last executing test programs: 5.594432924s ago: executing program 4 (id=2776): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001240)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x11, &(0x7f0000001380)=ANY=[@ANYBLOB="180000000c0000000000000008eaff0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b70300003f0040008500000083000000bf0920000000000055090100000000007b0000000000000018100000", @ANYRES32=r0, @ANYBLOB="0000000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001440)='GPL\x00', 0xa, 0x1011, &(0x7f0000001480)=""/4113, 0x41000, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000600)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1e, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x8, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x5}}}}]}]}, 0x70}}, 0x20040000) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0xb, &(0x7f0000000900)=ANY=[@ANYBLOB="6a0afaff270f0000bfa200000000000007020000f0ffffffb70300000a000000b7040000ffffffffb70500000000000085000000550000001500020000000000bf01000000000000850000005600000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6(0xa, 0x3, 0x5) socket$inet6_tcp(0xa, 0x1, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_route(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0xa, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x4) socket$packet(0x11, 0x2, 0x300) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x1f, 0x15, &(0x7f0000000b00)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000230000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008600000095"], &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c80)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r4], 0x90}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000000c0)=0x14) 5.277280018s ago: executing program 4 (id=2779): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="100000000914e73f"], 0x4e}, 0x1, 0x0, 0x0, 0x4044844}, 0x20008000) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {0xa}, [@IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xee}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f00000004c0)={0x810003, 0x0, 0x8, 0xff7ffff4}, 0x10) write(r4, &(0x7f0000000500)="240000001e005f9614fffffffffffff807c56a0d3999658947004845aa7fc198e56e737b", 0x24) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x20000006, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x41}}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, 0x0, 0x9, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r5 = socket(0x1, 0x2, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_PHYS_PORT_ID={0x1d, 0x22, "972316ab89b554034d1818089936578de98d590db7f2ddafee"}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x5c}}, 0x0) 5.091017247s ago: executing program 4 (id=2782): socket(0x11, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYRES16, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x24044040) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r2, 0x0, 0x41, &(0x7f0000000240)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000007802"], &(0x7f0000000280)=0x2a0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r1) sendmsg$DEVLINK_CMD_SB_GET(r4, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x140, r5, 0x300, 0x70bd29, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xaf1a}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x81}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x71}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4}}]}, 0x140}, 0x1, 0x0, 0x0, 0x8040000}, 0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r6, &(0x7f0000000300)={0x0, 0xfffffff5, &(0x7f0000000340)=[{&(0x7f0000000380)="a2", 0xfffffdef}], 0x1}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000440)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x80) ioctl$NILFS_IOCTL_GET_CPSTAT(r3, 0x80186e83, &(0x7f0000000480)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), r8) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)={0x44, 0x31, 0x9, 0x70bd2a, 0x0, {0x4}, [@nested={0x2e, 0x11, 0x0, 0x1, [@generic="e796bd6dd42541affae91169c6e278e03f5af8cb5fbde186986f77bec4ba7c0f34743b2be3f4d528ba26"]}]}, 0x44}, 0x1, 0x0, 0x0, 0x42804}, 0x84) 4.26710561s ago: executing program 4 (id=2785): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0x14, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0xc8af}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @call={0x85, 0x0, 0x0, 0x50}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000000206000000000000000000000a0000010500050000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x40800) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYRESOCT=0x0, @ANYRESDEC=r0], 0x50) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f0000000240)={{0xffffffffffffffff, 0x0, 0x400000, 0x0, 0x0, 0x0, &(0x7f00000001c0)=0x8}, {[0x1, 0x6f7, 0x7, 0xd59]}, 0x200, 0x0, 0x0}) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000), 0x20000328) r3 = socket$inet6(0x10, 0x2, 0x4) r4 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r4, 0x6b, 0x4, 0xffffffffffffffff, &(0x7f0000000040)) sendto$inet6(r3, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x810, 0x0, 0x0) 3.462955433s ago: executing program 2 (id=2792): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000b900001831000002000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x4, 0x1003, &(0x7f0000000400)=""/4099, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1e}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'bond0\x00', 0x0}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@cgroup, 0xffffffffffffffff, 0x3d}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) 3.010049684s ago: executing program 2 (id=2797): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x1ff) (async) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="9f3c47ff18000000000000007000000070000000020000000400000000e3ff01050000000300000005000093010004000a000000ffff0000060000261b95e00ff3fea1000500000004000000400000000300000031e28cab08f3182c81000000100002007304000001000000060000000000000e0400000000630000000000000000000d"], 0x0, 0x3c, 0x0, 0x0, 0x6}, 0x28) socket$kcm(0x23, 0x5, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000800)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xd, 0x11, &(0x7f0000000940)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x6, 0x9, 0x0, 0x1, 0xf9ffffff}, {0x66, 0x0, 0x0, 0x256c7520}}, [@map_fd={0x18, 0x3, 0x1, 0x0, r2}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000a00)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000500)={&(0x7f0000000540)=@caif=@rfm={0x25, 0x15, "fb95785b587f23ba61bfb990191a2af1"}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000600)="a5", 0x48}], 0x1}, 0x0) sendmmsg$inet6(r1, &(0x7f0000000180)=[{{&(0x7f0000000200)={0xa, 0x0, 0x2, @private1}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000280)="18", 0x1}], 0x1}}, {{&(0x7f00000002c0)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x80000001}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000340)="00ab0f", 0x3}], 0x1}}], 0x2, 0x0) (async) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000380), &(0x7f00000003c0)=0x8) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000740)={0xffffffff, {{0xa, 0x4e24, 0xb, @local, 0xa}}}, 0x88) (async) mkdirat$cgroup(r0, &(0x7f0000000080)='syz0\x00', 0x1ff) (async) r4 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000680)=[{&(0x7f00000006c0)='w', 0x1}], 0x1, 0x1) (async) r7 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r7, &(0x7f0000000700)={0xa, 0x0, 0x40, @loopback={0xff00000000000000}, 0x2000400}, 0x1c) (async) splice(r5, 0x0, r7, 0x0, 0x996, 0x0) (async) listen(r1, 0x1) (async) write$cgroup_type(r4, &(0x7f0000000140), 0x9) 2.625837621s ago: executing program 2 (id=2801): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x14, &(0x7f00000009c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x80}, [@printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xc0adcb}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa6}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x94) pipe(&(0x7f0000000340)) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a0180090001007866726d0000000014000280080001400000000b08a7d2a647b400050900020073797a3200000000140000001100010000000000000000000000000ac3a93a06fe6451a48164f91d90ea20dc98e29373c84b0864e9722764442ebbf859f47e1fcc3d9d91ef1e712500"/145], 0x70}, 0x1, 0x0, 0x0, 0x850}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r5], 0x68}}, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x1, 0x2}, {0xd, 0x10}, {0x1, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x270, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1a0, 0xffffffff, 0xffffffff, 0x1a0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@local, @mcast2, [0x0, 0x26a9e3a96bccb3de], [0x0, 0xffffffff, 0xff], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x2}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, [0x0, 0x0, 0xffff00, 0xff000000], [0xff, 0xffffff00, 0xff000000], 'syzkaller0\x00', 'wlan1\x00', {0xff}, {}, 0x73, 0x1, 0x5, 0x2}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x2, 0x6}, {0x4, 0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2d0) r7 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x3, 0x400, @remote, 0x9}, 0x1c) (async) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x318, 0x168, 0x6c, 0x0, 0x0, 0x0, 0x248, 0x258, 0x258, 0x248, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0={0xfc, 0x0, '\x00', 0x1}, [0xffffff00], [0x0, 0x0, 0xff], 'ipvlan0\x00', 'ip6gre0\x00', {0xff}, {}, 0x11, 0x6}, 0x0, 0x100, 0x168, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x5}}, @inet=@rpfilter={{0x28}, {0xc}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0xfffffffd, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ipv6={@loopback, @empty, [], [0xff, 0xff], 'netdevsim0\x00', 'lo\x00', {}, {}, 0x0, 0x0, 0x0, 0x14}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0x0, 0x0, 0x2}, {}, 0x0, 0x7}}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x2001}}, {0x28}}}}, 0x378) (async) sendmsg(r7, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) 2.559809144s ago: executing program 1 (id=2802): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4) bind$l2tp(r0, &(0x7f0000000240)={0x2, 0x0, @empty, 0x5}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x70, 0x10, 0x0, 0x470bd26, 0x25dfd402, {0x0, 0x0, 0x0, r3, 0x64e98, 0x16ec1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge_slave={{0xfffffffffffffe97}, {0x4}}}, @IFLA_OPERSTATE={0x5, 0x10, 0x2}, @IFLA_PROP_LIST={0x2c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'netpci0\x00'}, {0x14, 0x35, 'lo\x00'}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x400c080}, 0x200088c2) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r4, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4) listen(r4, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) (async) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4) (async) bind$l2tp(r0, &(0x7f0000000240)={0x2, 0x0, @empty, 0x5}, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) (async) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x70, 0x10, 0x0, 0x470bd26, 0x25dfd402, {0x0, 0x0, 0x0, r3, 0x64e98, 0x16ec1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge_slave={{0xfffffffffffffe97}, {0x4}}}, @IFLA_OPERSTATE={0x5, 0x10, 0x2}, @IFLA_PROP_LIST={0x2c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'netpci0\x00'}, {0x14, 0x35, 'lo\x00'}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x400c080}, 0x200088c2) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) setsockopt$inet_int(r4, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4) (async) listen(r4, 0x0) (async) 2.321337539s ago: executing program 1 (id=2803): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.swap.events\x00', 0x0, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x1}, 0x50) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'ip_vti0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x8, 0x700, 0x2, 0xffffffff, {{0x28, 0x4, 0x2, 0x6, 0xa0, 0x65, 0x0, 0x2, 0x2f, 0x0, @loopback, @multicast2, {[@timestamp_prespec={0x44, 0x24, 0x65, 0x3, 0x7, [{@broadcast, 0x7}, {@local, 0x9}, {@dev={0xac, 0x14, 0x14, 0x24}, 0x80000000}, {@empty, 0x187}]}, @timestamp={0x44, 0x1c, 0x6b, 0x0, 0x9, [0x7, 0x200, 0x401, 0x3, 0xe28, 0x5]}, @lsrr={0x83, 0xf, 0xb2, [@dev={0xac, 0x14, 0x14, 0xf}, @local, @local]}, @rr={0x7, 0x1b, 0x7d, [@empty, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, @multicast1]}, @generic={0x86, 0x11, "4df258777f54a80ba915de3fb53cd2"}, @ssrr={0x89, 0xf, 0x3a, [@dev={0xac, 0x14, 0x14, 0x15}, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @end]}}}}}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000400)={0x10, 0x0}, 0x8) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x7, 0x61, 0x8, 0x2, 0xffffffffffffffff, 0x236d, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x5, 0xe}, 0x50) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000004c0)={0x0, 0xfcf1, 0x10}, 0xc) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000500)={0xffffffffffffffff, 0x2, 0x7fffffff, 0xfffffffffffffff8}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xc, 0x18, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}, @jmp={0x5, 0x1, 0xa, 0x4, 0x3, 0x6, 0xfffffffffffffffc}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @jmp={0x5, 0x0, 0xc, 0x9, 0x0, 0x2, 0xfffffffffffffff0}, @generic={0x80, 0x6, 0x8, 0x2, 0x3}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5}, @alu={0x4, 0x1, 0x0, 0x2, 0x3, 0x8, 0xffffffffffffffec}, @map_fd={0x18, 0x5, 0x1, 0x0, r3}, @map_idx={0x18, 0x7, 0x5, 0x0, 0xc}]}, &(0x7f00000001c0)='GPL\x00', 0xffffdf1b, 0x5a, &(0x7f0000000200)=""/90, 0x40f00, 0x10, '\x00', r4, @fallback=0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x2, 0x2}, 0x8, 0x10, &(0x7f00000003c0)={0x0, 0xd, 0x5, 0x146d}, 0x10, r5, 0xffffffffffffffff, 0x8, &(0x7f0000000540)=[r6, r7, r8], &(0x7f0000000580)=[{0x2, 0x3, 0xc, 0x3}, {0x3, 0x3, 0xa}, {0x5, 0x2, 0x1, 0x8}, {0x4, 0x4, 0x9, 0x1}, {0x4, 0x3, 0xd, 0x6}, {0x2, 0x5, 0x1, 0x6}, {0x0, 0x3, 0x7, 0xf508a44bf74600b}, {0x2, 0x4, 0xf, 0x8}], 0x10, 0x1}, 0x94) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000700), r2) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x68, r9, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x3, @media='eth\x00'}}}, ["", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000800) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x38, 0x1, 0x4, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFULA_CFG_MODE={0xa, 0x2, {0x4, 0x1}}, @NFULA_CFG_NLBUFSIZ={0x8}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x40005}, 0x4000910) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000940), 0x4) r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000980)=r5, 0x4) bind$inet(r2, &(0x7f00000009c0)={0x2, 0x4e22, @broadcast}, 0x10) r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r11, &(0x7f0000000c00)={&(0x7f0000000a00), 0xc, &(0x7f0000000bc0)={&(0x7f0000000a40)={0x178, 0x1403, 0x2, 0x70bd2a, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'dvmrp0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan1\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_vlan\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_macvtap\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'vlan1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'dvmrp1\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_to_batadv\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'dummy0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'dvmrp1\x00'}}]}, 0x178}, 0x1, 0x0, 0x0, 0x20000040}, 0x2000c800) r12 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000c80)=@o_path={&(0x7f0000000c40)='./file0\x00', 0x0, 0x4010, r8}, 0x18) ioctl$FS_IOC_GETFSMAP(r12, 0xc0c0583b, &(0x7f0000000cc0)={0x0, 0x0, 0x8, 0x0, '\x00', [{0xc, 0x0, 0x71, 0x1, 0x2, 0x23}, {0x0, 0xd0e, 0xff, 0x6ea, 0x80000001, 0x6}], ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r8, 0x84, 0x7, &(0x7f0000000f80)={0x8000}, 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r10, 0xc020f509, &(0x7f0000000fc0)={r12, 0xd7c4, 0x9, 0xffff}) bind$rds(r13, &(0x7f0000001000)={0x2, 0x4e22, @multicast1}, 0x10) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000001040), &(0x7f0000001080)=0x4) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r12, 0xc0385868, &(0x7f0000001340)={r2, &(0x7f0000001240)='}!\x00', 0x90000, &(0x7f0000001280)={@_ha_fsid={[0x10000, 0x800]}, {0xfffa, 0x10, 0x9, 0x5}}, 0x4, &(0x7f00000012c0), &(0x7f0000001300)=0x8}) bpf$PROG_LOAD(0x5, &(0x7f0000001480)={0x16, 0xf, &(0x7f00000010c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @btf_id={0x18, 0xe, 0x3, 0x0, 0x3}, @generic={0xff, 0x1, 0x7, 0x1, 0x80000001}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x4}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f0000001140)='GPL\x00', 0x2, 0xd, &(0x7f0000001180)=""/13, 0x41100, 0x5e, '\x00', r4, @flow_dissector, r8, 0x8, &(0x7f00000011c0)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x2, 0x3, 0x7, 0xb}, 0x10, r5, r1, 0xa, &(0x7f0000001380)=[r8, r2, r14, r8, r7], &(0x7f00000013c0)=[{0x1, 0x3, 0x10, 0x7}, {0x5, 0x5}, {0x1, 0x5, 0x8, 0x2}, {0x3, 0x4, 0xf, 0x1}, {0x3, 0x4, 0x3, 0x1}, {0x1, 0x3, 0xb, 0x2}, {0x1, 0x2, 0x2}, {0x1, 0x2, 0xd, 0x5}, {0x3, 0x4, 0xd, 0x1}, {0x3, 0x3, 0x2, 0x3}], 0x10, 0x9}, 0x94) socket$unix(0x1, 0x2, 0x0) ioctl$FS_IOC_RESVSP(r12, 0x40305828, &(0x7f0000001540)={0x0, 0x3a3a7659a66d6d11, 0x1, 0x7}) syz_genetlink_get_family_id$team(&(0x7f0000001580), r14) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001600)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x8, '\x00', r4, 0xffffffffffffffff, 0x1, 0x1, 0x5}, 0x50) 2.229681391s ago: executing program 1 (id=2804): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x10, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000005e00000095"], &(0x7f0000000340)='syzkaller\x00', 0x2, 0xff6, &(0x7f0000001880)=""/4086}, 0x90) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r1) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000000580)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000600), 0x4) r5 = socket(0x1d, 0x2, 0x6) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x4e20, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8d}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000640)={'bond0\x00', 0x0}) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@updpolicy={0xc4, 0x19, 0x501, 0x0, 0x0, {{@in=@multicast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0xfffffffffffffffc}}, [@offload={0xc, 0x1c, {r6, 0x4}}]}, 0xc4}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000800)=0xcde, 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=ANY=[@ANYBLOB="340000003f000501010000000000000001010000000000000c0001006f76732d64703000080002"], 0x34}}, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000900)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r9, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500060000001400040073"], 0x58}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a40), r10) recvmmsg(r10, &(0x7f0000000a80)=[{{0x0, 0xfffffffffffffe28, &(0x7f0000001480)=[{&(0x7f0000001500)=""/167, 0xa7}, {&(0x7f00000015c0)=""/91, 0x5b}, {&(0x7f0000002880)=""/4087, 0xff7}, {&(0x7f0000003880)=""/27, 0x1b}, {&(0x7f00000038c0)=""/81, 0x51}, {&(0x7f0000003940)=""/209, 0xd3}, {&(0x7f0000003a40)=""/176, 0xb0}, {&(0x7f0000003b00)=""/181, 0xb2}], 0x8}, 0x9}], 0x400000000000272, 0x400100a0, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r10, &(0x7f0000003bc0)={0x0, 0x0, &(0x7f0000003c00)={&(0x7f0000003c40)=ANY=[@ANYBLOB="18000000", @ANYRES16=r11, @ANYBLOB="030704707900000000000100040004000180"], 0x18}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000002000010000000000000000000a804040000000060000000014000200fc0200000000000000000000000000011400010020010000000000000000000000000001"], 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x40000) sendmsg$nl_route(r12, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5c00000010003904000000000000000000008000", @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c000280140003002001000000000000000000000000000114000200fc02"], 0x5c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 2.071494295s ago: executing program 3 (id=2805): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000"], 0x30}], 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000840)=@assoc_value={r4, 0x2}, 0x8) 1.999611148s ago: executing program 0 (id=2806): r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000080)={0x84, 0x3}, 0x10) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@multicast, @local, @val={@void, {0x8100, 0x0, 0x0, 0x2}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f700", 0x24, 0x2c, 0x0, @local, @mcast2, {[@hopopts={0x3a}], @ndisc_ns={0x87, 0x0, 0x0, @loopback, [{0x22}, {0x4}, {0x2}, {0x18}]}}}}}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c0000001a0001ff80000000000000000a000000000000000000000008000400", @ANYRES32, @ANYBLOB="06001c"], 0x2c}}, 0x0) 1.847037713s ago: executing program 2 (id=2807): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="000000000000000fb703000000000000850000006a00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.809602318s ago: executing program 2 (id=2808): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f00000000c0)={0x200000000000001, 0x2}, 0x38) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e24, 0xb, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f00000004c0), 0x171}}], 0x400000000000172, 0x4000000) (async) sendmmsg$inet6(r0, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f00000004c0), 0x171}}], 0x400000000000172, 0x4000000) 1.788525326s ago: executing program 3 (id=2809): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c000000020601030000000000000000000000000900020073797a300000000005000100060000000500050002000000050004000000000014000780080011400000000005001500040000000d000300686173683a6e6574"], 0x5c}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001500)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r3, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x30, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x3f343c8c4b8870c9}, 0x800) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f00000005c0)=@assoc_value={0x0}, &(0x7f0000000600)=0x8) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000480)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="0500"], 0x10) close(0x3) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000680)={&(0x7f00000006c0), 0x10000, 0x800}, 0x20) getsockopt$inet_sctp_SCTP_ECN_SUPPORTED(r4, 0x84, 0x82, &(0x7f0000000d80)={r5, 0x2}, &(0x7f0000000e80)=0x8) setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f0000000700)=0x4, 0x4) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000740)=0x4, 0x4) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000000800)={'filter\x00', 0x7, 0x4, 0x3e8, 0xe8, 0x1f8, 0x1f8, 0x300, 0x300, 0x300, 0x4, &(0x7f00000006c0), {[{{@arp={@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffff, 0xffffffff, 0xd, 0xe, {@empty, {[0xff, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@broadcast, {[0x0, 0xff, 0x0, 0x0, 0xff, 0xff]}}, 0xffff, 0xff, 0x3c40, 0x800, 0x7ff, 0x6, 'ip6gretap0\x00', 'ip6erspan0\x00', {0xff}, {}, 0x0, 0x24f}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x4, 0x100}}}, {{@arp={@local, @broadcast, 0xff000000, 0xffffffff, 0xd, 0x7, {@mac=@multicast, {[0xff, 0xff, 0xff, 0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0xff, 0x0, 0x0, 0xff]}}, 0xb645, 0x32, 0x7f, 0x9, 0x6, 0xc34, 'ip6gretap0\x00', 'bond0\x00', {0xff}, {0xff}}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @rand_addr=0x64010100, @empty, 0x4}}}, {{@uncond, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x400, 'syz1\x00', {0x3}}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000780)=0x4, 0x4) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000001080)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001040)={&(0x7f00000010c0)={0x1b0, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8}]}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x37ed}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7e033a2e}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}]}, @TIPC_NLA_MEDIA={0xf0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x64e92333}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa8b0}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4e5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffb}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xcf4d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xc}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}]}]}, 0x1b0}}, 0x20008094) bind$xdp(r6, &(0x7f00000007c0)={0x2c, 0x0, 0x2, 0x0, 0x0}, 0x10) close(r6) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="1ee0300000000000000000000000ffff00000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) syz_emit_ethernet(0xef, &(0x7f0000000ec0)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0xb9, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0xff, 0xdb0b, 0x1, 0x0, [{0x18, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0302"}, {0x1f, 0xa, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a"}, {}, {0x21}]}}}}}}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=@base={0x19, 0x4, 0x4, 0x2}, 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001280)=ANY=[], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000012c0)={r8, &(0x7f0000001300), &(0x7f0000001340)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r8, &(0x7f0000000180), &(0x7f0000001400)=""/6, 0x2}, 0x20) sendmsg$kcm(r7, &(0x7f0000001440)={0x0, 0x2000, &(0x7f0000001480)=[{&(0x7f00000014c0)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000c80)={0x1f, 0xffff, 0x4}, 0x6) 1.703354593s ago: executing program 0 (id=2810): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@ipv4_newrule={0x28, 0x20, 0xf4db158ec847dc81, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1f}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0xc53}]}, 0x28}, 0x1, 0x0, 0x0, 0x81}, 0x400c000) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x439, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1313}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40008c0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x11e, 0x82, 0x0, &(0x7f00000001c0)=0xffffffffffffff03) r2 = bpf$TOKEN_CREATE(0x24, &(0x7f00000003c0)={0x0, r0}, 0x8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x601, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x601, 0x0, 0x0, {0x2}}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x601, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xb4}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x4, [@struct={0xc, 0x4, 0x0, 0x4, 0x1, 0x8, [{0xb, 0x1, 0xa}, {0x4, 0x0, 0x3}, {0x3, 0x3, 0x4}, {0x4, 0x4, 0x9047}]}]}, {0x0, [0x0, 0x30]}}, &(0x7f00000002c0)=""/161, 0x58, 0xa1, 0x0, 0x2, 0x10000, @value=r2}, 0x28) 1.650268387s ago: executing program 1 (id=2811): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x439, 0x70bd2b, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x13, 0x618c4}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}}, {0xa, 0x4, @multicast}]}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c044) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)={0x30, 0x7, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x1}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xfa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004055}, 0x24000840) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000540)={0x8400001e}, 0x10) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)={0x24, 0x1, 0x1, 0x101, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="300000001a00010000000000000000001c00"/28], 0x30}}, 0x0) r3 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNDEL(r3, 0x400442c9, &(0x7f0000000840)={0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}) sendmsg$nl_route(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000008c0)=ANY=[@ANYRES64, @ANYRES64=r1, @ANYRES8=r0, @ANYRES16=r2, @ANYRES8=r1], 0x30}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xd, &(0x7f0000000300)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffbffffb, 0x0, 0x0, 0x0, 0x40}, [@call={0x85, 0x0, 0x0, 0x11}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000380)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000440)="6f11ba816056a1827a33ae059cf3", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket(0x28, 0x80000, 0x40) getsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x6, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0xc) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000880), 0x48241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000900)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r8 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000940)={'syzkaller1\x00', @broadcast}) write$tun(r7, &(0x7f0000000980)={@val={0x0, 0x1c}, @void, @eth={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@void}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x4000, 0x9, 0x11, 0x0, @multicast2, @empty}, {0x4e20, 0x17c1, 0x10, 0x0, @gue={{0x2, 0x1, 0x1, 0x9, 0x100, @val=0x80}}}}}}}}, 0x3a) r9 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r9, &(0x7f0000000480)={&(0x7f00000004c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10, 0x0}, 0x300440f1) setsockopt$sock_attach_bpf(r9, 0x1, 0x12, &(0x7f0000000500), 0x4) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000000)={0x0, 'ip6_vti0\x00', {0x1}, 0x3}) 1.593710577s ago: executing program 2 (id=2812): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000100)={0x2, {{0x2, 0x2, @multicast2}}, 0x1, 0x1, [{{0x2, 0x4e21, @empty}}]}, 0x110) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0xb19366062a5e1df1, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xb, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0xad}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, 0x0, 0x4800) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000040601010000000000000000010000050500010007000000e5b8313d5168e287ff1474249a839e2d448342e6f1b190e88642acafdf1e0b482d4031be5ba7b48c2df454732c7158846ade9a8697c7dd58fe112439f86b13bf31e6b92965c439518c9c34eb0ed885f5a1a22788ab0bca77bcc3f8218fef39d0714a79c0303981e91eaff47db43139cb57971fbd7d07"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0xc40) getsockname$packet(r4, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[], 0x3c}}, 0x40000) sendmsg$nl_route(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x11, 0xc8, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}, 0x1, 0x0, 0x0, 0x823be637d8173150}, 0x40000c0) bind$inet(r2, &(0x7f0000000680)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f00000006c0)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000000700), 0x800001d, 0x0) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000940), 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r10 = openat$cgroup_devices(r9, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r10, &(0x7f00000000c0)=ANY=[@ANYBLOB='\t s'], 0x8) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000980)={0x0, 0x1f, &(0x7f00000009c0)={&(0x7f0000000a00)={0x34, r8, 0x1, 0x9, 0x25dfdbff, {0x25, 0x0, 0x700}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x24004804) 1.361897511s ago: executing program 0 (id=2813): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000040)={0x1, [0x3]}, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4090}, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x271e, 0x0, &(0x7f0000000280)) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c00010006001200810000001000040000000000000a000191004000140002"], 0x48}, 0x1, 0x0, 0x0, 0x4044850}, 0xc044) 1.247760741s ago: executing program 3 (id=2814): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xd, 0x11, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xa6e, 0x0, 0x0, 0x0, 0x8}, [@cb_func, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @ldst={0x1, 0x0, 0x0, 0xb, 0x9, 0xffffffffffffffe0, 0xffffffffffffffff}, @ldst={0x0, 0x1, 0x4, 0x6, 0xfdad072ad861d02, 0x50}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffffffff}}]}, &(0x7f00000000c0)='GPL\x00', 0x3, 0xf0, &(0x7f0000000140)=""/240, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x5, 0xd, 0x5, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x5, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000300)=[{0x3, 0x5, 0x8, 0x9939b9908338d0ac}, {0x0, 0x2, 0x8, 0x3}, {0x2, 0x3, 0x7}, {0x1, 0x1, 0x10, 0x8}, {0x0, 0x3, 0xe, 0x9}], 0x10, 0x1ff}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1, 0xc, &(0x7f0000000440)=@raw=[@map_idx_val={0x18, 0x7, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}, @cb_func={0x18, 0x1, 0x4, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0x70}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x1}, @generic={0x3, 0x5, 0x0, 0xd, 0x4}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x1}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x3}], &(0x7f00000004c0)='syzkaller\x00', 0x6, 0xbf, &(0x7f0000000500)=""/191, 0x40f00, 0x5c, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000600)={0x5, 0x0, 0x1, 0x3}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x8, &(0x7f0000000640)=[0xffffffffffffffff, 0x1], &(0x7f0000000680)=[{0x4, 0x1, 0x2, 0x3}, {0x2, 0x2, 0x3}, {0x3, 0x4, 0x2, 0x5}, {0x4, 0x3, 0xe, 0x6}, {0x2, 0x4, 0x7, 0xc}, {0x3, 0x1, 0x8, 0xc}, {0x3, 0x3, 0x1, 0x4}, {0x3, 0x3, 0x4, 0x4}], 0x10, 0x83c}, 0x94) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000007c0)={@fallback, 0x0, 0x1, 0x58ac, &(0x7f0000000800), 0x0, 0x0, &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x0}, 0x40) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000880)={0x6, 0x0}, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000008c0)={@map, 0xffffffffffffffff, 0x22, 0x203e, 0xffffffffffffffff, @void, @void, @value=r3, @void, r2}, 0x20) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000940)={'batadv0\x00', 0x0}) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x80000000}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xa, 0x10, &(0x7f0000000ac0)=@framed={{0x18, 0x5, 0x0, 0x0, 0xc}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000b40)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r6, 0xfffff000, 0xe, 0x0, &(0x7f0000000c00)="882f1242a03c3f98722780b605a7", 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000900)={@ifindex=r4, r0, 0x1e, 0x0, r1, @void, @value=r6, @void, @void, r2}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) 1.08937345s ago: executing program 1 (id=2815): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000700), 0xffffffffffffffff) r4 = socket(0x10, 0x3, 0x0) (async, rerun: 64) r5 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r6 = socket(0x10, 0x803, 0x2) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014) (async, rerun: 64) recvmmsg(r7, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000000a80)}, 0xfffffffc}], 0x1, 0x2, 0x0) (rerun: 64) syz_genetlink_get_family_id$mptcp(&(0x7f0000001ac0), r6) (async) getsockname$packet(r6, &(0x7f0000001b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001b40)=0x14) sendmsg$nl_route(r5, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000001c00)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0xc, 0x17, &(0x7f0000001d00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2000000}, {}, {}, [@ringbuf_query={{}, {}, {0x85, 0x0, 0x0, 0x17}}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmsg$nl_route_sched(r4, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001e00)={&(0x7f0000001e40)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x8d0) sendmsg$nl_route_sched(r5, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001f00)={&(0x7f0000001f40)=@newtfilter={0xd8, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xc}, {0xfff2}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0xac, 0x2, [@TCA_BPF_ACT={0x4c}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}]}, 0xd8}}, 0x0) (async) r9 = syz_open_procfs$namespace(0x0, &(0x7f0000000740)='ns/pid\x00') sendmsg$GTP_CMD_GETPDP(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r9}, @GTPA_LINK={0x8}]}, 0x2c}}, 0x0) (async) bind$alg(r1, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58) (async, rerun: 32) socket$can_raw(0x1d, 0x3, 0x1) (async, rerun: 32) r10 = accept4(r1, 0x0, 0x0, 0x800) (async) close(0x3) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000000500), r11) sendmsg$TIPC_CMD_ENABLE_BEARER(r11, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) (async) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r10, &(0x7f00000006c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x2c, r12, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {}, {0x10, 0x18, {0x3, @bearer=@l2={'eth', 0x3a, 'nr0\x00'}}}}, ["", "", "", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) close(0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0xd, 0x4, &(0x7f0000000900)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0xc}]}, &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfff}, 0x94) (async, rerun: 32) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="d800000018009903e00312ba0d8105040a5fe100ff0f040b067c55a1bc000900b800069907000000b0000500fef32702d3001500030001400200000901223fc6ab007f6f94007100a007a290457f0189b316277ce0d5a235076bf75c10dde13fb206b33b174e54980ebace8017cbec4c2ee5a7030000000000000091643a5ee4b11602b2a10c11ce1b14d6d930dfe1000000730d7a5025ccca262f3d40fad956d2b6d5a3a6692ac217e11382e767e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6cc452a92307f00000e9703", 0xd8}], 0x1}, 0x20048812) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000140)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608fffffff80000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50af8ff00000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x7, 0xd9, &(0x7f0000000340)=""/217, 0x0, 0x8}, 0x94) 1.075246631s ago: executing program 0 (id=2816): mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x10, 0xe, &(0x7f0000001140)=ANY=[@ANYRESHEX=0x0], &(0x7f0000001e40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e}, 0x94) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r2, 0x6, 0x1f, &(0x7f0000000480)="e49759178f86bf775f16d3c7e14b03cd569211b6b8f0c940442d5cdbaf0782f39caedee342973beacdf8323e72d6551f4828f3ebb8742d763f178ef3e7fe1512f8246c51ce1996ecf32351143bb92e1fb7807718394851703e7f2e4435ac65dbce89c87b26fc730566b323e07764dc73559f2ad446b23c597233f22e544b4811b60f026f8da7506ec088d325792e8b8c11dd94689bf3814c2910e281d0848d216656ffbea77624", 0xa7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB='D'], 0x44}, 0x1, 0x0, 0x0, 0x20009085}, 0x40040c4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000800)={0x3, &(0x7f0000000840)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff024}, {0x6}]}, 0x10) sendmmsg(r4, &(0x7f0000000880), 0x400000000000159, 0x40840) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="540000001000010027bd700402d4df2500000000", @ANYRES32=r6, @ANYBLOB="984e06004d6b010034001280110001006272696467655f736c617665000000001c000580050020000000000006001f000100000005000800"], 0x54}, 0x1, 0x0, 0x0, 0x400c080}, 0x200088c2) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000980), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYRES16=r7, @ANYRES16=r8], 0x1c}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x4c054) sendmsg$BATADV_CMD_SET_HARDIF(r7, &(0x7f0000000b00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x34, r8, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xb4f}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7ff}]}, 0x34}, 0x1, 0x0, 0x0, 0x880}, 0x8000) sendmsg$nl_generic(r7, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)={0x14, 0x2f, 0x107, 0x0, 0x25dfdbff, {0x3, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x2000c010) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x800, 0x0, 0x103, 0x1}, 0x20) r9 = socket$inet6(0xa, 0x2, 0x0) r10 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r10, 0x0, 0xd4, &(0x7f0000000440)=0x2, 0x4) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000000000000210000000100000b00000000", @ANYRES32=0x0, @ANYBLOB="00b804000100000008001b00000000000800290000000100080028007e870000"], 0x38}, 0x1, 0x0, 0x0, 0x24040051}, 0x4000000) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f00000001c0)={@mcast1, 0x1, 0x2, 0x0, 0x9, 0x1, 0x96}, 0x20) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x12, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000006c0)='freezer.self_freezing\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f0000000b40)=ANY=[@ANYBLOB="9feb01000000000d8b012d5220dd79e4921b8ed060576018620aca47198466003052ea6e8b752497b33cba7166a5672edc015ad39e8032610a5f728b16e3a55adbf582413df63b4a68b88ccb2631bea388680fc4a73f308d63db80196f6ab709617181bccee8a4"], &(0x7f0000001e80)=""/4089, 0x1b, 0xff9, 0x207, 0x3}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1d, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000100085000000bb000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003100000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa2af}, 0x94) 1.026799109s ago: executing program 3 (id=2817): socket$kcm(0x11, 0x200000000000002, 0x300) (async) socket$kcm(0x11, 0x200000000000002, 0x300) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x8) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x10}, 0x800) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000080)={0x6, 0x0, 0x6, 0x4, 0xe0, 0x8, 0x1}, 0xc) getsockopt$bt_BT_RCVMTU(r1, 0x112, 0xf, &(0x7f00000000c0)=0x2, &(0x7f0000000100)=0x2) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001a40)=@newqdisc={0x154, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffffffe, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0xffffffffffffffbb, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x3c}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x400, 0x80000000, 0x55, 0x9, 0x3, 0x12, 0x1}}]}}]}, 0x154}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001a40)=@newqdisc={0x154, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffffffe, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0xffffffffffffffbb, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x3c}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x400, 0x80000000, 0x55, 0x9, 0x3, 0x12, 0x1}}]}}]}, 0x154}}, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r2) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r4, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8487}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5a9}]}, 0x24}}, 0x4000000) 493.426242ms ago: executing program 4 (id=2818): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000014b703000000000000850000006a00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 359.511827ms ago: executing program 3 (id=2819): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="3000000000000000840000000100000000000001"], 0x30}], 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000840)=@assoc_value={r4, 0x2}, 0x8) 267.986136ms ago: executing program 0 (id=2820): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x24, 0xf, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0x4}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}}, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r1, 0x89e3, &(0x7f0000000000)={0x81, 0x0, 0x9, 0x9, 0x2, 0x81}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000003b40), r2) sendmsg$NLBL_CIPSOV4_C_LISTALL(r2, &(0x7f0000003c40)={0x0, 0x0, &(0x7f0000003c00)={&(0x7f0000003b80)=ANY=[@ANYBLOB="14004000", @ANYRES16=r3, @ANYBLOB="090326bd7000ffdbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x4040000) 216.303124ms ago: executing program 4 (id=2821): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) recvmmsg(r0, &(0x7f0000001480)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000001c0)=[{0xfffffffffffffffd}], 0x1}}], 0x2, 0x20, 0x0) shutdown(r0, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0500000004000000080000000c"], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x14, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000ff908500000071"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000005c0)={r3}, 0xc) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000100)=@gcm_256={{0x304}, "5e85521b1b7ee32f", "b626f8353efa8779461289a35d3e4f7b12e834b4db3edac4e2b1617704161c9b", "ac45b697", "a4baa39f3a694ca0"}, 0x38) recvfrom$inet6(r1, &(0x7f0000000200)=""/192, 0xc0, 0x40, 0x0, 0x0) ppoll(&(0x7f0000000040)=[{r0, 0x1}], 0x1, 0x0, 0x0, 0x0) 121.4804ms ago: executing program 1 (id=2822): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0xa, 0x1, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000480)="3995f6e068", 0x5) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd700000000000010000001c0007800c00018008000100", @ANYRES32=r0, @ANYBLOB="0c00018808000100", @ANYRES32=r0, @ANYBLOB="0c0002"], 0x3c}, 0x1, 0x0, 0x0, 0x55ebfcb85e78e904}, 0xc844) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r8 = socket$alg(0x26, 0x5, 0x0) r9 = socket(0xa, 0x5, 0x0) setsockopt$inet6_int(r9, 0x29, 0x1a, &(0x7f0000000640)=0x8, 0x4) sendmsg$inet_sctp(r9, &(0x7f0000000680)={&(0x7f00000006c0)=@in6={0xa, 0x4e26, 0x200000ff, @dev={0xfe, 0x80, '\x00', 0x15}, 0x5}, 0x1c, &(0x7f0000000700)=[{&(0x7f00000008c0)="a6", 0x1}], 0x1, &(0x7f0000000900)=[@dstaddrv4={0x18, 0x84, 0x7, @private=0xa010102}], 0x18, 0x4855}, 0x24000052) bind$alg(r8, &(0x7f00000005c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000780)="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", 0x40) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x50, r7, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback=0xac1414aa}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @remote}]}, 0x50}}, 0x0) sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="289aa169", @ANYRES16=r7, @ANYBLOB="080026bd7000fedbdf250000000008000b0001000000050014000900000008000c0002000000"], 0x2c}, 0x1, 0x0, 0x0, 0x804}, 0xc1) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@getstats={0x1c, 0x5e, 0x1, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r11, 0x2}}, 0x1c}}, 0x0) 20.902772ms ago: executing program 0 (id=2823): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="18000000161401c7"], 0x18}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@getlink={0x3c, 0x12, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x12100, 0x5cac4a7961cf0dbf}, [@IFLA_EXT_MASK={0x8, 0x1d, 0xfffffff8}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22045054}, 0x4) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000000)=""/55, &(0x7f0000000040)=0x37) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) socket$unix(0x1, 0x1, 0x0) pselect6(0x40, &(0x7f0000000240)={0x5, 0x8f, 0x1, 0x3, 0x1, 0xfffffffffffffff9, 0x7, 0x1}, &(0x7f0000000280)={0x9, 0x5, 0x3, 0x6, 0x5, 0xffffffffffffffff, 0xc0000, 0x4}, 0x0, 0x0, 0x0) ioctl$TUNSETCARRIER(r2, 0x400454e2, &(0x7f0000000300)) 0s ago: executing program 3 (id=2824): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000140), 0x0) close(r0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000180)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x1e, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000440)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000005c0)="5c00000015006b0300224ed86e6c1d000a117ea6e070d6064e22000300000000250002000f00000017d34460bc24eab556a705251e6182949a00003d3b48dfd8cdbf9767b4fa51f62a64c9f4060046d88037e786a6d0a5d700000017", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7000000002060500000000000000000000000000120003006269746d61703a69702c6d6163000000050004000000000009000200f3797a3000000000240007800c0002800800014000008e020c0001800800014000000000080008400000001005000500020000000500010006"], 0x70}}, 0x0) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) kernel console output (not intermixed with test programs): netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 219.415874][T10659] netlink: 'syz.4.1214': attribute type 1 has an invalid length. [ 219.495854][T10659] bond3: entered promiscuous mode [ 219.496370][T10659] 8021q: adding VLAN 0 to HW filter on device bond3 [ 219.540927][T10668] vxcan1: entered allmulticast mode [ 219.712530][T10659] bond3: (slave bridge3): making interface the new active one [ 219.712560][T10659] bridge3: entered promiscuous mode [ 219.719970][T10659] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 219.905078][T10674] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 219.925654][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 219.939663][T10675] x_tables: duplicate underflow at hook 1 [ 219.939769][T10675] x_tables: duplicate underflow at hook 1 [ 219.939859][T10675] x_tables: duplicate underflow at hook 1 [ 219.939938][T10675] x_tables: duplicate underflow at hook 1 [ 219.940029][T10675] x_tables: duplicate underflow at hook 1 [ 219.940107][T10675] x_tables: duplicate underflow at hook 1 [ 219.940186][T10675] x_tables: duplicate underflow at hook 1 [ 219.940265][T10675] x_tables: duplicate underflow at hook 1 [ 219.940341][T10675] x_tables: duplicate underflow at hook 1 [ 220.273407][ T32] audit: type=1800 audit(1792177001.824:8): pid=10687 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1221" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1296 res=0 errno=0 [ 220.465508][T10698] netlink: 'syz.0.1225': attribute type 2 has an invalid length. [ 220.465532][T10698] __nla_validate_parse: 3 callbacks suppressed [ 220.465546][T10698] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1225'. [ 220.524707][T10698] : entered promiscuous mode [ 220.679915][T10707] xt_check_table_hooks: 56 callbacks suppressed [ 220.679935][T10707] x_tables: duplicate underflow at hook 2 [ 220.705378][T10708] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 221.067891][T10725] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1234'. [ 221.299297][T10725] netlink: 332 bytes leftover after parsing attributes in process `syz.1.1234'. [ 221.299359][T10725] netlink: 'syz.1.1234': attribute type 9 has an invalid length. [ 221.299375][T10725] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1234'. [ 221.299392][T10725] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1234'. [ 221.610396][T10748] netlink: 'syz.4.1240': attribute type 10 has an invalid length. [ 221.908563][T10758] netlink: 'syz.0.1244': attribute type 1 has an invalid length. [ 222.022922][T10763] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1245'. [ 222.091475][T10765] : renamed from bond0 (while UP) [ 222.629536][T10798] bond0: (slave bond_slave_0): Releasing backup interface [ 222.653476][T10798] bond0: (slave c@0Ù): Releasing backup interface [ 222.693478][T10798] team0: Port device team_slave_0 removed [ 222.697517][T10803] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1257'. [ 222.725624][T10798] team0: Port device team_slave_1 removed [ 222.727289][T10798] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 222.727314][T10798] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 222.772875][T10798] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 222.772901][T10798] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 222.780496][T10798] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 222.904865][T10801] team0: Mode changed to "broadcast" [ 222.922519][T10801] vlan0: entered promiscuous mode [ 222.970608][T10801] team0: Port device vlan0 added [ 222.999029][T10801] tipc: Enabled bearer , priority 0 [ 223.324435][T10821] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1261'. [ 223.347103][T10821] tc_dump_action: action bad kind [ 223.364919][T10827] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1262'. [ 223.367210][T10827] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1262'. [ 223.442197][ T6030] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.443334][ T1505] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.443383][ T1505] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.443424][ T1505] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.667568][T10839] vxcan0: tx drop: invalid da for name 0x0000000000000001 [ 223.669891][T10839] v: renamed from erspan0 (while UP) [ 223.691749][T10839] v: entered allmulticast mode [ 223.692567][T10839] A link change request failed with some changes committed already. Interface v may have been left with an inconsistent configuration, please check. [ 223.847967][T10845] tun0: tun_chr_ioctl cmd 1074025673 [ 223.912850][T10844] vcan0: entered promiscuous mode [ 223.912877][T10844] vcan0: entered allmulticast mode [ 224.013778][T10857] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 224.058486][T10854] syzkaller1: entered promiscuous mode [ 224.058511][T10854] syzkaller1: entered allmulticast mode [ 224.093658][T10854] syzkaller1: left promiscuous mode [ 224.137647][T10861] netlink: 'syz.2.1273': attribute type 1 has an invalid length. [ 224.346747][T10871] Bluetooth: ISO socket layer initialized [ 224.492655][T10880] ip_tables: iptables: counters copy to user failed while replacing table [ 224.520808][T10880] netlink: 'syz.4.1279': attribute type 2 has an invalid length. [ 224.564945][T10886] sctp: [Deprecated]: syz.3.1280 (pid 10886) Use of int in max_burst socket option. [ 224.564945][T10886] Use struct sctp_assoc_value instead [ 224.565251][T10885] sctp: [Deprecated]: syz.3.1280 (pid 10885) Use of int in max_burst socket option. [ 224.565251][T10885] Use struct sctp_assoc_value instead [ 224.616239][T10886] bond5: down delay (3) is not a multiple of miimon (100), value rounded to 0 ms [ 224.616272][T10886] bond5: peer notification delay (6) is not a multiple of miimon (100), value rounded to 0 ms [ 224.619333][T10886] bond5: entered allmulticast mode [ 224.620482][T10886] 8021q: adding VLAN 0 to HW filter on device bond5 [ 224.624663][T10891] trusted_key: syz.3.1280 sent an empty control message without MSG_MORE. [ 224.639024][T10885] netlink: 'syz.3.1280': attribute type 3 has an invalid length. [ 224.639515][T10886] netlink: 'syz.3.1280': attribute type 3 has an invalid length. [ 224.709817][T10887] bond6: down delay (3) is not a multiple of miimon (100), value rounded to 0 ms [ 224.709869][T10887] bond6: peer notification delay (6) is not a multiple of miimon (100), value rounded to 0 ms [ 224.710879][T10887] bond6: entered allmulticast mode [ 224.738449][T10887] 8021q: adding VLAN 0 to HW filter on device bond6 [ 228.389943][T10924] __nla_validate_parse: 18 callbacks suppressed [ 228.389967][T10924] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1289'. [ 228.460026][T10925] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1289'. [ 228.460261][T10924] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1289'. [ 228.615652][T10937] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 228.994819][T10960] vlan2: entered promiscuous mode [ 228.994844][T10960] hsr0: entered promiscuous mode [ 228.995114][T10960] vlan2: entered allmulticast mode [ 228.995130][T10960] hsr0: entered allmulticast mode [ 228.995145][T10960] hsr_slave_0: entered allmulticast mode [ 228.995161][T10960] hsr_slave_1: entered allmulticast mode [ 229.063636][T10960] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1298'. [ 229.071193][T10960] hsr_slave_0: left promiscuous mode [ 229.087936][T10960] hsr_slave_1: left promiscuous mode [ 229.554607][T10979] netlink: Unknown conntrack attr (0) [ 229.649968][T10961] virtio_blk virtio4: 1/0/0 default/read/poll queues [ 229.686053][T10961] virtio_blk virtio4: [vda] 262144 512-byte logical blocks (134 MB/128 MiB) [ 229.907560][T10987] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1303'. [ 230.118599][T10995] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1307'. [ 230.131876][T10995] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1307'. [ 230.134438][T10995] xt_hashlimit: size too large, truncated to 1048576 [ 230.134537][T10995] xt_hashlimit: max too large, truncated to 1048576 [ 230.136148][T10995] ipt_ECN: cannot use operation on non-tcp rule [ 230.570010][T11025] bridge0: port 1(bond0) entered blocking state [ 230.570110][T11025] bridge0: port 1(bond0) entered disabled state [ 230.570287][T11025] bond0: entered allmulticast mode [ 230.622319][T11025] bond0: entered promiscuous mode [ 230.804365][ C0] bridge0: port 1(syz_tun) entered forwarding state [ 230.804423][ C0] bridge0: topology change detected, propagating [ 231.027059][ T7833] IPVS: starting estimator thread 0... [ 231.112056][T11053] IPVS: using max 25 ests per chain, 60000 per kthread [ 231.286583][T11066] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 231.372058][T11069] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1327'. [ 231.374016][T11069] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1327'. [ 232.032026][T11101] netlink: 'syz.1.1332': attribute type 4 has an invalid length. [ 232.032051][T11101] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.1332'. [ 232.068886][T11103] xt_hashlimit: size too large, truncated to 1048576 [ 232.110958][T11101] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 232.249770][T11068] netlink: 'syz.0.1324': attribute type 2 has an invalid length. [ 233.369928][T11159] tipc: Can't bind to reserved service type 1 [ 233.420465][T11159] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 233.624430][T11159] syzkaller1: entered promiscuous mode [ 233.624458][T11159] syzkaller1: entered allmulticast mode [ 233.645438][T11159] __nla_validate_parse: 2 callbacks suppressed [ 233.645463][T11159] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1344'. [ 233.863505][T11171] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1349'. [ 233.908649][T11182] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1350'. [ 233.936470][T11177] syzkaller0: left promiscuous mode [ 233.936496][T11177] syzkaller0: left allmulticast mode [ 233.986095][T11184] openvswitch: netlink: nsh attribute has 17 unknown bytes. [ 234.101933][T11192] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 234.299123][T11199] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1353'. [ 234.527622][T11209] tap0: tun_chr_ioctl cmd 1074025677 [ 234.527742][T11209] tap0: linktype set to 6 [ 234.528014][T11210] tap0: tun_chr_ioctl cmd 1074025677 [ 234.528078][T11210] tap0: linktype set to 6 [ 234.580618][T11202] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1354'. [ 234.616056][T11203] bridge6: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 234.654366][T11216] netlink: 'syz.2.1356': attribute type 7 has an invalid length. [ 234.654753][T11216] netlink: 136 bytes leftover after parsing attributes in process `syz.2.1356'. [ 234.751187][T11209] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 234.785210][T11207] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1354'. [ 234.914066][T11229] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 235.059710][T11200] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1354'. [ 235.407671][T11251] tipc: Cannot configure node identity twice [ 235.407692][T11251] tipc: Cannot configure node identity twice [ 235.480608][T11253] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1359'. [ 236.066921][T11283] Bluetooth: hci0: unsupported parameter 5135 [ 236.066947][T11283] Bluetooth: hci0: unsupported parameter 8192 [ 236.066961][T11283] Bluetooth: hci0: unsupported parameter 5135 [ 236.066974][T11283] Bluetooth: hci0: unsupported parameter 8192 [ 236.296396][T11291] FAULT_INJECTION: forcing a failure. [ 236.296396][T11291] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 236.296433][T11291] CPU: 0 UID: 0 PID: 11291 Comm: syz.4.1373 Not tainted syzkaller #0 PREEMPT(full) [ 236.296476][T11291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 236.296497][T11291] Call Trace: [ 236.296510][T11291] [ 236.296525][T11291] dump_stack_lvl+0xe8/0x150 [ 236.296606][T11291] should_fail_ex+0x410/0x560 [ 236.296644][T11291] _copy_from_user+0x2d/0xb0 [ 236.296679][T11291] ___sys_sendmsg+0x1c6/0x360 [ 236.296710][T11291] ? __lock_acquire+0x747/0x2de0 [ 236.296747][T11291] ? __pfx____sys_sendmsg+0x10/0x10 [ 236.296819][T11291] ? __fget_files+0x2a/0x420 [ 236.296852][T11291] ? __fget_files+0x3a2/0x420 [ 236.296896][T11291] __x64_sys_sendmsg+0x1b1/0x290 [ 236.296932][T11291] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 236.296987][T11291] do_syscall_64+0x166/0x520 [ 236.297016][T11291] ? trace_irq_disable+0x3b/0x140 [ 236.297040][T11291] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.297063][T11291] ? clear_bhb_loop+0x70/0xc0 [ 236.297091][T11291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.297113][T11291] RIP: 0033:0x7f3f1359e559 [ 236.297133][T11291] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 236.297151][T11291] RSP: 002b:00007f3f1450c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 236.297175][T11291] RAX: ffffffffffffffda RBX: 00007f3f13825fa0 RCX: 00007f3f1359e559 [ 236.297191][T11291] RDX: 0000000000044004 RSI: 0000200000002e00 RDI: 0000000000000003 [ 236.297205][T11291] RBP: 00007f3f1450c090 R08: 0000000000000000 R09: 0000000000000000 [ 236.297219][T11291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 236.297231][T11291] R13: 00007f3f13826038 R14: 00007f3f13825fa0 R15: 00007ffda00c22e8 [ 236.297268][T11291] [ 236.745520][T11308] Bluetooth: MGMT ver 1.23 [ 236.759489][T11308] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1379'. [ 236.855861][T11314] openvswitch: netlink: Multiple metadata blocks provided [ 237.056031][T11321] batman_adv: batadv0: Adding interface: syzkaller0 [ 237.056053][T11321] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 237.059826][T11321] batman_adv: batadv0: Interface activated: syzkaller0 [ 237.596738][T11326] bridge0: port 1(syz_tun) entered disabled state [ 237.795888][T11326] syz_tun (unregistering): left allmulticast mode [ 237.795920][T11326] syz_tun (unregistering): left promiscuous mode [ 237.796020][T11326] bridge0: port 1(syz_tun) entered disabled state [ 237.930896][T11316] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 238.010612][T11316] batman_adv: batadv0: Removing interface: syzkaller0 [ 238.208392][T11360] netlink: 'syz.1.1385': attribute type 13 has an invalid length. [ 238.800708][T11397] tipc: Resetting bearer [ 238.837430][T11398] netlink: 'syz.4.1397': attribute type 16 has an invalid length. [ 238.837458][T11398] netlink: 'syz.4.1397': attribute type 17 has an invalid length. [ 238.954003][T11392] syzkaller1: entered promiscuous mode [ 238.954033][T11392] syzkaller1: entered allmulticast mode [ 239.011987][T11398] tipc: Resetting bearer [ 239.055520][T11398] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 239.455516][ T32] audit: type=1800 audit(1792177021.004:9): pid=11417 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1402" name="r" dev="tmpfs" ino=1442 res=0 errno=0 [ 239.489237][ T32] audit: type=1800 audit(1792177021.034:10): pid=11417 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1402" name="r" dev="tmpfs" ino=1442 res=0 errno=0 [ 239.698865][ T32] audit: type=1804 audit(1792177021.244:11): pid=11424 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1404" name="/newroot/280/cgroup.controllers" dev="tmpfs" ino=1448 res=1 errno=0 [ 239.726820][ T32] audit: type=1800 audit(1792177021.274:12): pid=11424 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1404" name="cgroup.controllers" dev="tmpfs" ino=1448 res=0 errno=0 [ 239.729856][T11425] __nla_validate_parse: 8 callbacks suppressed [ 239.729878][T11425] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1405'. [ 239.814706][T11425] 8021q: adding VLAN 0 to HW filter on device bond3 [ 239.865923][T11431] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 239.885053][ T50] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.885150][ T50] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.885188][ T50] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.885259][ T50] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.013596][T11425] bond3 (unregistering): (slave geneve2): Releasing backup interface [ 240.048280][T11425] bond3 (unregistering): Released all slaves [ 240.136251][T11439] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1408'. [ 240.158957][T11442] syzkaller0: entered promiscuous mode [ 240.159009][T11442] syzkaller0: entered allmulticast mode [ 240.202944][ T1505] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.203161][ T1505] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.203238][ T1505] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.203365][ T1505] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.294224][T11433] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1407'. [ 240.454127][T11464] x_tables: unsorted underflow at hook 2 [ 240.456828][T11464] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1412'. [ 240.456854][T11464] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1412'. [ 240.456882][T11464] netlink: 'syz.2.1412': attribute type 15 has an invalid length. [ 240.660306][T11464] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1412'. [ 240.660333][T11464] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1412'. [ 240.660361][T11464] netlink: 'syz.2.1412': attribute type 15 has an invalid length. [ 240.781998][ T146] netdevsim netdevsim2 netdevsim3: set [0, 1] type 1 family 0 port 60387 - 0 [ 240.782055][ T146] netdevsim netdevsim2 netdevsim0: set [0, 1] type 1 family 0 port 60387 - 0 [ 240.782130][ T146] netdevsim netdevsim2 netdevsim2: set [0, 1] type 1 family 0 port 60387 - 0 [ 240.782171][ T146] netdevsim netdevsim2 netdevsim1: set [0, 1] type 1 family 0 port 60387 - 0 [ 240.839164][T11497] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1415'. [ 241.102891][T11520] ip_tables: iptables: counters copy to user failed while replacing table [ 241.105918][T11519] ip_tables: iptables: counters copy to user failed while replacing table [ 241.226602][T11530] sctp: [Deprecated]: syz.2.1420 (pid 11530) Use of int in maxseg socket option. [ 241.226602][T11530] Use struct sctp_assoc_value instead [ 241.262001][T11447] workqueue: Failed to create a rescuer kthread for wq "nfc20_nci_rx_wq": -EINTR [ 241.679729][T11552] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1422'. [ 242.144820][T11564] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1424'. [ 242.259923][T11568] gretap0: entered promiscuous mode [ 242.296608][T11568] 0ªî{X¹¦: renamed from gretap0 [ 242.313900][T11568] 0ªî{X¹¦: left promiscuous mode [ 242.313928][T11568] 0ªî{X¹¦: entered allmulticast mode [ 242.341004][T11568] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 242.449901][T11531] wg1: renamed from bridge0 [ 242.876590][T11588] netlink: 'syz.4.1431': attribute type 83 has an invalid length. [ 243.161658][T11599] IPVS: sh: SCTP 172.20.20.187:0 - no destination available [ 244.179649][T11635] batadv_slave_1: entered promiscuous mode [ 244.255405][T11639] netlink: 'syz.3.1444': attribute type 1 has an invalid length. [ 244.310850][T11635] batadv_slave_1 (unregistering): left promiscuous mode [ 244.457037][T11639] bond7: option mode: invalid value (8) [ 244.469784][T11639] bond7 (unregistering): Released all slaves [ 244.780003][T11653] RDS: rds_bind could not find a transport for ::ffff:172.20.20.10, load rds_tcp or rds_rdma? [ 245.044350][T11667] xt_hashlimit: size too large, truncated to 1048576 [ 245.694768][T11693] xt_limit: Overflow, try lower: 0/0 [ 245.695287][T11691] xt_limit: Overflow, try lower: 0/0 [ 245.876710][T11688] netlink: 'syz.1.1452': attribute type 12 has an invalid length. [ 245.877340][T11687] netlink: 'syz.1.1452': attribute type 12 has an invalid length. [ 245.917821][T11697] __nla_validate_parse: 10 callbacks suppressed [ 245.917842][T11697] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1455'. [ 246.289140][T11712] netlink: 'syz.1.1459': attribute type 1 has an invalid length. [ 246.419449][T11720] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1461'. [ 246.450527][T11718] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1461'. [ 246.450563][T11718] openvswitch: netlink: Missing key (keys=c0, expected=880) [ 246.522142][T11725] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1463'. [ 246.931828][T11747] netlink: 'syz.4.1465': attribute type 1 has an invalid length. [ 246.931857][T11747] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1465'. [ 247.322660][T11756] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1465'. [ 248.254770][T11799] vlan4: entered promiscuous mode [ 248.326657][T11802] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1474'. [ 248.428805][T11804] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1474'. [ 248.491049][T11808] netlink: 'syz.1.1476': attribute type 30 has an invalid length. [ 248.688023][T11819] xt_l2tp: v2 doesn't support IP mode [ 248.854447][T11822] netlink: 1624 bytes leftover after parsing attributes in process `syz.4.1479'. [ 248.879099][T11822] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1479'. [ 249.983768][ T5883] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 250.399194][T11916] dummy0: entered allmulticast mode [ 250.416064][ T5883] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 250.475825][T11918] sctp: [Deprecated]: syz.2.1496 (pid 11918) Use of int in maxseg socket option. [ 250.475825][T11918] Use struct sctp_assoc_value instead [ 250.825187][T11932] ipt_REJECT: TCP_RESET invalid for non-tcp [ 251.185073][T11957] __nla_validate_parse: 3 callbacks suppressed [ 251.185100][T11957] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1506'. [ 251.589358][T11964] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1508'. [ 253.245656][T12030] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1526'. [ 253.245685][T12030] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1526'. [ 253.550109][T12044] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1532'. [ 253.627978][T12044] vlan2: entered promiscuous mode [ 253.630990][T12044] team0: entered promiscuous mode [ 253.631013][T12044] team_slave_0: entered promiscuous mode [ 253.631264][T12044] žÿ: entered promiscuous mode [ 253.809509][T12059] netlink: 'syz.2.1539': attribute type 1 has an invalid length. [ 253.888896][T12063] netlink: 'syz.3.1542': attribute type 1 has an invalid length. [ 253.917073][T12064] bond3: (slave geneve3): making interface the new active one [ 253.919266][T12064] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 253.944600][T12066] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1542'. [ 253.963040][T12071] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1544'. [ 253.968459][T12063] 8021q: adding VLAN 0 to HW filter on device bond7 [ 253.971985][ T1296] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 253.972106][ T146] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 253.972147][ T146] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 253.972186][ T146] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 254.040257][T12078] netlink: 'syz.2.1539': attribute type 1 has an invalid length. [ 254.108641][T12071] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1544'. [ 254.163214][T12071] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1544'. [ 254.569612][T12102] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1551'. [ 254.717570][T12106] syzkaller0: entered promiscuous mode [ 254.717595][T12106] syzkaller0: entered allmulticast mode [ 254.748539][T12106] tipc: Enabled bearer , priority 0 [ 255.200248][T12131] batadv0: entered promiscuous mode [ 255.201737][T12131] macvtap1: entered promiscuous mode [ 255.213214][T12131] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 255.227272][T12131] batadv0: left promiscuous mode [ 255.327915][T12138] batadv0: entered promiscuous mode [ 255.328258][T12138] macvtap1: entered promiscuous mode [ 255.330381][T12138] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 255.360749][T12138] batadv0: left promiscuous mode [ 255.743022][T12157] netlink: 'syz.0.1567': attribute type 1 has an invalid length. [ 255.762781][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 255.893212][T12157] bond0: entered promiscuous mode [ 255.897118][T12157] 8021q: adding VLAN 0 to HW filter on device bond0 [ 255.915970][T12157] netlink: 'syz.0.1567': attribute type 1 has an invalid length. [ 256.031983][T12157] bond7: entered promiscuous mode [ 256.033850][T12157] 8021q: adding VLAN 0 to HW filter on device bond7 [ 256.037245][T12157] netlink: 'syz.0.1567': attribute type 1 has an invalid length. [ 256.155658][T12157] bond8: entered promiscuous mode [ 256.158498][T12157] 8021q: adding VLAN 0 to HW filter on device bond8 [ 256.177256][T12157] netlink: 'syz.0.1567': attribute type 1 has an invalid length. [ 256.292742][T12157] bond9: entered promiscuous mode [ 256.293160][T12157] 8021q: adding VLAN 0 to HW filter on device bond9 [ 256.296234][T12157] netlink: 'syz.0.1567': attribute type 1 has an invalid length. [ 256.352539][T12172] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 256.359473][T12175] netlink: 'syz.1.1572': attribute type 8 has an invalid length. [ 256.359496][T12175] __nla_validate_parse: 2 callbacks suppressed [ 256.359509][T12175] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1572'. [ 256.429718][T12157] bond10: entered promiscuous mode [ 256.430217][T12157] 8021q: adding VLAN 0 to HW filter on device bond10 [ 256.445951][T12157] netlink: 'syz.0.1567': attribute type 1 has an invalid length. [ 256.531104][T12157] bond11: entered promiscuous mode [ 256.535319][T12157] 8021q: adding VLAN 0 to HW filter on device bond11 [ 256.622327][T12157] bond12: entered promiscuous mode [ 256.622780][T12157] 8021q: adding VLAN 0 to HW filter on device bond12 [ 256.820916][T12192] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1573'. [ 256.886402][T12192] bond6: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 256.955740][T12192] bond6 (unregistering): Released all slaves [ 257.195228][T12199] ip6t_rpfilter: unknown options [ 257.326320][T12204] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1580'. [ 257.326352][T12204] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1580'. [ 257.388344][T12212] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1583'. [ 257.547771][T12216] syzkaller0: entered promiscuous mode [ 257.547798][T12216] syzkaller0: entered allmulticast mode [ 257.670968][T12222] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 257.677107][T12222] batman_adv: batadv0: Adding interface: gretap2 [ 257.677159][T12222] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 257.679441][T12222] batman_adv: batadv0: Interface activated: gretap2 [ 257.843140][T12225] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1585'. [ 258.274814][T12256] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1590'. [ 258.299381][T12256] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1590'. [ 258.570447][T12280] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 258.728243][T12280] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 258.728293][T12280] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 258.882811][T12288] netlink: 236 bytes leftover after parsing attributes in process `syz.0.1600'. [ 258.882847][T12288] netlink: 236 bytes leftover after parsing attributes in process `syz.0.1600'. [ 259.072010][T12298] sch_fq: defrate 8 ignored. [ 259.263335][T12300] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 259.770142][T12332] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 259.896119][T12338] x_tables: ip6_tables: cgroup.2 match: invalid size 528 (kernel) != (user) 536 [ 259.944277][T12346] x_tables: ip6_tables: cgroup.2 match: invalid size 528 (kernel) != (user) 536 [ 260.208407][T12358] validate_nla: 2 callbacks suppressed [ 260.208431][T12358] netlink: 'syz.3.1615': attribute type 4 has an invalid length. [ 260.458724][T12367] veth7: entered promiscuous mode [ 260.698446][T12386] x_tables: duplicate underflow at hook 2 [ 263.609815][T12412] __nla_validate_parse: 21 callbacks suppressed [ 263.609840][T12412] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1629'. [ 263.609871][T12412] netlink: 'syz.0.1629': attribute type 30 has an invalid length. [ 263.686962][T12415] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1628'. [ 263.707326][T12412] vxlan0: entered promiscuous mode [ 263.707353][T12412] vxlan0: entered allmulticast mode [ 263.747606][T12414] ovs-system: entered promiscuous mode [ 263.757875][ T1296] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 263.757931][ T1296] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 263.757969][ T1296] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 263.758008][ T1296] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 263.772257][T12412] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1629'. [ 263.772358][T12412] netlink: 'syz.0.1629': attribute type 30 has an invalid length. [ 263.850737][T12412] vxlan1: entered promiscuous mode [ 263.850776][T12412] vxlan1: entered allmulticast mode [ 263.905470][T12413] bridge0: port 3(dummy0) entered disabled state [ 263.905834][T12413] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.926131][T12413] bridge0: left promiscuous mode [ 263.926162][T12413] bridge0: left allmulticast mode [ 264.104678][T12426] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1633'. [ 264.619965][T12449] TC_ACT_REPEAT abuse ? [ 264.629089][T12449] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1640'. [ 264.680978][T12455] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1641'. [ 264.826954][T12457] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1642'. [ 264.935733][T12457] gre0: entered promiscuous mode [ 264.943501][T12457] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1642'. [ 264.949237][T12457] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1642'. [ 264.957165][T12457] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1642'. [ 265.266279][T12469] netlink: 'syz.1.1644': attribute type 4 has an invalid length. [ 266.590114][T12541] netlink: 'syz.0.1659': attribute type 12 has an invalid length. [ 266.656304][T12541] netlink: 'syz.0.1659': attribute type 12 has an invalid length. [ 266.714023][T12548] tipc: Cannot configure node identity twice [ 266.714044][T12548] tipc: Cannot configure node identity twice [ 266.752849][T12547] IPVS: Error connecting to the multicast addr [ 266.858315][T12559] netlink: 'syz.0.1665': attribute type 2 has an invalid length. [ 267.852546][T12566] workqueue: Failed to create a rescuer kthread for wq "nfc23_nci_tx_wq": -EINTR [ 268.300078][T12685] Cannot find del_set index 3 as target [ 268.510232][T12688] ipvlan0: entered promiscuous mode [ 268.646826][T12694] __nla_validate_parse: 70 callbacks suppressed [ 268.646853][T12694] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1684'. [ 268.736858][T12697] netlink: 'syz.0.1684': attribute type 16 has an invalid length. [ 268.736885][T12697] netlink: 'syz.0.1684': attribute type 17 has an invalid length. [ 268.845408][T12701] netlink: 'syz.4.1688': attribute type 21 has an invalid length. [ 268.962786][T12696] tipc: Cannot configure node identity twice [ 268.962806][T12696] tipc: Cannot configure node identity twice [ 269.008799][T12697] 0ªX¹¦Dö»: left allmulticast mode [ 269.015581][T12697] v: left allmulticast mode [ 269.086216][T12697] dummy0: left promiscuous mode [ 269.176731][T12697] bond_slave_0: left promiscuous mode [ 269.453168][T12697] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 269.457826][T12697] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 269.915483][T12729] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1691'. [ 270.331498][T12742] bridge0: port 1(vlan2) entered blocking state [ 270.331700][T12742] bridge0: port 1(vlan2) entered disabled state [ 270.331941][T12742] vlan2: entered allmulticast mode [ 270.331960][T12742] geneve0: entered allmulticast mode [ 270.640185][T12754] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1703'. [ 270.705747][T12756] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1702'. [ 270.705778][T12756] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1702'. [ 271.517947][T12781] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1710'. [ 271.596833][T12787] netlink: 'syz.2.1712': attribute type 1 has an invalid length. [ 271.599160][T12786] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1707'. [ 271.633686][T12771] syzkaller1: entered promiscuous mode [ 271.633718][T12771] syzkaller1: entered allmulticast mode [ 271.670935][T12788] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1712'. [ 271.710410][T12788] bond0: left allmulticast mode [ 271.710701][T12788] bridge0: port 1(bond0) entered disabled state [ 271.983686][T12796] netlink: del zone limit has 4 unknown bytes [ 272.379325][T12828] netlink: 'syz.0.1719': attribute type 1 has an invalid length. [ 273.153637][T12850] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1724'. [ 273.206100][T12860] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1726'. [ 273.283691][T12862] ipt_REJECT: TCP_RESET invalid for non-tcp [ 273.316526][T12864] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 274.019019][T12874] netlink: 'syz.4.1732': attribute type 15 has an invalid length. [ 274.054798][T12874] netlink: 'syz.4.1732': attribute type 15 has an invalid length. [ 274.313686][ T1505] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 2816 - 0 [ 274.313740][ T1505] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 2816 - 0 [ 274.313777][ T1505] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 2816 - 0 [ 274.313813][ T1505] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 2816 - 0 [ 275.079401][T12941] pimreg: tun_chr_ioctl cmd 21731 [ 275.097095][T12941] __nla_validate_parse: 3 callbacks suppressed [ 275.097119][T12941] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1753'. [ 275.279848][T12954] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 275.298257][T12954] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 275.564278][T12968] syzkaller0: entered promiscuous mode [ 275.564304][T12968] syzkaller0: entered allmulticast mode [ 275.803989][T12973] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 278.703432][T12992] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 279.035439][T13011] IPv6: sit1: Disabled Multicast RS [ 279.294334][T13026] netlink: 272 bytes leftover after parsing attributes in process `syz.4.1776'. [ 279.330451][T13025] Bluetooth: hci0: unsupported parameter 5135 [ 279.330480][T13025] Bluetooth: hci0: unsupported parameter 8192 [ 279.330495][T13025] Bluetooth: hci0: unsupported parameter 5135 [ 279.330509][T13025] Bluetooth: hci0: unsupported parameter 8192 [ 279.547669][T13033] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1781'. [ 279.904711][T13055] ip6tnl2: entered allmulticast mode [ 279.945724][ T50] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 279.945967][ T50] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 279.972451][ T5751] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 280.011586][ T5899] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 280.031190][T13051] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1783'. [ 280.041627][ T5899] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 280.579164][T13082] syzkaller1: entered promiscuous mode [ 280.579191][T13082] syzkaller1: entered allmulticast mode [ 280.633735][T13085] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1790'. [ 280.742671][T13093] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1790'. [ 280.742701][T13093] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1790'. [ 280.873086][T13096] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1790'. [ 282.001039][T13112] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1792'. [ 282.001275][T13112] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1792'. [ 282.012333][T13112] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1792'. [ 282.012934][T13112] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1792'. [ 282.015826][T13112] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1792'. [ 282.016037][T13112] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1792'. [ 282.247139][T13126] bond4: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 282.250584][T13126] bond4 (unregistering): Released all slaves [ 282.884294][T13151] netlink: 'syz.4.1802': attribute type 1 has an invalid length. [ 282.940862][T13151] 8021q: adding VLAN 0 to HW filter on device bond4 [ 282.989508][T13151] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 283.007921][T13151] bond4: (slave batadv1): making interface the new active one [ 283.022717][T13151] bond4: (slave batadv1): Enslaving as an active interface with an up link [ 283.489425][T13171] gretap0: left promiscuous mode [ 283.555199][T13171] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 283.623894][T13170] ÿÿÿÿ: option downdelay: invalid value (18446744073709547007) [ 283.625618][T13170] ÿÿÿÿ: option downdelay: allowed values 0 - 2147483647 [ 283.628150][T13170] ÿÿÿÿ (unregistering): Released all slaves [ 283.748732][T13182] macvlan1: entered promiscuous mode [ 283.766644][T13182] macvlan1: left promiscuous mode [ 283.796469][T13199] xt_CT: You must specify a L4 protocol and not use inversions on it [ 284.011544][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 285.625752][T13261] openvswitch: netlink: Unknown key attributes 1 [ 285.707171][T13267] x_tables: duplicate underflow at hook 2 [ 285.820484][T13272] __nla_validate_parse: 45 callbacks suppressed [ 285.820504][T13272] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1833'. [ 285.820530][T13272] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1833'. [ 286.085706][T13284] bridge0: port 3(dummy0) entered blocking state [ 286.085846][T13284] bridge0: port 3(dummy0) entered listening state [ 286.086143][T13284] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.086267][T13284] bridge0: port 1(bridge_slave_0) entered listening state [ 286.212848][T13290] tipc: Cannot configure node identity twice [ 286.212866][T13290] tipc: Cannot configure node identity twice [ 286.283285][T13287] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1837'. [ 286.909843][T13325] bond5: down delay (3) is not a multiple of miimon (100), value rounded to 0 ms [ 286.909877][T13325] bond5: peer notification delay (6) is not a multiple of miimon (100), value rounded to 0 ms [ 286.915594][T13325] bond5: entered allmulticast mode [ 286.917181][T13325] 8021q: adding VLAN 0 to HW filter on device bond5 [ 286.968675][T13325] bond6: down delay (3) is not a multiple of miimon (100), value rounded to 0 ms [ 286.968716][T13325] bond6: peer notification delay (6) is not a multiple of miimon (100), value rounded to 0 ms [ 286.969674][T13325] bond6: entered allmulticast mode [ 286.970142][T13325] 8021q: adding VLAN 0 to HW filter on device bond6 [ 287.023636][T13325] bond7: down delay (3) is not a multiple of miimon (100), value rounded to 0 ms [ 287.023667][T13325] bond7: peer notification delay (6) is not a multiple of miimon (100), value rounded to 0 ms [ 287.024819][T13325] bond7: entered allmulticast mode [ 287.025306][T13325] 8021q: adding VLAN 0 to HW filter on device bond7 [ 287.075627][T13325] bond8: down delay (3) is not a multiple of miimon (100), value rounded to 0 ms [ 287.075656][T13325] bond8: peer notification delay (6) is not a multiple of miimon (100), value rounded to 0 ms [ 287.076843][T13325] bond8: entered allmulticast mode [ 287.077307][T13325] 8021q: adding VLAN 0 to HW filter on device bond8 [ 287.164338][T13325] bond9: down delay (3) is not a multiple of miimon (100), value rounded to 0 ms [ 287.164370][T13325] bond9: peer notification delay (6) is not a multiple of miimon (100), value rounded to 0 ms [ 287.166320][T13325] bond9: entered allmulticast mode [ 287.167738][T13325] 8021q: adding VLAN 0 to HW filter on device bond9 [ 287.267807][T13325] bond10: down delay (3) is not a multiple of miimon (100), value rounded to 0 ms [ 287.267850][T13325] bond10: peer notification delay (6) is not a multiple of miimon (100), value rounded to 0 ms [ 287.269601][T13325] bond10: entered allmulticast mode [ 287.270978][T13325] 8021q: adding VLAN 0 to HW filter on device bond10 [ 287.335356][T13325] bond11: down delay (3) is not a multiple of miimon (100), value rounded to 0 ms [ 287.335468][T13325] bond11: peer notification delay (6) is not a multiple of miimon (100), value rounded to 0 ms [ 287.336865][T13325] bond11: entered allmulticast mode [ 287.337378][T13325] 8021q: adding VLAN 0 to HW filter on device bond11 [ 287.426594][T13325] bond12: down delay (3) is not a multiple of miimon (100), value rounded to 0 ms [ 287.426626][T13325] bond12: peer notification delay (6) is not a multiple of miimon (100), value rounded to 0 ms [ 287.427725][T13325] bond12: entered allmulticast mode [ 287.428155][T13325] 8021q: adding VLAN 0 to HW filter on device bond12 [ 287.493024][T13325] bond13: down delay (3) is not a multiple of miimon (100), value rounded to 0 ms [ 287.493084][T13325] bond13: peer notification delay (6) is not a multiple of miimon (100), value rounded to 0 ms [ 287.503672][T13325] bond13: entered allmulticast mode [ 287.510288][T13325] 8021q: adding VLAN 0 to HW filter on device bond13 [ 287.577477][T13325] bond14: down delay (3) is not a multiple of miimon (100), value rounded to 0 ms [ 287.577507][T13325] bond14: peer notification delay (6) is not a multiple of miimon (100), value rounded to 0 ms [ 287.581672][T13325] bond14: entered allmulticast mode [ 287.582157][T13325] 8021q: adding VLAN 0 to HW filter on device bond14 [ 287.644308][T13349] netlink: 'syz.3.1853': attribute type 1 has an invalid length. [ 287.650449][T13325] bond15: down delay (3) is not a multiple of miimon (100), value rounded to 0 ms [ 287.650480][T13325] bond15: peer notification delay (6) is not a multiple of miimon (100), value rounded to 0 ms [ 287.651649][T13325] bond15: entered allmulticast mode [ 287.652849][T13325] 8021q: adding VLAN 0 to HW filter on device bond15 [ 287.839037][T13357] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1854'. [ 288.003399][T13357] bond4: Unable to set peer notification delay as MII monitoring is disabled [ 288.009207][T13357] bond4 (unregistering): Released all slaves [ 288.228429][T13369] xt_HMARK: proto mask must be zero with L3 mode [ 288.404433][T13375] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1858'. [ 288.600867][T13378] syzkaller1: entered promiscuous mode [ 288.600898][T13378] syzkaller1: entered allmulticast mode [ 288.806923][T13383] netlink: 'syz.3.1861': attribute type 2 has an invalid length. [ 289.063648][T13393] bridge0: port 1(syz_tun) entered blocking state [ 289.063845][T13393] bridge0: port 1(syz_tun) entered disabled state [ 289.067983][T13393] syz_tun: entered promiscuous mode [ 289.174677][T13396] nbd: must specify a size in bytes for the device [ 289.520064][T13413] netlink: 'syz.0.1873': attribute type 4 has an invalid length. [ 289.534298][T13410] 8021q: VLANs not supported on sit0 [ 289.615509][T13413] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1873'. [ 289.933124][ T146] netdevsim netdevsim4 eth3: set [0, 1] type 1 family 0 port 8472 - 0 [ 289.933205][ T146] netdevsim netdevsim4 eth2: set [0, 1] type 1 family 0 port 8472 - 0 [ 289.933250][ T146] netdevsim netdevsim4 eth1: set [0, 1] type 1 family 0 port 8472 - 0 [ 289.933286][ T146] netdevsim netdevsim4 eth0: set [0, 1] type 1 family 0 port 8472 - 0 [ 290.275815][T13434] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1878'. [ 290.530446][T13442] netlink: 'syz.1.1882': attribute type 10 has an invalid length. [ 290.699594][T13460] FAULT_INJECTION: forcing a failure. [ 290.699594][T13460] name failslab, interval 1, probability 0, space 0, times 0 [ 290.699630][T13460] CPU: 0 UID: 0 PID: 13460 Comm: syz.4.1887 Not tainted syzkaller #0 PREEMPT(full) [ 290.699655][T13460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 290.699668][T13460] Call Trace: [ 290.699677][T13460] [ 290.699686][T13460] dump_stack_lvl+0xe8/0x150 [ 290.699723][T13460] should_fail_ex+0x410/0x560 [ 290.699760][T13460] should_failslab+0xa8/0x100 [ 290.699790][T13460] ? dst_alloc+0x105/0x170 [ 290.699811][T13460] kmem_cache_alloc_noprof+0xa1/0x600 [ 290.699838][T13460] ? dst_alloc+0x105/0x170 [ 290.699867][T13460] dst_alloc+0x105/0x170 [ 290.699893][T13460] xfrm_lookup_with_ifid+0x7c8/0x1e30 [ 290.699936][T13460] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 290.699966][T13460] ? lock_acquire+0x115/0x350 [ 290.700003][T13460] xfrm_lookup_route+0x3c/0x1c0 [ 290.700035][T13460] ? ip6_datagram_dst_update+0x4f7/0xcd0 [ 290.700069][T13460] ip6_datagram_dst_update+0x729/0xcd0 [ 290.700111][T13460] __ip6_datagram_connect+0xb82/0x10e0 [ 290.700155][T13460] ? __pfx___ip6_datagram_connect+0x10/0x10 [ 290.700191][T13460] ? udpv6_connect+0x26/0x230 [ 290.700226][T13460] ? __local_bh_enable_ip+0xd6/0x140 [ 290.700261][T13460] udpv6_connect+0x33/0x230 [ 290.700297][T13460] __sys_connect+0x316/0x450 [ 290.700327][T13460] ? __pfx___sys_connect+0x10/0x10 [ 290.700370][T13460] ? __pfx_ksys_write+0x10/0x10 [ 290.700403][T13460] __x64_sys_connect+0x7a/0x90 [ 290.700432][T13460] do_syscall_64+0x166/0x520 [ 290.700462][T13460] ? trace_irq_disable+0x3b/0x140 [ 290.700519][T13460] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.700543][T13460] ? clear_bhb_loop+0x70/0xc0 [ 290.700571][T13460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.700594][T13460] RIP: 0033:0x7f3f1359e559 [ 290.700615][T13460] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 290.700635][T13460] RSP: 002b:00007f3f1450c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 290.700659][T13460] RAX: ffffffffffffffda RBX: 00007f3f13825fa0 RCX: 00007f3f1359e559 [ 290.700676][T13460] RDX: 000000000000001c RSI: 0000200000000900 RDI: 0000000000000004 [ 290.700692][T13460] RBP: 00007f3f1450c090 R08: 0000000000000000 R09: 0000000000000000 [ 290.700706][T13460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 290.700719][T13460] R13: 00007f3f13826038 R14: 00007f3f13825fa0 R15: 00007ffda00c22e8 [ 290.700757][T13460] [ 290.995888][T13454] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 291.058072][T13462] tipc: Cannot configure node identity twice [ 291.058092][T13462] tipc: Cannot configure node identity twice [ 291.159887][T13468] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1891'. [ 291.199755][T13470] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1892'. [ 291.251096][T13470] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 291.317913][T13470] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 291.369626][T13464] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 291.503420][T13480] pimreg9: entered allmulticast mode [ 291.531860][T13481] af_packet: tpacket_rcv: packet too big, clamped from 136 to 4294967286. macoff=82 [ 292.342924][T13518] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1906'. [ 292.411720][T13521] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1906'. [ 292.411751][T13521] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1906'. [ 292.699633][T13527] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1910'. [ 292.881539][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 292.960508][T13533] netlink: 'syz.2.1912': attribute type 1 has an invalid length. [ 293.142573][T13550] sctp: [Deprecated]: syz.4.1914 (pid 13550) Use of int in maxseg socket option. [ 293.142573][T13550] Use struct sctp_assoc_value instead [ 293.339336][T13561] netlink: 'syz.1.1917': attribute type 5 has an invalid length. [ 293.358241][T13557] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1916'. [ 293.409598][T13568] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1921'. [ 293.410187][T13568] bond0: Error: CAN devices cannot be enslaved [ 293.456126][T13570] geneve2: entered promiscuous mode [ 293.489552][T13569] syzkaller0: left promiscuous mode [ 293.489581][T13569] syzkaller0: left allmulticast mode [ 293.539435][T13566] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1919'. [ 293.694255][T13566] IPv6: NLM_F_REPLACE set, but no existing node found! [ 294.545263][T13618] netlink: 'syz.0.1931': attribute type 4 has an invalid length. [ 294.564996][T13617] netlink: 'syz.2.1930': attribute type 1 has an invalid length. [ 294.571065][T13619] netlink: 'syz.0.1931': attribute type 4 has an invalid length. [ 294.595719][T13618] netlink: 'syz.0.1931': attribute type 4 has an invalid length. [ 294.629458][T13617] bond4: entered promiscuous mode [ 294.629899][T13617] 8021q: adding VLAN 0 to HW filter on device bond4 [ 294.692743][T13617] bond4: (slave bridge0): making interface the new active one [ 294.692770][T13617] bridge0: entered promiscuous mode [ 294.696029][T13617] bond4: (slave bridge0): Enslaving as an active interface with an up link [ 294.732036][T13629] netlink: 'syz.2.1930': attribute type 1 has an invalid length. [ 294.775861][T13628] bond4: (slave bridge2): Enslaving as a backup interface with an up link [ 294.895586][T13638] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1936'. [ 294.954449][T13638] bond5: option active_slave: mode dependency failed, not supported in mode broadcast(3) [ 294.956525][T13638] bond5 (unregistering): Released all slaves [ 295.000545][T13643] tc_dump_action: action bad kind [ 295.066132][T13642] sctp: [Deprecated]: syz.1.1935 (pid 13642) Use of int in maxseg socket option. [ 295.066132][T13642] Use struct sctp_assoc_value instead [ 295.159727][T13648] bridge0: port 2(veth0) entered blocking state [ 295.159962][T13648] bridge0: port 2(veth0) entered disabled state [ 295.160149][T13648] veth0: entered allmulticast mode [ 295.181944][T13648] veth0: entered promiscuous mode [ 295.182112][T13648] vlan2: entered promiscuous mode [ 295.182129][T13648] geneve0: entered promiscuous mode [ 295.184310][T13648] bridge0: port 2(veth0) entered blocking state [ 295.184432][T13648] bridge0: port 2(veth0) entered listening state [ 296.189306][T13702] ip6t_REJECT: ECHOREPLY is not supported [ 296.203789][T13695] syzkaller1: entered promiscuous mode [ 296.203818][T13695] syzkaller1: entered allmulticast mode [ 296.270834][T13705] __nla_validate_parse: 5 callbacks suppressed [ 296.270859][T13705] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1952'. [ 296.279914][T13706] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1952'. [ 296.353222][T13705] ovs-dp0: entered promiscuous mode [ 296.366420][T13706] openvswitch: ovs-dp0: Dropping previously announced user features [ 296.405448][T13714] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1955'. [ 296.488019][T13711] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 296.488088][T13711] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.531790][T13714] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1955'. [ 296.598817][T13711] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 296.598863][T13711] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.624491][T13723] openvswitch: netlink: IP tunnel attribute has 5393 unknown bytes. [ 296.718014][T13711] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 296.718083][T13711] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.817006][T13711] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 296.817047][T13711] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.860289][T13731] tc_dump_action: action bad kind [ 296.860374][T13729] tc_dump_action: action bad kind [ 296.889363][T13734] syzkaller0: entered promiscuous mode [ 296.889389][T13734] syzkaller0: entered allmulticast mode [ 296.953591][T13737] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1964'. [ 296.994710][T13733] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 297.023884][T13739] openvswitch: netlink: Encap mask attribute is set for non-VLAN frame. [ 297.411793][ T7832] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 297.411832][ T7832] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.411885][ T7832] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 297.411928][ T7832] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.424227][ T7832] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 297.424321][ T7832] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.424614][ T7832] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 297.424682][ T7832] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.555645][T13763] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 297.555674][T13763] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 297.557508][T13763] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 297.557530][T13763] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 297.559025][T13763] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 297.559071][T13763] batman_adv: batadv0: Removing interface: ip6gretap1 [ 297.802175][T13777] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1976'. [ 297.829215][T13778] ovs0: entered promiscuous mode [ 298.346732][T13806] openvswitch: netlink: ufid size 30 bytes exceeds the range (1, 16) [ 298.346751][T13806] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 298.540172][T13808] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1983'. [ 298.540201][T13808] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1983'. [ 298.767863][T13817] netlink: 'syz.2.1985': attribute type 4 has an invalid length. [ 298.810456][T13817] netlink: 'syz.2.1985': attribute type 4 has an invalid length. [ 298.834206][T13817] sch_tbf: peakrate 7 is lower than or equals to rate 4326703164098890790 ! [ 298.898322][T13819] syzkaller1: entered promiscuous mode [ 298.898352][T13819] syzkaller1: entered allmulticast mode [ 299.385274][T13848] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1992'. [ 299.411136][T13844] macsec0: entered promiscuous mode [ 299.426566][T13848] macsec0 (unregistering): left promiscuous mode [ 299.505185][T13850] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1994'. [ 299.810530][T13864] syzkaller0: entered promiscuous mode [ 299.810557][T13864] syzkaller0: entered allmulticast mode [ 300.184111][T13888] bond0: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 300.190530][T13890] netlink: NAT attributes may be specified only when CT COMMIT flag is also specified. [ 300.190672][T13890] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 300.234751][ T1161] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 300.364829][T13894] syzkaller0: entered promiscuous mode [ 300.364854][T13894] syzkaller0: entered allmulticast mode [ 300.369164][T13894] tipc: Enabled bearer , priority 0 [ 300.414323][T13894] tipc: Resetting bearer [ 300.456805][T13894] tipc: Disabling bearer [ 300.586945][T13892] tipc: New replicast peer: 172.20.20.187 [ 300.602935][T13892] tipc: Enabled bearer , priority 10 [ 300.736484][T13904] netlink: 'syz.3.2012': attribute type 4 has an invalid length. [ 300.749548][T13902] netlink: NAT attribute has 1 unknown bytes [ 300.749584][T13902] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 300.809029][T13904] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 301.201452][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 301.201689][ C1] bridge0: port 3(dummy0) entered learning state [ 301.539497][T13922] xt_TPROXY: Can be used only with -p tcp or -p udp [ 301.550538][T13939] tipc: Cannot configure node identity twice [ 301.550555][T13939] tipc: Cannot configure node identity twice [ 301.711394][ T25] tipc: Node number set to 2454534082 [ 301.831000][T13952] tipc: Enabling of bearer rejected, failed to enable media [ 302.335066][T13967] vlan4: entered allmulticast mode [ 302.335093][T13967] bridge_slave_0: entered allmulticast mode [ 302.361695][T13972] __nla_validate_parse: 3 callbacks suppressed [ 302.361716][T13972] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2031'. [ 302.708583][T13982] FAULT_INJECTION: forcing a failure. [ 302.708583][T13982] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 302.708629][T13982] CPU: 0 UID: 0 PID: 13982 Comm: syz.2.2035 Not tainted syzkaller #0 PREEMPT(full) [ 302.708654][T13982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 302.708683][T13982] Call Trace: [ 302.708692][T13982] [ 302.708702][T13982] dump_stack_lvl+0xe8/0x150 [ 302.708739][T13982] should_fail_ex+0x410/0x560 [ 302.708775][T13982] _copy_to_user+0x31/0xb0 [ 302.708813][T13982] simple_read_from_buffer+0xe1/0x170 [ 302.708854][T13982] proc_fail_nth_read+0x1bb/0x230 [ 302.708879][T13982] ? common_file_perm+0x20e/0x2b0 [ 302.708914][T13982] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 302.708944][T13982] ? rw_verify_area+0x24a/0x4c0 [ 302.708968][T13982] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 302.708994][T13982] vfs_read+0x213/0xa80 [ 302.709023][T13982] ? __pfx___mutex_lock+0x10/0x10 [ 302.709055][T13982] ? __pfx_vfs_read+0x10/0x10 [ 302.709079][T13982] ? __fget_files+0x2a/0x420 [ 302.709117][T13982] ? __fget_files+0x3a2/0x420 [ 302.709150][T13982] ? __fget_files+0x2a/0x420 [ 302.709193][T13982] ksys_read+0x150/0x270 [ 302.709219][T13982] ? __pfx_ksys_read+0x10/0x10 [ 302.709255][T13982] do_syscall_64+0x166/0x520 [ 302.709287][T13982] ? trace_irq_disable+0x3b/0x140 [ 302.709311][T13982] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.709335][T13982] ? clear_bhb_loop+0x70/0xc0 [ 302.709363][T13982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.709386][T13982] RIP: 0033:0x7f86a8b5ed8e [ 302.709408][T13982] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 302.709428][T13982] RSP: 002b:00007f86a9a72fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 302.709452][T13982] RAX: ffffffffffffffda RBX: 00007f86a9a736c0 RCX: 00007f86a8b5ed8e [ 302.709469][T13982] RDX: 000000000000000f RSI: 00007f86a9a730a0 RDI: 0000000000000005 [ 302.709483][T13982] RBP: 00007f86a9a73090 R08: 0000000000000000 R09: 0000000000000000 [ 302.709498][T13982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 302.709511][T13982] R13: 00007f86a8e26038 R14: 00007f86a8e25fa0 R15: 00007ffdf0f05828 [ 302.709549][T13982] [ 303.008319][T13987] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2037'. [ 303.566915][T14011] netlink: 'syz.4.2044': attribute type 2 has an invalid length. [ 303.789823][T14019] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2047'. [ 303.844582][T14021] ip_tables: iptables: counters copy to user failed while replacing table [ 303.895887][T14028] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2049'. [ 303.984069][T14032] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2050'. [ 304.062034][T14041] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2052'. [ 304.352939][T14054] bond17: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 304.353995][T14056] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2057'. [ 304.354024][T14056] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2057'. [ 304.358861][T14054] bond17 (unregistering): Released all slaves [ 304.412448][T14062] netlink: 'syz.2.2057': attribute type 4 has an invalid length. [ 304.412472][T14062] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2057'. [ 304.500996][T14062] .`: renamed from bond0 [ 304.769368][T14073] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2060'. [ 304.979958][T14088] ip_tables: iptables: counters copy to user failed while replacing table [ 305.708164][T14108] netlink: 'syz.1.2066': attribute type 1 has an invalid length. [ 305.766678][T14108] 8021q: adding VLAN 0 to HW filter on device bond6 [ 305.926874][T14118] bond6: (slave veth7): Enslaving as an active interface with a down link [ 305.967984][T14108] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 305.980090][T14108] bond6: (slave batadv0): making interface the new active one [ 305.992668][T14108] batadv0: entered promiscuous mode [ 305.994224][T14108] bond6: (slave batadv0): Enslaving as an active interface with an up link [ 306.028440][T14125] bond6 (unregistering): (slave veth7): Releasing active interface [ 306.047101][T14125] bond6 (unregistering): (slave batadv0): Releasing active interface [ 306.047133][T14125] batadv0: left promiscuous mode [ 306.048896][T14125] bond6 (unregistering): Released all slaves [ 306.297402][T14137] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.322175][ T5899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.514299][T14144] syz_tun: left promiscuous mode [ 306.521935][T14144] bridge0: port 1(syz_tun) entered disabled state [ 306.553779][T14150] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 306.639584][T14144] bond0: (slave bond_slave_0): Releasing backup interface [ 306.699766][T14144] bond0: (slave c@0Ù): Releasing backup interface [ 306.736080][T14144] team_slave_0: left promiscuous mode [ 306.783171][T14144] team0: Port device team_slave_0 removed [ 306.790019][T14144] žÿ: left promiscuous mode [ 306.820933][T14144] team0: Port device 76žÿ removed [ 306.828116][T14144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 306.828143][T14144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 306.847510][T14144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 306.847536][T14144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 306.867980][T14144] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 306.913466][T14160] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 306.914153][T14166] netlink: 'syz.1.2081': attribute type 3 has an invalid length. [ 307.233377][T14183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 307.505940][T14204] __nla_validate_parse: 2 callbacks suppressed [ 307.505965][T14204] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2091'. [ 307.549904][T14206] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 307.641194][T14211] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 307.650675][T14211] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2095'. [ 307.677287][T14212] ip_tables: iptables: counters copy to user failed while replacing table [ 307.792321][T14212] tipc: Resetting bearer [ 307.794875][T14212] bridge0: port 2(veth0) entered disabled state [ 307.828387][T14216] netlink: 'syz.4.2094': attribute type 16 has an invalid length. [ 307.828414][T14216] netlink: 'syz.4.2094': attribute type 17 has an invalid length. [ 307.885899][T14216] gre0: left promiscuous mode [ 307.886906][T14216] 0ªî{X¹¦: left allmulticast mode [ 307.917105][ T5879] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 307.920789][ T5884] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 307.938184][T14216] tipc: Resetting bearer [ 307.949646][T14216] bridge0: port 2(veth0) entered blocking state [ 307.949780][T14216] bridge0: port 2(veth0) entered listening state [ 307.979008][T14216] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 308.091949][ T5884] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 308.118761][T14236] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2100'. [ 308.120271][T14236] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2100'. [ 308.538245][T14253] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2105'. [ 308.538271][T14253] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2105'. [ 308.674190][T14260] @: renamed from dummy0 (while UP) [ 308.722136][ T5879] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 308.873123][T14268] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2111'. [ 308.901026][T14267] sctp: [Deprecated]: syz.4.2111 (pid 14267) Use of int in maxseg socket option. [ 308.901026][T14267] Use struct sctp_assoc_value instead [ 309.521693][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 309.829564][T14318] tipc: Enabling of bearer rejected, failed to enable media [ 309.939814][T14323] batman_adv: batadv0: Adding interface: syzkaller0 [ 309.939835][T14323] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1446) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 309.939946][T14323] batman_adv: batadv0: Interface activated: syzkaller0 [ 310.404808][T14341] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 310.438778][T14342] netlink: 996 bytes leftover after parsing attributes in process `syz.2.2125'. [ 311.274384][T14381] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2137'. [ 311.274420][T14381] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 311.304420][T14383] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 311.509454][T14393] syzkaller1: entered promiscuous mode [ 311.509481][T14393] syzkaller1: entered allmulticast mode [ 311.776674][T14404] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2142'. [ 311.837927][T14406] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 312.139342][T14426] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 312.715298][T14450] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 313.076846][T14472] __nla_validate_parse: 2 callbacks suppressed [ 313.076873][T14472] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2158'. [ 313.080152][T14472] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2158'. [ 313.109713][T14467] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 313.393223][T14476] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2161'. [ 313.393341][T14476] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2161'. [ 313.395458][T14476] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2161'. [ 313.395479][T14476] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2161'. [ 313.479708][T14479] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 313.508345][T14480] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2162'. [ 313.588501][T14470] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2159'. [ 313.588533][T14470] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2159'. [ 313.588552][T14470] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2159'. [ 313.799717][T14494] ip_tables: iptables: counters copy to user failed while replacing table [ 313.866025][T14494] syzkaller1: entered promiscuous mode [ 313.866084][T14494] syzkaller1: entered allmulticast mode [ 314.057762][T14497] tun0: tun_chr_ioctl cmd 1074025677 [ 314.057875][T14497] tun0: linktype set to 0 [ 314.260506][T14521] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 314.508203][T14549] netlink: 'syz.1.2175': attribute type 1 has an invalid length. [ 314.561913][T14546] bond6: (slave geneve4): making interface the new active one [ 314.563319][T14546] bond6: (slave geneve4): Enslaving as an active interface with an up link [ 314.568288][T14546] bond6: entered promiscuous mode [ 314.568309][T14546] geneve4: entered promiscuous mode [ 314.569727][T14546] 8021q: adding VLAN 0 to HW filter on device bond6 [ 314.623845][ T5758] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 314.735312][T14546] tipc: Resetting bearer [ 314.753635][ T5884] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 314.763652][T14530] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 314.782549][T14525] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 314.782604][T14525] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 314.782645][T14525] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 315.510289][T14597] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 315.537855][ T5879] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 315.610286][ T25] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 315.661068][T14611] openvswitch: netlink: Flow key attr not present in new flow. [ 315.671199][T14603] syzkaller0: entered promiscuous mode [ 315.671802][T14603] syzkaller0: entered allmulticast mode [ 315.801032][T14607] syzkaller0: entered promiscuous mode [ 315.801062][T14607] syzkaller0: entered allmulticast mode [ 315.822990][T14606] tipc: Enabled bearer , priority 0 [ 315.854825][T14620] xt_hashlimit: size too large, truncated to 1048576 [ 316.097897][T14604] tipc: Resetting bearer [ 316.429668][T14637] ipt_ECN: cannot use operation on non-tcp rule [ 316.561917][ C1] bridge0: port 3(dummy0) entered forwarding state [ 316.561946][ C1] bridge0: topology change detected, propagating [ 316.562260][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 316.562278][ C1] bridge0: topology change detected, propagating [ 316.653725][T14641] x_tables: duplicate entry at hook 4 [ 317.849397][T14649] netlink: 'syz.2.2195': attribute type 1 has an invalid length. [ 318.838583][T14604] tipc: Disabling bearer [ 318.849830][T14634] __nla_validate_parse: 5 callbacks suppressed [ 318.849852][T14634] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2192'. [ 319.645233][T14694] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 319.823600][T14708] netlink: 'syz.0.2206': attribute type 11 has an invalid length. [ 320.005555][T14715] openvswitch: netlink: Multiple metadata blocks provided [ 320.472169][T14729] netlink: 'syz.4.2212': attribute type 2 has an invalid length. [ 320.472195][T14729] netlink: 'syz.4.2212': attribute type 8 has an invalid length. [ 320.472211][T14729] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2212'. [ 320.905841][T14762] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 320.990736][T14759] bond17: Removing last ns target with arp_interval on [ 320.999972][T14765] syzkaller0: entered promiscuous mode [ 320.999997][T14765] syzkaller0: entered allmulticast mode [ 321.283691][T14781] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2222'. [ 321.483157][T14792] netlink: 'syz.0.2223': attribute type 1 has an invalid length. [ 321.483195][T14792] netlink: 'syz.0.2223': attribute type 8 has an invalid length. [ 321.505634][T14792] openvswitch: netlink: Message has 8 unknown bytes. [ 322.009810][T14814] batman_adv: batadv0: Adding interface: veth0 [ 322.009824][T14814] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 322.009965][T14814] batman_adv: batadv0: Interface activated: veth0 [ 322.135079][T14814] batman_adv: batadv0: Interface deactivated: veth0 [ 322.135105][T14814] batman_adv: batadv0: Removing interface: veth0 [ 322.287600][T14821] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 322.703867][T14842] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2234'. [ 322.732355][T14842] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2234'. [ 322.750645][T14845] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2234'. [ 322.760349][T14843] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2234'. [ 322.796989][T14846] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2235'. [ 322.961392][ C0] bridge0: port 2(veth0) entered learning state [ 323.118857][T14861] netlink: 'syz.4.2240': attribute type 11 has an invalid length. [ 323.138596][T14862] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2239'. [ 323.518401][T14874] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 323.672062][T14873] xt_hashlimit: size too large, truncated to 1048576 [ 324.456617][T14915] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2249'. [ 324.456641][T14915] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2249'. [ 324.533205][T14912] 8021q: adding VLAN 0 to HW filter on device bond5 [ 324.534145][T14911] bond5: option mode: unable to set because the bond device is up [ 324.641202][T14912] netlink: 'syz.2.2249': attribute type 2 has an invalid length. [ 324.641223][T14915] 8021q: adding VLAN 0 to HW filter on device bond0 [ 324.641229][T14912] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2249'. [ 324.713706][T14915] bond5: (slave bond0): Enslaving as an active interface with a down link [ 324.785401][T14911] bond5 (unregistering): (slave bond0): Releasing active interface [ 324.834102][T14911] bond5 (unregistering): Released all slaves [ 325.189797][T14939] syzkaller0: left promiscuous mode [ 325.189822][T14939] syzkaller0: left allmulticast mode [ 325.299614][T14947] netlink: 'syz.2.2255': attribute type 11 has an invalid length. [ 325.428247][T14955] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 325.612292][T14958] ipvlan2: entered allmulticast mode [ 325.612318][T14958] macvlan1: entered allmulticast mode [ 325.612333][T14958] veth1_vlan: entered allmulticast mode [ 325.645742][T14958] batman_adv: batadv0: Adding interface: ipvlan2 [ 325.645756][T14958] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 325.645780][T14958] batman_adv: batadv0: Interface activated: ipvlan2 [ 325.646551][T14963] bond1: option mode: unable to set because the bond device is up [ 325.711763][T14969] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2256'. [ 325.769224][T14963] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2260'. [ 325.769251][T14963] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2260'. [ 325.945306][T14969] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 325.945935][T14963] bond0: left promiscuous mode [ 325.975251][T14963] 8021q: adding VLAN 0 to HW filter on device bond0 [ 326.000608][T14963] bond1: (slave bond0): Enslaving as an active interface with a down link [ 326.039557][T14966] bond1 (unregistering): (slave bond0): Releasing active interface [ 326.060794][T14966] bond1 (unregistering): Released all slaves [ 326.485798][ T5879] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 326.679488][ T5879] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 326.721663][ T5879] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 326.851107][T15018] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2268'. [ 327.183844][T15028] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 327.202338][ T5884] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 327.540165][T15037] netlink: 'syz.4.2271': attribute type 1 has an invalid length. [ 327.547542][T15045] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2271'. [ 327.570101][T15040] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2273'. [ 327.634746][T15037] bond18: entered promiscuous mode [ 327.635398][T15037] 8021q: adding VLAN 0 to HW filter on device bond18 [ 327.689344][T15045] 8021q: adding VLAN 0 to HW filter on device bond18 [ 327.689807][T15045] bond18: (slave wireguard0): The slave device specified does not support setting the MAC address [ 327.689830][T15045] bond18: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 327.755345][T15045] bond18: (slave wireguard0): making interface the new active one [ 327.755371][T15045] wireguard0: entered promiscuous mode [ 327.758679][T15045] bond18: (slave wireguard0): Enslaving as an active interface with an up link [ 328.077654][T15066] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2277'. [ 328.469582][T15085] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 329.634129][T15143] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 329.682773][T15144] xt_CT: You must specify a L4 protocol and not use inversions on it [ 329.696090][T15144] xt_CT: You must specify a L4 protocol and not use inversions on it [ 329.719819][T15144] xt_CT: You must specify a L4 protocol and not use inversions on it [ 329.741221][T15144] xt_CT: You must specify a L4 protocol and not use inversions on it [ 329.775207][T15144] xt_CT: You must specify a L4 protocol and not use inversions on it [ 329.801874][T15143] __nla_validate_parse: 2 callbacks suppressed [ 329.801897][T15143] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2295'. [ 329.805131][T15144] xt_CT: You must specify a L4 protocol and not use inversions on it [ 329.836786][T15154] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 329.886555][T15144] xt_CT: You must specify a L4 protocol and not use inversions on it [ 329.927510][T15159] netlink: 'syz.3.2298': attribute type 1 has an invalid length. [ 329.970007][T15144] xt_CT: You must specify a L4 protocol and not use inversions on it [ 330.004018][T15144] xt_CT: You must specify a L4 protocol and not use inversions on it [ 330.086673][T15144] xt_CT: You must specify a L4 protocol and not use inversions on it [ 330.163294][T15159] bond9: entered promiscuous mode [ 330.164423][T15159] 8021q: adding VLAN 0 to HW filter on device bond9 [ 330.700103][T15185] syzkaller0: entered promiscuous mode [ 330.700129][T15185] syzkaller0: entered allmulticast mode [ 330.816990][T15190] Bluetooth: hci0: unsupported parameter 5135 [ 330.817018][T15190] Bluetooth: hci0: unsupported parameter 8192 [ 330.817033][T15190] Bluetooth: hci0: unsupported parameter 5135 [ 330.817047][T15190] Bluetooth: hci0: unsupported parameter 8192 [ 331.432524][T15213] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 332.117700][T15243] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2316'. [ 332.583427][T15257] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2318'. [ 332.860913][T15272] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 333.070282][T15278] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2323'. [ 333.070990][T15278] tipc: Resetting bearer [ 333.229159][T15278] tipc: Disabling bearer [ 333.291945][T14524] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 333.292099][T14524] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 333.292275][T14524] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 333.292351][T14524] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 333.440212][T15289] netlink: 'syz.4.2328': attribute type 6 has an invalid length. [ 333.462077][T15293] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2326'. [ 333.470156][T15289] netlink: 'syz.4.2328': attribute type 6 has an invalid length. [ 333.470826][T15289] netlink: 'syz.4.2328': attribute type 6 has an invalid length. [ 333.476345][T15289] netlink: 'syz.4.2328': attribute type 6 has an invalid length. [ 333.516829][T15289] netlink: 'syz.4.2328': attribute type 6 has an invalid length. [ 333.519048][T15289] netlink: 'syz.4.2328': attribute type 6 has an invalid length. [ 333.526217][T15289] netlink: 'syz.4.2328': attribute type 6 has an invalid length. [ 333.552277][T15289] netlink: 'syz.4.2328': attribute type 6 has an invalid length. [ 333.565454][T15289] netlink: 'syz.4.2328': attribute type 6 has an invalid length. [ 333.587907][T15289] netlink: 'syz.4.2328': attribute type 6 has an invalid length. [ 333.828504][T15309] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2332'. [ 334.346365][T15327] syzkaller0: entered promiscuous mode [ 334.346390][T15327] syzkaller0: entered allmulticast mode [ 334.500214][T15332] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2333'. [ 334.575690][T15339] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 334.593046][T15339] FAULT_INJECTION: forcing a failure. [ 334.593046][T15339] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 334.593084][T15339] CPU: 0 UID: 0 PID: 15339 Comm: syz.3.2335 Not tainted syzkaller #0 PREEMPT(full) [ 334.593109][T15339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 334.593124][T15339] Call Trace: [ 334.593132][T15339] [ 334.593142][T15339] dump_stack_lvl+0xe8/0x150 [ 334.593185][T15339] should_fail_ex+0x410/0x560 [ 334.593221][T15339] _copy_from_user+0x2d/0xb0 [ 334.593257][T15339] ___sys_sendmsg+0x1c6/0x360 [ 334.593287][T15339] ? __lock_acquire+0x747/0x2de0 [ 334.593316][T15339] ? __pfx____sys_sendmsg+0x10/0x10 [ 334.593386][T15339] ? __fget_files+0x2a/0x420 [ 334.593420][T15339] ? __fget_files+0x3a2/0x420 [ 334.593465][T15339] __x64_sys_sendmsg+0x1b1/0x290 [ 334.593499][T15339] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 334.593552][T15339] do_syscall_64+0x166/0x520 [ 334.593581][T15339] ? trace_irq_disable+0x3b/0x140 [ 334.593605][T15339] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.593628][T15339] ? clear_bhb_loop+0x70/0xc0 [ 334.593656][T15339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.593678][T15339] RIP: 0033:0x7fed7c79e559 [ 334.593699][T15339] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 334.593719][T15339] RSP: 002b:00007fed7d633028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 334.593744][T15339] RAX: ffffffffffffffda RBX: 00007fed7ca25fa0 RCX: 00007fed7c79e559 [ 334.593760][T15339] RDX: 0000000000044004 RSI: 0000200000000740 RDI: 0000000000000004 [ 334.593775][T15339] RBP: 00007fed7d633090 R08: 0000000000000000 R09: 0000000000000000 [ 334.593790][T15339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 334.593804][T15339] R13: 00007fed7ca26038 R14: 00007fed7ca25fa0 R15: 00007ffef2fc1a28 [ 334.593848][T15339] [ 335.426586][T15363] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2341'. [ 335.670895][T15376] bond10: (slave veth7): Enslaving as an active interface with a down link [ 335.693814][T15369] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2343'. [ 335.722952][T15386] netlink: 'syz.0.2345': attribute type 11 has an invalid length. [ 335.976274][T15366] bond10: (slave vlan5): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 336.327945][T15403] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 336.342550][T15403] FAULT_INJECTION: forcing a failure. [ 336.342550][T15403] name failslab, interval 1, probability 0, space 0, times 0 [ 336.342586][T15403] CPU: 0 UID: 0 PID: 15403 Comm: syz.1.2346 Not tainted syzkaller #0 PREEMPT(full) [ 336.342610][T15403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 336.342624][T15403] Call Trace: [ 336.342632][T15403] [ 336.342642][T15403] dump_stack_lvl+0xe8/0x150 [ 336.342681][T15403] should_fail_ex+0x410/0x560 [ 336.342730][T15403] should_failslab+0xa8/0x100 [ 336.342762][T15403] ? dst_alloc+0x105/0x170 [ 336.342784][T15403] kmem_cache_alloc_noprof+0xa1/0x600 [ 336.342812][T15403] ? dst_alloc+0x105/0x170 [ 336.342841][T15403] dst_alloc+0x105/0x170 [ 336.342868][T15403] xfrm_lookup_with_ifid+0x7c8/0x1e30 [ 336.342911][T15403] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 336.342944][T15403] ? txopt_get+0x343/0x3f0 [ 336.342967][T15403] ? __lock_acquire+0x747/0x2de0 [ 336.342992][T15403] ? __pfx_txopt_get+0x10/0x10 [ 336.343020][T15403] xfrm_lookup_route+0x3c/0x1c0 [ 336.343054][T15403] rawv6_sendmsg+0xdd0/0x18c0 [ 336.343092][T15403] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 336.343140][T15403] ? __lock_acquire+0x747/0x2de0 [ 336.343175][T15403] ? aa_sock_msg_perm+0xf5/0x210 [ 336.343207][T15403] ? sock_rps_record_flow+0x19/0x350 [ 336.343235][T15403] ? inet_sendmsg+0x298/0x320 [ 336.343260][T15403] ? apparmor_socket_sendmsg+0x98/0x360 [ 336.343293][T15403] ? __pfx_inet_sendmsg+0x10/0x10 [ 336.343319][T15403] sock_sendmsg_nosec+0x10f/0x190 [ 336.343346][T15403] ____sys_sendmsg+0x54e/0x850 [ 336.343384][T15403] ? __pfx_____sys_sendmsg+0x10/0x10 [ 336.343427][T15403] ? import_iovec+0x73/0xa0 [ 336.343465][T15403] ___sys_sendmsg+0x2a5/0x360 [ 336.343495][T15403] ? __lock_acquire+0x747/0x2de0 [ 336.343524][T15403] ? __pfx____sys_sendmsg+0x10/0x10 [ 336.343596][T15403] ? __fget_files+0x2a/0x420 [ 336.343630][T15403] ? __fget_files+0x3a2/0x420 [ 336.343676][T15403] __x64_sys_sendmsg+0x1b1/0x290 [ 336.343719][T15403] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 336.343773][T15403] do_syscall_64+0x166/0x520 [ 336.343804][T15403] ? trace_irq_disable+0x3b/0x140 [ 336.343828][T15403] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.343852][T15403] ? clear_bhb_loop+0x70/0xc0 [ 336.343880][T15403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.343902][T15403] RIP: 0033:0x7f0a0c59e559 [ 336.343923][T15403] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 336.343943][T15403] RSP: 002b:00007f0a0d4fe028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 336.343968][T15403] RAX: ffffffffffffffda RBX: 00007f0a0c825fa0 RCX: 00007f0a0c59e559 [ 336.343985][T15403] RDX: 0000000000044004 RSI: 0000200000000740 RDI: 0000000000000004 [ 336.344000][T15403] RBP: 00007f0a0d4fe090 R08: 0000000000000000 R09: 0000000000000000 [ 336.344015][T15403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 336.344028][T15403] R13: 00007f0a0c826038 R14: 00007f0a0c825fa0 R15: 00007ffd742f1b68 [ 336.344066][T15403] [ 336.867481][T15409] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2350'. [ 336.934052][T15419] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2350'. [ 337.441220][T15438] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2354'. [ 337.879992][T15453] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2359'. [ 337.914690][T15453] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2359'. [ 338.323005][ C0] bridge0: port 2(veth0) entered forwarding state [ 338.323033][ C0] bridge0: topology change detected, propagating [ 339.553489][T15497] macsec0: entered promiscuous mode [ 339.561125][T15497] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2368'. [ 339.582828][T15497] veth1_macvtap: left promiscuous mode [ 339.612712][T15499] netlink: 105 bytes leftover after parsing attributes in process `syz.2.2370'. [ 339.614903][T15497] macsec0 (unregistering): left promiscuous mode [ 339.872846][T15524] netlink: 34 bytes leftover after parsing attributes in process `syz.1.2374'. [ 340.208562][T15486] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 340.828082][T15563] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2380'. [ 340.923833][T15569] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2380'. [ 340.923871][T15569] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2380'. [ 340.975490][T15563] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2380'. [ 341.112013][T15567] macsec0: entered allmulticast mode [ 341.112064][T15567] ip6gretap0: entered allmulticast mode [ 341.112892][T15576] validate_nla: 25 callbacks suppressed [ 341.112909][T15576] netlink: 'syz.3.2382': attribute type 4 has an invalid length. [ 341.112926][T15576] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2382'. [ 341.113537][T15576] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 341.263112][T15583] netlink: 'syz.3.2384': attribute type 11 has an invalid length. [ 341.277405][T15584] netlink: 'syz.3.2384': attribute type 9 has an invalid length. [ 341.277432][T15584] netlink: 'syz.3.2384': attribute type 6 has an invalid length. [ 341.281119][T15582] sctp: [Deprecated]: syz.1.2383 (pid 15582) Use of int in maxseg socket option. [ 341.281119][T15582] Use struct sctp_assoc_value instead [ 341.449276][T15591] ip6gretap0: entered promiscuous mode [ 341.449522][T15591] vlan5: entered promiscuous mode [ 341.618802][T15597] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2388'. [ 342.171530][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 342.328370][T15614] syzkaller0: entered promiscuous mode [ 342.328399][T15614] syzkaller0: entered allmulticast mode [ 342.779322][T15644] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2399'. [ 342.803693][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 343.028108][T15661] netlink: 'syz.1.2402': attribute type 1 has an invalid length. [ 343.127576][T15669] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2404'. [ 343.300347][T15677] netlink: 'syz.2.2404': attribute type 10 has an invalid length. [ 343.300371][T15677] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2404'. [ 343.372152][T15678] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2404'. [ 345.555891][T15657] batman_adv: batadv0: Adding interface: gretap0 [ 345.555906][T15657] batman_adv: batadv0: The MTU of interface gretap0 is too small (1438) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 345.555929][T15657] batman_adv: batadv0: Interface activated: gretap0 [ 345.572608][T15661] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 345.603461][T15669] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 345.653752][T15670] veth9: entered allmulticast mode [ 345.697318][T15677] dummy0: entered promiscuous mode [ 345.822034][T15701] xt_l2tp: unknown flags: e7 [ 345.873749][T15701] tipc: Enabled bearer , priority 10 [ 346.199641][T15725] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2412'. [ 346.328708][T15732] netlink: 'syz.1.2416': attribute type 1 has an invalid length. [ 346.456475][T15732] bond8: entered promiscuous mode [ 346.457065][T15732] 8021q: adding VLAN 0 to HW filter on device bond8 [ 346.579301][T15732] 8021q: adding VLAN 0 to HW filter on device bond8 [ 346.579741][T15732] bond8: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 346.579765][T15732] bond8: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 346.636271][T15744] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2418'. [ 346.637644][T15732] bond8: (slave ip6gre1): making interface the new active one [ 346.637702][T15732] ip6gre1: entered promiscuous mode [ 346.669477][T15732] bond8: (slave ip6gre1): Enslaving as an active interface with an up link [ 346.707807][T15744] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 347.061007][T15763] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2422'. [ 347.085613][T15765] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2422'. [ 347.557672][T15785] netlink: 216 bytes leftover after parsing attributes in process `syz.2.2424'. [ 347.639754][T15794] x_tables: duplicate underflow at hook 2 [ 347.754088][T15801] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2431'. [ 348.042329][T15809] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 348.279464][T15823] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2434'. [ 348.296251][T15823] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2434'. [ 348.494544][T15829] bridge4: entered promiscuous mode [ 351.043013][T15872] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 351.118306][T15876] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2446'. [ 351.242942][T15884] netlink: 'syz.4.2449': attribute type 1 has an invalid length. [ 351.359916][T15884] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2449'. [ 351.360482][T15898] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2449'. [ 351.396768][T15881] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 351.417935][T15882] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check. [ 351.472925][T15885] bond19: (slave bridge7): Enslaving as a backup interface with an up link [ 351.537224][T15894] bond19: (slave bridge8): Enslaving as a backup interface with a down link [ 351.655146][T15884] macvlan3: entered promiscuous mode [ 351.655172][T15884] macvlan3: entered allmulticast mode [ 352.024436][T15938] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 352.662949][T15959] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2461'. [ 353.098363][T15981] 8021q: adding VLAN 0 to HW filter on device bond11 [ 353.307996][T15999] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2471'. [ 353.346783][T15999] netlink: 'syz.3.2471': attribute type 1 has an invalid length. [ 353.346809][T15999] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2471'. [ 353.750919][T16020] vlan3: entered promiscuous mode [ 353.750944][T16020] hsr0: entered promiscuous mode [ 353.751800][T16020] vlan3: entered allmulticast mode [ 353.751817][T16020] hsr0: entered allmulticast mode [ 353.751831][T16020] hsr_slave_0: entered allmulticast mode [ 353.751848][T16020] hsr_slave_1: entered allmulticast mode [ 353.763588][T16025] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2475'. [ 353.810922][T16025] hsr_slave_0: left promiscuous mode [ 353.825946][T16025] hsr_slave_1: left promiscuous mode [ 353.974960][T16025] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2475'. [ 353.980138][T16025] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2475'. [ 354.019472][T16025] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2475'. [ 354.019610][T16025] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2475'. [ 354.904840][T16094] ip_tables: iptables: counters copy to user failed while replacing table [ 354.957353][T16094] nft_compat: unsupported protocol 5 [ 355.285778][T16107] 8021q: adding VLAN 0 to HW filter on device bond14 [ 355.304421][T16097] netlink: 'syz.0.2488': attribute type 10 has an invalid length. [ 355.304607][T16097] dummy0: entered promiscuous mode [ 356.520272][T16162] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 356.870650][T16186] __nla_validate_parse: 45 callbacks suppressed [ 356.870746][T16186] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2500'. [ 356.959792][T16183] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2503'. [ 357.261590][T16192] syzkaller0: entered promiscuous mode [ 357.261615][T16192] syzkaller0: entered allmulticast mode [ 357.483221][T16189] syzkaller0: entered promiscuous mode [ 357.483251][T16189] syzkaller0: entered allmulticast mode [ 357.709670][T16230] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 360.607610][T16254] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2515'. [ 361.425938][T16290] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2525'. [ 361.458438][T16281] tc_dump_action: action bad kind [ 361.608673][T16306] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2528'. [ 361.717705][T16311] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 362.359107][T16303] bond4: (slave bridge0): Releasing backup interface [ 362.359135][T16303] bond4: (slave bridge0): the permanent HWaddr of slave - 62:35:37:fa:84:7f - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 362.359163][T16303] bridge0: left promiscuous mode [ 362.359404][T16303] bond4: (slave bridge2): making interface the new active one [ 362.359422][T16303] bridge2: entered promiscuous mode [ 362.409478][T16303] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 362.666149][T16325] Bluetooth: hci0: invalid length 0, exp 2 for type 21 [ 362.717496][T16322] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2531'. [ 362.717743][T16322] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2531'. [ 362.717962][T16322] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2531'. [ 362.718198][T16322] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2531'. [ 362.718408][T16322] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2531'. [ 362.718616][T16322] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2531'. [ 362.718839][T16322] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2531'. [ 362.743942][T16322] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2531'. [ 362.744586][T16322] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2531'. [ 362.759970][T16322] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2531'. [ 362.835098][T16337] netlink: 'syz.1.2535': attribute type 22 has an invalid length. [ 362.854138][T16337] netlink: 'syz.1.2535': attribute type 22 has an invalid length. [ 362.991816][ T1161] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 362.991882][ T1161] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 362.991945][ T1161] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 362.991980][ T1161] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 363.108443][T16347] ip6gre1: entered promiscuous mode [ 363.108469][T16347] ip6gre1: entered allmulticast mode [ 363.545798][T16373] dummy0: left allmulticast mode [ 363.546137][T16373] bridge0: port 3(dummy0) entered disabled state [ 363.579642][T16373] bridge_slave_1: left promiscuous mode [ 363.592719][T16373] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.647155][T16373] bridge_slave_0: left allmulticast mode [ 363.647185][T16373] bridge_slave_0: left promiscuous mode [ 363.647444][T16373] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.761631][T16389] netlink: 'syz.0.2544': attribute type 4 has an invalid length. [ 363.816708][T16385] netlink: 'syz.0.2544': attribute type 4 has an invalid length. [ 363.986871][T16392] bond21: entered promiscuous mode [ 364.199485][T16410] netlink: 'syz.1.2552': attribute type 2 has an invalid length. [ 364.450951][T16410] ´: entered promiscuous mode [ 364.573696][T16428] xt_ecn: cannot match TCP bits for non-tcp packets [ 364.932628][T16436] Bluetooth: hci2: Opcode 0x0401 failed: -22 [ 365.230538][T16451] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 365.260203][T16453] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 366.206919][T16487] xt_CT: No such helper "netbios-ns" [ 366.953658][T16531] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 367.291144][T16489] infiniband syz0: set down [ 367.296419][T16489] infiniband syz0: added bond0 [ 367.319537][T16489] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 367.366643][T16489] infiniband syz0: Couldn't open port 1 [ 367.409977][T16489] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 367.410046][T16489] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 367.410093][T16489] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 367.728533][T16489] RDS/IB: syz0: added [ 367.728595][T16489] smc: adding ib device syz0 with port count 1 [ 367.728616][T16489] smc: ib device syz0 port 1 has no pnetid [ 367.877155][T16556] syzkaller1: entered promiscuous mode [ 367.877182][T16556] syzkaller1: entered allmulticast mode [ 368.432273][T16579] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 368.479124][T16586] openvswitch: netlink: IP tunnel attribute has 6 unknown bytes. [ 368.479168][T16586] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 368.811121][T16594] __nla_validate_parse: 38 callbacks suppressed [ 368.811146][T16594] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2584'. [ 368.831087][T16580] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2581'. [ 369.069229][T16610] IPVS: set_ctl: invalid protocol: 43 255.255.255.255:20002 [ 369.740747][T16629] netlink: 'syz.3.2589': attribute type 1 has an invalid length. [ 371.071550][T16596] smbdirect: ib_dev[s`z1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 371.071592][T16596] smbdirect: ib_dev[s`z1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 371.071635][T16596] smbdirect: ib_dev[s`z1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 371.944066][T16689] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2598'. [ 372.138857][T16701] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2601'. [ 372.143570][T16699] netlink: 'syz.2.2602': attribute type 11 has an invalid length. [ 372.305012][T16714] Cannot find set identified by id 65534 to match [ 372.867750][T16733] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2606'. [ 372.882999][T16733] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2606'. [ 373.822517][T16759] nbd1: detected capacity change from 0 to 63 [ 373.822991][T16767] block nbd1: NBD_DISCONNECT [ 373.846244][T16767] block nbd1: Disconnected due to user request. [ 373.866345][T16767] block nbd1: shutting down sockets [ 373.894612][ T26] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 373.894780][ T26] Buffer I/O error on dev nbd1, logical block 0, async page read [ 373.894921][ T26] Buffer I/O error on dev nbd1, logical block 1, async page read [ 373.894941][ T26] Buffer I/O error on dev nbd1, logical block 2, async page read [ 373.894958][ T26] Buffer I/O error on dev nbd1, logical block 3, async page read [ 373.898909][ T26] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 373.898942][ T26] Buffer I/O error on dev nbd1, logical block 0, async page read [ 373.898961][ T26] Buffer I/O error on dev nbd1, logical block 1, async page read [ 373.898977][ T26] Buffer I/O error on dev nbd1, logical block 2, async page read [ 373.898993][ T26] Buffer I/O error on dev nbd1, logical block 3, async page read [ 373.899233][ T26] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 373.899261][ T26] Buffer I/O error on dev nbd1, logical block 0, async page read [ 373.899277][ T26] Buffer I/O error on dev nbd1, logical block 1, async page read [ 373.899440][ T26] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 373.900302][ T26] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 373.900639][ T26] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 373.900871][ T26] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 373.901083][ T26] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 373.901174][T16511] ldm_validate_partition_table(): Disk read failed. [ 373.902090][ T26] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 373.903977][ T26] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 373.907572][T16511] Dev nbd1: unable to read RDB block 0 [ 373.951840][T16511] nbd1: unable to read partition table [ 374.090740][T16787] Cannot find del_set index 0 as target [ 374.186128][T16511] ldm_validate_partition_table(): Disk read failed. [ 374.188399][T16511] Dev nbd1: unable to read RDB block 0 [ 374.196685][T16511] nbd1: unable to read partition table [ 374.229303][T16796] netlink: 'syz.3.2615': attribute type 11 has an invalid length. [ 374.232776][T16787] bond1: (slave ip6gretap1): Releasing active interface [ 374.308464][T16787] bond3: (slave geneve3): Releasing active interface [ 374.371120][T16787] bond4: (slave bridge2): Releasing backup interface [ 374.371150][T16787] bridge2: left promiscuous mode [ 374.581884][T14524] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 374.581947][T14524] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 374.581986][T14524] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 374.582054][T14524] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 374.589037][T16802] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2618'. [ 374.714988][T16802] xt_IDLETIMER: timeout value is zero [ 375.059968][T16511] udevd[16511]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 375.144780][T16827] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2622'. [ 375.543298][T16847] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2625'. [ 376.214781][T16867] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2627'. [ 376.929061][T16910] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 376.939658][T16905] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2635'. [ 376.939733][T16905] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2635'. [ 376.940642][T16905] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2635'. [ 376.940713][T16905] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2635'. [ 377.176583][T16916] netlink: 'syz.2.2642': attribute type 1 has an invalid length. [ 377.286564][T16932] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2645'. [ 377.313116][T16934] IPVS: set_ctl: invalid protocol: 51 255.255.255.255:20004 [ 377.314056][T16934] netlink: 'syz.0.2644': attribute type 1 has an invalid length. [ 377.345743][T16940] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2645'. [ 377.432869][T16934] 8021q: adding VLAN 0 to HW filter on device bond15 [ 377.512621][T16942] bond15: (slave gretap1): making interface the new active one [ 377.514714][T16942] bond15: (slave gretap1): Enslaving as an active interface with an up link [ 377.813781][T16933] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 377.878933][T16961] netlink: 'syz.3.2651': attribute type 11 has an invalid length. [ 377.989918][T16963] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 378.435145][T16976] ovs-system: entered promiscuous mode [ 378.642678][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 378.928029][T17002] netlink: 'syz.2.2661': attribute type 1 has an invalid length. [ 378.981974][T17005] netlink: 'syz.3.2660': attribute type 2 has an invalid length. [ 379.073006][T17018] netlink: 'syz.2.2661': attribute type 1 has an invalid length. [ 379.097285][T17008] IPVS: set_ctl: invalid protocol: 136 172.20.20.62:20000 [ 379.119373][T17015] netlink: 'syz.0.2663': attribute type 10 has an invalid length. [ 379.120092][T17002] 8021q: adding VLAN 0 to HW filter on device bond5 [ 379.212142][T17015] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 379.248323][T17015] team0: Port device netdevsim1 added [ 379.320634][T17015] netlink: 'syz.0.2663': attribute type 10 has an invalid length. [ 379.356725][T17015] team0: Port device netdevsim1 removed [ 379.390989][T17015] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 379.433504][T17015] : (slave netdevsim1): Enslaving as an active interface with an up link [ 379.802361][T17014] bond5 (unregistering): Released all slaves [ 380.146093][T17062] __nla_validate_parse: 4 callbacks suppressed [ 380.146116][T17062] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2671'. [ 380.225473][T17062] 8021q: adding VLAN 0 to HW filter on device bond5 [ 380.245287][T17065] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 380.262493][T17065] bond5: (slave batadv0): Enslaving as an active interface with an up link [ 380.275247][T17062] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2671'. [ 380.362545][T17070] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2672'. [ 380.364656][T17062] bond5 (unregistering): (slave batadv0): Releasing backup interface [ 380.396576][T17062] bond5 (unregistering): Released all slaves [ 380.430462][T17079] sctp: [Deprecated]: syz.0.2673 (pid 17079) Use of int in max_burst socket option deprecated. [ 380.430462][T17079] Use struct sctp_assoc_value instead [ 380.451166][T17080] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2672'. [ 380.832298][T17095] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 380.858756][T17092] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2675'. [ 380.859200][T17092] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2675'. [ 380.908555][T17092] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2675'. [ 380.937139][T17092] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2675'. [ 380.937641][T17092] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2675'. [ 380.938172][T17092] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2675'. [ 382.476749][T17169] syzkaller0: entered promiscuous mode [ 382.476776][T17169] syzkaller0: entered allmulticast mode [ 382.531098][T17169] syzkaller1: entered promiscuous mode [ 382.531124][T17169] syzkaller1: entered allmulticast mode [ 383.139081][T17187] geneve3: entered promiscuous mode [ 383.191991][T14520] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 48700 - 0 [ 383.192078][T14520] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 48700 - 0 [ 383.192119][T14520] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 48700 - 0 [ 383.192159][T14520] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 48700 - 0 [ 383.340208][T17202] xt_cgroup: invalid path, errno=-2 [ 383.353026][T17204] xt_cgroup: invalid path, errno=-2 [ 383.650252][T17227] veth6: entered allmulticast mode [ 383.765234][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 385.636539][T17241] ipvlan0: entered promiscuous mode [ 385.638432][T17241] team0: Device ipvlan0 is VLAN challenged and team device has VLAN set up [ 385.742068][T17281] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 385.881979][T17285] geneve4: entered allmulticast mode [ 386.098812][T17309] __nla_validate_parse: 99 callbacks suppressed [ 386.098837][T17309] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2711'. [ 386.158783][T17315] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2709'. [ 386.268084][T17317] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2709'. [ 386.525738][T17331] netlink: 'syz.2.2714': attribute type 1 has an invalid length. [ 386.527385][T17332] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2715'. [ 386.675843][T17338] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2716'. [ 386.828723][T17348] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2720'. [ 386.853940][T17332] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2715'. [ 386.933785][T17350] syzkaller0: entered promiscuous mode [ 386.933813][T17350] syzkaller0: entered allmulticast mode [ 386.944605][T17347] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2719'. [ 386.956827][T17347] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2719'. [ 388.025582][T17410] netlink: 'syz.1.2733': attribute type 11 has an invalid length. [ 388.145407][T17415] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2735'. [ 388.251989][T17422] netlink: 'syz.4.2737': attribute type 2 has an invalid length. [ 388.252043][T17422] nbd: illegal input index -2130444284 [ 388.254384][T17420] x_tables: unsorted underflow at hook 2 [ 388.260741][T17420] openvswitch: netlink: Unexpected mask (mask=100000090, allowed=100010058) [ 388.447449][T17430] x_tables: unsorted underflow at hook 4 [ 388.468389][T17430] x_tables: unsorted underflow at hook 4 [ 388.838660][T17454] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 389.327362][T17471] pimreg9: entered allmulticast mode [ 389.338356][T17471] netlink: 'syz.2.2747': attribute type 3 has an invalid length. [ 389.774060][T17490] syzkaller0: entered promiscuous mode [ 389.774085][T17490] syzkaller0: entered allmulticast mode [ 390.311673][T17513] SET target dimension over the limit! [ 390.480217][T17521] netlink: 'syz.4.2756': attribute type 1 has an invalid length. [ 390.682514][T17521] bond23: entered promiscuous mode [ 390.683022][T17521] 8021q: adding VLAN 0 to HW filter on device bond23 [ 390.700198][ T32] audit: type=1800 audit(1792177172.244:13): pid=17532 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2757" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2827 res=0 errno=0 [ 390.868840][T17527] 8021q: adding VLAN 0 to HW filter on device bond23 [ 390.869907][T17527] bond23: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 390.869931][T17527] bond23: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 390.934940][T17527] bond23: (slave ip6gre1): making interface the new active one [ 390.934966][T17527] ip6gre1: entered promiscuous mode [ 390.975947][T17527] bond23: (slave ip6gre1): Enslaving as an active interface with an up link [ 391.537716][T17554] macsec1: entered promiscuous mode [ 392.115535][T17583] netlink: 'syz.0.2766': attribute type 11 has an invalid length. [ 392.664404][T17608] netlink: 'syz.0.2770': attribute type 1 has an invalid length. [ 392.720187][T17612] __nla_validate_parse: 10 callbacks suppressed [ 392.720213][T17612] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2770'. [ 392.760303][T17608] 8021q: adding VLAN 0 to HW filter on device bond16 [ 392.782955][T17608] dummy0: left promiscuous mode [ 392.850999][T17608] bond16: (slave dummy0): Enslaving as a backup interface with an up link [ 392.869282][ T1161] bond16: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 393.064437][ T544] bond16: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 393.096417][T17612] netlink: 'syz.0.2770': attribute type 10 has an invalid length. [ 393.096447][T17612] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2770'. [ 393.200502][T17612] dummy0: entered promiscuous mode [ 393.222513][T17612] bond16: (slave dummy0): Removing an active aggregator [ 393.249381][T17612] bond16: (slave dummy0): Releasing backup interface [ 393.484286][T17634] netlink: 'syz.1.2774': attribute type 1 has an invalid length. [ 393.616582][T17640] 8021q: adding VLAN 0 to HW filter on device bond10 [ 393.636348][T17640] bond9: (slave bond10): making interface the new active one [ 393.638551][T17640] bond9: (slave bond10): Enslaving as an active interface with an up link [ 393.679635][T17646] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2776'. [ 393.679759][T17646] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2776'. [ 393.724870][T17634] bond9: (slave gretap1): Enslaving as a backup interface with an up link [ 394.148831][T17660] netlink: 'syz.2.2780': attribute type 219 has an invalid length. [ 394.767778][T17683] netlink: 'syz.3.2784': attribute type 3 has an invalid length. [ 395.037624][T17693] netlink: 124 bytes leftover after parsing attributes in process `syz.1.2786'. [ 395.037654][T17693] netlink: 124 bytes leftover after parsing attributes in process `syz.1.2786'. [ 395.287462][T17706] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2789'. [ 395.287493][T17706] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2789'. [ 395.418066][T17707] tipc: Enabled bearer , priority 0 [ 395.418858][T17705] syzkaller0: entered promiscuous mode [ 395.418878][T17705] syzkaller0: entered allmulticast mode [ 395.557083][T17706] tipc: Resetting bearer [ 395.578325][T17701] tipc: Resetting bearer [ 395.669945][T17701] tipc: Disabling bearer [ 395.926679][T17725] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2793'. [ 395.927136][T17725] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2793'. [ 396.077101][T17726] batman_adv: batadv0: Adding interface: syzkaller0 [ 396.077127][T17726] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 396.077162][T17726] batman_adv: batadv0: Interface activated: syzkaller0 [ 396.153626][T17723] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 396.269019][T17723] batman_adv: batadv0: Removing interface: syzkaller0 [ 396.888330][T17757] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 397.220007][T17775] openvswitch: ovs-dp0: Dropping previously announced user features [ 397.237154][T17775] netlink: 'syz.1.2804': attribute type 11 has an invalid length. [ 397.546867][T17788] x_tables: duplicate underflow at hook 1 [ 397.575589][T17788] netlink: 'syz.3.2809': attribute type 39 has an invalid length. [ 397.868022][T17798] syzkaller1: entered promiscuous mode [ 397.868047][T17798] syzkaller1: entered allmulticast mode [ 397.894309][T17798] 8021q: VLANs not supported on ip6_vti0 [ 397.985266][T17806] openvswitch: netlink: Unexpected mask (mask=40010, allowed=10058) [ 398.521094][T17804] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 398.521139][T17804] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 60387 - 0 [ 398.629661][T17817] __nla_validate_parse: 2 callbacks suppressed [ 398.629686][T17817] netlink: 292 bytes leftover after parsing attributes in process `syz.3.2817'. [ 398.665975][T17818] netlink: 292 bytes leftover after parsing attributes in process `syz.3.2817'. [ 398.667813][T17816] tipc: Enabling of bearer rejected, failed to enable media [ 398.902809][T17804] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 398.902853][T17804] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 60387 - 0 [ 399.025219][T17804] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 399.025265][T17804] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 60387 - 0 [ 399.225487][T17851] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2823'. [ 399.243327][T17804] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 399.243363][T17804] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 60387 - 0 [ 399.303538][T17854] nbd: socks must be embedded in a SOCK_ITEM attr [ 399.324947][T17804] [ 399.327354][T17804] ====================================================== [ 399.334417][T17804] WARNING: possible circular locking dependency detected [ 399.342054][T17804] syzkaller #0 Not tainted [ 399.346581][T17804] ------------------------------------------------------ [ 399.353673][T17804] syz.2.2812/17804 is trying to acquire lock: [ 399.359753][T17804] ffff88801d2d4aa0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove+0x35/0x80 [ 399.369907][T17804] [ 399.369907][T17804] but task is already holding lock: [ 399.377301][T17804] ffffffff908044c0 (gdp_mutex){+.+.}-{4:4}, at: cleanup_glue_dir+0xc3/0x220 [ 399.386159][T17804] [ 399.386159][T17804] which lock already depends on the new lock. [ 399.386159][T17804] [ 399.397230][T17804] [ 399.397230][T17804] the existing dependency chain (in reverse order) is: [ 399.406265][T17804] [ 399.406265][T17804] -> #11 (gdp_mutex){+.+.}-{4:4}: [ 399.413603][T17804] __mutex_lock+0x19d/0x1550 [ 399.418835][T17804] get_device_parent+0x16f/0x3a0 [ 399.424324][T17804] device_add+0x2d4/0xb80 [ 399.429208][T17804] device_create+0x269/0x300 [ 399.434352][T17804] msr_device_create+0x33/0x50 [ 399.439699][T17804] cpuhp_invoke_callback+0x434/0x810 [ 399.446183][T17804] cpuhp_thread_fun+0x362/0x780 [ 399.451621][T17804] smpboot_thread_fn+0x565/0xa70 [ 399.457615][T17804] kthread+0x38b/0x480 [ 399.462355][T17804] ret_from_fork+0x514/0xb70 [ 399.467682][T17804] ret_from_fork_asm+0x1a/0x30 [ 399.473202][T17804] [ 399.473202][T17804] -> #10 (cpuhp_state-up){+.+.}-{0:0}: [ 399.481016][T17804] cpuhp_thread_fun+0x127/0x780 [ 399.486464][T17804] smpboot_thread_fn+0x565/0xa70 [ 399.492274][T17804] kthread+0x38b/0x480 [ 399.496946][T17804] ret_from_fork+0x514/0xb70 [ 399.502135][T17804] ret_from_fork_asm+0x1a/0x30 [ 399.507487][T17804] [ 399.507487][T17804] -> #9 (cpu_hotplug_lock){++++}-{0:0}: [ 399.515267][T17804] cpus_read_lock+0x42/0x160 [ 399.520538][T17804] static_key_slow_inc+0x12/0x30 [ 399.526098][T17804] ipv6_flowlabel_opt+0x1cb1/0x2b10 [ 399.531978][T17804] do_ipv6_setsockopt+0x9cb/0x2960 [ 399.537703][T17804] ipv6_setsockopt+0x59/0x170 [ 399.543106][T17804] do_sock_setsockopt+0x17c/0x1b0 [ 399.548797][T17804] __x64_sys_setsockopt+0x13d/0x1b0 [ 399.554644][T17804] do_syscall_64+0x166/0x520 [ 399.559852][T17804] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.566417][T17804] [ 399.566417][T17804] -> #8 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 399.574201][T17804] lock_sock_nested+0x41/0x100 [ 399.579614][T17804] inet_shutdown+0x6a/0x390 [ 399.584742][T17804] nbd_mark_nsock_dead+0x2cb/0x550 [ 399.590515][T17804] sock_shutdown+0x15e/0x260 [ 399.595674][T17804] nbd_clear_sock+0x24/0x170 [ 399.601027][T17804] nbd_config_put+0x477/0x7e0 [ 399.606268][T17804] nbd_genl_connect+0x19b8/0x1cd0 [ 399.611946][T17804] genl_family_rcv_msg_doit+0x233/0x340 [ 399.618142][T17804] genl_rcv_msg+0x614/0x7a0 [ 399.623285][T17804] netlink_rcv_skb+0x226/0x4a0 [ 399.628715][T17804] genl_rcv+0x28/0x40 [ 399.633246][T17804] netlink_unicast+0x8ef/0xa80 [ 399.638726][T17804] netlink_sendmsg+0x813/0xb40 [ 399.644135][T17804] sock_sendmsg_nosec+0x14e/0x190 [ 399.649701][T17804] ____sys_sendmsg+0x54e/0x850 [ 399.655037][T17804] ___sys_sendmsg+0x2a5/0x360 [ 399.660264][T17804] __x64_sys_sendmsg+0x1b1/0x290 [ 399.665769][T17804] do_syscall_64+0x166/0x520 [ 399.670918][T17804] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.677785][T17804] [ 399.677785][T17804] -> #7 (&nsock->tx_lock){+.+.}-{4:4}: [ 399.687105][T17804] __mutex_lock+0x19d/0x1550 [ 399.692340][T17804] nbd_queue_rq+0x373/0xff0 [ 399.697393][T17804] blk_mq_dispatch_rq_list+0x499/0x1990 [ 399.703611][T17804] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 399.710601][T17804] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 399.717132][T17804] blk_mq_run_work_fn+0x16c/0x300 [ 399.722812][T17804] process_scheduled_works+0xc3d/0x1630 [ 399.728911][T17804] worker_thread+0xa47/0xfb0 [ 399.734065][T17804] kthread+0x38b/0x480 [ 399.738679][T17804] ret_from_fork+0x514/0xb70 [ 399.743823][T17804] ret_from_fork_asm+0x1a/0x30 [ 399.749138][T17804] [ 399.749138][T17804] -> #6 (&cmd->lock){+.+.}-{4:4}: [ 399.756447][T17804] __mutex_lock+0x19d/0x1550 [ 399.761611][T17804] nbd_queue_rq+0xc1/0xff0 [ 399.766590][T17804] blk_mq_dispatch_rq_list+0x499/0x1990 [ 399.772717][T17804] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 399.779604][T17804] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 399.786312][T17804] blk_mq_run_work_fn+0x16c/0x300 [ 399.791894][T17804] process_scheduled_works+0xc3d/0x1630 [ 399.797990][T17804] worker_thread+0xa47/0xfb0 [ 399.803132][T17804] kthread+0x38b/0x480 [ 399.807836][T17804] ret_from_fork+0x514/0xb70 [ 399.812976][T17804] ret_from_fork_asm+0x1a/0x30 [ 399.818289][T17804] [ 399.818289][T17804] -> #5 (set->srcu){.+.+}-{0:0}: [ 399.825440][T17804] __synchronize_srcu+0xc9/0x2f0 [ 399.830947][T17804] elevator_switch+0x1e8/0x7b0 [ 399.836328][T17804] elevator_change+0x2fa/0x480 [ 399.841633][T17804] elevator_set_default+0x375/0x440 [ 399.847369][T17804] blk_register_queue+0x3f3/0x4e0 [ 399.852990][T17804] __add_disk+0x6b8/0xdb0 [ 399.857865][T17804] add_disk_fwnode+0x100/0x3a0 [ 399.863272][T17804] nbd_dev_add+0x733/0xb60 [ 399.868242][T17804] nbd_init+0x168/0x1f0 [ 399.873120][T17804] do_one_initcall+0x250/0x870 [ 399.878455][T17804] do_initcall_level+0x10a/0x1a0 [ 399.883970][T17804] do_initcalls+0x59/0xa0 [ 399.888936][T17804] kernel_init_freeable+0x29d/0x3e0 [ 399.894679][T17804] kernel_init+0x22/0x1d0 [ 399.899542][T17804] ret_from_fork+0x514/0xb70 [ 399.904678][T17804] ret_from_fork_asm+0x1a/0x30 [ 399.909993][T17804] [ 399.909993][T17804] -> #4 (&q->elevator_lock){+.+.}-{4:4}: [ 399.917835][T17804] __mutex_lock+0x19d/0x1550 [ 399.922977][T17804] elevator_change+0x1af/0x480 [ 399.928291][T17804] elevator_set_none+0xb5/0x140 [ 399.933696][T17804] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 399.940048][T17804] nbd_start_device+0x189/0xb30 [ 399.945449][T17804] nbd_genl_connect+0x167d/0x1cd0 [ 399.951204][T17804] genl_family_rcv_msg_doit+0x233/0x340 [ 399.957785][T17804] genl_rcv_msg+0x614/0x7a0 [ 399.962932][T17804] netlink_rcv_skb+0x226/0x4a0 [ 399.968364][T17804] genl_rcv+0x28/0x40 [ 399.972889][T17804] netlink_unicast+0x8ef/0xa80 [ 399.978309][T17804] netlink_sendmsg+0x813/0xb40 [ 399.983616][T17804] sock_sendmsg_nosec+0x14e/0x190 [ 399.989201][T17804] ____sys_sendmsg+0x54e/0x850 [ 399.994530][T17804] ___sys_sendmsg+0x2a5/0x360 [ 399.999758][T17804] __x64_sys_sendmsg+0x1b1/0x290 [ 400.005239][T17804] do_syscall_64+0x166/0x520 [ 400.010386][T17804] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.016913][T17804] [ 400.016913][T17804] -> #3 (&q->q_usage_counter(io)#51){++++}-{0:0}: [ 400.025575][T17804] blk_alloc_queue+0x544/0x690 [ 400.030900][T17804] __blk_mq_alloc_disk+0x194/0x390 [ 400.036559][T17804] nbd_dev_add+0x494/0xb60 [ 400.041523][T17804] nbd_init+0x168/0x1f0 [ 400.046321][T17804] do_one_initcall+0x250/0x870 [ 400.051659][T17804] do_initcall_level+0x10a/0x1a0 [ 400.057147][T17804] do_initcalls+0x59/0xa0 [ 400.062027][T17804] kernel_init_freeable+0x29d/0x3e0 [ 400.068031][T17804] kernel_init+0x22/0x1d0 [ 400.073000][T17804] ret_from_fork+0x514/0xb70 [ 400.078160][T17804] ret_from_fork_asm+0x1a/0x30 [ 400.083500][T17804] [ 400.083500][T17804] -> #2 (fs_reclaim){+.+.}-{0:0}: [ 400.091016][T17804] fs_reclaim_acquire+0x71/0x100 [ 400.096539][T17804] kmem_cache_alloc_lru_noprof+0x65/0x5f0 [ 400.102859][T17804] alloc_inode+0xb8/0x1b0 [ 400.107785][T17804] iget_locked+0x131/0x6a0 [ 400.112754][T17804] kernfs_get_inode+0x4f/0x770 [ 400.118076][T17804] kernfs_get_tree+0x5cd/0x980 [ 400.123410][T17804] vfs_get_tree+0x92/0x2a0 [ 400.128411][T17804] do_new_mount+0x325/0xb00 [ 400.133652][T17804] __se_sys_mount+0x31d/0x420 [ 400.138896][T17804] do_syscall_64+0x166/0x520 [ 400.144040][T17804] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.150496][T17804] [ 400.150496][T17804] -> #1 (&root->kernfs_rwsem){++++}-{4:4}: [ 400.158555][T17804] down_write+0x96/0x200 [ 400.163369][T17804] kernfs_remove_by_name_ns+0x4e/0x140 [ 400.169378][T17804] device_links_driver_bound+0x4ab/0x1440 [ 400.175635][T17804] driver_bound+0xd8/0x2e0 [ 400.180662][T17804] really_probe+0x774/0xae0 [ 400.185706][T17804] __driver_probe_device+0x1e8/0x360 [ 400.191533][T17804] driver_probe_device+0x4f/0x240 [ 400.197102][T17804] __device_attach_driver+0x270/0x410 [ 400.203019][T17804] bus_for_each_drv+0x258/0x2f0 [ 400.208409][T17804] __device_attach+0x2c4/0x450 [ 400.213714][T17804] device_initial_probe+0xa1/0xd0 [ 400.219312][T17804] bus_probe_device+0x12a/0x220 [ 400.224705][T17804] device_add+0x7d7/0xb80 [ 400.229574][T17804] faux_device_create_with_groups+0x1a5/0x2b0 [ 400.236250][T17804] regulator_dummy_init+0x19/0x40 [ 400.241870][T17804] regulator_init+0xca/0x110 [ 400.247087][T17804] do_one_initcall+0x250/0x870 [ 400.252408][T17804] do_initcall_level+0x10a/0x1a0 [ 400.257909][T17804] do_initcalls+0x59/0xa0 [ 400.263048][T17804] kernel_init_freeable+0x29d/0x3e0 [ 400.268882][T17804] kernel_init+0x22/0x1d0 [ 400.273837][T17804] ret_from_fork+0x514/0xb70 [ 400.279243][T17804] ret_from_fork_asm+0x1a/0x30 [ 400.284575][T17804] [ 400.284575][T17804] -> #0 (&root->kernfs_supers_rwsem){++++}-{4:4}: [ 400.293198][T17804] __lock_acquire+0x164c/0x2de0 [ 400.298795][T17804] lock_acquire+0x115/0x350 [ 400.303923][T17804] down_read+0x4a/0x330 [ 400.308628][T17804] kernfs_remove+0x35/0x80 [ 400.313585][T17804] __kobject_del+0xe0/0x310 [ 400.318814][T17804] kobject_del+0x45/0x60 [ 400.323695][T17804] cleanup_glue_dir+0x1a3/0x220 [ 400.329100][T17804] device_del+0x77d/0x8f0 [ 400.333990][T17804] unregister_netdevice_many_notify+0x181f/0x1d80 [ 400.341016][T17804] unregister_netdevice_queue+0x2f5/0x340 [ 400.347507][T17804] nsim_destroy+0x275/0x800 [ 400.352663][T17804] __nsim_dev_port_del+0x14e/0x200 [ 400.358420][T17804] nsim_dev_reload_destroy+0x288/0x490 [ 400.364429][T17804] nsim_dev_reload_down+0x8a/0xc0 [ 400.369994][T17804] devlink_reload+0x1ed/0x7f0 [ 400.375540][T17804] devlink_nl_reload_doit+0xa96/0xc80 [ 400.381455][T17804] genl_family_rcv_msg_doit+0x233/0x340 [ 400.387542][T17804] genl_rcv_msg+0x614/0x7a0 [ 400.392583][T17804] netlink_rcv_skb+0x226/0x4a0 [ 400.397885][T17804] genl_rcv+0x28/0x40 [ 400.402431][T17804] netlink_unicast+0x8ef/0xa80 [ 400.407750][T17804] netlink_sendmsg+0x813/0xb40 [ 400.413052][T17804] sock_sendmsg_nosec+0x14e/0x190 [ 400.418644][T17804] ____sys_sendmsg+0x54e/0x850 [ 400.424045][T17804] ___sys_sendmsg+0x2a5/0x360 [ 400.429350][T17804] __x64_sys_sendmsg+0x1b1/0x290 [ 400.434961][T17804] do_syscall_64+0x166/0x520 [ 400.440133][T17804] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.446670][T17804] [ 400.446670][T17804] other info that might help us debug this: [ 400.446670][T17804] [ 400.456967][T17804] Chain exists of: [ 400.456967][T17804] &root->kernfs_supers_rwsem --> cpuhp_state-up --> gdp_mutex [ 400.456967][T17804] [ 400.472243][T17804] Possible unsafe locking scenario: [ 400.472243][T17804] [ 400.479847][T17804] CPU0 CPU1 [ 400.485851][T17804] ---- ---- [ 400.491237][T17804] lock(gdp_mutex); [ 400.495172][T17804] lock(cpuhp_state-up); [ 400.502251][T17804] lock(gdp_mutex); [ 400.509660][T17804] rlock(&root->kernfs_supers_rwsem); [ 400.515243][T17804] [ 400.515243][T17804] *** DEADLOCK *** [ 400.515243][T17804] [ 400.523570][T17804] locks held by syz.2.2812/17804: 5, last CPU#1: [ 400.530012][T17804] #0: ffffffff912bf6e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 400.538311][T17804] #1: ffff88807b4bd128 (&dev->mutex){....}-{4:4}, at: devlink_get_from_attrs_lock+0x34a/0x490 [ 400.548864][T17804] #2: ffff88802b542258 (&devlink->lock_key#4){+.+.}-{4:4}, at: devlink_get_from_attrs_lock+0x360/0x490 [ 400.560065][T17804] #3: ffffffff9125b7e0 (rtnl_mutex){+.+.}-{4:4}, at: nsim_destroy+0x173/0x800 [ 400.569274][T17804] #4: ffffffff908044c0 (gdp_mutex){+.+.}-{4:4}, at: cleanup_glue_dir+0xc3/0x220 [ 400.582246][T17804] [ 400.582246][T17804] stack backtrace: [ 400.588330][T17804] CPU: 1 UID: 0 PID: 17804 Comm: syz.2.2812 Not tainted syzkaller #0 PREEMPT(full) [ 400.597998][T17804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 400.608275][T17804] Call Trace: [ 400.611594][T17804] [ 400.614640][T17804] dump_stack_lvl+0xe8/0x150 [ 400.619503][T17804] print_circular_bug+0x2e2/0x300 [ 400.625014][T17804] check_noncircular+0x12f/0x150 [ 400.629981][T17804] __lock_acquire+0x164c/0x2de0 [ 400.634952][T17804] lock_acquire+0x115/0x350 [ 400.639571][T17804] ? kernfs_remove+0x35/0x80 [ 400.644247][T17804] down_read+0x4a/0x330 [ 400.648529][T17804] ? kernfs_remove+0x35/0x80 [ 400.653139][T17804] kernfs_remove+0x35/0x80 [ 400.657578][T17804] __kobject_del+0xe0/0x310 [ 400.662107][T17804] kobject_del+0x45/0x60 [ 400.666407][T17804] cleanup_glue_dir+0x1a3/0x220 [ 400.671293][T17804] device_del+0x77d/0x8f0 [ 400.675664][T17804] ? __pfx_device_del+0x10/0x10 [ 400.680540][T17804] ? pm_runtime_set_memalloc_noio+0x1e7/0x260 [ 400.686685][T17804] ? netdev_unregister_kobject+0x347/0x450 [ 400.692666][T17804] unregister_netdevice_many_notify+0x181f/0x1d80 [ 400.699112][T17804] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 400.706179][T17804] ? __mutex_lock+0x30b/0x1550 [ 400.710978][T17804] ? lock_acquire+0x115/0x350 [ 400.715694][T17804] ? __kfree_rcu_sheaf+0x21/0x690 [ 400.720759][T17804] unregister_netdevice_queue+0x2f5/0x340 [ 400.726507][T17804] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 400.732804][T17804] ? mutex_destroy+0x39/0xf0 [ 400.737519][T17804] nsim_destroy+0x275/0x800 [ 400.742050][T17804] __nsim_dev_port_del+0x14e/0x200 [ 400.747196][T17804] nsim_dev_reload_destroy+0x288/0x490 [ 400.752700][T17804] nsim_dev_reload_down+0x8a/0xc0 [ 400.757750][T17804] devlink_reload+0x1ed/0x7f0 [ 400.762540][T17804] ? __pfx_devlink_reload+0x10/0x10 [ 400.767776][T17804] ? devlink_resources_validate+0xa7/0xd0 [ 400.773570][T17804] ? devlink_resources_validate+0xa7/0xd0 [ 400.779505][T17804] devlink_nl_reload_doit+0xa96/0xc80 [ 400.785086][T17804] ? __pfx_devlink_nl_reload_doit+0x10/0x10 [ 400.791024][T17804] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 400.797389][T17804] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 400.803753][T17804] genl_family_rcv_msg_doit+0x233/0x340 [ 400.809332][T17804] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 400.815425][T17804] ? bpf_lsm_capable+0x9/0x20 [ 400.820145][T17804] ? security_capable+0x7e/0x2c0 [ 400.825198][T17804] genl_rcv_msg+0x614/0x7a0 [ 400.829738][T17804] ? __pfx_genl_rcv_msg+0x10/0x10 [ 400.834812][T17804] ? __pfx_devlink_nl_pre_doit_dev_lock+0x10/0x10 [ 400.841274][T17804] ? __pfx_devlink_nl_reload_doit+0x10/0x10 [ 400.847286][T17804] ? __pfx_devlink_nl_post_doit_dev_lock+0x10/0x10 [ 400.853827][T17804] netlink_rcv_skb+0x226/0x4a0 [ 400.858615][T17804] ? __pfx_genl_rcv_msg+0x10/0x10 [ 400.863748][T17804] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 400.869062][T17804] ? down_read+0x2be/0x330 [ 400.873555][T17804] genl_rcv+0x28/0x40 [ 400.877566][T17804] netlink_unicast+0x8ef/0xa80 [ 400.882390][T17804] netlink_sendmsg+0x813/0xb40 [ 400.887269][T17804] ? __pfx_netlink_sendmsg+0x10/0x10 [ 400.892579][T17804] ? apparmor_socket_sendmsg+0x18b/0x360 [ 400.898330][T17804] ? __pfx_netlink_sendmsg+0x10/0x10 [ 400.903636][T17804] sock_sendmsg_nosec+0x14e/0x190 [ 400.908856][T17804] ____sys_sendmsg+0x54e/0x850 [ 400.913908][T17804] ? __pfx_____sys_sendmsg+0x10/0x10 [ 400.919250][T17804] ? import_iovec+0x73/0xa0 [ 400.923879][T17804] ___sys_sendmsg+0x2a5/0x360 [ 400.928615][T17804] ? __lock_acquire+0x747/0x2de0 [ 400.933599][T17804] ? __pfx____sys_sendmsg+0x10/0x10 [ 400.938837][T17804] ? futex_wait+0x2a2/0x390 [ 400.943501][T17804] ? __fget_files+0x2a/0x420 [ 400.948134][T17804] ? __fget_files+0x3a2/0x420 [ 400.952850][T17804] __x64_sys_sendmsg+0x1b1/0x290 [ 400.957832][T17804] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 400.963342][T17804] do_syscall_64+0x166/0x520 [ 400.967968][T17804] ? trace_irq_disable+0x3b/0x140 [ 400.973047][T17804] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.979234][T17804] ? clear_bhb_loop+0x70/0xc0 [ 400.984035][T17804] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.989963][T17804] RIP: 0033:0x7f86a8b9e559 [ 400.994501][T17804] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 401.014921][T17804] RSP: 002b:00007f86a9a52028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 401.023518][T17804] RAX: ffffffffffffffda RBX: 00007f86a8e26090 RCX: 00007f86a8b9e559 [ 401.031519][T17804] RDX: 0000000024004804 RSI: 0000200000000980 RDI: 0000000000000003 [ 401.039525][T17804] RBP: 00007f86a8c358b0 R08: 0000000000000000 R09: 0000000000000000 [ 401.047538][T17804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 401.055586][T17804] R13: 00007f86a8e26128 R14: 00007f86a8e26090 R15: 00007ffdf0f05828 [ 401.063684][T17804] [ 401.085732][T17850] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2822'. [ 401.087625][T17854] block nbd1: shutting down sockets [ 401.231848][ T544] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 401.231888][ T544] netdevsim netdevsim2 eth1: set [0, 1] type 1 family 0 port 60387 - 0 [ 401.241621][ T544] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 401.241658][ T544] netdevsim netdevsim2 eth0: set [0, 1] type 1 family 0 port 60387 - 0 [ 401.241694][ T544] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 401.241721][ T544] netdevsim netdevsim2 eth2: set [0, 1] type 1 family 0 port 60387 - 0 [ 401.259986][ T544] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 401.261270][ T544] netdevsim netdevsim2 eth3: set [0, 1] type 1 family 0 port 60387 - 0