last executing test programs: 15m35.562892779s ago: executing program 4 (id=815): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180200000100020000000000fdffffff85000000b5000000850000008800000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x61, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) close(0xffffffffffffffff) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180200000004000000000000000000008500000036000000850000000700000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r7, r6, 0x25, 0x0, @val=@tracing}, 0x40) r8 = gettid() sendmsg$nl_route(r0, &(0x7f0000000580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)=@bridge_dellink={0x134, 0x11, 0x200, 0x70bd28, 0x25dfdbff, {0x7, 0x0, 0x0, 0x0, 0x800, 0x31061}, [@IFLA_LINK={0x8, 0x5, r6}, @IFLA_PROP_LIST={0xb8, 0x34, 0x0, 0x1, [{0x14, 0x35, 'geneve1\x00'}, {0x14, 0x35, 'bridge0\x00'}, {0x14, 0x35, 'batadv_slave_1\x00'}, {0x14, 0x35, 'veth1_to_bridge\x00'}, {0x14, 0x35, 'veth0\x00'}, {0x14, 0x35, 'nr0\x00'}, {0x14, 0x35, 'vlan1\x00'}, {0x14, 0x35, 'wg2\x00'}, {0x14, 0x35, 'sit0\x00'}]}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0xeb}, @IFLA_NET_NS_PID={0x8, 0x13, r8}, @IFLA_PHYS_PORT_ID={0xa, 0x22, "6640a4480f92"}, @IFLA_AF_SPEC={0x38, 0x1a, 0x0, 0x1, [@AF_INET6={0x34, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @empty}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3b}, @IFLA_INET6_TOKEN={0x14, 0x7, @local}]}]}]}, 0x134}, 0x1, 0x0, 0x0, 0xc090}, 0x4000010) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000280)={@dev={0xfe, 0x80, '\x00', 0x14}, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r4, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e23, 0x80000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="120000000000000029000000", @ANYRES16=r4], 0x18}, 0x0) sendmmsg$inet6(r1, &(0x7f0000000bc0)=[{{&(0x7f00000000c0)={0xa, 0x4e20, 0x1, @remote, 0x7}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000000)='|', 0x1}], 0x1}}], 0x1, 0x24040040) shutdown(r1, 0x1) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000280)={0x0, 0xf4}, 0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x54, 0x10, 0x401, 0xfffffffc, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x31943}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 15m35.291382353s ago: executing program 4 (id=817): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_PMK(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f00000003c0)={0x64, r0, 0x20, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "bcb06fe9884f989e5cc1beaaa0bae1de"}, @NL80211_ATTR_PMK={0x14, 0xfe, "48d8ac69400ca446908925b2f3dfa1ba"}, @NL80211_ATTR_PMK={0x14, 0xfe, "f9440ad1101ed87176fe3f9c9954a15a"}, @NL80211_ATTR_PMK={0x14, 0xfe, "c70ca48d127dcfcbd2174bd0060f23e8"}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x1000) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg(0xffffffffffffffff, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, 0x0, 0x108}}], 0x1, 0xc040) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f00000002c0)={0x8400001e}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00011100ffffffffffffff81"], 0x30}}, 0x0) r5 = socket(0x2, 0x80805, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r5, 0x0, 0x40010) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000240)={0x6, 0x101, 0x206, 0x2, 0x754d, 0x6, 0x9, 0xf, r7}, 0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000002c0)={r7, @in={{0x2, 0x4e23, @remote}}}, &(0x7f0000000380)=0x84) sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x300080c1) setsockopt$sock_attach_bpf(r2, 0x1, 0x9, &(0x7f0000000080), 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmmsg(r8, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000002bc0)=[{&(0x7f0000001840)=""/4096, 0x1000}, {&(0x7f0000002840)=""/197, 0xc5}, {&(0x7f0000002980)=""/117, 0x75}, {&(0x7f0000002a00)=""/203, 0xcb}, {&(0x7f0000002b00)=""/183, 0xb7}], 0x5}, 0x8}, {{0x0, 0x0, &(0x7f0000005140)=[{&(0x7f0000000440)=""/202, 0xca}, {&(0x7f0000000600)=""/144, 0x90}, {&(0x7f0000002f40)=""/4096, 0x1000}, {&(0x7f0000003f40)=""/33, 0x21}, {&(0x7f0000003f80)=""/4096, 0x1000}, {&(0x7f0000004f80)=""/247, 0xf7}, {&(0x7f0000000000)=""/188, 0xbc}], 0x7}, 0x88}], 0x2, 0x2000, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r10, @ANYBLOB="00000016010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, r10, 0x40083}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x6}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008004}, 0x4040) 15m35.119982922s ago: executing program 4 (id=818): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) socket$kcm(0x29, 0x7, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r1) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="318300000000fedbdf2519000400180001801400020064756d6d793000"/38], 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x24068810) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x16}, 0x8) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001800dd8d00000008fcdbdf25002020fc0004fe0700320000"], 0x1c}, 0x1, 0x0, 0x0, 0x4a044}, 0x0) close(0x3) socket$inet6_tcp(0xa, 0x1, 0x0) (async) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) (async) socket$kcm(0x29, 0x7, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r1) (async) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="318300000000fedbdf2519000400180001801400020064756d6d793000"/38], 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x24068810) (async) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x16}, 0x8) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001800dd8d00000008fcdbdf25002020fc0004fe0700320000"], 0x1c}, 0x1, 0x0, 0x0, 0x4a044}, 0x0) (async) close(0x3) (async) 15m35.103879291s ago: executing program 4 (id=820): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a09040000000000000000020000004c000480300001800e000100696d6d6564696174650000001c000280100002800c00028008000180000000000800014000000000180001800d00010073796e70726f787900000000040002800900010073797a30000000000900020073797a320000000014000000110001"], 0xa0}}, 0x20008004) sendmsg$NFT_BATCH(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a14000000020aff010000000000000000020000011400"], 0x3c}, 0x1, 0x0, 0x0, 0x4051}, 0x4000094) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000700000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000440005002001000000000000000000000000000000000002320000000a000000fc0100000400000000000000000000000000000004"], 0xfc}}, 0x0) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r1, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="380000002300010324bd7002fadbdf25010000001800028014001c0000000000000003f86f161ed927187f830000000000ac1414bb0000000000"], 0x38}}, 0xc004) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newtfilter={0x24, 0x11, 0x1, 0x70bd27, 0x80, {0x0, 0x0, 0x74, 0x0, {0xb, 0xfff2}, {0xfff2, 0x9}, {0x4, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x8041}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000c3b000/0x2000)=nil, 0x2000, 0x200000c, 0x31, r0, 0xe0738000) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e23, 0x6bb, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000540), 0x3) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f00000004c0)=@gcm_256={{0x303, 0x3a}, "56db7a2700f81000", "a8ef1a3a33071799b7bbebfa6dc371290d0e3808802000", "336819df", "4008000000008700"}, 0x38) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="442e2717bdbd39f5d2185ec9050d681a1038f428", 0x4000, 0x40, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r6, &(0x7f00000023c0)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xa}, 0x1c, &(0x7f0000000000)=[{&(0x7f00000002c0)="474d10", 0x3}], 0x1}}, {{&(0x7f00000004c0)={0xa, 0x4e21, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f0000000500)}}], 0x2, 0x880) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="5800000010000d042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000010000000240012800c0001006d3d9b766c616e001400028008000900ffffffa83c00030002000000140035006d6163766c616e300000000000000000"], 0x58}}, 0x8000) 15m34.728516807s ago: executing program 4 (id=827): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_mreq(r2, 0x29, 0x6, &(0x7f0000000080)={@dev={0xfe, 0x80, '\x00', 0x2e}}, 0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0xfffffff5, {0x0, 0x0, 0x4a00, 0x0, 0x2844a}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002a00)=@delchain={0x1fc, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r1, {0x6}}, [@filter_kind_options=@f_flow={{0x9}, {0x1cc, 0x2, [@TCA_FLOW_PERTURB={0x8, 0xc, 0xa}, @TCA_FLOW_MASK={0x8, 0x6, 0x9}, @TCA_FLOW_KEYS={0x8, 0x1, 0x12d5f}, @TCA_FLOW_ACT={0x1a8, 0x9, 0x0, 0x1, [@m_ife={0x134, 0x1a, 0x0, 0x0, {{0x8}, {0x14, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x7ff}, @TCA_IFE_METALST={0x8, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}]}]}, {0xfc, 0x6, "fe28094757770daf05df5a1110000f3bb9325df6525a9c1992c54ac8b2e2e8cfad55ac55ea6f973c8f66afced86b2868b53152c876521b11f617ca9d111c8933bfa19154be97c968e9048f2ec4d3805a6ef25c8b0fa3dcdfe7bb515c50e944fd4726c6d99a3f4ce1239ff280b275676c0ac7d32bc7a92ccd96a95aeebf90b04f023e1474c21eb3afc46027e6584ac075458978d1b16913617b944c0a1307947d845602f613c3d3875061ceb159b403995500ef541e6c2d4aa8f4d09919258494dc218e68457153a34e866739e2b883fa0939ce172e32bc567e4868316a28885a4a5d491a62700d2ea6a742afd01e199ea7f683a67afc1a18"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x70, 0x9, 0x0, 0x0, {{0x8}, {0x48, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @remote}, @TCA_IFE_METALST={0x2c, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x6}, @IFE_META_PRIO={0x8, 0x3, @val=0x1}, @IFE_META_SKBMARK={0x8}, @IFE_META_PRIO={0x8, 0x3, @val=0x4}, @IFE_META_PRIO={0x4, 0x3, @void}]}, @TCA_IFE_SMAC={0xa, 0x4, @remote}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, @TCA_FLOW_XOR={0x8, 0x7, 0x70f4}]}}]}, 0x1fc}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000010340)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffffffc}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4044090}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xfffe}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}]}], {0x14}}, 0x9c}}, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000880)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x8, '\x00', r1, 0xffffffffffffffff, 0x1, 0x1, 0x4}, 0x50) r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="14000000040000000800000006"], 0x48) r7 = socket$inet6(0xa, 0x3, 0x8) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r6, &(0x7f0000000280), &(0x7f0000001840)=@udp6=r7}, 0x20) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x1ffffdc1, &(0x7f0000000440)=ANY=[@ANYRES32=r2, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000100000007020000f8ffffb99a26770008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0300000004000000040000000a000000000000", @ANYRES32=r3, @ANYBLOB="0700000000381894035770da8b00000000c7c9086156ccc1cc6a0074030e", @ANYRES32=r1, @ANYRES32, @ANYBLOB="06000000050000000200"/28], 0x50) r10 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r10, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r11, &(0x7f00000013c0)={0x0, 0x0, 0x0}, 0x40010022) setsockopt$sock_attach_bpf(r10, 0x6, 0xd, &(0x7f0000000000), 0x4) setsockopt$sock_attach_bpf(r10, 0x1, 0x24, &(0x7f0000000000), 0x4) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x12, &(0x7f0000000040), &(0x7f00000000c0)=0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a00)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000980), &(0x7f00000009c0)}, 0x20) r13 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000bc0)=@bpf_tracing={0x1a, 0x15, &(0x7f00000005c0)=@raw=[@ringbuf_query, @cb_func={0x18, 0xb}, @ldst={0x170ee0e2d3f47394, 0x1, 0x1, 0xb, 0x1, 0x4, 0xfffffffffffffffc}, @map_fd={0x18, 0x7, 0x1, 0x0, r2}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x2}, @map_val={0x18, 0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x9}, @tail_call, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @initr0={0x18, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0xfffffff4}], &(0x7f0000000680)='GPL\x00', 0xfffffffd, 0x84, &(0x7f00000006c0)=""/132, 0x41100, 0x50, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0xa, 0x1}, 0x8, 0x10, &(0x7f00000007c0)={0x1, 0xd, 0xaa6, 0x7}, 0x10, 0xd2c1, 0xffffffffffffffff, 0x2, &(0x7f0000000b40)=[0xffffffffffffffff, r5, r6, r8, r9, 0xffffffffffffffff, r12, r13], &(0x7f0000000b80)=[{0x3, 0x3, 0x7}, {0x2, 0x3, 0x10, 0xc}]}, 0x94) 15m33.701994093s ago: executing program 4 (id=834): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000028000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x3, 0xc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000002c0)={0x0, 0x17, &(0x7f00000000c0)={&(0x7f0000000000)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0, 0x0, 0x56074974}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) syz_emit_ethernet(0x66, &(0x7f0000000c00)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\b', 0x30, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0xe}, @mcast2, {[], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @local, @mcast2={0xe}, [{0xe, 0x1, "2025b07f3c58"}]}}}}}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x400000000000004) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000), 0x214000}, 0x49) setsockopt$XDP_TX_RING(r5, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x0) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r5, &(0x7f0000000100)={0x2c, 0x0, r7}, 0x10) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004) writev(r4, &(0x7f0000000100)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) 15m7.508942061s ago: executing program 32 (id=834): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000028000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x3, 0xc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000002c0)={0x0, 0x17, &(0x7f00000000c0)={&(0x7f0000000000)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0, 0x0, 0x56074974}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) syz_emit_ethernet(0x66, &(0x7f0000000c00)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\b', 0x30, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0xe}, @mcast2, {[], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @local, @mcast2={0xe}, [{0xe, 0x1, "2025b07f3c58"}]}}}}}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x400000000000004) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000), 0x214000}, 0x49) setsockopt$XDP_TX_RING(r5, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x0) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r5, &(0x7f0000000100)={0x2c, 0x0, r7}, 0x10) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004) writev(r4, &(0x7f0000000100)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) 33.406010502s ago: executing program 5 (id=8573): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000001200)={'wlan1\x00', &(0x7f0000001100)=@ethtool_rxnfc={0x2a, 0x8, 0x7e1ab084, {0x3, @usr_ip4_spec={@multicast1, @multicast1, 0x53, 0x7f, 0x1, 0x9}, {0x0, @random="7729ba522e59", 0xa, 0x0, [0x10000, 0x3]}, @hdata="a86b57371eff451fd353517f755532b803741b5b2aade83e68f35d937d79d8993111b4ca75f0612da64df99e636e9cb7eb62b35f", {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 0x9, 0x6, [0x6]}, 0x3, 0x6}}}) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x3, 0x0, 0x6, 0xa, 0x0, 0x4070bd2c, 0x25dfdbfc, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @empty}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc, 0x80000000}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xb}}}]}, 0x50}, 0x1, 0x7}, 0x0) r2 = socket(0x10, 0x803, 0x0) write(r2, &(0x7f00000000c0)="2600000022024780e8ff06006d00000078cc6f920a97c99f494e83cf3b21f84fcf47e2af0bf9", 0x26) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000d9bffc)=0x61, 0x4) sendto(r2, &(0x7f0000000380)="120000001200e7658e7b10000000000000a1", 0x12, 0x20000090, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000002d40)=""/4104, 0x1008}], 0x1}, 0x10001}], 0x1, 0x10120, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x10}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000000)={0x18, 0x0, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}, 'wlan1\x00'}}, 0x1e) r6 = socket$pppl2tp(0x18, 0x1, 0x1) sendmsg(r2, &(0x7f0000000e80)={&(0x7f00000009c0)=@hci={0x1f, 0x4}, 0x80, &(0x7f0000000dc0)=[{&(0x7f0000000ac0)="109c34eb2c5819cfc276019e70526b7e5dc9da00691a29881c57a0525b3ae59f189209c554b541d2ad513075d13789bf7f36b499a63d2bb4103912cb2aa9b084d4cbed02679faa015bd58b5cba8b3829d561355e24c2c0361ca3ad64e4f7e53d0c099421057e61a6403b9e19c710", 0x6e}, {&(0x7f0000000b40)="213a1ef7c75760c6a3662033fb0b217509d5758a5cfd6f71b9ba3ab5a80008078791553c6e505ffc383afa23a7ba9d76da201defc305c4408e24a796463c594a5150", 0x42}, {&(0x7f0000000bc0)="edae576717ad66dbc5ed574fcbe06fa4aeef6a1688a319e9082a044246f0f194ea45f0755163401f3ae3a9001709a6901b13127343cb5fa7f2b7b02d533d14c4c4638d429b2ada09287c29422f89cce5571d8ac51acd1b3cf5631eb1f02e464bc02b19885dc770083b42d7e5b391473f04cf1bf99b38bf2bc544449f3085e0ad032e2bf175a0cd15554101e11e868b135ee0c90c8daa6e", 0x97}, {&(0x7f0000000c80)="61efa1f680e0eac17e6610fb990c1983197fa5d09a952b4216356a1a7ed16eb64a5c800e5c9d8a8b7f1c8344b27ee9cbfd99d287ccaf8f2d1ec9aec59cc55865422ee1bead16d09bd2fe9ae958aba1443e96a7efcbc7300f56c5937770676791542e", 0x62}, {&(0x7f0000000d00)="e344d7f9340eedca22bbecfdcb437b689d1b2ab1becc9f252a88d54db2e7f9ab293b4d2aea513aebe9e84c2e714c4d4f06b4cb39052414fc0f67d46c1e3790cca9ca7e298081f9fde154d083ff88dcf92ac52f922afbe3d1f11d028dd291ded26fc29715770922b0f90044d0bba79da69205e50c4c001bca2bc625326093224a91311a5e010d2197a18c114018fbd52f2495741f6f1a54a967c0c81c89bd63d96447c99a55db3d6459997ffe", 0xac}], 0x5, &(0x7f0000000e40)=[{0x18, 0x107, 0x6, "8a764df3"}], 0x18}, 0x4c805) connect$pppl2tp(r6, 0x0, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x4e21, @broadcast}, 0x2, 0x9800, 0xfffffffd}}, 0x2e) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000500)=0x2) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r9, 0x0) sendmsg$rds(r9, &(0x7f00000008c0)={&(0x7f0000000080)={0x2, 0x4e24, @private=0xa010100}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/191, 0xbf}, {&(0x7f0000000240)=""/90, 0x5a}], 0x2, &(0x7f0000000840)=[@rdma_args={0x48, 0x114, 0x1, {{0x0, 0x81}, {&(0x7f0000000300)=""/201, 0xc9}, &(0x7f0000000800)=[{&(0x7f0000000400)=""/164, 0xa4}, {&(0x7f00000004c0)=""/42, 0x2a}, {&(0x7f0000000740)=""/131, 0x83}], 0x3, 0x60, 0x33}}], 0x48, 0x4}, 0x4) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r10, &(0x7f0000000980)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x302800}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x14, 0x9, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x44000) ioctl$PPPIOCBRIDGECHAN(r8, 0x40047435, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newtclass={0x74, 0x28, 0x400, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff5, 0x2}, {0x2, 0x9}, {0xa, 0xa}}, [@TCA_RATE={0x6, 0x5, {0x6, 0x3}}, @tclass_kind_options=@c_clsact={0xb}, @tclass_kind_options=@c_netem={0xa}, @TCA_RATE={0x6, 0x5, {0x2f}}, @TCA_RATE={0x6, 0x5, {0x2, 0x19}}, @TCA_RATE={0x6, 0x5, {0x5, 0x7}}, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_ingress={0xc}]}, 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 32.907954315s ago: executing program 5 (id=8575): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x5}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x4, 0x8, 0x8, 0x0, r0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 32.774081008s ago: executing program 5 (id=8577): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x1258}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8, 0x1c, 0x2}, @IFLA_BR_MCAST_HASH_ELASTICITY={0x8, 0x1a, 0x80000000}, @IFLA_BR_MCAST_HASH_MAX={0x8, 0x1b, 0xfffffff8}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x14}, 0x8044) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x20000012}) 32.50818899s ago: executing program 5 (id=8582): ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f0000004040)={0x0, 0x0, @start={0x0, 0x0, "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", "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"}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) r0 = socket(0x40000000015, 0x5, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)={0x44, 0x42, 0x1, 0xffffffff, 0x25dfdbfd, {0x2}, [@nested={0x18, 0x38, 0x0, 0x1, [@nested={0x14, 0x3, 0x0, 0x1, [@nested={0x10, 0x66, 0x0, 0x1, [@typed={0x9, 0x7e, 0x0, 0x0, @binary="ac66d0741d"}]}]}]}, @nested={0x10, 0x1, 0x0, 0x1, [@typed={0xc, 0xc8, 0x0, 0x0, @u64=0x2}]}, @nested={0x8, 0x4, 0x0, 0x1, [@generic="48764896"]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) (async) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000058c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40044}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000016c0)=ANY=[@ANYBLOB], 0x48}}], 0x2, 0x4) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (rerun: 64) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000200), 0xffffffc1) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r6, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x3d) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) write(r7, &(0x7f0000000000)="41000200010001", 0x7) (async, rerun: 32) recvmmsg(0xffffffffffffffff, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x40001af, 0x12122, 0x0) (async, rerun: 32) shutdown(0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f0000000000)={r4, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f0000000400)={r4, @in6={{0xa, 0x4e20, 0xffffffff, @private2, 0x7}}}, 0x90) (async) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x0, 0x80c, 0x200, 0x10, 0x17, 0x3, 0x8, 0xe10, r4}, 0x20) (async) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) (async) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) 32.279443251s ago: executing program 5 (id=8587): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000fb000000200000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x200}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0xfffffffc}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x2, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) 31.886406624s ago: executing program 5 (id=8591): r0 = socket(0x2a, 0x2, 0x0) (async, rerun: 64) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) (rerun: 64) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x4, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@newtfilter={0x58, 0x2c, 0xd09, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa, 0x7}, {}, {0xfff1, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x28, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x84}, @TCA_FLOWER_KEY_IPV6_DST={0x14, 0x10, @private0}]}}]}, 0x58}}, 0x24004000) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000000)=@generic={&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r2}, 0x18) (async, rerun: 64) r3 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)=ANY=[@ANYRES32=r4, @ANYRES32, @ANYBLOB="100000041920000000000000", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) (async) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) 16.820439854s ago: executing program 33 (id=8591): r0 = socket(0x2a, 0x2, 0x0) (async, rerun: 64) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) (rerun: 64) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x4, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@newtfilter={0x58, 0x2c, 0xd09, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa, 0x7}, {}, {0xfff1, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x28, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x84}, @TCA_FLOWER_KEY_IPV6_DST={0x14, 0x10, @private0}]}}]}, 0x58}}, 0x24004000) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000000)=@generic={&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r2}, 0x18) (async, rerun: 64) r3 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)=ANY=[@ANYRES32=r4, @ANYRES32, @ANYBLOB="100000041920000000000000", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) (async) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) 4.254723935s ago: executing program 2 (id=8837): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x5, 0x6, 0x4, 0x6, 0x0, 0xffffffffffffffff, 0x4}, 0x50) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x2c, 0x2, 0x6, 0x5, 0x0, 0x3000000, {0x0, 0x0, 0xfffd}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x2c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) (async) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000180)={'geneve1\x00', {0x2, 0x4e22, @empty}}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c000000130005002cbd70000000000000000000", @ANYRES32=r3, @ANYBLOB="12030000000000000a0001"], 0x2c}, 0x1, 0x0, 0x0, 0x44000}, 0x40042) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe8000000000"], 0xfdef) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000002000085000000b000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r5}, 0xc) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_SERVICE(r6, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000425bd70002c00028008000700a5000000080004000100000006000e004e22f9ff05000f009b04000006000b0002000000080005000700000004100180080005000500000004000380125fad2eec01faf66f361a23d434e8bdbaefec9cbdc33dd868c94a932cfb47fcdcb00baa3d502e26c42143a8c1ba2a99dd519d774ba73a5e35abcd65cdd272955aa8a11543f41b7da466772bf883b7cf08e8e71fd9941a8c45fce848fb31a3776bbb8b77b97b2e62040720cc526460ae8d2d72cb948e7d80740422e632a8f8becc60665f27169ebf307588e1983d00"/229, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x4800}, 0x881) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000c3a0f8ff5000000095"], &(0x7f0000000040)='GPL\x00', 0x8, 0x95, &(0x7f00000015c0)=""/149, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x3}, 0x94) 3.942093518s ago: executing program 2 (id=8842): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000004f00)={'veth1_to_bridge\x00', &(0x7f0000004dc0)=@ethtool_eeprom={0xc, 0x5, 0x9d8d}}) r2 = socket(0x23, 0x80000, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x99}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000140)={r3, @in={{0x2, 0x4e20, @private=0xa010102}}, 0xf8, 0x1ff, 0xc42, 0x1, 0x2b, 0x9, 0xf7}, 0x9c) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYRESOCT=r4], 0xe8}, 0x1, 0x0, 0x0, 0x20008084}, 0x4040084) write$tun(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="0800080006000600080014000000450a0fc0006600000b2f907864010101ffffffff3297e3ba0fa8a2e71bd9fe1a399b5110420b70460c0dad392d66248a43540df968e7fcaab34569c0e36170578c0d3c546a98b26295e2592f360905866eb4720fed03a977a3df4224895629fd6ccec64f13a999f18f518e3ee28798381975e862f1db9dccdb2f1c1fb60f5ffc7a339d40a8bd1f24cede8a32f186f142e194d4fb48224759faf813ea80e6a853e79b4fe27fe3e1aec5897b314a7f0d515b07b1835986b4885e9826d902c40f16cd77c58b6433ab039955ce9db11f36f459e7114ace6c9989eecea80a81fd39f339356c7c3391af83da2486503a7973f6db4806cf3e5ca94cf7e1f79fd00decd76100c18251a59d1474caabf4d3ca6a9a9885df710e68c5b0dc11832dbb5eecb5c88c2f8f02bdbd88569ad4a740359cbca8c378118220d73bdd1e661c3a74f77aa931b11cd38119b0f084bb96e84803fca6566c33ee1e4e34ab0253fbf24f9f5974af5e1fc2a43a4ec9dd9928a8f38a128ea27c429300ae5a6bd7740471f973d8224b2b07879f4fbe7dcbed776a72ebdc713bcf1d7aa45b01c32a1003e6670d58510bd79ba2fde5cb2b82cef2cc315648f4e9d96d848ba327949b8926253cbdef6888a8982108b6ac7a1108533dd3fe125002e2e286362d1055082a9d73ec5ac3080f2a501ff27250b62c8965f371cf92b32d6422d79f66261eb08a2f8fe50049e102c69ce703d116d0834208cc957d0f1376457a90245816d7642412897fdd2f982fdfbc3af65aa0446b00c767b79aec40e460887ea02188e3a0960eea39b144859467b881978378c9fd593259e0f63148179fe2c2f6d40987b63a6e384e63027f03d8039d707522942d5dc88fd842524d006290b6a65e9cc86cc5b401a60ec4aedfb3bf4d0447bb681810a16b9684b72c2f4593ef834a0203e78cd1d9dbc978e9ae8f3ab62c07f1e41d59470decee7b0cc41ac49e4b7589ab6da65849f62ec217bb39ed161e7d337822d96badbd74d66451ea9a74bed591dc9631bf639dcf7846ee428a9fa55bfceedf3b1c23642f3b58dd0a7273664c6c49c9160a4b9cc5b72d0210e305b94e2cb09ae1d4af9d365b5093851f229c8c30aef75d45ccdbab4b86d801a9ad3b27f26ba601d531c0743717aa7aae29d37f496fec7682c5a1abd321ad61941a2d23fcac6af1d1875e308c8d8c64a5152be47b59c09d293f46b857310a99f1885f0a49d432aa0d39a3e8fc885e75e66b63215133175a19267c8d0adf7d8f644e742ed5369d1405e99e63b78727f135e0243f24d9ce354a1562102ee8de4c191508343b86bf7e7519ddd770ce55e17e590561b2f437194c97ad46622a6ae3dd68d9993e6744954f4cd308bd6594fdccedc578e80aed274a65219697229059723ac37d535cca0e9c314e7941b4160bbd2ffba71f26ffe3228431bc81463078ad70583277ef18bce23ca2e5b9a00670956ea8e0e2c739c006106c8c9ee3f92ba728d8490742b74a9a18cbedfc4e69bb87e0da4c7dfb964374c28c837d4641fb99a19b233675f8526af395335e0185cf3934805442ac379980b687a7128e53284ba9e741b5fe9bc969bfbd55cbce76842915e076e2adf844338d16d3802c681bafdcc60465bd34dfc2d1c069ceee40060e0570fc1275ccabfe3f9be3e84ceedf72cd649c082232008e2b0c94594588c00e0fe911bbf1c12eb6c37ce05674a7597feecf27f5e051ffa824d9ff93638dfa9a84c77562aa2cf897f55a97b79c18544ad03480e1011b8f93e0ead9c2c6672448f585c5803ae99be777fbc662ef4450c1e936ed8b3c8047f00e72adc84561f417f8e5e1dde4967005d96a64fc75d9f486b3ebdb5904a0a56ec48542f0efce939f66fd69259e7376ad37e84434ea90f35b2d3bd63b5c36b267d8f2c7dc5a50b46e00ed086dff8b039e07b84c60611269d4f282ad04dc8e0b481eece2f8a614734be73617f0ad5be12a79bccb958774fd32653dd3e188aece76f3014deb2ba61744835c0f735234b6a4637c948a7b4fd4203b286ca87d669e325d70277075b094f59eb1dff6c9c05c40d5e464c563df79486e1a32e6ed9bcf675aac7968b4e98dc4e210215b0d3b6a2525b2e3df11f3f1490eb39cabffbe32e23659121fde8e4e346e0f595aaf3666a5f6f118c1a1128039502ac04c40b85eb4c54e6c95b8d1c2aac74ae9e1c355ccde9d54d5d833293f5df09224482179e5bcd8e227c99172a6e14c2cd4e6462ceb0a905a1d64804840ce62e350c6efac10a7fcb029f84af64e2256d45afd3b3f59379895740e0cd2fd24c63264f785bb6e3f40ec72ed67d1a7d87dd264743d9c951cb5aa8bc6f1d1bc9b23303d5aa7f8f6f961326757456057000cb2bacf78cc229002777e932c2640b8dfa793846ca49fa93996db95104a8808a1906b19df17e754b90582b6c49efb3ddce067dd9292291cfd2bb0323ce8098f29e4fce0de31cf5c7e2e2da5d0d0996a8be776de8fecfd3ce68e80d21f1701f6b90ac51278abbd727d19415e0ebe001b990b177b8db0c592b18a4b5e4a6221902362e5b20e6e6f2131a5a5e03c1150b179ef40c933c2fef1b79de738652ec4c32565f5cf751a11db177099c4e2e5bd7616cd0dd501d5bfccf5691de3cca590365328648baf8a9487a3c212193c9bb837594460967e823067a9465eba7001eaf609a810488ef5c147aaa5e9e8c75b585ac3582b6915e20b5aa2f79b7a94857122988c56dbce1ea52de1a56652e839bb853be3ee16052b33fb83ca54d8e4e19440a5e81492107043a66286f63ca87a1f7b8a4e9547a7eb6005419cfd28cb37e9e374f4d0143973286e87070754025c1a6fccfdc6858eaca8c35ecb19584ce7141cc79a5bc813469161b87a19fc21f3373d1f25b3427916dd1be2a589b70ea3b39fcc7801e13beaf19b76164faf3dc4ab8faa5648d24eddd6caceaa0d5ac9cad633c19a4a4d059ee823a49b7cf82c5777d376c111f58ea8fd473429907852301a2c856f27bd0c687ab5be0e2bbef64ddee1601375a4440e3f59d60f57caebfe457f82432523ec4a61cdbb7f1e91e4b05fda892df131c274b19929d26f7a5a6d3ca487983f729601ed9bb4bf5c1cc3d453d406e9534688dec6a2dd0b9db149365c125a95e129565e62cc91f7d960abe1055b730ae0994e7eb08392d5745d0e4f529c4defc3d3e43d0815b0cc63effa88d20c13b14e780c2f6c89a1ee5e4db45a5c272186cc3e51b13dab3add5f467e8ca0f4c45a1fc76db2f0cbf794102946aafcd8cd8a3e935a606b9721645c4d550ae0907f345593736506efc626498c974753d474a73626041d3a54f8fb50de2a6335611a3779da3a02daceb2256d9b102d4d30dd3cd389a04b1a7a6076879f36534bb3379debb46ed1fa2c40096c752017dd024345c58313b43070ff7bef94dc3cafbe6ec20d59e5ea3c196ba3b783bfa87384407efc664cd350c80ac397516018e35371956e414755cde304d2a228c1540ba6fd6a7402d11c666964f024da4c016eb556ba2c5fab86c60c12efb1496295d80f0383526e8e0fc55a287bbd3cb966a916f57958d8b6ef97aa0c4b47f7746bab6b99698c1c96b25c4e2e084147866fe0970b109dd26984adc0758eb6442712cc46dcd8ed3038b0595252eed1b8a46525862662d1e67eba66ac341f8d27853eed54854f488f079bd48df6ce7a4be8b1b61fd23a2dc4d3ade0992011539cc63f80fcfc75008c20cb639348cb218f8f476a6d56917f4ca07e67fc20ea2e9642eaf2182b397e279f5f6c70438fb8aa39cba788588c181461ea7efe1a0dd5b95eb26f7158b91012f7ce0ee1b4e79ce4da377bea4551738a0f491a84f19b3be9827b4469c299527aa9c20b8bf12f919976a0356bba720fb91010763c79bcbb10d89280f0f97cdd19aa0d54828b308195fac170613cf4b515e340a9ef2c97f618a9f50b30ae34ebeed9a38b4c6969680accc740b154ecb014fb5d543a59ccb98a7de2823a2dec39f331cb503eb74fef61262c6d4050bc723caee834eb28c64ce007f6027375e936b62387cf1778970e88b0574a0106d4c855be7425767c551b2fa644d9d8a59f787e7610581b768057d229673344571c3d6e3f10975b2859f568398b1f38f89524d9ad0c1588617c3883a1227b714c81cdf28da54f33968c1c50f28da01c308eb31d319b3e77f96bec001c9300000000000000009cc0062283ac112868592619db14d629c47bfb793a723dcd2f7b07ae4ec14ca3ef4b955ea5b2b153a279b080f6236d418075b86850974c8850efb306d5c304e726bf2643b4403e6d46b0e0395b02e93308b4b2c3e957308d497dc51c753344a7878f1f0c91295fd76e3d1cc9ef813161c6b92b7ea6068ceb97d8f45a4ce57af7d7632d699951f7fe3c71c3a32b014c74425c67e5030546b10cf7edcec2eca5ba31dc62c08f83f35bc2e36b93f15f071bc2537ebe9ca19f86dce4e84272e10323d0ceaa2cc47fe4f6ad101d454c761f9863e94af91199ce5f12469bca7ba39314b84aa7efa4bdc18f7700c19511d48d6132450111d70401a8ac73565d5386ca12345e884d08b23f9c901000a95eb4167865e58c28b112f47c96beeaa6657c923e25e56529107c5c30e65bb485d5ed21b91332db4e09df7e59dcfa05c994570deb3f9b838e22ae4abbf9a9a8c319cc9112c8dba7c2278f78b9578b0254c46a4c04b8fa4fedad6bd275f70b1618971ef6503379bfb0a508c9944328af2c820091a89e3f75e68e7f980ddc9154d273f7f2ce7a6294aefe93136860786679b80e41f6636ff45efeacfb52e2ba2bd9bd9c9030079a46caca5c4b340c17d01ba8ecbc5c561b2038481a8321c009d12136a3ad5461881d998eeaac5236fdcd8f81fb5e53848bb096d9198fd0d38830d1809f2a632b31e2b67754140c907ed58aead048b2d8af9a1c407e48db815212cfdcca97222dabdfe01f311a73e1e82c3e189ec5add48d3f8190eb9e14b58e540f7f1388a7c687629eadb19fd8a133dc8177629270ecaabff79efb6c1f750d89b9e6c5f34c6238066f8e3e425e46a27b3c0d2e9e2ed3cffe2a6f39b8e0137ea5de689b94107fb4748a5feb3902f0feba64dae4c2e69bc8d86463575c6b0ef4a8a64fef41121e57a8c67eda07e9fc8f98299677de198ea0a649ef3c00591940b2c27ba1414aaa1633deb52e3a44cfa8d7a00d014317c026a7d7f42a34b97128e1bf9cda4d8315819ac73ed5061bf9b5631d07b09b85b78ff1b6eb86e9e8c4faa0f991cd6fa0b0eb71b39c20ca9bc7c156f3bd255a5b408df172396bafd7f0fb11c6eaf1eb0a06576d37bee00424bf699584b1dfed68f0d8d8a35f0427c783fe2d79b4373628971e87501a5e4bb05b5058d0b2132741f26e76065b6f4017d963c8ee5605c4c5b6eebb96fca0a41893cb6add3fb0d728abeb860f22cedbd36e464bdaf124a7041460f7af3d64b54e9ffd240b5afad9baf6e5dd8406bc1b205da5848f51fc9dd5197716e144e1b0386614bd3cfd5ddb80ada1e5ca74c8960093a553b1f6288aa7f53663cdd867f658e51b95772dc7a6fa45fa03e14988a33250e6c16fbf0351769080d64ddfbdbf77e1215563bf2e82ecc38a682846d7e2e2ac4e87d715f97f15e84c3df04affee49612a735907d3c4d310a54a6f609873ad56f29a138f4d5661f6865e030487"], 0xfce) 3.589351285s ago: executing program 2 (id=8846): r0 = socket(0x2b, 0x1, 0x0) listen(r0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x17, &(0x7f0000000000)=0xa, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="12000000010000000800000008"], 0x48) pread64(r0, &(0x7f0000000540)=""/208, 0xd0, 0x4) sendto$inet6(r0, &(0x7f0000000400)="88c4c4055b261cec658451c48144717f893abf09797e3830ef1c9844e637b69488762341955a332f2a59c29e935e349ee685ec9f5c33054c32808eb4595f7f6a710095d0b88618966b49507533fdcbfd3b739a45f0777b43a224417ebf700ca0143d1cdcb17bedf74376ec7d28b04701c0573cf743db90ca4974beafe1b71d488e684880369d20f69dd25b2d841ddce482cf5ae1a492098196ffabc80bb16eb54b8b465157deadf32b40", 0xaa, 0x0, &(0x7f00000004c0)={0xa, 0x4e21, 0xfffffffa, @empty, 0x80000001}, 0x1c) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, 0x3, 0x2, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000085000000a000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x3) close(0x3) 3.22794091s ago: executing program 0 (id=8851): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20010840) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e6574"], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8890}, 0x20004450) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x20040850}, 0x44054) 3.175236738s ago: executing program 0 (id=8852): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r1, 0x0) (async) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) (async) r3 = accept4(r1, 0x0, 0x0, 0x0) sendto(r3, &(0x7f0000000000)="00c881d76049ac562e4e5094890b55e5ea113389145c57e7b3479bf3f2cf8ac5d94a71e37b8bc9f4e71c8b097042535f04d39b07b6e29be0a2734c7332f8", 0x3e, 0x0, 0x0, 0x0) recvfrom(r2, &(0x7f00000001c0)=""/62, 0x3e, 0x10120, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYRES16=r0], 0x114}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 3.028028769s ago: executing program 0 (id=8855): r0 = socket$igmp(0x2, 0x3, 0x2) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000000)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000200)={{r0}, r1, 0x6, @unused=[0x401, 0x5, 0xffffffffffffffff, 0x4], @name="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"}) r2 = socket$netlink(0x10, 0x3, 0xa) (async) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000001200), 0x4) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000001280), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000001380)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001340)={&(0x7f00000012c0)={0x80, r4, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xe}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_BACKEND_IDENTIFIER={0x7, 0xa, '[}\''}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}]}, 0x80}, 0x1, 0x0, 0x0, 0x8881}, 0x4080) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000013c0), 0xffffffffffffffff) (async) writev(r2, &(0x7f0000001680)=[{&(0x7f0000001400)="93c8dcc922572b42d000cd2e7e1a80670d9ea3dab494af4b43421d394a574aa18eb02ea992baecad7d73c02e8fd95770d50ce5784dc000de1fa52620e760eb045cd83177faafdc9ad2e43e05aec041f6aa37e46ef4042c33eb651ce9655a9512c9e347d772c7853e93edc0a61abfb151a69677f2a2fc096e1dce6e11f6dc50afe991db5b", 0x84}, {&(0x7f00000014c0)="e9ee13bcf5fc8ffb4263786026a4233afb8621abb23b595830621f0bb1e7f74f17a2964283014df93a0db3", 0x2b}, {&(0x7f0000001500)="aab28cb6528601decdbb864a43910efbfffc324918535d6c1341b900c64b5d1903df42a7d67748ad1651c574e4ccaa0ea4cff7e75c6a0730a517257e2c32cf2525ee686ad9e9f07a00469bb0bf33edd2c4f81ca0a667b6fc6a262647b26b5f34b1856dcdb1a7597184", 0x69}, {&(0x7f0000001580)="5e03c94b869e28cc87b75c3bc944d3ded3234f15369f6d7adfeb487d551cdb7bb5343027fa9fc293c648acbb828532fe925399622242a81bf3ca3ad561fd3d0662fa6033c99429c18ca000920407bdfd2f1430b1b20625ab4af83f0a21ca2784c377cf8ab1e316d544aa71a49dda5f8abe2368003fa23db263d3c8a90020", 0x7e}, {&(0x7f0000001600)="0239a39e9a230800ce4cc2ed3787fb33e6dfd0c1073bf1c083cce1dab5237b02", 0x20}, {&(0x7f0000001640)="f34e0f0ce0150432c4beb4665e149864a39f4d3413e08a22", 0x18}], 0x6) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001740), r3) (async) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000001780)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000017c0)={'wpan1\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000001800)={'wpan1\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000001840)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(r6, &(0x7f0000001940)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001900)={&(0x7f0000001880)={0x60, r7, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x60}}, 0x810) (async) r12 = syz_genetlink_get_family_id$nfc(&(0x7f00000019c0), r6) sendmsg$NFC_CMD_ACTIVATE_TARGET(r3, &(0x7f0000001a80)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001a40)={&(0x7f0000001a00)={0x1c, r12, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}]}, 0x1c}}, 0x1) (async) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r14 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001b00), r6) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r13, &(0x7f0000001bc0)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b40)={0x38, r14, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r11}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0xd5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x8020) sendmsg$NLBL_MGMT_C_REMOVE(r3, &(0x7f0000001cc0)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)={0x2c, r5, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0xa}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) (async) r15 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r15, &(0x7f0000003340)={&(0x7f0000001d00)=@nameseq={0x1e, 0x1, 0x2, {0x41, 0x3, 0x3}}, 0x10, &(0x7f00000031c0)=[{&(0x7f0000001d40)="f4a8f3deb4f5ad6822991caf016f012a805f6aefef08a82774a7ca238852a99dd7e241d26420d8f3a309f6522a5533a298485cfabd3f2bc8aee82a3c997b9f94c2a7518cc3dbd77e18b2ccc67c5b22e4840565ebc0183e65f34b022b5c8eabacff47d51f0cd1d29a0299e5caf5ee5b4beb2518d0a636068d1d68ad948c9880018f06411b71bd7c26014626a56d2ede8b368094ac9204a76b3226a6d6aa6472d8137c58dd43822909275e5a6c3115165ea90bd352f6ed1a5cf5510a57c7f433141abe264bf21ab99d87c398", 0xcb}, {&(0x7f0000001e40)="315ab6429cd505f7f8cf52f7b0788899786bcd9086773a700c473902ee3640ba7c34997dc38049e76d5579bda114b48bb3448f619373008d29f5410c8cc5acad7728a70ec62dfe0d76e9718a876830cc0d6fb481de37f7ea84709c12fca330fe78f91710ec402f57173eb29ca824c499d110de32dbdbd70651c25d2ee77d4884e5258fe57b2623c6babc4bcd0a4a0c59345cb1ce1afc7d5be6e06fabf27107817b7d2a816bcf09a825f0f098a645213abaccae52ded773d563ec98962e120b914b9436858c896b3c22b6b728bd21d7327f211f038babf3fbe41af468bab3b80987aed9c7180862ad14a4f704e8664794", 0xf0}, {&(0x7f0000001f40)="874110604c55b4c0b37f577b90f8da342e16e8edbca50f36c81d1ef4e2dd5d9899c8c5d2337b2b9113caa90c9bc29ee7053d9b746af07f0345af6ae126db6fa559d47d3168192fd44082d94b63139fda381d7671", 0x54}, {&(0x7f0000001fc0)="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", 0x1000}, {&(0x7f0000002fc0)="1e8564089e0bb9f6e38ad52521d053dc4e0a70b911db2bc728041880342c5e03fdda5d5ae78ea1d45f65c216b3ad752bd13eaa8aaf1ed2e3b6ad4ca2cf6a46f9435a8359f20edc42bb9ec36902abb859221020904e6ef954f667fe7bcc46f817131b18c4efee1092bfc563b1410e6cd1c89baa13d0c55c667de76eb8c2d0a5cc04fb2087d86892c52fb0fea80932aec9cd230d01b4", 0x95}, {&(0x7f0000003080)="bb9866d173ea5e70bdb1205ff2", 0xd}, {&(0x7f00000030c0)="c0cfe024f15da74a90e08e3209a1856485de15e8b0c2b2bf637357992f7adb1ae4c312cf1ecea31b2c515c288ee44b019a20490127702d96fe34a5afa7cb6f2c5f48ddf8781af06c3767dab86734dce3fb584310f06ad95b74ddec0e", 0x5c}, {&(0x7f0000003140)="79f5a170f6b38b8da8e661263e0e299816447fd3c0ad655d6742472bf3a1a08e64adfa172f9950b550083d8f2fbea03892e49353b99ef592d99415814acc3ebac6f08479fcc317a59fdfb883c389350c60522766fcb9c9b692b4fcd816e9b79990c7ba18877e43df", 0x68}], 0x8, &(0x7f0000003240)="25c7d0073d14edac8790cb9a5fba1359876450e267bcbbd39d0b16e2850c7c3dc1a645b447eb3a7c4edba75fb90f4c25a7846e6ac8995038b33c1d2fa276d60abe0aac08f8b6494806b7594cffad70d0c2accc2a7319cdb948502d1b4c84e82492970ea00ed044a59bdb5ea1d9d1eb954be6f48e3e2201dfa880adc78a10bcb452ded51e8284265cfeb44a1d591891019144bcdc895aedd3751ccc69f1aa4de88a83b8367b66c186dd7079cfbab2de40c6d518a77d8ac97b524dfef0f6938b3c50fff3f8cf3d73fae08016f66d148e5e8d2a35fc5d2c6240556ef1917590db6d62e59145730c2d9d1b10e2acc32443c121cf43", 0xf3, 0x1}, 0x0) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000003380), r2) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r6, &(0x7f0000003480)={&(0x7f00000033c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000003440)={&(0x7f0000003400)={0x38, 0x0, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x7}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4840}, 0x800) (async) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f00000034c0)={0x72c, 0x3, 0x7, 0x7, 0x5, 0x0, [{0x3, 0x9, 0xb59, '\x00', 0x2}, {0x4, 0x0, 0x66, '\x00', 0x100}, {0x0, 0x100000001, 0x6, '\x00', 0x6}, {0x101, 0x5, 0x6, '\x00', 0x8}, {0x4, 0x80, 0x6, '\x00', 0x800}]}) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) write$nci(r15, &(0x7f0000003600)=@NCI_OP_CORE_CONN_CLOSE_RSP={0x0, 0x1, 0x2, 0x5, 0x9}, 0x4) 2.99023825s ago: executing program 0 (id=8856): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000001c0)={0x28, 0x1d, 0xfffffffb, 0xffffffff}, 0x10) bind$unix(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a0000000400"], 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x54, r4, 0x1, 0x0, 0x3, {0x22}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}, 0x1, 0x0, 0x0, 0xc0}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'virt_wifi0\x00', 0x0}) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r6, r5, 0x25, 0x6, @void}, 0x10) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r7) recvmmsg(r7, &(0x7f0000008bc0)=[{{0x0, 0x0, 0x0}, 0x7fffffff}], 0x3fffffffffffde9, 0x10002, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x10448) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=r2, @ANYBLOB="004058040000000000000000005c00000000000000a2cf305a5d489e9168ab72793d2d4d5b69fd673600b53ace33cb29971b2be2d479fb3c2f8deb81cfdbf57430bae3aa2090d43519772933b211f5a95a55eaf2b95477776e21b2fc16a1678719a60699f332939f3ffac0cd020e997d5a7e0339b31f0047003261e27714a8ed4d73e4e28ab419d3ba6cb954fbdb69a2acc3e8798d063b0cdc4a45966890367fad1c", @ANYRES32=r5, @ANYRES32=r0, @ANYBLOB="03000000020000000100"/28], 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r2}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x21, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7f}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@map_idx={0x18, 0xa, 0x5, 0x0, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffff9}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xc}, @jmp={0x5, 0x0, 0x0, 0x9, 0x7}, @jmp={0x5, 0x0, 0x6, 0x5, 0x0, 0xffffffffffffffe0, 0x4}, @ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000600)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0xa, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0x5, 0x3, 0x9, 0xe}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000740), &(0x7f0000000780)=[{0x4, 0x4000001, 0xc}, {0x2, 0x4, 0x1, 0x1}, {0x5, 0x2, 0x5, 0x5}, {0x4, 0x1, 0x1, 0x1}, {0x4, 0x3, 0xc, 0x6}, {0x4, 0x5, 0x7, 0x4}], 0x10, 0x29b7}, 0x94) r8 = socket(0x840000000002, 0x3, 0x100) connect$inet(r8, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r8, &(0x7f0000005240), 0x4000095, 0xfffe) syz_emit_ethernet(0x106f, &(0x7f0000000a00)=ANY=[], 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001ec0), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x3c, r10, 0x1, 0x0, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x10}, @TIPC_NLA_CON_FLAG={0x8}]}]}]}, 0x3c}}, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) 2.74029716s ago: executing program 0 (id=8861): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)=ANY=[@ANYBLOB="b0000000", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fbdbdf2501000000080005000400000008000400e8040000080006007f0000000c000280060002004e21000008000600050000006800018008000b007369700014000300ac04000000000000000000000000000014000300ff01000000000000000000000000000114000300fe80000000000000000000000000000c080009003700000008000b0073697000060004004e20000008000900d592d45a123dc7e01b594d00"], 0xb0}, 0x1, 0x0, 0x0, 0x40005}, 0x24000081) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_FWD_SREG_ADDR={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc0}}, 0x0) 2.627747526s ago: executing program 2 (id=8862): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e22, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="c10e000018001f06", 0x8, 0x4000000, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a013000040000701fcffffff00000100017c0000040042800c00018006000600801c00007c13028078131480731306800c00010000b424d7d58bc8453e"], 0x13a0}, 0x1, 0x0, 0x0, 0x20000044}, 0xc000) sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000010a"], 0x14}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x3d, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWOBJ={0x0, 0x12, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, @NFT_OBJECT_QUOTA=@NFTA_OBJ_TYPE}], {0x14}}, 0x4c}, 0x1, 0x0, 0x0, 0x93a162fb1f463ef1}, 0x0) 2.624558492s ago: executing program 0 (id=8863): epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) r0 = socket(0x2000000000000021, 0x2, 0x2) shutdown(r0, 0x2) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$int_in(r1, 0x5421, &(0x7f0000000140)=0xbc8) readv(r1, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/68, 0x44}], 0x1) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x2000000, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f00) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r6, 0x6, 0x24, &(0x7f0000000040), &(0x7f0000002000)=0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000040)='highspeed', 0x6) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) getsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f0000000840), &(0x7f0000000880)=0x4) sendto$inet6(r2, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x604ab000) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000007c0)=@filter={'filter\x00', 0xe, 0x4, 0x638, 0xffffffff, 0x0, 0x188, 0x188, 0xffffffff, 0xffffffff, 0x568, 0x568, 0x568, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0x160, 0x188, 0x0, {}, [@common=@mh={{0x28}, {"4dd1"}}, @common=@srh1={{0x90}, {0x29, 0x1, 0x40, 0x2f, 0x7, @empty, @local, @mcast2, [0xff, 0x0, 0xffffff00, 0xffffff00], [0xff, 0xffffff00, 0xff000000], [0xff000000, 0x0, 0xffffff00, 0xff], 0x2}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x7, 0x9}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @private=0xa010102}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, [0x0, 0xff000000, 0xffffff00, 0xffffffff], [0xff, 0xffffffff, 0xffffffff, 0xff], 'ip6_vti0\x00', 'hsr0\x00', {0xff}, {0xff}, 0x67, 0x57, 0x1, 0x3f}, 0x0, 0x168, 0x190, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x8, 0x86, 0x2, 0xce05, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, @private1={0xfc, 0x1, '\x00', 0x1}, [0xff000000, 0xffffffff, 0xff000000], [0x0, 0xffffff00, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0x0, 0xffffffff], 0x1a40, 0x800}}, @common=@frag={{0x30}, {[0x101], 0x7, 0x8, 0x2}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0x228, 0x250, 0x0, {}, [@common=@rt={{0x138}, {0x1, [0xc43, 0x5], 0xaa, 0x0, 0x6, [@empty, @local, @mcast1, @private0, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @multicast2}, @empty, @loopback, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2b}}, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @remote}, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}]}}, @common=@hbh={{0x48}, {0xfffff70c, 0x0, 0x1, [0x8000, 0x9, 0x8, 0xfffd, 0x1, 0x8, 0x9, 0x8, 0x6, 0x3, 0xff71, 0x7fff, 0x9, 0x1d8, 0x101, 0x5], 0x3}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x698) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff87}, &(0x7f0000000000)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000740)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, 0x0, 0x31}, &(0x7f0000000780)=0x40) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff}, 0xc) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r7, &(0x7f00000002c0)="0d922b3ba8e5ae0c9352f8543bce466b311d1527d92477b2d0d2a1bcbb90496beff541e5b8f39661e4f6fdac1bd657dfeba9df3ec39bca42a3263be2f468e48a7e4fb152fc756c8bf79093c6669480bb66b090c590e64c2aeb1b67650ec04bdf33ec5e0944083d1d8d", &(0x7f0000000340)=@udp6, 0x1}, 0x20) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x20000000ec071, 0xffffffffffffffff, 0x4000) 2.150786873s ago: executing program 3 (id=8867): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r3, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3d080045000028000000000006907800000000000000004e234e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="c11001eb56000000"], 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@setlink={0x28, 0x13, 0x4, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, 0x8, 0x927}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x3}]}, 0x28}}, 0x40010) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="340000001000000425bd7000ffffffff00000000", @ANYRES32=0x0, @ANYBLOB="20c10600010000002c8e99b1ffffffff0c002b80aeff0800e606d98737a0a8e2f983a0029e56da788108053141fb5618a7ffadc1be6389f94c8ac230b33890522f141e74d01b041cc6f82dde568b469d549fe3faa8c284a7296bc17fd082f5979d9edbafb7168d7061c021297384dd3b6aa2ddf5bfa3982e1c8ddc933cf01846d18ba5ed86a47952a5b3c1849cc49a36ea6fe028f3608b44eb8691f19352aca5a1408f7a786a4de81fb4db394d20e7328ee2e6cf6d079afebe521eb49b95d478c04b8a6a0840ade6ac4df6136d4e99145c7d1592608b4cb04d9c7e17448e0ea523f8410c096a55ae40a2a834731ed1661ea7ea000000000000000000", @ANYRES32, @ANYBLOB], 0x34}}, 0x4000) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)={0x1c, r10, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x4}, @TIPC_NLA_SOCK={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) r11 = socket$inet_sctp(0x2, 0x5, 0x84) close(r11) r12 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r12, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @rand_addr=0x64010181}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r12, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000380)={'macvlan1\x00', 0x0}) sendmsg$nl_route(r14, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbee, {0x0, 0x0, 0x0, 0x0, 0x40c35}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCRYPT={0x5, 0x7, 0x1}, @IFLA_MACSEC_PROTECT={0x5}]}}}, @IFLA_LINK={0x8, 0x5, r15}]}, 0x4c}, 0x1, 0x0, 0x0, 0x28001}, 0x4008800) sendmsg$inet_sctp(r11, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="2000000000f2ff0084000000020000000a000400230000000b000002", @ANYRES32=r13], 0x20, 0x404a055}, 0x0) 1.956554806s ago: executing program 1 (id=8869): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x1a, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5}, [@map_idx={0x18, 0x6, 0x5, 0x0, 0x9}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0xa8}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80}, @cb_func={0x18, 0x4, 0x4, 0x0, 0xfffffffffffffffa}, @jmp={0x5, 0x0, 0x7, 0x3, 0x1, 0x4, 0x8}, @jmp={0x5, 0x1, 0xb, 0x8, 0x6, 0x18}]}, &(0x7f0000000380)='GPL\x00', 0x3, 0x8, &(0x7f00000003c0)=""/8, 0x41000, 0x1e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x2, 0x2}, 0x8, 0x10, &(0x7f00000004c0)={0x4, 0x5, 0x6, 0x4}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000500)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f00000005c0)=[{0x0, 0x4, 0xa, 0x8}], 0x10, 0x9}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffff8}, [@call={0x85, 0x0, 0x0, 0x36}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3}]}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r1, 0x0, 0xe, 0x0, &(0x7f0000000040)="f7edad00"/14, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8}, 0x50) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(r3, 0x0, 0x0) r4 = socket$kcm(0x11, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) (async) setsockopt$sock_attach_bpf(r4, 0x107, 0x14, &(0x7f0000000000), 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f0000000340)={&(0x7f0000000380)=@ll={0x11, 0xf8, r6, 0x1, 0x9}, 0x80, 0x0}, 0x88010) (async) getsockopt$IP_VS_SO_GET_TIMEOUT(r2, 0x0, 0x486, 0x0, &(0x7f0000000440)) 1.798856806s ago: executing program 1 (id=8870): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000012000000853f00001500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.718752566s ago: executing program 1 (id=8871): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f00000001c0)=""/222, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff97}, 0x78) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000380)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) connect$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x2c, 0x3, "7339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c7fffffff500"/40}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0x8, 0x1, 'LED\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb8}, 0x1, 0x0, 0x0, 0x24048014}, 0x20040040) 1.718418769s ago: executing program 2 (id=8872): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711042000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2f, '\x00', 0x0, 0xf}, 0x94) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$inet6(r0, &(0x7f0000001680)={&(0x7f0000000080)={0xa, 0x4e22, 0x1, @empty}, 0x1c, &(0x7f0000001580)=[{&(0x7f00000000c0)="e9c14788cfd3fe23d8643feadc7e10f48bd0140663e24c2f807c221748053c1b642482753a27e67001c04a352c2b167a567faee43a492445d85203d9e2f6859a92001ee7ad6ef70fc53497800ba745002b45d1ea9bbfdcad9fa5f8f8ed0a6652d285c928c665eeb248638bd24221cf7f483422285ea73b228c3cf95fb82fddf417d0a54eea909e994811b6ecddbbcca798e617275746d9ad35e083134a7dc5f08c4d5a8618ab72744eb1", 0xaa}, {&(0x7f0000000440)="01b094485a6e15e06fb1685f7703c1948e2ded27ce66adff55201c6db88b97f82cf58b95bcf5ff1a0132c71cc1704354e96b9f2f52701ef7493c805f68e1896e72775b183d00bd9b1895af8d562c9cfeaf0493f9dccf07b39c324dfdf6d4332075412eecb7433b45aabf2b0873b65b92092f6596b891fd3346d9f4d87fe758752ce553ccf59f3c3ebf3796996d087ce8a92d7e24a2e8a3d7c1a555115323c4713427855971889db2c43bf1bb0091f7771e0dc512b42430a7b30c69a4ccbf6a7766674ea3880ad157bfd712dae832e9f4494b10835aab01cf14e61775c6c202f3a5d388e7805c4343857d73c2d39e62abd5d948a813e4b279eb1c82dd583505ee8054c5d614f864ef348e9e8dbda843425a92ffcfc15fe6432d40b5d98762ece1da0315c1596c2016a749aeac07be3db985aebcc3cfd4b24a7097a059049129e450d60bcfe2c8e2b131f80e3fbc5d8be60e481d98293e983bb408358ccf1980ff0ed7bc8a8a73be4c4b1cac5d006240e69f14407aabf30498b5dd9f750d847e8ddd5d587075204ecce6e089075828efe943d4ee07d47d9116f23270068b5fb4ffcf4fe01d1d590b06ee62a6432b726207aadf1046a0f95770b1e71356fbea6d758813999526ba8712f4e28de6c7e40870b482cb7226fd45f83e2fd9d3241d5f150ac3a28f313fe64af35abe6a79a0a5f878406589066709b23a9442a75a53a90af1d5048e79fd80725599bc27d651221054d2264a9f3dbecadde6d701188feb6412d9da33f2eabd8d7e50cdf1d3e71b1cbfcf1ae567a857b1b44192bf63f49cf8852c46a2daf62bf8231ecc80dd18dca6a94163582a68e18d23a646c0aa5b488d97a29178063f1f07ec1d68ac9091ae0f2dfcff8bf13772136d678965e8985b6ddb2ba9fd70aa0e06cb7df961e551d967f97d8dabe0941797086640f1e8e29762619eec2c079118aaaca2bfc633285d63046248bcec240da8383b609c175f93d849d9cbc88adb3e0130dcf0870c577d76a5eda9512723eecdece8bb0cce1f593455074fc112633c042fd4c947dca106084289e84477d516a8f0496b128e3e11d91ffe99d711a31acdee2c50423951cbc817b6e7b9b2a9a5337fbe3e88e640c88977a275af5570957da1f0c1bf34028434b0225d34dff3b9d27396c693b4d5dac1ef47b79b41abebdc2e2703665ec59f71d2cdd55a878d6f1715a5fb25b6e2065cfa6f1778508e57161cc2330469ed9ea21f967253d7ec824d48a1f6f00f7d73891242bd59f8114e1a5d1b1491232651e01b98ee78d122f47f9e6bd6fef30e352a3e044c6f73c345499017a5fc4e74c9a5aa7f37166ba0cccdb2e12f8fe0b4276b3bc1ecd32faa7158c5e49860ff584632ec895376bc8f73f4ded051fe0c8ae55ad4fe5e1f7175f0d4ae75f01434bd099d08440f233ea47a2f37a0db55a690a0d55823a6069e83db050a968c9784f046bbb9304539d06814cbb501824c2da6c753dbb04c0d7339bc99160ca5056ceeb07d0c43159bad9a68d3ac7bc3e6dd94178ef852b28e74c63ead2c31013f3359cd520155d0be034b5d257171ce5eba08cf9147d75c4f5807ffc5b0d1cdd176d8f35a2e21b9b7b50f5834fdf3c34c935552b07cf9ca643d957a019d1593cad72b9932592d2725014fc3025befdb7885bf1fd60d623bc96ffd1a189d6bebb316cfb5df6ba15d76d7545169f0d6d85058970261483cf73e568aa7b9eb1a8ebf208fc354673a4cdd0ba2bddfc04f4981f85bc5225d9687c421ca953e71d7323750e6f2dfd861a93fb3890df93bee67d8f6cc206b3cf47117b5574e26d2f6670e7d04f4a537a1df922bab2c13416a33a4f617c98f9484f9cf150f6945a8a6898ea4aa1d6d41840174316207a882d1187325c62306855b0527ffe99f98a876c39f87e39c5a17e0972a638b6e2ef698438f7e4433ed519a2ce1611d184b51c2b407b085d0e7482e910ef9fd3b7e84ee5ab4123f616bfda4d00f274b8cfa25beb3f84e188902d3d92eaa58f767ed9864a8479fb1ec887910c969d0ec2cf2295f55393d2531f2a4e2bcc256df152fbe9990a2961c2caf4e831aae052f6a6d2b23da413df63921f8bb8fcf2bd9d8ef5be20b9e3c9418d696259344ef59bc1bfbd5e06da8493be1ba4b0f59e6164a33a948d52545851031e324d01c02f9d39d10e1ebb64dc071cbea730bdcb782250008028647c2a5702f6624740f3d9c04f1f7d9cb32fc3c49b518e8fbb55f89034715faa495198a05f16b9fa373e92237b61e72e64d312e632b4a947f44cb7919d63983cb6a3028b9f47dbee636ae3f9078c5822fc880c400ec1e96d4fc4976e9ce4dd40fe1ae78d9ab97943c0548b597518b29f4c7a3c3bc6dae12407da9901e3976e8a4908c66a781558668a27097a4931f99a4dba06c04eedd4acfccb42e129d63f8bd0f410cb678c9003114ca56a4c6018b6b067a89775ad1083ad0bd5d646761ef706e968fa7b61bc21fcd64a5db7604eeace2cad6c67104be4a9594b35b170ad64d662dc7204943f5157e57002ee79e95fcebf5fa657cd3419ba8715362c374e931434d4f21ba07e2b261675e3c101b97c1a7d786f9d86ab3027fb1fa7cc441415bc38dc25fa74ba0ac1c80f4c7751e4731f47b0c69dd5214de57fdf71b72a5854bdd19519aa020bbab349b199feccda092496e24cdf1965d5012e2da52d1e2f82626df495395711766ea0cb3bb9174d763b38ccce51a3099096e67505d1923a39d198dc6c941c9b43a3f674929c7b039882b7428c0be62edb0cc2ddfc69a2b6229221fd35a55890a2c31eacd7a646018006d9512f4fea75a0f2a1105d528b55b3f7d46dcf475ffa217621b4a58892614e7bf8620927a8f496d78c4cb9273daac364b94b65e4082cd281b81c0a5847660108a8b5eb9c42cffb86b5d6c30ec802f37930822aab400edefa0d7dcc18de74f2b6f3a87701a7596b1dd3b3f4e97f22635fe3bef5c90fefdf8f2d86d16779922ae030dc9a319f35af99333ca2871bef46d777a8c3d4d022231e150d1942c53903b989d8b1c84132b9862b7c11aa7ee54e855eedf5434150a6c8daee6cc4aabae2b236329fe6c7d6dcdc57310fbd18b186d7c3d91be51bad30df2909e067b8c09f0cf48f1f114d648f805b88120624a7ba3b8532d1d3e7d49235f0bbe578b1d5b2ba9e61fc078ec5e0676a7d49bc7386ff9afe56ebe8b93e35f57e0a9576052a922e3410249a3873f1fc1f33984ce72caa573252ea2e701f7ecde0f695fb10d7e88d6b898a53c8b519adc49945e097d3470529742d783c45d1482c202323278eb35b21c807d7cbc3bbdadfe3c43227c57bdc2ffe13d8cdd9564168216b653869e09ffd50261614f49928ca53385204ee788dccb2d13e60f08d9509461b2c607bae06272df08108e9dcba234b394091585d488e8bf452466c68dffc1f3d1363eb0fbbfdbe8b7bee718891e882bab0e8b0771b9e5c2d04a0c2a8a4db93b861a18bd0de889a76f1066982b0beaab11ac01d8e60a20e29212d0817d931f576dee03ddc411dd211fb39ccd5b053a5d903a8444810af239b4318f5248132963660f9f9b23867bcb89ee259c52c7a83ec27a04efc2b0a90a441357c27e870b1c003407faf61a9ce6ec04d4b2c31abdd5048b1436a1a7aa12ee2e46b78285a9c3f9bf217da205658b417eded3882687972ae78db8697c8e11f57c1ed49dd8f756c66a37641644e2915ccdd54a0d28e215899000bce99db63342e42f7764144d4bb8fc815f71143a84f23fe6c77337bdc44e32f53f4de8841d9408fd7e3da27ef6417b5840f40f1058d9bbbb18a3c93f108bc35d74af36af3879b5bce00b618c9ea245303a0a7f8388dbc4a506bdbd18e1ac440e86348775c6f57133977a7bdc7ed8653c3c7084963d67a53e68e435543aff5c42ec32b3f1325535be085b0aec06a83be8af67e434f1a6329e5c17bb232435f2280c186118391c43c2338fe266afba4f84f5be0ba29b1f1a5b4fc836082b7f4bb0aab34a48b9256a4df811cfd9156121e63fdf87c76a8ada8c4d2d2a59458b312e1b2c88742317d5623e2b68cfdef87d91b09baa7ed8b47dbb3e9690127c243834ddd73b7285785ec4c2291d9241c7970f8893a1365c70cd36c954aea9ac543530f2b109561108b69dfb493639eff7c61e2bf16a6901995143bb2b3cdfc219bed31502f3f14de4b7501f2e26dff5631262667484381199c8fe4f6cb19411bff02cb816d6ac966feacc7e56511ecaa8b3ffeee8a7677dd7830ffe3aae2f7087edea11c55844dc61ce6ccb68a62826703e0c3dac0d9ba8f13d4d4727e435971534425a694da6053bb25d28aad1f6a93e4eaf35f5a208874a82dced3e7a8e775bbb276bffdfed34adef9cd9e3e88e7619832874bc906b676dc137a9fd4b2d6950e566674ad1c17c9c1a2dd561568ebf542acd51a1a853fd113d72b405d3a69259fc6d546044b5c3eb0b3f3ac5a2ad13b02b332bf773225f8a4d1088dde6f296ccdbcdb0303eb4258ab784b94efe71a26b75b2d3f816949890e68a2521d0ce64d7847e87a77f7b5e7eb725e1932392a52c5022e95ae5844e1aba015e48103c698663cf4c042bb87bf6c8406364bafc4c0e414f9ecc515b9fd656b140b514166cfd9ef34dd76dc4fb86d5024da1b9a570ecdf2ede21d5b11e971ce60f94a7b6b4eaceb3bb735b45145ead1d59a8b383d7dd456e4dd9ecd682c9e1b81ae5c2b3a3ee4dd4e4bc6a68fdf97e1a56691af866dd98f798ef961d55daeb58810e38228ed25b6f5b27adc3c19c2bc993b3ea52d5a43995ce4c7ec367ae3a764490847bc3b17c37e6b3b9e27041d37002976c8260e1def12c5f03dfd4de475b0771cecd2c5e60d6e6763f2d47c9d8452158b6fc54b8b21bac38f7a83e001704b2e4a843fdd49990df5b6c3aac6df224b68ef0afc6e169351932265830db39f5bc72a69fb6de612df925cd6bfdacdf7d2b7bda52030095ec62ee3a8728492c9294110d6650813e3301a7236363557351fb76ef030d331bcae4b7406f5d4cca902e89817bbe2ebff531d1122396d5e73b1536749d1ac64c35273fac6ddfdd5dfd8a0a3dc443c809fd85238683466d95600f6c048d5b57ed3bbc8b24e84081097d5405988b8054c7a9bdf134727e2346b7c027375e93cddf991b68c356b4fee972f178e8816709e794fe1bf383ff1a0b632115872eb91161b22c89bb402cf31dc0ae7c25e4de1c0949f10b4c378cc47a203eefff45e7b087d59377e1a79a080181436d851f4d391e1a657efa7344582dec650872679828a2eb3288ae6a4be9e0a72a89358208c34ebd965ee7ea443c1b73bb5e1fb950e2118d256d472df54abc685a126e701fdfcd461ca0a26012dfcee6e09283b0d1c634122b183cbcf34ae09872cb4453db92b2a37264339fed1572ab24511b26a80f50a9501655603d51d645842672dd247e95983952f82763a81dc06144068ad38418a7cad77e25599c1fd5162383718afa4a3a132a501f6e1584561e0daa08776082a5ca92a352099b0a564b68deeb4861809a0c77aed7b4621b431ba4fbc05fac77356deaf2754de0d32649e3c82a1c06e5456e96f2b93aab0d7329c9758cc17614a1398729a212771cfc2f77128e17431fe3fd403aa343c6d295342dbf5ac486ceec66e44162227fcf717dea843619155f899eeb6a1eab1f5ae23e960c9564e6b57b1c993dbcc88b9723e48a2c4c18b1b9f703659a8ff7cd90ddc0110ec229d2fa7a7f1449e16029e480ca89d681856b57146d9852e829e66e", 0x1000}, {&(0x7f0000001440)="7b0b3444c7cbd598bd637b260a2e1ecaf1d2050a3d4ace1e81530c1dce02c15e7975deba6af88774da2070903ab1d26fab570c12b81a4fed3ae27bcced1a4c052790a4a6c42ff25499ad6c38a5b2dfa08968363756b376ddb53927f1d7208cc005f8b2", 0x63}, {&(0x7f00000014c0)="dab9e48eb4115fa54d59693f8968aafd58f46d38e3e241e3934d7024810a42a2d1927e323b43286279c254f6e08820d1936df9a8c5582edc2366d5a65cf6dc3b4cc097eea22d39c30d1daf2763ac1acc085968407d2de2f08704193d477ac78b125a2b9712c9e0095e647beab26d30a68769d1ca8043acd613e4cf13fc9f874c6fe50c3597f84ed44b45315bfc47ec60f97a878e398d1649893df06ea92757899c1b029ed20a8d99", 0xa8}], 0x4, &(0x7f00000015c0)=[@hopopts_2292={{0x70, 0x29, 0x36, {0x20, 0xa, '\x00', [@calipso={0x7, 0x38, {0x1, 0xc, 0x7, 0xfff7, [0x33c, 0x2, 0x2, 0x3f, 0xea0, 0x85]}}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @jumbo={0xc2, 0x4, 0x8}]}}}, @tclass={{0x14, 0x29, 0x43, 0x51de}}], 0x88}, 0x4) 1.591738391s ago: executing program 2 (id=8874): syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd2d, 0x1, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x0, 0x300}, 0x93}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x3000000, 0x40000000}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8000, 0x5, 0x0, 0xfffffffc, 0x5, 0x1}, {0x0, 0x8000000}, {0x0, 0x0, 0x800000, 0x0, 0x6, 0x80000001}, {0xffff4c74, 0xc3}, {0x0, 0x5, 0x0, 0x9}, {0x5}, {}, {0x0, 0x10, 0x0, 0xfffffffd}, {0x0, 0x470a, 0x0, 0x8000000}, {}, {0x2, 0x0, 0x0, 0x0, 0x6, 0x6}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x1, 0x0, 0xfff}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0xd9f7}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x20000, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5, 0xfffffffc}, {0xffffffff, 0x0, 0x0, 0x0, 0xfffffffd, 0x60569add}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff, 0x5, 0x0, 0x0, 0x4}, {0xffffffff, 0x0, 0x0, 0x0, 0xfffff800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, {}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0xfffffffd}, {0x0, 0x5}, {0x0, 0x9, 0x0, 0xffffffff, 0x0, 0x2}, {}, {0x80}, {0x80}, {0x0, 0x0, 0x0, 0x5, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2a}, {0x0, 0x0, 0x8}, {0x0, 0x2, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x8, 0x0, 0x3}, {0x0, 0x9}, {0x0, 0xffffffff, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x8510}, {0xffff}, {0x2}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0xfffefffd, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5}, {0x0, 0x0, 0x2000, 0x0, 0x0, 0x8000000}, {0x0, 0x7}, {}, {0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x9}, {0x0, 0xfffffffc, 0x200}, {0x0, 0xe3b6, 0x0, 0x200}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, {0x4, 0x0, 0xfa48}, {0x0, 0x0, 0x0, 0x0, 0xfffffffb}, {0x0, 0x0, 0x800}, {0xdb3, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x3, 0xfffffffe}, {0x4, 0x0, 0x0, 0x4, 0x9}, {0x4}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x7}, {0x0, 0xb}, {}, {}, {0x0, 0x5, 0xe}, {0x2000, 0x0, 0x0, 0x0, 0x0, 0x56}, {0x0, 0x9797, 0x0, 0xec33, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, {0xb, 0x0, 0x0, 0x0, 0x0, 0xfe1}, {0x0, 0x0, 0x9, 0x0, 0x4}, {0x0, 0x0, 0xfffffffc}, {}, {0x0, 0xfffffffd, 0x0, 0x0, 0x8000}, {0x6, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x7f}, {0x0, 0x0, 0x0, 0x8}, {0x0, 0x8, 0x0, 0x0, 0xfffffffe}, {0x4, 0x2, 0x2000000, 0x2, 0x0, 0xfffffffe}, {0x0, 0xfffffffd, 0x0, 0x0, 0xe9d, 0x58a}, {0x2}, {0x2, 0x9, 0x20000000}, {0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x81, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x7, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80, 0x2}, {0x10000008, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x200000}, {0x0, 0x10000, 0xffffffff, 0x0, 0xfffffffd}, {0x3, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffd}, {}, {}, {}, {0xfffffffb, 0x0, 0x0, 0x0, 0x8000}, {0x6, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x2d, 0x0, 0x10000}, {0x0, 0x3, 0x8000}, {0x0, 0x8000}, {0x0, 0x0, 0x1010000}, {0x0, 0x80000000, 0x0, 0x7fff800, 0x87}, {0x0, 0x3}, {0xffffffff, 0x0, 0x0, 0x0, 0xd}], [{}, {}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5, 0x1}, {}, {0x4}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {0x4}, {}, {}, {0x1}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {}, {0x5}, {0x3}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {0x1}, {}, {0x1}, {0x1}, {}, {0x5}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x2, 0x1}, {}, {}, {}, {}, {0x5, 0x1}, {}, {0x3}, {}, {0x2}, {}, {}, {0x4}, {0x3}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x200c0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b40)={'filter\x00', 0x7, 0x4, 0x3c8, 0xe8, 0xe8, 0x1d0, 0x2e0, 0x2e0, 0x2e0, 0x4, &(0x7f0000000140), {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}, {{@uncond, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac=@local, @remote, @empty, 0x8}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350064756d6d79300000000000000000000008000a00", @ANYRES32=r3, @ANYBLOB="b759cdc0af94680674f451c513371f4927b49175dc9ee9db8eb8eb5fcaca9296def45a15b56382a7441ce4e79983c157442c23fe123fd4468ca55c510635f9c28dc8b0648bf29681f9ab1313f4ccad8e0ded61a6f250426f9eac"], 0x3c}}, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r5 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f89974785ae0619b77c6585f678ac92a3b6b4148f56b43c3dd75d75f97c8f92f60a2def458df05e2fbfb3e849b2b3cffd4f29446ae60dd76654b2639b2bc14350706214a6ab7a712d4317fbc3ca01d0d3ed6110b3775903141a5091a4d3db8eb335414fbdb288aba73aaf6d18000a3a2a069cf7f9402e1425bb6bc370576aa1faea0fe222671ecf99038fce8dba53dcb11f87cca"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="1100000000001d0000000000", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x8}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r7, 0x0, 0x6, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000280)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) 1.468635788s ago: executing program 1 (id=8876): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x38}}, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r1, &(0x7f0000000140)={'full'}, 0xfffffdef) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a60000000030a010800000000000000000200000a0c00024000000000000000010900010073797a300000000034000880"], 0x88}, 0x1, 0x0, 0x0, 0x880}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xba0c29e690d41d4b, 0x20000000ec071, 0xffffffffffffffff, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) getsockopt$netlink(r3, 0x10e, 0xa, 0x0, &(0x7f00000000c0)) getsockopt$bt_hci(r0, 0x84, 0x15, 0x0, &(0x7f0000000000)) bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r4 = socket$unix(0x1, 0x2, 0x0) sendto$unix(r4, 0x0, 0x0, 0x40000, &(0x7f0000000040)=@abs={0x1, 0x0, 0x4e20}, 0x6e) 1.404366631s ago: executing program 6 (id=8877): r0 = socket$inet(0x2, 0x6000000000000001, 0x0) (async) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) unshare(0x20000400) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_RELOAD_REGDB(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)={0x14, 0x0, 0x1, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x40000) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='wlan1\x00', 0x10) (async) mmap(&(0x7f0000001000/0x200000)=nil, 0x200000, 0x2000001, 0x2011, r0, 0x0) 1.204795811s ago: executing program 3 (id=8878): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'pimreg\x00'}) 1.19789422s ago: executing program 6 (id=8879): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f00000007c0)={0x80, 0x0, 0x100, 0x2, 0x3}, 0x14) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r3, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000500ac1e01fa070004"], 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x20040040) 926.568321ms ago: executing program 1 (id=8880): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791028000000000071041d000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r3, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r3, 0x0, 0x14, &(0x7f0000000080)=0xd70, 0x4) setsockopt$inet_int(r3, 0x0, 0x12, &(0x7f0000000280)=0x40, 0x4) recvmmsg(r3, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000001300)=@deltfilter={0x34, 0x2d, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x9, 0x5}, {0xf, 0x6}, {0x2, 0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040054) 917.572516ms ago: executing program 3 (id=8881): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000012000000854100001500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 915.545533ms ago: executing program 6 (id=8882): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x6c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x1e8f7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_IFNAME={0x14, 0x3, 'macsec0\x00'}, @IFLA_MAP={0x24, 0xe, {0x0, 0x2, 0x3, 0xf74b, 0x9, 0x6d}}]}, 0x6c}}, 0x0) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x3, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xcd83, 0x0, 0x0, 0x0, 0xfffdfffd}, [@call={0x85, 0x0, 0x0, 0x27}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8}, 0x94) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000bc0)={r4, 0x0, 0xbe, 0x0, &(0x7f0000000440)="18d26a3d9673399025aae4121e4265abc5434ea3e4095dd52ee7a7385e384e00db7aff30d1fde36edd282423ec5516915e7a1a942baf81e1ed151f088758c1eff8ec2cb7d3e7255ff1ffdc91b59eb3f44edfc2e71c34b46b323fe3519f8f1d3a499983060062ba9da8648a68b917c073a94f052279f4263fbb7140df1bb8b050ef6eadc55f3bedb07e45a0f64715ce4ccda7f17b410a51bbae8c2e0d579e184e193faabe168435340800000000000000b4f988fe9b261ba8da1badc8a61b", 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)="a2", 0x5, 0x0, 0xcdd1}, 0x3b) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xcd83, 0x0, &(0x7f0000000100)="e09f547ed3f02dc1fd3d6487775b", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 680.497331ms ago: executing program 3 (id=8883): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="4600010002"], 0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000000)={r3, 0x3, 0x6, @remote}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @broadcast}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x2, 0x70bd26, 0x2000, {0x0, 0x0, 0x74, r3, {0xfffd, 0x10}, {0xb, 0xfff1}, {0x2, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x3604c8a4}, 0x840) close(0x3) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r5 = accept(r1, &(0x7f00000000c0)=@ieee802154={0x24, @short}, &(0x7f0000000140)=0x80) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet6_int(r4, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) recvmmsg(r4, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x4, &(0x7f0000000000)=0x10000005, 0x4) sendto$inet6(r4, 0x0, 0x0, 0x20000001, &(0x7f00000005c0)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) 459.257428ms ago: executing program 6 (id=8884): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x5, 0x14, 0x0, &(0x7f00000000c0)="259a53f271a76d2608004c6588a80a38667d2f15", 0x0, 0xd0e, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x8, &(0x7f0000000000)=0x9, 0x4) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0xf3a, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000130000005d0000000000000095000000000000000a621cf434b9eaafdc0a00e9bfde908990817b364e51afe9c81a97f0570759f1cae63487ff68fffffffffffe8e3932e2b7185a25a4cf8a9456aa8a701c318c67edb6e9330b53c0eeba8644311ba75411890700000000000000d8e5b1dc91c5499bea0977"], &(0x7f0000000000)='GPL\x00', 0x5, 0x487, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b70200001a000000bfa30000000000000703000000feffff"], 0x0}, 0x94) r4 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x541b, &(0x7f0000000300)={@loopback, 0x7d}) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f00000002c0)=0xffff, 0x4) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv6_newnexthop={0x30, 0x68, 0x309, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NHA_BLACKHOLE={0x4}, @NHA_GATEWAY={0x14, 0x6, @ip4=@multicast2}]}, 0x30}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x0, 0xd00, 0x0, &(0x7f0000000380)="263abd030e98ff4dc870bd6688a8640888a8", 0x0, 0x1200}, 0x28) r6 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x180000) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r6, 0x84, 0x20, &(0x7f0000000140)=0x3, 0x4) 347.687161ms ago: executing program 1 (id=8885): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x3, 0x8003}, 0x4) close(0x3) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) listen(r1, 0x5) r2 = socket$vsock_stream(0x28, 0x1, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7a, &(0x7f0000000340)={r6, @in6={{0xa, 0x3, 0x3, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000000240)={r7, 0x1, 0x1, 'g'}, 0x9) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r3, 0x20000000) connect$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) syz_emit_ethernet(0x80, &(0x7f0000001900)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0000a0", 0x4a, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @dev, @loopback, [{0x1, 0x3, "0aaaa6ea9302f143fb935792a0bd0000000000000000"}, {0x1, 0x1, "1b45972501b9edb1"}]}}}}}}, 0x0) r8 = accept4$unix(r1, 0x0, 0x0, 0x0) sendto$packet(r2, &(0x7f0000000600)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c2847689e7fd3f3fe7bf05ddc63ff512d4074687760a5fbd1fc97777a6e55123f04cc8437b15f4b2c6f5027dcea15b6658d", 0xffffff3d, 0x0, 0x0, 0xffffffffffffff10) recvmsg(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)=""/74, 0xffffff78}], 0x1}, 0x10012) 347.013181ms ago: executing program 3 (id=8886): ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000240)={{0xffffffffffffffff, &(0x7f0000000040)=')\x00', 0x400000, &(0x7f0000000080)={@align=0x8, {0xffff, 0x9, 0xffffff8c, 0x9}}, 0x8, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)=0x5acd}, {[0x1, 0x2, 0x7f, 0x6]}, 0x81, 0x54, &(0x7f00000001c0)=""/84}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @loopback}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000000)={r3}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000002c0)={r3, 0x7fff}, &(0x7f0000000300)=0x8) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001500190d09004beafd0d8c560a84476080ffe00600004e22590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) 220.780583ms ago: executing program 3 (id=8887): socket$inet6(0xa, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000002c0)={0x54, r2, 0x1, 0x70bd2c, 0x1000, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SOCKETS={0x28, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x128}]}, 0x54}}, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000008c0), r3) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000000)={0x34, r4, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4051}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.events\x00', 0x0, 0x0) setsockopt$inet6_int(r5, 0x29, 0xce, 0x0, 0x0) 128.960153ms ago: executing program 6 (id=8888): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd26, 0x0, {0x60, 0x0, 0x0, r1, {}, {0xfff2, 0xa}, {0x5, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x7f, 0x5, 0x8bf, 0x2}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x5}, 0x800) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0x20, &(0x7f0000000440)={&(0x7f0000000280)=""/201, 0xc9, 0x0, &(0x7f0000000380)=""/147, 0x93}}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="08000000040000000400000007"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000016c0)={r5, &(0x7f00000005c0)="b8", &(0x7f00000015c0)=""/229}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xd, 0xf, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x566, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_query, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}]}, &(0x7f00000000c0)='GPL\x00', 0x1, 0x7c, &(0x7f0000000140)=""/124, 0x41100, 0x28, '\x00', r1, @fallback=0x3, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x2, 0x9, 0xf8, 0x3}, 0x10, r4, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)=[r5], 0x0, 0x10, 0x101}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010026"], &(0x7f0000001f80)=""/212, 0x26, 0xd4, 0xa}, 0x28) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r6, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f00000003c0)='%pS \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r7}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x10, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000001}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x8, &(0x7f0000000000)=0x5, 0x4) 0s ago: executing program 6 (id=8889): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"/492], 0x108}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000002b80), r1) sendmsg$NFC_CMD_LLC_SDREQ(r1, &(0x7f0000003300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="c0020000", @ANYRES16=r2, @ANYBLOB="01002cbd7000ffdbdf251300000008000100", @ANYRES32, @ANYBLOB="1c021380", @ANYRES32], 0x2c0}, 0x1, 0x0, 0x0, 0x4000}, 0x4040) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r3) sendmsg$IEEE802154_ASSOCIATE_REQ(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001380)={0x24, r4, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x1a}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0xc40) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xffffffffffffffe4, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, r4, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x2}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x4}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x9}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x5}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000040}, 0x20040000) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000500)=@security={'security\x00', 0xe, 0x4, 0x2b0, 0xffffffff, 0xe0, 0x0, 0x180, 0xffffffff, 0xffffffff, 0x218, 0x218, 0x218, 0xffffffff, 0x4, &(0x7f0000000040), {[{{@ip={@private=0xa010100, @dev={0xac, 0x14, 0x14, 0x3b}, 0xffffffff, 0xff000000, 'veth1_virt_wifi\x00', 'bond0\x00', {}, {0x7f}, 0x1, 0x1, 0x9}, 0x0, 0x70, 0xe0}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x551, 0x1, 0x80, 0x0, 0x0, "44207f21fb335bb5dc197999992553a22b5c00d83e6a57550cc76e817e3aebe34a72c58445cf96b430744be378f60bc9faad671849b1575e0b0bf92acb9ee2f7"}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x83, 0x6, 0x7, 0x1}}}, {{@ip={@empty, @multicast1, 0x0, 0xffffff00, 'dummy0\x00', 'ip6gretap0\x00', {0xff}, {0xff}, 0x89, 0x2, 0x2}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x4, 0x3, 0x7}, {0x2, 0x2, 0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) kernel console output (not intermixed with test programs): 3.7700 (pid 4682) Use of int in maxseg socket option. [ 975.111482][ T4682] Use struct sctp_assoc_value instead [ 975.115096][T18096] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 976.363692][ T8149] net_ratelimit: 30 callbacks suppressed [ 976.363710][ T8149] bond1: (slave bridge1): failed to get link speed/duplex [ 976.563762][ T8149] bond1: (slave bridge1): failed to get link speed/duplex [ 976.674923][ T4730] bridge0: port 2(batadv0) entered blocking state [ 976.684262][ T4730] bridge0: port 2(batadv0) entered disabled state [ 976.706934][ T4730] batadv0: entered allmulticast mode [ 976.714371][ T4730] batadv0: entered promiscuous mode [ 976.761819][ T8149] bond1: (slave bridge1): failed to get link speed/duplex [ 976.898257][ T78] bond1: (slave bridge1): failed to get link speed/duplex [ 977.023616][ T730] bond1: (slave bridge1): failed to get link speed/duplex [ 977.163761][ T8149] bond1: (slave bridge1): failed to get link speed/duplex [ 977.172639][T18096] Bluetooth: hci4: command 0x0405 tx timeout [ 977.185166][ T3321] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 977.195066][ T3321] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 977.239953][ T4587] Set syz1 is full, maxelem 65536 reached [ 977.323676][ T8149] bond1: (slave bridge1): failed to get link speed/duplex [ 977.379185][ T4761] openvswitch: netlink: Unexpected mask (mask=4400040, allowed=410048) [ 977.454946][ T78] bond1: (slave bridge1): failed to get link speed/duplex [ 977.648606][ T4787] __nla_validate_parse: 13 callbacks suppressed [ 977.648624][ T4787] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7725'. [ 977.944139][ T5837] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 978.123887][ T4810] syzkaller0: entered promiscuous mode [ 978.129382][ T4810] syzkaller0: entered allmulticast mode [ 978.150617][ T4817] validate_nla: 62 callbacks suppressed [ 978.150633][ T4817] netlink: 'syz.0.7735': attribute type 1 has an invalid length. [ 978.212347][ T4787] IPVS: Unknown mcast interface: vcan0 [ 978.220901][ T4814] bridge0: port 1(syz_tun) entered disabled state [ 978.228346][ T4814] syz_tun: left allmulticast mode [ 978.235324][ T4814] bridge0: port 1(syz_tun) entered disabled state [ 978.257520][ T4814] team0: Port device syz_tun added [ 978.316736][ T4817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 978.335845][ T4819] bond10: (slave lo): Releasing backup interface [ 978.343121][ T4819] bond10: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 978.361499][ T4819] team0: Port device syz_tun removed [ 978.372460][ T4801] lo speed is unknown, defaulting to 1000 [ 978.376667][ T4816] bond0: (slave bridge_slave_1): Enslaving as a backup interface with a down link [ 978.686608][ T4842] netlink: 52 bytes leftover after parsing attributes in process `syz.3.7739'. [ 978.824491][ T10] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 981.772285][ T4842] bridge0: port 3(batadv1) entered disabled state [ 981.792292][ T4844] tipc: Enabling of bearer rejected, already enabled [ 981.855637][ T78] batman_adv: batadv0: IGMP Querier appeared [ 981.861676][ T78] batman_adv: batadv0: MLD Querier appeared [ 981.938946][ T730] batman_adv: batadv1: IGMP Querier appeared [ 981.945634][ T730] batman_adv: batadv1: MLD Querier appeared [ 982.129358][ T4864] veth1_vlan: left allmulticast mode [ 982.244210][ T4864] bond4: (slave gretap1): Releasing active interface [ 982.320496][ T4868] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7744'. [ 982.341189][ T4868] netlink: 1 bytes leftover after parsing attributes in process `syz.5.7744'. [ 982.370141][ T4868] tipc: Invalid UDP bearer configuration [ 982.370196][ T4868] tipc: Enabling of bearer rejected, failed to enable media [ 982.413071][T12374] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 982.441058][T12374] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 982.473005][ T4883] x_tables: ip_tables: ah match: only valid for protocol 51 [ 982.508133][T12374] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 982.602164][T12374] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 985.043378][ T4891] syzkaller1: entered promiscuous mode [ 985.048987][ T4891] syzkaller1: entered allmulticast mode [ 985.055707][ T4887] syzkaller1: entered promiscuous mode [ 985.061368][ T4887] syzkaller1: entered allmulticast mode [ 985.253707][ T1163] net_ratelimit: 5 callbacks suppressed [ 985.253725][ T1163] bond1: (slave bridge1): failed to get link speed/duplex [ 985.404234][ T3321] bond1: (slave bridge1): failed to get link speed/duplex [ 985.635026][ T78] bond1: (slave bridge1): failed to get link speed/duplex [ 985.764589][ T78] bond1: (slave bridge1): failed to get link speed/duplex [ 985.976379][ T58] bond1: (slave bridge1): failed to get link speed/duplex [ 986.124366][ T58] bond1: (slave bridge1): failed to get link speed/duplex [ 986.243859][ T58] bond1: (slave bridge1): failed to get link speed/duplex [ 986.254080][ T4937] netlink: 132 bytes leftover after parsing attributes in process `syz.5.7762'. [ 986.317176][ T58] dummy0: left promiscuous mode [ 986.363618][T12374] bond1: (slave bridge1): failed to get link speed/duplex [ 986.505123][ T78] bond1: (slave bridge1): failed to get link speed/duplex [ 986.634884][ T78] bond1: (slave bridge1): failed to get link speed/duplex [ 986.663421][ T4977] netlink: 'syz.1.7771': attribute type 15 has an invalid length. [ 986.695053][ T4977] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7771'. [ 986.782199][ T4990] xfrm0: entered promiscuous mode [ 986.803103][ T4990] team0: Device xfrm0 is of different type [ 986.885092][ T4998] netlink: 712 bytes leftover after parsing attributes in process `syz.5.7772'. [ 986.921992][ T4998] netlink: 5504 bytes leftover after parsing attributes in process `syz.5.7772'. [ 986.931578][ T4998] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7772'. [ 987.071928][ T5003] IPVS: set_ctl: invalid protocol: 108 224.0.0.1:20002 [ 987.153792][ T5005] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7775'. [ 987.190351][ T29] audit: type=1804 audit(1780515226.827:29): pid=5005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.7775" name="/newroot/168/cgroup.controllers" dev="tmpfs" ino=876 res=1 errno=0 [ 987.248114][ T29] audit: type=1800 audit(1780515226.827:30): pid=5005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.7775" name="cgroup.controllers" dev="tmpfs" ino=876 res=0 errno=0 [ 987.421518][ T5015] netlink: 128 bytes leftover after parsing attributes in process `syz.2.7778'. [ 987.569684][ T5026] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.7781'. [ 987.582693][ T5029] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7783'. [ 987.608343][ T5026] siw: device registration error -23 [ 987.614649][ T5029] bond0: (slave bond_slave_0): Releasing backup interface [ 987.701275][ T5029] bond_slave_0: entered promiscuous mode [ 987.714009][ T5029] bond_slave_0: entered allmulticast mode [ 988.691685][ T5081] tipc: Enabled bearer , priority 0 [ 988.721357][ T5073] syzkaller0: entered promiscuous mode [ 988.755337][ T5073] syzkaller0: entered allmulticast mode [ 988.796833][ T5081] tipc: Resetting bearer [ 988.818401][ T5091] FAULT_INJECTION: forcing a failure. [ 988.818401][ T5091] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 988.869529][ T5091] CPU: 1 UID: 0 PID: 5091 Comm: syz.5.7796 Not tainted syzkaller #0 PREEMPT(full) [ 988.869552][ T5091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 988.869562][ T5091] Call Trace: [ 988.869570][ T5091] [ 988.869578][ T5091] dump_stack_lvl+0xe8/0x150 [ 988.869603][ T5091] should_fail_ex+0x412/0x560 [ 988.869626][ T5091] _copy_from_user+0x2d/0xb0 [ 988.869647][ T5091] ___sys_recvmsg+0x175/0x590 [ 988.869673][ T5091] ? __pfx____sys_recvmsg+0x10/0x10 [ 988.869695][ T5091] ? __fget_files+0x2a/0x420 [ 988.869743][ T5091] do_recvmmsg+0x334/0x800 [ 988.869769][ T5091] ? __pfx_do_recvmmsg+0x10/0x10 [ 988.869799][ T5091] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 988.869833][ T5091] __x64_sys_recvmmsg+0x198/0x250 [ 988.869855][ T5091] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 988.869881][ T5091] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 988.869900][ T5091] do_syscall_64+0x174/0x580 [ 988.869915][ T5091] ? trace_irq_disable+0x3b/0x140 [ 988.869938][ T5091] ? clear_bhb_loop+0x40/0x90 [ 988.869966][ T5091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 988.869982][ T5091] RIP: 0033:0x7f5a2499ce59 [ 988.869999][ T5091] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 988.870013][ T5091] RSP: 002b:00007f5a25840028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 988.870030][ T5091] RAX: ffffffffffffffda RBX: 00007f5a24c15fa0 RCX: 00007f5a2499ce59 [ 988.870043][ T5091] RDX: 0000000000000600 RSI: 0000200000003700 RDI: 0000000000000005 [ 988.870053][ T5091] RBP: 00007f5a25840090 R08: 0000000000000000 R09: 0000000000000000 [ 988.870063][ T5091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 988.870072][ T5091] R13: 00007f5a24c16038 R14: 00007f5a24c15fa0 R15: 00007fffac1426e8 [ 988.870098][ T5091] [ 989.158630][ T5071] tipc: Resetting bearer [ 989.318143][ T5071] tipc: Disabling bearer [ 989.368392][ T5112] netlink: 'syz.3.7801': attribute type 1 has an invalid length. [ 989.640361][ T5109] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7801'. [ 989.734155][ T5130] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 989.753000][ T5130] dvmrp1: linktype set to 0 [ 990.454878][ T8149] net_ratelimit: 20 callbacks suppressed [ 990.454896][ T8149] bond1: (slave bridge1): failed to get link speed/duplex [ 990.665001][ T58] bond1: (slave bridge1): failed to get link speed/duplex [ 990.793686][ T8149] bond1: (slave bridge1): failed to get link speed/duplex [ 991.106973][ T5179] lo speed is unknown, defaulting to 1000 [ 991.144520][T12374] bond1: (slave bridge1): failed to get link speed/duplex [ 991.293154][ T5194] team0: Port device team_slave_0 removed [ 991.368125][ T5200] syzkaller1: entered promiscuous mode [ 991.412000][ T5200] syzkaller1: entered allmulticast mode [ 991.465431][ T8149] bond1: (slave bridge1): failed to get link speed/duplex [ 991.633696][ T58] bond1: (slave bridge1): failed to get link speed/duplex [ 991.747476][ T5211] __nla_validate_parse: 3 callbacks suppressed [ 991.747494][ T5211] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7825'. [ 991.797305][ T5211] netlink: 256 bytes leftover after parsing attributes in process `syz.1.7825'. [ 991.832277][ T5214] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7826'. [ 992.826208][T12374] bond1: (slave bridge1): failed to get link speed/duplex [ 992.959370][ T1163] bond1: (slave bridge1): failed to get link speed/duplex [ 993.017504][ T5243] sctp: [Deprecated]: syz.3.7832 (pid 5243) Use of int in max_burst socket option. [ 993.017504][ T5243] Use struct sctp_assoc_value instead [ 993.075969][ T5248] netlink: 'syz.3.7832': attribute type 1 has an invalid length. [ 993.086205][T12374] bond1: (slave bridge1): failed to get link speed/duplex [ 993.109492][ T5248] netlink: 224 bytes leftover after parsing attributes in process `syz.3.7832'. [ 993.215773][T12374] bond1: (slave bridge1): failed to get link speed/duplex [ 993.273310][ T5243] lo speed is unknown, defaulting to 1000 [ 994.049789][ T5290] netlink: 132 bytes leftover after parsing attributes in process `syz.5.7840'. [ 994.738061][ T5309] ipt_REJECT: TCP_RESET invalid for non-tcp [ 995.264970][ T5326] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7847'. [ 995.483723][ T8149] net_ratelimit: 14 callbacks suppressed [ 995.483743][ T8149] bond1: (slave bridge1): failed to get link speed/duplex [ 995.615342][ T1163] bond1: (slave bridge1): failed to get link speed/duplex [ 995.743624][ T8149] bond1: (slave bridge1): failed to get link speed/duplex [ 995.866777][ T8149] bond1: (slave bridge1): failed to get link speed/duplex [ 995.919713][ T5345] netlink: 1 bytes leftover after parsing attributes in process `syz.0.7853'. [ 995.994123][ T8149] bond1: (slave bridge1): failed to get link speed/duplex [ 996.061612][ T5353] IPv6: NLM_F_CREATE should be specified when creating new route [ 996.123697][ T1163] bond1: (slave bridge1): failed to get link speed/duplex [ 996.162937][ T5360] netlink: 'syz.2.7857': attribute type 1 has an invalid length. [ 996.204344][ T5360] bond6: entered promiscuous mode [ 996.210056][ T5360] 8021q: adding VLAN 0 to HW filter on device bond6 [ 996.259450][ T5364] 8021q: adding VLAN 0 to HW filter on device bond6 [ 996.267677][ T5364] bond6: (slave ipip1): The slave device specified does not support setting the MAC address [ 996.280222][ T5364] bond6: (slave ipip1): Setting fail_over_mac to active for active-backup mode [ 996.295866][ T5364] bond6: (slave ipip1): making interface the new active one [ 996.303222][ T5364] ipip1: entered promiscuous mode [ 996.310180][ T5364] bond6: (slave ipip1): Enslaving as an active interface with an up link [ 996.323688][T12374] bond1: (slave bridge1): failed to get link speed/duplex [ 996.454146][ T1163] bond1: (slave bridge1): failed to get link speed/duplex [ 996.520431][ T5389] netlink: 'syz.1.7864': attribute type 30 has an invalid length. [ 996.669294][ T8149] bond1: (slave bridge1): failed to get link speed/duplex [ 996.684560][ T5402] netlink: 'syz.2.7868': attribute type 4 has an invalid length. [ 996.766281][ T29] audit: type=1804 audit(1780515236.407:31): pid=5405 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.7867" name="/newroot/199/memory.events" dev="tmpfs" ino=1035 res=1 errno=0 [ 996.814509][ T5409] netlink: 76 bytes leftover after parsing attributes in process `syz.1.7869'. [ 996.837900][ T29] audit: type=1800 audit(1780515236.407:32): pid=5405 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.7867" name="memory.events" dev="tmpfs" ino=1035 res=0 errno=0 [ 996.854027][ T5405] SET target dimension over the limit! [ 996.881271][ T5409] netlink: 108 bytes leftover after parsing attributes in process `syz.1.7869'. [ 997.076798][ T5409] 8021q: adding VLAN 0 to HW filter on device .` [ 997.165560][ T5409] veth1_vlan: left promiscuous mode [ 997.172134][ T5409] veth0_vlan: left promiscuous mode [ 997.178159][ T5409] veth0_vlan: entered promiscuous mode [ 997.185814][ T5409] veth1_vlan: entered promiscuous mode [ 997.191294][ T5409] veth1_vlan: entered allmulticast mode [ 997.200971][ T5424] netlink: 'syz.0.7873': attribute type 1 has an invalid length. [ 997.212032][ T5409] veth1_macvtap: left promiscuous mode [ 997.219866][ T5409] veth0_macvtap: left promiscuous mode [ 997.226590][ T5409] veth0_macvtap: entered promiscuous mode [ 997.288398][ T5421] netlink: 'syz.5.7872': attribute type 4 has an invalid length. [ 997.311083][ T5420] team0: left promiscuous mode [ 997.323452][ T5420] macvlan2: left promiscuous mode [ 997.343363][ T5420] tipc: Resetting bearer [ 997.350265][ T5420] syzkaller0: left promiscuous mode [ 997.355796][ T5420] syzkaller0: left allmulticast mode [ 997.403351][ T5422] netdevsim netdevsim2: Firmware load for '..' refused, path contains '..' component [ 997.414760][ T3321] bond1: (slave bridge1): failed to get link speed/duplex [ 997.435166][ T5425] vlan2: entered promiscuous mode [ 997.440353][ T5425] bridge0: entered promiscuous mode [ 997.521235][ T1163] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 997.601776][ T5436] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7875'. [ 997.632064][ T1163] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 997.653109][ T1163] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 997.663269][ T1163] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 997.752782][ T5445] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7877'. [ 997.967946][ T5450] lo speed is unknown, defaulting to 1000 [ 998.368541][ T5477] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7886'. [ 998.479055][ T5479] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7887'. [ 998.510456][ T5479] netlink: 224 bytes leftover after parsing attributes in process `syz.5.7887'. [ 998.591016][ T5479] netlink: 68 bytes leftover after parsing attributes in process `syz.5.7887'. [ 998.664547][ T5479] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 998.682959][ T5489] netlink: 'syz.0.7890': attribute type 1 has an invalid length. [ 999.115129][ T5505] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7893'. [ 999.480388][ T5516] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1000.003131][ T5527] syzkaller0: entered promiscuous mode [ 1000.024567][ T5527] syzkaller0: entered allmulticast mode [ 1000.045678][ T5527] tipc: Resetting bearer [ 1000.496746][ T3321] net_ratelimit: 25 callbacks suppressed [ 1000.496764][ T3321] bond1: (slave bridge1): failed to get link speed/duplex [ 1000.664141][ T1163] bond1: (slave bridge1): failed to get link speed/duplex [ 1000.689421][ T5562] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7907'. [ 1000.793642][ T8149] bond1: (slave bridge1): failed to get link speed/duplex [ 1000.812154][ T5572] veth1_macvtap: left promiscuous mode [ 1000.922911][ T5572] veth1_macvtap: entered promiscuous mode [ 1001.054342][ T78] bond1: (slave bridge1): failed to get link speed/duplex [ 1001.084471][ T5572] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 1001.203683][ T78] bond1: (slave bridge1): failed to get link speed/duplex [ 1001.227779][ T5579] lo speed is unknown, defaulting to 1000 [ 1001.364223][ T3321] bond1: (slave bridge1): failed to get link speed/duplex [ 1001.504158][ T58] bond1: (slave bridge1): failed to get link speed/duplex [ 1001.633744][ T1163] bond1: (slave bridge1): failed to get link speed/duplex [ 1001.826044][ T8149] bond1: (slave bridge1): failed to get link speed/duplex [ 1001.939974][ T5608] FAULT_INJECTION: forcing a failure. [ 1001.939974][ T5608] name failslab, interval 1, probability 0, space 0, times 0 [ 1001.975427][ T5608] CPU: 0 UID: 0 PID: 5608 Comm: syz.1.7915 Not tainted syzkaller #0 PREEMPT(full) [ 1001.975452][ T5608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1001.975462][ T5608] Call Trace: [ 1001.975469][ T5608] [ 1001.975477][ T5608] dump_stack_lvl+0xe8/0x150 [ 1001.975500][ T5608] should_fail_ex+0x412/0x560 [ 1001.975524][ T5608] should_failslab+0xa8/0x100 [ 1001.975549][ T5608] __kmalloc_noprof+0xe8/0x760 [ 1001.975572][ T5608] ? sock_kmalloc+0xd6/0x160 [ 1001.975596][ T5608] ? hash_recvmsg+0x130/0x840 [ 1001.975618][ T5608] sock_kmalloc+0xd6/0x160 [ 1001.975640][ T5608] hash_recvmsg+0x1d4/0x840 [ 1001.975663][ T5608] ? __pfx_hash_recvmsg+0x10/0x10 [ 1001.975682][ T5608] sock_recvmsg_nosec+0x10c/0x140 [ 1001.975706][ T5608] ____sys_recvmsg+0x3e3/0x4a0 [ 1001.975733][ T5608] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1001.975767][ T5608] ? import_iovec+0x73/0xa0 [ 1001.975789][ T5608] ___sys_recvmsg+0x215/0x590 [ 1001.975814][ T5608] ? __pfx____sys_recvmsg+0x10/0x10 [ 1001.975836][ T5608] ? __fget_files+0x2a/0x420 [ 1001.975886][ T5608] do_recvmmsg+0x334/0x800 [ 1001.975913][ T5608] ? __pfx_do_recvmmsg+0x10/0x10 [ 1001.975943][ T5608] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1001.975979][ T5608] __x64_sys_recvmmsg+0x198/0x250 [ 1001.976001][ T5608] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1001.976028][ T5608] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1001.976046][ T5608] do_syscall_64+0x174/0x580 [ 1001.976062][ T5608] ? trace_irq_disable+0x3b/0x140 [ 1001.976084][ T5608] ? clear_bhb_loop+0x40/0x90 [ 1001.976104][ T5608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1001.976120][ T5608] RIP: 0033:0x7fe82579ce59 [ 1001.976137][ T5608] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1001.976150][ T5608] RSP: 002b:00007fe8266fb028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1001.976168][ T5608] RAX: ffffffffffffffda RBX: 00007fe825a15fa0 RCX: 00007fe82579ce59 [ 1001.976180][ T5608] RDX: 0000000000000600 RSI: 0000200000003700 RDI: 0000000000000005 [ 1001.976190][ T5608] RBP: 00007fe8266fb090 R08: 0000000000000000 R09: 0000000000000000 [ 1001.976200][ T5608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1001.976209][ T5608] R13: 00007fe825a16038 R14: 00007fe825a15fa0 R15: 00007ffc5d1bed18 [ 1001.976237][ T5608] [ 1002.331318][ T5619] syzkaller0: entered promiscuous mode [ 1002.340166][ T5619] syzkaller0: entered allmulticast mode [ 1002.516411][ T5631] tipc: Enabled bearer , priority 18 [ 1003.496739][ T5658] syzkaller1: entered promiscuous mode [ 1003.505454][ T5658] syzkaller1: entered allmulticast mode [ 1003.792640][ T5668] lo speed is unknown, defaulting to 1000 [ 1003.833337][ T5683] FAULT_INJECTION: forcing a failure. [ 1003.833337][ T5683] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1003.874638][ T5683] CPU: 0 UID: 0 PID: 5683 Comm: syz.0.7929 Not tainted syzkaller #0 PREEMPT(full) [ 1003.874662][ T5683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1003.874672][ T5683] Call Trace: [ 1003.874680][ T5683] [ 1003.874687][ T5683] dump_stack_lvl+0xe8/0x150 [ 1003.874710][ T5683] should_fail_ex+0x412/0x560 [ 1003.874733][ T5683] _copy_from_user+0x2d/0xb0 [ 1003.874753][ T5683] ___sys_recvmsg+0x175/0x590 [ 1003.874777][ T5683] ? __pfx____sys_recvmsg+0x10/0x10 [ 1003.874800][ T5683] ? __fget_files+0x2a/0x420 [ 1003.874846][ T5683] do_recvmmsg+0x334/0x800 [ 1003.874872][ T5683] ? __pfx_do_recvmmsg+0x10/0x10 [ 1003.874902][ T5683] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1003.874937][ T5683] __x64_sys_recvmmsg+0x198/0x250 [ 1003.874958][ T5683] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1003.874985][ T5683] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1003.875003][ T5683] do_syscall_64+0x174/0x580 [ 1003.875019][ T5683] ? trace_irq_disable+0x3b/0x140 [ 1003.875041][ T5683] ? clear_bhb_loop+0x40/0x90 [ 1003.875061][ T5683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1003.875076][ T5683] RIP: 0033:0x7fdb3f59ce59 [ 1003.875093][ T5683] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1003.875109][ T5683] RSP: 002b:00007fdb4038f028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1003.875127][ T5683] RAX: ffffffffffffffda RBX: 00007fdb3f815fa0 RCX: 00007fdb3f59ce59 [ 1003.875139][ T5683] RDX: 0000000000000600 RSI: 0000200000003700 RDI: 0000000000000005 [ 1003.875149][ T5683] RBP: 00007fdb4038f090 R08: 0000000000000000 R09: 0000000000000000 [ 1003.875159][ T5683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1003.875169][ T5683] R13: 00007fdb3f816038 R14: 00007fdb3f815fa0 R15: 00007ffc9d8f0368 [ 1003.875197][ T5683] [ 1004.178482][ T5690] pim6reg: entered allmulticast mode [ 1004.529117][ T5700] __nla_validate_parse: 1 callbacks suppressed [ 1004.529134][ T5700] netlink: 52 bytes leftover after parsing attributes in process `syz.5.7932'. [ 1004.563845][ T5700] netlink: 'syz.5.7932': attribute type 1 has an invalid length. [ 1004.698794][ T5705] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7934'. [ 1004.769889][ T5705] : entered promiscuous mode [ 1004.784651][ T5711] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7934'. [ 1004.957930][ T5719] netlink: 84 bytes leftover after parsing attributes in process `syz.1.7937'. [ 1005.014125][ T29] audit: type=1800 audit(1780515244.647:33): pid=5719 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.7937" name="r" dev="tmpfs" ino=1778 res=0 errno=0 [ 1005.039041][ T5723] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7939'. [ 1005.053716][ T29] audit: type=1804 audit(1780515244.657:34): pid=5719 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.7937" name="/newroot/344/r" dev="tmpfs" ino=1778 res=1 errno=0 [ 1005.085570][ T5721] bond7: (slave bond_slave_1): Device is not our slave [ 1005.093455][ T5721] bond7: option active_slave: invalid value (bond_slave_1) [ 1005.107825][ T5721] bond7 (unregistering): Released all slaves [ 1005.168472][ T5735] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.7938'. [ 1005.176742][ T5723] macvlan2: entered promiscuous mode [ 1005.184739][ T5723] bond0: entered promiscuous mode [ 1005.208564][ T5723] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1005.654245][ T58] net_ratelimit: 17 callbacks suppressed [ 1005.654263][ T58] bond1: (slave bridge1): failed to get link speed/duplex [ 1005.683442][ T5766] netlink: 56 bytes leftover after parsing attributes in process `syz.0.7949'. [ 1005.723674][ T5766] netlink: 19 bytes leftover after parsing attributes in process `syz.0.7949'. [ 1005.744012][ T5766] netlink: 19 bytes leftover after parsing attributes in process `syz.0.7949'. [ 1005.783185][ T5772] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7949'. [ 1005.824425][ T730] bond1: (slave bridge1): failed to get link speed/duplex [ 1005.944863][ T730] bond1: (slave bridge1): failed to get link speed/duplex [ 1006.063668][ T3321] bond1: (slave bridge1): failed to get link speed/duplex [ 1006.266986][T12374] bond1: (slave bridge1): failed to get link speed/duplex [ 1006.405987][T12374] bond1: (slave bridge1): failed to get link speed/duplex [ 1006.523607][T12374] bond1: (slave bridge1): failed to get link speed/duplex [ 1006.676468][ T3321] bond1: (slave bridge1): failed to get link speed/duplex [ 1006.814349][ T8149] bond1: (slave bridge1): failed to get link speed/duplex [ 1006.933344][ T5826] syzkaller1: entered promiscuous mode [ 1006.957816][ T5826] syzkaller1: entered allmulticast mode [ 1006.988082][ T78] bond1: (slave bridge1): failed to get link speed/duplex [ 1007.403916][ T5851] netlink: 'syz.3.7969': attribute type 1 has an invalid length. [ 1007.452292][ T5851] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1007.462485][ T5847] netlink: 'syz.5.7968': attribute type 21 has an invalid length. [ 1007.501122][ T5847] netlink: 'syz.5.7968': attribute type 6 has an invalid length. [ 1007.572998][ T5855] bond12: (slave veth15): Enslaving as an active interface with a down link [ 1007.597200][ T5851] bond12: (slave dummy0): making interface the new active one [ 1007.612794][ T5855] netlink: 'syz.3.7969': attribute type 10 has an invalid length. [ 1007.622160][ T5851] dummy0: entered promiscuous mode [ 1007.628340][ T5851] bond12: (slave dummy0): Enslaving as an active interface with an up link [ 1007.665647][ T5855] bond12: (slave dummy0): Releasing active interface [ 1007.817938][ T5877] FAULT_INJECTION: forcing a failure. [ 1007.817938][ T5877] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1007.838305][ T5877] CPU: 1 UID: 0 PID: 5877 Comm: syz.3.7978 Not tainted syzkaller #0 PREEMPT(full) [ 1007.838330][ T5877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1007.838340][ T5877] Call Trace: [ 1007.838347][ T5877] [ 1007.838354][ T5877] dump_stack_lvl+0xe8/0x150 [ 1007.838379][ T5877] should_fail_ex+0x412/0x560 [ 1007.838402][ T5877] _copy_from_user+0x2d/0xb0 [ 1007.838423][ T5877] ___sys_sendmsg+0x1c6/0x360 [ 1007.838440][ T5877] ? __lock_acquire+0x6b5/0x2cf0 [ 1007.838472][ T5877] ? __pfx____sys_sendmsg+0x10/0x10 [ 1007.838522][ T5877] ? __fget_files+0x2a/0x420 [ 1007.838540][ T5877] ? __fget_files+0x3a0/0x420 [ 1007.838566][ T5877] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1007.838586][ T5877] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1007.838613][ T5877] ? __pfx_ksys_write+0x10/0x10 [ 1007.838641][ T5877] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1007.838659][ T5877] do_syscall_64+0x174/0x580 [ 1007.838675][ T5877] ? trace_irq_disable+0x3b/0x140 [ 1007.838697][ T5877] ? clear_bhb_loop+0x40/0x90 [ 1007.838717][ T5877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1007.838732][ T5877] RIP: 0033:0x7f35e179ce59 [ 1007.838749][ T5877] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1007.838762][ T5877] RSP: 002b:00007f35df9f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1007.838779][ T5877] RAX: ffffffffffffffda RBX: 00007f35e1a15fa0 RCX: 00007f35e179ce59 [ 1007.838791][ T5877] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000006 [ 1007.838802][ T5877] RBP: 00007f35df9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1007.838812][ T5877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1007.838822][ T5877] R13: 00007f35e1a16038 R14: 00007f35e1a15fa0 R15: 00007ffc5b769d88 [ 1007.838850][ T5877] [ 1007.894293][ T5880] netlink: 'syz.0.7979': attribute type 16 has an invalid length. [ 1008.513443][ T5916] FAULT_INJECTION: forcing a failure. [ 1008.513443][ T5916] name failslab, interval 1, probability 0, space 0, times 0 [ 1008.553697][ T5916] CPU: 0 UID: 0 PID: 5916 Comm: syz.1.7990 Not tainted syzkaller #0 PREEMPT(full) [ 1008.553723][ T5916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1008.553733][ T5916] Call Trace: [ 1008.553740][ T5916] [ 1008.553748][ T5916] dump_stack_lvl+0xe8/0x150 [ 1008.553772][ T5916] should_fail_ex+0x412/0x560 [ 1008.553795][ T5916] should_failslab+0xa8/0x100 [ 1008.553814][ T5916] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1008.553835][ T5916] ? __alloc_skb+0x186/0x7d0 [ 1008.553850][ T5916] ? __alloc_skb+0x1d0/0x7d0 [ 1008.553863][ T5916] ? __local_bh_enable_ip+0xd0/0x130 [ 1008.553885][ T5916] __alloc_skb+0x1d0/0x7d0 [ 1008.553914][ T5916] netlink_sendmsg+0x5d4/0xb40 [ 1008.553939][ T5916] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1008.553959][ T5916] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1008.553981][ T5916] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1008.554004][ T5916] ____sys_sendmsg+0x972/0x9f0 [ 1008.554021][ T5916] ? __might_fault+0xaf/0x130 [ 1008.554047][ T5916] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1008.554073][ T5916] ? import_iovec+0x73/0xa0 [ 1008.554096][ T5916] ___sys_sendmsg+0x2a5/0x360 [ 1008.554113][ T5916] ? __lock_acquire+0x6b5/0x2cf0 [ 1008.554151][ T5916] ? __pfx____sys_sendmsg+0x10/0x10 [ 1008.554200][ T5916] ? __fget_files+0x2a/0x420 [ 1008.554218][ T5916] ? __fget_files+0x3a0/0x420 [ 1008.554246][ T5916] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1008.554266][ T5916] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1008.554292][ T5916] ? __pfx_ksys_write+0x10/0x10 [ 1008.554322][ T5916] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1008.554340][ T5916] do_syscall_64+0x174/0x580 [ 1008.554357][ T5916] ? trace_irq_disable+0x3b/0x140 [ 1008.554379][ T5916] ? clear_bhb_loop+0x40/0x90 [ 1008.554398][ T5916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1008.554414][ T5916] RIP: 0033:0x7fe82579ce59 [ 1008.554430][ T5916] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1008.554443][ T5916] RSP: 002b:00007fe8266fb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1008.554464][ T5916] RAX: ffffffffffffffda RBX: 00007fe825a15fa0 RCX: 00007fe82579ce59 [ 1008.554476][ T5916] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000006 [ 1008.554486][ T5916] RBP: 00007fe8266fb090 R08: 0000000000000000 R09: 0000000000000000 [ 1008.554496][ T5916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1008.554506][ T5916] R13: 00007fe825a16038 R14: 00007fe825a15fa0 R15: 00007ffc5d1bed18 [ 1008.554534][ T5916] [ 1008.892191][ T5928] netlink: 'syz.5.7992': attribute type 16 has an invalid length. [ 1009.087731][ T5938] netlink: 'syz.1.7998': attribute type 1 has an invalid length. [ 1009.200536][ T5948] SET target dimension over the limit! [ 1009.356525][ T5946] bond8: (slave bridge0): making interface the new active one [ 1009.414044][ T5946] bond8: (slave bridge0): Enslaving as an active interface with an up link [ 1009.470338][ T5971] tipc: Started in network mode [ 1009.476472][ T5971] tipc: Node identity aeaaa243cba6, cluster identity 4711 [ 1009.485435][ T5971] tipc: Enabled bearer , priority 0 [ 1009.493944][ T5971] syzkaller0: entered promiscuous mode [ 1009.500357][ T5971] syzkaller0: entered allmulticast mode [ 1009.563330][ T5971] tipc: Resetting bearer [ 1009.612272][ T5970] tipc: Resetting bearer [ 1009.666916][ T5970] tipc: Disabling bearer [ 1009.794468][ T5985] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1009.819301][ T5988] xt_l2tp: v2 sid > 0xffff: 8388608 [ 1009.835235][ T5989] ip6tnl2: entered promiscuous mode [ 1010.042012][ T6003] netlink: 'syz.3.8018': attribute type 1 has an invalid length. [ 1010.072041][ T6003] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1010.118164][ T6003] bond13: (slave veth17): Enslaving as an active interface with a down link [ 1010.289385][ T6015] netlink: 'syz.1.8022': attribute type 1 has an invalid length. [ 1010.407168][ T6021] __nla_validate_parse: 17 callbacks suppressed [ 1010.407184][ T6021] netlink: 44 bytes leftover after parsing attributes in process `syz.2.8024'. [ 1010.413171][ T6024] netlink: 88 bytes leftover after parsing attributes in process `syz.1.8026'. [ 1010.424454][ T6021] nbd: couldn't find a device at index 0 [ 1010.470903][ T6028] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8027'. [ 1010.607500][ T6037] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8029'. [ 1010.694791][T12374] net_ratelimit: 23 callbacks suppressed [ 1010.694809][T12374] bond1: (slave bridge1): failed to get link speed/duplex [ 1010.732813][ T6041] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8031'. [ 1010.750647][ T6041] tipc: Resetting bearer [ 1010.823403][ T6041] tipc: Disabling bearer [ 1010.863056][ T6056] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8034'. [ 1010.873775][ T3321] bond1: (slave bridge1): failed to get link speed/duplex [ 1011.006420][ T3321] bond1: (slave bridge1): failed to get link speed/duplex [ 1011.066906][ T6070] netlink: 'syz.5.8038': attribute type 21 has an invalid length. [ 1011.089454][ T6070] netlink: 156 bytes leftover after parsing attributes in process `syz.5.8038'. [ 1011.122575][ T6070] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8038'. [ 1011.254449][ T6086] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8038'. [ 1011.297030][ T6089] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8044'. [ 1011.312554][ T6082] bond2: (slave dummy0): Releasing active interface [ 1011.322079][ T6089] netlink: 'syz.3.8044': attribute type 2 has an invalid length. [ 1011.337404][ T6091] gre0: entered promiscuous mode [ 1011.348219][ T6091] gre0: entered allmulticast mode [ 1011.374476][ T58] bond1: (slave bridge1): failed to get link speed/duplex [ 1011.494542][T12374] bond1: (slave bridge1): failed to get link speed/duplex [ 1011.583331][ T6102] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1011.672791][ T6111] netlink: 'syz.2.8050': attribute type 16 has an invalid length. [ 1011.689566][ T6111] FAULT_INJECTION: forcing a failure. [ 1011.689566][ T6111] name failslab, interval 1, probability 0, space 0, times 0 [ 1011.718529][ T6114] netlink: 'syz.3.8052': attribute type 11 has an invalid length. [ 1011.761362][ T6111] CPU: 1 UID: 0 PID: 6111 Comm: syz.2.8050 Not tainted syzkaller #0 PREEMPT(full) [ 1011.761385][ T6111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1011.761395][ T6111] Call Trace: [ 1011.761402][ T6111] [ 1011.761410][ T6111] dump_stack_lvl+0xe8/0x150 [ 1011.761436][ T6111] should_fail_ex+0x412/0x560 [ 1011.761470][ T6111] should_failslab+0xa8/0x100 [ 1011.761490][ T6111] __kmalloc_noprof+0xe8/0x760 [ 1011.761513][ T6111] ? fib_nl2rule+0x2e9/0x1a00 [ 1011.761535][ T6111] fib_nl2rule+0x2e9/0x1a00 [ 1011.761558][ T6111] ? __pfx_fib_nl2rule+0x10/0x10 [ 1011.761577][ T6111] ? __nla_parse+0x40/0x60 [ 1011.761600][ T6111] fib_newrule+0x321/0x1030 [ 1011.761628][ T6111] ? __pfx_fib_newrule+0x10/0x10 [ 1011.761696][ T6111] ? __pfx_fib_nl_newrule+0x10/0x10 [ 1011.761715][ T6111] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1011.761731][ T6111] ? kmem_cache_alloc_node_noprof+0x384/0x690 [ 1011.761750][ T6111] ? netlink_sendmsg+0x5d4/0xb40 [ 1011.761769][ T6111] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1011.761785][ T6111] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1011.761803][ T6111] ? __lock_acquire+0x6b5/0x2cf0 [ 1011.761834][ T6111] netlink_rcv_skb+0x232/0x4b0 [ 1011.761857][ T6111] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1011.761876][ T6111] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1011.761907][ T6111] ? netlink_deliver_tap+0x2e/0x1b0 [ 1011.761925][ T6111] ? netlink_deliver_tap+0x2e/0x1b0 [ 1011.761947][ T6111] netlink_unicast+0x75c/0x8e0 [ 1011.761973][ T6111] netlink_sendmsg+0x813/0xb40 [ 1011.761998][ T6111] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1011.762019][ T6111] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1011.762043][ T6111] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1011.762067][ T6111] ____sys_sendmsg+0x972/0x9f0 [ 1011.762086][ T6111] ? __might_fault+0xaf/0x130 [ 1011.762113][ T6111] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1011.762139][ T6111] ? import_iovec+0x73/0xa0 [ 1011.762162][ T6111] ___sys_sendmsg+0x2a5/0x360 [ 1011.762179][ T6111] ? __lock_acquire+0x6b5/0x2cf0 [ 1011.762201][ T6111] ? __pfx____sys_sendmsg+0x10/0x10 [ 1011.762250][ T6111] ? __fget_files+0x2a/0x420 [ 1011.762269][ T6111] ? __fget_files+0x3a0/0x420 [ 1011.762295][ T6111] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1011.762317][ T6111] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1011.762340][ T6111] ? __pfx_ksys_write+0x10/0x10 [ 1011.762388][ T6111] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1011.762407][ T6111] do_syscall_64+0x174/0x580 [ 1011.762423][ T6111] ? trace_irq_disable+0x3b/0x140 [ 1011.762445][ T6111] ? clear_bhb_loop+0x40/0x90 [ 1011.762466][ T6111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1011.762480][ T6111] RIP: 0033:0x7fb82db9ce59 [ 1011.762497][ T6111] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1011.762511][ T6111] RSP: 002b:00007fb82bdd5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1011.762528][ T6111] RAX: ffffffffffffffda RBX: 00007fb82de16090 RCX: 00007fb82db9ce59 [ 1011.762540][ T6111] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000006 [ 1011.762549][ T6111] RBP: 00007fb82bdd5090 R08: 0000000000000000 R09: 0000000000000000 [ 1011.762559][ T6111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1011.762567][ T6111] R13: 00007fb82de16128 R14: 00007fb82de16090 R15: 00007ffffba386c8 [ 1011.762593][ T6111] [ 1012.125585][ T8149] bond1: (slave bridge1): failed to get link speed/duplex [ 1012.333888][T12374] bond1: (slave bridge1): failed to get link speed/duplex [ 1012.544048][ T58] bond1: (slave bridge1): failed to get link speed/duplex [ 1012.570828][ T6150] netlink: 'syz.1.8063': attribute type 1 has an invalid length. [ 1012.662562][ T6150] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1012.683031][T12374] bond1: (slave bridge1): failed to get link speed/duplex [ 1013.792438][ T6233] ipvlan2: entered allmulticast mode [ 1013.813755][ T6233] syz_tun: entered allmulticast mode [ 1013.960248][ T6240] veth0_macvtap: entered allmulticast mode [ 1014.081986][ T6245] vlan2: entered allmulticast mode [ 1014.087552][ T6245] bond0: entered allmulticast mode [ 1014.367084][ T6268] netlink: 'syz.3.8094': attribute type 4 has an invalid length. [ 1014.446317][ T6263] netlink: 'syz.3.8094': attribute type 4 has an invalid length. [ 1014.523122][ T6279] --map-set only usable from mangle table [ 1014.591345][ T6283] ipt_ECN: cannot use operation on non-tcp rule [ 1014.707872][ T6294] FAULT_INJECTION: forcing a failure. [ 1014.707872][ T6294] name failslab, interval 1, probability 0, space 0, times 0 [ 1014.754474][ T6294] CPU: 0 UID: 0 PID: 6294 Comm: syz.2.8103 Not tainted syzkaller #0 PREEMPT(full) [ 1014.754500][ T6294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1014.754509][ T6294] Call Trace: [ 1014.754516][ T6294] [ 1014.754522][ T6294] dump_stack_lvl+0xe8/0x150 [ 1014.754546][ T6294] should_fail_ex+0x412/0x560 [ 1014.754568][ T6294] should_failslab+0xa8/0x100 [ 1014.754587][ T6294] __kmalloc_noprof+0xe8/0x760 [ 1014.754609][ T6294] ? sock_kmalloc+0xd6/0x160 [ 1014.754624][ T6294] ? hash_recvmsg+0x130/0x840 [ 1014.754647][ T6294] sock_kmalloc+0xd6/0x160 [ 1014.754667][ T6294] hash_recvmsg+0x1d4/0x840 [ 1014.754688][ T6294] ? __pfx_hash_recvmsg+0x10/0x10 [ 1014.754706][ T6294] sock_recvmsg_nosec+0x10c/0x140 [ 1014.754730][ T6294] ____sys_recvmsg+0x3e3/0x4a0 [ 1014.754757][ T6294] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1014.754790][ T6294] ? import_iovec+0x73/0xa0 [ 1014.754812][ T6294] ___sys_recvmsg+0x215/0x590 [ 1014.754835][ T6294] ? __pfx____sys_recvmsg+0x10/0x10 [ 1014.754858][ T6294] ? __fget_files+0x2a/0x420 [ 1014.754905][ T6294] do_recvmmsg+0x334/0x800 [ 1014.754931][ T6294] ? __pfx_do_recvmmsg+0x10/0x10 [ 1014.754961][ T6294] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1014.754997][ T6294] __x64_sys_recvmmsg+0x198/0x250 [ 1014.755019][ T6294] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1014.755045][ T6294] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1014.755062][ T6294] do_syscall_64+0x174/0x580 [ 1014.755080][ T6294] ? clear_bhb_loop+0x40/0x90 [ 1014.755109][ T6294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1014.755124][ T6294] RIP: 0033:0x7fb82db9ce59 [ 1014.755141][ T6294] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1014.755153][ T6294] RSP: 002b:00007fb82bdf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1014.755169][ T6294] RAX: ffffffffffffffda RBX: 00007fb82de15fa0 RCX: 00007fb82db9ce59 [ 1014.755180][ T6294] RDX: 0000000000000600 RSI: 0000200000003700 RDI: 0000000000000005 [ 1014.755189][ T6294] RBP: 00007fb82bdf6090 R08: 0000000000000000 R09: 0000000000000000 [ 1014.755198][ T6294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1014.755207][ T6294] R13: 00007fb82de16038 R14: 00007fb82de15fa0 R15: 00007ffffba386c8 [ 1014.755237][ T6294] [ 1014.764446][ T6303] IPv6: Can't replace route, no match found [ 1015.326380][ T29] audit: type=1800 audit(1780515254.957:35): pid=6330 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.8112" name="r" dev="tmpfs" ino=2212 res=0 errno=0 [ 1015.499707][ T6341] __nla_validate_parse: 23 callbacks suppressed [ 1015.499726][ T6341] netlink: 64 bytes leftover after parsing attributes in process `syz.0.8115'. [ 1015.543914][ T6341] netlink: 'syz.0.8115': attribute type 27 has an invalid length. [ 1015.747291][ T6349] FAULT_INJECTION: forcing a failure. [ 1015.747291][ T6349] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1015.782223][ T6349] CPU: 0 UID: 0 PID: 6349 Comm: syz.0.8117 Not tainted syzkaller #0 PREEMPT(full) [ 1015.782248][ T6349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1015.782259][ T6349] Call Trace: [ 1015.782266][ T6349] [ 1015.782274][ T6349] dump_stack_lvl+0xe8/0x150 [ 1015.782298][ T6349] should_fail_ex+0x412/0x560 [ 1015.782321][ T6349] _copy_from_user+0x2d/0xb0 [ 1015.782343][ T6349] ___sys_recvmsg+0x175/0x590 [ 1015.782367][ T6349] ? __pfx____sys_recvmsg+0x10/0x10 [ 1015.782391][ T6349] ? __fget_files+0x2a/0x420 [ 1015.782447][ T6349] do_recvmmsg+0x334/0x800 [ 1015.782475][ T6349] ? __pfx_do_recvmmsg+0x10/0x10 [ 1015.782505][ T6349] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1015.782539][ T6349] __x64_sys_recvmmsg+0x198/0x250 [ 1015.782561][ T6349] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1015.782589][ T6349] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1015.782606][ T6349] do_syscall_64+0x174/0x580 [ 1015.782623][ T6349] ? trace_irq_disable+0x3b/0x140 [ 1015.782645][ T6349] ? clear_bhb_loop+0x40/0x90 [ 1015.782666][ T6349] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1015.782682][ T6349] RIP: 0033:0x7fdb3f59ce59 [ 1015.782698][ T6349] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1015.782712][ T6349] RSP: 002b:00007fdb4038f028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1015.782730][ T6349] RAX: ffffffffffffffda RBX: 00007fdb3f815fa0 RCX: 00007fdb3f59ce59 [ 1015.782742][ T6349] RDX: 0000000000000600 RSI: 0000200000003700 RDI: 0000000000000005 [ 1015.782753][ T6349] RBP: 00007fdb4038f090 R08: 0000000000000000 R09: 0000000000000000 [ 1015.782762][ T6349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1015.782772][ T6349] R13: 00007fdb3f816038 R14: 00007fdb3f815fa0 R15: 00007ffc9d8f0368 [ 1015.782799][ T6349] [ 1015.990154][ T8149] net_ratelimit: 24 callbacks suppressed [ 1015.990172][ T8149] bond1: (slave bridge1): failed to get link speed/duplex [ 1016.104392][T12374] bond1: (slave bridge1): failed to get link speed/duplex [ 1016.277110][T12374] bond1: (slave bridge1): failed to get link speed/duplex [ 1016.349369][ T6372] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8122'. [ 1016.365393][ T6370] netlink: 'syz.3.8124': attribute type 49 has an invalid length. [ 1016.395443][ T8149] bond1: (slave bridge1): failed to get link speed/duplex [ 1016.411696][ T6372] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8122'. [ 1016.442926][ T6369] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1016.513857][ T3321] bond1: (slave bridge1): failed to get link speed/duplex [ 1016.615097][ T6392] netlink: 'syz.1.8125': attribute type 4 has an invalid length. [ 1016.633763][ T78] bond1: (slave bridge1): failed to get link speed/duplex [ 1016.646877][ T6390] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8127'. [ 1016.660299][ T6392] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8125'. [ 1016.675988][ T6396] FAULT_INJECTION: forcing a failure. [ 1016.675988][ T6396] name failslab, interval 1, probability 0, space 0, times 0 [ 1016.730548][ T6396] CPU: 1 UID: 0 PID: 6396 Comm: syz.5.8128 Not tainted syzkaller #0 PREEMPT(full) [ 1016.730573][ T6396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1016.730584][ T6396] Call Trace: [ 1016.730591][ T6396] [ 1016.730598][ T6396] dump_stack_lvl+0xe8/0x150 [ 1016.730622][ T6396] should_fail_ex+0x412/0x560 [ 1016.730645][ T6396] should_failslab+0xa8/0x100 [ 1016.730665][ T6396] __kmalloc_noprof+0xe8/0x760 [ 1016.730686][ T6396] ? sock_kmalloc+0xd6/0x160 [ 1016.730704][ T6396] ? hash_recvmsg+0x130/0x840 [ 1016.730726][ T6396] sock_kmalloc+0xd6/0x160 [ 1016.730747][ T6396] hash_recvmsg+0x1d4/0x840 [ 1016.730771][ T6396] ? __pfx_hash_recvmsg+0x10/0x10 [ 1016.730789][ T6396] sock_recvmsg_nosec+0x10c/0x140 [ 1016.730826][ T6396] ____sys_recvmsg+0x3e3/0x4a0 [ 1016.730854][ T6396] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1016.730886][ T6396] ? import_iovec+0x73/0xa0 [ 1016.730909][ T6396] ___sys_recvmsg+0x215/0x590 [ 1016.730933][ T6396] ? __pfx____sys_recvmsg+0x10/0x10 [ 1016.730954][ T6396] ? __fget_files+0x2a/0x420 [ 1016.731003][ T6396] do_recvmmsg+0x334/0x800 [ 1016.731030][ T6396] ? __pfx_do_recvmmsg+0x10/0x10 [ 1016.731063][ T6396] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1016.731098][ T6396] __x64_sys_recvmmsg+0x198/0x250 [ 1016.731119][ T6396] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1016.731146][ T6396] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1016.731164][ T6396] do_syscall_64+0x174/0x580 [ 1016.731180][ T6396] ? trace_irq_disable+0x3b/0x140 [ 1016.731201][ T6396] ? clear_bhb_loop+0x40/0x90 [ 1016.731221][ T6396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1016.731236][ T6396] RIP: 0033:0x7f5a2499ce59 [ 1016.731252][ T6396] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1016.731265][ T6396] RSP: 002b:00007f5a25840028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1016.731283][ T6396] RAX: ffffffffffffffda RBX: 00007f5a24c15fa0 RCX: 00007f5a2499ce59 [ 1016.731294][ T6396] RDX: 0000000000000600 RSI: 0000200000003700 RDI: 0000000000000005 [ 1016.731304][ T6396] RBP: 00007f5a25840090 R08: 0000000000000000 R09: 0000000000000000 [ 1016.731314][ T6396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1016.731324][ T6396] R13: 00007f5a24c16038 R14: 00007f5a24c15fa0 R15: 00007fffac1426e8 [ 1016.731355][ T6396] [ 1016.733778][ T6394] netlink: 'syz.2.8126': attribute type 16 has an invalid length. [ 1016.753975][ T78] bond1: (slave bridge1): failed to get link speed/duplex [ 1016.805396][ T6394] netlink: 'syz.2.8126': attribute type 17 has an invalid length. [ 1016.955516][T12374] bond1: (slave bridge1): failed to get link speed/duplex [ 1017.167112][ T6394] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1017.176940][ T6394] 8021q: adding VLAN 0 to HW filter on device team0 [ 1017.190131][ T6394] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1017.269305][ T6394] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1017.296583][ T6394] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1017.307524][ T6394] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1017.327223][ T6394] veth1_vlan: left promiscuous mode [ 1017.334243][ T6394] veth0_vlan: left promiscuous mode [ 1017.340476][ T6394] veth0_vlan: entered promiscuous mode [ 1017.355023][ T6394] veth1_vlan: entered promiscuous mode [ 1017.415009][ T6394] veth1_macvtap: left promiscuous mode [ 1017.430280][ T6416] x_tables: duplicate underflow at hook 1 [ 1017.436757][ T6417] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8134'. [ 1017.441789][ T6394] veth0_macvtap: left promiscuous mode [ 1017.454925][ T6394] veth0_macvtap: entered promiscuous mode [ 1017.461925][ T6394] veth1_macvtap: entered promiscuous mode [ 1017.491778][ T6394] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1017.510358][ T6394] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1017.520045][ T6424] netlink: 'syz.0.8132': attribute type 1 has an invalid length. [ 1017.530334][ T6394] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1017.537926][ T6424] netlink: 88 bytes leftover after parsing attributes in process `syz.0.8132'. [ 1017.560428][ T6424] netlink: 'syz.0.8132': attribute type 1 has an invalid length. [ 1017.569915][ T6394] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1017.594773][ T6394] vlan2: left allmulticast mode [ 1017.606264][ T6424] netlink: 638 bytes leftover after parsing attributes in process `syz.0.8132'. [ 1017.618695][ T6394] veth0_macvtap: left allmulticast mode [ 1017.619363][ T6424] netlink: 1 bytes leftover after parsing attributes in process `syz.0.8132'. [ 1017.630301][ T6394] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1017.658522][ T6394] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1017.672866][ T6394] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1017.689452][ T6394] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1017.700540][ T6394] geneve2: left promiscuous mode [ 1017.711853][ T6394] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1017.773942][ T6394] bond6: left promiscuous mode [ 1017.778780][ T6394] ipip1: left promiscuous mode [ 1017.794839][ T3321] bond1: (slave bridge1): failed to get link speed/duplex [ 1017.831304][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 1017.838545][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1017.913761][ T6435] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8133'. [ 1017.927854][ T6437] No such timeout policy "syz1" [ 1018.023640][T12374] bond1: (slave bridge1): failed to get link speed/duplex [ 1018.234953][ T6447] netlink: 'syz.3.8139': attribute type 2 has an invalid length. [ 1018.390728][ T6458] bond4: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1018.491250][ T6458] bond4: (slave lo): Enslaving as an active interface with an up link [ 1018.502565][ T6469] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1018.577120][ T6468] netlink: 'syz.0.8146': attribute type 12 has an invalid length. [ 1019.496651][ T6512] batadv_slave_1: entered promiscuous mode [ 1019.524084][ T6512] batadv_slave_1: entered allmulticast mode [ 1019.637292][ T6521] netlink: 'syz.2.8157': attribute type 21 has an invalid length. [ 1020.114774][ T6542] bond8: entered promiscuous mode [ 1020.120035][ T6542] bond8: entered allmulticast mode [ 1020.131286][ T6543] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 1020.168441][ T6555] bond2: (slave lo): Releasing backup interface [ 1020.201557][ T6555] bond2: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 1020.267641][ T6555] team0: Port device bond0 removed [ 1020.280074][ T6555] bridge_slave_1: left allmulticast mode [ 1020.286529][ T6555] bridge_slave_1: left promiscuous mode [ 1020.292583][ T6555] bridge0: port 2(bridge_slave_1) entered disabled state [ 1020.312277][ T6555] bond0: (slave bond_slave_1): Releasing backup interface [ 1020.348937][ T6555] team0: Port device team_slave_1 removed [ 1020.365175][ T6555] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1020.378673][ T6555] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1020.396959][ T6554] batadv_slave_0: entered promiscuous mode [ 1020.456759][ T6564] bond9: option fail_over_mac: invalid value (255) [ 1020.478863][ T6564] bond9 (unregistering): Released all slaves [ 1020.512563][ T6552] batadv_slave_0: left promiscuous mode [ 1020.598621][ T6579] : renamed from veth0_to_bond (while UP) [ 1020.917201][T18096] Bluetooth: hci4: command 0x0405 tx timeout [ 1020.994362][ T6607] __nla_validate_parse: 13 callbacks suppressed [ 1020.994382][ T6607] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8171'. [ 1021.034453][ T1163] net_ratelimit: 19 callbacks suppressed [ 1021.034474][ T1163] bond1: (slave bridge1): failed to get link speed/duplex [ 1021.196014][ T6612] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1021.203974][T12374] bond1: (slave bridge1): failed to get link speed/duplex [ 1021.323894][ T1163] bond1: (slave bridge1): failed to get link speed/duplex [ 1021.453663][T12374] bond1: (slave bridge1): failed to get link speed/duplex [ 1021.967877][ T6625] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8182'. [ 1022.003649][ T6625] validate_nla: 1 callbacks suppressed [ 1022.003664][ T6625] netlink: 'syz.2.8182': attribute type 21 has an invalid length. [ 1022.039780][ T6629] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8182'. [ 1022.057249][ T3321] bond1: (slave bridge1): failed to get link speed/duplex [ 1022.438151][ T6641] netlink: 52 bytes leftover after parsing attributes in process `syz.3.8186'. [ 1022.451475][ T6640] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8187'. [ 1022.494612][ T6624] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1022.554115][ T58] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1022.611200][ T6636] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1022.669138][ T58] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1022.700620][ T58] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1022.744928][ T58] bond1: (slave bridge1): failed to get link speed/duplex [ 1022.876669][ T78] bond1: (slave bridge1): failed to get link speed/duplex [ 1022.900032][ T6660] netlink: 'syz.3.8189': attribute type 1 has an invalid length. [ 1022.942710][ T6660] bond15: entered promiscuous mode [ 1022.948406][ T6660] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1022.978299][ T6660] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8189'. [ 1022.988380][ T6660] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8189'. [ 1023.003585][ T58] bond1: (slave bridge1): failed to get link speed/duplex [ 1023.123674][ T58] bond1: (slave bridge1): failed to get link speed/duplex [ 1023.262011][ T6678] netlink: 'syz.5.8195': attribute type 16 has an invalid length. [ 1023.289185][ T6678] netlink: 156 bytes leftover after parsing attributes in process `syz.5.8195'. [ 1023.812564][ T6699] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8199'. [ 1024.144248][ T6710] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8204'. [ 1024.367830][ T6624] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1024.396381][ T6624] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1024.432228][ T6729] bridge0: port 3(batadv1) entered blocking state [ 1024.438871][ T6729] bridge0: port 3(batadv1) entered forwarding state [ 1024.513624][ T6624] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1024.528262][ T6624] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1024.648250][ T6729] tipc: New replicast peer: 255.255.255.255 [ 1024.672681][ T6729] tipc: Enabled bearer , priority 5 [ 1024.748308][ T6624] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1024.795196][ T6624] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1024.830409][ T6736] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 1025.041615][ T6761] FAULT_INJECTION: forcing a failure. [ 1025.041615][ T6761] name failslab, interval 1, probability 0, space 0, times 0 [ 1025.065111][ T6761] CPU: 1 UID: 0 PID: 6761 Comm: syz.0.8216 Not tainted syzkaller #0 PREEMPT(full) [ 1025.065132][ T6761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1025.065141][ T6761] Call Trace: [ 1025.065147][ T6761] [ 1025.065153][ T6761] dump_stack_lvl+0xe8/0x150 [ 1025.065174][ T6761] should_fail_ex+0x412/0x560 [ 1025.065193][ T6761] should_failslab+0xa8/0x100 [ 1025.065209][ T6761] __kmalloc_noprof+0xe8/0x760 [ 1025.065229][ T6761] ? sock_kmalloc+0xd6/0x160 [ 1025.065243][ T6761] ? hash_recvmsg+0x130/0x840 [ 1025.065262][ T6761] sock_kmalloc+0xd6/0x160 [ 1025.065279][ T6761] hash_recvmsg+0x1d4/0x840 [ 1025.065298][ T6761] ? __pfx_hash_recvmsg+0x10/0x10 [ 1025.065313][ T6761] sock_recvmsg_nosec+0x10c/0x140 [ 1025.065334][ T6761] ____sys_recvmsg+0x3e3/0x4a0 [ 1025.065358][ T6761] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1025.065385][ T6761] ? import_iovec+0x73/0xa0 [ 1025.065406][ T6761] ___sys_recvmsg+0x215/0x590 [ 1025.065428][ T6761] ? __pfx____sys_recvmsg+0x10/0x10 [ 1025.065450][ T6761] ? __fget_files+0x2a/0x420 [ 1025.065497][ T6761] do_recvmmsg+0x334/0x800 [ 1025.065523][ T6761] ? __pfx_do_recvmmsg+0x10/0x10 [ 1025.065546][ T6761] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1025.065573][ T6761] __x64_sys_recvmmsg+0x198/0x250 [ 1025.065590][ T6761] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1025.065612][ T6761] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1025.065626][ T6761] do_syscall_64+0x174/0x580 [ 1025.065639][ T6761] ? trace_irq_disable+0x3b/0x140 [ 1025.065659][ T6761] ? clear_bhb_loop+0x40/0x90 [ 1025.065675][ T6761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1025.065687][ T6761] RIP: 0033:0x7fdb3f59ce59 [ 1025.065714][ T6761] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1025.065725][ T6761] RSP: 002b:00007fdb4038f028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1025.065740][ T6761] RAX: ffffffffffffffda RBX: 00007fdb3f815fa0 RCX: 00007fdb3f59ce59 [ 1025.065749][ T6761] RDX: 0000000000000600 RSI: 0000200000003700 RDI: 0000000000000005 [ 1025.065757][ T6761] RBP: 00007fdb4038f090 R08: 0000000000000000 R09: 0000000000000000 [ 1025.065765][ T6761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1025.065773][ T6761] R13: 00007fdb3f816038 R14: 00007fdb3f815fa0 R15: 00007ffc9d8f0368 [ 1025.065798][ T6761] [ 1025.313676][ T78] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1025.335471][ T78] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1025.349908][ T78] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1025.358415][ T78] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1025.403699][ T78] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1025.411960][ T78] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1025.421997][T12374] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1025.434591][T12374] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1025.688705][ T6792] FAULT_INJECTION: forcing a failure. [ 1025.688705][ T6792] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1025.703075][ T6792] CPU: 1 UID: 0 PID: 6792 Comm: syz.5.8227 Not tainted syzkaller #0 PREEMPT(full) [ 1025.703099][ T6792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1025.703110][ T6792] Call Trace: [ 1025.703117][ T6792] [ 1025.703125][ T6792] dump_stack_lvl+0xe8/0x150 [ 1025.703148][ T6792] should_fail_ex+0x412/0x560 [ 1025.703171][ T6792] _copy_from_user+0x2d/0xb0 [ 1025.703191][ T6792] ___sys_recvmsg+0x175/0x590 [ 1025.703216][ T6792] ? __pfx____sys_recvmsg+0x10/0x10 [ 1025.703288][ T6792] ? __fget_files+0x2a/0x420 [ 1025.703337][ T6792] do_recvmmsg+0x334/0x800 [ 1025.703363][ T6792] ? __pfx_do_recvmmsg+0x10/0x10 [ 1025.703394][ T6792] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1025.703427][ T6792] __x64_sys_recvmmsg+0x198/0x250 [ 1025.703448][ T6792] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1025.703473][ T6792] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1025.703490][ T6792] do_syscall_64+0x174/0x580 [ 1025.703505][ T6792] ? trace_irq_disable+0x3b/0x140 [ 1025.703527][ T6792] ? clear_bhb_loop+0x40/0x90 [ 1025.703544][ T6792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1025.703560][ T6792] RIP: 0033:0x7f5a2499ce59 [ 1025.703575][ T6792] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1025.703587][ T6792] RSP: 002b:00007f5a25840028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1025.703604][ T6792] RAX: ffffffffffffffda RBX: 00007f5a24c15fa0 RCX: 00007f5a2499ce59 [ 1025.703615][ T6792] RDX: 0000000000000600 RSI: 0000200000003700 RDI: 0000000000000005 [ 1025.703625][ T6792] RBP: 00007f5a25840090 R08: 0000000000000000 R09: 0000000000000000 [ 1025.703634][ T6792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1025.703643][ T6792] R13: 00007f5a24c16038 R14: 00007f5a24c15fa0 R15: 00007fffac1426e8 [ 1025.703669][ T6792] [ 1026.125750][ T8149] net_ratelimit: 19 callbacks suppressed [ 1026.125825][ T8149] bond1: (slave bridge1): failed to get link speed/duplex [ 1026.177553][ T6813] __nla_validate_parse: 2 callbacks suppressed [ 1026.177581][ T6813] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8231'. [ 1026.242690][ T6814] netlink: 60 bytes leftover after parsing attributes in process `syz.5.8230'. [ 1026.254135][ T78] bond1: (slave bridge1): failed to get link speed/duplex [ 1026.335665][ T6817] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8232'. [ 1026.347270][ T6817] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8232'. [ 1026.383600][ T8149] bond1: (slave bridge1): failed to get link speed/duplex [ 1026.493599][ T8149] bond1: (slave bridge1): failed to get link speed/duplex [ 1026.560406][ T6820] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 1026.613885][ T6822] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8234'. [ 1026.772028][ T6830] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8237'. [ 1026.781857][ T6830] netlink: 'syz.0.8237': attribute type 30 has an invalid length. [ 1026.820783][ T78] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1026.822862][ T6830] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8237'. [ 1026.840344][ T6830] netlink: 'syz.0.8237': attribute type 30 has an invalid length. [ 1026.849638][ T78] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1026.927572][ T78] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1026.959693][ T78] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1026.994252][ T78] bond1: (slave bridge1): failed to get link speed/duplex [ 1027.106238][ T6838] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8241'. [ 1027.125254][ T730] bond1: (slave bridge1): failed to get link speed/duplex [ 1027.192650][ T6838] netlink: 'syz.3.8241': attribute type 41 has an invalid length. [ 1027.243999][ T78] bond1: (slave bridge1): failed to get link speed/duplex [ 1027.274091][ T6838] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8241'. [ 1027.310043][ T6849] syzkaller1: entered promiscuous mode [ 1027.329870][ T6849] syzkaller1: entered allmulticast mode [ 1027.374055][ T8149] bond1: (slave bridge1): failed to get link speed/duplex [ 1027.453515][ T6855] netlink: 108 bytes leftover after parsing attributes in process `syz.3.8246'. [ 1027.485778][ T730] bond1: (slave bridge1): failed to get link speed/duplex [ 1027.613592][ T8149] bond1: (slave bridge1): failed to get link speed/duplex [ 1028.065054][ T6864] tc_dump_action: action bad kind [ 1028.070408][ T5822] IPVS: starting estimator thread 0... [ 1028.175176][ T6869] IPVS: using max 32 ests per chain, 76800 per kthread [ 1028.318032][ T6879] netlink: 'syz.5.8252': attribute type 1 has an invalid length. [ 1028.345531][ T6879] tipc: Enabled bearer , priority 0 [ 1028.396368][ T6891] netlink: 'syz.2.8254': attribute type 4 has an invalid length. [ 1028.446717][ T6879] tipc: Disabling bearer [ 1028.501600][ T6893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1028.502251][ T6891] netlink: 'syz.2.8254': attribute type 1 has an invalid length. [ 1028.538208][ T6893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1028.732367][ T6899] bond11 (unregistering): Released all slaves [ 1029.146025][ T6938] tun0: tun_chr_ioctl cmd 1074025680 [ 1029.155637][ T6943] netlink: 'syz.2.8271': attribute type 3 has an invalid length. [ 1029.271266][ T6947] ipip0: entered promiscuous mode [ 1032.142311][ T6956] syzkaller1: entered promiscuous mode [ 1032.162067][ T6956] syzkaller1: entered allmulticast mode [ 1032.207928][ T6949] lo speed is unknown, defaulting to 1000 [ 1032.377301][ T730] net_ratelimit: 8 callbacks suppressed [ 1032.377320][ T730] bond1: (slave bridge1): failed to get link speed/duplex [ 1032.483729][ T6985] bridge0: port 1(syz_tun) entered blocking state [ 1032.512266][ T6988] __nla_validate_parse: 16 callbacks suppressed [ 1032.512284][ T6988] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.8281'. [ 1032.572050][ T6985] bridge0: port 1(syz_tun) entered disabled state [ 1032.647283][ T6985] syz_tun: entered allmulticast mode [ 1032.705523][ T6997] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8283'. [ 1032.725729][ T6985] bridge0: port 1(syz_tun) entered blocking state [ 1032.732320][ T6985] bridge0: port 1(syz_tun) entered forwarding state [ 1032.753732][ T78] bond1: (slave bridge1): failed to get link speed/duplex [ 1032.873871][ T8149] bond1: (slave bridge1): failed to get link speed/duplex [ 1032.983811][ T8149] bond1: (slave bridge1): failed to get link speed/duplex [ 1033.093693][ T8149] bond1: (slave bridge1): failed to get link speed/duplex [ 1033.234708][ T8149] bond1: (slave bridge1): failed to get link speed/duplex [ 1033.298850][T18096] block nbd7: Receive control failed (result -32) [ 1033.480655][ T7025] sctp: [Deprecated]: syz.3.8287 (pid 7025) Use of int in max_burst socket option. [ 1033.480655][ T7025] Use struct sctp_assoc_value instead [ 1033.533834][ T78] bond1: (slave bridge1): failed to get link speed/duplex [ 1033.548834][ T7025] netlink: 'syz.3.8287': attribute type 1 has an invalid length. [ 1033.569890][ T7025] netlink: 224 bytes leftover after parsing attributes in process `syz.3.8287'. [ 1033.654683][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1033.663183][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1033.683292][ T7033] bridge0: port 1(vlan2) entered blocking state [ 1033.705758][ T7033] bridge0: port 1(vlan2) entered disabled state [ 1033.731517][ T7033] vlan2: entered allmulticast mode [ 1033.746605][ T7033] dummy0: entered allmulticast mode [ 1033.787353][ T7033] vlan2: entered promiscuous mode [ 1033.797866][ T7033] dummy0: entered promiscuous mode [ 1033.863716][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1034.020315][ T7031] 8021q: adding VLAN 0 to HW filter on device macvlan6 [ 1034.078262][ T7043] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8291'. [ 1034.095884][ T7039] 8021q: adding VLAN 0 to HW filter on device macvlan7 [ 1034.117212][ T7038] vlan0: entered promiscuous mode [ 1034.302818][ T7035] lo speed is unknown, defaulting to 1000 [ 1034.309232][ T730] bond1: (slave bridge1): failed to get link speed/duplex [ 1034.322021][ T7049] netdevsim netdevsim5: Firmware load for './file0/file0/../file0' refused, path contains '..' component [ 1034.424654][ T3321] bond1: (slave bridge1): failed to get link speed/duplex [ 1034.553895][ T3321] bond1: (slave bridge1): failed to get link speed/duplex [ 1034.680717][ T7059] lo speed is unknown, defaulting to 1000 [ 1035.010337][ T7071] netlink: 56 bytes leftover after parsing attributes in process `syz.5.8297'. [ 1035.134996][ T7076] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1035.167409][ T7081] netlink: 67 bytes leftover after parsing attributes in process `syz.2.8299'. [ 1035.232215][ T7083] Bluetooth: MGMT ver 1.23 [ 1035.252628][ T7084] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8300'. [ 1035.261038][ T7076] 8021q: adding VLAN 0 to HW filter on device eth0 [ 1035.278884][ T7076] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1035.289366][ T7076] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1035.306101][ T7076] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1035.340201][ T7087] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8302'. [ 1035.786835][ T58] wlan1: Trigger new scan to find an IBSS to join [ 1035.966564][ T7108] xt_CT: No such helper "netbios-ns" [ 1035.986658][ T7106] ipip0: entered promiscuous mode [ 1036.263677][ T5651] Bluetooth: hci4: command 0x0405 tx timeout [ 1036.320540][ T7116] netlink: 'syz.5.8310': attribute type 10 has an invalid length. [ 1036.328924][ T7116] netlink: 55 bytes leftover after parsing attributes in process `syz.5.8310'. [ 1036.852657][ T7125] netlink: 60 bytes leftover after parsing attributes in process `syz.5.8313'. [ 1036.919479][ T7125] netlink: 'syz.5.8313': attribute type 3 has an invalid length. [ 1037.462378][ T730] net_ratelimit: 16 callbacks suppressed [ 1037.462399][ T730] bond1: (slave bridge1): failed to get link speed/duplex [ 1037.578985][ T7159] __nla_validate_parse: 1 callbacks suppressed [ 1037.579002][ T7159] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8321'. [ 1037.615052][ T730] bond1: (slave bridge1): failed to get link speed/duplex [ 1037.640989][ T7163] netlink: 40 bytes leftover after parsing attributes in process `syz.5.8322'. [ 1037.798182][ T7172] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8324'. [ 1037.828149][ T7172] bond0: Unable to set up delay as MII monitoring is disabled [ 1037.877028][ T8151] bond1: (slave bridge1): failed to get link speed/duplex [ 1037.955837][ T7176] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8325'. [ 1037.989589][ T7176] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8325'. [ 1038.016404][ T7176] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8325'. [ 1038.054083][ T7176] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8325'. [ 1038.070358][ T7176] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8325'. [ 1038.079095][ T7179] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8326'. [ 1038.099399][ T7176] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8325'. [ 1038.406244][ T8151] bond1: (slave bridge1): failed to get link speed/duplex [ 1038.513173][ T7190] tipc: New replicast peer: 255.255.255.255 [ 1038.530530][ T7190] tipc: Enabled bearer , priority 5 [ 1038.553716][ T3321] bond1: (slave bridge1): failed to get link speed/duplex [ 1038.682805][ T7201] netlink: 'syz.3.8333': attribute type 1 has an invalid length. [ 1038.683655][ T3321] bond1: (slave bridge1): failed to get link speed/duplex [ 1038.715403][ T7201] 8021q: adding VLAN 0 to HW filter on device bond16 [ 1038.736760][ T7201] vlan0: entered allmulticast mode [ 1038.741983][ T7201] bond16: entered allmulticast mode [ 1038.808569][ T8151] bond1: (slave bridge1): failed to get link speed/duplex [ 1038.818549][ T7207] Cannot find del_set index 8192 as target [ 1038.878347][ T7215] xt_TCPMSS: Only works on TCP SYN packets [ 1038.889346][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803ad1f800: rx timeout, send abort [ 1038.929194][ T7218] netlink: 'syz.0.8337': attribute type 13 has an invalid length. [ 1038.940511][ T3321] bond1: (slave bridge1): failed to get link speed/duplex [ 1039.014109][ T7218] tipc: Resetting bearer [ 1039.063953][ T1163] bond1: (slave bridge1): failed to get link speed/duplex [ 1039.183579][ T8151] bond1: (slave bridge1): failed to get link speed/duplex [ 1039.397727][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803ad1f800: abort rx timeout. Force session deactivation [ 1039.458099][ T7237] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 1039.486295][ T7242] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 1040.034607][T15598] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1040.337613][ T7294] syzkaller1: entered promiscuous mode [ 1040.343186][ T7294] syzkaller1: entered allmulticast mode [ 1040.825321][ T3321] wlan1: Trigger new scan to find an IBSS to join [ 1040.942603][ T7336] tipc: Enabling of bearer rejected, failed to enable media [ 1040.984791][T15598] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1041.053235][ T7347] netlink: 'syz.1.8364': attribute type 1 has an invalid length. [ 1041.207264][ T7348] bond11: entered promiscuous mode [ 1041.235836][ T7348] bond11: entered allmulticast mode [ 1041.246652][ T7348] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1041.558142][ T7372] syzkaller1: entered promiscuous mode [ 1041.609461][ T7372] syzkaller1: entered allmulticast mode [ 1041.790312][ T3342] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1042.079640][ T7411] syzkaller0: entered promiscuous mode [ 1042.087459][ T7411] syzkaller0: entered allmulticast mode [ 1042.171003][ T7415] netlink: 'syz.0.8376': attribute type 13 has an invalid length. [ 1042.176564][ T7419] sch_tbf: burst 6 is lower than device gretap0 mtu (1476) ! [ 1042.278857][ T7415] tipc: Resetting bearer [ 1042.504364][ T3321] net_ratelimit: 23 callbacks suppressed [ 1042.504383][ T3321] bond1: (slave bridge1): failed to get link speed/duplex [ 1042.596853][ T7448] netlink: 'syz.1.8381': attribute type 33 has an invalid length. [ 1042.600890][ T7444] __nla_validate_parse: 40 callbacks suppressed [ 1042.600906][ T7444] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8382'. [ 1042.627359][ T7448] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8381'. [ 1042.765095][ T7444] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1042.772415][ T7448] `: renamed from team0 (while UP) [ 1042.828351][ T78] bond1: (slave bridge1): failed to get link speed/duplex [ 1042.851862][ T7455] netlink: 52 bytes leftover after parsing attributes in process `syz.2.8386'. [ 1042.875908][ T7460] syzkaller0: Caught tx_queue_len zero misconfig [ 1042.954020][ T78] bond1: (slave bridge1): failed to get link speed/duplex [ 1043.073610][ T78] bond1: (slave bridge1): failed to get link speed/duplex [ 1043.165623][ T7490] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8395'. [ 1043.191570][ T7492] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 1043.233729][ T78] bond1: (slave bridge1): failed to get link speed/duplex [ 1043.375488][ T78] bond1: (slave bridge1): failed to get link speed/duplex [ 1043.425908][ T7499] workqueue: Failed to create a rescuer kthread for wq "nfc6_nci_tx_wq": -EINTR [ 1043.507087][ T78] bond1: (slave bridge1): failed to get link speed/duplex [ 1043.558636][ T7525] netlink: 44 bytes leftover after parsing attributes in process `syz.1.8401'. [ 1043.664071][ T1163] bond1: (slave bridge1): failed to get link speed/duplex [ 1043.809417][ T7531] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 1043.824486][ T1163] bond1: (slave bridge1): failed to get link speed/duplex [ 1044.005794][ T7551] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8408'. [ 1044.202659][ T7555] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8407'. [ 1044.451949][ T7579] netlink: 136 bytes leftover after parsing attributes in process `syz.1.8415'. [ 1044.542494][ T7579] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8415'. [ 1044.956321][ T7596] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8419'. [ 1045.962057][ T7625] lo speed is unknown, defaulting to 1000 [ 1046.181949][ T7635] gretap0: entered promiscuous mode [ 1046.365412][ T7642] syzkaller0: entered promiscuous mode [ 1046.387813][ T7642] syzkaller0: entered allmulticast mode [ 1047.032313][ T7666] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 1047.583873][ T3342] net_ratelimit: 27 callbacks suppressed [ 1047.583892][ T3342] bond1: (slave bridge1): failed to get link speed/duplex [ 1047.601027][ T7679] netlink: 'syz.5.8439': attribute type 1 has an invalid length. [ 1047.702560][ T7682] __nla_validate_parse: 8 callbacks suppressed [ 1047.702577][ T7682] netlink: 56 bytes leftover after parsing attributes in process `syz.5.8439'. [ 1047.743627][ T3342] bond1: (slave bridge1): failed to get link speed/duplex [ 1047.876617][ T78] bond1: (slave bridge1): failed to get link speed/duplex [ 1048.003993][ T78] bond1: (slave bridge1): failed to get link speed/duplex [ 1048.188229][ T7706] lo speed is unknown, defaulting to 1000 [ 1048.205894][ T8151] bond1: (slave bridge1): failed to get link speed/duplex [ 1048.323873][ T8151] bond1: (slave bridge1): failed to get link speed/duplex [ 1048.455161][ T3342] bond1: (slave bridge1): failed to get link speed/duplex [ 1048.514341][ T7723] netlink: 'syz.3.8451': attribute type 1 has an invalid length. [ 1048.546264][ T7723] netlink: 'syz.3.8451': attribute type 2 has an invalid length. [ 1048.572691][ T7723] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8451'. [ 1048.574240][ T78] bond1: (slave bridge1): failed to get link speed/duplex [ 1048.725210][T12374] bond1: (slave bridge1): failed to get link speed/duplex [ 1048.877128][ T7734] mac80211_hwsim hwsim103 wlan0: entered promiscuous mode [ 1048.906499][ T7734] mac80211_hwsim hwsim103 wlan0: entered allmulticast mode [ 1048.964275][ T78] bond1: (slave bridge1): failed to get link speed/duplex [ 1049.038894][ T7742] netlink: 32 bytes leftover after parsing attributes in process `syz.5.8458'. [ 1049.156641][ T7743] syzkaller0: entered promiscuous mode [ 1049.172421][ T7743] syzkaller0: entered allmulticast mode [ 1049.346698][ T7751] netlink: 550 bytes leftover after parsing attributes in process `syz.3.8461'. [ 1049.794606][ T7770] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8465'. [ 1050.325770][ T7780] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1050.367782][ T7780] syzkaller0: entered promiscuous mode [ 1050.375698][ T7780] syzkaller0: entered allmulticast mode [ 1050.622775][ T7811] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8478'. [ 1050.935874][ T7821] netlink: 'syz.1.8482': attribute type 9 has an invalid length. [ 1051.089547][ T7829] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8484'. [ 1051.248483][ T7839] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8488'. [ 1051.271384][ T7841] bridge0: port 1(erspan0) entered blocking state [ 1051.278548][ T7841] bridge0: port 1(erspan0) entered disabled state [ 1051.285671][ T7841] erspan0: entered allmulticast mode [ 1051.292999][ T7841] erspan0: entered promiscuous mode [ 1051.299194][ T7841] bridge0: port 1(erspan0) entered blocking state [ 1051.305782][ T7841] bridge0: port 1(erspan0) entered forwarding state [ 1051.333812][ T7842] erspan0: left allmulticast mode [ 1051.344422][ T7842] erspan0: left promiscuous mode [ 1051.350742][ T7842] bridge0: port 1(erspan0) entered disabled state [ 1051.408035][ T7849] netlink: 'syz.2.8490': attribute type 3 has an invalid length. [ 1051.436743][ T7842] netlink: 68 bytes leftover after parsing attributes in process `syz.1.8489'. [ 1051.457456][ T7842] netlink: 64 bytes leftover after parsing attributes in process `syz.1.8489'. [ 1051.557540][ T7854] v: renamed from gretap0 (while UP) [ 1051.726738][ T7875] syzkaller1: entered promiscuous mode [ 1051.738840][ T7875] syzkaller1: entered allmulticast mode [ 1051.895307][ T7888] m1Ie5nè‹Ò: entered promiscuous mode [ 1052.295086][ T7914] netlink: 'syz.5.8510': attribute type 1 has an invalid length. [ 1052.315868][ T7914] netlink: 'syz.5.8510': attribute type 4 has an invalid length. [ 1052.490344][ T7930] No such timeout policy "syz1" [ 1052.593898][ T8151] net_ratelimit: 26 callbacks suppressed [ 1052.593917][ T8151] bond1: (slave bridge1): failed to get link speed/duplex [ 1052.607278][ T7933] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 1052.753810][ T8151] bond1: (slave bridge1): failed to get link speed/duplex [ 1052.907531][ T7950] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1052.922195][ T3342] bond1: (slave bridge1): failed to get link speed/duplex [ 1052.928478][ T7950] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1052.948742][ T7955] __nla_validate_parse: 9 callbacks suppressed [ 1052.948758][ T7955] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8522'. [ 1052.964488][ T7950] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1052.985461][ T7955] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8522'. [ 1053.013960][ T7955] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8522'. [ 1053.016712][ T7950] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1053.033693][ T8151] bond1: (slave bridge1): failed to get link speed/duplex [ 1053.042247][ T7945] lo speed is unknown, defaulting to 1000 [ 1053.144423][ T1163] bond1: (slave bridge1): failed to get link speed/duplex [ 1053.217631][ T7961] syzkaller1: entered promiscuous mode [ 1053.223336][ T7961] syzkaller1: entered allmulticast mode [ 1053.334565][T12374] bond1: (slave bridge1): failed to get link speed/duplex [ 1053.454806][ T8151] bond1: (slave bridge1): failed to get link speed/duplex [ 1053.483378][ T7969] gtp2: entered allmulticast mode [ 1053.585086][ T1163] bond1: (slave bridge1): failed to get link speed/duplex [ 1053.704976][ T1163] bond1: (slave bridge1): failed to get link speed/duplex [ 1053.823773][ T1163] bond1: (slave bridge1): failed to get link speed/duplex [ 1053.881834][ T3342] smbdirect: ib_dev[syz2] removed [ 1054.060084][ T7979] vlan0: entered promiscuous mode [ 1054.075283][ T7979] bond16: entered promiscuous mode [ 1054.091006][ T7979] vlan0: left allmulticast mode [ 1054.105198][ T7979] bond16: left allmulticast mode [ 1054.630698][ T8001] netlink: 'syz.3.8536': attribute type 1 has an invalid length. [ 1054.729756][ T8001] 8021q: adding VLAN 0 to HW filter on device bond17 [ 1054.765831][ T8003] bond17: (slave veth23): Enslaving as an active interface with a down link [ 1054.779548][ T8001] dummy0: left promiscuous mode [ 1054.790785][ T8001] bond17: (slave dummy0): making interface the new active one [ 1054.795704][ T8005] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8537'. [ 1054.800609][ T8001] dummy0: entered promiscuous mode [ 1054.813154][ T8001] bond17: (slave dummy0): Enslaving as an active interface with an up link [ 1054.918978][ T8009] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8539'. [ 1055.125018][ T8007] netlink: 64 bytes leftover after parsing attributes in process `syz.5.8538'. [ 1055.395232][ T8025] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8544'. [ 1055.463173][ T8025] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8544'. [ 1055.637377][ T8030] bond7: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 1055.676691][ T8030] bond7 (unregistering): Released all slaves [ 1055.772201][ T8031] pim6reg: entered allmulticast mode [ 1055.938341][ T8033] tipc: Resetting bearer [ 1056.058035][ T8035] bridge0: entered allmulticast mode [ 1056.108304][ T8044] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8547'. [ 1056.160648][ T8046] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8547'. [ 1056.195670][ T8044] ip6tnl3: entered allmulticast mode [ 1056.637260][ T8090] erspan1: entered allmulticast mode [ 1056.687275][ T8091] IPVS: set_ctl: invalid protocol: 0 10.1.1.2:20004 [ 1056.696951][ T8091] netlink: 'syz.2.8558': attribute type 29 has an invalid length. [ 1056.711532][ T8091] netlink: 'syz.2.8558': attribute type 29 has an invalid length. [ 1056.720022][ T8091] netlink: 'syz.2.8558': attribute type 29 has an invalid length. [ 1056.728821][ T8091] netlink: 'syz.2.8558': attribute type 29 has an invalid length. [ 1056.740606][ T8091] netlink: 'syz.2.8558': attribute type 29 has an invalid length. [ 1056.751854][ T8091] netlink: 'syz.2.8558': attribute type 29 has an invalid length. [ 1056.762900][ T8091] netlink: 'syz.2.8558': attribute type 29 has an invalid length. [ 1056.771788][ T8091] netlink: 'syz.2.8558': attribute type 29 has an invalid length. [ 1056.781941][ T8099] hsr0: entered promiscuous mode [ 1056.788268][ T8091] netlink: 'syz.2.8558': attribute type 29 has an invalid length. [ 1056.815896][ T8089] hsr0: left promiscuous mode [ 1057.653669][T12374] net_ratelimit: 26 callbacks suppressed [ 1057.653689][T12374] bond1: (slave bridge1): failed to get link speed/duplex [ 1057.773618][ T8151] bond1: (slave bridge1): failed to get link speed/duplex [ 1057.894048][ T8149] bond1: (slave bridge1): failed to get link speed/duplex [ 1058.003595][ T3321] bond1: (slave bridge1): failed to get link speed/duplex [ 1058.113850][ T3321] bond1: (slave bridge1): failed to get link speed/duplex [ 1058.233649][T12374] bond1: (slave bridge1): failed to get link speed/duplex [ 1058.343630][T12374] bond1: (slave bridge1): failed to get link speed/duplex [ 1058.463610][T12374] bond1: (slave bridge1): failed to get link speed/duplex [ 1058.573775][T12374] bond1: (slave bridge1): failed to get link speed/duplex [ 1058.693677][ T8151] bond1: (slave bridge1): failed to get link speed/duplex [ 1059.416175][ T8070] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1059.605030][ T8121] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20004 [ 1059.625939][ T8128] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 1059.647338][ T8131] __nla_validate_parse: 30 callbacks suppressed [ 1059.647354][ T8131] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8568'. [ 1059.679646][ T8121] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8565'. [ 1059.875584][ T8148] tipc: Failed to remove unknown binding: 66,1,1/1:2194158259/2194158261 [ 1059.905229][ T8148] tipc: Failed to remove unknown binding: 66,1,1/1:2194158259/2194158261 [ 1059.923677][ T8148] tipc: Failed to remove unknown binding: 66,1,1/1:2194158259/2194158261 [ 1060.151281][ T8137] tipc: Resetting bearer [ 1060.171861][ T8137] tipc: Resetting bearer [ 1060.362954][ T8165] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8574'. [ 1060.443353][ T8168] syzkaller1: entered promiscuous mode [ 1060.460540][ T8168] syzkaller1: entered allmulticast mode [ 1060.597456][ T8173] bridge5: the hash_elasticity option has been deprecated and is always 16 [ 1060.606783][ T8173] bridge5: entered allmulticast mode [ 1060.661313][ T8178] validate_nla: 19 callbacks suppressed [ 1060.661331][ T8178] netlink: 'syz.1.8580': attribute type 1 has an invalid length. [ 1060.755860][ T8178] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1060.767179][ T8187] netlink: 'syz.5.8582': attribute type 1 has an invalid length. [ 1061.114532][ T8201] lo speed is unknown, defaulting to 1000 [ 1061.705358][ T8230] netlink: 104 bytes leftover after parsing attributes in process `syz.1.8593'. [ 1061.895309][ T8239] netlink: 'syz.1.8597': attribute type 2 has an invalid length. [ 1061.926216][ T8239] netlink: 'syz.1.8597': attribute type 1 has an invalid length. [ 1062.352699][ T8258] syzkaller0: entered promiscuous mode [ 1062.371824][ T8258] syzkaller0: entered allmulticast mode [ 1062.736189][ T8151] net_ratelimit: 28 callbacks suppressed [ 1062.736209][ T8151] bond1: (slave bridge1): failed to get link speed/duplex [ 1062.762733][ T29] audit: type=1800 audit(1780515302.397:36): pid=8265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.8604" name="memory.events" dev="tmpfs" ino=2412 res=0 errno=0 [ 1062.863595][T12374] bond1: (slave bridge1): failed to get link speed/duplex [ 1062.929107][ T8273] netlink: 224 bytes leftover after parsing attributes in process `syz.1.8609'. [ 1062.948981][ T8274] netlink: 224 bytes leftover after parsing attributes in process `syz.1.8609'. [ 1062.973577][ T8149] bond1: (slave bridge1): failed to get link speed/duplex [ 1063.093630][ T8151] bond1: (slave bridge1): failed to get link speed/duplex [ 1063.170947][ T8280] vlan5: entered allmulticast mode [ 1063.186547][ T8280] bond0: entered allmulticast mode [ 1063.214715][ T8280] netlink: 14 bytes leftover after parsing attributes in process `syz.2.8611'. [ 1063.272566][ T8281] macvlan0: left promiscuous mode [ 1063.315016][ T8281] bond1: left promiscuous mode [ 1063.334281][ T8281] bond2: left promiscuous mode [ 1063.354771][ T8281] bond0: left promiscuous mode [ 1063.380903][ T8281] bond5: left promiscuous mode [ 1063.402468][ T8281] ip6tnl2: left promiscuous mode [ 1063.424434][ T8281] bond11: left promiscuous mode [ 1063.471106][ T8280] bond0 (unregistering): Released all slaves [ 1063.513684][ T8149] bond1: (slave bridge1): failed to get link speed/duplex [ 1063.591228][ T8287] lo speed is unknown, defaulting to 1000 [ 1063.634028][T12374] bond1: (slave bridge1): failed to get link speed/duplex [ 1063.764912][T12374] bond1: (slave bridge1): failed to get link speed/duplex [ 1063.891357][T12374] bond1: (slave bridge1): failed to get link speed/duplex [ 1064.026510][ T1163] bond1: (slave bridge1): failed to get link speed/duplex [ 1064.057086][ T8306] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8617'. [ 1064.153594][T12374] bond1: (slave bridge1): failed to get link speed/duplex [ 1064.300352][ T8317] nbd: must specify at least one socket [ 1064.338502][ T8317] nbd: must specify at least one socket [ 1064.760583][ T8334] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8624'. [ 1064.999776][ T8334] ip6tnl2: entered allmulticast mode [ 1065.232535][ T8339] veth1_vlan: left allmulticast mode [ 1065.470144][ T8361] netlink: 186384 bytes leftover after parsing attributes in process `syz.1.8629'. [ 1065.518079][ T8357] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8629'. [ 1065.574384][ T8357] netlink: 11 bytes leftover after parsing attributes in process `syz.1.8629'. [ 1065.602343][ T8357] netlink: 11 bytes leftover after parsing attributes in process `syz.1.8629'. [ 1065.653102][ T8357] netlink: 52 bytes leftover after parsing attributes in process `syz.1.8629'. [ 1065.886277][ T8380] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8633'. [ 1065.931141][ T1163] dummy0: left promiscuous mode [ 1066.386780][ T8400] tc_dump_action: action bad kind [ 1066.431610][ T8396] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8636'. [ 1067.051283][ T8436] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8642'. [ 1067.130416][ T5651] block nbd8: Receive control failed (result -1) [ 1067.429076][ T8449] bridge0: port 2(team0) entered blocking state [ 1067.436743][ T8449] bridge0: port 2(team0) entered disabled state [ 1067.444189][ T8449] team0: entered allmulticast mode [ 1067.449450][ T8449] macvlan2: entered allmulticast mode [ 1067.456953][ T8449] team0: left allmulticast mode [ 1067.461835][ T8449] macvlan2: left allmulticast mode [ 1067.723180][ T8457] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1067.828720][ T29] audit: type=1804 audit(1780515307.467:37): pid=8464 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.8647" name="/newroot/482/memory.events" dev="tmpfs" ino=2485 res=1 errno=0 [ 1067.857258][T12374] net_ratelimit: 23 callbacks suppressed [ 1067.857275][T12374] bond1: (slave bridge1): failed to get link speed/duplex [ 1067.880624][ T29] audit: type=1800 audit(1780515307.467:38): pid=8464 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.8647" name="memory.events" dev="tmpfs" ino=2485 res=0 errno=0 [ 1067.957199][ T8471] netlink: 'syz.2.8650': attribute type 1 has an invalid length. [ 1067.995477][ T8471] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1068.004555][ T3342] bond1: (slave bridge1): failed to get link speed/duplex [ 1068.047731][ T8471] bond0: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 1068.132461][ T8471] bond0: entered allmulticast mode [ 1068.170976][ T8480] bond0: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1068.213727][ T3342] bond1: (slave bridge1): failed to get link speed/duplex [ 1068.231667][ T8471] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8650'. [ 1068.334989][ T8149] bond1: (slave bridge1): failed to get link speed/duplex [ 1068.474535][ T1163] bond1: (slave bridge1): failed to get link speed/duplex [ 1068.579869][ T8504] lo speed is unknown, defaulting to 1000 [ 1068.593823][ T8149] bond1: (slave bridge1): failed to get link speed/duplex [ 1068.713624][ T8149] bond1: (slave bridge1): failed to get link speed/duplex [ 1068.825015][ T3321] bond1: (slave bridge1): failed to get link speed/duplex [ 1068.944698][ T8149] bond1: (slave bridge1): failed to get link speed/duplex [ 1069.074162][ T3321] bond1: (slave bridge1): failed to get link speed/duplex [ 1069.638671][ T8558] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1069.709135][ T8562] bond17: (slave dummy0): Releasing active interface [ 1070.034978][ T8565] 8021q: adding VLAN 0 to HW filter on device team0 [ 1070.047944][ T8565] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1070.049871][ T8573] __nla_validate_parse: 4 callbacks suppressed [ 1070.049886][ T8573] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8677'. [ 1070.104822][ T8565] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1070.116378][ T8565] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1070.138815][ T8565] veth1_vlan: left promiscuous mode [ 1070.145159][ T8565] veth0_vlan: left promiscuous mode [ 1070.151012][ T8565] veth0_vlan: entered promiscuous mode [ 1070.159158][ T8565] veth1_vlan: entered promiscuous mode [ 1070.168400][ T8565] veth1_macvtap: left promiscuous mode [ 1070.175288][ T8565] veth0_macvtap: left promiscuous mode [ 1070.182525][ T8565] veth0_macvtap: entered promiscuous mode [ 1070.189792][ T8565] veth1_macvtap: entered promiscuous mode [ 1070.216035][ T8565] bond0: left allmulticast mode [ 1070.221198][ T8565] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1070.429201][ T8581] batadv0: Device is already in use. [ 1070.628105][ T8579] lo speed is unknown, defaulting to 1000 [ 1070.776994][ T8599] netlink: 'syz.1.8684': attribute type 1 has an invalid length. [ 1070.845140][ T8603] netlink: 'syz.2.8683': attribute type 1 has an invalid length. [ 1070.881523][ T8601] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.8685'. [ 1071.539654][ T8599] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1071.560530][ T8602] bond13: (slave veth11): Enslaving as an active interface with a down link [ 1071.584089][ T8604] bond13: (slave dummy0): making interface the new active one [ 1071.598591][ T8604] dummy0: entered promiscuous mode [ 1071.606901][ T8604] bond13: (slave dummy0): Enslaving as an active interface with an up link [ 1071.636723][ T8613] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 8 [ 1071.650056][ T3342] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1071.676855][ T3342] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1071.693724][ T3342] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1071.715712][ T3342] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1071.802760][ T3342] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1071.829002][ T3342] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1071.867020][ T3342] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1071.885064][ T3342] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1071.979016][ T8630] tipc: Resetting bearer [ 1072.292201][ T8644] netlink: 6252 bytes leftover after parsing attributes in process `syz.0.8691'. [ 1072.315204][ T8646] netlink: 6252 bytes leftover after parsing attributes in process `syz.0.8691'. [ 1072.782001][ T8662] netlink: 88 bytes leftover after parsing attributes in process `syz.0.8694'. [ 1072.974246][ T1163] net_ratelimit: 61 callbacks suppressed [ 1072.974264][ T1163] bond1: (slave bridge1): failed to get link speed/duplex [ 1073.027406][ T8670] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8696'. [ 1073.113871][ T8151] bond1: (slave bridge1): failed to get link speed/duplex [ 1073.233543][ T8151] bond1: (slave bridge1): failed to get link speed/duplex [ 1073.312606][ T8678] netlink: 144 bytes leftover after parsing attributes in process `syz.3.8698'. [ 1073.373690][ T8151] bond1: (slave bridge1): failed to get link speed/duplex [ 1073.504431][ T3342] bond1: (slave bridge1): failed to get link speed/duplex [ 1073.563423][ T8685] tipc: Enabled bearer , priority 0 [ 1073.607092][ T8684] tipc: Disabling bearer [ 1073.633690][ T3342] bond1: (slave bridge1): failed to get link speed/duplex [ 1073.667269][ T8690] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8700'. [ 1073.755136][T12374] bond1: (slave bridge1): failed to get link speed/duplex [ 1073.886879][ T1163] bond1: (slave bridge1): failed to get link speed/duplex [ 1073.997202][ T8702] lo speed is unknown, defaulting to 1000 [ 1074.003914][ T3342] bond1: (slave bridge1): failed to get link speed/duplex [ 1074.143581][ T1163] bond1: (slave bridge1): failed to get link speed/duplex [ 1074.154403][ T8714] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8708'. [ 1074.163927][ T8714] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8708'. [ 1074.272902][ T8708] lo speed is unknown, defaulting to 1000 [ 1074.316099][ T8719] ip6tnl0: Caught tx_queue_len zero misconfig [ 1074.646572][ T8732] netlink: 'syz.3.8713': attribute type 1 has an invalid length. [ 1074.656504][ T8732] netlink: 'syz.3.8713': attribute type 1 has an invalid length. [ 1074.936441][ T8751] bridge0: port 1(syz_tun) entered disabled state [ 1074.943252][ T8751] bridge0: port 3(batadv1) entered disabled state [ 1074.973869][ T8756] x_tables: ip_tables: osf match: only valid for protocol 6 [ 1075.231444][ T8763] __nla_validate_parse: 3 callbacks suppressed [ 1075.231461][ T8763] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8721'. [ 1075.730506][ T8783] netlink: 'syz.0.8725': attribute type 6 has an invalid length. [ 1075.758012][ T8783] netlink: 56 bytes leftover after parsing attributes in process `syz.0.8725'. [ 1075.773294][ T8785] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8727'. [ 1075.874693][ T8790] syz_tun: left allmulticast mode [ 1075.900288][ T8790] bridge0: port 1(syz_tun) entered disabled state [ 1075.921263][ T8792] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8728'. [ 1076.301172][ T8803] bridge7: entered promiscuous mode [ 1076.314604][ T8803] bridge7: entered allmulticast mode [ 1076.342273][ T8803] team0: Port device bridge7 added [ 1076.455707][ T8813] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8733'. [ 1076.625261][ T8824] netlink: 72 bytes leftover after parsing attributes in process `syz.2.8738'. [ 1076.660933][ T8826] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8737'. [ 1076.747330][T18096] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1076.771405][T18096] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1076.785139][T18096] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1076.797875][T18096] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1076.820267][T18096] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1077.027572][ T8841] tipc: Enabling of bearer rejected, already enabled [ 1077.344976][ T8860] block nbd9: server does not support multiple connections per device. [ 1077.360607][ T8860] block nbd9: shutting down sockets [ 1077.516265][ T8830] lo speed is unknown, defaulting to 1000 [ 1077.574896][ T8879] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8749'. [ 1077.938179][ T8901] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8757'. [ 1078.095061][ T8903] syzkaller0: entered promiscuous mode [ 1078.128172][ T8903] syzkaller0: entered allmulticast mode [ 1078.147769][ T8860] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1078.159227][ T8860] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1078.185845][ T5837] net_ratelimit: 552 callbacks suppressed [ 1078.185860][ T5837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1078.202202][ T8151] bond1: (slave bridge1): failed to get link speed/duplex [ 1078.250997][ T8860] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1078.268972][ T8860] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1078.357398][ T8913] x_tables: ip6_tables: SNAT target: used from hooks OUTPUT, but only usable from INPUT/POSTROUTING [ 1078.614233][ T8921] netlink: 7 bytes leftover after parsing attributes in process `syz.2.8763'. [ 1078.912649][T18096] Bluetooth: hci1: command tx timeout [ 1078.991008][ T5820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1079.224585][ T5837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1079.954904][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1080.277746][ T5837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1080.592149][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1080.615222][ T5837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1080.984096][T18096] Bluetooth: hci1: command tx timeout [ 1081.310454][ T5837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1081.359059][ T8860] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1081.366790][ T8860] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1081.374930][ T8918] team_slave_1: Caught tx_queue_len zero misconfig [ 1081.520025][ T8860] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1081.533614][ T8149] bond1: (slave bridge1): failed to get link speed/duplex [ 1081.543272][ T8860] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1081.575124][ T8934] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8766'. [ 1081.683612][ T1163] bond1: (slave bridge1): failed to get link speed/duplex [ 1081.791602][ T8950] FAULT_INJECTION: forcing a failure. [ 1081.791602][ T8950] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1081.855707][ T8950] CPU: 0 UID: 0 PID: 8950 Comm: syz.1.8769 Not tainted syzkaller #0 PREEMPT(full) [ 1081.855747][ T8950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1081.855760][ T8950] Call Trace: [ 1081.855767][ T8950] [ 1081.855775][ T8950] dump_stack_lvl+0xe8/0x150 [ 1081.855801][ T8950] should_fail_ex+0x412/0x560 [ 1081.855824][ T8950] _copy_from_user+0x2d/0xb0 [ 1081.855843][ T8950] ___sys_recvmsg+0x175/0x590 [ 1081.855868][ T8950] ? __pfx____sys_recvmsg+0x10/0x10 [ 1081.855892][ T8950] ? __fget_files+0x2a/0x420 [ 1081.855941][ T8950] do_recvmmsg+0x334/0x800 [ 1081.855968][ T8950] ? __pfx_do_recvmmsg+0x10/0x10 [ 1081.855994][ T8950] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1081.856023][ T8950] __x64_sys_recvmmsg+0x198/0x250 [ 1081.856044][ T8950] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1081.856069][ T8950] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1081.856087][ T8950] do_syscall_64+0x174/0x580 [ 1081.856104][ T8950] ? trace_irq_disable+0x3b/0x140 [ 1081.856125][ T8950] ? clear_bhb_loop+0x40/0x90 [ 1081.856144][ T8950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1081.856157][ T8950] RIP: 0033:0x7fe82579ce59 [ 1081.856173][ T8950] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1081.856185][ T8950] RSP: 002b:00007fe8266fb028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1081.856202][ T8950] RAX: ffffffffffffffda RBX: 00007fe825a15fa0 RCX: 00007fe82579ce59 [ 1081.856214][ T8950] RDX: 0000000000000600 RSI: 0000200000003700 RDI: 0000000000000005 [ 1081.856224][ T8950] RBP: 00007fe8266fb090 R08: 0000000000000000 R09: 0000000000000000 [ 1081.856234][ T8950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1081.856243][ T8950] R13: 00007fe825a16038 R14: 00007fe825a15fa0 R15: 00007ffc5d1bed18 [ 1081.856269][ T8950] [ 1082.158321][ T8963] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8772'. [ 1082.187199][ T8963] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8772'. [ 1082.338470][ T8830] bridge0: port 1(bridge_slave_0) entered blocking state [ 1082.354172][ T8830] bridge0: port 1(bridge_slave_0) entered disabled state [ 1082.362301][ T8830] bridge_slave_0: entered allmulticast mode [ 1082.425032][ T8830] bridge_slave_0: entered promiscuous mode [ 1082.450989][ T8830] bridge0: port 2(bridge_slave_1) entered blocking state [ 1082.470434][ T8830] bridge0: port 2(bridge_slave_1) entered disabled state [ 1082.480658][ T8830] bridge_slave_1: entered allmulticast mode [ 1082.493151][ T8830] bridge_slave_1: entered promiscuous mode [ 1082.678264][ T8830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1082.721824][ T8830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1082.744963][ T8989] netlink: 6024 bytes leftover after parsing attributes in process `syz.2.8776'. [ 1082.883231][ T8830] team0: Port device team_slave_0 added [ 1082.969442][ T8830] team0: Port device team_slave_1 added [ 1083.092318][ T8830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1083.110069][ T8830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1083.166553][ T8830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1083.211636][ T8830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1083.233997][ T8830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1083.290578][ T9019] netlink: 14 bytes leftover after parsing attributes in process `syz.0.8779'. [ 1083.319939][ T8830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1083.381686][ T9022] FAULT_INJECTION: forcing a failure. [ 1083.381686][ T9022] name failslab, interval 1, probability 0, space 0, times 0 [ 1083.403749][ T10] net_ratelimit: 5 callbacks suppressed [ 1083.403764][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1083.435885][ T9022] CPU: 1 UID: 0 PID: 9022 Comm: syz.2.8781 Not tainted syzkaller #0 PREEMPT(full) [ 1083.435907][ T9022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1083.435917][ T9022] Call Trace: [ 1083.435924][ T9022] [ 1083.435932][ T9022] dump_stack_lvl+0xe8/0x150 [ 1083.435956][ T9022] should_fail_ex+0x412/0x560 [ 1083.435979][ T9022] should_failslab+0xa8/0x100 [ 1083.435998][ T9022] __kmalloc_noprof+0xe8/0x760 [ 1083.436020][ T9022] ? sock_kmalloc+0xd6/0x160 [ 1083.436037][ T9022] ? hash_recvmsg+0x130/0x840 [ 1083.436059][ T9022] sock_kmalloc+0xd6/0x160 [ 1083.436079][ T9022] hash_recvmsg+0x1d4/0x840 [ 1083.436102][ T9022] ? __pfx_hash_recvmsg+0x10/0x10 [ 1083.436120][ T9022] sock_recvmsg_nosec+0x10c/0x140 [ 1083.436144][ T9022] ____sys_recvmsg+0x3e3/0x4a0 [ 1083.436172][ T9022] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1083.436206][ T9022] ? import_iovec+0x73/0xa0 [ 1083.436228][ T9022] ___sys_recvmsg+0x215/0x590 [ 1083.436252][ T9022] ? __pfx____sys_recvmsg+0x10/0x10 [ 1083.436274][ T9022] ? __fget_files+0x2a/0x420 [ 1083.436324][ T9022] do_recvmmsg+0x334/0x800 [ 1083.436350][ T9022] ? __pfx_do_recvmmsg+0x10/0x10 [ 1083.436378][ T9022] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1083.436411][ T9022] __x64_sys_recvmmsg+0x198/0x250 [ 1083.436433][ T9022] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1083.436460][ T9022] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1083.436478][ T9022] do_syscall_64+0x174/0x580 [ 1083.436494][ T9022] ? trace_irq_disable+0x3b/0x140 [ 1083.436516][ T9022] ? clear_bhb_loop+0x40/0x90 [ 1083.436536][ T9022] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1083.436552][ T9022] RIP: 0033:0x7fb82db9ce59 [ 1083.436568][ T9022] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1083.436583][ T9022] RSP: 002b:00007fb82bdf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1083.436600][ T9022] RAX: ffffffffffffffda RBX: 00007fb82de15fa0 RCX: 00007fb82db9ce59 [ 1083.436613][ T9022] RDX: 0000000000000600 RSI: 0000200000003700 RDI: 0000000000000005 [ 1083.436624][ T9022] RBP: 00007fb82bdf6090 R08: 0000000000000000 R09: 0000000000000000 [ 1083.436634][ T9022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1083.436644][ T9022] R13: 00007fb82de16038 R14: 00007fb82de15fa0 R15: 00007ffffba386c8 [ 1083.436674][ T9022] [ 1083.447042][ T8830] hsr_slave_0: entered promiscuous mode [ 1083.650599][ T9030] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8782'. [ 1083.677154][ T8830] hsr_slave_1: entered promiscuous mode [ 1083.729284][ T9032] nbd: couldn't find a device at index 0 [ 1083.740712][ T8830] debugfs: 'hsr0' already exists in 'hsr' [ 1083.747103][ T8830] Cannot create hsr debugfs directory [ 1083.848349][ T8149] bond1: (slave bridge1): failed to get link speed/duplex [ 1083.861305][ T9042] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8785'. [ 1083.947413][ T1163] dummy0: left promiscuous mode [ 1084.057418][ T8151] bond1: (slave bridge1): failed to get link speed/duplex [ 1084.136716][T18096] block nbd9: Receive control failed (result -32) [ 1084.303073][ T9066] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8788'. [ 1084.320236][ T9065] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8789'. [ 1084.345213][T12374] bond1: (slave bridge1): failed to get link speed/duplex [ 1084.436002][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1084.459778][ T9063] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8790'. [ 1084.484950][ T8149] bond1: (slave bridge1): failed to get link speed/duplex [ 1084.633934][ T8149] bond1: (slave bridge1): failed to get link speed/duplex [ 1084.774700][ T8151] bond1: (slave bridge1): failed to get link speed/duplex [ 1084.785565][ T8830] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1084.809852][ T8830] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1084.828529][ T8830] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1084.852613][ T8830] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1084.861071][ T8830] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1084.880204][ T8830] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1084.892291][ T8830] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1084.903324][ T8830] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1084.927919][ T9096] lo speed is unknown, defaulting to 1000 [ 1084.983897][ T3342] bond1: (slave bridge1): failed to get link speed/duplex [ 1085.065156][T15598] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1085.085228][ T9106] vlan2: entered promiscuous mode [ 1085.090394][ T9106] bridge0: entered promiscuous mode [ 1085.127624][ T9108] netlink: 'syz.1.8799': attribute type 4 has an invalid length. [ 1085.289722][ T9120] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1085.429079][ T8830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1085.479891][ T8830] 8021q: adding VLAN 0 to HW filter on device team0 [ 1085.506040][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 1085.513244][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1085.552749][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 1085.559958][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1085.627988][ T9137] FAULT_INJECTION: forcing a failure. [ 1085.627988][ T9137] name failslab, interval 1, probability 0, space 0, times 0 [ 1085.643884][ T9137] CPU: 0 UID: 0 PID: 9137 Comm: syz.1.8807 Not tainted syzkaller #0 PREEMPT(full) [ 1085.643908][ T9137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1085.643918][ T9137] Call Trace: [ 1085.643925][ T9137] [ 1085.643933][ T9137] dump_stack_lvl+0xe8/0x150 [ 1085.643957][ T9137] should_fail_ex+0x412/0x560 [ 1085.643981][ T9137] should_failslab+0xa8/0x100 [ 1085.644000][ T9137] __kmalloc_noprof+0xe8/0x760 [ 1085.644022][ T9137] ? sock_kmalloc+0xd6/0x160 [ 1085.644040][ T9137] ? hash_recvmsg+0x130/0x840 [ 1085.644062][ T9137] sock_kmalloc+0xd6/0x160 [ 1085.644083][ T9137] hash_recvmsg+0x1d4/0x840 [ 1085.644108][ T9137] ? __pfx_hash_recvmsg+0x10/0x10 [ 1085.644127][ T9137] sock_recvmsg_nosec+0x10c/0x140 [ 1085.644152][ T9137] ____sys_recvmsg+0x3e3/0x4a0 [ 1085.644180][ T9137] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1085.644214][ T9137] ? import_iovec+0x73/0xa0 [ 1085.644237][ T9137] ___sys_recvmsg+0x215/0x590 [ 1085.644262][ T9137] ? __pfx____sys_recvmsg+0x10/0x10 [ 1085.644285][ T9137] ? __fget_files+0x2a/0x420 [ 1085.644334][ T9137] do_recvmmsg+0x334/0x800 [ 1085.644361][ T9137] ? __pfx_do_recvmmsg+0x10/0x10 [ 1085.644391][ T9137] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1085.644429][ T9137] __x64_sys_recvmmsg+0x198/0x250 [ 1085.644451][ T9137] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1085.644479][ T9137] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1085.644497][ T9137] do_syscall_64+0x174/0x580 [ 1085.644513][ T9137] ? trace_irq_disable+0x3b/0x140 [ 1085.644536][ T9137] ? clear_bhb_loop+0x40/0x90 [ 1085.644556][ T9137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1085.644571][ T9137] RIP: 0033:0x7fe82579ce59 [ 1085.644588][ T9137] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1085.644601][ T9137] RSP: 002b:00007fe8266fb028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1085.644616][ T9137] RAX: ffffffffffffffda RBX: 00007fe825a15fa0 RCX: 00007fe82579ce59 [ 1085.644627][ T9137] RDX: 0000000000000600 RSI: 0000200000003700 RDI: 0000000000000005 [ 1085.644638][ T9137] RBP: 00007fe8266fb090 R08: 0000000000000000 R09: 0000000000000000 [ 1085.644647][ T9137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1085.644657][ T9137] R13: 00007fe825a16038 R14: 00007fe825a15fa0 R15: 00007ffc5d1bed18 [ 1085.644686][ T9137] [ 1085.929319][ T9147] geneve3: entered promiscuous mode [ 1085.942975][ T9147] geneve3: entered allmulticast mode [ 1086.738379][ T9177] tipc: Enabling of bearer rejected, failed to enable media [ 1086.843088][ T9181] __nla_validate_parse: 2 callbacks suppressed [ 1086.843106][ T9181] netlink: 15672 bytes leftover after parsing attributes in process `syz.3.8816'. [ 1086.890811][ T9181] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8816'. [ 1086.908418][ T9181] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8816'. [ 1086.989424][ T9186] netlink: 'syz.1.8817': attribute type 3 has an invalid length. [ 1087.010927][ T9186] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8817'. [ 1087.102826][ T8830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1087.571553][ T9222] 8021q: adding VLAN 0 to HW filter on device team0 [ 1087.586303][ T9222] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1087.647042][ T9222] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1087.661277][ T9222] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1087.922732][ T8830] veth0_vlan: entered promiscuous mode [ 1087.959557][ T8830] veth1_vlan: entered promiscuous mode [ 1088.049170][ T8830] veth0_macvtap: entered promiscuous mode [ 1088.065610][ T8830] veth1_macvtap: entered promiscuous mode [ 1088.124556][ T8830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1088.166949][ T8830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1088.187526][ T9249] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8830'. [ 1088.201229][T12374] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1088.211448][T12374] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1088.212210][ T9251] xt_HMARK: proto mask must be zero with L3 mode [ 1088.238469][T12374] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1088.274528][T12374] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1088.517671][ T9257] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8832'. [ 1088.597740][ T5822] net_ratelimit: 35 callbacks suppressed [ 1088.597759][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1088.618086][ T9259] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8833'. [ 1088.625008][ T78] bond1: (slave bridge1): failed to get link speed/duplex [ 1088.631597][ T9259] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8833'. [ 1088.644383][ T9260] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8833'. [ 1088.653403][ T9260] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8833'. [ 1088.682081][T12374] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1088.691070][ T9257] netlink: 'syz.1.8832': attribute type 1 has an invalid length. [ 1088.698292][T12374] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1088.708221][ T9257] netlink: 'syz.1.8832': attribute type 2 has an invalid length. [ 1088.751301][ T9259] 8021q: adding VLAN 0 to HW filter on device team0 [ 1088.766593][ T9259] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1088.830645][ T9259] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1088.842929][ T9259] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1088.866813][ T9259] veth1_vlan: left promiscuous mode [ 1088.877737][ T9259] veth0_vlan: entered promiscuous mode [ 1088.891686][ T9259] veth1_vlan: entered promiscuous mode [ 1088.917913][ T9259] veth1_macvtap: left promiscuous mode [ 1088.932649][ T9259] veth0_macvtap: left promiscuous mode [ 1088.940449][ T9259] veth0_macvtap: entered promiscuous mode [ 1088.947867][ T9259] veth1_macvtap: entered promiscuous mode [ 1088.960627][ T9259] tipc: Resetting bearer [ 1088.968600][ T9259] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1088.983266][ T9259] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1088.993125][ T9259] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1089.002474][ T9259] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check. [ 1089.012244][ T9277] netlink: 'syz.2.8837': attribute type 1 has an invalid length. [ 1089.040937][ T9277] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1089.051923][ T8151] bridge0: port 1(vlan4) entered blocking state [ 1089.058349][ T8151] bridge0: port 1(vlan4) entered forwarding state [ 1089.091541][T15592] ip6gretap1: entered promiscuous mode [ 1089.124508][ T9271] bond14: entered allmulticast mode [ 1089.131597][T12374] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1089.160081][T12374] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1089.217501][T12374] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1089.244658][T12374] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1089.253733][T12374] bond1: (slave bridge1): failed to get link speed/duplex [ 1089.342174][ T8151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1089.361177][ T8151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1089.424871][ T9294] syzkaller1: entered promiscuous mode [ 1089.436368][ T9294] syzkaller1: entered allmulticast mode [ 1089.467392][ T9297] netlink: 'syz.0.8843': attribute type 1 has an invalid length. [ 1089.537525][ T9297] bond10: entered promiscuous mode [ 1089.547155][ T9297] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1089.599486][ T9306] netlink: 'syz.3.8845': attribute type 1 has an invalid length. [ 1089.634091][T15592] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1089.728984][ T9297] bond10: (slave bridge6): making interface the new active one [ 1089.745954][ T9297] bridge6: entered promiscuous mode [ 1089.757095][ T9297] bond10: (slave bridge6): Enslaving as an active interface with an up link [ 1089.767480][ T8149] bond1: (slave bridge1): failed to get link speed/duplex [ 1089.780072][ T9306] bridge0: port 3(batadv1) entered blocking state [ 1089.786737][ T9306] bridge0: port 3(batadv1) entered forwarding state [ 1089.885551][ T78] bond1: (slave bridge1): failed to get link speed/duplex [ 1089.935091][ T9323] netlink: 'syz.3.8849': attribute type 1 has an invalid length. [ 1090.011697][ T9327] netlink: 'syz.1.8850': attribute type 4 has an invalid length. [ 1090.027641][ T9327] netlink: 'syz.1.8850': attribute type 4 has an invalid length. [ 1090.073944][ T8149] bond1: (slave bridge1): failed to get link speed/duplex [ 1090.189316][ T8149] bond1: (slave bridge1): failed to get link speed/duplex [ 1090.313765][ T8149] bond1: (slave bridge1): failed to get link speed/duplex [ 1090.418415][ T9367] netlink: 'syz.3.8859': attribute type 18 has an invalid length. [ 1090.429153][ T9369] netlink: 'syz.3.8859': attribute type 18 has an invalid length. [ 1090.802606][ T9389] IPVS: set_ctl: invalid protocol: 137 172.20.20.170:20000 [ 1090.821675][ T9385] x_tables: duplicate underflow at hook 2 [ 1091.773813][ T9430] netlink: 'syz.2.8874': attribute type 1 has an invalid length. [ 1091.920144][ T9430] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1092.087090][ T5651] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1092.102792][ T5651] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1092.120404][ T5651] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1092.129165][ T5651] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1092.141010][ T5651] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1092.276149][ T9433] bond8: (slave veth9): Enslaving as an active interface with a down link [ 1092.298949][ T9436] bond8: (slave dummy0): making interface the new active one [ 1092.309373][ T9436] dummy0: entered promiscuous mode [ 1092.315155][ T9436] bond8: (slave dummy0): Enslaving as an active interface with an up link [ 1092.538576][ T9458] syzkaller1: entered promiscuous mode [ 1092.555378][ T9458] syzkaller1: entered allmulticast mode [ 1092.643845][ T9466] Bluetooth: MGMT ver 1.23 [ 1092.729673][ T9466] veth0: entered promiscuous mode [ 1092.762839][ T9465] veth0: left promiscuous mode [ 1092.921823][ T9441] lo speed is unknown, defaulting to 1000 [ 1093.251839][ T9489] __nla_validate_parse: 18 callbacks suppressed [ 1093.251857][ T9489] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8889'. [ 1093.299706][ T9483] [ 1093.302099][ T9483] ====================================================== [ 1093.309111][ T9483] WARNING: possible circular locking dependency detected [ 1093.316219][ T9483] syzkaller #0 Not tainted [ 1093.320625][ T9483] ------------------------------------------------------ [ 1093.327639][ T9483] syz.3.8887/9483 is trying to acquire lock: [ 1093.333605][ T9483] ffff888027888ed8 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1b3/0x450 [ 1093.343007][ T9483] [ 1093.343007][ T9483] but task is already holding lock: [ 1093.350369][ T9483] ffff8880278889b0 (&q->q_usage_counter(io)#59){++++}-{0:0}, at: elevator_change+0x198/0x450 [ 1093.360564][ T9483] [ 1093.360564][ T9483] which lock already depends on the new lock. [ 1093.360564][ T9483] [ 1093.370964][ T9483] [ 1093.370964][ T9483] the existing dependency chain (in reverse order) is: [ 1093.379976][ T9483] [ 1093.379976][ T9483] -> #6 (&q->q_usage_counter(io)#59){++++}-{0:0}: [ 1093.388592][ T9483] blk_alloc_queue+0x546/0x680 [ 1093.393873][ T9483] __blk_mq_alloc_disk+0x197/0x390 [ 1093.399490][ T9483] nbd_dev_add+0x499/0xb50 [ 1093.404414][ T9483] nbd_init+0x168/0x1f0 [ 1093.409081][ T9483] do_one_initcall+0x250/0x870 [ 1093.414359][ T9483] do_initcall_level+0x104/0x190 [ 1093.419817][ T9483] do_initcalls+0x59/0xa0 [ 1093.424664][ T9483] kernel_init_freeable+0x2a6/0x3e0 [ 1093.430374][ T9483] kernel_init+0x1d/0x1d0 [ 1093.435213][ T9483] ret_from_fork+0x514/0xb70 [ 1093.440308][ T9483] ret_from_fork_asm+0x1a/0x30 [ 1093.445580][ T9483] [ 1093.445580][ T9483] -> #5 (fs_reclaim){+.+.}-{0:0}: [ 1093.452777][ T9483] fs_reclaim_acquire+0x71/0x100 [ 1093.458232][ T9483] kmem_cache_alloc_node_noprof+0x4a/0x690 [ 1093.464638][ T9483] __alloc_skb+0x1d0/0x7d0 [ 1093.469560][ T9483] __ip6_append_data+0x2d3c/0x3f60 [ 1093.475179][ T9483] ip6_append_data+0x10f/0x280 [ 1093.480454][ T9483] rawv6_sendmsg+0x12d3/0x18e0 [ 1093.485727][ T9483] ____sys_sendmsg+0x80a/0x9f0 [ 1093.491009][ T9483] ___sys_sendmsg+0x2a5/0x360 [ 1093.496195][ T9483] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1093.501633][ T9483] do_syscall_64+0x174/0x580 [ 1093.506732][ T9483] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1093.513136][ T9483] [ 1093.513136][ T9483] -> #4 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 1093.520857][ T9483] lock_sock_nested+0x41/0x100 [ 1093.526130][ T9483] inet_shutdown+0x6a/0x390 [ 1093.531141][ T9483] nbd_mark_nsock_dead+0x2e9/0x560 [ 1093.536758][ T9483] recv_work+0x1c2e/0x1d40 [ 1093.541679][ T9483] process_scheduled_works+0xb5d/0x1860 [ 1093.547740][ T9483] worker_thread+0xa53/0xfc0 [ 1093.552831][ T9483] kthread+0x389/0x470 [ 1093.557405][ T9483] ret_from_fork+0x514/0xb70 [ 1093.562512][ T9483] ret_from_fork_asm+0x1a/0x30 [ 1093.567783][ T9483] [ 1093.567783][ T9483] -> #3 (&nsock->tx_lock){+.+.}-{4:4}: [ 1093.575414][ T9483] __mutex_lock+0x1a3/0x1550 [ 1093.580514][ T9483] nbd_queue_rq+0x37b/0x1100 [ 1093.585609][ T9483] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 1093.591664][ T9483] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 1093.598499][ T9483] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1093.604997][ T9483] blk_mq_run_hw_queue+0x348/0x4f0 [ 1093.610631][ T9483] blk_mq_dispatch_list+0xd16/0xe10 [ 1093.616347][ T9483] blk_mq_flush_plug_list+0x48d/0x570 [ 1093.622231][ T9483] __blk_flush_plug+0x3ed/0x4d0 [ 1093.627586][ T9483] __submit_bio+0x28d/0x580 [ 1093.632598][ T9483] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 1093.638741][ T9483] block_read_full_folio+0x599/0x830 [ 1093.644533][ T9483] filemap_read_folio+0x137/0x3b0 [ 1093.650065][ T9483] do_read_cache_folio+0x358/0x590 [ 1093.655681][ T9483] read_part_sector+0xb6/0x2b0 [ 1093.660952][ T9483] adfspart_check_ICS+0xb1/0x960 [ 1093.666394][ T9483] bdev_disk_changed+0x817/0x1770 [ 1093.671927][ T9483] blkdev_get_whole+0x380/0x510 [ 1093.677281][ T9483] bdev_open+0x31e/0xd30 [ 1093.682028][ T9483] blkdev_open+0x470/0x610 [ 1093.686945][ T9483] do_dentry_open+0x822/0x13a0 [ 1093.692210][ T9483] vfs_open+0x3b/0x340 [ 1093.696781][ T9483] path_openat+0x2e08/0x3860 [ 1093.701874][ T9483] do_file_open+0x23e/0x4a0 [ 1093.706883][ T9483] do_sys_openat2+0x113/0x200 [ 1093.712067][ T9483] __x64_sys_openat+0x138/0x170 [ 1093.717423][ T9483] do_syscall_64+0x174/0x580 [ 1093.722517][ T9483] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1093.728917][ T9483] [ 1093.728917][ T9483] -> #2 (&cmd->lock){+.+.}-{4:4}: [ 1093.736111][ T9483] __mutex_lock+0x1a3/0x1550 [ 1093.741292][ T9483] nbd_queue_rq+0xc6/0x1100 [ 1093.746303][ T9483] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 1093.752351][ T9483] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 1093.759191][ T9483] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1093.765677][ T9483] blk_mq_run_hw_queue+0x348/0x4f0 [ 1093.771293][ T9483] blk_mq_dispatch_list+0xd16/0xe10 [ 1093.776998][ T9483] blk_mq_flush_plug_list+0x48d/0x570 [ 1093.782873][ T9483] __blk_flush_plug+0x3ed/0x4d0 [ 1093.788228][ T9483] __submit_bio+0x28d/0x580 [ 1093.793233][ T9483] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 1093.799370][ T9483] block_read_full_folio+0x599/0x830 [ 1093.805160][ T9483] filemap_read_folio+0x137/0x3b0 [ 1093.810697][ T9483] do_read_cache_folio+0x358/0x590 [ 1093.816314][ T9483] read_part_sector+0xb6/0x2b0 [ 1093.821586][ T9483] adfspart_check_ICS+0xb1/0x960 [ 1093.827198][ T9483] bdev_disk_changed+0x817/0x1770 [ 1093.832723][ T9483] blkdev_get_whole+0x380/0x510 [ 1093.838076][ T9483] bdev_open+0x31e/0xd30 [ 1093.842820][ T9483] blkdev_open+0x470/0x610 [ 1093.847739][ T9483] do_dentry_open+0x822/0x13a0 [ 1093.853005][ T9483] vfs_open+0x3b/0x340 [ 1093.857575][ T9483] path_openat+0x2e08/0x3860 [ 1093.862678][ T9483] do_file_open+0x23e/0x4a0 [ 1093.867700][ T9483] do_sys_openat2+0x113/0x200 [ 1093.872881][ T9483] __x64_sys_openat+0x138/0x170 [ 1093.878235][ T9483] do_syscall_64+0x174/0x580 [ 1093.883328][ T9483] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1093.889725][ T9483] [ 1093.889725][ T9483] -> #1 (set->srcu){.+.+}-{0:0}: [ 1093.896828][ T9483] __synchronize_srcu+0xca/0x300 [ 1093.902267][ T9483] elevator_switch+0x1e8/0x7a0 [ 1093.907534][ T9483] elevator_change+0x2cc/0x450 [ 1093.912805][ T9483] elevator_set_default+0x36c/0x430 [ 1093.918506][ T9483] blk_register_queue+0x3e9/0x4e0 [ 1093.924034][ T9483] __add_disk+0x677/0xd50 [ 1093.928865][ T9483] add_disk_fwnode+0xfb/0x480 [ 1093.934045][ T9483] nbd_dev_add+0x72c/0xb50 [ 1093.938969][ T9483] nbd_init+0x168/0x1f0 [ 1093.943633][ T9483] do_one_initcall+0x250/0x870 [ 1093.948899][ T9483] do_initcall_level+0x104/0x190 [ 1093.954336][ T9483] do_initcalls+0x59/0xa0 [ 1093.959167][ T9483] kernel_init_freeable+0x2a6/0x3e0 [ 1093.964874][ T9483] kernel_init+0x1d/0x1d0 [ 1093.969711][ T9483] ret_from_fork+0x514/0xb70 [ 1093.974805][ T9483] ret_from_fork_asm+0x1a/0x30 [ 1093.980079][ T9483] [ 1093.980079][ T9483] -> #0 (&q->elevator_lock){+.+.}-{4:4}: [ 1093.987879][ T9483] __lock_acquire+0x15a5/0x2cf0 [ 1093.993233][ T9483] lock_acquire+0x106/0x350 [ 1093.998245][ T9483] __mutex_lock+0x1a3/0x1550 [ 1094.003335][ T9483] elevator_change+0x1b3/0x450 [ 1094.008600][ T9483] elevator_set_none+0xb5/0x140 [ 1094.013953][ T9483] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 1094.020275][ T9483] nbd_start_device+0x17f/0xb10 [ 1094.025629][ T9483] nbd_genl_connect+0x165b/0x1cf0 [ 1094.031155][ T9483] genl_family_rcv_msg_doit+0x22a/0x330 [ 1094.037205][ T9483] genl_rcv_msg+0x61c/0x7a0 [ 1094.042209][ T9483] netlink_rcv_skb+0x232/0x4b0 [ 1094.047473][ T9483] genl_rcv+0x28/0x40 [ 1094.051959][ T9483] netlink_unicast+0x75c/0x8e0 [ 1094.057231][ T9483] netlink_sendmsg+0x813/0xb40 [ 1094.062513][ T9483] ____sys_sendmsg+0x972/0x9f0 [ 1094.067787][ T9483] ___sys_sendmsg+0x2a5/0x360 [ 1094.072978][ T9483] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1094.078423][ T9483] do_syscall_64+0x174/0x580 [ 1094.083519][ T9483] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1094.089914][ T9483] [ 1094.089914][ T9483] other info that might help us debug this: [ 1094.089914][ T9483] [ 1094.100120][ T9483] Chain exists of: [ 1094.100120][ T9483] &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#59 [ 1094.100120][ T9483] [ 1094.113846][ T9483] Possible unsafe locking scenario: [ 1094.113846][ T9483] [ 1094.121280][ T9483] CPU0 CPU1 [ 1094.126633][ T9483] ---- ---- [ 1094.131977][ T9483] lock(&q->q_usage_counter(io)#59); [ 1094.137339][ T9483] lock(fs_reclaim); [ 1094.143823][ T9483] lock(&q->q_usage_counter(io)#59); [ 1094.151716][ T9483] lock(&q->elevator_lock); [ 1094.156292][ T9483] [ 1094.156292][ T9483] *** DEADLOCK *** [ 1094.156292][ T9483] [ 1094.164447][ T9483] 6 locks held by syz.3.8887/9483: [ 1094.169533][ T9483] #0: ffffffff8fe392e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1094.177707][ T9483] #1: ffffffff8fe39120 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1094.186748][ T9483] #2: ffff888027bb19c0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xad/0x1a60 [ 1094.198126][ T9483] #3: ffff888027bb18d0 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xc0/0x1a60 [ 1094.209068][ T9483] #4: ffff8880278889b0 (&q->q_usage_counter(io)#59){++++}-{0:0}, at: elevator_change+0x198/0x450 [ 1094.219686][ T9483] #5: ffff8880278889e8 (&q->q_usage_counter(queue)#43){+.+.}-{0:0}, at: elevator_change+0x198/0x450 [ 1094.230574][ T9483] [ 1094.230574][ T9483] stack backtrace: [ 1094.236467][ T9483] CPU: 1 UID: 0 PID: 9483 Comm: syz.3.8887 Not tainted syzkaller #0 PREEMPT(full) [ 1094.236486][ T9483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1094.236496][ T9483] Call Trace: [ 1094.236504][ T9483] [ 1094.236511][ T9483] dump_stack_lvl+0xe8/0x150 [ 1094.236530][ T9483] print_circular_bug+0x2e1/0x300 [ 1094.236548][ T9483] check_noncircular+0x12e/0x150 [ 1094.236570][ T9483] __lock_acquire+0x15a5/0x2cf0 [ 1094.236592][ T9483] ? elevator_change+0x1b3/0x450 [ 1094.236605][ T9483] lock_acquire+0x106/0x350 [ 1094.236618][ T9483] ? elevator_change+0x1b3/0x450 [ 1094.236635][ T9483] __mutex_lock+0x1a3/0x1550 [ 1094.236649][ T9483] ? elevator_change+0x1b3/0x450 [ 1094.236664][ T9483] ? rcu_is_watching+0x15/0xb0 [ 1094.236680][ T9483] ? work_grab_pending+0x3d1/0x990 [ 1094.236694][ T9483] ? elevator_change+0x1b3/0x450 [ 1094.236708][ T9483] ? __pfx___mutex_lock+0x10/0x10 [ 1094.236720][ T9483] ? enable_work+0x17f/0x230 [ 1094.236733][ T9483] ? lockdep_hardirqs_on+0x7a/0x110 [ 1094.236749][ T9483] ? __cancel_work_sync+0xf7/0x110 [ 1094.236763][ T9483] ? blk_mq_cancel_work_sync+0xa5/0xe0 [ 1094.236779][ T9483] elevator_change+0x1b3/0x450 [ 1094.236795][ T9483] elevator_set_none+0xb5/0x140 [ 1094.236809][ T9483] ? __pfx_elevator_set_none+0x10/0x10 [ 1094.236824][ T9483] ? xa_load+0x1db/0x210 [ 1094.236839][ T9483] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 1094.236861][ T9483] ? kernfs_add_one+0x477/0x5c0 [ 1094.236878][ T9483] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 1094.236898][ T9483] ? sysfs_add_file_mode_ns+0x259/0x300 [ 1094.236914][ T9483] nbd_start_device+0x17f/0xb10 [ 1094.236935][ T9483] ? device_create_file+0xf4/0x1b0 [ 1094.236953][ T9483] nbd_genl_connect+0x165b/0x1cf0 [ 1094.236969][ T9483] ? __pfx___nla_validate_parse+0x10/0x10 [ 1094.236994][ T9483] ? __pfx_nbd_genl_connect+0x10/0x10 [ 1094.237012][ T9483] ? rcu_is_watching+0x15/0xb0 [ 1094.237025][ T9483] ? trace_kmalloc+0x2a/0xf0 [ 1094.237043][ T9483] ? __nla_parse+0x40/0x60 [ 1094.237058][ T9483] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 1094.237075][ T9483] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 1094.237095][ T9483] genl_family_rcv_msg_doit+0x22a/0x330 [ 1094.237114][ T9483] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1094.237134][ T9483] ? __lock_acquire+0x6b5/0x2cf0 [ 1094.237149][ T9483] genl_rcv_msg+0x61c/0x7a0 [ 1094.237166][ T9483] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1094.237181][ T9483] ? __pfx_nbd_genl_connect+0x10/0x10 [ 1094.237202][ T9483] netlink_rcv_skb+0x232/0x4b0 [ 1094.237216][ T9483] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1094.237231][ T9483] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1094.237250][ T9483] ? down_read+0x270/0x2e0 [ 1094.237262][ T9483] ? genl_rcv+0xd/0x40 [ 1094.237278][ T9483] genl_rcv+0x28/0x40 [ 1094.237292][ T9483] netlink_unicast+0x75c/0x8e0 [ 1094.237308][ T9483] netlink_sendmsg+0x813/0xb40 [ 1094.237324][ T9483] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1094.237338][ T9483] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1094.237356][ T9483] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1094.237374][ T9483] ____sys_sendmsg+0x972/0x9f0 [ 1094.237388][ T9483] ? __might_fault+0xaf/0x130 [ 1094.237405][ T9483] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1094.237422][ T9483] ? import_iovec+0x73/0xa0 [ 1094.237437][ T9483] ___sys_sendmsg+0x2a5/0x360 [ 1094.237449][ T9483] ? __lock_acquire+0x6b5/0x2cf0 [ 1094.237463][ T9483] ? __pfx____sys_sendmsg+0x10/0x10 [ 1094.237479][ T9483] ? futex_wait+0x2a2/0x390 [ 1094.237504][ T9483] ? __fget_files+0x2a/0x420 [ 1094.237518][ T9483] ? __fget_files+0x3a0/0x420 [ 1094.237535][ T9483] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1094.237549][ T9483] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1094.237566][ T9483] ? rcu_is_watching+0x15/0xb0 [ 1094.237583][ T9483] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1094.237596][ T9483] do_syscall_64+0x174/0x580 [ 1094.237609][ T9483] ? trace_irq_disable+0x3b/0x140 [ 1094.237626][ T9483] ? clear_bhb_loop+0x40/0x90 [ 1094.237639][ T9483] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1094.237651][ T9483] RIP: 0033:0x7f35e179ce59 [ 1094.237664][ T9483] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1094.237676][ T9483] RSP: 002b:00007f35df9f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1094.237690][ T9483] RAX: ffffffffffffffda RBX: 00007f35e1a15fa0 RCX: 00007f35e179ce59 [ 1094.237699][ T9483] RDX: 0000000000000004 RSI: 0000200000001ac0 RDI: 0000000000000007 [ 1094.237708][ T9483] RBP: 00007f35e1832d6f R08: 0000000000000000 R09: 0000000000000000 [ 1094.237716][ T9483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1094.237723][ T9483] R13: 00007f35e1a16038 R14: 00007f35e1a15fa0 R15: 00007ffc5b769d88 [ 1094.237738][ T9483] [ 1094.237923][T18096] Bluetooth: hci6: command tx timeout [ 1094.271249][ T9552] net_ratelimit: 26 callbacks suppressed SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1094.271265][ T9552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1094.708700][T15592] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1094.712407][ T78] bond1: (slave bridge1): failed to get link speed/duplex [ 1094.725288][T15598] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1094.744278][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1094.752540][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1094.835560][ T3321] bond1: (slave bridge1): failed to get link speed/duplex [ 1094.949053][ T5651] block nbd10: Receive control failed (result -32) [ 1094.955823][T18096] block nbd10: Receive control failed (result -32) [ 1094.962471][T18096] block nbd10: Receive control failed (result -32) [ 1094.973636][ T78] bond1: (slave bridge1): failed to get link speed/duplex [ 1095.123574][ T8151] bond1: (slave bridge1): failed to get link speed/duplex [ 1095.308863][T15592] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1095.708808][ T3321] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1095.769738][ T3321] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1095.809832][ T3321] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1095.848259][ T3321] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1096.174632][ T5295] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1096.251375][ T3321] bridge_slave_1: left allmulticast mode [ 1096.258423][ T3321] bridge_slave_1: left promiscuous mode [ 1096.264953][ T3321] bridge0: port 2(bridge_slave_1) entered disabled state [ 1096.278644][ T3321] bridge_slave_0: left allmulticast mode [ 1096.284477][ T3321] bridge_slave_0: left promiscuous mode [ 1096.290196][ T3321] bridge0: port 1(bridge_slave_0) entered disabled state [ 1096.305485][ T3321] dvmrp0: left allmulticast mode [ 1096.396494][ T3321] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1096.408615][ T3321] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1096.419198][ T3321] bond0 (unregistering): Released all slaves [ 1096.565586][ T3321] tipc: Disabling bearer [ 1096.578021][ T3321] bond8 (unregistering): (slave bridge0): Releasing active interface [ 1096.612328][ T3321] .` (unregistering): Released all slaves [ 1096.620203][ T3321] bond1 (unregistering): Released all slaves [ 1096.629554][ T3321] bond2 (unregistering): Released all slaves [ 1096.641559][ T8151] smc: removing ib device syz1 [ 1096.647751][ T3321] bond0 (unregistering): Released all slaves [ 1096.659979][ T3321] bond3 (unregistering): Released all slaves [ 1096.669474][ T3321] bond4 (unregistering): Released all slaves [ 1096.678248][ T3321] bond5 (unregistering): Released all slaves [ 1096.687392][ T3321] bond6 (unregistering): Released all slaves [ 1096.696710][ T3321] bond7 (unregistering): Released all slaves [ 1096.707013][ T3321] bond8 (unregistering): Released all slaves [ 1096.719770][ T3321] bond9 (unregistering): Released all slaves [ 1096.732869][ T3321] bond10 (unregistering): Released all slaves [ 1096.742234][ T3321] bond11 (unregistering): Released all slaves [ 1096.751542][ T3321] bond12 (unregistering): Released all slaves [ 1096.761738][ T3321] bond13 (unregistering): (slave veth11): Releasing active interface [ 1096.774853][ T3321] dummy0: entered promiscuous mode [ 1096.781557][ T3321] bond13 (unregistering): (slave dummy0): Releasing active interface [ 1096.790841][ T3321] bond13 (unregistering): Released all slaves [ 1096.799848][ T3321] bond14 (unregistering): Released all slaves [ 1096.810064][ T5295] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1096.831885][ T8151] smbdirect: ib_dev[syz1] removed [ 1097.331268][ T5295] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1097.726325][ T5295] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1097.988932][ T5295] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1097.996751][ T3321] tipc: Left network mode [ 1098.241118][ T5295] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1098.508303][ T5295] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1098.690994][ T3321] hsr_slave_0: left promiscuous mode [ 1098.697067][ T3321] hsr_slave_1: left promiscuous mode [ 1098.702937][ T3321] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1098.711626][ T3321] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1098.719833][ T3321] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1098.727801][ T3321] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1098.741921][ T3321] veth1_macvtap: left promiscuous mode [ 1098.747758][ T3321] veth0_macvtap: left promiscuous mode [ 1098.753315][ T3321] veth1_vlan: left promiscuous mode [ 1098.758965][ T3321] veth0_vlan: left promiscuous mode [ 1098.889973][ T3321] team0 (unregistering): Port device team_slave_1 removed [ 1098.914281][ T3321] team0 (unregistering): Port device team_slave_0 removed [ 1099.123002][ T5295] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1099.376942][T12374] net_ratelimit: 29 callbacks suppressed [ 1099.376963][T12374] bond1: (slave bridge1): failed to get link speed/duplex [ 1099.476206][T15592] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1099.493906][ T8151] bond1: (slave bridge1): failed to get link speed/duplex [ 1099.559929][ T3321] IPVS: stop unused estimator thread 0... [ 1099.604435][ T78] bond1: (slave bridge1): failed to get link speed/duplex [ 1099.715040][T12374] bond1: (slave bridge1): failed to get link speed/duplex [ 1099.823665][T12374] bond1: (slave bridge1): failed to get link speed/duplex [ 1099.944487][ T8149] bond1: (slave bridge1): failed to get link speed/duplex [ 1100.064506][ T78] bond1: (slave bridge1): failed to get link speed/duplex [ 1100.174219][ T8149] bond1: (slave bridge1): failed to get link speed/duplex [ 1100.283571][T12374] bond1: (slave bridge1): failed to get link speed/duplex