0x2e/0x1b0 [ 597.219245][T22925] ? netlink_deliver_tap+0x2e/0x1b0 [ 597.219278][T22925] netlink_unicast+0x8ef/0xa80 [ 597.219317][T22925] netlink_sendmsg+0x7f0/0xb20 [ 597.219340][T22925] ? __pfx_netlink_sendmsg+0x10/0x10 [ 597.219361][T22925] ? aa_sock_msg_perm+0x144/0x210 [ 597.219384][T22925] ? apparmor_socket_sendmsg+0x98/0x360 [ 597.219412][T22925] ? __pfx_netlink_sendmsg+0x10/0x10 [ 597.219428][T22925] sock_sendmsg_nosec+0x14e/0x190 [ 597.219457][T22925] ____sys_sendmsg+0x54e/0x850 [ 597.219485][T22925] ? __pfx_____sys_sendmsg+0x10/0x10 [ 597.219516][T22925] ? import_iovec+0x73/0xa0 [ 597.219543][T22925] ___sys_sendmsg+0x2a5/0x360 [ 597.219560][T22925] ? __lock_acquire+0x747/0x2de0 [ 597.219587][T22925] ? __pfx____sys_sendmsg+0x10/0x10 [ 597.219645][T22925] ? __fget_files+0x3a2/0x420 [ 597.219666][T22925] ? __fget_files+0x2a/0x420 [ 597.219696][T22925] __x64_sys_sendmsg+0x1b1/0x290 [ 597.219721][T22925] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 597.219764][T22925] do_syscall_64+0x166/0x520 [ 597.219784][T22925] ? trace_irq_disable+0x3b/0x140 [ 597.219808][T22925] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.219826][T22925] ? clear_bhb_loop+0x70/0xc0 [ 597.219848][T22925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.219865][T22925] RIP: 0033:0x7f6797ba8f19 [ 597.219884][T22925] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 597.219899][T22925] RSP: 002b:00007f6798a59028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 597.219927][T22925] RAX: ffffffffffffffda RBX: 00007f6797e25fa0 RCX: 00007f6797ba8f19 [ 597.219941][T22925] RDX: 0000000004000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 597.219953][T22925] RBP: 00007f6798a59090 R08: 0000000000000000 R09: 0000000000000000 [ 597.219966][T22925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 597.219976][T22925] R13: 00007f6797e26038 R14: 00007f6797e25fa0 R15: 00007ffff72043b8 [ 597.220008][T22925] [ 597.410488][T22925] debugfs: out of free dentries, can not create file 'netdev@ffff88804d46c720' [ 597.455419][T22927] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4083'. [ 597.455488][T22927] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4083'. [ 597.517726][T22925] vxlan1: entered promiscuous mode [ 597.872673][T22934] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4085'. [ 597.959096][T22934] vlan2: entered allmulticast mode [ 597.959119][T22934] dummy0: entered allmulticast mode [ 598.005744][T22908] ±ÿ speed is unknown, defaulting to 1000 [ 598.080751][T22941] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 598.108966][T22940] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 598.726948][T22970] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4092'. [ 598.776956][T22971] ip_tables: iptables: counters copy to user failed while replacing table [ 598.820757][T22970] vlan2: entered allmulticast mode [ 598.820783][T22970] mac80211_hwsim hwsim51 wlan0: entered allmulticast mode [ 598.823562][T22970] batman_adv: batadv0: Adding interface: vlan2 [ 598.823577][T22970] batman_adv: batadv0: The MTU of interface vlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 598.823599][T22970] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 599.140604][T22987] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4095'. [ 599.185369][T22989] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 599.220088][T22987] syzkaller0: left promiscuous mode [ 599.220113][T22987] syzkaller0: left allmulticast mode [ 599.311816][T22992] netlink: 'syz.3.4097': attribute type 4 has an invalid length. [ 599.389477][T22994] IPVS: nq: FWM 3 0x00000003 - no destination available [ 599.400582][T22994] netlink: 'syz.1.4098': attribute type 1 has an invalid length. [ 599.535693][T22998] netlink: 'syz.3.4100': attribute type 1 has an invalid length. [ 599.766393][T22998] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4100'. [ 599.859751][T22998] macvlan2: entered promiscuous mode [ 599.859807][T22998] macvlan2: entered allmulticast mode [ 600.010410][T23010] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4103'. [ 600.181450][T23010] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4103'. [ 600.355274][T23020] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4106'. [ 600.550374][T23032] netlink: 'syz.0.4108': attribute type 3 has an invalid length. [ 600.703538][T23027] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4109'. [ 600.964794][T23048] netlink: 'syz.0.4113': attribute type 13 has an invalid length. [ 600.964816][T23048] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4113'. [ 601.034445][T23050] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4112'. [ 601.055180][T23048] netlink: 'syz.0.4113': attribute type 13 has an invalid length. [ 601.055201][T23048] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4113'. [ 601.540034][T23066] bridge0: left promiscuous mode [ 601.540059][T23066] bridge0: left allmulticast mode [ 601.575299][T23066] netlink: 'syz.0.4116': attribute type 1 has an invalid length. [ 602.766390][T23121] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 602.844414][T23128] batman_adv: batadv0: Adding interface: syzkaller0 [ 602.844451][T23128] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 602.844836][T23128] batman_adv: batadv0: Interface activated: syzkaller0 [ 602.931814][T23126] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 603.046407][T23126] batman_adv: batadv0: Removing interface: syzkaller0 [ 603.319353][T23129] bond4: entered promiscuous mode [ 603.319399][T23129] bond4: entered allmulticast mode [ 603.320585][T23129] 8021q: adding VLAN 0 to HW filter on device bond4 [ 603.959004][T23158] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 604.010961][T23160] __nla_validate_parse: 6 callbacks suppressed [ 604.010979][T23160] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4139'. [ 604.034037][T23160] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4139'. [ 604.037316][T23162] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4139'. [ 604.477792][T23171] ip_tables: iptables: counters copy to user failed while replacing table [ 604.719392][ T5633] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 605.073205][T23194] xt_hashlimit: size too large, truncated to 1048576 [ 605.164590][T23195] xt_IDLETIMER: label is empty or not nul-terminated [ 605.270556][T23203] netlink: 'syz.3.4155': attribute type 1 has an invalid length. [ 605.270593][T23203] netlink: 'syz.3.4155': attribute type 2 has an invalid length. [ 605.270606][T23203] nbd: illegal input index 393236 [ 605.338391][T23202] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4154'. [ 605.376473][T23208] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0 [ 605.378714][T23205] IPVS: stopping backup sync thread 23208 ... [ 605.557753][T23184] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 605.565914][T23213] netlink: 'syz.2.4156': attribute type 1 has an invalid length. [ 605.636382][T23213] sctp: [Deprecated]: syz.2.4156 (pid 23213) Use of int in max_burst socket option. [ 605.636382][T23213] Use struct sctp_assoc_value instead [ 605.890131][T23213] hsr0 speed is unknown, defaulting to 1000 [ 605.967295][T23213] hsr0 speed is unknown, defaulting to 1000 [ 605.986390][T23213] hsr0 speed is unknown, defaulting to 1000 [ 605.989745][T23213] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 605.989787][T23213] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 605.989821][T23213] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 606.165694][T23213] hsr0 speed is unknown, defaulting to 1000 [ 606.185046][T23213] hsr0 speed is unknown, defaulting to 1000 [ 606.199534][T23213] hsr0 speed is unknown, defaulting to 1000 [ 606.210154][T23213] hsr0 speed is unknown, defaulting to 1000 [ 606.220206][T23213] hsr0 speed is unknown, defaulting to 1000 [ 606.236719][T23213] hsr0 speed is unknown, defaulting to 1000 [ 606.241080][T23213] hsr0 speed is unknown, defaulting to 1000 [ 606.266030][T23213] hsr0 speed is unknown, defaulting to 1000 [ 606.435069][T23240] syzkaller0: entered promiscuous mode [ 606.435090][T23240] syzkaller0: entered allmulticast mode [ 606.514669][T23227] tipc: Enabled bearer , priority 0 [ 606.587960][T23236] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4164'. [ 606.588044][T23236] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4164'. [ 606.676034][T23236] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4164'. [ 606.676091][T23236] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4164'. [ 606.844155][T23236] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4164'. [ 606.844211][T23236] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4164'. [ 608.114135][T23299] netlink: 'syz.2.4175': attribute type 8 has an invalid length. [ 608.597073][T23310] syzkaller1: entered promiscuous mode [ 608.597112][T23310] syzkaller1: entered allmulticast mode [ 609.051251][T23318] __nla_validate_parse: 7 callbacks suppressed [ 609.051290][T23318] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4179'. [ 609.100399][T23319] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4180'. [ 609.318149][T23226] tipc: Disabling bearer [ 610.471041][T23359] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4191'. [ 611.758201][T23375] syzkaller1: entered promiscuous mode [ 611.758262][T23375] syzkaller1: entered allmulticast mode [ 611.919394][T23408] veth1_to_bridge: left promiscuous mode [ 611.919455][T23408] veth1_to_bridge: left allmulticast mode [ 612.179887][T23427] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4202'. [ 612.218868][T23430] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 612.594694][T19527] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 612.594760][T19527] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.594860][T19527] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 612.594917][T19527] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.594991][T19527] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 612.595049][T19527] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.595117][T19527] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 612.595158][T19527] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.680915][T23428] macvlan0: left promiscuous mode [ 612.680976][T23428] macvlan0: left allmulticast mode [ 612.707243][T23428] netlink: 'syz.1.4204': attribute type 2 has an invalid length. [ 612.707496][T23430] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4205'. [ 612.707516][T23430] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4205'. [ 612.707557][T23430] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4205'. [ 612.710461][T23431] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4202'. [ 612.710485][T23431] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4202'. [ 612.915640][T23452] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4206'. [ 613.026907][T23440] batman_adv: batadv0: Removing interface: vlan2 [ 613.278569][T23471] netlink: 'syz.2.4212': attribute type 64 has an invalid length. [ 613.291761][T23467] netlink: 'syz.1.4208': attribute type 1 has an invalid length. [ 613.331564][T23463] netlink: 'syz.0.4209': attribute type 2 has an invalid length. [ 613.369063][T23463] !;: entered promiscuous mode [ 613.737959][T23485] bond5: option packets_per_slave: invalid value (134217728) [ 613.737983][T23485] bond5: option packets_per_slave: allowed values 0 - 65535 [ 613.778031][T23485] bond5 (unregistering): Released all slaves [ 613.946678][T23500] veth6: entered allmulticast mode [ 614.516840][T23520] Cannot find map_set index 2 as target [ 614.682557][T23530] __nla_validate_parse: 9 callbacks suppressed [ 614.682576][T23530] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4225'. [ 615.120167][T23541] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4230'. [ 615.602366][ T5631] Bluetooth: hci0: command 0x0406 tx timeout [ 615.897534][T23565] NFSD: Failed to start, no listeners configured. [ 617.992273][T23576] netlink: 112 bytes leftover after parsing attributes in process `syz.3.4238'. [ 618.647522][T23594] sctp: [Deprecated]: syz.2.4244 (pid 23594) Use of struct sctp_assoc_value in delayed_ack socket option. [ 618.647522][T23594] Use struct sctp_sack_info instead [ 618.976134][ T30] audit: type=1804 audit(1794358884.613:16): pid=23609 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.4250" name="/newroot/223/cgroup.controllers" dev="tmpfs" ino=1164 res=1 errno=0 [ 618.976187][ T30] audit: type=1800 audit(1794358884.613:17): pid=23609 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4250" name="cgroup.controllers" dev="tmpfs" ino=1164 res=0 errno=-22 [ 619.023010][T23611] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4247'. [ 619.040578][T23611] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4247'. [ 619.045597][T23611] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4247'. [ 619.149014][T23619] netlink: 'syz.1.4251': attribute type 16 has an invalid length. [ 619.149055][T23619] netlink: 'syz.1.4251': attribute type 17 has an invalid length. [ 619.157858][T23619] ±ÿ: left promiscuous mode [ 619.157920][T23619] ±ÿ: left allmulticast mode [ 619.177138][T23619] tunl0: left promiscuous mode [ 619.177192][T23619] tunl0: left allmulticast mode [ 619.198309][T23619] gre0: left promiscuous mode [ 619.198365][T23619] gre0: left allmulticast mode [ 619.206911][T23619] 1ªX¹¦Dö»: left allmulticast mode [ 619.246209][T23619] erspan0: left promiscuous mode [ 619.246247][T23619] erspan0: left allmulticast mode [ 619.257768][T23619] ip_vti0: left promiscuous mode [ 619.257807][T23619] ip_vti0: left allmulticast mode [ 619.260397][T23619] ip6_vti0: left promiscuous mode [ 619.260432][T23619] ip6_vti0: left allmulticast mode [ 619.264467][T23619] sit0: left promiscuous mode [ 619.264519][T23619] sit0: left allmulticast mode [ 619.267828][T23619] ip6tnl0: left promiscuous mode [ 619.267860][T23619] ip6tnl0: left allmulticast mode [ 619.270063][T23619] ip6gre0: left promiscuous mode [ 619.270095][T23619] ip6gre0: left allmulticast mode [ 619.339232][T23619] ip6gretap0: left promiscuous mode [ 619.339275][T23619] ip6gretap0: left allmulticast mode [ 619.427229][T23619] vcan0: left promiscuous mode [ 619.427289][T23619] vcan0: left allmulticast mode [ 619.456719][T23619] bond0: left promiscuous mode [ 619.456780][T23619] bond0: left allmulticast mode [ 619.471592][T23619] team0: left promiscuous mode [ 619.471633][T23619] team0: left allmulticast mode [ 619.505210][T23619] nlmon0: left promiscuous mode [ 619.505251][T23619] nlmon0: left allmulticast mode [ 619.516392][T23619] batadv0: left promiscuous mode [ 619.516447][T23619] batadv0: left allmulticast mode [ 619.529105][T23619] vxcan0: left promiscuous mode [ 619.529142][T23619] vxcan0: left allmulticast mode [ 619.549314][T23619] vxcan1: left promiscuous mode [ 619.549355][T23619] vxcan1: left allmulticast mode [ 619.563897][T23619] veth0: left promiscuous mode [ 619.563936][T23619] veth0: left allmulticast mode [ 619.571708][T23619] veth1: left promiscuous mode [ 619.571764][T23619] veth1: left allmulticast mode [ 619.579661][T23619] wg0: left promiscuous mode [ 619.579697][T23619] wg0: left allmulticast mode [ 619.595300][T23619] wg1: left promiscuous mode [ 619.595354][T23619] wg1: left allmulticast mode [ 619.619908][T23619] wg2: left promiscuous mode [ 619.619965][T23619] wg2: left allmulticast mode [ 619.636353][T23619] veth0_to_bridge: left promiscuous mode [ 619.636417][T23619] veth0_to_bridge: left allmulticast mode [ 619.653759][T23619] bridge_slave_0: left promiscuous mode [ 619.653813][T23619] bridge_slave_0: left allmulticast mode [ 619.664110][T23619] veth1_to_bridge: left promiscuous mode [ 619.664148][T23619] veth1_to_bridge: left allmulticast mode [ 619.670367][T23619] bridge_slave_1: left promiscuous mode [ 619.670403][T23619] bridge_slave_1: left allmulticast mode [ 619.719721][T23619] veth1_to_bond: left promiscuous mode [ 619.719780][T23619] veth1_to_bond: left allmulticast mode [ 619.729674][T23619] bond_slave_1: left promiscuous mode [ 619.729711][T23619] bond_slave_1: left allmulticast mode [ 619.740750][T23619] veth0_to_team: left promiscuous mode [ 619.740786][T23619] veth0_to_team: left allmulticast mode [ 619.776640][T23619] team_slave_0: left promiscuous mode [ 619.776697][T23619] team_slave_0: left allmulticast mode [ 619.791847][T23619] veth1_to_team: left promiscuous mode [ 619.797611][T23619] veth1_to_team: left allmulticast mode [ 619.811795][T23619] team_slave_1: left promiscuous mode [ 619.811833][T23619] team_slave_1: left allmulticast mode [ 619.829364][T23619] veth0_to_batadv: left promiscuous mode [ 619.829403][T23619] veth0_to_batadv: left allmulticast mode [ 619.857544][T23619] batadv_slave_0: left promiscuous mode [ 619.857584][T23619] batadv_slave_0: left allmulticast mode [ 619.878088][T23619] xfrm0: left promiscuous mode [ 619.878128][T23619] xfrm0: left allmulticast mode [ 619.920692][T23619] veth0_to_hsr: left promiscuous mode [ 619.920753][T23619] veth0_to_hsr: left allmulticast mode [ 619.945505][T23619] hsr_slave_0: left promiscuous mode [ 619.948410][T23619] veth1_to_hsr: left promiscuous mode [ 619.948447][T23619] veth1_to_hsr: left allmulticast mode [ 619.951131][T23619] hsr_slave_1: left promiscuous mode [ 619.961322][T23619] veth1_virt_wifi: left promiscuous mode [ 619.961432][T23619] veth1_virt_wifi: left allmulticast mode [ 619.967350][T23619] veth0_virt_wifi: left promiscuous mode [ 619.967389][T23619] veth0_virt_wifi: left allmulticast mode [ 619.969720][T23619] virt_wifi0: left promiscuous mode [ 619.969772][T23619] virt_wifi0: left allmulticast mode [ 620.058230][T23619] vlan1: left promiscuous mode [ 620.058677][T23619] vlan1: left allmulticast mode [ 620.083232][T23632] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 620.086801][T23619] macvlan1: left promiscuous mode [ 620.087288][T23619] macvlan1: left allmulticast mode [ 620.087324][T23619] veth1_vlan: left allmulticast mode [ 620.098787][T23619] ipvtap0: left promiscuous mode [ 620.098828][T23619] ipvtap0: left allmulticast mode [ 620.118908][T23619] ipvlan0: left promiscuous mode [ 620.118946][T23619] ipvlan0: left allmulticast mode [ 620.133060][T23619] ipvlan1: left promiscuous mode [ 620.133100][T23619] ipvlan1: left allmulticast mode [ 620.133128][T23619] veth0_vlan: left allmulticast mode [ 620.157712][T23619] macvtap0: left promiscuous mode [ 620.158080][T23619] macvtap0: left allmulticast mode [ 620.158109][T23619] veth0_macvtap: left allmulticast mode [ 620.183707][T23619] macsec0: left promiscuous mode [ 620.183901][T23619] macsec0: left allmulticast mode [ 620.183915][T23619] veth1_macvtap: left allmulticast mode [ 620.185079][T23619] geneve0: left promiscuous mode [ 620.185097][T23619] geneve0: left allmulticast mode [ 620.186597][T23619] geneve1: left promiscuous mode [ 620.186614][T23619] geneve1: left allmulticast mode [ 620.188490][T23619] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 620.188510][T23619] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 620.192645][T23619] netdevsim netdevsim1 netdevsim1: left promiscuous mode [ 620.192669][T23619] netdevsim netdevsim1 netdevsim1: left allmulticast mode [ 620.272897][T23619] netdevsim netdevsim1 netdevsim2: left promiscuous mode [ 620.272956][T23619] netdevsim netdevsim1 netdevsim2: left allmulticast mode [ 620.279224][T23619] netdevsim netdevsim1 netdevsim3: left promiscuous mode [ 620.280334][T23619] netdevsim netdevsim1 netdevsim3: left allmulticast mode [ 620.298883][T23619] mac80211_hwsim hwsim40 wlan1: left promiscuous mode [ 620.300121][T23619] mac80211_hwsim hwsim40 wlan1: left allmulticast mode [ 620.313400][T23619] macvtap1: left promiscuous mode [ 620.313750][T23619] macvtap1: left allmulticast mode [ 620.313762][T23619] syz_tun: left allmulticast mode [ 620.328376][T23619] bond1: left promiscuous mode [ 620.328436][T23619] bond1: left allmulticast mode [ 620.347351][T23619] bridge1: left promiscuous mode [ 620.347406][T23619] bridge1: left allmulticast mode [ 620.359865][T23619] veth2: left promiscuous mode [ 620.359919][T23619] veth2: left allmulticast mode [ 620.368190][T23619] veth3: left promiscuous mode [ 620.368243][T23619] veth3: left allmulticast mode [ 620.377719][T23619] mac80211_hwsim hwsim47 wlan0: left promiscuous mode [ 620.377759][T23619] mac80211_hwsim hwsim47 wlan0: left allmulticast mode [ 620.390770][T23619] bond2: left promiscuous mode [ 620.390826][T23619] bond2: left allmulticast mode [ 620.411283][T23619] geneve2: left promiscuous mode [ 620.411348][T23619] geneve2: left allmulticast mode [ 620.423728][T23619] bond3: left promiscuous mode [ 620.423768][T23619] bond3: left allmulticast mode [ 620.424843][T23619] 8021q: adding VLAN 0 to HW filter on device bond3 [ 620.430247][T23619] bond4: left promiscuous mode [ 620.430283][T23619] bond4: left allmulticast mode [ 620.431467][T23619] 8021q: adding VLAN 0 to HW filter on device bond4 [ 620.447117][T23619] vxlan0: left promiscuous mode [ 620.447155][T23619] vxlan0: left allmulticast mode [ 620.449913][T23619] bond5: left promiscuous mode [ 620.449949][T23619] bond5: left allmulticast mode [ 620.456066][T23619] vlan2: left promiscuous mode [ 620.456103][T23619] dummy0: left promiscuous mode [ 620.456560][T23619] vlan2: left allmulticast mode [ 620.456590][T23619] dummy0: left allmulticast mode [ 620.458982][T23619] bond6: left promiscuous mode [ 620.459017][T23619] bond6: left allmulticast mode [ 620.467477][T23619] geneve3: left promiscuous mode [ 620.467511][T23619] geneve3: left allmulticast mode [ 620.481398][T23619] veth4: left promiscuous mode [ 620.481434][T23619] veth4: left allmulticast mode [ 620.501614][T23619] veth5: left promiscuous mode [ 620.501650][T23619] veth5: left allmulticast mode [ 620.518703][T23619] gre1: left promiscuous mode [ 620.518754][T23619] gre1: left allmulticast mode [ 620.535532][T23619] bond_slave_0.3: left promiscuous mode [ 620.535569][T23619] bond_slave_0: left promiscuous mode [ 620.535926][T23619] bond_slave_0.3: left allmulticast mode [ 620.535956][T23619] bond_slave_0: left allmulticast mode [ 620.566573][T23619] 8021q: adding VLAN 0 to HW filter on device bond7 [ 620.588957][T23619] bridge2: left allmulticast mode [ 620.614173][T23619] bond8: left promiscuous mode [ 620.635174][T23619] A link change request failed with some changes committed already. Interface geneve5 may have been left with an inconsistent configuration, please check. [ 620.635616][T19527] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 620.635709][T19527] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 620.635835][T19527] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 620.673228][ T63] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 620.989347][T23654] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 622.012254][T23615] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 622.320366][T23673] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 622.363696][T23672] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4263'. [ 622.403950][T23672] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4263'. [ 623.448728][T23717] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 623.629148][T23723] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4277'. [ 623.629187][T23723] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4277'. [ 623.974878][T23741] vlan3: entered promiscuous mode [ 623.974900][T23741] bridge0: entered promiscuous mode [ 624.039727][T23746] SET target dimension over the limit! [ 624.118209][T23745] lo: left promiscuous mode [ 624.118232][T23745] lo: left allmulticast mode [ 624.146674][T23752] bridge0: port 1(veth1_virt_wifi) entered blocking state [ 624.146939][T23752] bridge0: port 1(veth1_virt_wifi) entered disabled state [ 624.147237][T23752] veth1_virt_wifi: entered allmulticast mode [ 624.167348][T23752] veth1_virt_wifi: left allmulticast mode [ 624.344827][T23761] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4289'. [ 624.440698][T23761] 8021q: adding VLAN 0 to HW filter on device bond5 [ 624.558455][T23773] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 624.627243][T23775] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4292'. [ 624.627299][T23775] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4292'. [ 624.690213][T23781] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4292'. [ 624.690240][T23781] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4292'. [ 624.997945][T23793] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 625.028622][T23792] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4296'. [ 625.957591][T23826] bond6: entered promiscuous mode [ 625.958482][T23826] 8021q: adding VLAN 0 to HW filter on device bond6 [ 625.977354][T23833] x_tables: duplicate underflow at hook 1 [ 626.062579][T23826] 8021q: adding VLAN 0 to HW filter on device bond6 [ 626.066588][T23826] bond6: (slave sit1): The slave device specified does not support setting the MAC address [ 626.071357][T23826] bond6: (slave sit1): Error -95 calling set_mac_address [ 626.261239][ T30] audit: type=1800 audit(1794358891.893:18): pid=23834 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4304" name="memory.events" dev="tmpfs" ino=1429 res=0 errno=-22 [ 626.331150][T23846] batman_adv: batadv0: Adding interface: syzkaller0 [ 626.331185][T23846] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 626.331247][T23846] batman_adv: batadv0: Interface activated: syzkaller0 [ 626.817563][ T30] audit: type=1804 audit(1794358892.453:19): pid=23866 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.4314" name="/newroot/189/cgroup.controllers" dev="tmpfs" ino=987 res=1 errno=0 [ 626.821025][ T30] audit: type=1800 audit(1794358892.453:20): pid=23866 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4314" name="cgroup.controllers" dev="tmpfs" ino=987 res=0 errno=-22 [ 627.320129][T23891] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 627.512479][T23900] bridge0: port 1(vlan0) entered blocking state [ 627.515160][T23900] bridge0: port 1(vlan0) entered disabled state [ 627.515319][T23900] vlan0: entered allmulticast mode [ 627.515336][T23900] geneve0: entered allmulticast mode [ 627.518946][T23900] vlan0: entered promiscuous mode [ 627.518963][T23900] geneve0: entered promiscuous mode [ 627.667727][T23904] __nla_validate_parse: 12 callbacks suppressed [ 627.667746][T23904] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4324'. [ 627.765019][T23908] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4328'. [ 627.822149][T23915] netlink: 'syz.3.4326': attribute type 1 has an invalid length. [ 627.822171][T23915] netlink: 244 bytes leftover after parsing attributes in process `syz.3.4326'. [ 627.871324][T23903] bond5: option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 627.888615][T23903] bond5 (unregistering): Released all slaves [ 628.035305][T23922] geneve1: entered promiscuous mode [ 628.082513][T23925] sctp: [Deprecated]: syz.1.4331 (pid 23925) Use of struct sctp_assoc_value in delayed_ack socket option. [ 628.082513][T23925] Use struct sctp_sack_info instead [ 628.327076][T23930] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 628.340528][T23930] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 628.747379][T23943] gretap1: entered allmulticast mode [ 628.995729][T23950] netlink: 'syz.4.4338': attribute type 1 has an invalid length. [ 628.995803][T23950] openvswitch: netlink: Actions may not be safe on all matching packets [ 628.996330][T23950] netlink: 'syz.4.4338': attribute type 1 has an invalid length. [ 628.996415][T23950] openvswitch: netlink: Actions may not be safe on all matching packets [ 628.996946][T23950] netlink: 'syz.4.4338': attribute type 1 has an invalid length. [ 628.997010][T23950] openvswitch: netlink: Actions may not be safe on all matching packets [ 629.007400][T23950] netlink: 'syz.4.4338': attribute type 1 has an invalid length. [ 629.007494][T23950] openvswitch: netlink: Actions may not be safe on all matching packets [ 629.008091][T23950] netlink: 'syz.4.4338': attribute type 1 has an invalid length. [ 629.008152][T23950] openvswitch: netlink: Actions may not be safe on all matching packets [ 629.008651][T23950] netlink: 'syz.4.4338': attribute type 1 has an invalid length. [ 629.008712][T23950] openvswitch: netlink: Actions may not be safe on all matching packets [ 629.009208][T23950] netlink: 'syz.4.4338': attribute type 1 has an invalid length. [ 629.009269][T23950] openvswitch: netlink: Actions may not be safe on all matching packets [ 629.015848][T23950] netlink: 'syz.4.4338': attribute type 1 has an invalid length. [ 629.015915][T23950] openvswitch: netlink: Actions may not be safe on all matching packets [ 629.016447][T23950] netlink: 'syz.4.4338': attribute type 1 has an invalid length. [ 629.298121][ T3389] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 629.298143][ T3389] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 629.403662][T23966] syzkaller0: entered promiscuous mode [ 629.403684][T23966] syzkaller0: entered allmulticast mode [ 629.524398][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 629.634051][T23974] No such timeout policy "syz0" [ 630.181278][T23993] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 630.290444][T23999] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4352'. [ 630.291058][T23999] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4352'. [ 630.291647][T23999] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4352'. [ 630.300850][T23999] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4352'. [ 630.301385][T23999] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4352'. [ 630.437401][T24009] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4354'. [ 630.451555][T24010] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4353'. [ 630.929790][T24019] xt_TPROXY: Can be used only with -p tcp or -p udp [ 631.063444][T24021] syzkaller1: entered promiscuous mode [ 631.063460][T24021] syzkaller1: entered allmulticast mode [ 631.143181][T24028] RDS: rds_bind could not find a transport for 2001::1, load rds_tcp or rds_rdma? [ 631.333312][T24032] syzkaller0: port 1(veth0) entered blocking state [ 631.333493][T24032] syzkaller0: port 1(veth0) entered disabled state [ 631.333773][T24032] veth0: entered allmulticast mode [ 631.335591][T24032] veth0: entered promiscuous mode [ 632.316472][T24068] vxcan4: entered allmulticast mode [ 632.379608][T24077] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 633.174339][T24110] __nla_validate_parse: 99 callbacks suppressed [ 633.174376][T24110] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4381'. [ 633.218175][T24109] validate_nla: 28 callbacks suppressed [ 633.218194][T24109] netlink: 'syz.2.4382': attribute type 1 has an invalid length. [ 633.406310][T24109] 8021q: adding VLAN 0 to HW filter on device bond5 [ 633.435204][T24109] netlink: 'syz.2.4382': attribute type 10 has an invalid length. [ 633.435226][T24109] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4382'. [ 633.436370][T24113] netlink: 92 bytes leftover after parsing attributes in process `syz.4.4384'. [ 633.548382][T24121] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4385'. [ 633.561629][T24112] bond5: (slave veth3): Enslaving as an active interface with a down link [ 633.601616][T24115] bond5: (slave dummy0): making interface the new active one [ 633.605903][T24122] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4385'. [ 633.620784][T24115] dummy0: entered promiscuous mode [ 633.621212][T24115] bond5: (slave dummy0): Enslaving as an active interface with an up link [ 633.646832][T24109] bond5: (slave dummy0): Releasing active interface [ 633.713132][T24122] bond7: entered promiscuous mode [ 633.714166][T24122] bond7: entered allmulticast mode [ 633.714800][T24122] 8021q: adding VLAN 0 to HW filter on device bond7 [ 633.933673][T24130] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4387'. [ 634.125351][T24139] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4387'. [ 634.137221][T24139] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4387'. [ 634.146163][T24135] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4390'. [ 634.181714][T24135] ip6gre1: entered promiscuous mode [ 634.181737][T24135] ip6gre1: entered allmulticast mode [ 634.419862][T24147] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4392'. [ 635.439296][T24175] 8021q: VLANs not supported on ip6_vti0 [ 635.587414][T24180] ip6t_rt: too many addresses specified [ 636.549768][T24191] syzkaller0: entered promiscuous mode [ 636.549790][T24191] syzkaller0: entered allmulticast mode [ 636.622108][T24195] netlink: 'syz.4.4406': attribute type 10 has an invalid length. [ 636.680012][T24197] netlink: 'syz.4.4406': attribute type 10 has an invalid length. [ 638.384756][T24195] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 638.421435][T24195] team0: Port device netdevsim0 added [ 638.551119][T24201] __nla_validate_parse: 1 callbacks suppressed [ 638.551141][T24201] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4407'. [ 638.551157][T24201] net_ratelimit: 25 callbacks suppressed [ 638.551167][T24201] openvswitch: netlink: ufid size 27 bytes exceeds the range (1, 16) [ 638.551180][T24201] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 638.551616][T24201] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4407'. [ 638.619551][T24197] team0: Port device netdevsim0 removed [ 638.638957][T24197] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 638.663634][T24197] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 638.698250][T24202] netlink: 3576 bytes leftover after parsing attributes in process `syz.3.4407'. [ 638.975778][T24204] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4408'. [ 639.655678][T24230] ip_tables: iptables: counters copy to user failed while replacing table [ 639.656435][T24231] ip_tables: iptables: counters copy to user failed while replacing table [ 641.042476][ T5633] Bluetooth: hci4: command 0x0405 tx timeout [ 641.445972][T24254] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4418'. [ 641.697189][T24262] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4419'. [ 642.371385][T24288] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4424'. [ 642.371422][T24288] netlink: 'syz.3.4424': attribute type 30 has an invalid length. [ 642.402547][T24288] vxlan1: entered promiscuous mode [ 642.402572][T24288] vxlan1: entered allmulticast mode [ 642.437934][T24288] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4424'. [ 642.437970][T24288] netlink: 'syz.3.4424': attribute type 30 has an invalid length. [ 642.516170][T24288] vxlan2: entered promiscuous mode [ 642.516193][T24288] vxlan2: entered allmulticast mode [ 642.603465][ T3389] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 642.603508][ T3389] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 642.603540][ T3389] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 642.603570][ T3389] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 642.869697][T24304] netlink: 'syz.4.4431': attribute type 10 has an invalid length. [ 642.900703][T24304] team0: Port device dummy0 added [ 642.960748][T24312] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 642.978555][T24301] netlink: 'syz.2.4430': attribute type 11 has an invalid length. [ 643.148458][ T5631] Bluetooth: hci4: unexpected cc 0x1003 length: 10 > 9 [ 643.148491][ T5631] Bluetooth: hci4: unexpected event for opcode 0x1003 [ 643.159382][T24318] netlink: 276 bytes leftover after parsing attributes in process `syz.4.4435'. [ 643.309951][T24327] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4435'. [ 644.570787][T24363] TC_ACT_REPEAT abuse ? [ 644.719620][ T30] audit: type=1107 audit(1794358910.353:21): pid=24367 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 644.971816][T24371] netlink: 'syz.2.4449': attribute type 1 has an invalid length. [ 644.971838][T24371] __nla_validate_parse: 1 callbacks suppressed [ 644.972508][T24371] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4449'. [ 644.982297][T24371] netlink: 'syz.2.4449': attribute type 11 has an invalid length. [ 645.077751][T24381] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 645.727919][T24396] netlink: 'syz.2.4456': attribute type 1 has an invalid length. [ 645.788978][T24396] bond6: option mode: invalid value (7) [ 645.838830][T24396] bond6 (unregistering): Released all slaves [ 646.032171][T24375] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 646.506040][T24413] netlink: 'syz.2.4459': attribute type 2 has an invalid length. [ 646.530511][T24413] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4459'. [ 646.587253][T24415] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4461'. [ 646.609375][T24415] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4461'. [ 646.609688][T24415] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4461'. [ 646.830958][T24424] netlink: 220 bytes leftover after parsing attributes in process `syz.2.4465'. [ 647.350495][T24439] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4469'. [ 647.371045][T24441] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 647.518602][T24437] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 648.569826][T24459] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 650.498475][T24511] netlink: 'syz.0.4481': attribute type 1 has an invalid length. [ 650.699490][T24517] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4481'. [ 650.857973][T24515] bond7: (slave geneve2): making interface the new active one [ 650.860058][ T5631] Bluetooth: hci4: link tx timeout [ 650.860091][ T5631] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 650.889490][T24515] bond7: (slave geneve2): Enslaving as an active interface with an up link [ 650.902244][T24517] bond7: entered promiscuous mode [ 650.902269][T24517] geneve2: entered promiscuous mode [ 650.925344][T24517] 8021q: adding VLAN 0 to HW filter on device bond7 [ 650.935291][T24499] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 650.935428][T24499] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 650.935519][T24499] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 650.935585][T24499] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 651.359090][T24528] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4484'. [ 651.855235][T24527] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4484'. [ 651.954310][T24539] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 651.973779][T24541] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4489'. [ 652.043469][T24542] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 652.081392][T24544] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4490'. [ 652.253141][T24548] syzkaller1: entered allmulticast mode [ 652.277496][T24548] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 652.309648][T24549] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4492'. [ 652.344513][T24548] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 652.461317][T24552] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4493'. [ 652.465937][T24552] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4493'. [ 652.494729][T24554] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4494'. [ 652.597559][T24552] macsec1: entered promiscuous mode [ 652.597600][T24552] macsec1: entered allmulticast mode [ 652.665319][T24561] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4495'. [ 652.709984][T24536] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 652.882100][ T5633] Bluetooth: hci4: command 0x0405 tx timeout [ 652.951414][T24573] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_vlan, syncid = 4, id = 0 [ 653.208142][T24587] netlink: 'syz.4.4501': attribute type 1 has an invalid length. [ 653.347366][T24591] netlink: 'syz.0.4505': attribute type 1 has an invalid length. [ 653.477504][T24594] veth1_to_team: entered promiscuous mode [ 653.479606][T24594] veth1_to_team: left promiscuous mode [ 653.530592][T24600] Bluetooth: hci0: unsupported parameter 5134 [ 653.530632][T24600] Bluetooth: hci0: unsupported parameter 8192 [ 653.530661][T24600] Bluetooth: hci0: unsupported parameter 5134 [ 653.530690][T24600] Bluetooth: hci0: unsupported parameter 8192 [ 653.819017][T24610] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 655.545263][T24607] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 656.318186][T24640] mac80211_hwsim hwsim45 wlan0: left promiscuous mode [ 656.318225][T24640] mac80211_hwsim hwsim45 wlan0: left allmulticast mode [ 656.338491][T24643] syz_tun: entered allmulticast mode [ 656.439404][T24643] __nla_validate_parse: 14 callbacks suppressed [ 656.439457][T24643] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4524'. [ 656.970030][T24641] syz_tun: left allmulticast mode [ 657.077803][T24661] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4527'. [ 657.233594][T24661] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4527'. [ 657.692984][T24668] tunl0: left promiscuous mode [ 657.697312][T24668] gre0: left promiscuous mode [ 657.698320][T24668] gretap0: left promiscuous mode [ 657.717457][T24668] erspan0: left promiscuous mode [ 657.718574][T24668] ip_vti0: left promiscuous mode [ 657.740322][T24668] ip6_vti0: left promiscuous mode [ 657.741508][T24668] sit0: left promiscuous mode [ 657.781316][T24668] ip6tnl0: left promiscuous mode [ 657.794104][T24668] ip6gre0: left promiscuous mode [ 657.806721][T24668] ip6gretap0: left promiscuous mode [ 657.807636][T24668] vcan0: left promiscuous mode [ 657.823818][T24668] bond0: left promiscuous mode [ 657.829129][T24668] team0: left promiscuous mode [ 657.848469][T24668] nlmon0: left promiscuous mode [ 657.869935][T24668] batadv0: left promiscuous mode [ 657.906338][T24668] vxcan0: left promiscuous mode [ 657.907621][T24668] vxcan1: left promiscuous mode [ 657.927865][T24668] wg0: left promiscuous mode [ 657.929280][T24668] wg1: left promiscuous mode [ 657.957590][T24668] wg2: left promiscuous mode [ 658.001693][T24668] bridge_slave_1: left promiscuous mode [ 658.029281][T24668] bond_slave_0: left promiscuous mode [ 658.050480][T24668] veth1_to_bond: left promiscuous mode [ 658.051737][T24668] bond_slave_1: left promiscuous mode [ 658.069658][T24668] veth0_to_team: left promiscuous mode [ 658.094065][T24668] team_slave_0: left promiscuous mode [ 658.102353][T24668] veth1_to_team: left promiscuous mode [ 658.103600][T24668] team_slave_1: left promiscuous mode [ 658.122643][T24668] veth0_to_batadv: left promiscuous mode [ 658.136762][T24668] batadv_slave_0: left promiscuous mode [ 658.137882][T24668] veth1_to_batadv: left promiscuous mode [ 658.145392][T24668] batadv_slave_1: left promiscuous mode [ 658.148339][T24668] xfrm0: left promiscuous mode [ 658.168057][T24668] veth0_to_hsr: left promiscuous mode [ 658.187231][T24668] veth1_to_hsr: left promiscuous mode [ 658.197853][T24668] hsr0: left promiscuous mode [ 658.206461][T24668] veth1_virt_wifi: left promiscuous mode [ 658.210633][T24668] veth0_virt_wifi: left promiscuous mode [ 658.211752][T24668] virt_wifi0: left promiscuous mode [ 658.230133][T24668] vlan0: left promiscuous mode [ 658.254837][T24668] vlan1: left promiscuous mode [ 658.274915][T24668] macvlan0: left promiscuous mode [ 658.279113][T24668] macvlan1: left promiscuous mode [ 658.287793][T24668] ipvtap0: left promiscuous mode [ 658.289179][T24668] ipvlan0: left promiscuous mode [ 658.295696][T24668] ipvlan1: left promiscuous mode [ 658.299305][T24668] macvtap0: left promiscuous mode [ 658.307759][T24668] macsec0: left promiscuous mode [ 658.332427][T24668] geneve0: left promiscuous mode [ 658.339572][T24668] geneve1: left promiscuous mode [ 658.341315][T24668] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 658.349104][T24668] netdevsim netdevsim0 netdevsim1: left promiscuous mode [ 658.354871][T24668] netdevsim netdevsim0 netdevsim2: left promiscuous mode [ 658.358246][T24668] netdevsim netdevsim0 netdevsim3: left promiscuous mode [ 658.359764][T24668] mac80211_hwsim hwsim46 wlan1: left promiscuous mode [ 658.379686][T24668] vxlan0: left promiscuous mode [ 658.388369][T24668] bond1: left promiscuous mode [ 658.388408][T24668] veth0_to_bond: left promiscuous mode [ 658.419992][T24668] veth2: left promiscuous mode [ 658.421304][T24668] veth3: left promiscuous mode [ 658.434404][T24668] gre1: left promiscuous mode [ 658.441577][T24668] bond2: left promiscuous mode [ 658.469965][T24668] mac80211_hwsim hwsim50 wlan2: left promiscuous mode [ 658.487822][T24668] mac80211_hwsim hwsim53 wlan3: left promiscuous mode [ 658.492841][T24668] ip6gre1: left promiscuous mode [ 658.494270][T24668] bond3: left promiscuous mode [ 658.508140][T24668] gretap1: left promiscuous mode [ 658.518951][T24668] syztnl1: left promiscuous mode [ 658.520235][T24668] mac80211_hwsim hwsim55 wlan4: left promiscuous mode [ 658.526647][T24668] veth4: left promiscuous mode [ 658.544970][T24668] veth5: left promiscuous mode [ 658.546905][T24668] vxlan1: left promiscuous mode [ 658.571581][T24668] bond4: left promiscuous mode [ 658.614514][T24668] bridge1: left promiscuous mode [ 658.616477][T24668] mac80211_hwsim hwsim45 nicvf0: left promiscuous mode [ 658.629153][T24668] ipip0: left promiscuous mode [ 658.761280][T24668] 8021q: adding VLAN 0 to HW filter on device bond6 [ 658.858137][T24668] bond7: left promiscuous mode [ 658.858181][T24668] geneve2: left promiscuous mode [ 658.920560][ T1156] syzkaller0: port 1(veth0) entered blocking state [ 658.920769][ T1156] syzkaller0: port 1(veth0) entered forwarding state [ 659.353748][ T1156] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 659.355678][ T1156] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 659.355767][ T1156] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 659.355843][ T1156] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 659.430819][T24699] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 660.623700][T24706] syzkaller1: entered promiscuous mode [ 660.623897][T24706] syzkaller1: entered allmulticast mode [ 661.381491][T24696] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 661.452989][T24734] netlink: 'syz.2.4545': attribute type 2 has an invalid length. [ 661.791682][T24741] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4546'. [ 661.971532][T24738] TC_ACT_REPEAT abuse ? [ 661.996821][T24749] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4550'. [ 662.600432][T24760] netlink: 'syz.4.4553': attribute type 10 has an invalid length. [ 662.695067][T24761] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4554'. [ 662.868187][T24770] netlink: 'syz.0.4556': attribute type 1 has an invalid length. [ 662.868210][T24770] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4556'. [ 662.995235][T24775] ip_tables: iptables: counters copy to user failed while replacing table [ 663.172956][T24778] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4558'. [ 663.172980][T24778] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4558'. [ 663.246603][T24760] team0: Device gre0 is of different type [ 663.340628][T24786] ip_tables: iptables: counters copy to user failed while replacing table [ 663.964771][T24781] syzkaller1: entered promiscuous mode [ 663.964971][T24781] syzkaller1: entered allmulticast mode [ 664.338696][T24799] netlink: 'syz.4.4560': attribute type 2 has an invalid length. [ 664.639447][T24815] xt_TCPMSS: Only works on TCP SYN packets [ 665.906803][T24828] batadv_slave_1: entered allmulticast mode [ 665.930012][T24828] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 666.098072][T24830] netlink: 'syz.2.4568': attribute type 1 has an invalid length. [ 666.208263][T24838] netlink: 'syz.2.4568': attribute type 2 has an invalid length. [ 666.668531][T24830] bond6: entered promiscuous mode [ 666.679809][T24830] 8021q: adding VLAN 0 to HW filter on device bond6 [ 666.856019][T24855] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4571'. [ 667.044268][T24858] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4572'. [ 667.428312][T24838] !;: entered promiscuous mode [ 667.597432][T24850] netlink: 'syz.3.4571': attribute type 12 has an invalid length. [ 667.958612][T24869] netlink: 'syz.2.4573': attribute type 1 has an invalid length. [ 668.304972][T24878] tipc: Failed to remove unknown binding: 66,0,2/0:2080981410/2080981411 [ 668.305439][T24878] tipc: Failed to remove unknown binding: 66,0,2/0:2080981410/2080981411 [ 668.634868][T24881] netlink: 'syz.2.4577': attribute type 12 has an invalid length. [ 669.310927][T24894] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4579'. [ 669.569603][T24898] ipt_REJECT: TCP_RESET invalid for non-tcp [ 670.117275][T24894] A link change request failed with some changes committed already. Interface geneve5 may have been left with an inconsistent configuration, please check. [ 670.219642][T24908] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4580'. [ 670.219780][T24908] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4580'. [ 670.226163][T24908] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4580'. [ 670.238617][T24908] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4580'. [ 670.386463][T24911] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4583'. [ 670.574475][T24912] veth0: left allmulticast mode [ 670.574838][T24912] veth0: left promiscuous mode [ 670.575729][T24912] bridge0: port 1(veth0) entered disabled state [ 670.702857][T24913] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4583'. [ 670.840653][T24917] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4586'. [ 671.940903][T24916] A link change request failed with some changes committed already. Interface geneve5 may have been left with an inconsistent configuration, please check. [ 671.992921][T24929] __nla_validate_parse: 1 callbacks suppressed [ 671.992941][T24929] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4588'. [ 672.008640][T24931] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4588'. [ 672.136530][T24936] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4590'. [ 672.136570][T24936] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4590'. [ 674.028182][T24949] ip_tables: iptables: counters copy to user failed while replacing table [ 674.239257][T24947] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 674.766824][T24956] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4595'. [ 675.046452][T24961] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 676.867579][T24970] netlink: 84 bytes leftover after parsing attributes in process `syz.2.4600'. [ 677.885846][T24980] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4602'. [ 677.885885][T24980] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4602'. [ 678.108996][T24982] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4603'. [ 678.113834][T24986] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4603'. [ 678.186946][T24993] openvswitch: netlink: Flow actions attr not present in new flow. [ 678.498953][T24998] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4607'. [ 679.636481][T25024] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 680.466388][T25040] nbd5: detected capacity change from 0 to 63 [ 680.512739][ T5633] block nbd5: Receive control failed (result -32) [ 680.639529][ T51] block nbd5: Dead connection, failed to find a fallback [ 680.639556][ T51] block nbd5: shutting down sockets [ 680.639669][ T51] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 680.639790][ T51] Buffer I/O error on dev nbd5, logical block 0, async page read [ 680.640192][ T51] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 680.640218][ T51] Buffer I/O error on dev nbd5, logical block 1, async page read [ 680.640323][ T51] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 680.640345][ T51] Buffer I/O error on dev nbd5, logical block 2, async page read [ 680.640467][ T51] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 680.640489][ T51] Buffer I/O error on dev nbd5, logical block 3, async page read [ 680.640838][ T51] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 680.640862][ T51] Buffer I/O error on dev nbd5, logical block 0, async page read [ 680.641114][ T51] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 680.641137][ T51] Buffer I/O error on dev nbd5, logical block 1, async page read [ 680.643470][ T51] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 680.643699][ T51] Buffer I/O error on dev nbd5, logical block 2, async page read [ 680.643885][ T51] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 680.643908][ T51] Buffer I/O error on dev nbd5, logical block 3, async page read [ 680.645252][ T51] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 680.645275][ T51] Buffer I/O error on dev nbd5, logical block 0, async page read [ 680.645370][ T51] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 680.645392][ T51] Buffer I/O error on dev nbd5, logical block 1, async page read [ 680.664482][T25043] ldm_validate_partition_table(): Disk read failed. [ 680.673143][T25043] Dev nbd5: unable to read RDB block 0 [ 680.696281][T25043] nbd5: unable to read partition table [ 681.218888][T25043] ldm_validate_partition_table(): Disk read failed. [ 681.219449][T25043] Dev nbd5: unable to read RDB block 0 [ 681.238929][T25043] nbd5: unable to read partition table [ 681.615022][T25057] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4617'. [ 681.615097][T25057] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4617'. [ 681.869603][T25069] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4619'. [ 682.040304][T25071] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4616'. [ 682.040366][T25071] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4616'. [ 682.730218][T25058] tipc: Resetting bearer [ 683.875766][T24490] netdevsim netdevsim4 netdevsim2: unset [0, 1] type 1 family 0 port 2816 - 0 [ 683.875819][T24490] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.875916][T24490] netdevsim netdevsim4 netdevsim1: unset [0, 1] type 1 family 0 port 2816 - 0 [ 683.875958][T24490] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.876047][T24490] netdevsim netdevsim4 netdevsim0: unset [0, 1] type 1 family 0 port 2816 - 0 [ 683.876089][T24490] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.876177][T24490] netdevsim netdevsim4 netdevsim3: unset [0, 1] type 1 family 0 port 2816 - 0 [ 683.876218][T24490] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 684.502990][T25094] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4624'. [ 684.559081][T25094] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4624'. [ 684.923389][T25108] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4630'. [ 685.016708][T25108] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4630'. [ 695.876481][T25137] netlink: 'syz.3.4635': attribute type 3 has an invalid length. [ 695.876502][T25137] netlink: 'syz.3.4635': attribute type 2 has an invalid length. [ 695.958781][T25149] tipc: Failed to remove unknown binding: 66,1,1/0:3581151167/3581151168 [ 696.881637][T25171] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4641'. [ 696.925188][T25174] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4642'. [ 697.482459][T25185] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4646'. [ 697.509388][T25185] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4646'. [ 697.509446][T25185] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 697.694042][T25191] netlink: 'syz.0.4649': attribute type 4 has an invalid length. [ 697.902981][T25194] netlink: 'syz.0.4649': attribute type 21 has an invalid length. [ 699.269606][T25229] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4654'. [ 699.269668][T25229] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4654'. [ 699.334728][T25229] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4654'. [ 699.783269][T25241] openvswitch: netlink: IP tunnel dst address not specified [ 701.210446][T25259] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4659'. [ 701.778301][T25227] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 701.931765][T25227] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 704.086431][T25227] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 704.103893][T25227] syzkaller0: port 1(veth0) entered disabled state [ 704.614142][T24482] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 704.614196][T24482] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 704.614259][T24482] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 704.614359][T24482] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 704.614426][T24482] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 704.614471][T24482] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 704.614555][T24482] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 704.614598][T24482] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 704.614654][T24482] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 704.614727][T24482] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 704.614788][T24482] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 704.614850][T24482] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 704.793472][T25234] macsec1: entered allmulticast mode [ 704.793515][T25234] batadv0: entered allmulticast mode [ 704.799769][T25234] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 704.823926][T25234] batadv0: left allmulticast mode [ 704.905577][T25245] tipc: Enabling of bearer rejected, failed to enable media [ 704.906468][T25246] tipc: Enabling of bearer rejected, failed to enable media [ 705.399413][T25283] ip_tables: iptables: counters copy to user failed while replacing table [ 705.715493][T25293] xt_ecn: cannot match TCP bits for non-tcp packets [ 706.069509][T25303] netlink: 'syz.2.4668': attribute type 1 has an invalid length. [ 706.069565][T25303] netlink: 'syz.2.4668': attribute type 2 has an invalid length. [ 706.187372][T25286] syzkaller1: entered promiscuous mode [ 706.187558][T25286] syzkaller1: entered allmulticast mode [ 707.876880][T25330] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4677'. [ 707.877069][T25330] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4677'. [ 707.953487][T25334] Bluetooth: hci0: unsupported parameter 5135 [ 707.953512][T25334] Bluetooth: hci0: unsupported parameter 8192 [ 707.953525][T25334] Bluetooth: hci0: unsupported parameter 5135 [ 707.953537][T25334] Bluetooth: hci0: unsupported parameter 8192 [ 708.228027][T25344] xt_hashlimit: size too large, truncated to 1048576 [ 708.741753][T25356] xt_hashlimit: size too large, truncated to 1048576 [ 710.993659][T25382] geneve4: entered promiscuous mode [ 712.668400][T25410] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4696'. [ 713.266397][T25418] syzkaller0: entered promiscuous mode [ 713.266453][T25418] syzkaller0: entered allmulticast mode [ 713.326096][T25419] syzkaller0: MTU not usable for tipc bearer [ 713.326192][T25419] tipc: Enabling of bearer rejected, failed to enable media [ 715.579850][T25458] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4708'. [ 715.718343][T25458] vlan0: left allmulticast mode [ 715.718366][T25458] geneve0: left allmulticast mode [ 715.719581][T25458] bridge0: port 1(vlan0) entered disabled state [ 715.822320][T25462] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4710'. [ 716.366429][T25471] FAULT_INJECTION: forcing a failure. [ 716.366429][T25471] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 716.366479][T25471] CPU: 0 UID: 0 PID: 25471 Comm: syz.4.4711 Not tainted syzkaller #0 PREEMPT(full) [ 716.366500][T25471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 716.366512][T25471] Call Trace: [ 716.366521][T25471] [ 716.366530][T25471] dump_stack_lvl+0xe8/0x150 [ 716.366568][T25471] should_fail_ex+0x3eb/0x540 [ 716.366599][T25471] _copy_from_user+0x2d/0xb0 [ 716.366625][T25471] __sys_bpf+0x2e7/0xe00 [ 716.366691][T25471] ? __pfx___sys_bpf+0x10/0x10 [ 716.366723][T25471] ? __fget_files+0x2a/0x420 [ 716.366773][T25471] ? ksys_write+0x242/0x270 [ 716.366802][T25471] ? __pfx_ksys_write+0x10/0x10 [ 716.366832][T25471] __x64_sys_bpf+0xba/0xd0 [ 716.366861][T25471] do_syscall_64+0x166/0x520 [ 716.366889][T25471] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 716.366908][T25471] ? clear_bhb_loop+0x70/0xc0 [ 716.366931][T25471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 716.366950][T25471] RIP: 0033:0x7f5787da8f19 [ 716.366969][T25471] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 716.366984][T25471] RSP: 002b:00007f5788cd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 716.367004][T25471] RAX: ffffffffffffffda RBX: 00007f5788025fa0 RCX: 00007f5787da8f19 [ 716.367018][T25471] RDX: 0000000000000050 RSI: 0000200000000940 RDI: 000000000000000a [ 716.367030][T25471] RBP: 00007f5788cd5090 R08: 0000000000000000 R09: 0000000000000000 [ 716.367041][T25471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 716.367053][T25471] R13: 00007f5788026038 R14: 00007f5788025fa0 R15: 00007ffd7d6a5fe8 [ 716.367084][T25471] [ 716.907217][T25477] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4712'. [ 716.907253][T25477] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4712'. [ 716.996786][T25482] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4714'. [ 718.111501][T25502] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4719'. [ 718.236073][T25510] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4723'. [ 719.046835][T25518] macsec1: entered promiscuous mode [ 719.271378][T25522] sctp: [Deprecated]: syz.1.4726 (pid 25522) Use of struct sctp_assoc_value in delayed_ack socket option. [ 719.271378][T25522] Use struct sctp_sack_info instead [ 719.355805][T25526] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 719.451472][T25531] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4729'. [ 719.451541][T25531] netlink: 'syz.4.4729': attribute type 5 has an invalid length. [ 719.451575][T25531] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4729'. [ 719.498629][T25531] geneve2: entered promiscuous mode [ 719.498688][T25531] geneve2: entered allmulticast mode [ 719.555279][T25526] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 719.572217][T24485] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 719.572259][T24485] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 719.572289][T24485] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 719.572320][T24485] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 719.767594][T25536] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4729'. [ 719.767661][T25536] netlink: 'syz.4.4729': attribute type 5 has an invalid length. [ 720.933511][T25546] ip_tables: iptables: counters copy to user failed while replacing table [ 721.388736][T25555] __nla_validate_parse: 1 callbacks suppressed [ 721.388772][T25555] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4733'. [ 721.559867][ T30] audit: type=1804 audit(1794358987.193:22): pid=25563 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.4736" name="/newroot/302/memory.events" dev="tmpfs" ino=1565 res=1 errno=0 [ 721.563826][ T30] audit: type=1800 audit(1794358987.203:23): pid=25563 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4736" name="memory.events" dev="tmpfs" ino=1565 res=0 errno=-22 [ 721.621593][ T30] audit: type=1804 audit(1794358987.253:24): pid=25563 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.4736" name="/newroot/302/memory.events" dev="tmpfs" ino=1565 res=1 errno=0 [ 722.313869][T25586] ip_tables: iptables: counters copy to user failed while replacing table [ 722.838141][T25588] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4743'. [ 722.876062][T25596] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4745'. [ 723.032693][T25596] IPv6: sit1: Disabled Multicast RS [ 724.490190][T25621] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4751'. [ 724.578471][T25623] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 724.869963][T25623] x_tables: duplicate underflow at hook 1 [ 725.998260][T25656] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4756'. [ 726.569306][T25670] ip_tables: iptables: counters copy to user failed while replacing table [ 726.957115][T25665] A link change request failed with some changes committed already. Interface geneve5 may have been left with an inconsistent configuration, please check. [ 729.262314][T25714] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 729.392389][T25715] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4770'. [ 729.392412][T25715] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4770'. [ 729.526339][ T30] audit: type=1800 audit(1794358995.163:25): pid=25720 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4771" name="memory.events" dev="tmpfs" ino=1862 res=0 errno=-22 [ 730.784727][T25745] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4775'. [ 731.309190][T25718] lo: entered promiscuous mode [ 731.309250][T25718] lo: entered allmulticast mode [ 731.355165][T25718] tunl0: entered promiscuous mode [ 731.355223][T25718] tunl0: entered allmulticast mode [ 731.376994][T25718] gre0: entered promiscuous mode [ 731.377051][T25718] gre0: entered allmulticast mode [ 731.402400][T25718] gretap0: entered promiscuous mode [ 731.402585][T25718] gretap0: entered allmulticast mode [ 731.406648][T25718] erspan0: entered promiscuous mode [ 731.406832][T25718] erspan0: entered allmulticast mode [ 731.410423][T25718] ip_vti0: entered promiscuous mode [ 731.410608][T25718] ip_vti0: entered allmulticast mode [ 731.477393][T25718] ip6_vti0: entered promiscuous mode [ 731.477454][T25718] ip6_vti0: entered allmulticast mode [ 731.479128][T25718] sit0: entered promiscuous mode [ 731.479162][T25718] sit0: entered allmulticast mode [ 731.481171][T25718] ip6tnl0: entered promiscuous mode [ 731.481221][T25718] ip6tnl0: entered allmulticast mode [ 731.518055][T25718] ip6gre0: entered promiscuous mode [ 731.518095][T25718] ip6gre0: entered allmulticast mode [ 731.519768][T25718] syz_tun: entered promiscuous mode [ 731.519805][T25718] syz_tun: entered allmulticast mode [ 731.539751][T25718] ip6gretap0: entered promiscuous mode [ 731.539790][T25718] ip6gretap0: entered allmulticast mode [ 731.561158][T25718] bridge0: entered promiscuous mode [ 731.561276][T25718] bridge0: entered allmulticast mode [ 731.580093][T25718] vcan0: entered promiscuous mode [ 731.580132][T25718] vcan0: entered allmulticast mode [ 731.594504][T25718] bond0: entered promiscuous mode [ 731.594546][T25718] bond0: entered allmulticast mode [ 731.614428][T25718] team0: entered promiscuous mode [ 731.616658][T25718] team0: entered allmulticast mode [ 731.628033][T25718] dummy0: entered allmulticast mode [ 731.648877][T25718] nlmon0: entered promiscuous mode [ 731.648934][T25718] nlmon0: entered allmulticast mode [ 731.651196][T25718] batadv0: entered promiscuous mode [ 731.651238][T25718] batadv0: entered allmulticast mode [ 731.678075][T25718] vxcan0: entered promiscuous mode [ 731.678130][T25718] vxcan0: entered allmulticast mode [ 731.679675][T25718] vxcan1: entered promiscuous mode [ 731.679708][T25718] vxcan1: entered allmulticast mode [ 731.681640][T25718] veth0: entered promiscuous mode [ 731.681674][T25718] veth0: entered allmulticast mode [ 731.719784][T25718] veth1: entered promiscuous mode [ 731.719847][T25718] veth1: entered allmulticast mode [ 731.735280][T25718] wg0: entered promiscuous mode [ 731.735319][T25718] wg0: entered allmulticast mode [ 731.739085][T25718] wg2: entered promiscuous mode [ 731.739119][T25718] wg2: entered allmulticast mode [ 731.740723][T25718] veth1_to_bridge: entered promiscuous mode [ 731.740757][T25718] veth1_to_bridge: entered allmulticast mode [ 731.788441][T25718] bridge_slave_1: entered promiscuous mode [ 731.788630][T25718] bridge_slave_1: entered allmulticast mode [ 731.807904][T25718] veth0_to_bond: entered promiscuous mode [ 731.808089][T25718] veth0_to_bond: entered allmulticast mode [ 731.817951][T25718] bond_slave_0: entered promiscuous mode [ 731.818127][T25718] bond_slave_0: entered allmulticast mode [ 731.832139][T25718] veth1_to_bond: entered promiscuous mode [ 731.832312][T25718] veth1_to_bond: entered allmulticast mode [ 731.835691][T25718] bond_slave_1: entered promiscuous mode [ 731.835871][T25718] bond_slave_1: entered allmulticast mode [ 731.860090][T25718] veth0_to_team: entered promiscuous mode [ 731.860262][T25718] veth0_to_team: entered allmulticast mode [ 731.895620][T25718] team_slave_0: entered promiscuous mode [ 731.895810][T25718] team_slave_0: entered allmulticast mode [ 731.899195][T25718] veth1_to_team: entered promiscuous mode [ 731.899375][T25718] veth1_to_team: entered allmulticast mode [ 731.919691][T25718] team_slave_1: entered promiscuous mode [ 731.919875][T25718] team_slave_1: entered allmulticast mode [ 731.971511][T25718] veth0_to_batadv: entered promiscuous mode [ 731.971705][T25718] veth0_to_batadv: entered allmulticast mode [ 731.978917][T25718] batadv_slave_0: entered promiscuous mode [ 731.979092][T25718] batadv_slave_0: entered allmulticast mode [ 731.987684][T25718] veth1_to_batadv: entered promiscuous mode [ 731.987865][T25718] veth1_to_batadv: entered allmulticast mode [ 732.002630][T25718] batadv_slave_1: entered promiscuous mode [ 732.002812][T25718] batadv_slave_1: entered allmulticast mode [ 732.015960][T25718] xfrm0: entered promiscuous mode [ 732.016133][T25718] xfrm0: entered allmulticast mode [ 732.031676][T25718] veth0_to_hsr: entered promiscuous mode [ 732.032181][T25718] veth0_to_hsr: entered allmulticast mode [ 732.038038][T25718] hsr_slave_0: entered allmulticast mode [ 732.048847][T25718] veth1_to_hsr: entered promiscuous mode [ 732.049023][T25718] veth1_to_hsr: entered allmulticast mode [ 732.058466][T25718] hsr_slave_1: entered allmulticast mode [ 732.075152][T25718] hsr0: entered promiscuous mode [ 732.075335][T25718] hsr0: entered allmulticast mode [ 732.098066][T25718] veth1_virt_wifi: entered promiscuous mode [ 732.098248][T25718] veth1_virt_wifi: entered allmulticast mode [ 732.111145][T25718] veth0_virt_wifi: entered promiscuous mode [ 732.111320][T25718] veth0_virt_wifi: entered allmulticast mode [ 732.118101][T25718] virt_wifi0: entered promiscuous mode [ 732.118272][T25718] virt_wifi0: entered allmulticast mode [ 732.133229][T25718] veth1_vlan: entered allmulticast mode [ 732.142777][T25718] veth0_vlan: entered allmulticast mode [ 732.156073][T25718] vlan0: entered promiscuous mode [ 732.156897][T25718] vlan0: entered allmulticast mode [ 732.168512][T25718] vlan1: entered promiscuous mode [ 732.169291][T25718] vlan1: entered allmulticast mode [ 732.172990][T25718] macvlan0: entered promiscuous mode [ 732.173691][T25718] macvlan0: entered allmulticast mode [ 732.178487][T25718] macvlan1: entered promiscuous mode [ 732.179286][T25718] macvlan1: entered allmulticast mode [ 732.186835][T25718] ipvtap0: entered promiscuous mode [ 732.186900][T25718] ipvtap0: entered allmulticast mode [ 732.196719][T25718] ipvlan0: entered promiscuous mode [ 732.196894][T25718] ipvlan0: entered allmulticast mode [ 732.200971][T25718] ipvlan1: entered promiscuous mode [ 732.201142][T25718] ipvlan1: entered allmulticast mode [ 732.214533][T25718] veth1_macvtap: entered allmulticast mode [ 732.218120][T25718] veth0_macvtap: entered allmulticast mode [ 732.270527][T25718] macvtap0: entered promiscuous mode [ 732.281115][T25718] macvtap0: entered allmulticast mode [ 732.293835][T25718] macsec0: entered promiscuous mode [ 732.295505][T25718] macsec0: entered allmulticast mode [ 732.316381][T25718] geneve0: entered promiscuous mode [ 732.316439][T25718] geneve0: entered allmulticast mode [ 732.320130][T25756] Bluetooth: MGMT ver 1.23 [ 732.320402][T25718] geneve1: entered promiscuous mode [ 732.320434][T25718] geneve1: entered allmulticast mode [ 732.355798][T25718] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 732.356612][T25718] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 732.359114][T25718] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 732.359180][T25718] netdevsim netdevsim2 netdevsim1: entered allmulticast mode [ 732.404686][T25718] netdevsim netdevsim2 netdevsim2: entered promiscuous mode [ 732.404748][T25718] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 732.407450][T25718] netdevsim netdevsim2 netdevsim3: entered promiscuous mode [ 732.407509][T25718] netdevsim netdevsim2 netdevsim3: entered allmulticast mode [ 732.409737][T25718] mac80211_hwsim hwsim49 wlan1: entered promiscuous mode [ 732.409830][T25718] mac80211_hwsim hwsim49 wlan1: entered allmulticast mode [ 732.411211][T25718] vxlan0: entered promiscuous mode [ 732.411244][T25718] vxlan0: entered allmulticast mode [ 732.438209][T25718] bond1: entered promiscuous mode [ 732.438250][T25718] bond1: entered allmulticast mode [ 732.488637][T25718] bridge1: entered promiscuous mode [ 732.489227][T25718] bridge1: entered allmulticast mode [ 732.504106][T25718] mac80211_hwsim hwsim56 wlan2: entered promiscuous mode [ 732.504143][T25718] mac80211_hwsim hwsim56 wlan2: entered allmulticast mode [ 732.505516][T25718] vlan2: entered promiscuous mode [ 732.505751][T25718] vlan2: entered allmulticast mode [ 732.507216][T25718] gre1: entered promiscuous mode [ 732.507230][T25718] gre1: entered allmulticast mode [ 732.510431][T25718] bond2: entered promiscuous mode [ 732.510461][T25718] geneve2: entered promiscuous mode [ 732.510693][T25718] bond2: entered allmulticast mode [ 732.510705][T25718] geneve2: entered allmulticast mode [ 732.557267][T25718] bond3: entered promiscuous mode [ 732.557459][T25718] bond3: entered allmulticast mode [ 732.559513][T25718] 8021q: adding VLAN 0 to HW filter on device bond3 [ 732.614626][T25718] bridge3: entered promiscuous mode [ 732.614827][T25718] bridge3: entered allmulticast mode [ 732.640860][T25718] mac80211_hwsim hwsim58 wlan0: entered promiscuous mode [ 732.641053][T25718] mac80211_hwsim hwsim58 wlan0: entered allmulticast mode [ 732.650157][T25718] dummy1: entered promiscuous mode [ 732.650338][T25718] dummy1: entered allmulticast mode [ 732.680905][T25718] vxlan1: entered promiscuous mode [ 732.680961][T25718] vxlan1: entered allmulticast mode [ 732.697652][T25718] mac80211_hwsim hwsim58 nicvf0: entered promiscuous mode [ 732.697772][T25718] mac80211_hwsim hwsim58 nicvf0: entered allmulticast mode [ 732.700165][T25718] bridge4: entered promiscuous mode [ 732.700204][T25718] bridge4: entered allmulticast mode [ 732.736971][T25718] gretap1: entered promiscuous mode [ 732.740767][T25718] bond5: entered promiscuous mode [ 732.740823][T25718] bond5: entered allmulticast mode [ 732.748890][T25718] veth2: entered promiscuous mode [ 732.749062][T25718] veth2: entered allmulticast mode [ 732.759195][T25718] veth3: entered promiscuous mode [ 732.759371][T25718] veth3: entered allmulticast mode [ 732.761545][T25718] ip6gretap1: entered promiscuous mode [ 732.761716][T25718] ip6gretap1: entered allmulticast mode [ 732.774980][T25718] bridge5: entered promiscuous mode [ 732.775168][T25718] bridge5: entered allmulticast mode [ 732.789858][T25718] bond6: entered allmulticast mode [ 732.800251][T25718] !;: entered allmulticast mode [ 732.842621][T25718] gre2: entered promiscuous mode [ 732.842679][T25718] gre2: entered allmulticast mode [ 732.863049][T24492] bond5: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 732.877338][T24492] bond5: (slave veth3): making interface the new active one [ 732.903191][T24492] bond5: active interface up! [ 732.949106][T23446] hsr0 speed is unknown, defaulting to 1000 [ 733.338380][T25749] A link change request failed with some changes committed already. Interface geneve5 may have been left with an inconsistent configuration, please check. [ 733.833585][T25766] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4779'. [ 734.020892][T25769] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4781'. [ 734.057487][T25772] x_tables: duplicate underflow at hook 4 [ 734.383543][T25780] ip_tables: iptables: counters copy to user failed while replacing table [ 735.416067][T25807] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 736.648629][T25796] geneve6: entered promiscuous mode [ 736.985371][T25798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 736.998504][T25798] 8021q: adding VLAN 0 to HW filter on device team0 [ 737.029119][T25798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 737.186201][T25798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 737.199300][T25798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 737.243915][T25798] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 737.246695][T25798] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 737.318667][T25798] veth1_vlan: left promiscuous mode [ 737.332817][T25798] veth0_vlan: left promiscuous mode [ 737.339800][T25798] veth0_vlan: entered promiscuous mode [ 737.357352][T25798] veth1_vlan: entered promiscuous mode [ 737.388682][T25798] veth1_macvtap: left promiscuous mode [ 737.391152][T25798] veth0_macvtap: left promiscuous mode [ 737.406866][T25798] veth0_macvtap: entered promiscuous mode [ 737.409586][T25798] veth1_macvtap: entered promiscuous mode [ 737.440073][T25798] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 737.455137][T25798] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 737.457664][T25798] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 737.459960][T25798] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 737.536852][T25798] 8021q: adding VLAN 0 to HW filter on device bond1 [ 737.673411][T25798] 8021q: adding VLAN 0 to HW filter on device bond2 [ 737.695665][T25798] 8021q: adding VLAN 0 to HW filter on device bond3 [ 737.725065][T25798] 8021q: adding VLAN 0 to HW filter on device bond4 [ 737.728266][T25798] batman_adv: batadv0: Interface activated: syzkaller0 [ 737.777791][T25798] 8021q: adding VLAN 0 to HW filter on device bond5 [ 737.780277][T25798] 8021q: adding VLAN 0 to HW filter on device bond6 [ 737.811088][T25798] 8021q: adding VLAN 0 to HW filter on device bond7 [ 737.847179][T24485] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 737.847213][T24485] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 737.847235][T24485] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 737.847335][T24485] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 737.847359][T24485] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 737.847381][T24485] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 737.847463][T24485] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 737.847486][T24485] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 737.847506][T24485] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 738.087886][T24487] syzkaller0: port 1(veth0) entered blocking state [ 738.088101][T24487] syzkaller0: port 1(veth0) entered forwarding state [ 738.216623][T25840] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4797'. [ 738.284186][T24484] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 738.284220][T24484] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.284243][T24484] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 739.968330][T25871] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 740.088229][T25874] netlink: 168 bytes leftover after parsing attributes in process `syz.1.4804'. [ 740.138150][T25877] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4804'. [ 740.203575][T25872] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4802'. [ 740.213310][T25876] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 740.225672][T25872] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4802'. [ 740.842899][T25888] ip_tables: iptables: counters copy to user failed while replacing table [ 742.930646][T25897] syzkaller0: left promiscuous mode [ 742.930705][T25897] syzkaller0: left allmulticast mode [ 743.276952][T25908] 8021q: adding VLAN 0 to HW filter on device bond0 [ 743.298667][T25908] 8021q: adding VLAN 0 to HW filter on device team0 [ 743.338364][T25908] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 743.582120][T25908] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 743.582162][T25908] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 743.637822][T25908] veth1_vlan: left promiscuous mode [ 743.647434][T25908] veth0_vlan: left promiscuous mode [ 743.657606][T25908] veth0_vlan: entered promiscuous mode [ 743.675382][T25908] veth1_vlan: entered promiscuous mode [ 743.759628][T25908] tipc: Resetting bearer [ 743.776747][T25908] veth1_macvtap: left promiscuous mode [ 743.791135][T25908] veth0_macvtap: left promiscuous mode [ 743.804859][T25908] veth0_macvtap: entered promiscuous mode [ 743.830088][T25908] veth1_macvtap: entered promiscuous mode [ 743.969261][T25932] netlink: 'syz.3.4814': attribute type 13 has an invalid length. [ 743.969320][T25932] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4814'. [ 744.089727][T25908] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 744.100759][T25908] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 744.123208][T25908] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 744.125733][T25908] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 744.130314][T25908] 8021q: adding VLAN 0 to HW filter on device bond1 [ 744.161709][T25908] 8021q: adding VLAN 0 to HW filter on device bond2 [ 744.181402][T25908] 8021q: adding VLAN 0 to HW filter on device bond3 [ 744.197857][T25908] 8021q: adding VLAN 0 to HW filter on device bond4 [ 744.290066][T25908] 8021q: adding VLAN 0 to HW filter on device bond5 [ 744.309602][T25908] 8021q: adding VLAN 0 to HW filter on device bond6 [ 744.344854][T25908] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 744.399971][T25908] geneve2: left promiscuous mode [ 744.403613][T25908] batadv_slave_0: entered promiscuous mode [ 745.047754][T25920] vlan2: entered promiscuous mode [ 745.047820][T25920] bridge0: entered promiscuous mode [ 745.073511][T24498] netdevsim netdevsim4 netdevsim3: set [0, 1] type 1 family 0 port 2816 - 0 [ 745.073575][T24498] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 745.073670][T24498] netdevsim netdevsim4 netdevsim1: set [0, 1] type 1 family 0 port 2816 - 0 [ 745.073730][T24498] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 745.073834][T24498] netdevsim netdevsim4 netdevsim0: set [0, 1] type 1 family 0 port 2816 - 0 [ 745.073878][T24498] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0 [ 745.073961][T24498] netdevsim netdevsim4 netdevsim2: set [0, 1] type 1 family 0 port 2816 - 0 [ 745.074002][T24498] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 745.344969][T25932] netlink: 'syz.3.4814': attribute type 13 has an invalid length. [ 745.345027][T25932] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4814'. [ 746.275898][T25970] ip_tables: iptables: counters copy to user failed while replacing table [ 746.348201][T25957] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4820'. [ 746.397158][T25957] [ 746.399534][T25957] ====================================================== [ 746.406582][T25957] WARNING: possible circular locking dependency detected [ 746.413698][T25957] syzkaller #0 Not tainted [ 746.418123][T25957] ------------------------------------------------------ [ 746.425142][T25957] syz.1.4820/25957 is trying to acquire lock: [ 746.431207][T25957] ffff8880761a5818 (set->srcu){.+.+}-{0:0}, at: __synchronize_srcu+0xb6/0x2f0 [ 746.440227][T25957] [ 746.440227][T25957] but task is already holding lock: [ 746.447607][T25957] ffff88802f393418 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1af/0x480 [ 746.457065][T25957] [ 746.457065][T25957] which lock already depends on the new lock. [ 746.457065][T25957] [ 746.467474][T25957] [ 746.467474][T25957] the existing dependency chain (in reverse order) is: [ 746.476496][T25957] [ 746.476496][T25957] -> #6 (&q->elevator_lock){+.+.}-{4:4}: [ 746.484523][T25957] __mutex_lock+0x197/0x15a0 [ 746.489666][T25957] elevator_change+0x1af/0x480 [ 746.494991][T25957] elevator_set_none+0xb5/0x140 [ 746.500389][T25957] blk_mq_update_nr_hw_queues+0x60b/0x1b70 [ 746.506761][T25957] nbd_start_device+0x189/0xb30 [ 746.512151][T25957] nbd_genl_connect+0x167d/0x1cd0 [ 746.517710][T25957] genl_family_rcv_msg_doit+0x233/0x340 [ 746.523797][T25957] genl_rcv_msg+0x614/0x7a0 [ 746.528834][T25957] netlink_rcv_skb+0x226/0x4a0 [ 746.534133][T25957] genl_rcv+0x28/0x40 [ 746.538645][T25957] netlink_unicast+0x8ef/0xa80 [ 746.543946][T25957] netlink_sendmsg+0x7f0/0xb20 [ 746.549242][T25957] sock_sendmsg_nosec+0x14e/0x190 [ 746.554806][T25957] ____sys_sendmsg+0x54e/0x850 [ 746.560094][T25957] ___sys_sendmsg+0x2a5/0x360 [ 746.565300][T25957] __x64_sys_sendmsg+0x1b1/0x290 [ 746.570770][T25957] do_syscall_64+0x166/0x520 [ 746.575896][T25957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 746.582324][T25957] [ 746.582324][T25957] -> #5 (&q->q_usage_counter(io)#53){++++}-{0:0}: [ 746.590974][T25957] blk_alloc_queue+0x544/0x690 [ 746.596277][T25957] __blk_mq_alloc_disk+0x194/0x390 [ 746.601921][T25957] nbd_dev_add+0x494/0xb60 [ 746.606868][T25957] nbd_init+0x168/0x1f0 [ 746.611658][T25957] do_one_initcall+0x250/0x870 [ 746.616949][T25957] do_initcall_level+0x10a/0x1a0 [ 746.622530][T25957] do_initcalls+0x59/0xa0 [ 746.627390][T25957] kernel_init_freeable+0x29d/0x3e0 [ 746.633111][T25957] kernel_init+0x22/0x1d0 [ 746.637963][T25957] ret_from_fork+0x514/0xb70 [ 746.643119][T25957] ret_from_fork_asm+0x1a/0x30 [ 746.648414][T25957] [ 746.648414][T25957] -> #4 (fs_reclaim){+.+.}-{0:0}: [ 746.655700][T25957] fs_reclaim_acquire+0x71/0x100 [ 746.661174][T25957] __kmalloc_cache_node_noprof+0x66/0x620 [ 746.667434][T25957] create_worker+0x112/0x7c0 [ 746.672568][T25957] workqueue_prepare_cpu+0xe4/0x170 [ 746.678306][T25957] cpuhp_invoke_callback+0x434/0x810 [ 746.684131][T25957] _cpu_up+0x2ce/0x5b0 [ 746.688753][T25957] cpu_up+0x1d2/0x220 [ 746.693272][T25957] cpuhp_bringup_mask+0xb2/0x1a0 [ 746.698813][T25957] cpuhp_bringup_cpus_parallel+0x109/0x120 [ 746.705150][T25957] bringup_nonboot_cpus+0x17/0x30 [ 746.710727][T25957] smp_init+0x32/0x110 [ 746.715393][T25957] kernel_init_freeable+0x27f/0x3e0 [ 746.721122][T25957] kernel_init+0x22/0x1d0 [ 746.726061][T25957] ret_from_fork+0x514/0xb70 [ 746.731174][T25957] ret_from_fork_asm+0x1a/0x30 [ 746.736467][T25957] [ 746.736467][T25957] -> #3 (cpu_hotplug_lock){++++}-{0:0}: [ 746.744274][T25957] cpus_read_lock+0x3d/0x160 [ 746.749398][T25957] static_key_slow_inc+0x12/0x30 [ 746.754886][T25957] nbd_genl_reconnect_sock_cb+0x69a/0xbb0 [ 746.761135][T25957] nbd_genl_foreach_sock+0x265/0x450 [ 746.766953][T25957] nbd_genl_reconfigure+0xbbb/0x1040 [ 746.772756][T25957] genl_family_rcv_msg_doit+0x233/0x340 [ 746.778820][T25957] genl_rcv_msg+0x614/0x7a0 [ 746.783846][T25957] netlink_rcv_skb+0x226/0x4a0 [ 746.789145][T25957] genl_rcv+0x28/0x40 [ 746.793650][T25957] netlink_unicast+0x8ef/0xa80 [ 746.798947][T25957] netlink_sendmsg+0x7f0/0xb20 [ 746.804227][T25957] sock_sendmsg_nosec+0x14e/0x190 [ 746.809777][T25957] ____sys_sendmsg+0x54e/0x850 [ 746.815057][T25957] ___sys_sendmsg+0x2a5/0x360 [ 746.820253][T25957] __x64_sys_sendmsg+0x1b1/0x290 [ 746.825717][T25957] do_syscall_64+0x166/0x520 [ 746.830836][T25957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 746.837255][T25957] [ 746.837255][T25957] -> #2 (&nsock->tx_lock){+.+.}-{4:4}: [ 746.844977][T25957] __mutex_lock+0x197/0x15a0 [ 746.850096][T25957] nbd_queue_rq+0x373/0xff0 [ 746.855115][T25957] blk_mq_dispatch_rq_list+0x499/0x1990 [ 746.861251][T25957] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 746.868096][T25957] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 746.874586][T25957] blk_mq_run_work_fn+0x167/0x2f0 [ 746.880129][T25957] process_scheduled_works+0xc3d/0x1630 [ 746.886201][T25957] worker_thread+0xa47/0xfb0 [ 746.891311][T25957] kthread+0x38b/0x480 [ 746.895894][T25957] ret_from_fork+0x514/0xb70 [ 746.900999][T25957] ret_from_fork_asm+0x1a/0x30 [ 746.906273][T25957] [ 746.906273][T25957] -> #1 (&cmd->lock){+.+.}-{4:4}: [ 746.913482][T25957] __mutex_lock+0x197/0x15a0 [ 746.918605][T25957] nbd_queue_rq+0xc1/0xff0 [ 746.923545][T25957] blk_mq_dispatch_rq_list+0x499/0x1990 [ 746.929616][T25957] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 746.936457][T25957] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 746.942951][T25957] blk_mq_run_work_fn+0x167/0x2f0 [ 746.948498][T25957] process_scheduled_works+0xc3d/0x1630 [ 746.954563][T25957] worker_thread+0xa47/0xfb0 [ 746.959672][T25957] kthread+0x38b/0x480 [ 746.964253][T25957] ret_from_fork+0x514/0xb70 [ 746.969361][T25957] ret_from_fork_asm+0x1a/0x30 [ 746.974637][T25957] [ 746.974637][T25957] -> #0 (set->srcu){.+.+}-{0:0}: [ 746.981749][T25957] __lock_acquire+0x164c/0x2de0 [ 746.987119][T25957] lock_sync+0xb3/0x130 [ 746.991793][T25957] __synchronize_srcu+0xca/0x2f0 [ 746.997247][T25957] elevator_switch+0x1e8/0x7b0 [ 747.002539][T25957] elevator_change+0x2fa/0x480 [ 747.007821][T25957] elevator_set_default+0x375/0x440 [ 747.013531][T25957] blk_register_queue+0x404/0x4f0 [ 747.019063][T25957] __add_disk+0x6b8/0xdb0 [ 747.023903][T25957] add_disk_fwnode+0x100/0x3a0 [ 747.029177][T25957] nbd_dev_add+0x733/0xb60 [ 747.034104][T25957] nbd_genl_connect+0x96c/0x1cd0 [ 747.039549][T25957] genl_family_rcv_msg_doit+0x233/0x340 [ 747.045613][T25957] genl_rcv_msg+0x614/0x7a0 [ 747.050634][T25957] netlink_rcv_skb+0x226/0x4a0 [ 747.055933][T25957] genl_rcv+0x28/0x40 [ 747.060448][T25957] netlink_unicast+0x8ef/0xa80 [ 747.065729][T25957] netlink_sendmsg+0x7f0/0xb20 [ 747.071008][T25957] sock_sendmsg_nosec+0x14e/0x190 [ 747.076550][T25957] ____sys_sendmsg+0x54e/0x850 [ 747.081830][T25957] ___sys_sendmsg+0x2a5/0x360 [ 747.087024][T25957] __x64_sys_sendmsg+0x1b1/0x290 [ 747.092472][T25957] do_syscall_64+0x166/0x520 [ 747.097580][T25957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 747.103980][T25957] [ 747.103980][T25957] other info that might help us debug this: [ 747.103980][T25957] [ 747.114191][T25957] Chain exists of: [ 747.114191][T25957] set->srcu --> &q->q_usage_counter(io)#53 --> &q->elevator_lock [ 747.114191][T25957] [ 747.127907][T25957] Possible unsafe locking scenario: [ 747.127907][T25957] [ 747.135343][T25957] CPU0 CPU1 [ 747.140696][T25957] ---- ---- [ 747.146046][T25957] lock(&q->elevator_lock); [ 747.150632][T25957] lock(&q->q_usage_counter(io)#53); [ 747.158516][T25957] lock(&q->elevator_lock); [ 747.165613][T25957] sync(set->srcu); [ 747.169499][T25957] [ 747.169499][T25957] *** DEADLOCK *** [ 747.169499][T25957] [ 747.177628][T25957] locks held by syz.1.4820/25957: 6, last CPU#1: [ 747.184051][T25957] #0: ffffffff916f7c28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 747.192234][T25957] #1: ffffffff916f7a60 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 747.201196][T25957] #2: ffff88802d5f39c0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: add_disk_fwnode+0xea/0x3a0 [ 747.211542][T25957] #3: ffff88802f3934a0 (&q->sysfs_lock){+.+.}-{4:4}, at: blk_register_queue+0x10d/0x4f0 [ 747.221366][T25957] #4: ffff88802f392f28 (&q->q_usage_counter(queue)#64){+.+.}-{0:0}, at: elevator_change+0x194/0x480 [ 747.232244][T25957] #5: ffff88802f393418 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1af/0x480 [ 747.242082][T25957] [ 747.242082][T25957] stack backtrace: [ 747.247960][T25957] CPU: 1 UID: 0 PID: 25957 Comm: syz.1.4820 Not tainted syzkaller #0 PREEMPT(full) [ 747.257321][T25957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 747.267366][T25957] Call Trace: [ 747.270638][T25957] [ 747.273559][T25957] dump_stack_lvl+0xe8/0x150 [ 747.278164][T25957] print_circular_bug+0x2e2/0x300 [ 747.283198][T25957] check_noncircular+0x12f/0x150 [ 747.288145][T25957] __lock_acquire+0x164c/0x2de0 [ 747.293007][T25957] ? lockdep_unlock+0x5c/0xd0 [ 747.297673][T25957] ? __lock_acquire+0x1511/0x2de0 [ 747.302695][T25957] lock_sync+0xb3/0x130 [ 747.306842][T25957] ? __synchronize_srcu+0xb6/0x2f0 [ 747.311951][T25957] ? __synchronize_srcu+0xb6/0x2f0 [ 747.317066][T25957] __synchronize_srcu+0xca/0x2f0 [ 747.321995][T25957] ? __pfx___synchronize_srcu+0x10/0x10 [ 747.327532][T25957] ? do_raw_spin_lock+0x12b/0x2f0 [ 747.332553][T25957] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 747.338423][T25957] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 747.343964][T25957] ? synchronize_srcu+0x20c/0x270 [ 747.348984][T25957] elevator_switch+0x1e8/0x7b0 [ 747.353747][T25957] ? blk_mq_cancel_work_sync+0xa5/0xe0 [ 747.359198][T25957] elevator_change+0x2fa/0x480 [ 747.363959][T25957] ? do_raw_spin_unlock+0xf5/0x200 [ 747.369065][T25957] elevator_set_default+0x375/0x440 [ 747.374262][T25957] ? __pfx_elevator_set_default+0x10/0x10 [ 747.379981][T25957] ? disk_register_independent_access_ranges+0x2d8/0x380 [ 747.387065][T25957] ? blk_crypto_sysfs_register+0x11c/0x170 [ 747.392969][T25957] blk_register_queue+0x404/0x4f0 [ 747.397991][T25957] __add_disk+0x6b8/0xdb0 [ 747.402317][T25957] add_disk_fwnode+0x100/0x3a0 [ 747.407077][T25957] nbd_dev_add+0x733/0xb60 [ 747.411487][T25957] ? __pfx_nbd_dev_add+0x10/0x10 [ 747.416422][T25957] ? __pfx_nbd_genl_foreach_sock+0x10/0x10 [ 747.422219][T25957] ? bpf_lsm_capable+0x9/0x20 [ 747.426884][T25957] ? security_capable+0x7e/0x2c0 [ 747.431886][T25957] ? radix_tree_lookup+0x240/0x290 [ 747.436998][T25957] nbd_genl_connect+0x96c/0x1cd0 [ 747.441926][T25957] ? __pfx_nbd_genl_connect+0x10/0x10 [ 747.447294][T25957] ? rcu_is_watching+0x16/0xb0 [ 747.452055][T25957] ? trace_kmalloc+0x2a/0xf0 [ 747.456644][T25957] ? __kmalloc_noprof+0x387/0x710 [ 747.461667][T25957] ? __nla_parse+0x40/0x60 [ 747.466085][T25957] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 747.472409][T25957] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 747.478835][T25957] genl_family_rcv_msg_doit+0x233/0x340 [ 747.484380][T25957] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 747.490446][T25957] ? __lock_acquire+0x747/0x2de0 [ 747.495382][T25957] genl_rcv_msg+0x614/0x7a0 [ 747.499885][T25957] ? __pfx_genl_rcv_msg+0x10/0x10 [ 747.504899][T25957] ? __pfx_nbd_genl_connect+0x10/0x10 [ 747.510273][T25957] netlink_rcv_skb+0x226/0x4a0 [ 747.515043][T25957] ? __pfx_genl_rcv_msg+0x10/0x10 [ 747.520063][T25957] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 747.525351][T25957] ? down_read+0x2b9/0x320 [ 747.529767][T25957] genl_rcv+0x28/0x40 [ 747.533742][T25957] netlink_unicast+0x8ef/0xa80 [ 747.538511][T25957] netlink_sendmsg+0x7f0/0xb20 [ 747.543271][T25957] ? __pfx_netlink_sendmsg+0x10/0x10 [ 747.548549][T25957] ? aa_sock_msg_perm+0x144/0x210 [ 747.553566][T25957] ? apparmor_socket_sendmsg+0x98/0x360 [ 747.559114][T25957] ? __pfx_netlink_sendmsg+0x10/0x10 [ 747.564399][T25957] sock_sendmsg_nosec+0x14e/0x190 [ 747.569423][T25957] ____sys_sendmsg+0x54e/0x850 [ 747.574185][T25957] ? __pfx_____sys_sendmsg+0x10/0x10 [ 747.579468][T25957] ? import_iovec+0x73/0xa0 [ 747.583965][T25957] ___sys_sendmsg+0x2a5/0x360 [ 747.588630][T25957] ? __lock_acquire+0x747/0x2de0 [ 747.593567][T25957] ? __pfx____sys_sendmsg+0x10/0x10 [ 747.598757][T25957] ? futex_wait+0x2a2/0x390 [ 747.603272][T25957] ? __fget_files+0x3a2/0x420 [ 747.607953][T25957] ? __fget_files+0x2a/0x420 [ 747.612544][T25957] __x64_sys_sendmsg+0x1b1/0x290 [ 747.617481][T25957] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 747.622938][T25957] do_syscall_64+0x166/0x520 [ 747.627550][T25957] ? trace_irq_disable+0x3b/0x140 [ 747.632579][T25957] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 747.638634][T25957] ? clear_bhb_loop+0x70/0xc0 [ 747.643304][T25957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 747.649185][T25957] RIP: 0033:0x7fb66f5a8f19 [ 747.653594][T25957] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 747.673195][T25957] RSP: 002b:00007fb670422028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 747.681609][T25957] RAX: ffffffffffffffda RBX: 00007fb66f825fa0 RCX: 00007fb66f5a8f19 [ 747.689573][T25957] RDX: 0000000000000000 RSI: 0000200000000640 RDI: 0000000000000009 [ 747.697532][T25957] RBP: 00007fb66f637f6d R08: 0000000000000000 R09: 0000000000000000 [ 747.705500][T25957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 747.713463][T25957] R13: 00007fb66f826038 R14: 00007fb66f825fa0 R15: 00007ffde7263798 [ 747.721436][T25957] [ 748.250400][T25979] tipc: Enabled bearer , priority 10 [ 748.506752][T25982] udevd[25982]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 748.528533][T25982] udevd[25982]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory