last executing test programs: 10.55189098s ago: executing program 2 (id=3212): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@newtclass={0x24, 0x28, 0x0, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x9, 0x4}, {0x7, 0xfffc}, {0xb, 0xf}}}, 0x24}}, 0x80800) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000002240)=ANY=[@ANYBLOB="1c0000000f1401"], 0x1c}, 0x1, 0x0, 0x0, 0x8044}, 0x8) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x810) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_DESC={0x8, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x6c}}, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x2c}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100001080000e3015b08162335a00000", @ANYRES32=0x0, @ANYBLOB="80400100000001000c002b8008000300", @ANYRES32=r3, @ANYBLOB="08001b"], 0x34}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bond0\x00'}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10000, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x8, 0x0, 0x100000001, 0x0, 0x0, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000000, 0x0, 0xffffffffffffffff}, 0xfffffffe}}, 0xb8}}, 0x4004) sendmsg$nl_xfrm(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x4, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x1000, 0x0, 0xa, 0x20}, {}, {0x1, 0x6, 0x0, 0xfffffffffffffffe}}}, 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x987a3a9f32358a4c) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r8) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r8, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)={0x14, r9, 0x1, 0x0, 0x0, {0x6, 0x0, 0x900}}, 0x14}, 0x2, 0x34005, 0x0, 0x24080040}, 0x24044800) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r6, &(0x7f0000000640)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x88, r9, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'netdevsim0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:dhcpc_state_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000800}, 0x8044) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r4, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, r5, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x20}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x42}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc040}, 0x80) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x74, r5, 0x8, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0xfffffffb}, @void, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000004}, 0x8800) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 10.228397499s ago: executing program 2 (id=3217): openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) (async, rerun: 64) r0 = socket$alg(0x26, 0x5, 0x0) (rerun: 64) bind$alg(r0, 0x0, 0x0) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) close(0xffffffffffffffff) r3 = socket$kcm(0x29, 0x5, 0x0) (async) r4 = openat$cgroup_ro(r1, &(0x7f0000000400)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) (async) r5 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000b00)="b6bd7e4983a45b31f79d80060400000000000000a33734d88229acf96457ad59d0b87f8659b614043e3d21a7cacecab8bbd26251b93b28b4d83e618673f9c74d0a28a5146c5511549fa617e908352c87d8ddff2ce042a1e58eb7b63759cab3526dd8ae1566ddcfb5fa83e8b2940b3ed1b8", 0x71}, {&(0x7f0000000880)="3aa854", 0x3}, {&(0x7f0000000a40)="746b9120a32aaf78043a9b0700000000000000", 0x13}], 0x3}, 0xc854) setsockopt$sock_int(r5, 0x1, 0x10, &(0x7f0000000180)=0x4c, 0x4) (async) sendfile(r3, r4, 0x0, 0xffffffff002) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x0, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x44010}, 0x40000) (async) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x5, r6, 0x1, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x8014) (async) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) (async) r8 = socket$inet_tcp(0x2, 0x1, 0x0) splice(r8, &(0x7f0000000040)=0xa, r7, &(0x7f0000000100)=0x10000000005, 0xfffffffffffffff8, 0x6) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) (async) sendto$inet(r7, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f00000000c0)='bbr', 0x3) (async) recvfrom$inet(r7, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) (async, rerun: 32) ioctl$AUTOFS_IOC_CATATONIC(r2, 0x9362, 0x0) (rerun: 32) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000000380)=@newchain={0x24, 0x64, 0x300, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0xfff2}, {0x6, 0xb}, {0xa, 0x1ffe4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000200000000008001b00000000000400"], 0x44}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) 9.118075505s ago: executing program 2 (id=3225): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @multicast1}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x24}, 0x1, 0x5502000000000000}, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], 0x0, 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) sendmmsg$inet(r2, &(0x7f0000001500)=[{{0x0, 0x100000019, &(0x7f0000000b00)=[{&(0x7f00000002c0)="89", 0x34000}, {0x0}], 0x2, &(0x7f0000000e40)=ANY=[], 0xd0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40) recvmmsg(r2, &(0x7f0000000400), 0x5a, 0x40000000, 0x0) 3.870266766s ago: executing program 4 (id=3278): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmmsg(0xffffffffffffffff, &(0x7f0000004000)=[{{0x0, 0x0, &(0x7f0000002a80)=[{&(0x7f0000000440)='M', 0x1}], 0x1}}], 0x1, 0x4040040) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0xff34, &(0x7f0000000000)=[@in6={0xa, 0x4e22, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000000)=@sack_info={r5, 0x7, 0x5}, &(0x7f0000000040)=0xc) r6 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) sendmmsg$inet(r6, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x1e1730a30afb6559, 0x8014) r7 = socket$kcm(0x2, 0xa, 0x2) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x40801}, 0x4000800) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="0000000cbbbbbbbb8266bbbbbbbbbbbb88f7"], 0x12) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r10 = socket$inet_udp(0x2, 0x2, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32=r10], 0x78}, 0x1, 0x0, 0x0, 0x24008040}, 0x0) bind$inet(r10, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r12 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) write$tun(r9, &(0x7f0000000580)=ANY=[@ANYBLOB="080008000100000000182b000000456f005c00660000041190780a010102ac1414164e204e20004890780300000004000000d7d256885555de75a559e78cb5330e9893bce0d27b9a550d4bb87aa4f3fb81f80fe4d0f03c1d4a613cf34d1bbfc0b0a497bc3b0a43205d1a6fd52de9541440bdb4234a71249354824ee0729cbaad3e6897d6b0cea837faee5821ad9a304c96c25ac05157fe01aa5520185ec6e1e5b1caec5c86da80fea51e6c4d80ff3cc270fe6ecf81b7980c2a22e9048f6dea9d5c995f8df3ddc5faba2f0ad1b8d330e3a0a568c81fb8c8e81afde1f5c3ec2b"], 0x6a) socket$nl_route(0x10, 0x3, 0x0) 3.459107009s ago: executing program 1 (id=3283): socket$kcm(0x21, 0x2, 0x2) r0 = socket(0x2d, 0x2, 0x0) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000700)=@generic={0x2d, "000001000000080108000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700"}, 0x80) 3.349558909s ago: executing program 4 (id=3284): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000002000000050000000700000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/83, 0x34000}], 0x1}, 0x0) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000180), &(0x7f00000004c0), 0x83f, r0}, 0x38) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={r0, &(0x7f00000002c0), &(0x7f0000000200)=""/35}, 0x20) (async) r3 = socket$packet(0x11, 0x2, 0x300) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r6, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r4], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) sendto$packet(r3, 0x0, 0x0, 0x4004004, &(0x7f0000000180)={0xc9, 0x1, r6, 0x1, 0x0, 0x6, @remote}, 0x14) 3.093694846s ago: executing program 1 (id=3285): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x10, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1000000}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) close(r3) socket$netlink(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='&'], 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000007c0)={0x0}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x9, 0x6a, &(0x7f00000002c0)=""/106, 0x41000, 0x27, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[r7], &(0x7f0000000700), 0x10, 0x10}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20) sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) recvmmsg(r3, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x1, 0x0, 0x400}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x60000081}, 0x800) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180002000000100000008000540efffffff0500010001"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="24000000010401040000000000000000050000000500010002"], 0x24}, 0x1, 0x0, 0x0, 0x20000835}, 0x2002889c) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x8, 0xfff, 0x7}, 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r9}, &(0x7f0000000380), &(0x7f00000003c0)=r10}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r11, 0x2000300, 0xe, 0x0, &(0x7f0000000180)="0000000100"/14, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000600)={0x2c, r12, 0x1, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x90) 2.742600989s ago: executing program 3 (id=3287): socket$packet(0x11, 0x3, 0x300) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000001080)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYBLOB="04bdfcc4ad9d848290f5a80001ae0520afade0abe8c878e77f4a4b6f54f46db7d6f2cc68badf2488b9c6de456964d3da56ba9d0b57c3dcfac68ae351551575910e2e291a7a2ac0ea017aab0ff3f61bba540540459b070760e27caa2f2ba4efe2b51ae80458aea46a8b5f405520619b4ee12a0d1f22cabd159346a41d8575cf985207a152f455d388b12dae6b184ed21b37fe4f0678377345bbc1083b68ccfed86191fa33b24173524a44b38f55575e762f442bbb9265be173aa13aa7fc5f5632f5a7d857afb466d4e890dfb371ebdf2e2dd56cab202e7ed2dd8113e89c56512163ee46f26917095d", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000003}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000700003b0000000000800000850000007500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000380)=ANY=[@ANYRESOCT=r0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000002300a100000000000000000009db32262c882ff62631b21378598a86379567e0dfc56be9f0903590b537e5492173dd8a0992d85b36372481350ec1257b44f949a45f7c306f5da865d908cab3cf2683e4fa1fe1bc912fb5"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000777e5ba7fa6a692a4681fd33f99c52e457370c74721630bec08b3e87c165a58aed134d31abf1ad658119d22a255bc1a0b6803c5468bc11bd618beb67bef7531ec03419647dceabe417c85993f25899a9ea3c5118fd73114c857c7e478ada937b21ab740eeabcf406ddeb2fa19569b1814cf972cc136e8d18d6b49d2a7221fff8616ae67a859ef029ea053b051b0d9c83dc47255097573dd18c33333fe70cf5b51347ab103b35d6e8d788fd2f88c18cae"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000100)={0x80000000, 0x0, 0xfffffffc, 0xd}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'geneve0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0300000021010200240012800c0001006d6163766c616e00140002800600020000000000080007000000000008000500", @ANYRES32=r6, @ANYBLOB="b7d24fa6b07fbac3d434cc8e9a545510928a023064d5372a4ae190d5b937ec9303073a4ad51f617607305a73f3ec3c6030984f13729315589122f113b2d6bae1e9f488565756d8d73a168d815a303f38d86e7fb65c0245f990b92f960341a452297ad38f949373135e4bc87dc9820ffa37bd58612c58b4d88900a04a082dbd1461e26c67077da00de4d3289ae7d91d7b9c1022eef2614e"], 0x4c}, 0x1, 0x0, 0x0, 0x4044010}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) recvfrom$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x122, &(0x7f00000003c0)={0xa, 0x0, 0x0, @empty}, 0x20) bind$inet(r8, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r7, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400cc14}, 0x20048082) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a00)=ANY=[@ANYBLOB="640000000206030000000000000000000a00007b21acd266150003006c617b683a69702c706f72742c6e65740000000005f301000700000005000500020000000900020073797a3000000000050003f400000000140007800800085b00000007000000f64420571c080006407824a427eb1d2125c14280e6a92b593764bd1e0c5daad0cbbb7a8ed7a12e6bba99be9f34f2432a30347d486ff0bad9396c585b7bfdacd845876e6c03edb3b18fef8b4756d739dd42f8753a784e582142cd0e61951327a469c0b226bed271f165de09d1a4c53816944be2a178c2d7007d49d3cdd9a7a57f99b6f389b3352cbdca87c53f9b84bbc970d594b2a9c215d902c82f68e5f3d263d61efd2bac95cbefa7ae054dd19c2b09474e14020000021c47a791cdea786704c910221e050d8e98113a68c6e2e4cac511c6bd338582ced292bdfe7ea12f3ac2a0"], 0x64}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000400)=@in6={0xa, 0x4e20, 0x7f, @loopback, 0x7}, 0x1c, &(0x7f0000000f40)=[{&(0x7f0000000640)="46ff2a63a80bcbe3be794d96e97b79d640076c629ad92cbea203e7c3f6c3ace084b4c38f0c907c520e62df021128b7ef0857e18967bc0ac12aa937b162fc0913925fdf8adab2b23ba09021962f3582c0dddcb381310788", 0x57}, {&(0x7f0000000b80)="4e73dae7d728637d5497f93834ba2041308ff894f7431f9b4df5c9ec63ae836a6791bf6f525611c9b6f3e407ac0510220dab85838dfdcab1a71583e9763a8f7d32ccf18107b4da5c199f9e6d4cebbd4c404e1f0b23790bf3600613ad16c19d520a72c1b2c891ffcdf3144aab2bd9ceefd64dafa4e493f5b5f7ffdf1a6862d49473d1f10926b63a19181d43a9f2ac25c4e36cb454f6411c3d3629bb037e0b7dee318a88b2fd7978674db9b2e1f33131ed4a95601143cb12c08e0205d6", 0xbc}, {&(0x7f0000000c40)="7d1981882da5a90bbe50dc5254b2652afa5e63c1a39cf167f320c67dc0410c4199a935da4a05fae77d925ad8c0de4c8e390bccc58aa072d445869e5d4ba41819a961c65b684b170b3f7e2b44092f056e5a8a281a7f6670de570608cd26f6ff42e680cc14b35d6818b34df7b7dfc66576b3d24c8591d229750ff56288af", 0x7d}, {&(0x7f0000000cc0)="156fde48b08cd44cdeb4ac278506bee1204b1c445985d0c4fc7b1fad2d065e2526122233ead13440c826e589e26a15403e814534628dacffd13e1d364529758b433d3559775fd5158ff4e82c754a6a6330284b72cbdcb81c0a92028433475d30e2b53ae3e7668db6cf611ac9a5fc825e0d439473000ea7609f4e588c6f5a7e138758ce23d88e3ebc2afcbd91284136aad34c7618065b37993890b70b7628f01c65fe9ef686a9082948fc37b4a7c50b99a4353e", 0xb3}, {&(0x7f0000000d80)='*', 0x1}, {&(0x7f0000000fc0)="48f5d28c0e79173c723fc5e2e772ffa92ea9282fd1b3f2ecc8c5639266404b41d53f8c1f78a2180471c7d109561e81ebc75feb24a2e713984a78046121e991f5cca266bffa3db5b3c2a0f00fad6435498ea565895499cf153beb97e4d5ab9f14cb716ab0ff60e6b3afab8d7a309425031b81e94e18947458e2e8269f55b50ab72b2df0cf8ebd", 0x86}, {&(0x7f0000000e80)="b587b89f76b5c52324e34b3a9799eec2b8e6742987bca478d2a3afd9e796fc19cc7a80b61436aa3170d11f04a97031d4460661718116d674c7e0679ad5697f0446", 0x41}, {&(0x7f0000000f00)="7454b49904b849296dead50772", 0xd}], 0x8, &(0x7f00000006c0)=ANY=[], 0x18, 0x4008000}, 0x8048815) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0xa2f01, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) 2.389998029s ago: executing program 1 (id=3288): socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x6}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710ffffefffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) r2 = socket$kcm(0xa, 0x5, 0x0) sendmsg$inet(r2, &(0x7f0000000f00)={&(0x7f00000000c0)={0x2, 0x0, @rand_addr=0x64010102}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000100)='f', 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="20000000000000008400000008"], 0x20}, 0x0) sendmsg$inet(r2, &(0x7f0000000f00)={&(0x7f0000000180)={0x2, 0x0, @dev}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000040)='&', 0x1}], 0x1, &(0x7f0000000000)=ANY=[], 0x20}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) socket$kcm(0x11, 0x3, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x5, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000800000091100000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt(r3, 0x7, 0x7, &(0x7f0000000040)=""/15, &(0x7f0000000080)=0xf) 2.330549543s ago: executing program 3 (id=3289): r0 = socket$kcm(0x21, 0x2, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01080000000000000000030000200900010073797a310000000014000000020a0104000000000000000007000000540000001f0a030000000000000000000300000008000340000000000900010073797a310000000009000200", @ANYRESHEX=r1], 0xb0}, 0x1, 0x0, 0x0, 0x4040840}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x2c, r3, 0x7, 0x2, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}]}, 0x2c}}, 0x894) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x144, 0x10, 0x1, 0xbffffffe, 0x25dfdbfe, {{@in=@empty, @in=@remote, 0x1, 0x394, 0x4e23, 0x7, 0x0, 0x80, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@broadcast, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0x6, 0x0, 0x1f, 0x1ff}, {0x2, 0xffffffdc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x3}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000040)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r7) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, r7}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r8, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r10, 0x2000002, 0xe, 0x0, &(0x7f0000000000)="dfc98e1652aecd9e476f00000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50) close(0x3) close(0x4) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r6, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x4, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000300)='\x00', 0x1}], 0x1}}], 0x1, 0x22008805) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r6, 0x84, 0x78, &(0x7f0000000100), 0x4) sendmsg$NFT_MSG_GETTABLE(r5, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x138, 0x1, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0xea, 0x6, "39c26b97fe900d7a12c25278856ca9f60c8a45c42714c6ded909182e9983884191bef362ed95a175dfbaea74f02599a58d5f0bd215d13a8f6fc35924c1884a6bf0951ec7a5943a1e6ed9f49673b9c301966aed8823d08f8a7d7e2ccca341ea0f67206e2e51409cce1bfdfc5db7f0b5ec4d91540ef39879cdcc9a10ce12ce091f95a477c8b1e523b356cb4dcdfbd978575f452440a70b17466c09facc1714bc23fc98878701c30f9e6b28d5daf7d3120398f768485c898a87c67c15738dfad3b1bb3f0885677466b8e6ea0ffaa0481b719298fa74a2caf75aef30673374faa73bf44107c02b9f"}, @NFTA_TABLE_USERDATA={0x30, 0x6, "a7855325a37af6ae2e982220336beb5de9bbc3b5a6b812fec15ea13fcb1b5cdd140ed948563e5f050460caaf"}]}, 0x138}, 0x1, 0x0, 0x0, 0x4040014}, 0x8040) r11 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r11, 0x541b, &(0x7f0000000400)) 2.31728892s ago: executing program 4 (id=3290): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x7, 0x4, 0x900, 0x2, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x9, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000050000850000001b000000b700000018000000850000005000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000f80)={r1}, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@rights={{0x14, 0x1, 0x1, [r2]}}], 0x18, 0xcc040}, 0x26048040) clock_gettime(0x6, &(0x7f0000000040)) ioctl$OCFS2_IOC_GROUP_ADD(r2, 0x40186f02, &(0x7f0000000000)={0x7, 0x3, 0x80000001, 0x3ff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x2122) 2.160038848s ago: executing program 0 (id=3291): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c0000000a000000080000000000000f0500000000000000000000030000000002000000010000000000000000000000000000030000000004000000040000000000000000003000000000002e"], &(0x7f0000000040)=""/249, 0x5e, 0xf9, 0x3}, 0x28) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x8004}, 0x4000010) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) (async) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x18, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_REPLY={0x4}]}, 0x18}}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r3, 0x10c, 0x8, &(0x7f0000001b00), &(0x7f0000000480)=0x4) (async) getsockopt$llc_int(r3, 0x10c, 0x8, &(0x7f0000001b00), &(0x7f0000000480)=0x4) bind$alg(r2, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0)={0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000070000000000000013eb80009111bb000000000095"], &(0x7f0000000180)='GPL\x00', 0x9, 0x1d, 0x0, 0x41000, 0x61, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) 2.046017782s ago: executing program 4 (id=3292): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f00000002c0)=0x8001, 0x4) writev(r1, &(0x7f0000000240)=[{&(0x7f0000000100)="b9a8", 0x2}], 0x1) splice(r0, 0x0, r2, 0x0, 0x39000, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) socket$inet6_sctp(0xa, 0x801, 0x84) unshare(0x400) bpf$PROG_LOAD(0x23, 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000100)={0x6, {{0x2, 0x4e20, @multicast2}}}, 0x88) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) syz_emit_ethernet(0x2e, &(0x7f00000000c0)={@random="c5a500429b3a", @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0xe, 0x20, 0x66, 0x0, 0x3, 0x11, 0x0, @empty, @empty=0xe0000001}, {0x4e1f, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x6, 0x100, @void}}}}}}}, 0x0) openat$cgroup_ro(r3, &(0x7f00000004c0)='memory.events\x00', 0x275a, 0x0) 2.045449174s ago: executing program 0 (id=3293): mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtaction={0x74, 0x30, 0xb, 0x70bd2b, 0x0, {}, [{0x60, 0x1, [@m_ct={0x5c, 0x1, 0x0, 0x0, {{0x7}, {0x34, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x7ff, 0x1000, 0xfffffffffffffffe, 0x0, 0x2400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_MARK={0x8, 0x5, 0x9}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4008890}, 0x40) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r0, &(0x7f0000000e00)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x40) (async) sendmmsg$inet6(r0, &(0x7f0000000e00)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x40) recvmmsg(r0, &(0x7f0000000640)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000026c0)=""/4092, 0xffc}, 0x2}], 0x1, 0x40012141, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000002f0009002abd70000000000004000000060011802ff9000048594c02c163bbd822293f878175e3b95e99080728d6726adab82c18185cecca5ecca30e6bff7f18b1b56fc784e579cdceeee27df98041797aefed33f2cd1be9a24e39752b1cf52673cb28fdc619f3642fab69492971b6a210e02bb5f11105f4cef1fe3684464e358dea8209f5af76f59cf3d4072a5ba1b288cd320e4b7b61e18689bebaecc013d1dbef6ff4"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) 1.995839878s ago: executing program 3 (id=3294): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000007900)=[{{&(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10, 0x0}}, {{&(0x7f0000000240)={0x2, 0x6e23, @rand_addr=0x64010100}, 0x10, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="840000000000000000000000070000000702"], 0x1f8}}], 0x2, 0x0) 1.785874058s ago: executing program 3 (id=3295): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x4c}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000380)=[{{&(0x7f0000000080)=@un=@abs, 0x80, &(0x7f0000000340)=[{&(0x7f0000000140)=""/74, 0x4a}, {&(0x7f00000001c0)=""/42, 0x2a}, {&(0x7f0000000280)=""/71, 0x47}], 0x3}}], 0x1, 0x40000072, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) getsockopt$IP_SET_OP_GET_BYINDEX(r4, 0x1, 0x53, &(0x7f0000000200)={0x7, 0x7, 0x2}, &(0x7f00000003c0)=0x28) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x64, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0xc}, {}, {0x10, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x34, 0x2, [@TCA_FLOW_EMATCHES={0x30, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1e7}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{0xe6a7}, "91"}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x9}, {0x2, 0x3, 0x6}}}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20048084}, 0x0) 1.533975487s ago: executing program 0 (id=3296): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="09000000060000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0x20ce, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1, 0xffffffffffffffff, 0x2000000}, 0xc) 1.434125002s ago: executing program 1 (id=3297): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa00000000000000000100008510000006000000180000fa", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f00000001c0)=""/222, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff97}, 0x78) 1.421102173s ago: executing program 3 (id=3298): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r0, 0x5, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f00000000c0)={0xa, 0x4e20, 0xa6, @loopback, 0xf}, 0x1c, &(0x7f0000000dc0)=[{&(0x7f0000000180)="a6", 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x4e23, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000200)="16a71e30", 0x4}], 0x1}}], 0x2, 0x20000000) shutdown(r0, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f00000003c0)=@ccm_128={{0x304}, "2041f09a821e1e3d", "bc1219b53b562baafd2400170f311e6d", "152d5cb7", "c2035c44dee1dcca"}, 0x28) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000240)={'erspan0\x00', 0x0, 0x0, 0x40, 0x2, 0x101, {{0x9, 0x4, 0x1, 0x6, 0x24, 0x65, 0x0, 0x4, 0x2f, 0x0, @local, @multicast2, {[@ssrr={0x89, 0x7, 0x50, [@local]}, @timestamp={0x44, 0x8, 0x66, 0x0, 0xa, [0x5]}]}}}}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r3, &(0x7f0000000340)=ANY=[], 0x141) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r1) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x20, r4, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_WANTED={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x400c000) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3000004, 0x10012, r3, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r5, 0x0, 0xc8, &(0x7f0000000140), 0x4) setsockopt$MRT_DONE(r5, 0x0, 0xc9, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "a06adadb1e8816ec", "de0000006deed7f21d74bc440900", "9884f958", "fc4bd6b33a9b93ca"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvfrom(r2, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) writev(r2, &(0x7f00000005c0)=[{&(0x7f0000000780)='X', 0x1}], 0x1) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="02000000040000000400000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r6, @ANYBLOB="0000000000000000710300000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, &(0x7f00000003c0)=@assoc_value, &(0x7f0000000400)=0x8) 1.205894971s ago: executing program 1 (id=3299): bind$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x80, @mcast1, 0x4, 0x1}, 0x20) (async) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) (async) listen(r0, 0x0) (async) ioctl$int_in(r0, 0x5421, &(0x7f0000000240)=0xfffffffffffffe01) (async) r1 = socket$packet(0x11, 0x3, 0x300) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r2, 0x0) (async) recvmsg$can_raw(r2, &(0x7f0000000b40)={&(0x7f0000000440)=@caif=@rfm, 0x80, &(0x7f00000009c0)=[{&(0x7f00000004c0)}, {&(0x7f0000000740)=""/131, 0x83}, {&(0x7f0000000800)=""/102, 0x66}, {&(0x7f0000000400)=""/43, 0x2b}, {&(0x7f00000008c0)=""/194, 0xc2}], 0x5, &(0x7f0000000a40)=""/229, 0xe5}, 0x40010110) (async) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r3) (async) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="6800000042000100000000000000000003010000061400002600010000112233445566778899aabb08004500e4140000000001170000010203040506070800000c00020006000600080000000e0003000800140004000d"], 0x68}}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000390400000000fbdbdf2500000000", @ANYRES32=r4, @ANYBLOB="11980400419804001c001280da0c01007866726d000000000c0002800800020004000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20000884}, 0x0) (async) r6 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x8, r4, 0x20017}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000280)="82", 0x1}], 0x1}, 0x4) (async) sendto$packet(r1, &(0x7f00000002c0)="e79278a09e63193fb881aa2ff8f4d8afb1f74d5f550d1c8504480b82806f62db0f4b9bc0de8bf2766fe6b89a45d698d6fef2801ac586c115058fb60c215c46fb6a", 0x41, 0x10, &(0x7f0000000340)={0x11, 0x1, r4, 0x1, 0x7, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}}, 0x14) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r7) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000000180)='syzkaller\x00', 0x4, 0xb8, &(0x7f000000cf3d)=""/184, 0x0, 0x1, '\x00', 0x0, @sk_skb, r2, 0x8, &(0x7f0000000000)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x1}, 0x10}, 0x94) (async) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r11, @ANYRES32=r10, @ANYBLOB='&'], 0x10) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r11}, &(0x7f0000000000), &(0x7f00000002c0)=r7}, 0x20) (async) sendmsg$inet(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000340)="8ecd25f2", 0x4}], 0x1}, 0x0) (async) recvmsg$unix(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000800)=""/229, 0x8ec1}], 0x1}, 0x2002) (async) accept(r0, 0x0, 0x0) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) socket$nl_generic(0x10, 0x3, 0x10) 1.195623977s ago: executing program 2 (id=3236): r0 = socket$kcm(0x11, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000001c0)='syz_tun\x00', 0x10) bind$inet6(r2, &(0x7f00000001c0)={0xa, 0x8000002, 0x9, @mcast2}, 0x1c) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a30"], 0x7c}}, 0x20000800) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES8=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x1000}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x110, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0xe0, 0x2, [@TCA_BASIC_EMATCHES={0xdc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0xfff, 0x3, 0x7435}, {0x1, 0x1000, 0x5, 0x7}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0xfffa, 0x8, 0x1ff}, {0x1, 0x2}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xc36}}, @TCA_EMATCH_TREE_LIST={0x98, 0x2, 0x0, 0x1, [@TCF_EM_META={0x30, 0x2, 0x0, 0x0, {{0x8, 0x4, 0x7}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x9, 0x2}, {0x4ddf, 0x8}}}, @TCA_EM_META_RVALUE={0x18, 0x3, [@TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR='Hov8', @TCF_META_TYPE_VAR="3ae5b82f0a8d8bd0", @TCF_META_TYPE_INT=0xa]}]}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x7}, {0x3, 0x7, 0xbb, 0x8}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x0, 0x3, 0x3}, {0x9, 0x9, 0x2, 0x2}}}, @TCF_EM_NBYTE={0x18, 0x3, 0x0, 0x0, {{0x5, 0x2, 0x3}, {0x3, 0x8, 0x0, "ef3bac667393dced"}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x29, 0x7, 0x6}, {{0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1, 0x1}}}}]}]}]}}]}, 0x110}}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r3, 0x215eb000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@deltclass={0x24, 0x29, 0x300, 0x80000001, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x10, 0xfff2}, {0x0, 0xffff}, {0xffe0, 0xffe0}}}, 0x24}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000050000000000000000000000850000000e000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r8}, 0xc) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x28, 0x0, 0x1, 0x74bd29, 0x25dfdbff, {}, [@NL802154_ATTR_TX_POWER={0x8, 0xb, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x0) r9 = socket$netlink(0x10, 0x3, 0xb) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000100)={'veth0_to_team\x00', &(0x7f0000000500)=@ethtool_channels={0x3d, 0xfffffffc, 0x0, 0x0, 0x23, 0x2, 0x2, 0x3ffc}}) 1.107165342s ago: executing program 0 (id=3300): unshare(0x400) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map, 0xffffffffffffffff, 0x26}, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r1, 0x1, 0x3}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x15, 0xa, &(0x7f0000000040)=ANY=[@ANYRESOCT=r0, @ANYRES32=r0, @ANYRESDEC=r0], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfe, 0x800000}, 0xc) socket$packet(0x11, 0x3, 0x300) 826.03209ms ago: executing program 0 (id=3301): r0 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r0, 0x5) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f00000003c0)={0x0, 0xfffffffffffffd90, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r3, 0x701, 0x74bd2b, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000002b00)={0x12f0, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@typed={0xc, 0x117, 0x0, 0x0, @u64=0x6}, @nested={0x12d4, 0xd4, 0x0, 0x1, [@generic="000dd70b1657bc", @nested={0x147, 0x5f, 0x0, 0x1, [@nested={0x4, 0x160}, @generic="587164c23ea59bc427b3a1b36b7c056ee15c278440c69f86c46cec22e115f9a88d6b933dc9341b919710e8469b99ec8cc452314f96645f8d76bdd05190f2c9dc6245cf19a9b130fd38ec135d2d53b1b474e759cfffe0311178dff4ebb391b1a6986aee909f618f93a3371fb4fed9eece6f385ffee29bc7acb881f91cab77d33c35bf52e479d9e75ed1c4f307d8d0a9332c58ddf405cf3649c3b0daa95535c7a7ffc7b5e059e232c7a9565fc042a5bd5ec8d634e2a3a248f2714d950fdb556a401a18f4fa819f597efbcae6465b4bf3ab7c1de3a5be4134a5db74599c12a4519de7d1a73797d531ad6320bf87a11959cd0976ce08e0e934d3c49f55b8f70c707e0ef6e61388af4e", @nested={0x4, 0x165}, @typed={0x8, 0xa5, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x30, 0x0, 0x0, @u32=0x2}, @typed={0x8, 0x14b, 0x0, 0x0, @u32=0x7037}, @typed={0x8, 0x17, 0x0, 0x0, @ipv4=@multicast1}, @typed={0xc, 0x8e, 0x0, 0x0, @u64}, @nested={0x4, 0x12e}, @nested={0x4, 0x13d}]}, @generic="87e857675c4068d3630b0dd7c8762ea8e67945d1d3d4738a838b7b884769c1e2cc7f1ec37ab1ebfc5ac91bbaa9", @typed={0xc, 0xe3, 0x0, 0x0, @u64=0x352}, @typed={0x8, 0x9b, 0x0, 0x0, @uid}, @nested={0x120, 0x65, 0x0, 0x1, [@typed={0x7, 0x8d, 0x0, 0x0, @str='\'/\x00'}, @typed={0x8, 0x77, 0x0, 0x0, @fd=r4}, @nested={0xe0, 0x14a, 0x0, 0x1, [@nested={0xdc, 0x157, 0x0, 0x1, [@nested={0x1c, 0x15f, 0x0, 0x1, [@typed={0x8, 0x168, 0x0, 0x0, @pid}, @typed={0x8, 0x34, 0x0, 0x0, @str='\x14*,\x00'}, @typed={0x8, 0x111, 0x0, 0x0, @u32=0x8000}]}, @nested={0xb8, 0x97, 0x0, 0x1, [@generic="6594679661573892e155e65d7b9ced4237683b18fed5bc56b5c76060036a2f259bf2d0eb11ece82926ca0bd4269185292bb1f81a01241d386779e41252b1d0162e5b1008b7b3b8604a4965acd933c005876d1a78d90f7328f5406fdf500e602bcd68465deb01a526944109f039fea9145e445b86ba5ff3280bb87d9f0ba5156e2cc6f8ccf20fe1ae578d164a551a02c6dfcce431b0a1057494e15f39f90580e6f6b891a4", @typed={0xc, 0x161, 0x0, 0x0, @u64}, @nested={0x4, 0x1f}]}, @typed={0x4, 0x132}]}]}, @typed={0x14, 0xb8, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @nested={0x4, 0xdd}, @nested={0x4, 0x5f}, @typed={0x8, 0xdb, 0x0, 0x0, @ipv4=@multicast1}, @typed={0x8, 0x14f, 0x0, 0x0, @str='\x14*,\x00'}]}, @typed={0x8, 0xf0, 0x0, 0x0, @pid}, @nested={0x8, 0xf4, 0x0, 0x1, [@nested={0x4, 0xe0}]}, @nested={0x10, 0x161, 0x0, 0x1, [@typed={0x4, 0x81}, @typed={0x8, 0xda, 0x0, 0x0, @fd}]}, @generic="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"]}]}, 0x12f0}], 0x1, 0x0, 0x0, 0x1}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000001100), r2) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002400)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x44, 0x1, 0x4, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x8}}, @NFULA_CFG_TIMEOUT={0x8}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xff}, @NFULA_CFG_MODE={0xa, 0x2, {0xfffff458}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x10) syz_emit_ethernet(0x256, &(0x7f00000003c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd60122d9202203afffe8000000000000000000000000000bbff02000000000000000000000000000186009078000000000000000000000000030aa78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df"], 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x44}}, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x7, @empty, 0x40}], 0xc3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r8 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r10, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x1c, 0x2, [@TCA_CODEL_TARGET={0x8, 0x1, 0x202}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x1ff}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008080}, 0x44080) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000840)={r7, @in6={{0xa, 0x4e22, 0x80, @empty, 0x5d4e}}, 0x1, 0x2, 0x614, 0x4, 0x9f, 0x7, 0x4}, 0x9c) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0f00000004000000040000000400000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000008d1600000000608cbb2fbc8e0c17efe1bafd89333262b0e93abed7efeeed53c0c0403b7c6563ed673cd1f3e1cecb0fab2b1e17b1268bf6cae4c1fa842399a7babe619e745aa86d9f53ed7108d118263040457bd1a461d6ce7f98acce4cf1b2b6c7", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x0, &(0x7f0000000300), &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000380)={'wg0\x00', 0x0}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r13, @ANYRES32=r12, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="864dbee90b17ba13f93d97a36670a3e9f8cc1df9224d1283b0aa8367a7217da6b6de54a1e29378cce74cbf67bda4046b5654e839cfca7a9e7c3be8b51e9d55ae336c0aec6353508aac67f699", @ANYRES32=0x0, @ANYBLOB, @ANYRES64=0x0], 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000600)={r11, &(0x7f0000000640), &(0x7f0000000680)=@tcp=r0}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000340)={&(0x7f0000000140), &(0x7f00000001c0)=""/38, &(0x7f0000000240)="dabd417087e47a56a3a1c271240380f09629e3446f5f7335b669291cdcf44a908303a828bb00b15d67715b08796eae652b0dee63bd8097204d752ad70b5931", &(0x7f0000000280)="64874f8d683625e21c0c95b79bbf1a52beb04d16ce2414868d5f3938129298613428c96cfff3aabc53ce361887fd873d3ce15db3b21f838feab617d6aec21f12e80574f82598c3b0dc84505d355574a8e9940e48456bdd5088fd88070f00fd824dfab534378ce07e02a3a61fdcb18493814fd9ccf7ea2c29053abd96a1e476726f45c27ff6d1e505043991aa0aacdf1579903a686d4187936a8071f9f471acbfb3babc47d51b328a00aeaece927d95ff9f795296", 0x5, r11}, 0x38) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 800.952647ms ago: executing program 1 (id=3302): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) (async) listen(r1, 0x8) (async) connect$inet(r2, &(0x7f0000000010)={0x2, 0x4e20, @loopback}, 0x10) (async) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r3 = accept$inet(r1, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x6, &(0x7f0000000300)=ANY=[@ANYBLOB="18120300", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000b704000000000000850000003c0000009500000000000000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="07000000d686c171", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB, @ANYRES64=0x0], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000600)={r4, &(0x7f0000000640), &(0x7f0000000680)=@tcp=r3}, 0x20) (async) sendto(r3, &(0x7f0000000700)='ab', 0xfffffcf4, 0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x7101}) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) socket(0x10, 0x3, 0x0) (async) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r11 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r11, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) (async) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r10, {0x7, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x24048840}, 0x40004) (async, rerun: 32) bind$rds(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10) (rerun: 32) 454.862378ms ago: executing program 4 (id=3303): r0 = socket$inet(0x2, 0x800, 0x5) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000180)=@req={0x28, &(0x7f00000001c0)={'dummy0\x00', @ifru_settings={0x1000, 0xff, @raw_hdlc=&(0x7f0000000000)={0x40, 0x18fc}}}}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000080)=@ethtool_regs={0x4, 0x0, 0x1, '\x00'}}) 411.034646ms ago: executing program 2 (id=3304): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="2000000004000000080000000000000001"], 0x40) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000300)={r1, &(0x7f0000000280)}, 0x20) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket(0x29, 0x5, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "a24b9f", 0x18, 0x2b, 0x0, @remote, @local, {[], {0x4e22, 0x0, 0x18, 0x0, @wg=@data}}}}}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}, @void, {@ipv4={0x800, @tcp={{0xd, 0x4, 0x0, 0x0, 0x48, 0x65, 0x0, 0x2, 0x6, 0x0, @private=0xa010101, @local, {[@timestamp={0x44, 0xc, 0x5, 0x0, 0xf, [0x0, 0x2]}, @ssrr={0x89, 0xf, 0x7e, [@multicast2, @broadcast, @empty]}, @timestamp_prespec={0x44, 0x4, 0xc0, 0x3, 0x7}]}}, {{0x1, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x20, 0xffff, 0x0, 0x3d}}}}}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="160000001a00010000008a780000000080"], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[], 0x44}}, 0x2000800) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r5, 0x29, 0xb, 0x0, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r6, 0x1, 0x40, &(0x7f0000000100)=0x8, 0x4) setsockopt$inet_tcp_int(r2, 0x6, 0x9, 0x0, 0x0) 406.692332ms ago: executing program 0 (id=3305): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x1, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x303}, "1afc7c14d332bcc6", "a9ba0c85d68723369f51322151d9f41aaa2832bb07cc1e49ad714beac6f1ade8", "49960d8f", "bff2a81527ae4190"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000440)="4c0000001200ff09ff3a150099a283ff04b8008000f0ffff0000000600401500240036001fc411a0b598bc593ab6821148a730cc33a49868c62b2ca654a6613b6aab", 0x42}, {&(0x7f0000000080)='G%\x00\x00\x00\x00\x00\x00\x00\x00', 0xa}], 0x2}, 0x0) recvmmsg(r1, &(0x7f0000000c80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff01, 0x600}}, {{0x0, 0x0, &(0x7f0000000380), 0x5}, 0x10}, {{0x0, 0x0, 0x0}, 0x1}], 0x4000000000001b2, 0x48, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r2) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r4, 0x0, 0x20000000002) 197.986358ms ago: executing program 2 (id=3306): r0 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x20000400) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000140)="da26a3102930614b0a7c93ef31a4df49a42bfcd31ff54b832685683069885883abd52ea87db73d6787176c4aab17e743118e8802d15b4fc4bae0eee9b7438ea7860f51bf9acddce44547bd1605cfd119425958d330f1cb0c1b791d6242a196aecc4acc1fe907a6817d1cabb740c6394cbca916450077c40167f4b2e051de5470853b683bc724f984120dd3a100f7d1075e74a51e15fe7649ea2a57aaa61e532a7d7ff81a515dc784c31224db82c2aa22c2093e59a4be3bba206aa195bcc4b600138ed0b12703dc235c9c280d4960bdff5d52dd3458cb21ae385a0494f7bc72688f53aa300f450bcf27a1722b5584c30d5b7b") r1 = socket(0x10, 0x3, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x2, @local, 0x9}, 0x1c) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0xffffffffffffff4a, &(0x7f0000000200)={&(0x7f0000000080)={0x18, 0x16, 0xa01}, 0x78}}, 0x0) r2 = socket(0x2b, 0x80801, 0x1) connect$inet6(r2, &(0x7f00000002c0)={0xa, 0x0, 0x1, @loopback, 0x1}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = openat$cgroup_devices(r3, &(0x7f00000002c0)='devices.deny\x00', 0x2, 0x0) sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)={0xd8, r4, 0x20, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x7}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x9}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x40}, @NL80211_ATTR_VENDOR_DATA={0x91, 0xc5, "9a11032b74be7f32798b7d35c769d1f0be0253319689e3f89388334765e69b472c0b40112d2162c87d93256025eb748ecfe600f6b802c9adb3b8031591ad5f1c08fcaa383e5de2e02e86f88378a7dbc95628d14ab69e8aab87215267959b20e4f5f664e860c627ae5fa1018b4f6e56e13ab4fd669e99573da36a648a5029dfe5097d33f66e58c6f6a5c493a81b"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x90001}, @NL80211_ATTR_VENDOR_ID={0x8}]}, 0xd8}}, 0x1) write$cgroup_devices(r5, &(0x7f0000000080)=ANY=[@ANYBLOB='c 6:'], 0x8) poll(&(0x7f0000000a00)=[{r2, 0xf000}], 0x1, 0x9) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000001cc0), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x8044) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x100, '\x00', 0x0, r2, 0x0, 0x3, 0x5}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000380)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000340)='%pi6 \x00'}, 0x20) r9 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000000080)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x5, &(0x7f0000000100)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0xe, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r9, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[r7, r7, r8, r7, r7]}, 0x94) sendmsg$FOU_CMD_GET(r0, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000001d40)={0x40, r6, 0x821, 0x70bd2b, 0x25dfdbfb, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @empty}, @FOU_ATTR_IFINDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x8010) 16.974304ms ago: executing program 3 (id=3307): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r1, &(0x7f0000000040)={0x23, 0x14}, 0x10) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) bind$bt_l2cap(r2, &(0x7f0000000400)={0x1f, 0xffff}, 0xe) bind$phonet(r0, &(0x7f00000000c0)={0x23, 0x6}, 0x10) r3 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000100)=[{&(0x7f00000006c0)="10", 0x1}], 0x1}, 0x24000900) sendmsg$inet(r3, &(0x7f0000000680)={&(0x7f0000000340)={0x2, 0x4ea0, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000b40)="21f35f8b3b9b000000000000a027f9e3b1f9ce22813245506ce1ef0995df8351ebad6751f18c95534bc903f2c578e8f81b854f090cbd177438ce88a429522d35548561ccaae95796195414074a", 0x4d}], 0x1}, 0x54) sendmsg$inet(r3, &(0x7f0000000280)={&(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0x1}], 0x1}, 0x891) r4 = socket$kcm(0x10, 0x2, 0x4) recvmsg(r4, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x10000) sendmsg$inet(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0xe, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48010}, 0x4008000) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$EBT_SO_SET_COUNTERS(r5, 0x0, 0x81, &(0x7f0000000a00)={'nat\x00', 0x0, 0x0, 0x0, [0x4, 0x9, 0x7, 0x6, 0x80, 0x7], 0x4, &(0x7f0000000440)=[{}], 0x0, [{}, {}, {}, {}]}, 0xb8) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00v\x00\t\x00'/20, @ANYBLOB="04000d80080001"], 0x24}, 0x1, 0x5502000000000000}, 0x20008094) close(0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r6, &(0x7f0000000980)=[{{&(0x7f0000000580)=@tipc, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000600)=""/102, 0x66}, {&(0x7f0000000780)=""/100, 0x64}, {&(0x7f0000000800)=""/75, 0x4b}, {&(0x7f0000000880)=""/18, 0x12}], 0x4, &(0x7f0000000900)=""/111, 0x6f}, 0x401}], 0x1, 0x10002, &(0x7f00000009c0)) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={0x0, 0xfffffeff}, &(0x7f0000000380)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000003c0)={0x0, 0xffff, 0x8, 0x6, 0x20000000, 0x7fffffff, 0xde92, 0x200, r8}, 0x20) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r7, 0x10e, 0xb, &(0x7f0000000000)=0x40b, 0x4) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000000500)={0x1, 'netpci0\x00', {}, 0x8}) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r9, 0x1, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4014}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b405000000b8a317e500000061100c0000000000cb1af104f455caa295000900"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) 0s ago: executing program 4 (id=3308): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @multicast1}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x24}, 0x1, 0x5502000000000000}, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) sendmmsg$inet(r2, &(0x7f0000001500)=[{{0x0, 0x100000019, &(0x7f0000000b00)=[{&(0x7f00000002c0)="89", 0x34000}, {0x0}], 0x2, &(0x7f0000000e40)=ANY=[], 0xd0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40) recvmmsg(r2, &(0x7f0000000400), 0x5a, 0x40000000, 0x0) kernel console output (not intermixed with test programs): [ T3335] bond3: (slave batadv0): failed to get link speed/duplex [ 366.953179][ T14] bond3: (slave batadv0): failed to get link speed/duplex [ 367.063537][ T14] bond3: (slave batadv0): failed to get link speed/duplex [ 367.172143][ T253] bond3: (slave batadv0): failed to get link speed/duplex [ 367.282608][ T6042] bond3: (slave batadv0): failed to get link speed/duplex [ 367.349802][T15588] FAULT_INJECTION: forcing a failure. [ 367.349802][T15588] name failslab, interval 1, probability 0, space 0, times 0 [ 367.349842][T15588] CPU: 0 UID: 0 PID: 15588 Comm: syz.1.2326 Not tainted syzkaller #0 PREEMPT(full) [ 367.349883][T15588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 367.349906][T15588] Call Trace: [ 367.350005][T15588] [ 367.350057][T15588] dump_stack_lvl+0xe8/0x150 [ 367.350220][T15588] should_fail_ex+0x410/0x560 [ 367.350320][T15588] ? __alloc_skb+0x1db/0x7a0 [ 367.350451][T15588] should_failslab+0xa8/0x100 [ 367.350516][T15588] ? __alloc_skb+0x1db/0x7a0 [ 367.350540][T15588] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 367.350582][T15588] ? __alloc_skb+0x18d/0x7a0 [ 367.350608][T15588] ? __alloc_skb+0x1db/0x7a0 [ 367.350641][T15588] __alloc_skb+0x1db/0x7a0 [ 367.350672][T15588] xfrm_alloc_compat+0x1a6/0x1740 [ 367.350787][T15588] ? __pfx_xfrm_alloc_compat+0x10/0x10 [ 367.350822][T15588] xfrm_nlmsg_multicast+0xda/0x1f0 [ 367.350862][T15588] xfrm_send_policy_notify+0xed2/0x1c00 [ 367.350909][T15588] ? __pfx_xfrm_send_policy_notify+0x10/0x10 [ 367.350945][T15588] ? lock_acquire+0x115/0x350 [ 367.351005][T15588] ? lockdep_hardirqs_on+0x7b/0x110 [ 367.351095][T15588] ? __local_bh_enable_ip+0xd6/0x140 [ 367.351141][T15588] ? km_policy_notify+0x28/0x200 [ 367.351201][T15588] ? __pfx_xfrm_send_policy_notify+0x10/0x10 [ 367.351235][T15588] km_policy_notify+0x121/0x200 [ 367.351269][T15588] ? km_policy_notify+0x28/0x200 [ 367.351309][T15588] xfrm_add_policy+0x4a1/0x690 [ 367.351338][T15588] ? __pfx_xfrm_add_policy+0x10/0x10 [ 367.351359][T15588] ? apparmor_capable+0x126/0x170 [ 367.351451][T15588] ? __nla_parse+0x40/0x60 [ 367.351486][T15588] xfrm_user_rcv_msg+0x7a8/0xf30 [ 367.351517][T15588] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 367.351577][T15588] ? __mutex_trylock_common+0x15f/0x270 [ 367.351611][T15588] ? __pfx___mutex_trylock_common+0x10/0x10 [ 367.351643][T15588] ? rcu_is_watching+0x16/0xb0 [ 367.351683][T15588] ? trace_contention_end+0x3d/0x140 [ 367.351722][T15588] netlink_rcv_skb+0x226/0x4a0 [ 367.351791][T15588] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 367.351815][T15588] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 367.351866][T15588] ? netlink_deliver_tap+0x2e/0x1b0 [ 367.351898][T15588] ? netlink_deliver_tap+0x2e/0x1b0 [ 367.351934][T15588] xfrm_netlink_rcv+0x79/0x90 [ 367.351965][T15588] netlink_unicast+0x7bd/0x940 [ 367.352009][T15588] netlink_sendmsg+0x813/0xb40 [ 367.352053][T15588] ? __pfx_netlink_sendmsg+0x10/0x10 [ 367.352097][T15588] ? apparmor_socket_sendmsg+0x98/0x360 [ 367.352152][T15588] ? __pfx_netlink_sendmsg+0x10/0x10 [ 367.352184][T15588] sock_sendmsg_nosec+0x13a/0x180 [ 367.352279][T15588] ____sys_sendmsg+0x54e/0x850 [ 367.352315][T15588] ? __pfx_____sys_sendmsg+0x10/0x10 [ 367.352356][T15588] ? import_iovec+0x73/0xa0 [ 367.352420][T15588] ___sys_sendmsg+0x2a5/0x360 [ 367.352449][T15588] ? __lock_acquire+0x747/0x2de0 [ 367.352479][T15588] ? __pfx____sys_sendmsg+0x10/0x10 [ 367.352550][T15588] ? __fget_files+0x2a/0x420 [ 367.352593][T15588] ? __fget_files+0x3a2/0x420 [ 367.352636][T15588] __x64_sys_sendmsg+0x1b1/0x290 [ 367.352669][T15588] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 367.352724][T15588] do_syscall_64+0x166/0x520 [ 367.352774][T15588] ? trace_irq_disable+0x3b/0x140 [ 367.352813][T15588] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.352854][T15588] ? clear_bhb_loop+0x70/0xc0 [ 367.352883][T15588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.352907][T15588] RIP: 0033:0x7f0948b9e159 [ 367.352936][T15588] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 367.352966][T15588] RSP: 002b:00007f0949b08028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 367.353020][T15588] RAX: ffffffffffffffda RBX: 00007f0948e25fa0 RCX: 00007f0948b9e159 [ 367.353037][T15588] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 367.353052][T15588] RBP: 00007f0949b08090 R08: 0000000000000000 R09: 0000000000000000 [ 367.353067][T15588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 367.353081][T15588] R13: 00007f0948e26038 R14: 00007f0948e25fa0 R15: 00007fff40faece8 [ 367.353119][T15588] [ 367.404101][ T253] bond3: (slave batadv0): failed to get link speed/duplex [ 367.845031][T15595] x_tables: ip_tables: tcp match: only valid for protocol 6 [ 368.024485][T15593] __nla_validate_parse: 3 callbacks suppressed [ 368.024510][T15593] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2327'. [ 368.054876][T15604] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2332'. [ 368.230394][T15607] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2333'. [ 368.247933][T15607] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2333'. [ 368.391232][T15612] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2335'. [ 368.475373][T15617] nbd: must specify at least one socket [ 368.475809][T15617] nbd: must specify at least one socket [ 368.535800][T15612] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2335'. [ 368.535824][T15612] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2335'. [ 368.556238][T15618] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2337'. [ 368.647559][T15612] veth5: entered allmulticast mode [ 368.687490][T15612] bond10: (slave veth5): Enslaving as an active interface with an up link [ 368.968241][T15637] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2343'. [ 368.969713][T15637] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2343'. [ 369.147746][T15640] ip6t_rpfilter: unknown options [ 369.192044][ T6042] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 369.192094][ T6042] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 369.192133][ T6042] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 369.192171][ T6042] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 370.105255][T15681] netlink: 'syz.4.2347': attribute type 1 has an invalid length. [ 370.173042][T15681] bond10: entered promiscuous mode [ 370.174523][T15681] 8021q: adding VLAN 0 to HW filter on device bond10 [ 370.236886][T15685] 8021q: adding VLAN 0 to HW filter on device bond10 [ 370.237307][T15685] bond10: (slave ipip1): The slave device specified does not support setting the MAC address [ 370.237330][T15685] bond10: (slave ipip1): Setting fail_over_mac to active for active-backup mode [ 370.275198][T15685] bond10: (slave ipip1): making interface the new active one [ 370.275225][T15685] ipip1: entered promiscuous mode [ 370.280124][T15685] bond10: (slave ipip1): Enslaving as an active interface with an up link [ 370.386318][T15690] netlink: 'syz.2.2351': attribute type 1 has an invalid length. [ 370.412386][T15692] sctp: [Deprecated]: syz.0.2348 (pid 15692) Use of int in maxseg socket option. [ 370.412386][T15692] Use struct sctp_assoc_value instead [ 370.534197][T15694] tipc: Enabled bearer , priority 0 [ 370.534932][T15694] syzkaller0: entered promiscuous mode [ 370.534955][T15694] syzkaller0: entered allmulticast mode [ 370.535441][T15694] tipc: Resetting bearer [ 370.726215][T15702] Bluetooth: hci0: unsupported parameter 1280 [ 370.726241][T15702] Bluetooth: hci0: invalid length 0, exp 4 for type 32 [ 370.988496][T15718] tipc: Enabled bearer , priority 0 [ 370.990658][T15712] netlink: 'syz.2.2360': attribute type 4 has an invalid length. [ 370.994587][T15715] netlink: 'syz.4.2359': attribute type 1 has an invalid length. [ 371.061534][T15724] tipc: Resetting bearer [ 371.094157][T15740] netlink: 'syz.0.2362': attribute type 1 has an invalid length. [ 371.127701][T15717] syzkaller0: entered promiscuous mode [ 371.127727][T15717] syzkaller0: entered allmulticast mode [ 371.235315][T15705] tipc: Resetting bearer [ 371.275770][T15705] tipc: Disabling bearer [ 371.312751][T15733] bond0: (slave veth0_to_bond): Releasing backup interface [ 371.343093][T15733] bond7: (slave veth0_to_bond): making interface the new active one [ 371.345841][T15733] bond7: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 371.392385][ T5798] syz1: Port: 1 Link DOWN [ 371.412016][ T6042] net_ratelimit: 41 callbacks suppressed [ 371.412037][ T6042] bond3: (slave batadv0): link status up again after 0 ms [ 371.412062][ T6042] bond3: (slave batadv0): failed to get link speed/duplex [ 371.526022][ T300] bond3: (slave batadv0): failed to get link speed/duplex [ 371.542630][T15751] x_tables: duplicate entry at hook 1 [ 371.629665][T15751] netlink: 'syz.0.2366': attribute type 1 has an invalid length. [ 371.633821][ T14] bond3: (slave batadv0): failed to get link speed/duplex [ 371.757564][T15758] gretap1: entered promiscuous mode [ 371.765270][ T253] bond3: (slave batadv0): failed to get link speed/duplex [ 371.872484][ T6042] bond3: (slave batadv0): failed to get link speed/duplex [ 371.982535][ T253] bond3: (slave batadv0): failed to get link speed/duplex [ 372.131996][ T14] bond3: (slave batadv0): failed to get link speed/duplex [ 372.247706][ T253] bond3: (slave batadv0): failed to get link speed/duplex [ 372.352203][ T59] bond3: (slave batadv0): failed to get link speed/duplex [ 373.613793][T15786] netlink: 'syz.3.2374': attribute type 1 has an invalid length. [ 373.814835][T15799] __nla_validate_parse: 10 callbacks suppressed [ 373.814856][T15799] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2376'. [ 373.814869][T15799] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2376'. [ 373.820039][T15788] bond10: (slave bridge6): Enslaving as a backup interface with an up link [ 373.859996][T15795] bond10: (slave bridge7): Enslaving as a backup interface with a down link [ 373.891053][T15795] bond10: (slave bridge8): Enslaving as a backup interface with a down link [ 373.891408][T15799] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2376'. [ 373.891427][T15799] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2376'. [ 373.891679][T15799] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2376'. [ 373.891697][T15799] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2376'. [ 373.894372][T15799] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2376'. [ 373.894432][T15799] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2376'. [ 373.898325][T15799] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2376'. [ 373.898375][T15799] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2376'. [ 374.144084][T15808] ovs-system: entered promiscuous mode [ 374.525666][T15823] xt_CT: No such helper "snmp" [ 376.184873][T15907] xt_hashlimit: size too large, truncated to 1048576 [ 376.519502][T15908] bond11 (unregistering): Released all slaves [ 376.702074][ T3335] net_ratelimit: 20 callbacks suppressed [ 376.702097][ T3335] bond3: (slave batadv0): failed to get link speed/duplex [ 376.823596][ T14] bond3: (slave batadv0): failed to get link speed/duplex [ 376.862611][T15937] tipc: Enabling of bearer rejected, already enabled [ 376.939784][ T3335] bond3: (slave batadv0): failed to get link speed/duplex [ 376.947414][T15941] lo speed is unknown, defaulting to 1000 [ 377.019783][T15941] lo speed is unknown, defaulting to 1000 [ 377.033791][T15941] lo speed is unknown, defaulting to 1000 [ 377.152858][ T14] bond3: (slave batadv0): failed to get link speed/duplex [ 377.192909][T15948] syzkaller0: entered promiscuous mode [ 377.192945][T15948] syzkaller0: entered allmulticast mode [ 377.224997][T15948] tipc: Enabled bearer , priority 0 [ 377.257323][T15948] tipc: Resetting bearer [ 377.267518][T15946] tipc: Resetting bearer [ 377.406574][T15946] tipc: Disabling bearer [ 377.442835][ T3335] bond3: (slave batadv0): failed to get link speed/duplex [ 377.551961][ T6042] bond3: (slave batadv0): failed to get link speed/duplex [ 378.253165][ T253] bond3: (slave batadv0): failed to get link speed/duplex [ 378.362033][ T6042] bond3: (slave batadv0): failed to get link speed/duplex [ 378.591936][ T253] bond3: (slave batadv0): failed to get link speed/duplex [ 378.642022][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 378.645055][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.753377][ T300] bond3: (slave batadv0): failed to get link speed/duplex [ 379.822754][T16043] __nla_validate_parse: 124 callbacks suppressed [ 379.822779][T16043] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2431'. [ 379.908708][T16043] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2431'. [ 379.908751][T16043] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2431'. [ 379.930685][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 380.351358][T16072] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2437'. [ 380.908531][T16105] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2445'. [ 380.908570][T16105] netlink: 'syz.2.2445': attribute type 30 has an invalid length. [ 380.917519][T16105] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2445'. [ 380.917601][T16105] netlink: 'syz.2.2445': attribute type 30 has an invalid length. [ 381.198720][T16117] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2450'. [ 381.305212][T16121] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2451'. [ 381.307184][T16121] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2451'. [ 381.307963][T16121] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2451'. [ 381.620277][T16137] vlan0: entered promiscuous mode [ 381.620345][T16137] gretap0: entered promiscuous mode [ 381.908720][T16136] vlan0: entered promiscuous mode [ 381.962904][ T59] net_ratelimit: 24 callbacks suppressed [ 381.962927][ T59] bond3: (slave batadv0): failed to get link speed/duplex [ 382.073582][ T253] bond3: (slave batadv0): failed to get link speed/duplex [ 382.182297][ T253] bond3: (slave batadv0): failed to get link speed/duplex [ 382.293199][ T6042] bond3: (slave batadv0): failed to get link speed/duplex [ 382.403214][ T59] bond3: (slave batadv0): failed to get link speed/duplex [ 382.692275][ T253] bond3: (slave batadv0): failed to get link speed/duplex [ 382.710700][T16177] syzkaller0: entered promiscuous mode [ 382.710724][T16177] syzkaller0: entered allmulticast mode [ 382.803290][ T253] bond3: (slave batadv0): failed to get link speed/duplex [ 382.933859][T16190] can: request_module (can-proto-0) failed. [ 382.991914][ T3335] bond3: (slave batadv0): failed to get link speed/duplex [ 383.104870][ T253] bond3: (slave batadv0): failed to get link speed/duplex [ 383.212483][ T253] bond3: (slave batadv0): failed to get link speed/duplex [ 383.775672][T16223] tipc: New replicast peer: 127.0.0.1 [ 383.777545][T16223] tipc: Enabled bearer , priority 10 [ 383.993878][T16229] netlink: 'syz.0.2476': attribute type 2 has an invalid length. [ 384.050863][T16235] syzkaller0: entered promiscuous mode [ 384.050888][T16235] syzkaller0: entered allmulticast mode [ 384.393711][T16252] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 384.604962][T16252] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 384.874150][T16268] netlink: 'syz.1.2486': attribute type 4 has an invalid length. [ 384.941002][ T5798] lo speed is unknown, defaulting to 1000 [ 384.941030][ T5798] syz_device_name_32_chars_1234567: Port: 1 Link DOWN [ 385.064501][T16275] __nla_validate_parse: 70 callbacks suppressed [ 385.064522][T16275] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2488'. [ 385.133757][T16281] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2488'. [ 386.140287][T16329] ieee802154 phy1 wpan1: encryption failed: -22 [ 386.512280][T16345] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2505'. [ 386.783932][T16358] ieee802154 phy1 wpan1: encryption failed: -22 [ 386.784984][T16358] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2509'. [ 386.785921][T16353] ieee802154 phy1 wpan1: encryption failed: -22 [ 386.789197][T16362] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2509'. [ 386.852466][T16361] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2510'. [ 387.042935][ T14] net_ratelimit: 26 callbacks suppressed [ 387.042958][ T14] bond3: (slave batadv0): failed to get link speed/duplex [ 387.106942][T16372] tipc: Disabling bearer [ 387.152157][ T3335] bond3: (slave batadv0): failed to get link speed/duplex [ 387.371815][T16382] netlink: 15 bytes leftover after parsing attributes in process `syz.2.2514'. [ 387.411878][ T14] bond3: (slave batadv0): failed to get link speed/duplex [ 387.524819][ T300] bond3: (slave batadv0): failed to get link speed/duplex [ 387.633004][ T253] bond3: (slave batadv0): failed to get link speed/duplex [ 387.640377][T16391] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 387.712371][T16391] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2516'. [ 387.746169][ T253] bond3: (slave batadv0): failed to get link speed/duplex [ 387.802890][T16395] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2517'. [ 387.852335][ T253] bond3: (slave batadv0): failed to get link speed/duplex [ 387.962397][ T300] bond3: (slave batadv0): failed to get link speed/duplex [ 388.104471][T16406] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2520'. [ 388.164150][ T300] bond3: (slave batadv0): failed to get link speed/duplex [ 388.198256][T16415] xt_hashlimit: size too large, truncated to 1048576 [ 388.198279][T16415] xt_hashlimit: max too large, truncated to 1048576 [ 388.266907][T16415] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 388.333375][T15498] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 388.357602][T16411] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 388.455902][T16406] vlan2: entered promiscuous mode [ 388.455927][T16406] gretap0: entered promiscuous mode [ 388.520498][T12684] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 388.788546][T16424] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 388.788696][T16424] syzkaller1: linktype set to 773 [ 388.789255][T16425] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 388.789327][T16425] syzkaller1: linktype set to 773 [ 388.843766][T16436] ±ÿ: renamed from lo [ 388.882000][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 391.092334][T16581] __nla_validate_parse: 5 callbacks suppressed [ 391.092357][T16581] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2548'. [ 391.225442][T16584] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2550'. [ 391.225486][T16584] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2550'. [ 391.304152][T16573] syzkaller1: entered promiscuous mode [ 391.304178][T16573] syzkaller1: entered allmulticast mode [ 391.574403][T16605] netlink: 'syz.2.2553': attribute type 4 has an invalid length. [ 391.574426][T16605] netlink: 17 bytes leftover after parsing attributes in process `syz.2.2553'. [ 391.605351][T16607] netlink: 'syz.3.2554': attribute type 21 has an invalid length. [ 391.605373][T16607] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2554'. [ 391.605456][T16607] netlink: 'syz.3.2554': attribute type 4 has an invalid length. [ 391.605471][T16607] netlink: 'syz.3.2554': attribute type 3 has an invalid length. [ 391.605485][T16607] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2554'. [ 391.998393][T15498] lo speed is unknown, defaulting to 1000 [ 392.063305][ T9837] block nbd5: Receive control failed (result -32) [ 392.065176][ T9836] block nbd4: Receive control failed (result -32) [ 392.107190][T16619] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2558'. [ 392.525637][T16651] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2563'. [ 392.745583][T16660] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2564'. [ 392.821125][T16662] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2564'. [ 392.842032][T16662] net_ratelimit: 26 callbacks suppressed [ 392.842066][T16662] openvswitch: netlink: Message has 8 unknown bytes. [ 392.843126][ T5620] udevd[5620]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 392.866539][ T5621] udevd[5621]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 393.482445][ T59] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 4352 - 0 [ 393.482486][ T59] netdevsim netdevsim2 eth3: unset [0, 1] type 1 family 0 port 8472 - 0 [ 393.482516][ T59] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.482562][ T59] bond3: (slave batadv0): failed to get link speed/duplex [ 393.484960][ T59] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 4352 - 0 [ 393.484993][ T59] netdevsim netdevsim2 eth2: unset [0, 1] type 1 family 0 port 8472 - 0 [ 393.486218][ T59] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.486511][ T59] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 4352 - 0 [ 393.486543][ T59] netdevsim netdevsim2 eth1: unset [0, 1] type 1 family 0 port 8472 - 0 [ 393.486573][ T59] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.486611][ T59] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 4352 - 0 [ 393.486640][ T59] netdevsim netdevsim2 eth0: unset [0, 1] type 1 family 0 port 8472 - 0 [ 393.486668][ T59] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.597602][ T3335] bond3: (slave batadv0): failed to get link speed/duplex [ 393.703517][ T59] bond3: (slave batadv0): failed to get link speed/duplex [ 393.812793][ T3335] bond3: (slave batadv0): failed to get link speed/duplex [ 393.986070][ T14] bond3: (slave batadv0): failed to get link speed/duplex [ 394.132359][ T14] bond3: (slave batadv0): failed to get link speed/duplex [ 394.139528][T16692] netlink: 'syz.3.2571': attribute type 2 has an invalid length. [ 394.250426][T16692] veth5: entered allmulticast mode [ 394.327406][ T5621] block nbd64: NBD_DISCONNECT [ 394.339407][T16698] nbd: must specify a size in bytes for the device [ 394.340371][T16698] block nbd1: NBD_DISCONNECT [ 394.340397][T16698] block nbd1: Send disconnect failed -32 [ 394.340417][T16698] block nbd1: Send disconnect failed -32 [ 394.340438][T16698] block nbd1: shutting down sockets [ 394.353167][ T14] bond3: (slave batadv0): failed to get link speed/duplex [ 394.533272][ T14] bond3: (slave batadv0): failed to get link speed/duplex [ 394.641585][ T5621] udevd[5621]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 394.652334][ T6042] bond3: (slave batadv0): failed to get link speed/duplex [ 394.791593][T16705] netlink: 'syz.1.2577': attribute type 1 has an invalid length. [ 394.973188][T16705] bond9: (slave veth8): Enslaving as an active interface with a down link [ 395.007894][T16717] bond9: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 396.186076][T16757] __nla_validate_parse: 13 callbacks suppressed [ 396.186099][T16757] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2591'. [ 396.336280][T16766] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2590'. [ 396.386978][T16769] x_tables: duplicate underflow at hook 1 [ 396.431158][T16780] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2594'. [ 397.060250][T16769] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2589'. [ 397.060459][T16769] ipvlan0: left promiscuous mode [ 397.130956][T16769] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2589'. [ 397.666399][T16808] netlink: 'syz.4.2602': attribute type 4 has an invalid length. [ 397.872358][ T14] net_ratelimit: 14 callbacks suppressed [ 397.872380][ T14] bond3: (slave batadv0): failed to get link speed/duplex [ 397.877672][T16815] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2603'. [ 397.982253][ T6042] bond3: (slave batadv0): failed to get link speed/duplex [ 398.046016][T16821] mac80211_hwsim hwsim30 wlan0: entered promiscuous mode [ 398.046045][T16821] mac80211_hwsim hwsim30 wlan0: entered allmulticast mode [ 398.046233][T16821] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 398.096092][ T6042] bond3: (slave batadv0): failed to get link speed/duplex [ 398.202534][ T59] bond3: (slave batadv0): failed to get link speed/duplex [ 398.315961][ T59] bond3: (slave batadv0): failed to get link speed/duplex [ 398.422640][ T59] bond3: (slave batadv0): failed to get link speed/duplex [ 398.525511][T16836] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2607'. [ 398.542486][ T59] bond3: (slave batadv0): failed to get link speed/duplex [ 398.656295][ T6043] bond3: (slave batadv0): failed to get link speed/duplex [ 398.762013][ T59] bond3: (slave batadv0): failed to get link speed/duplex [ 398.849825][T16847] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2611'. [ 399.274175][T16868] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2616'. [ 399.634787][T16876] lo: entered allmulticast mode [ 399.844355][T16875] lo: left allmulticast mode [ 399.876882][T16882] netlink: 'syz.0.2620': attribute type 39 has an invalid length. [ 400.163651][T16896] netlink: 'syz.4.2622': attribute type 21 has an invalid length. [ 400.341586][T16900] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 400.341711][T16900] syzkaller1: linktype set to 825 [ 401.049102][T16927] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2630'. [ 401.275290][T16933] netlink: 'syz.4.2631': attribute type 1 has an invalid length. [ 401.381473][T16937] FAULT_INJECTION: forcing a failure. [ 401.381473][T16937] name failslab, interval 1, probability 0, space 0, times 0 [ 401.381511][T16937] CPU: 0 UID: 0 PID: 16937 Comm: syz.3.2632 Not tainted syzkaller #0 PREEMPT(full) [ 401.381537][T16937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 401.381551][T16937] Call Trace: [ 401.381560][T16937] [ 401.381570][T16937] dump_stack_lvl+0xe8/0x150 [ 401.381609][T16937] should_fail_ex+0x410/0x560 [ 401.381641][T16937] should_failslab+0xa8/0x100 [ 401.381681][T16937] __kmalloc_cache_noprof+0xa3/0x600 [ 401.381705][T16937] ? xfrm_policy_alloc+0x78/0x2b0 [ 401.381828][T16937] ? xfrm_policy_alloc+0x78/0x2b0 [ 401.381869][T16937] xfrm_policy_alloc+0x78/0x2b0 [ 401.381905][T16937] xfrm_policy_construct+0x39/0x6b0 [ 401.381943][T16937] xfrm_add_policy+0x273/0x690 [ 401.381974][T16937] ? __pfx_xfrm_add_policy+0x10/0x10 [ 401.381994][T16937] ? apparmor_capable+0x126/0x170 [ 401.382034][T16937] ? __nla_parse+0x40/0x60 [ 401.382068][T16937] xfrm_user_rcv_msg+0x7a8/0xf30 [ 401.382098][T16937] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 401.382156][T16937] ? __mutex_trylock_common+0x15f/0x270 [ 401.382191][T16937] ? __pfx___mutex_trylock_common+0x10/0x10 [ 401.382223][T16937] ? rcu_is_watching+0x16/0xb0 [ 401.382251][T16937] ? trace_contention_end+0x3d/0x140 [ 401.382290][T16937] netlink_rcv_skb+0x226/0x4a0 [ 401.382325][T16937] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 401.382350][T16937] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 401.382402][T16937] ? netlink_deliver_tap+0x2e/0x1b0 [ 401.382434][T16937] ? netlink_deliver_tap+0x2e/0x1b0 [ 401.382470][T16937] xfrm_netlink_rcv+0x79/0x90 [ 401.382492][T16937] netlink_unicast+0x7bd/0x940 [ 401.382535][T16937] netlink_sendmsg+0x813/0xb40 [ 401.382579][T16937] ? __pfx_netlink_sendmsg+0x10/0x10 [ 401.382622][T16937] ? apparmor_socket_sendmsg+0x98/0x360 [ 401.382657][T16937] ? __pfx_netlink_sendmsg+0x10/0x10 [ 401.382690][T16937] sock_sendmsg_nosec+0x13a/0x180 [ 401.382731][T16937] ____sys_sendmsg+0x54e/0x850 [ 401.382767][T16937] ? __pfx_____sys_sendmsg+0x10/0x10 [ 401.382806][T16937] ? import_iovec+0x73/0xa0 [ 401.382840][T16937] ___sys_sendmsg+0x2a5/0x360 [ 401.382868][T16937] ? __lock_acquire+0x747/0x2de0 [ 401.382896][T16937] ? __pfx____sys_sendmsg+0x10/0x10 [ 401.382967][T16937] ? __fget_files+0x2a/0x420 [ 401.382998][T16937] ? __fget_files+0x3a2/0x420 [ 401.383042][T16937] __x64_sys_sendmsg+0x1b1/0x290 [ 401.383075][T16937] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 401.383131][T16937] do_syscall_64+0x166/0x520 [ 401.383156][T16937] ? trace_irq_disable+0x3b/0x140 [ 401.383179][T16937] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.383203][T16937] ? clear_bhb_loop+0x70/0xc0 [ 401.383231][T16937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.383255][T16937] RIP: 0033:0x7f48ddd9e159 [ 401.383276][T16937] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 401.383296][T16937] RSP: 002b:00007f48dec3b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 401.383321][T16937] RAX: ffffffffffffffda RBX: 00007f48de025fa0 RCX: 00007f48ddd9e159 [ 401.383338][T16937] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 401.383353][T16937] RBP: 00007f48dec3b090 R08: 0000000000000000 R09: 0000000000000000 [ 401.383367][T16937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 401.383380][T16937] R13: 00007f48de026038 R14: 00007f48de025fa0 R15: 00007ffc56a10208 [ 401.383417][T16937] [ 401.759504][T16935] bond11: (slave veth13): Enslaving as an active interface with an up link [ 402.682851][T16969] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2642'. [ 402.877162][T16978] FAULT_INJECTION: forcing a failure. [ 402.877162][T16978] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 402.877200][T16978] CPU: 0 UID: 0 PID: 16978 Comm: syz.0.2644 Not tainted syzkaller #0 PREEMPT(full) [ 402.877226][T16978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 402.877240][T16978] Call Trace: [ 402.877248][T16978] [ 402.877258][T16978] dump_stack_lvl+0xe8/0x150 [ 402.877299][T16978] should_fail_ex+0x410/0x560 [ 402.877336][T16978] _copy_from_iter+0x1d3/0x1660 [ 402.877376][T16978] ? __pfx__copy_from_iter+0x10/0x10 [ 402.877399][T16978] ? __kmalloc_node_track_caller_noprof+0x2eb/0x720 [ 402.877423][T16978] ? netlink_sendmsg+0x5d4/0xb40 [ 402.877456][T16978] ? netlink_sendmsg+0x5d4/0xb40 [ 402.877505][T16978] ? netlink_sendmsg+0x650/0xb40 [ 402.877537][T16978] ? skb_put+0x112/0x210 [ 402.877568][T16978] netlink_sendmsg+0x6c0/0xb40 [ 402.877612][T16978] ? __pfx_netlink_sendmsg+0x10/0x10 [ 402.877655][T16978] ? apparmor_socket_sendmsg+0x98/0x360 [ 402.877683][T16978] ? __pfx_netlink_sendmsg+0x10/0x10 [ 402.877716][T16978] sock_sendmsg_nosec+0x13a/0x180 [ 402.877755][T16978] ____sys_sendmsg+0x54e/0x850 [ 402.877791][T16978] ? __pfx_____sys_sendmsg+0x10/0x10 [ 402.877831][T16978] ? import_iovec+0x73/0xa0 [ 402.877864][T16978] ___sys_sendmsg+0x2a5/0x360 [ 402.877892][T16978] ? __lock_acquire+0x747/0x2de0 [ 402.877921][T16978] ? __pfx____sys_sendmsg+0x10/0x10 [ 402.877990][T16978] ? __fget_files+0x2a/0x420 [ 402.878020][T16978] ? __fget_files+0x3a2/0x420 [ 402.878063][T16978] __x64_sys_sendmsg+0x1b1/0x290 [ 402.878095][T16978] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 402.878149][T16978] do_syscall_64+0x166/0x520 [ 402.878174][T16978] ? trace_irq_disable+0x3b/0x140 [ 402.878196][T16978] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.878220][T16978] ? clear_bhb_loop+0x70/0xc0 [ 402.878249][T16978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.878272][T16978] RIP: 0033:0x7fa654b9e159 [ 402.878292][T16978] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 402.878312][T16978] RSP: 002b:00007fa652df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 402.878337][T16978] RAX: ffffffffffffffda RBX: 00007fa654e25fa0 RCX: 00007fa654b9e159 [ 402.878355][T16978] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 402.878370][T16978] RBP: 00007fa652df6090 R08: 0000000000000000 R09: 0000000000000000 [ 402.878385][T16978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 402.878399][T16978] R13: 00007fa654e26038 R14: 00007fa654e25fa0 R15: 00007ffda87952a8 [ 402.878436][T16978] [ 402.891217][ T6042] net_ratelimit: 31 callbacks suppressed [ 402.891272][ T6042] bond3: (slave batadv0): failed to get link speed/duplex [ 402.993350][ T6043] bond3: (slave batadv0): failed to get link speed/duplex [ 403.104229][ T14] bond3: (slave batadv0): failed to get link speed/duplex [ 403.153493][T16980] FAULT_INJECTION: forcing a failure. [ 403.153493][T16980] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 403.153581][T16980] CPU: 0 UID: 0 PID: 16980 Comm: syz.3.2645 Not tainted syzkaller #0 PREEMPT(full) [ 403.153645][T16980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 403.153686][T16980] Call Trace: [ 403.153707][T16980] [ 403.153737][T16980] dump_stack_lvl+0xe8/0x150 [ 403.153840][T16980] should_fail_ex+0x410/0x560 [ 403.153916][T16980] _copy_from_user+0x2d/0xb0 [ 403.154094][T16980] do_ip_vs_set_ctl+0x35d/0xaf0 [ 403.154278][T16980] ? __pfx_do_ip_vs_set_ctl+0x10/0x10 [ 403.154464][T16980] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 403.154544][T16980] ? __pfx___mutex_lock+0x10/0x10 [ 403.154568][T16980] ? vfs_write+0x9ce/0xba0 [ 403.154622][T16980] nf_setsockopt+0x26f/0x290 [ 403.154683][T16980] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 403.154709][T16980] smc_setsockopt+0x232/0xb00 [ 403.154792][T16980] ? __pfx_smc_setsockopt+0x10/0x10 [ 403.154841][T16980] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 403.154967][T16980] ? __pfx_smc_setsockopt+0x10/0x10 [ 403.155030][T16980] do_sock_setsockopt+0x17c/0x1b0 [ 403.155122][T16980] __x64_sys_setsockopt+0x13d/0x1b0 [ 403.155207][T16980] do_syscall_64+0x166/0x520 [ 403.155271][T16980] ? trace_irq_disable+0x3b/0x140 [ 403.155333][T16980] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.155395][T16980] ? clear_bhb_loop+0x70/0xc0 [ 403.155476][T16980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.155532][T16980] RIP: 0033:0x7f48ddd9e159 [ 403.155594][T16980] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 403.155639][T16980] RSP: 002b:00007f48dec3b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 403.155703][T16980] RAX: ffffffffffffffda RBX: 00007f48de025fa0 RCX: 00007f48ddd9e159 [ 403.155755][T16980] RDX: 0000000000000485 RSI: 0000000000000000 RDI: 0000000000000003 [ 403.155787][T16980] RBP: 00007f48dec3b090 R08: 0000000000000000 R09: 0000000000000000 [ 403.155822][T16980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 403.155861][T16980] R13: 00007f48de026038 R14: 00007f48de025fa0 R15: 00007ffc56a10208 [ 403.155949][T16980] [ 403.215701][ T59] bond3: (slave batadv0): failed to get link speed/duplex [ 403.322986][ T6042] bond3: (slave batadv0): failed to get link speed/duplex [ 403.433259][ T6043] bond3: (slave batadv0): failed to get link speed/duplex [ 403.547169][ T6043] bond3: (slave batadv0): failed to get link speed/duplex [ 403.652334][ T6043] bond3: (slave batadv0): failed to get link speed/duplex [ 403.768351][ T6042] bond3: (slave batadv0): failed to get link speed/duplex [ 403.872071][ T6043] bond3: (slave batadv0): failed to get link speed/duplex [ 403.889767][T17003] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2649'. [ 403.889800][T17003] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2649'. [ 404.041892][ T6042] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 4352 - 0 [ 404.041963][ T6042] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 4352 - 0 [ 404.042011][ T6042] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 4352 - 0 [ 404.055246][ T6043] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 4352 - 0 [ 404.182834][T17006] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2654'. [ 404.507606][T17012] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2657'. [ 404.660711][T17020] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2659'. [ 404.727133][T17026] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2658'. [ 404.799991][T17029] IPVS: length: 189 != 8 [ 405.300146][T17037] netlink: 'syz.4.2664': attribute type 1 has an invalid length. [ 405.319344][T17037] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2664'. [ 405.355319][T17037] veth14: entered allmulticast mode [ 405.413767][T17037] veth15: entered allmulticast mode [ 405.436353][T17045] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2664'. [ 405.611327][T17043] bond3: (slave veth0_to_bond): Releasing active interface [ 405.775951][T17048] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2661'. [ 405.797680][T17038] mac80211_hwsim hwsim5 wlan0: left promiscuous mode [ 406.117777][T17062] vcan0: tx address claim with dest, not broadcast [ 406.159084][T17062] vcan0: tx address claim with dest, not broadcast [ 406.462589][T17073] sctp: [Deprecated]: syz.3.2671 (pid 17073) Use of int in max_burst socket option. [ 406.462589][T17073] Use struct sctp_assoc_value instead [ 406.626553][T17075] sctp: [Deprecated]: syz.3.2671 (pid 17075) Use of int in max_burst socket option. [ 406.626553][T17075] Use struct sctp_assoc_value instead [ 407.972119][T17102] __nla_validate_parse: 2 callbacks suppressed [ 407.972145][T17102] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2679'. [ 408.299554][T17094] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.299778][T17094] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.864793][T17094] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 408.939986][T17094] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 409.248883][T17094] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 409.526084][T17102] C: renamed from veth1_to_team (while UP) [ 409.539197][T17102] netlink: 'syz.3.2679': attribute type 1 has an invalid length. [ 409.539220][T17102] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2679'. [ 409.539802][T17102] net_ratelimit: 32 callbacks suppressed [ 409.539819][T17102] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 409.543025][ T3335] bond3: (slave batadv0): failed to get link speed/duplex [ 409.562836][ T3335] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 409.562969][ T3335] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 409.563071][ T3335] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 409.563175][ T3335] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 409.660424][T17115] pim6reg: entered allmulticast mode [ 409.672196][ T59] bond3: (slave batadv0): failed to get link speed/duplex [ 409.672338][T17120] pim6reg: left allmulticast mode [ 409.782846][ T6042] bond3: (slave batadv0): failed to get link speed/duplex [ 409.902282][ T6042] bond3: (slave batadv0): failed to get link speed/duplex [ 409.964583][T17128] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2685'. [ 410.013230][ T59] bond3: (slave batadv0): failed to get link speed/duplex [ 410.014666][T17128] mac80211_hwsim hwsim7 wlan1: left promiscuous mode [ 410.135841][ T59] bond3: (slave batadv0): failed to get link speed/duplex [ 410.242046][ T6043] bond3: (slave batadv0): failed to get link speed/duplex [ 410.302638][T17140] geneve5: entered promiscuous mode [ 410.355737][ T59] bond3: (slave batadv0): failed to get link speed/duplex [ 410.465148][ T59] bond3: (slave batadv0): failed to get link speed/duplex [ 410.476802][T17147] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2690'. [ 410.551573][T17150] netlink: 'syz.0.2692': attribute type 1 has an invalid length. [ 410.642004][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 410.647207][T17150] 8021q: adding VLAN 0 to HW filter on device bond8 [ 410.781834][T17155] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2692'. [ 410.785150][T17155] bond8: entered promiscuous mode [ 410.785174][T17155] bond8: entered allmulticast mode [ 410.813940][T17158] syzkaller1: entered promiscuous mode [ 410.813964][T17158] syzkaller1: entered allmulticast mode [ 410.941011][T17165] netlink: 'syz.1.2694': attribute type 1 has an invalid length. [ 411.006980][T17169] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2694'. [ 411.012943][T17165] 8021q: adding VLAN 0 to HW filter on device bond10 [ 411.109537][T17158] lo speed is unknown, defaulting to 1000 [ 411.124007][T17160] IPVS: Scheduler module ip_vs_sip not found [ 411.129635][T17158] lo speed is unknown, defaulting to 1000 [ 411.247477][T17165] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2694'. [ 411.251498][T17163] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2693'. [ 411.276988][T17163] batadv_slave_0: entered promiscuous mode [ 411.281173][T17158] ±ÿ speed is unknown, defaulting to 1000 [ 411.382202][T17176] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2697'. [ 411.382253][T17176] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2697'. [ 411.438422][T17176] tipc: Enabling of bearer rejected, already enabled [ 411.543781][T17156] batadv_slave_0: left promiscuous mode [ 412.369117][T17213] netlink: 'syz.1.2705': attribute type 61 has an invalid length. [ 412.541076][T17216] team_slave_0: entered allmulticast mode [ 413.406937][T17263] netlink: 'syz.4.2716': attribute type 10 has an invalid length. [ 413.495577][T17263] team0 (unregistering): Port device team_slave_0 removed [ 413.548192][T17263] team0 (unregistering): Port device team_slave_1 removed [ 413.705874][T17262] dvmrp0: entered allmulticast mode [ 413.767776][T17273] netlink: 'syz.0.2719': attribute type 2 has an invalid length. [ 413.768566][T17273] netlink: 'syz.0.2719': attribute type 2 has an invalid length. [ 413.768585][T17273] __nla_validate_parse: 3 callbacks suppressed [ 413.768598][T17273] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2719'. [ 414.041724][T17278] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2721'. [ 414.186054][T17285] IPVS: length: 133 != 24 [ 414.442562][T17294] xt_hashlimit: size too large, truncated to 1048576 [ 414.486425][T17296] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2727'. [ 414.541953][T17303] netlink: 'syz.2.2728': attribute type 11 has an invalid length. [ 414.612213][ T14] net_ratelimit: 27 callbacks suppressed [ 414.612235][ T14] bond3: (slave batadv0): failed to get link speed/duplex [ 414.723589][ T14] bond3: (slave batadv0): failed to get link speed/duplex [ 414.833705][ T12] bond3: (slave batadv0): failed to get link speed/duplex [ 414.943289][ T14] bond3: (slave batadv0): failed to get link speed/duplex [ 415.054356][ T12] bond3: (slave batadv0): failed to get link speed/duplex [ 415.195150][T17325] bond11: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 415.213756][T17325] bond11 (unregistering): Released all slaves [ 415.218944][T17333] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2735'. [ 415.328090][T17331] bridge0: port 1(macsec1) entered blocking state [ 415.328195][T17331] bridge0: port 1(macsec1) entered disabled state [ 415.328326][T17331] macsec1: entered allmulticast mode [ 415.328342][T17331] bridge0: entered allmulticast mode [ 415.380436][T17331] macsec1: left allmulticast mode [ 415.380457][T17331] bridge0: left allmulticast mode [ 415.422499][ T3335] bond3: (slave batadv0): failed to get link speed/duplex [ 415.532056][ T12] bond3: (slave batadv0): failed to get link speed/duplex [ 415.642611][ T12] bond3: (slave batadv0): failed to get link speed/duplex [ 415.753390][T17358] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2748'. [ 415.811139][T17354] IPVS: Scheduler module ip_vs_sip not found [ 415.843159][ T12] bond3: (slave batadv0): failed to get link speed/duplex [ 415.952139][ T59] bond3: (slave batadv0): failed to get link speed/duplex [ 415.957325][T17363] netlink: 'syz.1.2746': attribute type 1 has an invalid length. [ 415.991272][T17355] IPVS: Scheduler module ip_vs_sip not found [ 416.002750][T17374] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2750'. [ 416.052834][T17363] 8021q: adding VLAN 0 to HW filter on device bond11 [ 416.294035][T17388] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2755'. [ 416.496673][T17396] netlink: 'syz.1.2757': attribute type 2 has an invalid length. [ 416.498263][T17401] netlink: 'syz.1.2757': attribute type 2 has an invalid length. [ 416.534548][T17396] : entered promiscuous mode [ 416.820438][T17411] IPVS: set_ctl: invalid protocol: 24 0.0.0.0:256 [ 416.820478][T17411] IPVS: set_ctl: invalid protocol: 24 0.0.0.0:256 [ 416.820513][T17411] IPVS: set_ctl: invalid protocol: 24 0.0.0.0:256 [ 416.820538][T17411] IPVS: set_ctl: invalid protocol: 24 0.0.0.0:256 [ 416.820564][T17411] IPVS: set_ctl: invalid protocol: 24 0.0.0.0:256 [ 416.820590][T17411] IPVS: set_ctl: invalid protocol: 24 0.0.0.0:256 [ 416.820616][T17411] IPVS: set_ctl: invalid protocol: 24 0.0.0.0:256 [ 416.820641][T17411] IPVS: set_ctl: invalid protocol: 24 0.0.0.0:256 [ 416.820667][T17411] IPVS: set_ctl: invalid protocol: 24 0.0.0.0:256 [ 416.820693][T17411] IPVS: set_ctl: invalid protocol: 24 0.0.0.0:256 [ 416.820718][T17411] IPVS: set_ctl: invalid protocol: 24 0.0.0.0:256 [ 416.820758][T17411] IPVS: set_ctl: invalid protocol: 24 0.0.0.0:256 [ 416.820785][T17411] IPVS: set_ctl: invalid protocol: 24 0.0.0.0:256 [ 416.820811][T17411] IPVS: set_ctl: invalid protocol: 24 0.0.0.0:256 [ 416.820837][T17411] IPVS: set_ctl: invalid protocol: 24 0.0.0.0:256 [ 416.820862][T17411] IPVS: set_ctl: invalid protocol: 24 0.0.0.0:256 [ 416.820888][T17411] IPVS: set_ctl: invalid protocol: 24 0.0.0.0:256 [ 416.820913][T17411] IPVS: set_ctl: invalid protocol: 24 0.0.0.0:256 [ 416.820938][T17411] IPVS: set_ctl: invalid protocol: 24 0.0.0.0:256 [ 416.820964][T17411] IPVS: set_ctl: invalid protocol: 24 0.0.0.0:256 [ 416.820989][T17411] IPVS: set_ctl: invalid protocol: 24 0.0.0.0:256 [ 416.821015][T17411] IPVS: set_ctl: invalid protocol: 24 0.0.0.0:256 [ 416.821040][T17411] IPVS: set_ctl: invalid protocol: 24 0.0.0.0:256 [ 416.821066][T17411] IPVS: set_ctl: invalid protocol: 24 0.0.0.0:256 [ 416.821091][T17411] IPVS: set_ctl: invalid protocol: 24 0.0.0.0:256 [ 416.821117][T17411] IPVS: set_ctl: invalid protocol: 24 0.0.0.0:256 [ 416.821142][T17411] IPVS: set_ctl: invalid protocol: 24 0.0.0.0:256 [ 416.821168][T17411] IPVS: set_ctl: invalid protocol: 24 0.0.0.0:256 [ 416.821193][T17411] IPVS: set_ctl: invalid protocol: 24 0.0.0.0:256 [ 416.821219][T17411] IPVS: set_ctl: invalid protocol: 24 0.0.0.0:256 [ 416.821244][T17411] IPVS: set_ctl: invalid protocol: 24 0.0.0.0:256 [ 416.821271][T17411] IPVS: set_ctl: invalid protocol: 24 0.0.0.0:256 [ 416.821297][T17411] IPVS: set_ctl: invalid protocol: 24 0.0.0.0:256 [ 416.821323][T17411] IPVS: set_ctl: invalid protocol: 24 0.0.0.0:256 [ 416.821348][T17411] IPVS: set_ctl: invalid protocol: 24 0.0.0.0:256 [ 416.821374][T17411] IPVS: set_ctl: invalid protocol: 24 0.0.0.0:256 [ 416.821400][T17411] IPVS: set_ctl: invalid protocol: 24 0.0.0.0:256 [ 416.821425][T17411] IPVS: set_ctl: invalid protocol: 24 0.0.0.0:256 [ 416.821451][T17411] IPVS: set_ctl: invalid protocol: 24 0.0.0.0:256 [ 416.821476][T17411] IPVS: set_ctl: invalid protocol: 24 0.0.0.0:256 [ 416.821511][T17411] IPVS: set_ctl: invalid protocol: 24 0.0.0.0:256 [ 416.821538][T17411] IPVS: set_ctl: invalid protocol: 24 0.0.0.0:256 [ 416.821563][T17411] IPVS: set_ctl: invalid protocol: 24 0.0.0.0:256 [ 416.821589][T17411] IPVS: set_ctl: invalid protocol: 24 0.0.0.0:256 [ 416.821615][T17411] IPVS: set_ctl: invalid protocol: 24 0.0.0.0:256 [ 416.821641][T17411] IPVS: set_ctl: invalid protocol: 24 0.0.0.0:256 [ 416.821667][T17411] IPVS: set_ctl: invalid protocol: 24 0.0.0.0:256 [ 416.821693][T17411] IPVS: set_ctl: invalid protocol: 24 0.0.0.0:256 [ 416.821718][T17411] IPVS: set_ctl: invalid protocol: 24 0.0.0.0:256 [ 416.955568][T17411] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 416.955663][T17411] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 416.955735][T17411] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 416.955801][T17411] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 416.955874][T17411] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 416.955938][T17411] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 416.956004][T17411] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 416.956091][T17411] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 416.956163][T17411] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 416.956228][T17411] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 416.956321][T17411] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 416.956463][T17411] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 416.956536][T17411] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 416.956608][T17411] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 416.956672][T17411] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 416.956744][T17411] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 417.567400][T17425] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2766'. [ 417.571026][T17413] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2763'. [ 417.723027][T17427] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2767'. [ 417.724106][T17427] nftables ruleset with unbound chain [ 417.796915][T17436] netlink: 'syz.2.2768': attribute type 9 has an invalid length. [ 417.833964][T17438] netlink: 'syz.3.2770': attribute type 5 has an invalid length. [ 418.348724][T17468] lo speed is unknown, defaulting to 1000 [ 418.350594][T17468] lo speed is unknown, defaulting to 1000 [ 418.370992][T17468] ±ÿ speed is unknown, defaulting to 1000 [ 418.596831][T17473] geneve3: entered promiscuous mode [ 418.732932][ T6042] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.733010][ T6042] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.733052][ T6042] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.733093][ T6042] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.664056][T17527] __nla_validate_parse: 2 callbacks suppressed [ 419.664079][T17527] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2793'. [ 419.672643][ T6041] net_ratelimit: 25 callbacks suppressed [ 419.672694][ T6041] bond3: (slave batadv0): failed to get link speed/duplex [ 419.705720][T17527] openvswitch: ovs-system: Dropping previously announced user features [ 419.739901][T17527] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2793'. [ 420.007266][ T6045] bond3: (slave batadv0): failed to get link speed/duplex [ 420.112426][ T6045] bond3: (slave batadv0): failed to get link speed/duplex [ 420.221913][ T6042] bond3: (slave batadv0): failed to get link speed/duplex [ 420.374116][ T6045] bond3: (slave batadv0): failed to get link speed/duplex [ 420.379054][T17555] xt_hashlimit: size too large, truncated to 1048576 [ 420.379074][T17555] xt_hashlimit: max too large, truncated to 1048576 [ 420.483460][ T6041] bond3: (slave batadv0): failed to get link speed/duplex [ 420.558986][T17562] xt_hashlimit: size too large, truncated to 1048576 [ 420.559008][T17562] xt_hashlimit: max too large, truncated to 1048576 [ 420.684493][T17572] ovs-s!: entered promiscuous mode [ 420.695649][ T6041] bond3: (slave batadv0): failed to get link speed/duplex [ 420.856017][T17575] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 420.863625][ T6042] bond3: (slave batadv0): failed to get link speed/duplex [ 421.002718][T17583] lo speed is unknown, defaulting to 1000 [ 421.005041][T17583] lo speed is unknown, defaulting to 1000 [ 421.006988][T17583] ±ÿ speed is unknown, defaulting to 1000 [ 421.085370][T17587] netlink: 'syz.2.2809': attribute type 10 has an invalid length. [ 421.111674][T17587] syz_tun: entered promiscuous mode [ 421.136834][T17587] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 421.172530][ T6049] bond3: (slave batadv0): failed to get link speed/duplex [ 421.551448][T17605] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2813'. [ 421.551624][T17600] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2813'. [ 421.729289][T17609] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2815'. [ 421.729329][T17609] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2815'. [ 423.055266][T17641] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2822'. [ 423.125867][T17643] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2824'. [ 423.229500][ T6049] bond0: (slave syz_tun): interface is now down [ 423.249351][ T6042] bond0: (slave syz_tun): interface is now down [ 423.260812][T17640] 8021q: adding VLAN 0 to HW filter on device bond0 [ 423.268657][ T300] bond0: (slave syz_tun): interface is now down [ 423.280547][ T300] bond0: now running without any active interface! [ 423.335121][T17646] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 423.371074][T17649] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2825'. [ 423.565641][T17652] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2826'. [ 423.706985][T17655] sctp_getsockopt_delayed_ack: 23 callbacks suppressed [ 423.707007][T17655] sctp: [Deprecated]: syz.0.2829 (pid 17655) Use of struct sctp_assoc_value in delayed_ack socket option. [ 423.707007][T17655] Use struct sctp_sack_info instead [ 424.339328][T17688] wg2: entered allmulticast mode [ 424.665828][T17698] lo speed is unknown, defaulting to 1000 [ 424.692376][ T300] net_ratelimit: 22 callbacks suppressed [ 424.692399][ T300] bond3: (slave batadv0): failed to get link speed/duplex [ 424.693130][T17698] lo speed is unknown, defaulting to 1000 [ 424.728186][T17698] ±ÿ speed is unknown, defaulting to 1000 [ 424.915742][T17694] syzkaller1: entered promiscuous mode [ 424.915767][T17694] syzkaller1: entered allmulticast mode [ 425.034094][ T300] bond3: (slave batadv0): failed to get link speed/duplex [ 425.160264][T17724] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2841'. [ 425.160291][T17724] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2841'. [ 425.160310][T17724] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2841'. [ 425.161176][T17724] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2841'. [ 425.171136][ T6047] bond3: (slave batadv0): failed to get link speed/duplex [ 425.271421][T17729] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2843'. [ 425.283074][ T300] bond3: (slave batadv0): failed to get link speed/duplex [ 425.436272][T17731] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2844'. [ 425.436296][T17731] netlink: 34 bytes leftover after parsing attributes in process `syz.3.2844'. [ 425.472000][ T6049] bond3: (slave batadv0): failed to get link speed/duplex [ 425.544650][T17733] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2844'. [ 425.584102][ T6041] bond3: (slave batadv0): failed to get link speed/duplex [ 425.692044][ T6049] bond3: (slave batadv0): failed to get link speed/duplex [ 425.861995][ T6045] bond3: (slave batadv0): failed to get link speed/duplex [ 425.971940][ T6045] bond3: (slave batadv0): failed to get link speed/duplex [ 426.092437][ T6049] bond3: (slave batadv0): failed to get link speed/duplex [ 427.645296][T17704] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 427.906297][T17743] netlink: 'syz.1.2850': attribute type 1 has an invalid length. [ 427.941053][T17743] 8021q: adding VLAN 0 to HW filter on device bond12 [ 428.170829][T17759] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2854'. [ 428.170855][T17759] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2854'. [ 428.170882][T17759] netlink: 'syz.1.2854': attribute type 12 has an invalid length. [ 428.172655][T17759] netlink: 'syz.1.2854': attribute type 12 has an invalid length. [ 428.225175][T17756] xt_connbytes: Forcing CT accounting to be enabled [ 428.275685][T17764] netlink: 'syz.3.2855': attribute type 9 has an invalid length. [ 428.393616][T17770] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 428.493925][T17772] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 428.633443][T17779] netlink: 'syz.1.2859': attribute type 1 has an invalid length. [ 428.810393][T17779] 8021q: adding VLAN 0 to HW filter on device bond13 [ 428.821269][T17782] bond13: entered allmulticast mode [ 428.916268][T17793] bond0: (slave ip6gretap0): Enslaving as an active interface with an up link [ 429.004428][T17787] bond0 (unregistering): (slave ip6gretap0): Releasing backup interface [ 429.084294][T17787] bond0 (unregistering): Released all slaves [ 429.177123][ T300] smbdirect: ib_dev[syz1] removed [ 429.199472][T17800] bridge_slave_0: entered promiscuous mode [ 429.412983][T17807] syzkaller0: left promiscuous mode [ 429.413007][T17807] syzkaller0: left allmulticast mode [ 429.413385][T17807] batman_adv: batadv0: Interface activated: syzkaller0 [ 429.762189][ T6042] net_ratelimit: 28 callbacks suppressed [ 429.762213][ T6042] bond3: (slave batadv0): failed to get link speed/duplex [ 429.828207][T17829] FAULT_INJECTION: forcing a failure. [ 429.828207][T17829] name failslab, interval 1, probability 0, space 0, times 0 [ 429.828260][T17829] CPU: 0 UID: 0 PID: 17829 Comm: syz.3.2875 Not tainted syzkaller #0 PREEMPT(full) [ 429.828287][T17829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 429.828305][T17829] Call Trace: [ 429.828319][T17829] [ 429.828329][T17829] dump_stack_lvl+0xe8/0x150 [ 429.828371][T17829] should_fail_ex+0x410/0x560 [ 429.828405][T17829] should_failslab+0xa8/0x100 [ 429.828435][T17829] ? skb_clone+0x212/0x3a0 [ 429.828469][T17829] kmem_cache_alloc_noprof+0xa1/0x600 [ 429.828507][T17829] ? skb_clone+0x212/0x3a0 [ 429.828553][T17829] skb_clone+0x212/0x3a0 [ 429.828588][T17829] __netlink_deliver_tap+0x413/0x860 [ 429.828636][T17829] ? netlink_deliver_tap+0x2e/0x1b0 [ 429.828671][T17829] netlink_deliver_tap+0x19c/0x1b0 [ 429.828706][T17829] netlink_unicast+0x781/0x940 [ 429.828749][T17829] netlink_sendmsg+0x813/0xb40 [ 429.828793][T17829] ? __pfx_netlink_sendmsg+0x10/0x10 [ 429.828837][T17829] ? apparmor_socket_sendmsg+0x98/0x360 [ 429.828867][T17829] ? __pfx_netlink_sendmsg+0x10/0x10 [ 429.828900][T17829] sock_sendmsg_nosec+0x13a/0x180 [ 429.828940][T17829] ____sys_sendmsg+0x54e/0x850 [ 429.828976][T17829] ? __pfx_____sys_sendmsg+0x10/0x10 [ 429.829017][T17829] ? import_iovec+0x73/0xa0 [ 429.829049][T17829] ___sys_sendmsg+0x2a5/0x360 [ 429.829083][T17829] ? __lock_acquire+0x747/0x2de0 [ 429.829112][T17829] ? __pfx____sys_sendmsg+0x10/0x10 [ 429.829182][T17829] ? __fget_files+0x2a/0x420 [ 429.829217][T17829] ? __fget_files+0x3a2/0x420 [ 429.829261][T17829] __x64_sys_sendmsg+0x1b1/0x290 [ 429.829294][T17829] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 429.829348][T17829] do_syscall_64+0x166/0x520 [ 429.829375][T17829] ? trace_irq_disable+0x3b/0x140 [ 429.829399][T17829] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.829423][T17829] ? clear_bhb_loop+0x70/0xc0 [ 429.829453][T17829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.829476][T17829] RIP: 0033:0x7f48ddd9e159 [ 429.829497][T17829] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 429.829517][T17829] RSP: 002b:00007f48dec3b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 429.829542][T17829] RAX: ffffffffffffffda RBX: 00007f48de025fa0 RCX: 00007f48ddd9e159 [ 429.829567][T17829] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 429.829582][T17829] RBP: 00007f48dec3b090 R08: 0000000000000000 R09: 0000000000000000 [ 429.829597][T17829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 429.829611][T17829] R13: 00007f48de026038 R14: 00007f48de025fa0 R15: 00007ffc56a10208 [ 429.829649][T17829] [ 429.874307][ T6045] bond3: (slave batadv0): failed to get link speed/duplex [ 429.982501][ T6045] bond3: (slave batadv0): failed to get link speed/duplex [ 430.093605][ T6045] bond3: (slave batadv0): failed to get link speed/duplex [ 430.203191][ T6042] bond3: (slave batadv0): failed to get link speed/duplex [ 430.314986][ T6041] bond3: (slave batadv0): failed to get link speed/duplex [ 430.423317][ T6047] bond3: (slave batadv0): failed to get link speed/duplex [ 432.522575][ T6045] bond3: (slave batadv0): failed to get link speed/duplex [ 432.620595][T17861] netlink: 'syz.0.2885': attribute type 2 has an invalid length. [ 432.632291][ T6047] bond3: (slave batadv0): failed to get link speed/duplex [ 432.742000][ T6047] bond3: (slave batadv0): failed to get link speed/duplex [ 432.770727][T17870] FAULT_INJECTION: forcing a failure. [ 432.770727][T17870] name failslab, interval 1, probability 0, space 0, times 0 [ 432.770762][T17870] CPU: 1 UID: 0 PID: 17870 Comm: syz.0.2888 Not tainted syzkaller #0 PREEMPT(full) [ 432.770788][T17870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 432.770801][T17870] Call Trace: [ 432.770810][T17870] [ 432.770820][T17870] dump_stack_lvl+0xe8/0x150 [ 432.770858][T17870] should_fail_ex+0x410/0x560 [ 432.770890][T17870] should_failslab+0xa8/0x100 [ 432.770921][T17870] __kmalloc_cache_noprof+0xa3/0x600 [ 432.770946][T17870] ? nft_delchain+0x54/0x4b0 [ 432.771100][T17870] ? nft_delchain+0x54/0x4b0 [ 432.771138][T17870] nft_delchain+0x54/0x4b0 [ 432.771176][T17870] nft_flush_table+0x18a0/0x1d40 [ 432.771209][T17870] ? nft_pernet+0x23/0x240 [ 432.771274][T17870] ? nft_pernet+0x23/0x240 [ 432.771303][T17870] ? nla_strcmp+0xf8/0x130 [ 432.771336][T17870] nf_tables_deltable+0xd1d/0xe80 [ 432.771365][T17870] ? nfnetlink_rcv+0x8d1/0x28c0 [ 432.771403][T17870] ? __pfx_nf_tables_deltable+0x10/0x10 [ 432.771431][T17870] ? nfnl_pernet+0x23/0x240 [ 432.771468][T17870] ? __nla_parse+0x40/0x60 [ 432.771505][T17870] nfnetlink_rcv+0x1288/0x28c0 [ 432.771575][T17870] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 432.771625][T17870] ? ref_tracker_free+0x689/0x830 [ 432.771715][T17870] ? skb_clone+0x246/0x3a0 [ 432.771750][T17870] ? __netlink_deliver_tap+0x811/0x860 [ 432.771794][T17870] ? netlink_deliver_tap+0x2e/0x1b0 [ 432.771826][T17870] ? netlink_deliver_tap+0x2e/0x1b0 [ 432.771866][T17870] netlink_unicast+0x7bd/0x940 [ 432.771908][T17870] netlink_sendmsg+0x813/0xb40 [ 432.771953][T17870] ? __pfx_netlink_sendmsg+0x10/0x10 [ 432.771997][T17870] ? apparmor_socket_sendmsg+0x98/0x360 [ 432.772025][T17870] ? __pfx_netlink_sendmsg+0x10/0x10 [ 432.772058][T17870] sock_sendmsg_nosec+0x13a/0x180 [ 432.772097][T17870] ____sys_sendmsg+0x54e/0x850 [ 432.772133][T17870] ? __pfx_____sys_sendmsg+0x10/0x10 [ 432.772173][T17870] ? import_iovec+0x73/0xa0 [ 432.772205][T17870] ___sys_sendmsg+0x2a5/0x360 [ 432.772241][T17870] ? __lock_acquire+0x747/0x2de0 [ 432.772271][T17870] ? __pfx____sys_sendmsg+0x10/0x10 [ 432.772341][T17870] ? __fget_files+0x2a/0x420 [ 432.772372][T17870] ? __fget_files+0x3a2/0x420 [ 432.772415][T17870] __x64_sys_sendmsg+0x1b1/0x290 [ 432.772449][T17870] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 432.772504][T17870] do_syscall_64+0x166/0x520 [ 432.772530][T17870] ? trace_irq_disable+0x3b/0x140 [ 432.772553][T17870] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.772576][T17870] ? clear_bhb_loop+0x70/0xc0 [ 432.772605][T17870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.772629][T17870] RIP: 0033:0x7fa654b9e159 [ 432.772650][T17870] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 432.772670][T17870] RSP: 002b:00007fa652df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 432.772695][T17870] RAX: ffffffffffffffda RBX: 00007fa654e25fa0 RCX: 00007fa654b9e159 [ 432.772712][T17870] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 432.772728][T17870] RBP: 00007fa652df6090 R08: 0000000000000000 R09: 0000000000000000 [ 432.772743][T17870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 432.772757][T17870] R13: 00007fa654e26038 R14: 00007fa654e25fa0 R15: 00007ffda87952a8 [ 432.772794][T17870] [ 432.808988][T17826] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 433.154808][T17856] tipc: Enabled bearer , priority 10 [ 433.540008][T17887] __nla_validate_parse: 8 callbacks suppressed [ 433.540031][T17887] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2893'. [ 433.749649][T17905] netlink: 'syz.1.2899': attribute type 1 has an invalid length. [ 433.790423][T17905] 8021q: adding VLAN 0 to HW filter on device bond14 [ 433.828781][T17905] bond14: (slave syz_tun): Enslaving as a backup interface with an up link [ 434.088687][T17913] syzkaller0: entered promiscuous mode [ 434.088714][T17913] syzkaller0: entered allmulticast mode [ 434.824465][T17954] netlink: 'syz.2.2909': attribute type 83 has an invalid length. [ 436.523974][T17927] netlink: 136 bytes leftover after parsing attributes in process `syz.4.2906'. [ 436.524000][T17927] net_ratelimit: 12 callbacks suppressed [ 436.524013][T17927] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 436.621587][T17964] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2911'. [ 436.638190][ T5741] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 436.660800][T17934] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 436.677955][T17934] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 436.679782][T17949] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2905'. [ 436.768566][ T6041] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 436.768837][ T6041] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 436.779170][ T6041] bond3: (slave batadv0): failed to get link speed/duplex [ 436.884247][ T8392] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 436.884472][ T6041] bond3: (slave batadv0): failed to get link speed/duplex [ 436.993571][T17974] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2916'. [ 436.995760][ T6042] bond3: (slave batadv0): failed to get link speed/duplex [ 436.999469][T17974] netlink: 'syz.2.2916': attribute type 1 has an invalid length. [ 437.055234][T17977] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2916'. [ 437.118144][T17974] bond6: (slave veth0_to_bond): Releasing backup interface [ 437.137117][T17974] bond11: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 437.161513][T17974] macvlan3: entered promiscuous mode [ 437.161537][T17974] macvlan3: entered allmulticast mode [ 437.174034][T17974] bond11: entered promiscuous mode [ 437.174817][T17974] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 437.175715][T17974] bond11: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 437.179789][T17974] bond11: left promiscuous mode [ 437.272253][ T6041] bond3: (slave batadv0): failed to get link speed/duplex [ 437.417155][T17991] netlink: 'syz.3.2921': attribute type 11 has an invalid length. [ 437.417656][T17992] netlink: 58 bytes leftover after parsing attributes in process `syz.3.2921'. [ 437.417677][T17992] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2921'. [ 437.459083][T17993] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2918'. [ 437.509718][T17988] hsr0: entered allmulticast mode [ 437.509745][T17988] hsr_slave_0: entered allmulticast mode [ 437.509764][T17988] hsr_slave_1: entered allmulticast mode [ 437.574063][T17993] hsr_slave_0: left promiscuous mode [ 437.575135][T17993] hsr_slave_1: left promiscuous mode [ 437.641297][T17993] hsr0 (unregistering): left allmulticast mode [ 437.676030][ T6042] bond3: (slave batadv0): failed to get link speed/duplex [ 437.684753][T12685] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 437.783858][ T300] bond3: (slave batadv0): failed to get link speed/duplex [ 437.893324][ T6042] bond3: (slave batadv0): failed to get link speed/duplex [ 438.009058][T18014] 8021q: VLANs not supported on syzkaller0 [ 438.083950][ T9836] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 438.088319][ T9836] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 438.104810][ T9836] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 438.120952][ T9836] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 438.132232][ T9836] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 438.167413][ T300] bond3: (slave batadv0): failed to get link speed/duplex [ 438.355496][ T31] audit: type=1800 audit(1789676014.378:5): pid=18022 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2927" name=B702 dev="tmpfs" ino=3046 res=0 errno=0 [ 438.691247][T18006] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 438.769106][T18036] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2930'. [ 438.769286][T18036] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2930'. [ 439.272936][T18043] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2931'. [ 440.086489][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.247094][ T9837] Bluetooth: hci5: command tx timeout [ 440.652011][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 441.050863][T18062] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2937'. [ 441.128288][T18060] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2936'. [ 441.179911][T18015] lo speed is unknown, defaulting to 1000 [ 441.191225][T18015] lo speed is unknown, defaulting to 1000 [ 441.201181][T18015] ±ÿ speed is unknown, defaulting to 1000 [ 441.613236][ T6042] net_ratelimit: 3 callbacks suppressed [ 441.613259][ T6042] bond3: (slave batadv0): failed to get link speed/duplex [ 441.722120][ T6049] bond3: (slave batadv0): failed to get link speed/duplex [ 441.726077][T18089] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2940'. [ 441.770327][T18089] ±ÿ: renamed from lo [ 441.941460][T18094] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2942'. [ 442.005805][T18098] syzkaller1: entered promiscuous mode [ 442.005830][T18098] syzkaller1: entered allmulticast mode [ 442.043140][T18098] af_packet: tpacket_rcv: packet too big, clamped from 64862 to 3952. macoff=96 [ 442.224850][T18015] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.226595][T18015] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.226758][T18015] bridge_slave_0: entered allmulticast mode [ 442.230380][T18015] bridge_slave_0: entered promiscuous mode [ 442.265424][T18015] bridge0: port 2(bridge_slave_1) entered blocking state [ 442.265606][T18015] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.265768][T18015] bridge_slave_1: entered allmulticast mode [ 442.271626][T18015] bridge_slave_1: entered promiscuous mode [ 442.304332][T18102] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2944'. [ 442.329706][ T9836] Bluetooth: hci5: command tx timeout [ 442.416910][T18015] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 442.432776][T18015] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 442.480668][T18015] team0: Port device team_slave_0 added [ 442.490690][T18015] team0: Port device team_slave_1 added [ 442.528792][T18015] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 442.528813][T18015] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 442.528843][T18015] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 442.530906][T18015] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 442.530922][T18015] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 442.530953][T18015] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 442.763818][T18120] bond3: (slave batadv0): Removing an active aggregator [ 442.768747][T18120] bond3: (slave batadv0): Releasing backup interface [ 442.943675][T18015] hsr_slave_0: entered promiscuous mode [ 442.948838][T18015] hsr_slave_1: entered promiscuous mode [ 443.107737][T18120] xfrm0: entered allmulticast mode [ 443.466246][T18133] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2951'. [ 443.861040][T18141] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 4352 - 0 [ 443.953016][T18015] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 443.953057][T18015] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.992018][T18149] netlink: 'syz.4.2956': attribute type 9 has an invalid length. [ 444.061132][T18145] netlink: 'syz.4.2956': attribute type 1 has an invalid length. [ 444.089361][T18141] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 4352 - 0 [ 444.169649][T18015] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 444.169689][T18015] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.218005][T18141] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 4352 - 0 [ 444.333332][T18015] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 444.333373][T18015] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.369240][T18141] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 4352 - 0 [ 444.403334][ T9836] Bluetooth: hci5: command 0x040f tx timeout [ 444.533788][T18015] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 444.533829][T18015] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.648808][T18164] tipc: Enabling of bearer rejected, failed to enable media [ 444.793250][ T6047] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 4352 - 0 [ 444.942549][ T6042] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 4352 - 0 [ 444.942861][ T6047] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 4352 - 0 [ 444.942918][ T6047] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 4352 - 0 [ 445.099370][T18185] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 445.116089][T18166] lo speed is unknown, defaulting to 1000 [ 445.118000][T18166] lo speed is unknown, defaulting to 1000 [ 445.119763][T18166] ±ÿ speed is unknown, defaulting to 1000 [ 445.189107][T18187] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2968'. [ 445.209686][T18187] netlink: 'syz.2.2968': attribute type 1 has an invalid length. [ 445.261258][T18191] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2968'. [ 445.312263][T18185] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2968'. [ 445.466060][T18015] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 445.483904][T18015] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 445.504204][T18015] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 445.517835][T18015] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 445.532368][T18015] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 445.560269][T18015] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 445.570925][T18015] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 445.611008][T18015] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 446.097369][T18015] 8021q: adding VLAN 0 to HW filter on device bond0 [ 446.145760][T18015] 8021q: adding VLAN 0 to HW filter on device team0 [ 446.166940][ T6042] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.167051][ T6042] bridge0: port 1(bridge_slave_0) entered forwarding state [ 446.218428][ T6047] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.218538][ T6047] bridge0: port 2(bridge_slave_1) entered forwarding state [ 446.482446][ T9836] Bluetooth: hci5: command 0x040f tx timeout [ 447.270542][T18256] netlink: 'syz.0.2981': attribute type 10 has an invalid length. [ 447.270789][T18256] netlink: 'syz.0.2981': attribute type 10 has an invalid length. [ 447.271010][T18256] netlink: 'syz.0.2981': attribute type 10 has an invalid length. [ 447.271241][T18256] netlink: 'syz.0.2981': attribute type 10 has an invalid length. [ 447.271457][T18256] netlink: 'syz.0.2981': attribute type 10 has an invalid length. [ 447.271679][T18256] netlink: 'syz.0.2981': attribute type 10 has an invalid length. [ 447.322936][T18256] netlink: 'syz.0.2981': attribute type 10 has an invalid length. [ 447.533746][T18259] 8021q: adding VLAN 0 to HW filter on device bond13 [ 447.555279][T18015] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 447.588942][T18259] bond13: (slave gretap2): making interface the new active one [ 447.599756][T18259] bond13: (slave gretap2): Enslaving as an active interface with an up link [ 447.807037][T18274] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2985'. [ 447.925520][T18015] veth0_vlan: entered promiscuous mode [ 447.966316][T18015] veth1_vlan: entered promiscuous mode [ 448.084774][T18015] veth0_macvtap: entered promiscuous mode [ 448.103749][T18015] veth1_macvtap: entered promiscuous mode [ 448.154722][T18015] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 448.194770][T18015] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 448.402056][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 448.427604][ T6041] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 448.427626][ T6041] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 448.492124][ T6047] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.492423][ T6047] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.492465][ T6047] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.492503][ T6047] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.567661][ T9836] Bluetooth: hci5: command 0x040f tx timeout [ 448.592748][ T300] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 448.592771][ T300] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 448.900225][T18298] veth3: entered allmulticast mode [ 449.145968][T18308] validate_nla: 29 callbacks suppressed [ 449.145990][T18308] netlink: 'syz.1.2994': attribute type 10 has an invalid length. [ 449.192334][T18308] bond14: (slave syz_tun): Removing an active aggregator [ 449.192974][T18308] bond14: (slave syz_tun): Releasing backup interface [ 449.258590][ T9837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 449.274973][ T9837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 449.278487][ T9837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 449.280176][ T9837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 449.281474][ T9837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 449.344015][T18308] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 449.575208][T18320] netlink: 199784 bytes leftover after parsing attributes in process `syz.4.2996'. [ 449.575233][T18320] netlink: 'syz.4.2996': attribute type 1 has an invalid length. [ 449.576724][T18320] netlink: 199784 bytes leftover after parsing attributes in process `syz.4.2996'. [ 449.576745][T18320] netlink: 'syz.4.2996': attribute type 1 has an invalid length. [ 449.579951][T18320] netlink: 199784 bytes leftover after parsing attributes in process `syz.4.2996'. [ 449.579972][T18320] netlink: 'syz.4.2996': attribute type 1 has an invalid length. [ 449.580472][T18320] netlink: 199784 bytes leftover after parsing attributes in process `syz.4.2996'. [ 449.580492][T18320] netlink: 'syz.4.2996': attribute type 1 has an invalid length. [ 449.780355][T18320] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 450.235050][T18310] lo speed is unknown, defaulting to 1000 [ 450.237125][T18310] lo speed is unknown, defaulting to 1000 [ 450.239029][T18310] ±ÿ speed is unknown, defaulting to 1000 [ 450.568312][T18327] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 450.568339][T18327] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 450.644648][T18310] bridge0: port 1(bridge_slave_0) entered blocking state [ 450.644821][T18310] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.645191][T18310] bridge_slave_0: entered allmulticast mode [ 450.646867][T18310] bridge_slave_0: entered promiscuous mode [ 450.653640][T18310] bridge0: port 2(bridge_slave_1) entered blocking state [ 450.654091][T18310] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.654465][T18310] bridge_slave_1: entered allmulticast mode [ 450.657801][T18310] bridge_slave_1: entered promiscuous mode [ 450.782350][T18359] netlink: 'syz.3.3005': attribute type 4 has an invalid length. [ 450.782548][T18360] netlink: 'syz.3.3005': attribute type 4 has an invalid length. [ 450.837673][T18327] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 450.837698][T18327] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 450.840528][T18310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 450.927995][T18310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 451.223495][T18310] team0: Port device team_slave_0 added [ 451.269297][T18310] team0: Port device team_slave_1 added [ 451.364834][T18310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 451.364855][T18310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 451.364884][T18310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 451.366881][T18310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 451.366896][T18310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 451.366925][T18310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 451.603922][T18310] hsr_slave_0: entered promiscuous mode [ 451.606244][T18310] hsr_slave_1: entered promiscuous mode [ 451.609321][T18310] debugfs: 'hsr0' already exists in 'hsr' [ 451.609343][T18310] Cannot create hsr debugfs directory [ 451.778445][T18408] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3013'. [ 451.981944][T18416] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3016'. [ 452.084283][T18419] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3016'. [ 452.220056][T18421] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3017'. [ 452.220099][T18421] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3017'. [ 452.260742][T18310] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 452.260781][T18310] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.578736][T18310] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 452.578771][T18310] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.016570][T18310] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 453.016607][T18310] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.244133][T18310] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 453.244173][T18310] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.249533][T18452] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3023'. [ 453.544739][T18462] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3025'. [ 453.825117][T18474] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3029'. [ 453.831683][T18466] syzkaller0: entered promiscuous mode [ 453.831704][T18466] syzkaller0: entered allmulticast mode [ 453.841495][T18466] netlink: 168 bytes leftover after parsing attributes in process `syz.4.3028'. [ 453.888374][T18310] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 453.904753][T18310] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 453.905701][T18310] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 453.929443][T18310] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 453.940392][T18310] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 453.969318][T18310] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 453.970470][T18310] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 453.975627][ T8392] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 454.004699][T18310] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 454.102138][ T8390] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 454.196695][T18310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 454.258461][T18496] xt_l2tp: missing protocol rule (udp|l2tpip) [ 454.258855][T18497] xt_l2tp: missing protocol rule (udp|l2tpip) [ 454.261175][T18489] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3031'. [ 454.288014][T18310] 8021q: adding VLAN 0 to HW filter on device team0 [ 454.337260][ T6045] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.337404][ T6045] bridge0: port 1(bridge_slave_0) entered forwarding state [ 454.372344][ T300] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.372458][ T300] bridge0: port 2(bridge_slave_1) entered forwarding state [ 454.642550][ T6049] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 454.695245][T18509] netlink: 'syz.1.3034': attribute type 1 has an invalid length. [ 454.773841][T18509] 8021q: adding VLAN 0 to HW filter on device bond15 [ 454.809405][T18515] bond6: (slave veth0_to_bond): Releasing active interface [ 454.873479][T18515] bond15: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 454.920237][T18509] bridge8: entered promiscuous mode [ 454.930533][T18509] bond15: (slave bridge8): Enslaving as an active interface with an up link [ 455.315953][T18523] bridge_slave_0: left allmulticast mode [ 455.315979][T18523] bridge_slave_0: left promiscuous mode [ 455.316303][T18523] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.381674][T18523] bridge_slave_1: left allmulticast mode [ 455.381700][T18523] bridge_slave_1: left promiscuous mode [ 455.389783][T18523] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.456612][T18523] bond0: (slave bond_slave_0): Releasing backup interface [ 455.514366][T18523] bond0: (slave bond_slave_1): Releasing backup interface [ 455.618298][T18523] team0: Port device team_slave_0 removed [ 455.669463][T18540] block nbd1: Unsupported socket: should be TCP or UNIX. [ 455.766185][T18523] team0: Port device team_slave_1 removed [ 455.790523][T18523] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 455.790548][T18523] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 455.827896][T18523] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 455.827922][T18523] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 455.861689][T18523] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 456.106992][ T269] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 456.107328][ T269] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 456.499543][T18564] veth1_to_team: entered promiscuous mode [ 456.514223][T18564] gretap0: entered promiscuous mode [ 456.516995][T18564] debugfs: 'hsr1' already exists in 'hsr' [ 456.517017][T18564] Cannot create hsr debugfs directory [ 456.517034][T18564] hsr1: entered promiscuous mode [ 456.882384][ T8390] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 456.952651][T18579] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 457.058446][T18310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 457.298641][T18310] veth0_vlan: entered promiscuous mode [ 457.340172][T18310] veth1_vlan: entered promiscuous mode [ 457.414022][T18602] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 457.494195][ T6045] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.543566][ T6044] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.543753][ T6044] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.547044][T18310] veth0_macvtap: entered promiscuous mode [ 457.588102][T18310] veth1_macvtap: entered promiscuous mode [ 457.614186][T18310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 457.680613][T18310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 457.944400][T18608] bond1: option miimon: invalid value (18446744073357230079) [ 457.944438][T18608] bond1: option miimon: allowed values 0 - 2147483647 [ 457.948262][T18608] bond1 (unregistering): Released all slaves [ 458.102688][T18619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 458.124788][T18618] netlink: 'syz.2.3056': attribute type 39 has an invalid length. [ 458.196275][T18619] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 458.197025][T18623] netlink: 'syz.3.3055': attribute type 3 has an invalid length. [ 458.197265][T18623] netlink: 'syz.3.3055': attribute type 3 has an invalid length. [ 458.206980][T18624] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode [ 458.207053][T18624] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode [ 458.428730][ T6044] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.428801][ T6044] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.428844][ T6044] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.428895][ T6044] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.428937][ T6044] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.607933][ T6049] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 458.607957][ T6049] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 458.749989][T18642] netlink: 'syz.4.3060': attribute type 1 has an invalid length. [ 458.808021][T18644] block nbd1: server does not support multiple connections per device. [ 458.808367][T18644] block nbd1: shutting down sockets [ 458.953020][T18642] bond12: entered promiscuous mode [ 458.953746][T18642] bond12: entered allmulticast mode [ 458.973792][T18642] 8021q: adding VLAN 0 to HW filter on device bond12 [ 459.014027][ T269] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 459.014062][ T269] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 459.174404][T18650] __nla_validate_parse: 5 callbacks suppressed [ 459.174427][T18650] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3061'. [ 459.197780][T18650] netlink: 'syz.2.3061': attribute type 8 has an invalid length. [ 459.548826][T18666] xt_policy: output policy not valid in PREROUTING and INPUT [ 459.715718][T18670] xt_policy: output policy not valid in PREROUTING and INPUT [ 459.831371][ T9837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 459.847065][ T9837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 459.850654][ T9837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 459.867989][ T9837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 459.868706][ T9837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 460.002737][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 460.359241][T18691] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3071'. [ 460.463675][T18700] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 460.510417][T18689] ip_tables: iptables: counters copy to user failed while replacing table [ 460.836577][T18678] lo speed is unknown, defaulting to 1000 [ 460.838348][T18678] lo speed is unknown, defaulting to 1000 [ 460.840203][T18678] ±ÿ speed is unknown, defaulting to 1000 [ 461.061567][T18731] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3081'. [ 461.065273][T18732] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3081'. [ 461.155836][T18723] netlink: 'syz.3.3080': attribute type 4 has an invalid length. [ 461.155859][T18723] netlink: 17 bytes leftover after parsing attributes in process `syz.3.3080'. [ 461.282343][T18739] netlink: 'syz.1.3082': attribute type 1 has an invalid length. [ 461.339316][T18739] bond16: entered promiscuous mode [ 461.339851][T18739] 8021q: adding VLAN 0 to HW filter on device bond16 [ 461.707117][T18739] bond16: (slave bridge9): making interface the new active one [ 461.707145][T18739] bridge9: entered promiscuous mode [ 461.734760][T18739] bond16: (slave bridge9): Enslaving as an active interface with an up link [ 461.914769][T18678] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.914936][T18678] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.915095][T18678] bridge_slave_0: entered allmulticast mode [ 461.920699][T18678] bridge_slave_0: entered promiscuous mode [ 461.928899][ T9837] Bluetooth: hci0: command tx timeout [ 461.960974][T18678] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.966086][T18678] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.966277][T18678] bridge_slave_1: entered allmulticast mode [ 461.996273][T18678] bridge_slave_1: entered promiscuous mode [ 462.064414][T18678] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 462.070227][T18678] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 462.133051][T18678] team0: Port device team_slave_0 added [ 462.136211][T18678] team0: Port device team_slave_1 added [ 462.182321][T18678] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 462.182340][T18678] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 462.182368][T18678] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 462.184342][T18678] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 462.184358][T18678] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 462.184388][T18678] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 462.360665][T18678] hsr_slave_0: entered promiscuous mode [ 462.368860][T18678] hsr_slave_1: entered promiscuous mode [ 462.374711][T18678] debugfs: 'hsr0' already exists in 'hsr' [ 462.374769][T18678] Cannot create hsr debugfs directory [ 462.397616][T18789] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 464.001956][ T9837] Bluetooth: hci0: command tx timeout [ 464.266566][T18743] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 464.290542][T18678] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 464.304855][T18738] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 464.321243][T18678] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 464.338127][T18678] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 464.376856][T18678] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 464.377687][T18678] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 464.402220][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 464.432593][T18678] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 464.434035][T18678] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 464.495310][T18678] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 464.855025][T18678] 8021q: adding VLAN 0 to HW filter on device bond0 [ 464.911568][T18678] 8021q: adding VLAN 0 to HW filter on device team0 [ 464.948115][ T269] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.948244][ T269] bridge0: port 1(bridge_slave_0) entered forwarding state [ 464.978714][ T6045] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.978826][ T6045] bridge0: port 2(bridge_slave_1) entered forwarding state [ 465.306188][T18839] netlink: 136 bytes leftover after parsing attributes in process `syz.0.3101'. [ 465.306217][T18839] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 465.684829][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 465.729817][T18830] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 465.939965][T18864] netlink: 160 bytes leftover after parsing attributes in process `syz.0.3107'. [ 466.235047][T18678] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 466.291586][T18884] netlink: 'syz.3.3111': attribute type 83 has an invalid length. [ 466.588648][T18892] batman_adv: batadv0: Adding interface: gretap1 [ 466.588666][T18892] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 466.588871][T18892] batman_adv: batadv0: Interface activated: gretap1 [ 466.977495][T18908] netlink: 'syz.0.3116': attribute type 8 has an invalid length. [ 467.058887][T18911] netlink: 'syz.1.3117': attribute type 1 has an invalid length. [ 467.303999][T18925] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3119'. [ 467.517244][T18678] veth0_vlan: entered promiscuous mode [ 467.566809][T18935] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3122'. [ 467.568088][T18936] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3122'. [ 467.593988][T18931] erspan1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 467.601945][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 467.737395][T18678] veth1_vlan: entered promiscuous mode [ 467.904437][T18678] veth0_macvtap: entered promiscuous mode [ 467.945393][T18678] veth1_macvtap: entered promiscuous mode [ 468.036264][T18963] xt_cgroup: invalid path, errno=-2 [ 468.067939][T18678] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 468.105323][T18965] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3128'. [ 468.146440][T18678] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 468.247353][T18961] lo speed is unknown, defaulting to 1000 [ 468.264948][T18961] lo speed is unknown, defaulting to 1000 [ 468.291061][T18961] ±ÿ speed is unknown, defaulting to 1000 [ 468.298670][ T6044] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.298735][ T6044] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.298777][ T6044] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.298817][ T6044] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.640191][ T6044] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 468.640215][ T6044] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 468.799489][T18981] lo speed is unknown, defaulting to 1000 [ 468.801371][ T6045] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 468.801392][ T6045] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 468.836591][T18981] lo speed is unknown, defaulting to 1000 [ 468.847035][ T6042] nci: nci_rx_work: unknown MT 0x6 [ 468.863464][T18987] netlink: 'syz.0.3133': attribute type 4 has an invalid length. [ 468.863487][T18987] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3133'. [ 468.911480][T18987] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 468.911601][T18981] ±ÿ speed is unknown, defaulting to 1000 [ 469.824066][T18997] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 470.095047][ T9836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 470.098313][ T9836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 470.099138][ T9836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 470.100906][ T9836] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 470.101600][ T9836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 470.419486][ T5630] bond0: (slave syz_tun): Releasing backup interface [ 470.739938][ T6049] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 470.739980][ T6049] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.740010][ T6049] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 47882 - 0 [ 470.936758][ T6049] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 470.936800][ T6049] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.936830][ T6049] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 47882 - 0 [ 471.029559][T19004] lo speed is unknown, defaulting to 1000 [ 471.031297][T19004] lo speed is unknown, defaulting to 1000 [ 471.046479][T19004] ±ÿ speed is unknown, defaulting to 1000 [ 471.125210][ T6049] bond0: (slave netdevsim1): Releasing backup interface [ 471.128108][ T6049] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 471.128134][ T6049] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.128157][ T6049] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 47882 - 0 [ 471.266983][ T6049] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 471.267023][ T6049] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.267052][ T6049] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 47882 - 0 [ 471.611509][ T6049] mac80211_hwsim hwsim6 wlan1: left promiscuous mode [ 471.616599][ T6049] bridge0: port 3(wlan1) entered disabled state [ 471.629232][ T6049] bridge_slave_1: left allmulticast mode [ 471.629278][ T6049] bridge_slave_1: left promiscuous mode [ 471.631605][ T6049] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.654977][ T6049] bridge_slave_0: left allmulticast mode [ 471.655027][ T6049] bridge_slave_0: left promiscuous mode [ 471.655232][ T6049] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.719189][ T6049] batman_adv: batadv0: Interface deactivated: gretap1 [ 471.731632][T18982] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 472.162465][ T9837] Bluetooth: hci2: command tx timeout [ 472.238215][T19067] netlink: 'syz.3.3145': attribute type 2 has an invalid length. [ 472.799187][ T6049] erspan0 (unregistering): left promiscuous mode [ 472.837724][ T6049] batman_adv: batadv0: Removing interface: gretap1 [ 472.975578][ T6049] bridge0 (unregistering): left promiscuous mode [ 473.009842][ T6049] bond2 (unregistering): (slave bridge2): Releasing backup interface [ 473.085414][ T6049] bond15 (unregistering): (slave bridge8): Releasing backup interface [ 473.103079][ T6049] bond16 (unregistering): (slave bridge9): Releasing backup interface [ 473.103108][ T6049] bridge9 (unregistering): left promiscuous mode [ 473.139742][ T6049] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 473.154613][ T6049] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 473.157347][ T6049] bond0 (unregistering): Released all slaves [ 473.177551][ T6049] bond1 (unregistering): Released all slaves [ 473.201612][ T6049] bond2 (unregistering): Released all slaves [ 473.237229][ T6049] bond3 (unregistering): Released all slaves [ 473.263625][ T6049] bond4 (unregistering): (slave wireguard0): Releasing backup interface [ 473.263655][ T6049] wireguard0: left promiscuous mode [ 473.266120][ T6049] bond4 (unregistering): Released all slaves [ 473.306145][ T6049] bond5 (unregistering): Released all slaves [ 473.326732][ T6049] bond6 (unregistering): Released all slaves [ 473.350509][ T6049] bond7 (unregistering): Released all slaves [ 473.380407][ T6049] bond8 (unregistering): Released all slaves [ 473.409114][ T6049] bond9 (unregistering): (slave veth8): Releasing active interface [ 473.411678][ T6049] bond9 (unregistering): Released all slaves [ 473.444403][ T6049] bond10 (unregistering): Released all slaves [ 473.466302][ T6049] bond11 (unregistering): Released all slaves [ 473.500009][ T6049] bond12 (unregistering): Released all slaves [ 473.525474][ T6049] bond13 (unregistering): Released all slaves [ 473.551792][ T6049] bond14 (unregistering): Released all slaves [ 473.589677][ T6049] bond15 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 473.601323][ T6049] bond15 (unregistering): Released all slaves [ 473.639198][ T6049] bond16 (unregistering): Released all slaves [ 473.654083][T19094] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3152'. [ 473.654106][T19094] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3152'. [ 473.654339][T19095] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3152'. [ 473.654356][T19095] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3152'. [ 473.724562][ T6049] bond17 (unregistering): Released all slaves [ 473.856603][T19067] : entered promiscuous mode [ 474.242917][ T9837] Bluetooth: hci2: command tx timeout [ 474.346352][ T6049] : left promiscuous mode [ 474.844543][T19127] bond1: Unable to set peer notification delay as MII monitoring is disabled [ 474.849465][T19127] bond1 (unregistering): Released all slaves [ 474.956073][T19004] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.956314][T19004] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.956466][T19004] bridge_slave_0: entered allmulticast mode [ 474.958766][T19004] bridge_slave_0: entered promiscuous mode [ 474.992089][ T6049] ovs-s!: left promiscuous mode [ 475.048839][T19004] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.048949][T19004] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.049135][T19004] bridge_slave_1: entered allmulticast mode [ 475.076873][T19004] bridge_slave_1: entered promiscuous mode [ 475.165247][ T6049] tipc: Disabling bearer [ 475.165547][ T6049] tipc: Disabling bearer [ 475.187346][ T6049] tipc: Left network mode [ 475.338977][T19004] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 475.361039][T19153] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 475.384202][T19004] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 475.459780][T19004] team0: Port device team_slave_0 added [ 475.482791][T19004] team0: Port device team_slave_1 added [ 475.649209][ T5280] 8021q: adding VLAN 0 to HW filter on device eth1 [ 475.651060][T19004] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 475.651076][T19004] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 475.651105][T19004] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 475.677859][T19004] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 475.677909][T19004] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 475.677985][T19004] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 475.921986][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 476.071134][T19004] hsr_slave_0: entered promiscuous mode [ 476.090288][T19004] hsr_slave_1: entered promiscuous mode [ 476.091930][T19004] debugfs: 'hsr0' already exists in 'hsr' [ 476.091951][T19004] Cannot create hsr debugfs directory [ 476.325513][ T9837] Bluetooth: hci2: command tx timeout [ 477.379624][ T5280] 8021q: adding VLAN 0 to HW filter on device eth2 [ 477.572755][T19214] Bluetooth: MGMT ver 1.23 [ 477.578746][T19214] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3176'. [ 477.623530][T19202] lo speed is unknown, defaulting to 1000 [ 477.656610][T19220] netlink: 'syz.0.3177': attribute type 11 has an invalid length. [ 477.677634][T19202] lo speed is unknown, defaulting to 1000 [ 477.701532][T19214] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3176'. [ 477.718190][T19202] ±ÿ speed is unknown, defaulting to 1000 [ 477.761484][T19214] hsr_slave_0: left promiscuous mode [ 477.771586][T19214] hsr_slave_1: left promiscuous mode [ 478.401944][ T9837] Bluetooth: hci2: command tx timeout [ 478.567657][T19249] No such timeout policy "syz1" [ 479.867438][T19285] syzkaller1: entered promiscuous mode [ 479.867460][T19285] syzkaller1: entered allmulticast mode [ 480.279076][ T6049] hsr_slave_0: left promiscuous mode [ 480.279984][ T6049] hsr_slave_1: left promiscuous mode [ 480.280940][ T6049] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 480.280962][ T6049] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 480.284648][ T6049] batman_adv: batadv0: Removing interface: virt_wifi0 [ 481.107741][ T269] smbdirect: ib_dev[syz_device_name_32_chars_1234567] removed [ 481.120275][T19004] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 481.177801][T19004] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 481.202662][T19004] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 481.290382][T19004] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 481.309084][T19004] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 481.361273][T19004] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 481.392904][T19004] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 481.480135][T19004] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 481.517105][T19333] lo speed is unknown, defaulting to 1000 [ 481.518966][T19333] lo speed is unknown, defaulting to 1000 [ 482.239157][ T6049] IPVS: stop unused estimator thread 0... [ 482.266543][T19004] 8021q: adding VLAN 0 to HW filter on device bond0 [ 482.277305][T19371] netlink: 232 bytes leftover after parsing attributes in process `syz.2.3199'. [ 482.303971][T19371] netlink: 232 bytes leftover after parsing attributes in process `syz.2.3199'. [ 482.304117][T19371] netlink: 232 bytes leftover after parsing attributes in process `syz.2.3199'. [ 482.304260][T19371] netlink: 232 bytes leftover after parsing attributes in process `syz.2.3199'. [ 482.304396][T19371] netlink: 232 bytes leftover after parsing attributes in process `syz.2.3199'. [ 482.304539][T19371] netlink: 232 bytes leftover after parsing attributes in process `syz.2.3199'. [ 482.304675][T19371] netlink: 232 bytes leftover after parsing attributes in process `syz.2.3199'. [ 482.304792][T19371] netlink: 232 bytes leftover after parsing attributes in process `syz.2.3199'. [ 482.304910][T19371] netlink: 232 bytes leftover after parsing attributes in process `syz.2.3199'. [ 482.305031][T19371] netlink: 232 bytes leftover after parsing attributes in process `syz.2.3199'. [ 482.464931][T19004] 8021q: adding VLAN 0 to HW filter on device team0 [ 482.509972][ T6045] bridge0: port 1(bridge_slave_0) entered blocking state [ 482.511304][ T6045] bridge0: port 1(bridge_slave_0) entered forwarding state [ 482.559791][ T6049] bridge0: port 2(bridge_slave_1) entered blocking state [ 482.559924][ T6049] bridge0: port 2(bridge_slave_1) entered forwarding state [ 482.809468][T19386] tipc: Started in network mode [ 482.809504][T19386] tipc: Node identity eac4dac8de91, cluster identity 4711 [ 482.809665][T19386] tipc: Enabled bearer , priority 1 [ 482.993227][T19385] tipc: Resetting bearer [ 483.117655][T19385] tipc: Disabling bearer [ 483.229579][T19399] netlink: 'syz.4.3204': attribute type 2 has an invalid length. [ 483.395280][ T8392] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 483.396029][T19399] macsec1: entered allmulticast mode [ 483.396056][T19399] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 483.439428][T19399] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 483.453754][T19399] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 483.491577][ T8392] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 484.032232][T19439] netlink: 'syz.3.3211': attribute type 1 has an invalid length. [ 484.384619][T19455] netlink: 'syz.4.3216': attribute type 3 has an invalid length. [ 484.475468][T19004] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 484.633750][T19004] veth0_vlan: entered promiscuous mode [ 484.670122][T19004] veth1_vlan: entered promiscuous mode [ 484.838181][T19004] veth0_macvtap: entered promiscuous mode [ 484.862775][T19004] veth1_macvtap: entered promiscuous mode [ 484.943863][T19004] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 484.978920][T19004] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 485.093049][ T3335] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.093097][ T3335] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.093134][ T3335] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.093170][ T3335] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.249162][T19488] IPVS: set_ctl: invalid protocol: 41 0.0.0.0:20000 [ 485.293519][ T3335] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 485.293541][ T3335] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 485.487728][ T6041] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 485.487751][ T6041] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 485.576606][T19510] netlink: 'syz.0.3227': attribute type 7 has an invalid length. [ 485.620404][T19510] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 486.403976][T19545] netlink: 'syz.1.3235': attribute type 1 has an invalid length. [ 486.825549][ T9836] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 486.833958][ T9836] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 486.849407][ T9836] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 486.857936][ T9836] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 486.858597][ T9836] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 487.356785][ T5623] bond0: (slave syz_tun): Releasing backup interface [ 487.652396][T19593] bond0 (unregistering): Released all slaves [ 487.697569][T19596] __nla_validate_parse: 33 callbacks suppressed [ 487.697590][T19596] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3245'. [ 487.719403][T19597] Bluetooth: MGMT ver 1.23 [ 487.719434][T19597] Bluetooth: hci0: unsupported parameter 5135 [ 487.719447][T19597] Bluetooth: hci0: unsupported parameter 8192 [ 487.719458][T19597] Bluetooth: hci0: unsupported parameter 5135 [ 487.719470][T19597] Bluetooth: hci0: unsupported parameter 8192 [ 487.771325][T19553] lo speed is unknown, defaulting to 1000 [ 487.782884][T19553] lo speed is unknown, defaulting to 1000 [ 488.047118][T19606] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3248'. [ 488.071967][T19620] netlink: 300 bytes leftover after parsing attributes in process `syz.3.3250'. [ 488.578529][T19553] bridge0: port 1(bridge_slave_0) entered blocking state [ 488.578719][T19553] bridge0: port 1(bridge_slave_0) entered disabled state [ 488.578862][T19553] bridge_slave_0: entered allmulticast mode [ 488.605929][T19553] bridge_slave_0: entered promiscuous mode [ 488.624738][T19553] bridge0: port 2(bridge_slave_1) entered blocking state [ 488.625189][T19553] bridge0: port 2(bridge_slave_1) entered disabled state [ 488.625330][T19553] bridge_slave_1: entered allmulticast mode [ 488.627376][T19647] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3258'. [ 488.627989][T19634] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3255'. [ 488.630150][T19553] bridge_slave_1: entered promiscuous mode [ 488.790994][T19553] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 488.820399][T19553] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 488.886431][T19553] team0: Port device team_slave_0 added [ 488.913583][T19553] team0: Port device team_slave_1 added [ 488.963532][ T9837] Bluetooth: hci3: command tx timeout [ 488.998316][T19663] IPVS: sync thread started: state = BACKUP, mcast_ifn = macsec0, syncid = 3, id = 0 [ 489.000508][T19553] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 489.000525][T19553] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 489.000891][T19553] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 489.021129][T19553] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 489.021146][T19553] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 489.021203][T19553] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 489.171266][T19553] hsr_slave_0: entered promiscuous mode [ 489.172500][T19553] hsr_slave_1: entered promiscuous mode [ 489.186218][T19553] debugfs: 'hsr0' already exists in 'hsr' [ 489.186937][T19553] Cannot create hsr debugfs directory [ 489.506841][T19553] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 4352 - 0 [ 489.557910][T19682] netlink: 'syz.1.3267': attribute type 16 has an invalid length. [ 489.557931][T19682] netlink: 'syz.1.3267': attribute type 17 has an invalid length. [ 489.643974][T19682] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 489.708178][T19687] netlink: 'syz.4.3268': attribute type 4 has an invalid length. [ 489.826231][T19553] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 4352 - 0 [ 490.027672][T19553] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 4352 - 0 [ 490.056224][T19701] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3272'. [ 490.056254][T19701] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3272'. [ 490.110673][T19553] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 4352 - 0 [ 490.144968][T19701] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3272'. [ 490.187738][T19701] ip6gre1: entered promiscuous mode [ 490.187761][T19701] ip6gre1: entered allmulticast mode [ 490.266297][T19701] netlink: 'syz.0.3272': attribute type 6 has an invalid length. [ 490.266320][T19701] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3272'. [ 490.375241][T19553] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 490.382988][T19553] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 490.383981][T19553] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 490.419290][T19553] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 490.421298][T19553] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 490.439940][T19553] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 490.456444][T19553] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 490.460424][T19553] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 490.663584][T19721] x_tables: duplicate underflow at hook 1 [ 490.663619][T19553] 8021q: adding VLAN 0 to HW filter on device bond0 [ 490.716494][T19553] 8021q: adding VLAN 0 to HW filter on device team0 [ 490.757621][ T6043] bridge0: port 1(bridge_slave_0) entered blocking state [ 490.757700][ T6043] bridge0: port 1(bridge_slave_0) entered forwarding state [ 490.780884][ T82] bridge0: port 2(bridge_slave_1) entered blocking state [ 490.780958][ T82] bridge0: port 2(bridge_slave_1) entered forwarding state [ 490.828676][T19726] netlink: 'syz.4.3278': attribute type 1 has an invalid length. [ 490.891344][T19726] 8021q: adding VLAN 0 to HW filter on device bond1 [ 490.906527][T19730] netlink: 'syz.3.3280': attribute type 5 has an invalid length. [ 490.923251][T19726] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3278'. [ 490.949403][T19726] syzkaller1: entered promiscuous mode [ 490.949426][T19726] syzkaller1: entered allmulticast mode [ 491.044310][ T9837] Bluetooth: hci3: command tx timeout [ 491.369582][T19752] 8021q: VLANs not supported on ip6_vti0 [ 491.585897][T19760] openvswitch: netlink: Duplicate or invalid key (type 0). [ 491.619219][T19760] macsec1: entered promiscuous mode [ 491.619245][T19760] hsr0: entered promiscuous mode [ 491.928940][T19767] geneve0: entered promiscuous mode [ 492.267313][T19553] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 492.392568][T19553] veth0_vlan: entered promiscuous mode [ 492.423821][T19553] veth1_vlan: entered promiscuous mode [ 492.535678][T19553] veth0_macvtap: entered promiscuous mode [ 492.553299][T19553] veth1_macvtap: entered promiscuous mode [ 492.583630][T19553] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 492.605611][T19553] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 492.643708][ T6049] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.665499][ T82] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.665903][ T82] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.702445][ T82] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.025082][ T6042] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 493.025105][ T6042] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 493.122667][ T9837] Bluetooth: hci3: command tx timeout [ 493.215622][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 493.215649][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 493.365254][T19799] __nla_validate_parse: 3 callbacks suppressed [ 493.365276][T19799] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3236'. [ 493.458213][T19799] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3236'. [ 493.460665][T19799] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3236'. [ 494.332889][T19837] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3305'. [ 494.541120][ T9837] block nbd1: Receive control failed (result -1) [ 494.541236][ T9837] [ 494.550044][ T9837] ====================================================== [ 494.557161][ T9837] WARNING: possible circular locking dependency detected [ 494.564271][ T9837] syzkaller #0 Not tainted [ 494.568708][ T9837] ------------------------------------------------------ [ 494.575768][ T9837] kworker/u9:4/9837 is trying to acquire lock: [ 494.582044][ T9837] ffff888034756e60 (sk_lock-AF_INET6-NBD){+.+.}-{0:0}, at: inet_shutdown+0x6a/0x390 [ 494.591611][ T9837] [ 494.591611][ T9837] but task is already holding lock: [ 494.599004][ T9837] ffff888067d18a68 (&nsock->tx_lock){+.+.}-{4:4}, at: recv_work+0x1cd9/0x1e10 [ 494.608041][ T9837] [ 494.608041][ T9837] which lock already depends on the new lock. [ 494.608041][ T9837] [ 494.618479][ T9837] [ 494.618479][ T9837] the existing dependency chain (in reverse order) is: [ 494.627699][ T9837] [ 494.627699][ T9837] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 494.635482][ T9837] __mutex_lock+0x19d/0x1550 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 494.640646][ T9837] nbd_queue_rq+0x373/0xff0 [ 494.645705][ T9837] blk_mq_dispatch_rq_list+0x499/0x1990 [ 494.651895][ T9837] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 494.658844][ T9837] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 494.665467][ T9837] blk_mq_run_work_fn+0x16c/0x300 [ 494.671041][ T9837] process_scheduled_works+0xc3d/0x1630 [ 494.677153][ T9837] worker_thread+0xa47/0xfb0 [ 494.682313][ T9837] kthread+0x38b/0x480 [ 494.686945][ T9837] ret_from_fork+0x514/0xb70 [ 494.692110][ T9837] ret_from_fork_asm+0x1a/0x30 [ 494.697441][ T9837] [ 494.697441][ T9837] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 494.704672][ T9837] __mutex_lock+0x19d/0x1550 [ 494.709802][ T9837] nbd_queue_rq+0xc1/0xff0 [ 494.714754][ T9837] blk_mq_dispatch_rq_list+0x499/0x1990 [ 494.721034][ T9837] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 494.727905][ T9837] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 494.734426][ T9837] blk_mq_run_work_fn+0x16c/0x300 [ 494.739996][ T9837] process_scheduled_works+0xc3d/0x1630 [ 494.746092][ T9837] worker_thread+0xa47/0xfb0 [ 494.751233][ T9837] kthread+0x38b/0x480 [ 494.755864][ T9837] ret_from_fork+0x514/0xb70 [ 494.761254][ T9837] ret_from_fork_asm+0x1a/0x30 [ 494.766572][ T9837] [ 494.766572][ T9837] -> #4 (set->srcu){.+.+}-{0:0}: [ 494.773714][ T9837] __synchronize_srcu+0xc9/0x2f0 [ 494.779193][ T9837] elevator_switch+0x1e8/0x7b0 [ 494.784578][ T9837] elevator_change+0x2fa/0x480 [ 494.789907][ T9837] elevator_set_default+0x375/0x440 [ 494.795640][ T9837] blk_register_queue+0x3f3/0x4e0 [ 494.801295][ T9837] __add_disk+0x6b8/0xdb0 [ 494.806264][ T9837] add_disk_fwnode+0x100/0x3a0 [ 494.811670][ T9837] nbd_dev_add+0x733/0xb60 [ 494.816652][ T9837] nbd_init+0x168/0x1f0 [ 494.821680][ T9837] do_one_initcall+0x250/0x870 [ 494.827002][ T9837] do_initcall_level+0x10a/0x1a0 [ 494.832514][ T9837] do_initcalls+0x59/0xa0 [ 494.837385][ T9837] kernel_init_freeable+0x29d/0x3e0 [ 494.843135][ T9837] kernel_init+0x22/0x1d0 [ 494.848010][ T9837] ret_from_fork+0x514/0xb70 [ 494.853144][ T9837] ret_from_fork_asm+0x1a/0x30 [ 494.858457][ T9837] [ 494.858457][ T9837] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 494.866298][ T9837] __mutex_lock+0x19d/0x1550 [ 494.871433][ T9837] elevator_change+0x1af/0x480 [ 494.876741][ T9837] elevator_set_none+0xb5/0x140 [ 494.882133][ T9837] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 494.888485][ T9837] nbd_start_device+0x189/0xb30 [ 494.893869][ T9837] nbd_genl_connect+0x167d/0x1cd0 [ 494.899509][ T9837] genl_family_rcv_msg_doit+0x233/0x340 [ 494.905631][ T9837] genl_rcv_msg+0x614/0x7a0 [ 494.910850][ T9837] netlink_rcv_skb+0x226/0x4a0 [ 494.916251][ T9837] genl_rcv+0x28/0x40 [ 494.921142][ T9837] netlink_unicast+0x7bd/0x940 [ 494.926453][ T9837] netlink_sendmsg+0x813/0xb40 [ 494.931763][ T9837] sock_sendmsg_nosec+0x13a/0x180 [ 494.937331][ T9837] ____sys_sendmsg+0x54e/0x850 [ 494.942635][ T9837] ___sys_sendmsg+0x2a5/0x360 [ 494.947855][ T9837] __x64_sys_sendmsg+0x1b1/0x290 [ 494.953335][ T9837] do_syscall_64+0x166/0x520 [ 494.958468][ T9837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.964900][ T9837] [ 494.964900][ T9837] -> #2 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 494.973551][ T9837] blk_alloc_queue+0x544/0x690 [ 494.978857][ T9837] __blk_mq_alloc_disk+0x194/0x390 [ 494.984505][ T9837] nbd_dev_add+0x494/0xb60 [ 494.989457][ T9837] nbd_init+0x168/0x1f0 [ 494.994178][ T9837] do_one_initcall+0x250/0x870 [ 494.999510][ T9837] do_initcall_level+0x10a/0x1a0 [ 495.004989][ T9837] do_initcalls+0x59/0xa0 [ 495.009857][ T9837] kernel_init_freeable+0x29d/0x3e0 [ 495.015604][ T9837] kernel_init+0x22/0x1d0 [ 495.020475][ T9837] ret_from_fork+0x514/0xb70 [ 495.025860][ T9837] ret_from_fork_asm+0x1a/0x30 [ 495.031170][ T9837] [ 495.031170][ T9837] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 495.038411][ T9837] fs_reclaim_acquire+0x71/0x100 [ 495.043892][ T9837] __kmalloc_noprof+0xbc/0x720 [ 495.049190][ T9837] tls_sw_sendmsg+0x59b/0x2b50 [ 495.054569][ T9837] sock_sendmsg_nosec+0x90/0x180 [ 495.060051][ T9837] sock_sendmsg+0x1ca/0x2d0 [ 495.065133][ T9837] splice_to_socket+0xb5e/0x12a0 [ 495.070614][ T9837] direct_splice_actor+0x101/0x160 [ 495.076270][ T9837] splice_direct_to_actor+0x57b/0xcb0 [ 495.082189][ T9837] do_splice_direct+0x195/0x290 [ 495.087581][ T9837] do_sendfile+0x52e/0x7c0 [ 495.092540][ T9837] __se_sys_sendfile64+0x144/0x1a0 [ 495.098183][ T9837] do_syscall_64+0x166/0x520 [ 495.103339][ T9837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.109769][ T9837] [ 495.109769][ T9837] -> #0 (sk_lock-AF_INET6-NBD){+.+.}-{0:0}: [ 495.117877][ T9837] __lock_acquire+0x164c/0x2de0 [ 495.123265][ T9837] lock_acquire+0x115/0x350 [ 495.128304][ T9837] lock_sock_nested+0x41/0x100 [ 495.133609][ T9837] inet_shutdown+0x6a/0x390 [ 495.138658][ T9837] nbd_mark_nsock_dead+0x2cb/0x550 [ 495.144338][ T9837] recv_work+0x1cee/0x1e10 [ 495.149315][ T9837] process_scheduled_works+0xc3d/0x1630 [ 495.155421][ T9837] worker_thread+0xa47/0xfb0 [ 495.160556][ T9837] kthread+0x38b/0x480 [ 495.165182][ T9837] ret_from_fork+0x514/0xb70 [ 495.170307][ T9837] ret_from_fork_asm+0x1a/0x30 [ 495.175723][ T9837] [ 495.175723][ T9837] other info that might help us debug this: [ 495.175723][ T9837] [ 495.185964][ T9837] Chain exists of: [ 495.185964][ T9837] sk_lock-AF_INET6-NBD --> &cmd->lock --> &nsock->tx_lock [ 495.185964][ T9837] [ 495.199092][ T9837] Possible unsafe locking scenario: [ 495.199092][ T9837] [ 495.206597][ T9837] CPU0 CPU1 [ 495.211976][ T9837] ---- ---- [ 495.217366][ T9837] lock(&nsock->tx_lock); [ 495.221805][ T9837] lock(&cmd->lock); [ 495.228343][ T9837] lock(&nsock->tx_lock); [ 495.235296][ T9837] lock(sk_lock-AF_INET6-NBD); [ 495.240166][ T9837] [ 495.240166][ T9837] *** DEADLOCK *** [ 495.240166][ T9837] [ 495.248320][ T9837] locks held by kworker/u9:4/9837: 3, last CPU#0: [ 495.254827][ T9837] #0: ffff888025721140 ((wq_completion)nbd1-recv){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 495.266093][ T9837] #1: ffffc90004f67c40 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 495.277864][ T9837] #2: ffff888067d18a68 (&nsock->tx_lock){+.+.}-{4:4}, at: recv_work+0x1cd9/0x1e10 [ 495.287199][ T9837] [ 495.287199][ T9837] stack backtrace: [ 495.293107][ T9837] CPU: 0 UID: 0 PID: 9837 Comm: kworker/u9:4 Not tainted syzkaller #0 PREEMPT(full) [ 495.302583][ T9837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 495.312688][ T9837] Workqueue: nbd1-recv recv_work [ 495.317661][ T9837] Call Trace: [ 495.320965][ T9837] [ 495.324004][ T9837] dump_stack_lvl+0xe8/0x150 [ 495.328626][ T9837] print_circular_bug+0x2e2/0x300 [ 495.333766][ T9837] check_noncircular+0x12f/0x150 [ 495.338731][ T9837] __lock_acquire+0x164c/0x2de0 [ 495.343608][ T9837] ? do_raw_spin_unlock+0xf5/0x200 [ 495.348757][ T9837] lock_acquire+0x115/0x350 [ 495.353276][ T9837] ? inet_shutdown+0x6a/0x390 [ 495.357988][ T9837] ? __queue_work+0x1f8/0x10d0 [ 495.362782][ T9837] lock_sock_nested+0x41/0x100 [ 495.367581][ T9837] ? inet_shutdown+0x6a/0x390 [ 495.372284][ T9837] inet_shutdown+0x6a/0x390 [ 495.376825][ T9837] nbd_mark_nsock_dead+0x2cb/0x550 [ 495.381962][ T9837] recv_work+0x1cee/0x1e10 [ 495.386395][ T9837] ? __lock_acquire+0x747/0x2de0 [ 495.391350][ T9837] ? register_lock_class+0x31/0x2e0 [ 495.396561][ T9837] ? __lock_acquire+0x747/0x2de0 [ 495.401529][ T9837] ? trace_hrtimer_start+0x82/0x200 [ 495.406769][ T9837] ? __pfx_recv_work+0x10/0x10 [ 495.411560][ T9837] ? do_raw_spin_lock+0x12b/0x2f0 [ 495.416624][ T9837] ? rcu_is_watching+0x16/0xb0 [ 495.421452][ T9837] ? process_scheduled_works+0x97a/0x1630 [ 495.427460][ T9837] process_scheduled_works+0xc3d/0x1630 [ 495.433047][ T9837] ? __pfx_process_scheduled_works+0x10/0x10 [ 495.439055][ T9837] ? assign_work+0x3cf/0x5d0 [ 495.443674][ T9837] worker_thread+0xa47/0xfb0 [ 495.448307][ T9837] kthread+0x38b/0x480 [ 495.452397][ T9837] ? __pfx_worker_thread+0x10/0x10 [ 495.457967][ T9837] ? __pfx_kthread+0x10/0x10 [ 495.462580][ T9837] ret_from_fork+0x514/0xb70 [ 495.467192][ T9837] ? __pfx_ret_from_fork+0x10/0x10 [ 495.472333][ T9837] ? __switch_to+0xc89/0x1420 [ 495.477033][ T9837] ? __pfx_kthread+0x10/0x10 [ 495.481649][ T9837] ret_from_fork_asm+0x1a/0x30 [ 495.486461][ T9837] [ 495.500046][ T9836] Bluetooth: hci3: command tx timeout [ 496.244745][ T6042] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.297504][ T6042] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.339033][ T6042] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.379657][ T6042] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.402236][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 496.445292][ T6042] bridge_slave_1: left allmulticast mode [ 496.445318][ T6042] bridge_slave_1: left promiscuous mode [ 496.445474][ T6042] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.448397][ T6042] bridge_slave_0: left allmulticast mode [ 496.448413][ T6042] bridge_slave_0: left promiscuous mode [ 496.448540][ T6042] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.545739][ T6042] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 496.547506][ T6042] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 496.548584][ T6042] bond0 (unregistering): Released all slaves [ 496.678176][ T6042] hsr_slave_0: left promiscuous mode [ 496.678646][ T6042] hsr_slave_1: left promiscuous mode [ 496.679207][ T6042] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 496.679226][ T6042] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 496.679827][ T6042] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 496.679845][ T6042] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 496.695423][ T6042] veth1_macvtap: left promiscuous mode [ 496.695494][ T6042] veth0_macvtap: left promiscuous mode [ 496.695669][ T6042] veth1_vlan: left promiscuous mode [ 496.695796][ T6042] veth0_vlan: left promiscuous mode [ 496.918759][ T6042] team0 (unregistering): Port device team_slave_1 removed [ 496.933537][ T6042] team0 (unregistering): Port device team_slave_0 removed [ 497.040243][ T5280] 8021q: adding VLAN 0 to HW filter on device eth1 [ 497.279872][ T6042] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.337163][ T6042] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.374988][ T5280] 8021q: adding VLAN 0 to HW filter on device eth2 [ 497.400431][ T6042] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.468092][ T6042] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.559843][ T6042] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.590447][ T6042] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.628837][ T6042] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.672488][ T6042] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.743058][ T5280] 8021q: adding VLAN 0 to HW filter on device eth3 [ 497.785407][ T6042] bridge_slave_1: left allmulticast mode [ 497.785431][ T6042] bridge_slave_1: left promiscuous mode [ 497.785573][ T6042] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.787953][ T6042] bridge_slave_0: left allmulticast mode [ 497.787974][ T6042] bridge_slave_0: left promiscuous mode [ 497.788119][ T6042] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.835491][ T6042] batman_adv: batadv0: Interface deactivated: gretap1 [ 497.917982][ T6042] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 497.919743][ T6042] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 497.920826][ T6042] bond0 (unregistering): Released all slaves [ 497.971149][ T6042] batman_adv: batadv0: Removing interface: gretap1 [ 497.981091][ T6042] gretap0 (unregistering): left promiscuous mode [ 498.058448][ T6042] : left promiscuous mode [ 498.099286][ T6042] tipc: Left network mode [ 498.100395][ T6042] IPVS: stopping backup sync thread 19663 ... [ 498.368621][ T5280] 8021q: adding VLAN 0 to HW filter on device eth4 [ 498.438666][ T6042] hsr_slave_0: left promiscuous mode [ 498.439071][ T6042] hsr_slave_1: left promiscuous mode [ 498.439510][ T6042] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 498.439523][ T6042] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 498.441389][ T6042] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 498.441409][ T6042] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 498.467950][ T6042] veth1_to_team: left promiscuous mode [ 498.491662][ T6042] hsr_slave_0: left promiscuous mode [ 498.498687][ T6042] hsr_slave_1: left promiscuous mode [ 498.511606][ T6042] veth1_macvtap: left promiscuous mode [ 498.511638][ T6042] veth0_macvtap: left promiscuous mode [ 498.524918][ T6042] veth1_vlan: left promiscuous mode [ 498.524975][ T6042] veth0_vlan: left promiscuous mode [ 498.525862][ T6042] veth1_macvtap: left promiscuous mode [ 498.525887][ T6042] veth0_macvtap: left promiscuous mode [ 498.525954][ T6042] veth1_vlan: left promiscuous mode [ 498.526000][ T6042] veth0_vlan: left promiscuous mode [ 498.818047][ T6042] team0 (unregistering): Port device team_slave_1 removed [ 498.848475][ T6042] team0 (unregistering): Port device team_slave_0 removed [ 499.045353][ T5280] 8021q: adding VLAN 0 to HW filter on device eth5 [ 499.456437][ T5280] 8021q: adding VLAN 0 to HW filter on device eth6 [ 499.716390][ T5280] 8021q: adding VLAN 0 to HW filter on device eth7 [ 499.983866][ T5280] 8021q: adding VLAN 0 to HW filter on device eth8 [ 500.248345][ T5280] 8021q: adding VLAN 0 to HW filter on device eth9 [ 500.514333][ T5280] 8021q: adding VLAN 0 to HW filter on device eth10 [ 500.781881][ T5280] 8021q: adding VLAN 0 to HW filter on device eth11 [ 501.048123][ T5280] 8021q: adding VLAN 0 to HW filter on device eth12