last executing test programs: 5.045871922s ago: executing program 1 (id=4444): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x5, &(0x7f0000000340)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x45}, @call={0x85, 0x0, 0x0, 0xa4}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000000a02010400000000000000000a0000003c0002800c000280"], 0x50}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000006a001b0c2bbd7000fbdb8ae0fabf000000000014080001"], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x24000804) sendto$packet(0xffffffffffffffff, &(0x7f0000000080)="53520ea8db83a7da6a87c45f046465cc1129c13bb17d956a44b379ea5e92198c02031486cb71fe2e524a27", 0x2b, 0x44, &(0x7f00000000c0)={0x11, 0xf6, 0x0, 0x1, 0x66, 0x6, @remote}, 0x14) 4.829778125s ago: executing program 1 (id=4447): socket$inet6(0xa, 0x805, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000200)=ANY=[@ANYRES8, @ANYRES64, @ANYBLOB="ec840d6780d537c5756f0ca708155c8416b4fc5404b4132226ee0c2d0dcc7acc7e1f25fd94f07ca6297302ef4497ac5fd7f9ebc4969ab05b4f5f"], 0x32600) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f00000004c0)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10d}, 0x1c) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000200), 0x12) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB="bf16000000000000b7070000000100004870000000000000500000000000000095000000000000002ba728041598fbd30cb599e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f0711e6bd917487960717142fa9ea4318123f602000000000080de89e661168c1886d0d4d94f204e34ff65c26e278ef5b915395b19284a1a4bc72fbc1626e3a2a2ad358061d0ae0209e62f51ee988e6ea604ce974a22a550d6f97080980400003e05df3ceb9f1feae5737ecaa80a666963c474c2a100c788b277beee1cbf9b0a4d3881dcc7b1b85f3c3d44aeaccd3641110bec4e90a6341965c39e4b3431abe802f5ab3e89cf6c662ed4048d3b3e22278d00ce00000000d3a02762c2951257b85802189d74005d2a1bcf9436e192e23fd275985bf31b714f000bcab6fcd610f25f5888000000003f11afc9bd08c6ebfbb89432fb465bc52f49129b9b6150e320c9901de2ebb9000000018e3095c4c5c7a156cec33a667dccaff950ca1e5efdd4c968dacf81baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba175d876defd3541772f26e27c44cfdb2d85d6d29983e830a9cdd79837b3468e8c67a571d0a017c100344c52a570dd39877dfb2ff1ae66e1ce917474b2e650ae630afd086004c4a56c6cce6e51723257c872c5255f20100000000000000f041b665ab21372c8d8b7bac5b5c784d20a4a24d8dbd75062e1daef9dead619cc6e7baa72707157791c3d2a286ffb8d35452bb5d36c2a8682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b9935f771fd49e480cd9d48aeb12b1d6acabd38a817bcd222614d1f62734d679039a97d2b74f9e8e997ccd314000f7477137f4e8e7025123e783df8b8a17e3aa9fe1f662aef87a065b03cfb65b4dfe4f1b56e1f23128d743753a1de172d683d5892ce9414a1d98ea93e3d35dbb6c23b90cf36e83b8a434a97d09343d7f83079ccb02e69d384146056d125cfa788237874dd42dae334bda042819a2aa24dba1c25be2794448b4f63483026b5e34d44705b76ef29241adab0dd7d68bf975e02069f6f2425e1bc97a3d588085f16bef63a06578d4f5de7bfb6aaa75f16996d536256c02284cb1d3a6fb8cae87691fae365a70c3fc69e1565bba8dd8a8ca049f798abe646f738bebd69413afc9d8a5edd7aaa000000000000001e6c2f2a287c5278a218dbfaffffff00a14db5cfa6819eb1d39c48cfdc80d215c9e16e0c4736c819363154cca4e2f89800d18c89d7f46f679df6c9e2952ae1ebfd0ca88368ee6ce139e8b5822c22cf2e9dde943d34c432e1001171792c65986146666a5490928441f47e0fe5eac41824ca1fd0eb71aa243c88d5480efd8329d9a733d8f9ffffff5f912ac4e34bf6ea8a86da707b03bddb491ba0cc98f6be92c50008a2b50025419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9b844051f1a642aca9ff98c9036471ccff0522903e7bcf62e18f7696bbc280b95e8e0d6fd5644b0ebde3a95b06548862de809d3dae3cccf109f7c78e8479a345e800000000000000000000009455bf417627ce723a5d9103706aba69279500bb82f6b5a3ddc0bd9856712945b70c75ce5b722578820820d010d7a3cffc99fc647d0b82ef26ab708c0b19ed144be51c3b398f0e6bb7a30006000000cba12953d58cff0f0378740fe6662f377b97d8e7cdb047acd083d3cd3856476a60a49ad127ba6570bafc2bbcf9ee721fd9cb467ff071e5604fbf0491245c0000007d932d7a64de4c4aa433fc0840aff7c47da3a4c6966d0000000000000000f6bfbae29e8a6e2a889f6ef6869d82d6bd73eb76b65c7a35a54a4a6b8ad4600e3a972a0bb5971a5f16590b0a03dafa3fd1118765cc8ab9fccf3b51c41a339f200f2fa33006910a679a9ae0187b4d750c4bd244cb0cbfd23b265f4d4da448a7a0d19c5e430a31609dfa2dde267551467eb6475293dd7012cc449009981f22820e57a0eff234ccfe21d7a2302e000669753d3c3432cc14ee1abe724adb6b5431befedd3e22971118f0e21aed1823cb7dde8212a8531bd9691dd4cc6a370e9eb56b3d790b98f2bd0db1e5de6a146597b2cbb7103040d2a39d7965d34df524b760ab92efcce7dd1574052c735935bf6a752c015c7f5ffee9ff66e5dd2866b15b6e0d17618cb1f5c1ee4b051f47db7aa110f499f840a5c965443d725556351ee25fe09f69494b053678dcadcf02e063dff2fa4bef1ac3bbbebe6c74d71ec3b23e29895eff1d1017024fe3e8cc759b05785adc346b7ffd05963f92c1d0d7d90ba878ad89e490f3e29ac51d30632869a534418f916bf6fe8167827a8e6c8f8b391c822805cb0adf1b8bd6947ff208753eb0d208ce14f7b206b2e02c21e963abc5ceb735c1b3c46b0a843de52a903375dfb663a8d8ee9c2b2705c1a81d9d3b9656b219c8cd99c9cafcd0d0540884d97aecb19983fc6af29ab44a82aff9cba921192c665b877af6539bdb1b567f481ba07982e7ad758f4e1eac69e7e88a63960975f490e161e371ec8534791e3b61c685d900a9c0839208356b53750e76fcc3c2d1bddcbd83897921414d0c02e8188f3df79ea2a5c5444004830e6cb227ca1bdafb977c00000000003a417193b8c5d793687335a930867094fd6a78218218e04b705ec62f1608cb569b81914e68f175b392af6bc4fd2121d7fd276af2c97a441b56e7a0687d98b8e76d8d0d231e4fe00be1de76bd19cc12e2bd938eb681ed6bc951c1b4f7c51af59eea4d40c6000000000200778a677b72786311153271a3313da02645e11761699e4d04ac86dd14ff7b9a10d3fa74696fe3953a5b7706bf5d1faba4b18808d9cb0e9db696dec4e0820ee4028d7225a2c9c427cf64cbde6fba056b2006b7a37c1181d530fb865e235cd302f3b4071ee5237ada986b9e5e3144bf479f277f10656ad3744037ccc9c63685a6f1109d2ea73773d3635f61497f1fa1ea4a16f601800bf3e59141fbf05a96113320c445f9ba8596970d5254727e804fbd99ccefb7c09269dd2c5c25e56e169ac15980f3f85f7ca36dd5950ef5b64fd46f123311829534a82940994199b3cf7a8fabea9930952f5da9b909c1946e55289f668c423fcbb31ae91864c882313151741a67538c9689dc8ecc9903c7041e5c0704e2fa55a756487517a7445cbd9e3f5175e41c0000000000000000000a000000bf98efd587fffe326f474b0b089c017b16c0062cbce96f5adebec52a79f9363909842f79c50a1520be46d87003137e4c5031f00123e812a5e37cd52c9eb7336281cb8c6ce9934b157d7875a70eaf103cb3938e2361c51cd1eab8a26b232acf6bf0ab829c26dab637538b2eb1420d812d2b80c777710ba0f18e4661681aa218d9ba54023ab4305d77eb15611ae2545835e9d30e9f6d4fb43a291c69545a1eea0f8720431132d8549f99bf6c5cb060da70cbb59d0a000000000034d083fc37d2449f72de0cbea4bc1dc89c136cdbc504f849d5502d77a95c7bfff4cd9c03058d0d4d07ea64824f1acf2b39389f675f39d01719cdbab3f1ce10609c8d7b3e37cb99b41da5e485a441b6a103549f55ab09dc98767763d1f2fafd45bb7d2b40050d1f8292f4d9ec6d0000000000003932062290f4996fdd55b06023437e9e2072daf7f5d82f6f1b5b89a41134f4dc2e65bb11272fdf8c8141f41d6160b3d8b6ecd16d14267f61b4881adee7f07f3d6af5ae79e16fe2c3f55ac7a6392d2e1d9b4286b6c3e1f5a76b85ed6e1f0000c67e6c5fcdc8c39381be4799b8cb2d08b8262c807dd755e22b801162381aa9d1af2bbc9cfd497585337eac408b8475b47a392a10cae349160f128e5f873a58064eb400c36a90624f6aed398a215e9ce64522ab249f67c38a656d32ecff5cdb2b039c4abf349d2c0f88a42e9189bbfa7f5cf35b6e7ef8f9d33163b7ea875583e3aec4714c9c4ca3ecb04f2720237615a28bf310b58ffa2a103216fdcc8c2d8f5d55e5e7ebf147105272aaae56e86d856b3cf79a3f7306436762dd1a08ce873e07cebc7892ec6f9f696da38feed3dc0001500e34adae1ba89a32bad2af9030f840f1ba46cdadd5cbacc59352c290f55d971b65953533668c25f21d8d62d849e9058eaa97c63491568887548f668cdbca2abf01a361a0b64d8b523e669da350e3ec7445dfbf366b0b3bc5e76824a1e43eaaeca70db90f2fa39596443447671933079a24fe3681ad9ac361f71ac279a688f10a1cc4df1112105edebc5e3bbc394c8305ab129ca2dfb9b7c5e9d097bd01b495cccefddce569117f7f5d6a6270ff0f0f4c371029ca8489571b55841bf3dd003bc81460eee57ceb3c33f4e9300b0144fe040cf5fcfcbb616c2070237881afdb314cecd1623f3e55ab8b7627fa1be349145a8d6313cbc790eefe2020138e82fb9d351be4ddcbcc9bc048dd3db5828d16baec6e07a007f0030f34ea3cfd524d6fa1d45da5641d6c94e1d3ae7fba1c85035d2a60ef1696e0d96aa1c60019f73ae0aa6113cd66ef26b5777337c26e1461405d86fdf091edd526f25cada439bb3609ed5c35ab60a539ade786bd6004d0ea3edbd6c4da0d8e8be8c771c8c8a0b07d9859e04adb18964dcce9bce546074c26dffbc2df372a016e8c845d4257000000000000000000000000000000000000f29657697d9c2b132b2dc2f5ea5122836582a7e85fe2bc166f17aefd9d861de0191f5277d4a3b5afb6f23d9eea2459f7844606e1202768d83c24cc791bde44a448022bbfa571fe029a7b2d5152639ee283894ab6168992ff0acc01b39a078f285ce615351f262019586eb9447bb3eaffd7b53d8f37ca6c5f1027dd5b7592996c8a7789ba108979cc9ad07ed86682843e2eaa855dd01443ee6ffde1811f10039d5d14458177096e15cc4d8f2582a1bea5ccb9f10f615c87c441dc50a244bc138a1cae9868c3079bafe69769000000000000000000e99b63029d219cd3545a8426b56554a9f265d3557eefb3602894507c256cb8ee9ebadfecb6afeb84ba757bfa8d00a5af0dd6aa1e8144ef8ef04410d52204c335408941b8eccc5c734cc6a05247142ed647f89bcb5c043acfb382b9cc918bc3cdc368983157851cdf678800aa7eb2a6cbc12c7ae23bc88b8f10223ab2a093429f3f6965bc5af0114cf6f246e891e20ecaad7059866506c3000000000c3230e901e885b7a4a36bdfdb5ce7a2e5807a0f4c1d461d1243fccf51b875b49490cd7d044e7a1e1a4c013fae1f070a8a37ab90da2efc6c875b3aab34b75a252072691fc97bef0fed8ee597ab83bb53f89c36bc2ee3ad54904542f66dc94132df75fc9944882d6f2e13b7057e0000000000000000000000000000000000001b726c0ccd24000000000000cfd2f4d005578b9ed06e1c41ef3b411066739de953d39b968caaca1507928d68c8f052"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x1f4, 0xd, 0x0, &(0x7f0000000100)="ff412ffc886496c78100000000", 0x0, 0x20303, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x2}, 0x50) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB='..']) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0xf) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000b"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000700)="33ac346d28", &(0x7f0000000800), 0x4eaa, r5}, 0x38) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r6}, 0xc) getsockopt$netlink(r4, 0x10e, 0x9, &(0x7f0000001840)=""/42, &(0x7f0000000100)=0x2a) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001300)={r3, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000080), 0x0, 0x0, 0x1000, 0xe4, &(0x7f0000000200)="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", &(0x7f0000001200)="672c4d07c99f57acd5ccc31a7367c3a51025a5f1be908e7f1bef71069b626f9609495b55719b8053449e809341b4be997a32ac14cb6359b17b16bfd02cf6ebd546d2cdc4d67d883d168d792293564b17bf6dc3000d83b061013d5a1502e2d38dca449cf491bf9f9facfdbe636f4c190c6d2a7f7d8a285e472bd4d84f6ed262de21a2531123e640657a96ce6ef46f9cae6dc60055c0cc98fe5a021fd8492e6fa8c3f57291b93d67868d02546f0d9c1d9ce43ef608d665411911bc4c58502c3f7678ec17a45b67387cb5b929fc77a425bb5c06a7f0a459f2ae33864cf7e393c14f02f54605", 0x0, 0x0, 0x5}, 0xfffffffffffffd69) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r7 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/time\x00') mkdirat$cgroup(r7, &(0x7f0000000000)='syz0\x00', 0x1ff) r8 = socket$l2tp6(0xa, 0x2, 0x73) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r9, 0x0, 0x44000) ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000001380)=0x4) getsockopt$inet6_buf(r8, 0x29, 0xca, 0x0, 0x0) 3.979912691s ago: executing program 1 (id=4454): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x12b100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000340)={'dvmrp1\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r1, 0x0, 0x8000f28, 0x6) ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f0000000000)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x308) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x12b100, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000340)={'dvmrp1\x00', 0x7101}) (async) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d) (async) pipe(&(0x7f0000000080)) (async) splice(r1, 0x0, r1, 0x0, 0x8000f28, 0x6) (async) ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f0000000000)) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x308) (async) 3.252429655s ago: executing program 1 (id=4464): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000016c0)={0x10, 0x20, 0x1, 0x0, 0x25dfdbfc, "", [@generic]}, 0x10}], 0x1, 0x0, 0x0, 0x20008001}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x38, r3, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x317e6611d580bdc) r4 = socket(0x10, 0x803, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002f00010000000000fcdbdf250401f2800c00180006ac0f"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r6 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r6, 0x0, 0xf, &(0x7f0000d10ffc)=0x200, 0x4) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x1, 0x10000, @dev={0xfe, 0x80, '\x00', 0x1e}, 0x6}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f00000004c0)=[@in6={0xa, 0x0, 0x0, @local, 0x1}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r6, 0x84, 0x65, &(0x7f00000001c0)=[@in6={0xa, 0xfffc, 0xfffffffc, @mcast1}], 0x1c) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x437, 0x0, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x5120b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x7}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48800}, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r4, 0x800448d2, &(0x7f0000001680)={0x8, &(0x7f00000011c0)=[{}, {@fixed}, {@none}, {@fixed}, {@fixed}, {@fixed}, {@none}, {}]}) r7 = socket$inet_sctp(0x2, 0x5, 0x84) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000240)={r9, 0x2}, 0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000000000)={r9, 0x8001, 0x3, [0x3ff, 0x4, 0x1fe0]}, &(0x7f0000001080)=0xe) r10 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000080)=0x80000001, 0x5) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r11, 0x84, 0x1f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000010c0)={0x30, r10, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x4080) 3.054829531s ago: executing program 1 (id=4467): socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@delsa={0x28, 0x12, 0x1, 0x0, 0x0, {@in6=@dev={0xfe, 0x80, '\x00', 0x2c}, 0x4d1, 0x0, 0x33}}, 0x28}}, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='io.stat\x00', 0x26e1, 0x0) (async) r2 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0xf, &(0x7f00000000c0), 0x4) (async) sendmsg$inet(r2, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) (async) setsockopt$sock_attach_bpf(r2, 0x1, 0x31, &(0x7f0000000640)=r1, 0x4) (async) setsockopt$sock_attach_bpf(r2, 0x1, 0x31, &(0x7f0000000080), 0x4) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000020000000000000014085000000050000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000002c0)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd26, 0x27dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x80000001, 0x0, 0x6c, 0x0, 0x0, 0xbfffffff}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x92, 0x400, 0x0, 0x8008, 0x7ffffffffffffffc}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2004c0c4}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff0000000000000000851000000200000085000000070000009500000000000000"], 0x0, 0xfffffdff, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x24, 0x0, 0x0) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000180)=r7, 0x4) (async) sendmsg$inet(r9, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) r10 = socket$netlink(0x10, 0x3, 0x14) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r10, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[@ANYBLOB="28000000060801"], 0x28}, 0x1, 0x0, 0x0, 0x400c841}, 0x0) 2.706221526s ago: executing program 4 (id=4473): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01030003000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c00000010001ffffcfdfffffdffffff00000000", @ANYRES32=0x0, @ANYBLOB="0002010000000000240012800b00010065727370616e000014000280050016000000000008000700ac1414bb08000a00", @ANYRES32=r4], 0x4c}, 0x1, 0x0, 0x0, 0x8044}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x5d, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x405, 0x2, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, 0x1062c}}, 0x20}, 0x1, 0x0, 0x0, 0x4044040}, 0x0) 2.504166944s ago: executing program 3 (id=4475): openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (async) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r2}, &(0x7f00000007c0), &(0x7f0000000640)=r1}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r2, 0xffffffffffffffff}, &(0x7f00000007c0), &(0x7f0000000640)=r1}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r2, &(0x7f0000000300), 0x0}, 0x20) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f00000025c0), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="d3932dc1", @ANYRES32=r0, @ANYRES16=r5, @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x20008804}, 0x4040814) write$nci(r0, &(0x7f0000002600)=ANY=[@ANYBLOB="61520101"], 0x4) socket$inet_sctp(0x2, 0x1, 0x84) (async) socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000080)=0x2b, &(0x7f00000000c0)=0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000015c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000000001000a0000000c00000005000000020000000000000500000000005f615f00b3756e74d3a86c2783c801e5b34202f6c23220bf49e0fd927ccb3255361d78aadabd9fece6a7049ef667c9828d5fa4a2d275005528c3f76b1d46dc59ee17b7b1c3972dda3626eb40c2bbad4b01cd94f14a42477c2589d70917e399789acfdd04ff06d1b937e2ff07e463e1684e76488c2c9d925375aec021e1b8372a524d08119d5dad7682df2f258aae5e807f195f4047d188f96ca0a4765fa8f8cb3d238334f3"], 0x0, 0x29, 0x0, 0x1}, 0x28) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r6, 0x0, 0xc, &(0x7f00000002c0)=0x4, 0x4) getsockopt$inet_opts(r6, 0x0, 0xd, 0x0, &(0x7f0000000340)) (async) getsockopt$inet_opts(r6, 0x0, 0xd, 0x0, &(0x7f0000000340)) socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/syz1\x00', 0x1ff) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r7) sendmsg$IEEE802154_DISASSOCIATE_REQ(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x60) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r10, &(0x7f0000000200), 0x806000) readv(r2, &(0x7f0000000740)=[{0x0}], 0x1) sendfile(r9, r8, 0x0, 0xf03a0005) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r11, &(0x7f0000000140), 0x2, 0x0) 2.353698827s ago: executing program 3 (id=4477): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@ipv4_newrule={0x2c, 0x1e, 0x1, 0x0, 0x2, {0x2, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xe}, [@FRA_DST={0x8, 0x1, @rand_addr=0x64010102}, @FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0x7ff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x42}, 0x4002810) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'ip_vti0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0x700, 0x0, 0xc, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x4, 0x0, @broadcast, @loopback}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000780)={'gretap0\x00', &(0x7f0000000200)={'tunl0\x00', r2, 0x40, 0x1, 0xff, 0x9, {{0x5, 0x4, 0x1, 0x5, 0x14, 0x66, 0x0, 0xea, 0x2f, 0x0, @local, @multicast1}}}}) 2.009886151s ago: executing program 2 (id=4479): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') (async) r0 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r0, 0x89ef, &(0x7f0000000340)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) (async) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000000), 0x3) (async) r3 = socket$inet6_sctp(0xa, 0xf, 0x84) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}, {0x14, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x2000094}, 0x80) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000001c0)={0x0, 0x20000000, 0x4, 0x1cba, 0x8, 0x6, 0x5, 0xe161, {0x0, @in={{0x2, 0x4e21, @rand_addr=0x64010102}}, 0x2, 0x10001, 0xffff, 0x81, 0x2}}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, 0x0, &(0x7f0000000380)) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f00000000c0)={'raw\x00', 0x3, [{}, {}, {}]}, 0x58) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000500)=ANY=[], 0x32600) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r10) 1.965040149s ago: executing program 4 (id=4481): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) 1.948335625s ago: executing program 3 (id=4482): mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0xf3a, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000240)=0x1) ioctl$int_in(r2, 0x5452, &(0x7f00000001c0)=0xffff) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r0, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x200000c, 0x11, r0, 0xa20f0000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r4, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) mmap(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x2000004, 0x12, r5, 0xe6905000) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="08000000040000000400000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r6}, &(0x7f00000000c0)=0x700, &(0x7f0000000180)}, 0x20) mmap(&(0x7f00005d4000/0x4000)=nil, 0x4000, 0xc, 0x12, r5, 0xfffff000) syz_emit_ethernet(0x4e, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004b00004000000000000690780a010101ac1e000189137900000000ac141427ac1e000100000000070400000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="3044000090780000"], 0x0) 1.831826433s ago: executing program 0 (id=4483): bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x20, &(0x7f0000000380)={&(0x7f0000000100)=""/163, 0xa3, 0x0, &(0x7f00000002c0)=""/68, 0x44}}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xf, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x5, 0x7, 0x6, 0x1, 0x5, 0x9}, [@TCA_NETEM_JITTER64={0xc, 0xb, 0xf}, @TCA_NETEM_ECN={0x8}]}}}]}, 0x60}}, 0x4000010) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, r0}, 0x94) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x6, 0x0, 0x4}]}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0x2f9, 0xffffca88, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632177fb7f0200017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28) 1.792670294s ago: executing program 4 (id=4484): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001000000850000002a00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r1}, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x8, 0xc}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xd, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x400}, [@call={0x85, 0x0, 0x0, 0x11}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r3, r2}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a8d000000060a010400000000000000000a0000010900010073797a31000000005c000480580001800b0001007461726765740000480002802c0003009ac420002e2eafb9fdd672bad09d81ef15cf3d58a5811d4c7a26a1fb78c7699c74e891a0c70000000000000000000004000000000008000240000000000e00010049444c4554494d45520000000900020073797a320000000014000000110001"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000400"/32], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdb5}, 0x80) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002", @ANYRES32=0x0], 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r5, &(0x7f00000000c0)="9b2b19f448b07f57af1e6ab038e22bd5c3c519bb24922301c0e739dd57e1920d29766af2929ae2debf13bca5d1c53f5f7d90d2f7f938b374963499e65c82", &(0x7f0000000140)=@udp6=r6, 0x1}, 0x20) getsockopt$TIPC_DEST_DROPPABLE(r6, 0x10f, 0x81, &(0x7f0000000380), &(0x7f00000003c0)=0x4) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x11, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000006000000000000000900efff17110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000700008500000086000000bf0900000000000055090100410000009500000000000000c5000200fcffffffdd00f8ff00000000bf91000000000000b7020000030000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x27}, 0x94) 1.670073717s ago: executing program 2 (id=4485): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) socket$igmp6(0xa, 0x3, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000040000000c00000000000000", @ANYRES32, @ANYBLOB='\x00'/12, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r1, &(0x7f0000000180)}, 0x20) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) accept(r0, 0x0, 0x0) 1.623476456s ago: executing program 0 (id=4486): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0x232, 0x0, 0x90, [0x0, 0x200000000301, 0x0, 0x0, 0x200000000330, 0x6], 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000ffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00000000"]}, 0x108) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x200000a, 0xc3072, 0xffffffffffffffff, 0x2fd15000) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x2000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) accept$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000080)=0x14) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0xfffff000, 0xe, 0x0, &(0x7f0000001700)="61df7100c80400d5721ff59fe864", 0x0, 0x8, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.551334623s ago: executing program 2 (id=4487): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x1e, 0x1, 0x0) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000040), 0xc) connect$qrtr(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) bind$qrtr(r2, &(0x7f0000000380)={0x2a, 0x1, 0x4000}, 0xc) sendto$packet(r1, 0x0, 0x0, 0x842, &(0x7f0000000180)={0x11, 0x7, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x58, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000841}, 0x4008004) 1.477591826s ago: executing program 4 (id=4488): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002b40), r2) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000080)={0xfffc, 0xe, 0x0, 0x2000}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, 0x0, 0x0) r5 = socket$kcm(0x29, 0x5, 0x0) accept4(r5, &(0x7f0000000480)=@pppoe={0x18, 0x0, {0x0, @dev}}, &(0x7f0000000540)=0x80, 0x800) sendmsg$kcm(r5, &(0x7f0000000440)={&(0x7f0000000300)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e20, @local}, 0x1, 0x4, 0x1, 0x3}}, 0x80, &(0x7f0000000380), 0x0, &(0x7f00000003c0)=[{0x60, 0x10b, 0x9, "349c8d8bbc631314d38b1762273414450c4e3e7d578246ed9228a0016344da7e1cfd2ca64c6d8cb2f69b267de4014b930301491d70686415cdab60d09f3c3e375dbbc98649ab95710be8ab8b45a10d"}], 0x60}, 0x1) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000002c00)={&(0x7f0000000100)={0x3c, r3, 0x1, 0x70bd25, 0x25cfdbfb, {0x1, 0x0, 0xa00}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}, @NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'net/l2cap\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x40, 0x0}}]}, 0x3c}, 0x1, 0x2000a00, 0x0, 0x20040090}, 0x10) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x20800001, 0x4) r6 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_buf(r6, 0x0, 0x30, 0x0, &(0x7f0000000180)) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r7, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0xd3, @local, 0xd}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000feffff7f00000000feffffff611051000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r8 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x101}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r8, 0x84, 0x66, &(0x7f0000000100)={r9, 0xc1f7}, &(0x7f00000001c0)=0x8) listen(r0, 0x402) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000000280)="ed56b6c5", 0x4) accept4(r10, 0x0, 0x0, 0x800) 1.399320788s ago: executing program 0 (id=4489): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002b40)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000007a00)=ANY=[@ANYBLOB="10100000260023070000000000000000"], 0x10}], 0x1, 0x0, 0x0, 0x24008015}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xb, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r2 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) bind$alg(0xffffffffffffffff, &(0x7f0000000500)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="431f07000b02000008000a00", @ANYRES32=r4, @ANYBLOB="08000500", @ANYRES32=r4, @ANYBLOB="1c0012800b0001006970766c616e"], 0x4c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x240408d4) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r7 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000940)={'ip6_vti0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f00000005c0)={@dev={0xfe, 0x80, '\x00', 0x40}, @remote, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x3, 0x2, 0x5, 0x400, 0xb7, 0xc20022, r8}) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000600), 0x4) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000780)={r2, &(0x7f0000000680)='\x00', 0x2000, &(0x7f00000006c0)={@align=0x16b6, {0x81, 0x0, 0x3c20, 0x5}}, 0x7fff, &(0x7f0000000700), &(0x7f0000000740)=0x7fffffff}) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000008"], 0x50) ioctl$sock_netdev_private(r7, 0x89fb, &(0x7f00000010c0)="3e7049279ff0327d561497df986e384ac4b3a47a091fbd2afbe29301dfe2587177d01c4bd1a88518e20e3fe8f64db50722e1c3eb9b53413b977a8f60027f2f0d3cc8afa17ef2b69092ca79ca7ac2bef1da1782172d8aa6e649ec9ebca29a80cc19064b36e8b6689eb6d71cbdbc9444a2287799177647f551da9ce83635aa3b58e7895ed252b941595b633cfec1131942c8d0fbed2ad3cefa65182971c6813ee52850dc1cb4a42ad649b79dbedbd9bd1b79c7c7843cfcb86451fe4ffb5e2ea8962c552c9d0a9999cd5e49820ff49146eb66f63d1d0cc349") r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r11}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r12}, &(0x7f0000000180), &(0x7f00000001c0)=r11}, 0x20) r13 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) sendmsg$inet(r13, &(0x7f0000001080)={&(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000f00)=[{&(0x7f0000000a00)="a564610fcc7a9b5e167981ae6e68a0844518274c6ebe20cf2d835d37d84f39319c2b4825e35002774ed63be33c2e24fefc47b3d4bd8240d245d8c2762c27c2d23c9a44e35b86b865e37cd84aec4de797cc8ba7a553518b9325ee0b5735f6c681c75d7f0522329033a2ad18247f0816be83e1b27ea15495187baa54b2ca70393681785309ca53939745c354f26dd992ecbae5963d53b0ba304265b068704350d511e45349241317aa8e09ecfc95b2dbb1ffb2ce23afa9e4e1427cdd2ac87960bb3fb820fb1a27f71441273267b01b9670fe00f5be842ab59586ac4921a0346e0673bf463ee83006ba0bbf03472987518e4a34f7", 0xf3}, {&(0x7f0000000b00)="f779dd71d91586267ef05e186a38916dfc5ec888de5555a527343e7809df22928adc45996a36f3f81ac4a6953a99f67c50ff0c0c841b7166ec7972a25cd35c36e4094c0694ee9da807e69b60a4fdec292e747b6ef8dbb4e97826989be5ffbd2b4d1c76afdb941f2799a08258e23f87d20b2efa613c0b7db2eb30216ccb64b424a8896d60b31924711d79d0010edb5913a816ec870c6bb356f32c6449b7e30c45b26d5beed5fb01a4d5cdb60ceaf7af62159fa0a71b6ab5c76383959e311cbbf0a60f9c56beb70fed2035b0cfe0d5316676c3eb3f925d01ecd99b1e0ceca38c0ef320d59642b16990f679ffc490fe576236f9950395", 0xf5}, {&(0x7f0000000c00)="980ab0d07170b8fa4bce1ffe09aeda8a533911d3d600d43e651a6ddcbe461f87a4d8a09abded0d7838ed66985d503bb6c9dfe9b94d2449bffc9d0e3052837c91ecc59b77e9f479b9ebca697e236967185aa6a9353ea1d2d75f064a4691e5198d53aa032b3afc4d7246907d7fdb0802f8dd1d8bf9aab17a588a6395f85e49fcc0acdfb8a9a550fda8a138b25799145bb6e3875c6a92afb5", 0x97}, {&(0x7f0000000cc0)="60a943f047496f19c183d6cb5d9ae5edefaffd3992752830c7a92d126ac4aa95e93338c149e93ba1595db13d493bf53b8eacfe50617b482be015a4534e4b2449bdb47a3ec025aca316624d8129c77ef26e40f15dcd3a225b137215b6f720a639e32a89b08afb7cb05f9501e4ae1293785e456b06e8e36daaee031a9684cfa4d9d80cfa9f61b63c52ecdff686a9b91fa8964b0687c08043e390c195d714058c7a1499000e6bd127c7dfdf78d24eff5483495852f2b8eb976084e2b5d1258073f6896dc54df1b9a6a5dba0375596c9513c77235b170b987db1c26e64cb6a4ad10f195cd531ae292c1c9594d9cd440534d0fcff2e51421684", 0xf7}, {&(0x7f0000000dc0)="429bcc4da7ad4536720b7a4830562ab83eeee699c0e8fef597e1984f2f0a7a6581c2f58c0e605ce88ab2220a9cc1ccaca8ea3eb7e12045c4c758e9e389befa3b9c390f5469ef9dcab87b034cac6a98ac795977f7d591a970cd9fafdd9f7ca5253ea795d2dd6b7a7aaca4b3c16787a4ca5621fca98d0127b9258b545fc933bc498db046c4b1342079b020ce4c6602481f20d5872bdf412f96c30a8c81ebec22ccb528ec207d0be728a80773991b62ef7d6522e608256210574a699f624b268b6fddcf3485f8e986dffce58950f64830f5536ecc704f92f5921ca0d844f2b878b2a00b94fce3be18366a7b9eb0701e4c805c7244", 0xf3}, {&(0x7f0000000ec0)="a876ac11e7770816d5e3b8238c40a243014e83abe32fdb1fc95ee8bc55b817112c689fd923d4efd98b695a10c6459f0a2e8fdab16eecf933", 0x38}], 0x6, &(0x7f0000000f80)=[@ip_ttl={{0x14, 0x0, 0x2, 0xc}}, @ip_retopts={{0x64, 0x0, 0x7, {[@timestamp={0x44, 0x1c, 0x52, 0x0, 0x3, [0x5, 0xa7a0, 0x380000, 0x8, 0x683, 0x2]}, @ssrr={0x89, 0x17, 0x1, [@broadcast, @remote, @broadcast, @local, @remote]}, @ssrr={0x89, 0x13, 0x71, [@remote, @dev={0xac, 0x14, 0x14, 0x14}, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}, @timestamp_prespec={0x44, 0xc, 0x6b, 0x3, 0x6, [{@remote}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_tos_u8={{0x11}}, @ip_ttl={{0x14, 0x0, 0x2, 0x10001}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xffff}}], 0xe0}, 0x40000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000940)=@bpf_tracing={0x1a, 0x1f, &(0x7f00000011c0)=ANY=[@ANYBLOB="1800000005000000000000000e000000185700000100000000000000000000008510000005000000185d00000600000000000000000000003d500c00080000008d81060000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000010000008500000006000000b7080000000000007b8af8ff00000000b7080000030000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="000000522571b500b70500e70700000085000000a500000095000000000000004fcff3493d9a4f93fd1ed1df13b4312ff943046c2013021db279be62fbbeff4100b9ab4d96246b41be8ba3b22731c41744837e45043e799d332da31b12247a2e35cb58d31cea8d1bcb4acb9838ca8c8dc3c05655eefc7d8c5ba4349a928ed48582f17c1bce53edbed69b4d97054696ba0aea3cfe0dc46f503ef3ac94c75016bfeef2a075b7d1e3cabb9a66f9f3d980b6bbb1"], &(0x7f0000000580)='syzkaller\x00', 0xfffffbff, 0x15, &(0x7f00000005c0)=""/21, 0x0, 0x42, '\x00', r8, 0x1a, r9, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000640)={0x3, 0x5, 0x6, 0x6}, 0x10, 0x104ac, r1, 0x1, &(0x7f00000007c0)=[r10, r11], &(0x7f00000008c0)=[{0x0, 0x5, 0x7, 0x5}], 0x10, 0x7}, 0x94) sendmmsg$inet(r2, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001000040024bd7000fadbdf250004e000", @ANYRES32=0x0, @ANYBLOB=' \b\x00\x00\x00\x00\x00\x00'], 0x30}, 0x1, 0x0, 0x0, 0x88840}, 0x20040040) 1.296817437s ago: executing program 2 (id=4490): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x5, @none, 0x0, 0x2}, 0xe) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_getrule={0x1c, 0x22, 0x20, 0x70bd26, 0x25dfdbfc, {0x2, 0x20, 0x0, 0x7a, 0x8a, 0x0, 0x0, 0x5, 0x8005}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x801) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, 0x0, &(0x7f0000000100)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@deltclass={0x38, 0x29, 0x4, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x3, 0x3}, {0xfff2, 0xb}, {0xb, 0xb}}, [@tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_tbf={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1.089529807s ago: executing program 2 (id=4491): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x12, &(0x7f0000000200)=ANY=[@ANYBLOB="851000000000000085100000000000008510000000000000851000000800000085100055a803cc8e3b9e3900000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000"], 0x0}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001800010600000000000000001c140000fe00000100000000040013"], 0x24}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="44af0000000000e6ffffff00000000", @ANYRES16=r2, @ANYBLOB="01002cbd70004400000005000000080009000200000008000c00a80a0000060001000400000008000b00020000000500130009000000050012000e000000"], 0x44}}, 0xc010) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_subtree(r4, 0x0, 0x10448) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x11, r4, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000380)=@assoc_value, &(0x7f0000000440)=0x8) r6 = openat$cgroup_ro(r5, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0) preadv(r6, &(0x7f00000002c0)=[{&(0x7f0000001740)=""/12, 0xc}], 0x1, 0x4, 0xfffffffe) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x1, 0x2}, {0xd, 0x10}, {0x1, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="200806000000080009000100000000000000000000000000af82fd4ac6ef261471530b08268b75f6d2368026732b2aa1bc13b2b5c2f7744fe31a162196d08e6f375feb88f7d419b954f2604f402e83c92fe993af83becc0fcc00"/103], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x1081) r9 = socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socket$alg(0x26, 0x5, 0x0) r10 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES16=r10], 0x20}}, 0x0) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000800000000000061"], 0x0, 0x28}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000000000000000000009500a500000000003e62782f6b62fe583a205a2a93679f78609d6ca7f05ba88e8460d0693a8e47c2857ff1c02f24ca929b6aec07a02b58cbd88131bb0d547c9bab43442e4535f88409162afd1ed8ff5a113677be48432632a733fb0c58fcdba24799f692860f292f268d00eac7dd739212a24e74fef584daca158d64b64536a0c21a0ab5a3e038038aaef7bd2ea0621eb7be6fc89005be16748d73f3a1887006e10ed1fb7d9eb609d12ae5bcfd530400e18f6ad05fe15db26a4951f34aa257313b453b"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0xb, r11, 0x8, 0x0, 0x0, 0x14}, 0x94) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82004000000", @ANYRES32=r9, @ANYBLOB="0000800000000000180034800500"], 0x38}, 0x1, 0x300}, 0x0) ioctl$BTRFS_IOC_RM_DEV(r9, 0x5000940b, &(0x7f0000000740)={{r3}, "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"}) 968.96815ms ago: executing program 0 (id=4492): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r4, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000d00)={0x0}, 0x1, 0x0, 0x0, 0x4044010}, 0x4000000) write$cgroup_pid(r4, &(0x7f0000000000), 0x2a979d) write$cgroup_int(r4, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b40)={0xffffffffffffffff, 0xe0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000880)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f00000008c0)=[0x0, 0x0, 0x0], &(0x7f0000000900)=[0x0], 0x0, 0x9c, &(0x7f0000000940)=[{}], 0x8, 0x10, &(0x7f0000000980), &(0x7f00000009c0), 0x8, 0x9a, 0x8, 0x8, &(0x7f0000000a00)}}, 0x10) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000b80)={0xffffffffffffffff, r4, 0x17, 0x0, @val=@target_btf_id=r5}, 0x14) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002600)=@bpf_lsm={0x1d, 0x25, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @jmp={0x5, 0x1, 0x4, 0xa, 0x7, 0x100, 0xffffffffffffffff}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x1}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xf}}, @alu={0x4, 0x1, 0xd, 0x7, 0x8, 0xffffffffffffffff, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}]}, &(0x7f0000000540)='GPL\x00', 0xf, 0x1000, &(0x7f0000001500)=""/4096, 0x0, 0x7e, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000002500)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000002540)={0x0, 0x0, 0x401, 0x4}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000002580)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f00000025c0)=[{0x5, 0x5, 0x5, 0x4}, {0x0, 0x3, 0x3, 0x7}]}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002740)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000026c0), &(0x7f0000002700)}, 0x20) r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002800)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000002780), &(0x7f00000027c0)}, 0x20) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002840)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xfffff801, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x1}, 0x50) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f00000028c0)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000002980)={0xa, 0x15, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xc}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x35}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2b}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @jmp={0x5, 0x0, 0x6, 0x7, 0x7, 0x40, 0x4}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x2}, @ringbuf_query]}, &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x80, &(0x7f0000000300)=""/128, 0x0, 0xc, '\x00', r2, @fallback=0x1f, r3, 0x8, &(0x7f00000003c0)={0x9, 0x1}, 0x8, 0x10, 0x0, 0x0, r5, r6, 0x0, &(0x7f0000002940)=[r7, 0xffffffffffffffff, r8, r9, r10, r11], 0x0, 0x10, 0x9}, 0x94) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)={0x44, 0x2, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @remote}}}]}]}, 0x44}}, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x2}, 0x80, &(0x7f00000014c0)=[{&(0x7f0000000040)="27031c00160014000000002f1eafacf706e10500000086dd00050003ee0b80558ddbba9b37786fd808252372a31e4939884f0a", 0x33}, {&(0x7f00000001c0)='\x00\x00', 0x2}], 0x2}, 0x2404c0d0) 908.308856ms ago: executing program 3 (id=4493): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000008c0)=ANY=[@ANYBLOB="1c0000", @ANYRES16=r1, @ANYBLOB="010029bd7000fbdbdf2575ac16415e17ea488308cd09c3cacc0500000008000300", @ANYRES32=r2, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20048805}, 0x4008014) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, 0x0, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x2, 0x80805, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010000500000000000000037f00040000", @ANYRES32=r4, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x24040000) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), r0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x70, r5, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x27}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffc}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@remote}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x40}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xe}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x200}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000090}, 0x40004) ioctl$FS_IOC_READ_VERITY_METADATA(r3, 0xc0286687, &(0x7f0000000100)={0x2, 0xa, 0x56, &(0x7f0000000080)=""/86}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000fcffffff0100000044000180060001000200000008000500020000000c00070000000000000000000800090000000000090006006e6f6e6500000000080008000000000008000b0073697000"], 0x58}}, 0x44042) 694.528486ms ago: executing program 4 (id=4494): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="07020000000000000000010000000400088024000480050003000100000005000300000000000500030001000000040003000500000008000100030000000800020001"], 0x4c}}, 0x20000000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) close(r2) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, &(0x7f0000000300)={"9d72d72ee44c6fd97133d3a8df1090be", 0x0, 0x0, {0x40, 0x49173fdb}, {0x5, 0x613b}, 0x200, [0x2, 0x5, 0x7fffffff, 0x1ff, 0x100, 0xfd6, 0x5, 0x4, 0x8000000000000001, 0x7, 0x0, 0x1, 0x5, 0xffffffffffffff01, 0x4, 0x2]}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, &(0x7f00000007c0)={{r2}, r6, 0x1e, @unused=[0x6, 0x3f, 0x6, 0x6], @subvolid=0x7}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x12, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x7, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x4048000}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b921, 0x80000, {0x0, 0x0, 0x0, r5, {0x0, 0xa}, {0x6, 0xb}, {0x9, 0xa}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24024890}, 0x44000) 497.99121ms ago: executing program 0 (id=4495): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x48005}}, 0x20}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000680)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x6}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000008c0)=@newtaction={0x70, 0x30, 0xffff, 0x1, 0xfffff000, {}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0xffffffe1, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x5, 0x7, 0x30000000, 0x101, 0x8cb8}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x100007}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x3}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x70}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x20000000ed071, 0xffffffffffffffff, 0xfffff000) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r5, &(0x7f00000002c0)="05031c00d1fd140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) 497.405073ms ago: executing program 3 (id=4496): r0 = socket(0x10, 0x3, 0x0) (async) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'veth0_to_batadv\x00', &(0x7f0000002fc0)=@ethtool_link_settings={0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4, [0x0, 0x10, 0x0, 0x0, 0x400000]}}) (async) sendto$inet6(r0, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020506050e020409430009003f000c200a0000000d0085a168d0bf46d32345653600648d0a00120002000a0006005ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) (async, rerun: 32) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1}, 0x50) (async, rerun: 32) r3 = socket(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88) (async, rerun: 32) ioctl$BTRFS_IOC_BALANCE(r2, 0x5000940c, 0x0) (rerun: 32) 452.078575ms ago: executing program 2 (id=4497): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x7, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000801004800000000004000000850000005500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000100001000000ddffffff00000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000d50900010073797a3000000000080003400000000114000000110001"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c000000150a0102"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x4389cf13bdbf833b, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}, 0x1, 0x0, 0x0, 0x40800}, 0x4000) recvmmsg(r0, &(0x7f0000004f40)=[{{0x0, 0x0, 0x0}, 0xff}], 0x1, 0x40000102, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REQ_SET_REG(r4, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="202cae0e5e81f041a1db8c69eead5b6252fbe0e03fa4ae6eaa8f777e0760e486b19b68db5494d0940b6aeef78b70bea822214e506d293378971222dd3746aa6f3d9b3a1b1987d87ec47594f10946e471a92502696e65ae7a2a35674b0fde61efcebf7ccaba53800f09a74af72d24a05f8d85ee66557bf82140050860856e608135af5664da218bfb5ba9597d82785fa1796b31de6cd360324e98c4583e5e49c9840a7b853f27", @ANYRES16=r3, @ANYBLOB="010000000000000000001b000000070021006161000008009a0000000000"], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_pressure(r5, &(0x7f0000000100)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r6, &(0x7f0000000080)={'some', 0x20, 0x2000000008, 0x20, 0x1}, 0x2f) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGPGRP(r6, 0x8904, &(0x7f0000000280)=0x0) syz_open_procfs$namespace(r8, &(0x7f0000000400)='ns/net\x00') setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x41, &(0x7f0000000040)=0x110b, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x94, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x68, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg1\x00'}, {0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'pim6reg1\x00'}, {0x14, 0x1, 'vxcan1\x00'}]}]}]}, @NFT_MSG_DELFLOWTABLE={0x48, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg1\x00'}]}]}]}], {0x14, 0x10}}, 0x124}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000002c0)=ANY=[@ANYBLOB="18000000041401002cbd7000fbdbdf25080001000100000011c960947fbf13f519d5933eade8254efa94b68d93da9e8fdd63bb3da197c724bbff836a1b5907779503c0797e86531a4d146d40d0f907baa224f6c1c3e80225fc55f4b3babaa1407e7f335ba4217f9da1eb9a290efc22eb5cec3ba89d80820bc6ff8e0685b9ceff6dda2152389283a8", @ANYRES16=r2], 0x18}, 0x1, 0x0, 0x0, 0x48081}, 0x4) 433.273836ms ago: executing program 1 (id=4498): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0001008158", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c00000000000000000000000100"], 0x40}, 0x20000000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff8d, 0x0, 0xffffffffffffffff, 0x43}, 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffc0, 0x0, 0x0, 0x0, 0xa}, [@call={0x85, 0x0, 0x0, 0x26}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0xa0900}, 0x94) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) (async, rerun: 32) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (rerun: 32) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r3 = socket(0x2, 0x80000, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) (async, rerun: 64) write$bt_hci(r3, &(0x7f00000013c0)=ANY=[@ANYBLOB="010400000000000000b6d6297f36decd841c69dedd01d9e91e53ed29e662377d09a509b779992e209d00f4eeace28f4d742dcea5887197adc520723dcb42911ebf19022577aebc96cd731a409f6fb736d415b66dfd3a7602efef0e25b4229f1454c5c5827ea419c50ba3fd7fba11d7127162b9fe76f377c62467cdfe43ae60be8fbae563a1ac9b685d7a861eaaae5913df15eb60c6db3f2eb89f5a07b88f6f6ca3fb6918bd9c253652ac5051cafb54954e6ead1a76773b777b7532"], 0xae) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x78, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xfff3, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x48, 0x2, [@TCA_CGROUP_EMATCHES={0x44, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x34, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x4}, [@TCA_EM_IPT_MATCH_DATA={0x1f}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_MATCH_REVISION={0x38, 0x3, 0x2}]}}]}]}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x40010) (async) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008051}, 0x850) (async) sendmsg$key(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="020b21060500000025bd70b9ef7100ffdbdf2502001000000004d6000004d200000000010015004e240000"], 0x28}}, 0x4) (async) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10500, 0x0) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000c80)=0xffffffffffffffff, 0x4) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000e80)={0xffffffffffffffff, 0x20, &(0x7f0000000e40)={&(0x7f0000000d40)=""/103, 0x67, 0x0, &(0x7f0000000dc0)=""/128, 0x80}}, 0x10) (async) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000ec0)={0x1b, 0x0, 0x0, 0x38000000, 0x0, 0xffffffffffffffff, 0x6, '\x00', r5, 0xffffffffffffffff, 0x0, 0x3}, 0x50) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x12, 0x4, 0x8, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffff}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={r9, 0xfffffffffffffdea, &(0x7f0000000480)}, 0x10) (async) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000000)={{r10, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000680)='%pI4 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r11, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0x29, &(0x7f00000006c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r10}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r12}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1eb6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r10}}], {{0x6, 0x1, 0xd, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000fc0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000f40), &(0x7f0000000f80)=r1}, 0x20) (async, rerun: 32) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="1e0000000100000000000080070000002c600000", @ANYRES32, @ANYBLOB="09000600e10010000000ed84ef0d00fc5900000000408e4e0702f8bc9235f67253a9d8efe48b2c6de2ad7cc826db248d9903a22351aebfd1903969d3cbb458af32ffc0bf2635aa97f4f1b5956261e58237ea7f7521354229465c7541f024bf44cc4deed326c0dd8bc7aaa6911c958051aa97c1967ee923", @ANYRES32=r5, @ANYRES32, @ANYBLOB="0100000004000000040000000a00"/28], 0x50) (async, rerun: 32) r15 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000010c0)=@generic={&(0x7f0000001080)='./file0\x00', 0x0, 0x10}, 0x18) (async, rerun: 64) r16 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001000)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x80000001, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x3}, 0x50) (rerun: 64) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001200)=@bpf_lsm={0x1d, 0x2e, &(0x7f00000009c0)=@raw=[@cb_func={0x18, 0x9, 0x4, 0x0, 0x8}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x1}, @generic={0x7f, 0xa, 0xd, 0x7, 0x3e}, @call={0x85, 0x0, 0x0, 0x44}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xd}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x3}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x5}, @map_val={0x18, 0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xbff}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x40}}], &(0x7f0000000b40)='syzkaller\x00', 0xff, 0xcb, &(0x7f0000000b80)=""/203, 0x40f00, 0x40, '\x00', 0x0, 0x1b, r6, 0x8, &(0x7f0000000cc0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000d00)={0x1, 0x5, 0x5, 0x2}, 0x10, r7, 0x0, 0x1, &(0x7f0000001180)=[r8, r9, r10, r13, r14, 0xffffffffffffffff, r15, r16], &(0x7f00000011c0)=[{0x2, 0x5, 0x8, 0x9}], 0x10, 0x4}, 0x94) 154.812057ms ago: executing program 3 (id=4499): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x20) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)={0x2c, 0xa, 0x6, 0x101, 0xd000000, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000040000000100000080000000", @ANYRES32, @ANYBLOB="00000000004bb511f10000000004000000000000", @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="000000000100"/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000100007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r2, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f0000000300)='GPL\x00', 0x2, 0x100a, &(0x7f0000002500)=""/4106, 0x0, 0x2b}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000001800dd8d000000000300000802000000fc00000500000000060015000200000014001680100008800c00018007000100"], 0x38}}, 0x0) 99.029167ms ago: executing program 4 (id=4500): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000c40)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) (async, rerun: 64) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) (async, rerun: 64) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="fe55fc2733656cd94cd632f708d5edc9bbe8b3ec7b6726cb94dd7ef916602cfa318a03da4cd0bcbe6074bdf1dc41427cb05cdcc0a6bf308e382bd3b0a7", 0x3d}], 0x1, 0x0, 0x0, 0x20000000}], 0x5, 0xc0) (async) recvmmsg(r2, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000940)=""/53, 0x35}], 0x1}, 0x7fff}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000840)=""/116, 0x74}], 0x1}, 0x9}], 0x2, 0x10000, 0x0) (async, rerun: 64) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async, rerun: 64) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000440)={@val={0x8, 0x800}, @val={0x0, 0x0, 0x6, 0x0, 0x14}, @ipv4=@generic={{0x6, 0x4, 0x2, 0xc, 0xfc0, 0x66, 0x0, 0x3, 0x29, 0x0, @rand_addr=0x64010120, @broadcast, {[@ra={0x94, 0x4}]}}, "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"}}, 0xfce) 0s ago: executing program 0 (id=4501): r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) sendfile(r0, r1, &(0x7f0000000180)=0x7fffffff, 0x86) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x28, r4, 0x800, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xfffffffc, 0x67}}}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008010}, 0x8004) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000800000068cd41dba064df511ffcd176e34c4b4d300c26d9a013e00b", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000002000000000000000002000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70300000000000085000000ae000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000340)={@remote, 0x0}, &(0x7f0000000380)=0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x2, &(0x7f0000000180)=@raw=[@map_val={0x18, 0x5, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x5}], &(0x7f00000001c0)='syzkaller\x00', 0x7ea4, 0x43, &(0x7f00000002c0)=""/67, 0x41100, 0x8, '\x00', r7, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000400)={0x3, 0xa, 0xa7f9, 0x5}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000440)=[{0x2, 0x1, 0x5, 0x9}], 0x10, 0x5}, 0x94) syz_emit_ethernet(0x5a, &(0x7f0000000540)={@random="9bfb5808a23d", @broadcast, @val={@void, {0x8100, 0x5, 0x1}}, {@canfd={0xd, {{0x2, 0x0, 0x0, 0x1}, 0x7, 0x2, 0x0, 0x0, "a2750027ae161b35b7b1a02bfff62560c9acb38eed0d4016b2840b54ebb74314a8ce9a5bfa5212cf47f1435950a185b8fde2ead3b940de1948bfa06741c9ffd8"}}}}, 0x0) r8 = socket$inet_icmp(0x2, 0x2, 0x1) pwritev(r8, &(0x7f0000000640)=[{&(0x7f0000000200)="3a39c72ea0069d46eb2f7fdb18eb7bea3e510676eec5994a8e8a07931cb0876a9d8a8f6d9289662587b0defb94f72e", 0x2f}], 0x1, 0x7, 0x2) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r6, 0xf, 0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000ff21e9c50a00000a40000000060a0b040000000000000000020000001400048010000180090001006d65746100000000091b010073797a30000000000900020073797a3200000000140000001100010000000000000000000300000a"], 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x0) kernel console output (not intermixed with test programs): .3207'. [ 565.922850][ T7001] bond4: (slave bridge1): failed to get link speed/duplex [ 565.940979][T18001] team0: Port device team_slave_1 added [ 566.182259][T18001] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 566.221234][T18001] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 566.261207][ T5628] Bluetooth: hci4: command tx timeout [ 566.284578][T18001] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 566.420392][T18001] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 566.439974][T18001] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 566.489073][T18001] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 566.783276][T18001] hsr_slave_0: entered promiscuous mode [ 566.798864][T18001] hsr_slave_1: entered promiscuous mode [ 566.819206][T18001] debugfs: 'hsr0' already exists in 'hsr' [ 566.844224][T18001] Cannot create hsr debugfs directory [ 566.885998][ T150] bond4: (slave bridge1): failed to get link speed/duplex [ 566.918370][T18248] netlink: 116 bytes leftover after parsing attributes in process `syz.4.3215'. [ 567.081108][ T150] bond4: (slave bridge1): failed to get link speed/duplex [ 567.648292][T18270] netlink: 'syz.4.3220': attribute type 1 has an invalid length. [ 567.658680][T18270] netlink: 'syz.4.3220': attribute type 2 has an invalid length. [ 567.667427][T18270] netlink: 236 bytes leftover after parsing attributes in process `syz.4.3220'. [ 567.705937][ T7035] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 567.726927][ T7035] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 567.759177][ T7035] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 567.767233][ T7035] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 567.883413][T18284] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3224'. [ 568.023327][T18291] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3225'. [ 568.240336][ T7035] team0 (unregistering): Port device team_slave_1 removed [ 568.278644][ T7035] team0 (unregistering): Port device team_slave_0 removed [ 568.605231][T18279] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 568.629279][T18285] vlan2: entered promiscuous mode [ 568.635694][T18285] hsr0: entered promiscuous mode [ 568.641954][T18285] vlan2: entered allmulticast mode [ 568.647284][T18285] hsr0: entered allmulticast mode [ 568.653255][T18285] hsr_slave_0: entered allmulticast mode [ 568.659088][T18285] hsr_slave_1: entered allmulticast mode [ 568.710804][ T7001] bond4: (slave bridge1): failed to get link speed/duplex [ 568.757958][T18291] hsr_slave_0: left promiscuous mode [ 568.784018][T18291] hsr_slave_1: left promiscuous mode [ 568.885859][ T13] bond4: (slave bridge1): failed to get link speed/duplex [ 568.931779][T18297] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3227'. [ 568.997672][T18297] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3227'. [ 569.060116][T18001] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 4352 - 0 [ 569.106352][T18001] netdevsim netdevsim2 eth3 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 569.148772][T18302] x_tables: duplicate underflow at hook 1 [ 569.190548][ T156] bond4: (slave bridge1): failed to get link speed/duplex [ 569.266752][T18308] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 569.292969][T18308] bond1 (unregistering): Released all slaves [ 569.380349][ T156] bond4: (slave bridge1): failed to get link speed/duplex [ 569.414540][ T7035] IPVS: stop unused estimator thread 0... [ 569.429377][T18001] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 4352 - 0 [ 569.461793][T18001] netdevsim netdevsim2 eth2 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 569.559997][T18320] vxcan2: entered allmulticast mode [ 569.634661][T18320] vxcan2: entered allmulticast mode [ 569.655468][T18001] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 4352 - 0 [ 569.670502][T18001] netdevsim netdevsim2 eth1 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 569.725533][T18320] vxcan2: entered allmulticast mode [ 569.795881][T18001] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 4352 - 0 [ 569.813366][T18001] netdevsim netdevsim2 eth0 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 569.870231][T18320] vxcan2: entered allmulticast mode [ 569.982988][T18333] macvlan0: entered promiscuous mode [ 569.990811][T18333] batadv0: entered promiscuous mode [ 569.996452][T18333] macvlan0: entered allmulticast mode [ 570.002950][T18333] batadv0: entered allmulticast mode [ 570.011444][T18333] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 570.023642][T18333] batadv0: left allmulticast mode [ 570.028880][T18333] batadv0: left promiscuous mode [ 570.077528][T18320] vxcan2: entered allmulticast mode [ 570.144165][T18335] lo speed is unknown, defaulting to 1000 [ 570.160569][ T150] bond4: (slave bridge1): failed to get link speed/duplex [ 570.227016][T18343] netlink: 'syz.0.3239': attribute type 13 has an invalid length. [ 570.526641][T18346] bond0: entered promiscuous mode [ 570.532361][T18346] bond_slave_0: entered promiscuous mode [ 570.538531][T18346] bond_slave_1: entered promiscuous mode [ 570.560438][T18346] bond0: left promiscuous mode [ 570.565658][T18346] bond_slave_0: left promiscuous mode [ 570.576528][T18346] bond_slave_1: left promiscuous mode [ 570.640841][ T48] bond4: (slave bridge1): failed to get link speed/duplex [ 570.769820][ T156] bond4: (slave bridge1): failed to get link speed/duplex [ 570.785024][T18355] Cannot find add_set index 0 as target [ 570.812321][T18001] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 570.851656][T18001] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 570.873042][T18335] lo speed is unknown, defaulting to 1000 [ 570.878904][T18001] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 570.901014][T18001] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 570.931584][T18001] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 570.952761][T18001] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 570.977177][T18001] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 571.006528][T18001] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 571.169898][ T13] bond4: (slave bridge1): failed to get link speed/duplex [ 571.408325][T18001] 8021q: adding VLAN 0 to HW filter on device bond0 [ 571.630246][T18001] 8021q: adding VLAN 0 to HW filter on device team0 [ 571.676473][ T7001] bridge0: port 1(bridge_slave_0) entered blocking state [ 571.683839][ T7001] bridge0: port 1(bridge_slave_0) entered forwarding state [ 571.736077][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 571.743332][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 571.800983][T18387] macvlan1: entered promiscuous mode [ 571.807034][T18387] macvlan1: entered allmulticast mode [ 571.814572][T18387] veth1_vlan: entered allmulticast mode [ 571.992532][T18390] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3252'. [ 572.027095][T18392] netlink: 'syz.4.3253': attribute type 10 has an invalid length. [ 572.037107][ T13] net_ratelimit: 1 callbacks suppressed [ 572.037127][ T13] bond4: (slave bridge1): failed to get link speed/duplex [ 572.074215][T18392] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 572.111614][T18394] netlink: 84 bytes leftover after parsing attributes in process `syz.4.3253'. [ 572.144936][T18392] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 572.209837][ T7035] bond4: (slave bridge1): failed to get link speed/duplex [ 572.228943][T18398] nbd: must specify a size in bytes for the device [ 572.256511][T18398] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3254'. [ 572.331592][ T12] bond4: (slave bridge1): failed to get link speed/duplex [ 572.449940][ T12] bond4: (slave bridge1): failed to get link speed/duplex [ 572.540488][T18410] sctp: [Deprecated]: syz.3.3257 (pid 18410) Use of int in max_burst socket option deprecated. [ 572.540488][T18410] Use struct sctp_assoc_value instead [ 572.627311][T18411] dvmrp0: entered allmulticast mode [ 572.676815][T18407] lo speed is unknown, defaulting to 1000 [ 572.683292][ T12] bond4: (slave bridge1): failed to get link speed/duplex [ 572.839824][ T13] bond4: (slave bridge1): failed to get link speed/duplex [ 572.878045][T18420] netlink: 748 bytes leftover after parsing attributes in process `syz.1.3259'. [ 572.971351][ T156] bond4: (slave bridge1): failed to get link speed/duplex [ 573.041249][T18431] xt_CT: You must specify a L4 protocol and not use inversions on it [ 573.099695][ T7001] bond4: (slave bridge1): failed to get link speed/duplex [ 573.205976][T18442] netlink: 'syz.0.3263': attribute type 1 has an invalid length. [ 573.264998][T18442] netlink: 'syz.0.3263': attribute type 2 has an invalid length. [ 573.318158][T18442] netlink: 'syz.0.3263': attribute type 5 has an invalid length. [ 573.369282][T18442] netlink: 216 bytes leftover after parsing attributes in process `syz.0.3263'. [ 573.482354][ T150] bond4: (slave bridge1): failed to get link speed/duplex [ 573.517374][T18001] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 573.562174][T18407] lo speed is unknown, defaulting to 1000 [ 574.111356][ T150] bond4: (slave bridge1): failed to get link speed/duplex [ 574.194999][T18463] syzkaller0: entered promiscuous mode [ 574.213765][T18463] syzkaller0: entered allmulticast mode [ 574.315725][T18464] Unknown options in mask 6 [ 574.359014][T18463] tipc: Started in network mode [ 574.365128][T18463] tipc: Node identity 8a66df7b62c5, cluster identity 4711 [ 574.373601][T18463] tipc: Enabled bearer , priority 0 [ 574.459027][T18463] tipc: Resetting bearer [ 574.473975][T18477] netlink: 'syz.3.3271': attribute type 4 has an invalid length. [ 574.482906][T18477] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3271'. [ 574.527435][T18477] .`: renamed from bond0 [ 574.538568][T18462] tipc: Resetting bearer [ 574.598260][T18462] tipc: Disabling bearer [ 574.655058][T18478] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3271'. [ 574.767536][T18480] netlink: 'syz.0.3272': attribute type 39 has an invalid length. [ 574.780156][T18001] veth0_vlan: entered promiscuous mode [ 574.890743][T18485] netlink: 'syz.1.3274': attribute type 10 has an invalid length. [ 574.901393][T18001] veth1_vlan: entered promiscuous mode [ 574.951384][T18485] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 574.967068][T18485] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 575.058961][T18001] veth0_macvtap: entered promiscuous mode [ 575.141962][T18001] veth1_macvtap: entered promiscuous mode [ 575.223914][T18001] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 575.287354][T18001] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 575.405344][T18500] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3277'. [ 575.414780][T18493] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 575.445858][T18493] bridge0: port 3(vlan2) entered blocking state [ 575.452382][T18493] bridge0: port 3(vlan2) entered forwarding state [ 575.453089][T18500] netlink: 'syz.4.3277': attribute type 5 has an invalid length. [ 575.522492][T18493] bond2: left promiscuous mode [ 575.543248][T18493] bridge1: left promiscuous mode [ 575.593021][T18500] ip6erspan0: entered allmulticast mode [ 575.607906][ T150] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.672005][ T150] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.699152][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.803482][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.843380][T18511] netlink: 'syz.4.3280': attribute type 2 has an invalid length. [ 575.889476][T18511] : entered promiscuous mode [ 576.103921][ T7035] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 576.143572][ T7035] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 576.247442][T18525] mac80211_hwsim hwsim30 wlan0: entered promiscuous mode [ 576.263760][T18525] mac80211_hwsim hwsim30 wlan0: entered allmulticast mode [ 576.311112][ T150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 576.330794][ T150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 577.075642][T18570] netlink: 'syz.2.3169': attribute type 2 has an invalid length. [ 577.277554][T18572] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 577.605056][T18570] þ: entered promiscuous mode [ 577.742026][ T156] net_ratelimit: 11 callbacks suppressed [ 577.742049][ T156] bond4: (slave bridge1): failed to get link speed/duplex [ 577.900058][ T7024] bond4: (slave bridge1): failed to get link speed/duplex [ 578.040634][ T7024] bond4: (slave bridge1): failed to get link speed/duplex [ 578.160530][ T7024] bond4: (slave bridge1): failed to get link speed/duplex [ 578.280778][ T48] bond4: (slave bridge1): failed to get link speed/duplex [ 578.350934][T18600] siw: device registration error -23 [ 578.430314][ T7024] bond4: (slave bridge1): failed to get link speed/duplex [ 578.539950][ T7024] bond4: (slave bridge1): failed to get link speed/duplex [ 578.600327][ T10] IPVS: starting estimator thread 0... [ 578.694919][ T48] bond4: (slave bridge1): failed to get link speed/duplex [ 578.709849][T18618] IPVS: using max 28 ests per chain, 67200 per kthread [ 578.794569][T18624] lo speed is unknown, defaulting to 1000 [ 578.813676][ T156] bond4: (slave bridge1): failed to get link speed/duplex [ 578.949836][ T7001] bond4: (slave bridge1): failed to get link speed/duplex [ 579.177015][T18626] lo speed is unknown, defaulting to 1000 [ 579.184620][T18624] lo speed is unknown, defaulting to 1000 [ 579.473341][T18626] lo speed is unknown, defaulting to 1000 [ 579.717379][T18632] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3302'. [ 579.833732][T18559] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 580.395312][T18658] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3309'. [ 580.588479][T18658] bond0 (unregistering): Released all slaves [ 581.148327][T18683] macvlan0: entered promiscuous mode [ 581.536815][T18691] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3314'. [ 581.820599][T18715] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3317'. [ 582.048440][T18719] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3319'. [ 582.197295][T18719] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3319'. [ 582.335301][T18734] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3322'. [ 582.347560][T18734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 582.834231][ T7001] net_ratelimit: 22 callbacks suppressed [ 582.834253][ T7001] bond4: (slave bridge1): failed to get link speed/duplex [ 582.854312][T18760] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3329'. [ 582.925193][T18760] ipvlan2: entered allmulticast mode [ 582.948335][T18760] syz_tun: entered allmulticast mode [ 583.073454][ T156] bond4: (slave bridge1): failed to get link speed/duplex [ 583.219732][ T12] bond4: (slave bridge1): failed to get link speed/duplex [ 583.240553][T18770] lo speed is unknown, defaulting to 1000 [ 583.336247][T18783] netlink: 'syz.3.3332': attribute type 1 has an invalid length. [ 583.341550][ T12] bond4: (slave bridge1): failed to get link speed/duplex [ 583.367006][T18783] netlink: 'syz.3.3332': attribute type 3 has an invalid length. [ 583.396835][T18783] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3332'. [ 583.465451][T18786] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3334'. [ 583.486162][ T7024] bond4: (slave bridge1): failed to get link speed/duplex [ 583.509003][T18791] netlink: 'syz.0.3336': attribute type 1 has an invalid length. [ 583.670510][ T7001] bond4: (slave bridge1): failed to get link speed/duplex [ 583.801326][ T12] bond4: (slave bridge1): failed to get link speed/duplex [ 583.870921][T18798] syzkaller0: entered promiscuous mode [ 583.894172][T18798] syzkaller0: entered allmulticast mode [ 584.130439][ T156] bond4: (slave bridge1): failed to get link speed/duplex [ 584.248239][T18770] lo speed is unknown, defaulting to 1000 [ 584.254073][ T156] bond4: (slave bridge1): failed to get link speed/duplex [ 584.332909][T18810] xt_hashlimit: size too large, truncated to 1048576 [ 584.506646][T18819] sctp: [Deprecated]: syz.1.3346 (pid 18819) Use of int in max_burst socket option deprecated. [ 584.506646][T18819] Use struct sctp_assoc_value instead [ 584.560786][ T150] bond4: (slave bridge1): failed to get link speed/duplex [ 584.674676][T18819] Bluetooth: MGMT ver 1.23 [ 585.145617][T18837] __nla_validate_parse: 2 callbacks suppressed [ 585.145639][T18837] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3349'. [ 585.690636][T18851] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 585.818096][T18859] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3354'. [ 585.974658][T18869] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3355'. [ 586.120457][T18858] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3353'. [ 586.353818][T18875] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3358'. [ 586.798195][T18882] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3362'. [ 587.017750][T18890] netlink: 'syz.2.3363': attribute type 5 has an invalid length. [ 587.068195][T18893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 587.153412][T18893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 587.200557][T18898] nbd: couldn't find a device at index 0 [ 587.262676][T18893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 587.313894][T18900] netlink: 'syz.1.3365': attribute type 1 has an invalid length. [ 587.381525][T18900] netlink: 'syz.1.3365': attribute type 2 has an invalid length. [ 587.403549][T18900] netlink: 'syz.1.3365': attribute type 5 has an invalid length. [ 587.413231][T18906] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3367'. [ 587.434823][T18900] netlink: 216 bytes leftover after parsing attributes in process `syz.1.3365'. [ 587.488764][T18906] bond4: entered promiscuous mode [ 587.495410][T18906] 8021q: adding VLAN 0 to HW filter on device bond4 [ 587.566671][T18907] 8021q: adding VLAN 0 to HW filter on device bond4 [ 587.604888][T18907] bond4: (slave sit1): The slave device specified does not support setting the MAC address [ 587.633068][T18907] bond4: (slave sit1): Error -95 calling set_mac_address [ 587.728510][T18906] bond4: (slave sit1): The slave device specified does not support setting the MAC address [ 587.761721][T18915] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3370'. [ 587.773178][T18906] bond4: (slave sit1): Error -95 calling set_mac_address [ 587.947449][ T7001] net_ratelimit: 16 callbacks suppressed [ 587.947470][ T7001] bond4: (slave bridge1): failed to get link speed/duplex [ 588.109756][ T7035] bond4: (slave bridge1): failed to get link speed/duplex [ 588.151307][T18926] ipip0: entered promiscuous mode [ 588.160231][T18926] ipip0: entered allmulticast mode [ 588.231132][ T13] bond4: (slave bridge1): failed to get link speed/duplex [ 588.468736][T18939] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3377'. [ 588.503363][T18933] syzkaller0: entered promiscuous mode [ 588.509155][T18933] syzkaller0: entered allmulticast mode [ 588.521337][T18940] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 588.531713][ T7035] bond4: (slave bridge1): failed to get link speed/duplex [ 592.140162][ T156] bond4: (slave bridge1): failed to get link speed/duplex [ 592.280083][ T12] bond4: (slave bridge1): failed to get link speed/duplex [ 592.306517][T18979] __nla_validate_parse: 1 callbacks suppressed [ 592.306531][T18979] netlink: 236 bytes leftover after parsing attributes in process `syz.4.3387'. [ 592.450171][ T156] bond4: (slave bridge1): failed to get link speed/duplex [ 592.488371][T18978] netlink: 'syz.3.3389': attribute type 1 has an invalid length. [ 592.509072][T18978] netlink: 756 bytes leftover after parsing attributes in process `syz.3.3389'. [ 592.557641][T18990] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3389'. [ 592.594205][ T7001] bond4: (slave bridge1): failed to get link speed/duplex [ 593.070299][ T12] bond4: (slave bridge1): failed to get link speed/duplex [ 593.208558][T19016] netlink: 'syz.0.3399': attribute type 1 has an invalid length. [ 593.358443][T19014] syzkaller0: entered promiscuous mode [ 593.393440][T19014] syzkaller0: entered allmulticast mode [ 593.671803][T19037] netlink: 220 bytes leftover after parsing attributes in process `syz.1.3402'. [ 593.745788][T19025] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3403'. [ 596.711670][T19045] vlan2: entered allmulticast mode [ 596.739800][T19045] bridge2: entered allmulticast mode [ 596.746241][T19048] bridge2: port 1(erspan0) entered blocking state [ 596.759514][T19048] bridge2: port 1(erspan0) entered disabled state [ 596.780837][T19048] erspan0: entered allmulticast mode [ 596.798120][T19048] erspan0: entered promiscuous mode [ 596.834259][ T48] bond4: (slave bridge1): failed to get link speed/duplex [ 596.971728][ T12] bond4: (slave bridge1): failed to get link speed/duplex [ 597.022418][T19073] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3411'. [ 597.040718][T19073] ipvlan2: entered allmulticast mode [ 597.046240][T19073] dummy0: entered allmulticast mode [ 597.149822][ T12] bond4: (slave bridge1): failed to get link speed/duplex [ 597.270355][ T13] bond4: (slave bridge1): failed to get link speed/duplex [ 597.356216][T19087] syzkaller0: entered promiscuous mode [ 597.363151][T19087] syzkaller0: entered allmulticast mode [ 597.512523][ T7001] bond4: (slave bridge1): failed to get link speed/duplex [ 597.543358][T19092] No such timeout policy "syz0" [ 597.649872][ T12] bond4: (slave bridge1): failed to get link speed/duplex [ 597.836948][T19094] syzkaller0: entered promiscuous mode [ 597.863510][T19094] syzkaller0: entered allmulticast mode [ 598.297888][T19129] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3426'. [ 598.535792][T19136] netlink: 'syz.2.3428': attribute type 4 has an invalid length. [ 598.584981][T19137] netlink: 'syz.2.3428': attribute type 4 has an invalid length. [ 598.649044][T19138] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3428'. [ 598.758510][T19140] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3428'. [ 600.932697][T19131] bond1: option tlb_dynamic_lb: invalid value (128) [ 600.962041][T19131] bond1 (unregistering): Released all slaves [ 601.041186][ T7024] bond4: (slave bridge1): failed to get link speed/duplex [ 601.162431][ T7010] bond4: (slave bridge1): failed to get link speed/duplex [ 601.302938][ T7024] bond4: (slave bridge1): failed to get link speed/duplex [ 601.430334][ T7010] bond4: (slave bridge1): failed to get link speed/duplex [ 601.502391][T19163] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 601.552358][ T7010] bond4: (slave bridge1): failed to get link speed/duplex [ 601.699877][ T12] bond4: (slave bridge1): failed to get link speed/duplex [ 601.743982][T19177] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3435'. [ 601.830622][ T7001] bond4: (slave bridge1): failed to get link speed/duplex [ 601.924134][T19186] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3438'. [ 601.943329][ T7001] bond4: (slave bridge1): failed to get link speed/duplex [ 601.960947][T19186] netlink: 236 bytes leftover after parsing attributes in process `syz.1.3438'. [ 601.995110][T19191] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3438'. [ 602.001727][T19186] netlink: 236 bytes leftover after parsing attributes in process `syz.1.3438'. [ 602.119113][T19190] syzkaller0: entered promiscuous mode [ 602.125691][T19190] syzkaller0: entered allmulticast mode [ 602.542277][T19211] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3446'. [ 605.010501][T19201] syzkaller0: entered promiscuous mode [ 605.016261][T19201] syzkaller0: entered allmulticast mode [ 605.476994][T19211] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 605.707178][T19229] netlink: 'syz.0.3449': attribute type 3 has an invalid length. [ 605.727605][T19229] Bluetooth: MGMT ver 1.23 [ 605.794772][T19232] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3449'. [ 608.006049][T19232] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 608.017519][T19234] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 608.059847][ T7035] bond4: (slave bridge1): failed to get link speed/duplex [ 608.128099][T19239] IPv6: addrconf: prefix option has invalid lifetime [ 608.135254][T19239] IPv6: addrconf: prefix option has invalid lifetime [ 608.210130][ T12] bond4: (slave bridge1): failed to get link speed/duplex [ 608.226128][T19246] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3452'. [ 608.330319][ T7035] bond4: (slave bridge1): failed to get link speed/duplex [ 608.350179][T19244] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3451'. [ 608.479788][ T156] bond4: (slave bridge1): failed to get link speed/duplex [ 608.522524][T19255] syzkaller0: entered promiscuous mode [ 608.543015][T19255] syzkaller0: entered allmulticast mode [ 608.627705][T19265] syzkaller0: entered promiscuous mode [ 608.634342][T19265] syzkaller0: entered allmulticast mode [ 608.645986][T19255] tipc: Started in network mode [ 608.653945][T19255] tipc: Node identity d6a1b5d9655d, cluster identity 4711 [ 608.664770][T19255] tipc: Enabled bearer , priority 0 [ 608.676959][T19267] syzkaller0: entered promiscuous mode [ 608.689377][T19267] syzkaller0: entered allmulticast mode [ 608.992983][T19277] xt_connbytes: Forcing CT accounting to be enabled [ 609.010214][T19277] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 610.690329][T19291] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3466'. [ 612.165883][T19253] tipc: Resetting bearer [ 612.205945][T19253] tipc: Disabling bearer [ 612.219780][ T7380] tipc: Node number set to 3019683289 [ 612.353620][T19292] bond3: entered promiscuous mode [ 612.359488][T19292] 8021q: adding VLAN 0 to HW filter on device bond3 [ 612.510500][ T7035] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 612.531219][ T7035] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 612.598551][ T7035] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 612.625047][ T7035] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 612.653077][ T7035] bond4: (slave bridge1): failed to get link speed/duplex [ 613.189077][T19322] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3475'. [ 613.239629][T19322] netlink: 'syz.0.3475': attribute type 7 has an invalid length. [ 613.250593][ T7024] bond4: (slave bridge1): failed to get link speed/duplex [ 613.275910][T19322] netlink: 'syz.0.3475': attribute type 8 has an invalid length. [ 613.300419][T19322] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3475'. [ 613.391928][ T12] bond4: (slave bridge1): failed to get link speed/duplex [ 613.540999][T19326] syzkaller0: entered promiscuous mode [ 613.546654][T19326] syzkaller0: entered allmulticast mode [ 613.704373][T19340] openvswitch: netlink: nsh attribute has 16 unknown bytes. [ 616.790411][T19345] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 616.823083][T19364] netlink: 208 bytes leftover after parsing attributes in process `syz.0.3485'. [ 616.846018][T19364] netlink: 208 bytes leftover after parsing attributes in process `syz.0.3485'. [ 616.905619][ T13] bond4: (slave bridge1): failed to get link speed/duplex [ 616.973741][T19375] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3487'. [ 616.984436][T19374] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 617.053020][T19374] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 617.141170][T19388] netlink: 252 bytes leftover after parsing attributes in process `syz.1.3486'. [ 617.170786][ T156] bond4: (slave bridge1): failed to get link speed/duplex [ 617.183691][T19389] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3489'. [ 617.264835][T19389] netlink: 'syz.4.3489': attribute type 2 has an invalid length. [ 617.285695][T19389] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3489'. [ 617.321680][T19389] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 617.342715][T19392] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3490'. [ 617.416466][T19378] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 617.474270][T19398] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3490'. [ 617.505081][T19398] netlink: 'syz.0.3490': attribute type 1 has an invalid length. [ 617.560896][T19385] lo speed is unknown, defaulting to 1000 [ 617.599897][ T156] bond4: (slave bridge1): failed to get link speed/duplex [ 617.720659][ T7035] bond4: (slave bridge1): failed to get link speed/duplex [ 617.844037][ T156] bond4: (slave bridge1): failed to get link speed/duplex [ 617.982076][ T7024] bond4: (slave bridge1): failed to get link speed/duplex [ 618.353744][T19426] syzkaller0: entered promiscuous mode [ 618.370336][T19426] syzkaller0: entered allmulticast mode [ 618.386436][T19385] lo speed is unknown, defaulting to 1000 [ 622.130390][ T7010] net_ratelimit: 1 callbacks suppressed [ 622.130412][ T7010] bond4: (slave bridge1): failed to get link speed/duplex [ 622.420530][ T156] bond4: (slave bridge1): failed to get link speed/duplex [ 622.540461][ T7035] bond4: (slave bridge1): failed to get link speed/duplex [ 622.655110][ T7001] bond4: (slave bridge1): failed to get link speed/duplex [ 622.789771][ T156] bond4: (slave bridge1): failed to get link speed/duplex [ 622.909728][ T13] bond4: (slave bridge1): failed to get link speed/duplex [ 622.937772][T19483] FAULT_INJECTION: forcing a failure. [ 622.937772][T19483] name failslab, interval 1, probability 0, space 0, times 0 [ 622.952150][T19483] CPU: 1 UID: 0 PID: 19483 Comm: syz.1.3512 Not tainted syzkaller #0 PREEMPT(full) [ 622.952179][T19483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 622.952193][T19483] Call Trace: [ 622.952208][T19483] [ 622.952218][T19483] dump_stack_lvl+0xe8/0x150 [ 622.952260][T19483] should_fail_ex+0x40c/0x560 [ 622.952295][T19483] should_failslab+0xa8/0x100 [ 622.952331][T19483] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 622.952362][T19483] ? skb_clone+0x212/0x3a0 [ 622.952387][T19483] ? skb_clone+0x212/0x3a0 [ 622.952417][T19483] skb_clone+0x212/0x3a0 [ 622.952439][T19483] ? __neigh_event_send+0xe81/0x1510 [ 622.952550][T19483] __neigh_event_send+0xe8e/0x1510 [ 622.952607][T19483] neigh_resolve_output+0x1a1/0x720 [ 622.952642][T19483] ? ip6_finish_output2+0xd74/0x13c0 [ 622.952761][T19483] ? ip6_mtu+0x38c/0x490 [ 622.952818][T19483] ? ip6_output+0x11e/0x540 [ 622.952847][T19483] ip6_output+0x337/0x540 [ 622.952881][T19483] ip6tunnel_xmit+0x200/0x620 [ 622.952973][T19483] ip6_tnl_xmit+0x20fa/0x28d0 [ 622.953029][T19483] ? __pfx_ip6_tnl_xmit+0x10/0x10 [ 622.953069][T19483] ? __ipv6_chk_addr_and_flags+0x184/0x7e0 [ 622.953096][T19483] ? __gre6_xmit+0x1b5/0xd80 [ 622.953133][T19483] __gre6_xmit+0xa5c/0xd80 [ 622.953168][T19483] ? __pfx___gre6_xmit+0x10/0x10 [ 622.953194][T19483] ? iptunnel_handle_offloads+0x2fd/0x630 [ 622.953265][T19483] ip6gre_tunnel_xmit+0x9be/0xf50 [ 622.953304][T19483] ? __pfx_ip6gre_tunnel_xmit+0x10/0x10 [ 622.953344][T19483] ? skb_network_protocol+0x23d/0x400 [ 622.953397][T19483] ? dev_queue_xmit_nit+0x2d/0xac0 [ 622.953449][T19483] ? lock_acquire+0x106/0x350 [ 622.953491][T19483] ? dev_queue_xmit_nit+0x2d/0xac0 [ 622.953530][T19483] ? dev_queue_xmit_nit+0x95c/0xac0 [ 622.953562][T19483] ? dev_queue_xmit_nit+0x2d/0xac0 [ 622.953612][T19483] dev_hard_start_xmit+0x2cd/0x830 [ 622.953655][T19483] sch_direct_xmit+0x257/0x4c0 [ 622.953746][T19483] ? __pfx_sch_direct_xmit+0x10/0x10 [ 622.953791][T19483] __dev_queue_xmit+0x177f/0x3820 [ 622.953832][T19483] ? alloc_skb_with_frags+0x6b3/0x760 [ 622.953852][T19483] ? __dev_queue_xmit+0x29b/0x3820 [ 622.953876][T19483] ? __lock_acquire+0x683/0x2cf0 [ 622.953910][T19483] ? skb_set_owner_w+0x263/0x3d0 [ 622.953937][T19483] ? __pfx___dev_queue_xmit+0x10/0x10 [ 622.953960][T19483] ? sock_alloc_send_pskb+0x896/0x990 [ 622.953993][T19483] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 622.954041][T19483] ? __pfx_packet_parse_headers+0x10/0x10 [ 622.954102][T19483] ? packet_xmit+0x68/0x330 [ 622.954136][T19483] packet_sendmsg+0x3d95/0x5040 [ 622.954162][T19483] ? aa_file_perm+0x18b/0x15f0 [ 622.954225][T19483] ? __lock_acquire+0x683/0x2cf0 [ 622.954272][T19483] ? __pfx_packet_sendmsg+0x10/0x10 [ 622.954311][T19483] ? __might_fault+0xaf/0x130 [ 622.954336][T19483] ? __pfx_aa_sk_perm+0x10/0x10 [ 622.954374][T19483] ? aa_sock_msg_perm+0xf1/0x1b0 [ 622.954403][T19483] ? __pfx_packet_sendmsg+0x10/0x10 [ 622.954427][T19483] sock_sendmsg_nosec+0x13a/0x180 [ 622.954460][T19483] __sys_sendto+0x408/0x5a0 [ 622.954519][T19483] ? ksys_write+0x1e6/0x270 [ 622.954557][T19483] ? __pfx___sys_sendto+0x10/0x10 [ 622.954595][T19483] ? __mutex_unlock_slowpath+0x731/0x900 [ 622.954657][T19483] ? __pfx_ksys_write+0x10/0x10 [ 622.954696][T19483] __x64_sys_sendto+0xde/0x100 [ 622.954731][T19483] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 622.954756][T19483] do_syscall_64+0x174/0x580 [ 622.954779][T19483] ? trace_irq_disable+0x3b/0x140 [ 622.954808][T19483] ? clear_bhb_loop+0x40/0x90 [ 622.954836][T19483] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 622.954859][T19483] RIP: 0033:0x7fbf6699de99 [ 622.954880][T19483] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 622.954899][T19483] RSP: 002b:00007fbf67807028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 622.954924][T19483] RAX: ffffffffffffffda RBX: 00007fbf66c25fa0 RCX: 00007fbf6699de99 [ 622.954939][T19483] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 622.954953][T19483] RBP: 00007fbf67807090 R08: 0000200000000400 R09: 0000000000000014 [ 622.954967][T19483] R10: 0000000000008884 R11: 0000000000000246 R12: 0000000000000001 [ 622.954981][T19483] R13: 00007fbf66c26038 R14: 00007fbf66c25fa0 R15: 00007ffcfc52ba28 [ 622.955018][T19483] [ 623.448356][ T156] bond4: (slave bridge1): failed to get link speed/duplex [ 623.678365][T19490] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 623.681703][ T7010] bond4: (slave bridge1): failed to get link speed/duplex [ 623.869842][ T48] bond4: (slave bridge1): failed to get link speed/duplex [ 623.878483][T19500] __nla_validate_parse: 1 callbacks suppressed [ 623.878502][T19500] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3516'. [ 623.933975][T19500] netlink: 'syz.4.3516': attribute type 2 has an invalid length. [ 623.943114][T19503] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3516'. [ 623.966847][T19500] netlink: 'syz.4.3516': attribute type 1 has an invalid length. [ 624.001856][T19500] netlink: 116 bytes leftover after parsing attributes in process `syz.4.3516'. [ 624.033600][ T7035] bond4: (slave bridge1): failed to get link speed/duplex [ 624.433085][T19528] FAULT_INJECTION: forcing a failure. [ 624.433085][T19528] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 624.460858][T19528] CPU: 0 UID: 0 PID: 19528 Comm: syz.0.3525 Not tainted syzkaller #0 PREEMPT(full) [ 624.460887][T19528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 624.460901][T19528] Call Trace: [ 624.460909][T19528] [ 624.460919][T19528] dump_stack_lvl+0xe8/0x150 [ 624.460972][T19528] should_fail_ex+0x40c/0x560 [ 624.461007][T19528] _copy_from_user+0x2d/0xb0 [ 624.461041][T19528] kstrtouint_from_user+0xd6/0x180 [ 624.461073][T19528] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 624.461125][T19528] proc_fail_nth_write+0x8e/0x210 [ 624.461191][T19528] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 624.461231][T19528] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 624.461261][T19528] vfs_write+0x296/0xba0 [ 624.461305][T19528] ? __pfx_vfs_write+0x10/0x10 [ 624.461340][T19528] ? __fget_files+0x2a/0x420 [ 624.461374][T19528] ? __fget_files+0x3a2/0x420 [ 624.461401][T19528] ? __fget_files+0x2a/0x420 [ 624.461440][T19528] ksys_write+0x150/0x270 [ 624.461477][T19528] ? __pfx_ksys_write+0x10/0x10 [ 624.461521][T19528] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.461546][T19528] do_syscall_64+0x174/0x580 [ 624.461569][T19528] ? trace_irq_disable+0x3b/0x140 [ 624.461596][T19528] ? clear_bhb_loop+0x40/0x90 [ 624.461624][T19528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.461646][T19528] RIP: 0033:0x7f62ed75e6ce [ 624.461667][T19528] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 624.461685][T19528] RSP: 002b:00007f62ee6a1fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 624.461708][T19528] RAX: ffffffffffffffda RBX: 00007f62ee6a26c0 RCX: 00007f62ed75e6ce [ 624.461724][T19528] RDX: 0000000000000001 RSI: 00007f62ee6a20a0 RDI: 0000000000000005 [ 624.461737][T19528] RBP: 00007f62ee6a2090 R08: 0000000000000000 R09: 0000000000000000 [ 624.461751][T19528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 624.461763][T19528] R13: 00007f62eda26038 R14: 00007f62eda25fa0 R15: 00007fff071e1b38 [ 624.461798][T19528] [ 625.072267][T19534] lo speed is unknown, defaulting to 1000 [ 625.152852][T19536] netlink: 'syz.0.3528': attribute type 1 has an invalid length. [ 625.567296][T19545] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3530'. [ 625.869945][T19548] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.074321][T19552] dvmrp0: entered allmulticast mode [ 626.583716][T19534] lo speed is unknown, defaulting to 1000 [ 627.012458][T19589] geneve1: entered allmulticast mode [ 627.209773][ T48] net_ratelimit: 22 callbacks suppressed [ 627.209794][ T48] bond4: (slave bridge1): failed to get link speed/duplex [ 627.492632][ T7035] bond4: (slave bridge1): failed to get link speed/duplex [ 627.503090][T19600] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3540'. [ 627.526059][T19601] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3541'. [ 627.551690][ T5282] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 627.620272][ T7035] bond4: (slave bridge1): failed to get link speed/duplex [ 627.774528][ T7001] bond4: (slave bridge1): failed to get link speed/duplex [ 627.924041][ T7035] bond4: (slave bridge1): failed to get link speed/duplex [ 628.072176][ T7001] bond4: (slave bridge1): failed to get link speed/duplex [ 628.090830][T19624] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3547'. [ 628.247746][ T7035] bond4: (slave bridge1): failed to get link speed/duplex [ 628.269870][T19634] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3549'. [ 628.367808][T19636] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3549'. [ 628.378917][T19634] ipvlan2: entered promiscuous mode [ 628.432738][T19641] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3551'. [ 628.448257][T19634] bridge0: port 3(ipvlan2) entered blocking state [ 628.461161][T19634] bridge0: port 3(ipvlan2) entered disabled state [ 628.467874][T19634] ipvlan2: entered allmulticast mode [ 628.473585][T19634] bridge0: entered allmulticast mode [ 628.486054][T19634] ipvlan2: left allmulticast mode [ 628.494855][T19634] bridge0: left allmulticast mode [ 628.556058][T19641] batman_adv: batadv0: Adding interface: vlan3 [ 628.577968][T19641] batman_adv: batadv0: The MTU of interface vlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 628.611661][T19641] batman_adv: batadv0: Not using interface vlan3 (retrying later): interface not active [ 628.650479][ T12] bond4: (slave bridge1): failed to get link speed/duplex [ 628.769697][ T7035] bond4: (slave bridge1): failed to get link speed/duplex [ 628.781165][ T7405] IPVS: starting estimator thread 0... [ 628.878027][T19660] netlink: 'syz.0.3558': attribute type 3 has an invalid length. [ 628.887427][T19657] IPVS: using max 35 ests per chain, 84000 per kthread [ 628.917602][ T7001] bond4: (slave bridge1): failed to get link speed/duplex [ 628.942633][T19656] nbd3: detected capacity change from 0 to 63 [ 628.965051][ T5628] block nbd3: Receive control failed (result -32) [ 628.985743][ T4948] block nbd3: Dead connection, failed to find a fallback [ 628.995720][ T4948] block nbd3: shutting down sockets [ 629.004924][ T4948] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 629.018571][ T4948] Buffer I/O error on dev nbd3, logical block 0, async page read [ 629.031087][ T4948] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 629.041655][ T4948] Buffer I/O error on dev nbd3, logical block 1, async page read [ 629.052775][ T4948] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 629.064710][ T4948] Buffer I/O error on dev nbd3, logical block 2, async page read [ 629.073131][ T4948] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 629.082422][ T4948] Buffer I/O error on dev nbd3, logical block 3, async page read [ 629.108750][ T4948] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 629.118375][ T4948] Buffer I/O error on dev nbd3, logical block 0, async page read [ 629.127270][ T4948] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 629.136702][ T4948] Buffer I/O error on dev nbd3, logical block 1, async page read [ 629.144894][ T4948] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 629.154286][ T4948] Buffer I/O error on dev nbd3, logical block 2, async page read [ 629.162318][ T4948] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 629.171541][ T4948] Buffer I/O error on dev nbd3, logical block 3, async page read [ 629.179494][ T4948] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 629.188761][ T4948] Buffer I/O error on dev nbd3, logical block 0, async page read [ 629.197016][ T4948] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 629.206288][ T4948] Buffer I/O error on dev nbd3, logical block 1, async page read [ 629.218423][T19471] ldm_validate_partition_table(): Disk read failed. [ 629.236127][T19471] Dev nbd3: unable to read RDB block 0 [ 629.248002][T19471] nbd3: unable to read partition table [ 629.306505][T19471] ldm_validate_partition_table(): Disk read failed. [ 629.324050][T19471] Dev nbd3: unable to read RDB block 0 [ 629.325445][T19666] __nla_validate_parse: 4 callbacks suppressed [ 629.325497][T19666] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3560'. [ 629.344153][T19471] nbd3: unable to read partition table [ 629.444491][T19666] netlink: 'syz.1.3560': attribute type 10 has an invalid length. [ 629.497032][T19667] netlink: 'syz.1.3560': attribute type 1 has an invalid length. [ 629.501582][T19676] 0·: left allmulticast mode [ 629.516606][T19676] hsr_slave_0: left allmulticast mode [ 629.522896][T19676] hsr_slave_1: left allmulticast mode [ 629.526673][T19667] netlink: 'syz.1.3560': attribute type 2 has an invalid length. [ 629.555469][T19676] macvlan0: left promiscuous mode [ 629.566832][T19676] 8021q: adding VLAN 0 to HW filter on device bond3 [ 629.580354][T19676] 8021q: adding VLAN 0 to HW filter on device bond4 [ 629.588742][T19676] ipip0: left promiscuous mode [ 629.594896][T19676] ipip0: left allmulticast mode [ 629.746220][T19677] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 629.828095][T19677] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 630.118669][T19683] syzkaller0: entered promiscuous mode [ 630.132030][T19683] syzkaller0: entered allmulticast mode [ 630.225843][T19697] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3567'. [ 630.331801][T19700] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3567'. [ 630.544764][T19697] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3567'. [ 630.545119][T19703] bond1 (unregistering): Released all slaves [ 630.604761][T19709] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3570'. [ 630.648265][T19712] netlink: 193 bytes leftover after parsing attributes in process `syz.3.3571'. [ 630.916178][T19723] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3572'. [ 630.967023][T19719] bond5: option lacp_rate: invalid value (3) [ 630.995122][T19719] bond5 (unregistering): Released all slaves [ 631.094598][T19728] netlink: 'syz.2.3574': attribute type 3 has an invalid length. [ 631.304299][T19738] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3579'. [ 631.326734][T19736] netlink: 'syz.0.3578': attribute type 1 has an invalid length. [ 631.443864][T19736] bond5: entered promiscuous mode [ 631.449736][T19736] 8021q: adding VLAN 0 to HW filter on device bond5 [ 631.459805][ T5628] Bluetooth: hci0: command tx timeout [ 631.493232][T19736] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3578'. [ 631.502753][T19736] bond5: entered allmulticast mode [ 631.546502][T19750] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3581'. [ 631.727415][T19759] dummy0: entered promiscuous mode [ 631.801736][T19759] dummy0 (unregistering): left promiscuous mode [ 632.219772][ T48] net_ratelimit: 17 callbacks suppressed [ 632.219795][ T48] bond4: (slave bridge1): failed to get link speed/duplex [ 632.305345][T19789] FAULT_INJECTION: forcing a failure. [ 632.305345][T19789] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 632.320388][T19789] CPU: 1 UID: 0 PID: 19789 Comm: syz.3.3592 Not tainted syzkaller #0 PREEMPT(full) [ 632.320417][T19789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 632.320434][T19789] Call Trace: [ 632.320443][T19789] [ 632.320452][T19789] dump_stack_lvl+0xe8/0x150 [ 632.320490][T19789] should_fail_ex+0x40c/0x560 [ 632.320523][T19789] _copy_from_user+0x2d/0xb0 [ 632.320556][T19789] __sys_sendto+0x2a9/0x5a0 [ 632.320589][T19789] ? ksys_write+0x1e6/0x270 [ 632.320625][T19789] ? __pfx___sys_sendto+0x10/0x10 [ 632.320655][T19789] ? __mutex_unlock_slowpath+0x731/0x900 [ 632.320712][T19789] ? __pfx_ksys_write+0x10/0x10 [ 632.320751][T19789] __x64_sys_sendto+0xde/0x100 [ 632.320784][T19789] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.320808][T19789] do_syscall_64+0x174/0x580 [ 632.320830][T19789] ? trace_irq_disable+0x3b/0x140 [ 632.320857][T19789] ? clear_bhb_loop+0x40/0x90 [ 632.320884][T19789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.320907][T19789] RIP: 0033:0x7fe85e59de99 [ 632.320926][T19789] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 632.320945][T19789] RSP: 002b:00007fe85f500028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 632.320968][T19789] RAX: ffffffffffffffda RBX: 00007fe85e825fa0 RCX: 00007fe85e59de99 [ 632.320985][T19789] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 632.320997][T19789] RBP: 00007fe85f500090 R08: 0000200000000400 R09: 0000000000000014 [ 632.321011][T19789] R10: 0000000000008884 R11: 0000000000000246 R12: 0000000000000001 [ 632.321024][T19789] R13: 00007fe85e826038 R14: 00007fe85e825fa0 R15: 00007ffd66d38e08 [ 632.321060][T19789] [ 632.334465][T19790] netlink: 'syz.2.3593': attribute type 28 has an invalid length. [ 632.370291][ T7001] bond4: (slave bridge1): failed to get link speed/duplex [ 632.644759][T19798] tipc: Invalid UDP bearer configuration [ 632.644816][T19798] tipc: Enabling of bearer rejected, failed to enable media [ 632.742994][ T7001] bond4: (slave bridge1): failed to get link speed/duplex [ 632.860800][ T48] bond4: (slave bridge1): failed to get link speed/duplex [ 632.979769][ T13] bond4: (slave bridge1): failed to get link speed/duplex [ 633.088250][T19814] can: request_module (can-proto-0) failed. [ 633.100198][ T7012] bond4: (slave bridge1): failed to get link speed/duplex [ 633.189373][T19814] batman_adv: batadv0: Adding interface: dummy0 [ 633.205610][T19814] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 633.243437][T19814] batman_adv: batadv0: Interface activated: dummy0 [ 633.267110][T19824] batadv0: mtu less than device minimum [ 633.275794][T19824] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 633.290182][T19824] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 633.303027][T19824] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 633.733957][T19835] batman_adv: batadv0: Adding interface: ip6gretap1 [ 633.754315][T19835] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 633.808486][T19835] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 634.441596][T19873] __nla_validate_parse: 10 callbacks suppressed [ 634.441616][T19873] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3617'. [ 634.462888][T19869] syzkaller0: entered promiscuous mode [ 634.468665][T19869] syzkaller0: entered allmulticast mode [ 634.491195][T19874] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 634.511016][T19873] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 634.671555][T19886] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3618'. [ 637.768349][T19894] tipc: Enabling of bearer rejected, failed to enable media [ 637.780099][ T7012] net_ratelimit: 24 callbacks suppressed [ 637.780118][ T7012] bond4: (slave bridge1): failed to get link speed/duplex [ 637.912608][ T7001] bond4: (slave bridge1): failed to get link speed/duplex [ 637.970343][T19913] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 638.040277][ T7001] bond4: (slave bridge1): failed to get link speed/duplex [ 638.047972][T19917] xt_TCPMSS: Only works on TCP SYN packets [ 638.179742][ T7001] bond4: (slave bridge1): failed to get link speed/duplex [ 638.185613][T19915] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3623'. [ 638.320942][ T7001] bond4: (slave bridge1): failed to get link speed/duplex [ 638.367474][T19934] netlink: 'syz.2.3628': attribute type 1 has an invalid length. [ 638.392420][T19934] netlink: 124 bytes leftover after parsing attributes in process `syz.2.3628'. [ 638.413791][T19934] netlink: 124 bytes leftover after parsing attributes in process `syz.2.3628'. [ 638.591004][ T7024] bond4: (slave bridge1): failed to get link speed/duplex [ 638.735555][ T156] bond4: (slave bridge1): failed to get link speed/duplex [ 638.880276][ T7001] bond4: (slave bridge1): failed to get link speed/duplex [ 639.012024][ T13] bond4: (slave bridge1): failed to get link speed/duplex [ 639.127007][T19963] syzkaller1: entered promiscuous mode [ 639.159775][T19963] syzkaller1: entered allmulticast mode [ 639.244988][T19972] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3635'. [ 639.296062][T19970] vlan2: entered allmulticast mode [ 639.341344][T19976] sctp: [Deprecated]: syz.3.3638 (pid 19976) Use of struct sctp_assoc_value in delayed_ack socket option. [ 639.341344][T19976] Use struct sctp_sack_info instead [ 639.386984][T19970] bond0: entered allmulticast mode [ 639.406945][T19970] bond_slave_0: entered allmulticast mode [ 639.436354][T19970] bond_slave_1: entered allmulticast mode [ 639.650425][T19980] netlink: 'syz.3.3639': attribute type 1 has an invalid length. [ 639.728302][T19980] bond0: entered promiscuous mode [ 639.734795][T19980] 8021q: adding VLAN 0 to HW filter on device bond0 [ 639.888406][T19980] bond0: (slave veth3): making interface the new active one [ 639.896569][T19980] veth3: entered promiscuous mode [ 639.904189][T19980] bond0: (slave veth3): Enslaving as an active interface with an up link [ 639.980623][T19993] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 639.995529][T19998] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3644'. [ 640.024894][T19993] bond1 (unregistering): Released all slaves [ 640.077306][T19998] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3644'. [ 640.164789][T20007] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3648'. [ 640.184820][T20008] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3648'. [ 640.348309][T20007] 8021q: adding VLAN 0 to HW filter on device bond4 [ 640.457023][T20022] netlink: 92 bytes leftover after parsing attributes in process `syz.3.3649'. [ 640.673877][T20026] netlink: 'syz.4.3651': attribute type 1 has an invalid length. [ 640.743786][T20028] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3651'. [ 640.871181][T20026] 8021q: adding VLAN 0 to HW filter on device bond5 [ 640.895534][T20029] bond5 (unregistering): Released all slaves [ 640.909492][T20036] netlink: 260 bytes leftover after parsing attributes in process `syz.3.3654'. [ 640.993654][T20036] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3654'. [ 641.047047][T20039] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3655'. [ 641.057415][T20040] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3654'. [ 641.100108][T20036] raw_sendmsg: syz.3.3654 forgot to set AF_INET. Fix it! [ 641.197377][T20036] vlan4: entered promiscuous mode [ 641.296160][T20045] vcan0: tx drop: invalid sa for name 0xfffffffffffffffe [ 641.356187][T20045] netlink: 'syz.0.3658': attribute type 1 has an invalid length. [ 641.562991][T20061] tc_dump_action: action bad kind [ 642.325003][T20095] ipt_ECN: cannot use operation on non-tcp rule [ 642.507626][T20102] netlink: 'syz.4.3673': attribute type 4 has an invalid length. [ 642.551406][T20102] netlink: 'syz.4.3673': attribute type 4 has an invalid length. [ 642.790685][ T13] net_ratelimit: 17 callbacks suppressed [ 642.790707][ T13] bond4: (slave bridge1): failed to get link speed/duplex [ 642.941294][ T13] bond4: (slave bridge1): failed to get link speed/duplex [ 643.032377][T20127] netlink: 'syz.4.3679': attribute type 1 has an invalid length. [ 643.107853][T20127] 8021q: adding VLAN 0 to HW filter on device bond5 [ 643.120188][ T7035] bond4: (slave bridge1): failed to get link speed/duplex [ 643.189878][T20130] bond5: (slave gretap1): making interface the new active one [ 643.200741][T20130] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 643.337957][T20127] bond5 (unregistering): (slave gretap1): Releasing active interface [ 643.367311][T20127] bond5 (unregistering): Released all slaves [ 643.380983][T20148] netlink: 'syz.3.3682': attribute type 1 has an invalid length. [ 643.435665][T20134] batman_adv: batadv0: Adding interface: gretap1 [ 643.443886][T20134] batman_adv: batadv0: Interface activated: gretap1 [ 643.569970][ T7001] bond4: (slave bridge1): failed to get link speed/duplex [ 643.712025][ T13] bond4: (slave bridge1): failed to get link speed/duplex [ 643.778642][T20163] xt_TCPMSS: Only works on TCP SYN packets [ 646.301172][T20188] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 646.303277][T20193] batman_adv: batadv0: Adding interface: dummy0 [ 646.341789][T20193] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 646.392099][T20193] batman_adv: batadv0: Interface activated: dummy0 [ 646.426239][T20206] netlink: 'syz.3.3699': attribute type 1 has an invalid length. [ 646.542266][ T156] bond4: (slave bridge1): failed to get link speed/duplex [ 646.551232][T20208] netlink: 'syz.0.3700': attribute type 7 has an invalid length. [ 646.568957][T20208] __nla_validate_parse: 11 callbacks suppressed [ 646.568977][T20208] netlink: 232 bytes leftover after parsing attributes in process `syz.0.3700'. [ 646.589317][T20208] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3700'. [ 646.674489][ T7035] bond4: (slave bridge1): failed to get link speed/duplex [ 646.801892][ T7024] bond4: (slave bridge1): failed to get link speed/duplex [ 646.940084][ T156] bond4: (slave bridge1): failed to get link speed/duplex [ 647.070377][ T7010] bond4: (slave bridge1): failed to get link speed/duplex [ 647.111772][T20240] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 647.365046][T20257] nbd: must specify at least one socket [ 647.431500][T20266] netlink: 'syz.2.3714': attribute type 9 has an invalid length. [ 647.538539][T20270] netlink: 'syz.0.3716': attribute type 1 has an invalid length. [ 647.625103][T20270] bond6: entered promiscuous mode [ 647.642099][T20270] bond6: entered allmulticast mode [ 647.648235][T20270] 8021q: adding VLAN 0 to HW filter on device bond6 [ 647.666472][T20278] erspan1: entered allmulticast mode [ 647.730479][T20278] bond6: (slave erspan1): making interface the new active one [ 647.801805][T20278] erspan1: entered promiscuous mode [ 647.855834][T20275] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3714'. [ 647.901972][T20278] bond6: (slave erspan1): Enslaving as an active interface with an up link [ 647.952201][ T7001] net_ratelimit: 4 callbacks suppressed [ 647.952229][ T7001] bond4: (slave bridge1): failed to get link speed/duplex [ 648.080284][ T7001] bond4: (slave bridge1): failed to get link speed/duplex [ 648.219786][ T156] bond4: (slave bridge1): failed to get link speed/duplex [ 648.340573][ T7010] bond4: (slave bridge1): failed to get link speed/duplex [ 648.468133][ T5628] block nbd4: Receive control failed (result -32) [ 648.480402][ T7035] bond4: (slave bridge1): failed to get link speed/duplex [ 648.605678][T20322] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3725'. [ 648.632939][ T7010] bond4: (slave bridge1): failed to get link speed/duplex [ 648.770380][ T7024] bond4: (slave bridge1): failed to get link speed/duplex [ 648.924230][T20339] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3728'. [ 649.020314][ T7010] bond4: (slave bridge1): failed to get link speed/duplex [ 649.555191][T20364] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3733'. [ 653.100680][T20382] erspan0: left allmulticast mode [ 653.120534][T20382] erspan0: left promiscuous mode [ 653.125856][T20382] bridge2: port 1(erspan0) entered disabled state [ 653.184104][T20382] bridge_slave_0: left allmulticast mode [ 653.202463][T20382] bridge_slave_0: left promiscuous mode [ 653.213748][T20382] bridge0: port 1(bridge_slave_0) entered disabled state [ 653.256651][T20398] netlink: 'syz.4.3738': attribute type 13 has an invalid length. [ 653.611118][T20382] bridge_slave_1: left allmulticast mode [ 653.668475][T20382] bridge_slave_1: left promiscuous mode [ 653.676740][T20382] bridge0: port 2(bridge_slave_1) entered disabled state [ 653.695050][T20382] .`: (slave bond_slave_0): Releasing backup interface [ 653.705227][T20382] .`: (slave bond_slave_1): Releasing backup interface [ 653.724559][T20382] team0: Port device team_slave_0 removed [ 653.737778][T20382] team0: Port device team_slave_1 removed [ 653.744709][T20382] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 653.753340][T20382] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 653.763022][T20382] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 653.780171][ T48] bond4: (slave bridge1): failed to get link speed/duplex [ 653.821014][T20390] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 653.931466][T20403] tipc: Enabled bearer , priority 0 [ 654.113113][T20404] tipc: Resetting bearer [ 654.125769][T20394] tipc: Resetting bearer [ 654.151051][T20413] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 654.668943][T20425] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3745'. [ 657.216784][T20394] tipc: Disabling bearer [ 657.279905][ T6995] bond4: (slave bridge1): failed to get link speed/duplex [ 657.329905][T20448] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3750'. [ 657.370036][ T50] Bluetooth: hci0: command 0x0406 tx timeout [ 657.462695][ T6995] bond4: (slave bridge1): failed to get link speed/duplex [ 657.482672][T20454] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3750'. [ 660.161828][ T7010] bond4: (slave bridge1): failed to get link speed/duplex [ 660.301852][ T48] bond4: (slave bridge1): failed to get link speed/duplex [ 660.430311][ T6995] bond4: (slave bridge1): failed to get link speed/duplex [ 660.550829][ T7010] bond4: (slave bridge1): failed to get link speed/duplex [ 660.740412][ T48] bond4: (slave bridge1): failed to get link speed/duplex [ 660.850365][ T7010] bond4: (slave bridge1): failed to get link speed/duplex [ 660.972537][ T12] bond4: (slave bridge1): failed to get link speed/duplex [ 661.109838][ T12] bond4: (slave bridge1): failed to get link speed/duplex [ 661.143453][T20533] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3772'. [ 661.173274][T20533] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 661.207166][T20533] IPVS: sed: FWM 3 0x00000003 - no destination available [ 661.252883][ T7010] bond4: (slave bridge1): failed to get link speed/duplex [ 661.277304][T20535] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3773'. [ 661.490670][T20544] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3775'. [ 661.704547][T20556] SET target dimension over the limit! [ 661.713343][T20555] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3779'. [ 661.743693][T20558] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3780'. [ 661.775993][T20555] xt_TCPMSS: Only works on TCP SYN packets [ 666.608238][ T7021] net_ratelimit: 3 callbacks suppressed [ 666.608261][ T7021] bond4: (slave bridge1): failed to get link speed/duplex [ 666.759671][ T12] bond4: (slave bridge1): failed to get link speed/duplex [ 666.900290][ T7024] bond4: (slave bridge1): failed to get link speed/duplex [ 667.011866][T20622] sctp: [Deprecated]: syz.4.3794 (pid 20622) Use of int in maxseg socket option. [ 667.011866][T20622] Use struct sctp_assoc_value instead [ 667.061316][ T7021] bond4: (slave bridge1): failed to get link speed/duplex [ 667.183157][T20624] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 667.193900][T20629] (: renamed from bridge_slave_0 [ 667.334005][T20629] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3794'. [ 667.437456][T20634] tipc: Started in network mode [ 667.445019][T20634] tipc: Node identity caa16436195c, cluster identity 4711 [ 667.469473][T20634] tipc: Enabled bearer , priority 0 [ 667.489983][ T7021] bond4: (slave bridge1): failed to get link speed/duplex [ 667.512103][T20637] syzkaller0: entered promiscuous mode [ 667.517851][T20637] syzkaller0: entered allmulticast mode [ 667.748907][T20637] tipc: Resetting bearer [ 667.800773][T20645] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3800'. [ 667.848925][T20645] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3800'. [ 667.865559][T20642] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 667.880285][T20646] netlink: 'syz.1.3800': attribute type 5 has an invalid length. [ 667.891371][T20642] bond1 (unregistering): Released all slaves [ 667.933297][T20633] tipc: Resetting bearer [ 667.973356][T20633] tipc: Disabling bearer [ 668.004184][T20639] pim6reg1: entered promiscuous mode [ 668.018357][T20639] pim6reg1: entered allmulticast mode [ 668.115962][ T7010] bond4: (slave bridge1): failed to get link speed/duplex [ 668.401895][T20622] bond0: (slave netdevsim1): Releasing backup interface [ 668.534735][T20658] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3803'. [ 668.749845][ T12] bond4: (slave bridge1): failed to get link speed/duplex [ 668.757339][T20671] netlink: 'syz.2.3805': attribute type 1 has an invalid length. [ 668.775472][T20671] netlink: 'syz.2.3805': attribute type 1 has an invalid length. [ 668.891544][T20677] netlink: 'syz.2.3805': attribute type 1 has an invalid length. [ 668.916076][T20679] netlink: 'syz.0.3806': attribute type 13 has an invalid length. [ 668.925626][T20677] netlink: 'syz.2.3805': attribute type 1 has an invalid length. [ 669.006146][T20679] lo: refused to change device tx_queue_len [ 669.021041][T20679] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 669.104786][T20683] atomic_op ffff88802ac03998 conn xmit_atomic 0000000000000000 [ 669.284619][ T7021] bond4: (slave bridge1): failed to get link speed/duplex [ 669.381955][T20699] bond0: (slave ip6tnl0): refused to change device type [ 669.430843][ T7024] bond4: (slave bridge1): failed to get link speed/duplex [ 669.487156][T20699] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3812'. [ 669.520506][T20703] veth3: entered allmulticast mode [ 669.570579][T20712] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 669.695365][T20717] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3817'. [ 669.722262][ T5628] Bluetooth: hci4: link tx timeout [ 669.733031][T20721] netlink: 'syz.3.3819': attribute type 4 has an invalid length. [ 669.738339][ T5628] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 669.753067][ T5628] Bluetooth: hci4: link tx timeout [ 669.758244][ T5628] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 669.786411][T20721] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3819'. [ 669.866482][ T6789] IPVS: starting estimator thread 0... [ 669.922264][T20726] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3818'. [ 669.974664][T20725] IPVS: using max 26 ests per chain, 62400 per kthread [ 670.315727][T20737] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3824'. [ 670.588664][T20747] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3825'. [ 670.715722][T20756] syzkaller0: entered promiscuous mode [ 670.732675][T20756] syzkaller0: entered allmulticast mode [ 670.762145][T20756] sch_tbf: peakrate 4 is lower than or equals to rate 5 ! [ 670.996814][T20770] sctp: [Deprecated]: syz.1.3832 (pid 20770) Use of int in maxseg socket option. [ 670.996814][T20770] Use struct sctp_assoc_value instead [ 671.680504][ T7015] net_ratelimit: 14 callbacks suppressed [ 671.680528][ T7015] bond4: (slave bridge1): failed to get link speed/duplex [ 671.770502][ T5628] Bluetooth: hci4: command 0x0405 tx timeout [ 671.800865][ T7021] bond4: (slave bridge1): failed to get link speed/duplex [ 671.849371][T20778] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 671.920277][ T7021] bond4: (slave bridge1): failed to get link speed/duplex [ 672.029855][ T150] bond4: (slave bridge1): failed to get link speed/duplex [ 672.140298][ T6995] bond4: (slave bridge1): failed to get link speed/duplex [ 672.251007][ T6995] bond4: (slave bridge1): failed to get link speed/duplex [ 672.359811][ T48] bond4: (slave bridge1): failed to get link speed/duplex [ 672.470318][ T48] bond4: (slave bridge1): failed to get link speed/duplex [ 672.579802][ T48] bond4: (slave bridge1): failed to get link speed/duplex [ 672.690263][ T6995] bond4: (slave bridge1): failed to get link speed/duplex [ 673.577725][T20751] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 673.851263][ T5628] Bluetooth: hci4: command 0x0405 tx timeout [ 673.902910][T20791] __nla_validate_parse: 2 callbacks suppressed [ 673.902930][T20791] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3837'. [ 674.052108][T20794] team0 (unregistering): Port device team_slave_0 removed [ 674.062995][T20794] team0 (unregistering): Port device team_slave_1 removed [ 674.246152][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888054264c00: rx timeout, send abort [ 674.334229][T20810] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3842'. [ 674.348017][T20811] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3841'. [ 674.746329][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888054267400: rx timeout, send abort [ 674.758038][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888054264c00: abort rx timeout. Force session deactivation [ 675.254966][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888054267400: abort rx timeout. Force session deactivation [ 675.468406][T20842] gretap3: entered allmulticast mode [ 675.773640][ T31] audit: type=1804 audit(1784726068.946:4): pid=20870 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3857" name="/newroot/214/cgroup.controllers" dev="tmpfs" ino=1111 res=1 errno=0 [ 675.823419][ T31] audit: type=1800 audit(1784726068.946:5): pid=20870 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3857" name="cgroup.controllers" dev="tmpfs" ino=1111 res=0 errno=0 [ 675.887519][ T31] audit: type=1800 audit(1784726068.976:6): pid=20870 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3857" name="cgroup.controllers" dev="tmpfs" ino=1111 res=0 errno=0 [ 675.987757][T20870] sch_tbf: peakrate 11 is lower than or equals to rate 2048 ! [ 676.002911][T20877] netlink: 'syz.2.3859': attribute type 2 has an invalid length. [ 676.337210][T20854] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 676.574780][T20889] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3862'. [ 676.774058][ T12] net_ratelimit: 28 callbacks suppressed [ 676.774081][ T12] bond4: (slave bridge1): failed to get link speed/duplex [ 676.875100][T20902] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3866'. [ 676.901232][ T7405] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 676.912800][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 676.951313][ T7015] bond4: (slave bridge1): failed to get link speed/duplex [ 677.003096][T20911] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 677.099912][ T7015] bond4: (slave bridge1): failed to get link speed/duplex [ 677.221764][T20287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.230191][ T150] bond4: (slave bridge1): failed to get link speed/duplex [ 677.345044][T20927] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3875'. [ 677.358423][T20927] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 677.367888][T20287] IPVS: starting estimator thread 0... [ 677.383619][T20927] IPVS: sed: FWM 3 0x00000003 - no destination available [ 677.432825][T20925] bond7: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 677.469927][T20928] IPVS: using max 38 ests per chain, 91200 per kthread [ 677.487921][T20931] netlink: 'syz.1.3876': attribute type 27 has an invalid length. [ 677.497698][T20925] bond7: (slave lo): Enslaving as an active interface with an up link [ 677.547758][T20925] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 677.817419][T20936] syzkaller1: entered promiscuous mode [ 677.827166][T20936] syzkaller1: entered allmulticast mode [ 677.835953][T20951] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3880'. [ 677.847477][T20954] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3882'. [ 677.935160][T20956] Cannot find del_set index 2 as target [ 678.165960][T20961] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3887'. [ 678.225865][T20971] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 679.232264][T21001] lo speed is unknown, defaulting to 1000 [ 679.740955][T21034] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3897'. [ 679.923935][T21036] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3896'. [ 680.335076][T21051] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3900'. [ 680.451961][T21058] bridge0: port 4(ip6gretap0) entered blocking state [ 680.476130][T21058] bridge0: port 4(ip6gretap0) entered disabled state [ 680.502201][T21058] ip6gretap0: entered allmulticast mode [ 680.553523][T21058] ip6gretap0: entered promiscuous mode [ 680.578662][T21058] bridge0: port 4(ip6gretap0) entered blocking state [ 680.585676][T21058] bridge0: port 4(ip6gretap0) entered forwarding state [ 680.796462][T21072] netlink: 'syz.4.3905': attribute type 2 has an invalid length. [ 680.865754][T21001] lo speed is unknown, defaulting to 1000 [ 680.881752][T21068] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3903'. [ 681.099339][T21083] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3907'. [ 681.131457][T21083] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3907'. [ 681.267258][T21064] syzkaller0: entered promiscuous mode [ 681.289858][T21064] syzkaller0: entered allmulticast mode [ 684.734252][ T12] net_ratelimit: 33 callbacks suppressed [ 684.734275][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 684.751237][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.279692][ T48] bond4: (slave bridge1): failed to get link speed/duplex [ 685.297016][ T5282] veth0_macvtap: left promiscuous mode [ 685.341318][T21132] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 685.400330][ T12] bond4: (slave bridge1): failed to get link speed/duplex [ 685.509189][T21140] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3916'. [ 685.551008][ T7024] bond4: (slave bridge1): failed to get link speed/duplex [ 685.600073][T21140] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 685.655685][T21140] IPVS: sed: FWM 3 0x00000003 - no destination available [ 685.739957][ T7024] bond4: (slave bridge1): failed to get link speed/duplex [ 685.856287][T21146] IPv6: addrconf: prefix option has invalid lifetime [ 685.951722][T21152] sctp: [Deprecated]: syz.2.3919 (pid 21152) Use of struct sctp_assoc_value in delayed_ack socket option. [ 685.951722][T21152] Use struct sctp_sack_info instead [ 686.008748][T21153] netlink: 'syz.0.3918': attribute type 21 has an invalid length. [ 686.017008][T21154] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3919'. [ 686.068102][T21152] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3919'. [ 686.084827][T21143] syzkaller0: entered promiscuous mode [ 686.108328][T21143] syzkaller0: entered allmulticast mode [ 686.304998][T21154] batadv0: entered promiscuous mode [ 686.336133][T21154] macsec1: entered promiscuous mode [ 686.345075][T21154] macsec1: entered allmulticast mode [ 686.372791][T21154] batadv0: entered allmulticast mode [ 686.406455][T21154] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 686.413839][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.433921][T21154] batadv0: left allmulticast mode [ 686.445269][T21154] batadv0: left promiscuous mode [ 686.468928][T21153] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3918'. [ 689.761140][T21185] IPVS: set_ctl: invalid protocol: 46 0.0.0.0:20001 [ 689.859477][ T6995] net_ratelimit: 5 callbacks suppressed [ 689.866954][ T6995] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.870250][ T48] bond4: (slave bridge1): failed to get link speed/duplex [ 689.875380][ T6995] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.890596][ T6995] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.898877][ T6995] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.909931][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 690.051271][ T6995] bond4: (slave bridge1): failed to get link speed/duplex [ 690.075659][T21194] netlink: 180 bytes leftover after parsing attributes in process `syz.2.3926'. [ 690.162064][ T6995] bond4: (slave bridge1): failed to get link speed/duplex [ 690.172553][T21194] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3926'. [ 690.237426][T21201] netlink: 5 bytes leftover after parsing attributes in process `syz.3.3927'. [ 690.399296][T21199] lo speed is unknown, defaulting to 1000 [ 690.414297][ T7024] bond4: (slave bridge1): failed to get link speed/duplex [ 690.478814][T21212] veth0: entered promiscuous mode [ 690.495338][T21210] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3931'. [ 690.526402][T21212] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3932'. [ 690.539771][ T7015] bond4: (slave bridge1): failed to get link speed/duplex [ 690.672150][T21201] netlink: 'syz.3.3927': attribute type 4 has an invalid length. [ 691.079378][T21199] lo speed is unknown, defaulting to 1000 [ 691.088035][T21232] syzkaller0: entered promiscuous mode [ 691.096235][T21232] syzkaller0: entered allmulticast mode [ 691.105534][T21231] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3936'. [ 691.463632][T21246] netlink: 'syz.0.3943': attribute type 1 has an invalid length. [ 691.532228][T21249] netlink: 'syz.2.3944': attribute type 5 has an invalid length. [ 691.661865][T21250] batman_adv: batadv0: Interface deactivated: dummy0 [ 691.689050][T21250] batman_adv: batadv0: Removing interface: dummy0 [ 691.698569][T21249] sctp: [Deprecated]: syz.2.3944 (pid 21249) Use of int in max_burst socket option deprecated. [ 691.698569][T21249] Use struct sctp_assoc_value instead [ 691.771391][T21250] bond8: (slave dummy0): making interface the new active one [ 691.780983][T21250] bond8: (slave dummy0): Enslaving as an active interface with an up link [ 691.967431][T21253] bridge0: port 4(ip6gretap0) entered disabled state [ 691.977171][T21253] bridge0: port 3(vlan2) entered disabled state [ 691.983820][T21253] bridge0: port 2(bridge_slave_1) entered disabled state [ 691.991804][T21253] bridge0: port 1(bridge_slave_0) entered disabled state [ 692.204251][T21253] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 692.546935][T21253] batman_adv: batadv0: Interface deactivated: gretap1 [ 692.618786][ T7015] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 692.657249][ T7015] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 692.702116][ T7015] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 692.843081][T21275] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3948'. [ 692.884671][T21275] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3948'. [ 692.957247][T21276] sit0: entered promiscuous mode [ 692.975924][T21276] netlink: 'syz.2.3947': attribute type 1 has an invalid length. [ 692.995682][T21276] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3947'. [ 693.326441][T21294] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3954'. [ 693.382209][T21301] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3954'. [ 693.394289][T21288] syzkaller0: entered promiscuous mode [ 693.415758][T21288] syzkaller0: entered allmulticast mode [ 693.470628][T21302] xt_l2tp: v2 doesn't support IP mode [ 696.307353][T21295] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 696.350827][T21304] netlink: 'syz.0.3954': attribute type 1 has an invalid length. [ 696.367146][T21304] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3954'. [ 696.383510][T21304] workqueue: Failed to create a rescuer kthread for wq "phy3-mac-cmds": -EINTR [ 696.833581][T21333] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3958'. [ 696.852205][T21333] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3958'. [ 697.270638][ T7035] net_ratelimit: 9 callbacks suppressed [ 697.270661][ T7035] bond4: (slave bridge1): failed to get link speed/duplex [ 697.420153][ T7035] bond4: (slave bridge1): failed to get link speed/duplex [ 697.543635][T21348] netlink: 'syz.2.3963': attribute type 1 has an invalid length. [ 697.556859][ T48] bond4: (slave bridge1): failed to get link speed/duplex [ 697.687718][T21348] 8021q: adding VLAN 0 to HW filter on device bond1 [ 697.753646][ T156] bond4: (slave bridge1): failed to get link speed/duplex [ 697.779838][T21362] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3967'. [ 697.800710][T21348] syzkaller0: entered promiscuous mode [ 697.807050][T21348] syzkaller0: entered allmulticast mode [ 697.835426][T21362] syzkaller0: entered promiscuous mode [ 697.843860][T21362] syzkaller0: entered allmulticast mode [ 697.898444][T21348] bond1: (slave veth1): Enslaving as an active interface with a down link [ 697.925243][T21364] tipc: Started in network mode [ 697.938207][T21364] tipc: Node identity f25e62b29a3e, cluster identity 4711 [ 697.987643][T21364] tipc: Enabled bearer , priority 0 [ 698.065522][T21348] bond1 (unregistering): (slave veth1): Releasing active interface [ 698.099402][T21348] bond1 (unregistering): Released all slaves [ 698.159793][ T7015] bond4: (slave bridge1): failed to get link speed/duplex [ 698.176485][T21359] tipc: Disabling bearer [ 698.330623][ T7024] bond4: (slave bridge1): failed to get link speed/duplex [ 698.423888][T21383] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3970'. [ 698.514291][T21383] 8021q: adding VLAN 0 to HW filter on device bond1 [ 698.546294][T21388] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 698.620563][ T12] bond4: (slave bridge1): failed to get link speed/duplex [ 698.719056][T21397] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 698.741891][ T7035] bond4: (slave bridge1): failed to get link speed/duplex [ 698.758048][T21397] netlink: 'syz.4.3974': attribute type 1 has an invalid length. [ 698.826904][T21397] bond5: option mode: invalid value (8) [ 698.842295][T21397] bond5 (unregistering): Released all slaves [ 698.902588][ T7035] bond4: (slave bridge1): failed to get link speed/duplex [ 698.942806][T21397] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3974'. [ 698.982430][T21407] : renamed from dummy0 [ 699.066424][T21404] lo speed is unknown, defaulting to 1000 [ 699.696870][T21406] dvmrp0: entered allmulticast mode [ 699.708462][T21404] lo speed is unknown, defaulting to 1000 [ 699.986402][T21424] vlan5: entered allmulticast mode [ 699.996042][T21424] bond0: entered allmulticast mode [ 700.004479][T21424] veth3: entered allmulticast mode [ 700.067904][T21427] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3981'. [ 700.203369][T21431] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3984'. [ 700.222141][T21432] netlink: 'syz.4.3982': attribute type 1 has an invalid length. [ 700.381620][T21432] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3982'. [ 700.555916][ T31] audit: type=1107 audit(1784726093.726:7): pid=21448 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 701.026200][T21465] veth1_to_hsr: Caught tx_queue_len zero misconfig [ 702.144207][T21512] netlink: 'syz.3.3998': attribute type 1 has an invalid length. [ 702.176046][T21514] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3999'. [ 702.394057][T21516] bond2: (slave ip6erspan0): making interface the new active one [ 702.437036][T21516] bond2: (slave ip6erspan0): Enslaving as an active interface with an up link [ 702.492378][ T156] net_ratelimit: 21 callbacks suppressed [ 702.492400][ T156] bond4: (slave bridge1): failed to get link speed/duplex [ 702.639712][ T156] bond4: (slave bridge1): failed to get link speed/duplex [ 702.772799][ T12] bond4: (slave bridge1): failed to get link speed/duplex [ 702.910457][ T7027] bond4: (slave bridge1): failed to get link speed/duplex [ 703.019950][T21546] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4004'. [ 703.070453][ T156] bond4: (slave bridge1): failed to get link speed/duplex [ 703.201951][ T7015] bond4: (slave bridge1): failed to get link speed/duplex [ 703.373797][ T159] bond4: (slave bridge1): failed to get link speed/duplex [ 703.509800][ T7024] bond4: (slave bridge1): failed to get link speed/duplex [ 703.641392][ T7015] bond4: (slave bridge1): failed to get link speed/duplex [ 703.790367][ T7024] bond4: (slave bridge1): failed to get link speed/duplex [ 703.912870][T21575] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4009'. [ 704.507847][T21593] netlink: 'syz.1.4014': attribute type 21 has an invalid length. [ 704.518093][T21593] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4014'. [ 704.528332][T21593] netlink: 'syz.1.4014': attribute type 5 has an invalid length. [ 704.548144][T21593] netlink: 'syz.1.4014': attribute type 6 has an invalid length. [ 704.567325][T21593] netlink: 3 bytes leftover after parsing attributes in process `syz.1.4014'. [ 705.173614][T21620] netlink: 45 bytes leftover after parsing attributes in process `syz.0.4018'. [ 706.167832][T21633] netlink: 766 bytes leftover after parsing attributes in process `syz.0.4021'. [ 706.923045][T21657] netlink: 1072 bytes leftover after parsing attributes in process `syz.3.4025'. [ 707.430022][T21679] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4030'. [ 707.620418][ T12] net_ratelimit: 27 callbacks suppressed [ 707.620439][ T12] bond4: (slave bridge1): failed to get link speed/duplex [ 707.890387][ T12] bond4: (slave bridge1): failed to get link speed/duplex [ 707.900370][T21688] syzkaller0: entered promiscuous mode [ 707.914394][T21688] syzkaller0: entered allmulticast mode [ 707.947924][T21701] tipc: Enabled bearer , priority 0 [ 708.009219][T21707] IPVS: Scheduler module ip_vs_sip not found [ 708.030695][ T7027] bond4: (slave bridge1): failed to get link speed/duplex [ 708.132131][T21687] tipc: Resetting bearer [ 708.235671][T21687] tipc: Disabling bearer [ 708.261927][T21721] Cannot find add_set index 2 as target [ 708.341069][ T156] bond4: (slave bridge1): failed to get link speed/duplex [ 708.442454][T21725] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4041'. [ 708.472921][ T7027] bond4: (slave bridge1): failed to get link speed/duplex [ 708.548151][T21730] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4042'. [ 708.595304][T21733] netlink: 'syz.4.4043': attribute type 4 has an invalid length. [ 708.610196][ T7024] bond4: (slave bridge1): failed to get link speed/duplex [ 708.623337][T21733] netlink: 17 bytes leftover after parsing attributes in process `syz.4.4043'. [ 708.761866][ T6995] bond4: (slave bridge1): failed to get link speed/duplex [ 708.893608][ T7015] bond4: (slave bridge1): failed to get link speed/duplex [ 708.927644][T21747] ip6tnl0: Caught tx_queue_len zero misconfig [ 709.143316][ T6995] bond4: (slave bridge1): failed to get link speed/duplex [ 709.259683][ T6995] bond4: (slave bridge1): failed to get link speed/duplex [ 709.598786][T21771] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 709.866081][T21780] syzkaller1: entered promiscuous mode [ 709.872666][T21780] syzkaller1: entered allmulticast mode [ 710.205330][T21790] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4056'. [ 712.656441][T21774] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 712.667828][T21764] nbd: couldn't find a device at index 0 [ 712.691578][ T159] net_ratelimit: 29 callbacks suppressed [ 712.691598][ T159] bond4: (slave bridge1): failed to get link speed/duplex [ 712.928560][T21806] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4061'. [ 712.951171][T21804] gretap0: entered promiscuous mode [ 713.023853][ T7015] bond4: (slave bridge1): failed to get link speed/duplex [ 713.058456][T21804] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4059'. [ 713.124601][T21819] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4063'. [ 713.136891][T21819] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4063'. [ 713.419776][ T48] bond4: (slave bridge1): failed to get link speed/duplex [ 713.503355][T21834] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 713.590080][ T156] bond4: (slave bridge1): failed to get link speed/duplex [ 713.761096][ T6995] bond4: (slave bridge1): failed to get link speed/duplex [ 713.838916][T21854] netlink: 'syz.1.4069': attribute type 4 has an invalid length. [ 713.891176][T21854] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4069'. [ 713.908306][ T7024] nci: nci_rx_work: unknown MT 0x6 [ 714.111491][T21854] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 714.210783][ T7027] bond4: (slave bridge1): failed to get link speed/duplex [ 714.310356][T21869] x_tables: duplicate underflow at hook 2 [ 714.320377][ T7024] bond4: (slave bridge1): failed to get link speed/duplex [ 714.394118][T21876] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4077'. [ 714.405677][T21876] netlink: 121 bytes leftover after parsing attributes in process `syz.0.4077'. [ 714.439925][ T12] bond4: (slave bridge1): failed to get link speed/duplex [ 714.788380][T21891] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4081'. [ 714.797789][T21891] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4081'. [ 716.614292][T21850] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 716.865131][T21925] syzkaller0: entered promiscuous mode [ 716.872264][T21925] syzkaller0: entered allmulticast mode [ 717.066736][T21938] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4096'. [ 717.083144][T21938] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 717.534052][T21958] gre0: entered promiscuous mode [ 717.552672][T21958] gre0: entered allmulticast mode [ 717.710470][ T156] net_ratelimit: 30 callbacks suppressed [ 717.710494][ T156] bond4: (slave bridge1): failed to get link speed/duplex [ 717.839819][ T7024] bond4: (slave bridge1): failed to get link speed/duplex [ 717.861738][T21965] netlink: 'syz.3.4107': attribute type 8 has an invalid length. [ 717.950479][ T159] bond4: (slave bridge1): failed to get link speed/duplex [ 718.070435][ T156] bond4: (slave bridge1): failed to get link speed/duplex [ 718.126122][T21978] __nla_validate_parse: 2 callbacks suppressed [ 718.126144][T21978] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4111'. [ 718.190289][ T156] bond4: (slave bridge1): failed to get link speed/duplex [ 718.319923][ T156] bond4: (slave bridge1): failed to get link speed/duplex [ 718.393126][T21991] syzkaller0: entered promiscuous mode [ 718.411186][T21991] syzkaller0: entered allmulticast mode [ 718.789928][T22009] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4120'. [ 718.846206][T22004] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 718.870965][T22004] batman_adv: batadv0: Adding interface: gretap1 [ 718.877467][T22004] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 718.910229][T22004] batman_adv: batadv0: Interface activated: gretap1 [ 718.934119][T22004] batadv0: mtu less than device minimum [ 718.952991][T22004] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 718.966962][T22004] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 718.978830][T22004] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 719.128063][T22014] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4121'. [ 719.166529][T22018] netlink: 'syz.2.4124': attribute type 1 has an invalid length. [ 719.395260][T22030] IPVS: Unknown mcast interface: macsec0 [ 719.474343][T22028] lo speed is unknown, defaulting to 1000 [ 719.568623][T22035] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 719.594780][T22035] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 719.660877][T22035] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 719.681126][T22035] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 719.766545][T22043] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4131'. [ 719.849203][T22043] netlink: 284 bytes leftover after parsing attributes in process `syz.0.4131'. [ 719.871389][T22043] netlink: 11 bytes leftover after parsing attributes in process `syz.0.4131'. [ 719.900563][T22043] netlink: 284 bytes leftover after parsing attributes in process `syz.0.4131'. [ 719.927317][T22043] netlink: 11 bytes leftover after parsing attributes in process `syz.0.4131'. [ 719.977975][T22050] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4132'. [ 720.002161][T22050] netlink: 'syz.1.4132': attribute type 23 has an invalid length. [ 720.027918][T22045] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4131'. [ 720.458815][T22065] bond9: entered promiscuous mode [ 720.538377][T22063] xfrm0: entered allmulticast mode [ 720.623566][T22028] lo speed is unknown, defaulting to 1000 [ 720.643847][T22031] syzkaller0: entered promiscuous mode [ 720.676806][T22031] syzkaller0: entered allmulticast mode [ 721.333705][T22102] vlan4: entered promiscuous mode [ 721.338994][T22102] bridge0: entered promiscuous mode [ 722.740414][ T156] net_ratelimit: 43 callbacks suppressed [ 722.740438][ T156] bond4: (slave bridge1): failed to get link speed/duplex [ 722.910422][ T159] bond4: (slave bridge1): failed to get link speed/duplex [ 723.061557][ T156] bond4: (slave bridge1): failed to get link speed/duplex [ 723.096594][T22143] netlink: 'syz.1.4159': attribute type 7 has an invalid length. [ 723.185839][T22181] netlink: 'syz.2.4166': attribute type 13 has an invalid length. [ 723.210054][T22181] __nla_validate_parse: 6 callbacks suppressed [ 723.210075][T22181] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4166'. [ 723.239750][ T7024] bond4: (slave bridge1): failed to get link speed/duplex [ 723.269829][T22181] syz_tun: refused to change device tx_queue_len [ 723.287389][T22181] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 723.410669][ T156] bond4: (slave bridge1): failed to get link speed/duplex [ 723.550522][T22190] x_tables: duplicate underflow at hook 1 [ 723.570220][T22194] netlink: 108 bytes leftover after parsing attributes in process `syz.4.4168'. [ 723.634416][T22194] netlink: 80 bytes leftover after parsing attributes in process `syz.4.4168'. [ 723.817247][T22188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 723.971147][T22188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 723.999183][T22217] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4172'. [ 724.048254][T22188] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 724.102779][ T156] bridge0: port 1(() entered blocking state [ 724.108981][ T156] bridge0: port 1(() entered forwarding state [ 724.177758][ T156] bridge0: port 2(bridge_slave_1) entered blocking state [ 724.185118][ T156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 724.265739][T22216] tipc: Enabled bearer , priority 0 [ 724.291703][T22209] tipc: Resetting bearer [ 724.310696][T22217] syzkaller0: entered promiscuous mode [ 724.321877][T22217] syzkaller0: entered allmulticast mode [ 724.360686][ T159] bond4: (slave bridge1): failed to get link speed/duplex [ 724.390558][T22206] tipc: Resetting bearer [ 724.448448][T22206] tipc: Disabling bearer [ 724.490410][ T7027] bond4: (slave bridge1): failed to get link speed/duplex [ 724.555989][T22233] syzkaller0: entered allmulticast mode [ 724.656950][T22244] netlink: 124 bytes leftover after parsing attributes in process `syz.2.4179'. [ 724.730498][ T7015] bond4: (slave bridge1): failed to get link speed/duplex [ 724.829107][T22248] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4181'. [ 725.104613][T22257] syzkaller0: entered promiscuous mode [ 725.120350][T22257] syzkaller0: entered allmulticast mode [ 725.437818][T22276] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4188'. [ 725.824245][T22304] netlink: 'syz.2.4190': attribute type 4 has an invalid length. [ 726.006950][T22309] netlink: 'syz.4.4191': attribute type 12 has an invalid length. [ 726.019876][T22314] bond0: (slave ip6tnl0): refused to change device type [ 726.307224][T22330] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4198'. [ 726.526132][T22348] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4201'. [ 726.591574][T22346] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4201'. [ 726.788706][T22366] netlink: 'syz.3.4206': attribute type 7 has an invalid length. [ 726.797580][T22366] netlink: 'syz.3.4206': attribute type 8 has an invalid length. [ 726.807432][T22361] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 726.863385][T22366] lo speed is unknown, defaulting to 1000 [ 727.044443][T22374] netlink: 'syz.4.4208': attribute type 6 has an invalid length. [ 727.237293][T22384] syzkaller0: entered promiscuous mode [ 727.292811][T22384] tipc: Enabled bearer , priority 0 [ 727.307201][T22385] tipc: Enabling of bearer rejected, already enabled [ 727.378085][T22383] tipc: Resetting bearer [ 727.569317][T22383] tipc: Disabling bearer [ 727.650797][T22411] syzkaller0: entered promiscuous mode [ 727.716541][T22411] syzkaller0: entered allmulticast mode [ 727.793915][T22415] 8021q: VLANs not supported on dvmrp0 [ 727.823719][T22415] sctp: [Deprecated]: syz.4.4218 (pid 22415) Use of int in max_burst socket option. [ 727.823719][T22415] Use struct sctp_assoc_value instead [ 727.842241][ T7008] net_ratelimit: 20 callbacks suppressed [ 727.842264][ T7008] bond4: (slave bridge1): failed to get link speed/duplex [ 727.983403][ T7024] bond4: (slave bridge1): failed to get link speed/duplex [ 727.994116][T22406] lo speed is unknown, defaulting to 1000 [ 727.994132][T22366] lo speed is unknown, defaulting to 1000 [ 728.161098][T22298] bond4: (slave bridge1): failed to get link speed/duplex [ 728.421678][ T150] bond4: (slave bridge1): failed to get link speed/duplex [ 728.576346][ T7035] bond4: (slave bridge1): failed to get link speed/duplex [ 728.710394][ T7008] bond4: (slave bridge1): failed to get link speed/duplex [ 728.829965][ T7035] bond4: (slave bridge1): failed to get link speed/duplex [ 728.865953][T22439] __nla_validate_parse: 2 callbacks suppressed [ 728.865973][T22439] netlink: 1696 bytes leftover after parsing attributes in process `syz.0.4224'. [ 728.946473][T22406] lo speed is unknown, defaulting to 1000 [ 728.953188][ T150] bond4: (slave bridge1): failed to get link speed/duplex [ 729.300217][ T7035] bond4: (slave bridge1): failed to get link speed/duplex [ 729.640940][T22461] unsupported nlmsg_type 40 [ 729.729902][T22298] bond4: (slave bridge1): failed to get link speed/duplex [ 730.338759][T22492] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4237'. [ 730.441314][T22482] syzkaller0: entered promiscuous mode [ 730.464197][T22482] syzkaller0: entered allmulticast mode [ 730.473770][T22496] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4239'. [ 730.486242][T22496] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4239'. [ 730.528617][T22496] netlink: 'syz.3.4239': attribute type 10 has an invalid length. [ 730.541513][T22496] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 730.552746][T22496] .`: (slave netdevsim1): Enslaving as an active interface with an up link [ 731.500808][T22526] block nbd4: reconnected socket [ 731.999047][ T50] block nbd4: Receive control failed (result -32) [ 734.144277][T22298] net_ratelimit: 9 callbacks suppressed [ 734.144298][T22298] bond4: (slave bridge1): failed to get link speed/duplex [ 734.214725][T22513] lo speed is unknown, defaulting to 1000 [ 734.312085][ T7029] bond4: (slave bridge1): failed to get link speed/duplex [ 734.408656][T22532] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4248'. [ 734.440935][ T7008] bond4: (slave bridge1): failed to get link speed/duplex [ 734.650839][T22534] syzkaller0: entered promiscuous mode [ 734.675035][T22534] syzkaller0: entered allmulticast mode [ 734.724018][ T7029] bond4: (slave bridge1): failed to get link speed/duplex [ 734.891169][T22513] lo speed is unknown, defaulting to 1000 [ 734.893170][T22557] netlink: 'syz.2.4253': attribute type 1 has an invalid length. [ 734.936459][T22557] netlink: 232 bytes leftover after parsing attributes in process `syz.2.4253'. [ 734.972621][T22557] netlink: 'syz.2.4253': attribute type 1 has an invalid length. [ 735.012337][T22559] netlink: 'syz.2.4253': attribute type 1 has an invalid length. [ 735.041975][T22563] netlink: 'syz.1.4256': attribute type 1 has an invalid length. [ 735.046224][T22559] netlink: 256 bytes leftover after parsing attributes in process `syz.2.4253'. [ 735.060572][T22564] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4255'. [ 735.257792][T22575] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4257'. [ 735.406375][T22563] 8021q: adding VLAN 0 to HW filter on device bond1 [ 735.707416][T22583] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 738.623001][ T7024] bond4: (slave bridge1): failed to get link speed/duplex [ 738.713930][T22597] netlink: 'syz.2.4263': attribute type 1 has an invalid length. [ 738.864140][T22611] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4266'. [ 738.921972][T22597] 8021q: adding VLAN 0 to HW filter on device bond2 [ 738.942129][T22616] netlink: 'syz.1.4266': attribute type 1 has an invalid length. [ 738.982077][ T7035] bond4: (slave bridge1): failed to get link speed/duplex [ 739.006006][T22619] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4266'. [ 739.036975][T22619] block nbd5: Unsupported socket: should be TCP or UNIX. [ 739.089025][T22602] bond2: (slave veth3): Enslaving as an active interface with a down link [ 739.118978][T22609] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 739.140671][T22609] bond2: (slave batadv1): making interface the new active one [ 739.172489][T22609] batadv1: entered promiscuous mode [ 739.192442][T22609] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 739.210769][ T7008] bond4: (slave bridge1): failed to get link speed/duplex [ 739.427849][T22633] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4268'. [ 739.469686][T22633] netlink: 'syz.2.4268': attribute type 10 has an invalid length. [ 739.513048][T22633] netlink: 'syz.2.4268': attribute type 8 has an invalid length. [ 739.607082][T22633] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4268'. [ 739.834347][ T7008] bond4: (slave bridge1): failed to get link speed/duplex [ 739.959755][T22298] bond4: (slave bridge1): failed to get link speed/duplex [ 740.099888][ T150] bond4: (slave bridge1): failed to get link speed/duplex [ 740.232496][ T7035] bond4: (slave bridge1): failed to get link speed/duplex [ 740.293324][T22661] openvswitch: netlink: IP tunnel TTL not specified. [ 740.333957][T22663] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4275'. [ 740.357544][T22663] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4275'. [ 740.367831][T22298] bond4: (slave bridge1): failed to get link speed/duplex [ 740.480065][T22298] bond4: (slave bridge1): failed to get link speed/duplex [ 740.518085][T22671] Bluetooth: MGMT ver 1.23 [ 740.610130][ T150] bond4: (slave bridge1): failed to get link speed/duplex [ 740.714476][T22677] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4281'. [ 740.732284][T22679] netlink: 'syz.4.4283': attribute type 1 has an invalid length. [ 740.809131][T22684] netlink: 'syz.4.4283': attribute type 5 has an invalid length. [ 740.889426][T22688] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4284'. [ 740.941359][T22679] bond5: entered promiscuous mode [ 740.960856][T22679] 8021q: adding VLAN 0 to HW filter on device bond5 [ 741.079396][T22684] macvtap0: entered allmulticast mode [ 741.132477][ T7035] bond4: (slave bridge1): failed to get link speed/duplex [ 741.195677][T22696] macvtap1: entered allmulticast mode [ 741.328477][T22684] bond5: (slave bridge3): making interface the new active one [ 741.370653][T22684] bridge3: entered promiscuous mode [ 741.416885][T22684] bond5: (slave bridge3): Enslaving as an active interface with an up link [ 741.978326][T22726] lo speed is unknown, defaulting to 1000 [ 742.086467][T22728] bridge0: entered promiscuous mode [ 742.098209][T22728] bridge0: entered allmulticast mode [ 742.299452][T22740] netlink: 100 bytes leftover after parsing attributes in process `syz.2.4294'. [ 742.757725][T22749] netlink: 558 bytes leftover after parsing attributes in process `syz.2.4296'. [ 743.075093][T22771] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4299'. [ 743.107742][T22771] netlink: 'syz.0.4299': attribute type 22 has an invalid length. [ 743.117348][T22772] netlink: 100 bytes leftover after parsing attributes in process `syz.4.4298'. [ 743.296856][T22726] lo speed is unknown, defaulting to 1000 [ 743.544856][T22785] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 744.252243][ T7012] net_ratelimit: 16 callbacks suppressed [ 744.252273][ T7012] bond4: (slave bridge1): failed to get link speed/duplex [ 744.401179][ T7012] bond4: (slave bridge1): failed to get link speed/duplex [ 744.533678][ T7035] bond4: (slave bridge1): failed to get link speed/duplex [ 744.681627][ T7035] bond4: (slave bridge1): failed to get link speed/duplex [ 744.724004][T22828] __nla_validate_parse: 2 callbacks suppressed [ 744.724026][T22828] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4313'. [ 744.827036][T22830] netlink: 10 bytes leftover after parsing attributes in process `syz.0.4312'. [ 744.879687][ T150] bond4: (slave bridge1): failed to get link speed/duplex [ 745.001689][T22838] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4314'. [ 745.011138][ T7012] bond4: (slave bridge1): failed to get link speed/duplex [ 745.058929][T22840] netlink: 168 bytes leftover after parsing attributes in process `syz.2.4315'. [ 745.140622][ T150] bond4: (slave bridge1): failed to get link speed/duplex [ 745.280007][ T7012] bond4: (slave bridge1): failed to get link speed/duplex [ 745.309366][T22851] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4317'. [ 745.336179][T22849] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4318'. [ 745.366277][T22849] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4318'. [ 745.410695][ T7001] bond4: (slave bridge1): failed to get link speed/duplex [ 745.542782][ T7001] bond4: (slave bridge1): failed to get link speed/duplex [ 745.805061][T22883] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4326'. [ 745.935365][T22870] ip6erspan1: entered allmulticast mode [ 745.956737][T22881] lo speed is unknown, defaulting to 1000 [ 746.022504][T22888] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 746.710759][T22885] lo speed is unknown, defaulting to 1000 [ 746.718811][T22881] lo speed is unknown, defaulting to 1000 [ 747.113364][T22920] bond2: option resend_igmp: invalid value (2878) [ 747.154847][T22920] bond2: option resend_igmp: allowed values 0 - 255 [ 747.204451][T22920] bond2 (unregistering): Released all slaves [ 747.660803][T22926] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4338'. [ 747.671861][T22926] netlink: 200 bytes leftover after parsing attributes in process `syz.2.4338'. [ 747.697241][T22885] lo speed is unknown, defaulting to 1000 [ 747.968384][T22933] netlink: 'syz.1.4341': attribute type 16 has an invalid length. [ 749.321202][ T7021] net_ratelimit: 19 callbacks suppressed [ 749.321224][ T7021] bond4: (slave bridge1): failed to get link speed/duplex [ 749.449318][T22969] SET target dimension over the limit! [ 749.522739][ T7029] bond4: (slave bridge1): failed to get link speed/duplex [ 749.534829][T22969] netlink: 'syz.0.4349': attribute type 1 has an invalid length. [ 749.675864][T22969] 8021q: adding VLAN 0 to HW filter on device bond10 [ 749.749853][ T7029] bond4: (slave bridge1): failed to get link speed/duplex [ 749.870738][T22977] bond10: (slave veth3): Enslaving as an active interface with a down link [ 749.935365][T22969] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 749.959988][T22969] bond10: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 750.130407][ T7029] bond4: (slave bridge1): failed to get link speed/duplex [ 750.271375][ T7021] bond4: (slave bridge1): failed to get link speed/duplex [ 750.291333][T22986] netlink: 'syz.4.4353': attribute type 10 has an invalid length. [ 750.320905][T22986] __nla_validate_parse: 3 callbacks suppressed [ 750.320929][T22986] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4353'. [ 750.391605][ T7024] bond4: (slave bridge1): failed to get link speed/duplex [ 750.419920][ T7021] batadv1: left promiscuous mode [ 750.511545][ T7024] bond4: (slave bridge1): failed to get link speed/duplex [ 750.577248][T23000] netlink: 92 bytes leftover after parsing attributes in process `syz.0.4358'. [ 750.594219][T22998] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4359'. [ 750.660676][ T7001] bond4: (slave bridge1): failed to get link speed/duplex [ 750.800326][ T7035] bond4: (slave bridge1): failed to get link speed/duplex [ 750.838234][T23005] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4361'. [ 750.905779][T23012] tipc: Enabling of bearer rejected, failed to enable media [ 750.951245][T22298] bond4: (slave bridge1): failed to get link speed/duplex [ 751.048382][T23019] netlink: 'syz.0.4364': attribute type 4 has an invalid length. [ 751.078116][T23019] netlink: 'syz.0.4364': attribute type 4 has an invalid length. [ 751.231356][T23024] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4365'. [ 751.424034][T23034] xt_TPROXY: Can be used only with -p tcp or -p udp [ 751.653072][T23041] netlink: 'syz.0.4372': attribute type 16 has an invalid length. [ 751.670597][T23041] netlink: 'syz.0.4372': attribute type 17 has an invalid length. [ 751.860807][T23041] bridge0: port 4(ip6gretap0) entered blocking state [ 751.867914][T23041] bridge0: port 4(ip6gretap0) entered forwarding state [ 751.884990][T23041] 8021q: adding VLAN 0 to HW filter on device bond0 [ 751.909903][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 751.931844][T23041] 8021q: adding VLAN 0 to HW filter on device team0 [ 751.957383][T23041] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 752.045168][T23041] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 752.092639][T23041] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 752.115174][T23059] netlink: 'syz.4.4376': attribute type 1 has an invalid length. [ 752.116026][T23041] 0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 752.167630][T23061] netlink: 300 bytes leftover after parsing attributes in process `syz.3.4377'. [ 752.279532][T22298] bridge0: port 1(bridge_slave_0) entered blocking state [ 752.286784][T22298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 752.320069][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 752.354664][T22298] bridge0: port 2(bridge_slave_1) entered blocking state [ 752.361932][T22298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 752.451038][T23067] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4378'. [ 752.470470][ T7381] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 752.532514][T23059] 8021q: adding VLAN 0 to HW filter on device bond6 [ 752.581000][T21270] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 752.621599][T21270] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 752.662421][T21270] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 752.683809][T23052] lo speed is unknown, defaulting to 1000 [ 752.696088][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 752.717200][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 752.740333][T21267] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 752.774145][T21267] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 752.808229][T23075] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4380'. [ 752.881949][T23075] netlink: 'syz.1.4380': attribute type 6 has an invalid length. [ 752.918965][T23075] netlink: 'syz.1.4380': attribute type 7 has an invalid length. [ 753.358254][T23096] geneve0: entered promiscuous mode [ 753.380131][T23096] macvlan3: entered promiscuous mode [ 753.465101][T23105] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 753.538512][T23052] lo speed is unknown, defaulting to 1000 [ 754.149272][T23118] tipc: Failed to remove unknown binding: 66,0,0/0:2846775705/2846775707 [ 754.230075][T23118] tipc: Failed to remove unknown binding: 66,0,0/0:2846775705/2846775706 [ 754.266567][T23118] tipc: Failed to remove unknown binding: 66,0,0/0:2846775705/2846775707 [ 754.339806][T23118] tipc: Failed to remove unknown binding: 66,0,0/0:2846775705/2846775706 [ 754.349757][ T7035] net_ratelimit: 18 callbacks suppressed [ 754.349780][ T7035] bond4: (slave bridge1): failed to get link speed/duplex [ 754.379217][T23125] block nbd1: NBD_DISCONNECT [ 754.393187][T23125] block nbd1: Send disconnect failed -32 [ 754.448803][T23125] block nbd1: Send disconnect failed -32 [ 754.485305][T23125] block nbd1: shutting down sockets [ 754.541707][ T7024] bond4: (slave bridge1): failed to get link speed/duplex [ 754.691616][ T7012] bond4: (slave bridge1): failed to get link speed/duplex [ 754.843564][ T7012] bond4: (slave bridge1): failed to get link speed/duplex [ 754.971033][ T7024] bond4: (slave bridge1): failed to get link speed/duplex [ 754.993727][T23152] validate_nla: 3 callbacks suppressed [ 754.993778][T23152] netlink: 'syz.1.4395': attribute type 1 has an invalid length. [ 755.054765][T23156] netlink: 'syz.1.4395': attribute type 1 has an invalid length. [ 755.073238][T23153] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 755.090273][ T7029] bond4: (slave bridge1): failed to get link speed/duplex [ 755.104995][T23152] netlink: 'syz.1.4395': attribute type 4 has an invalid length. [ 755.149975][T23152] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.4395'. [ 755.159348][T23153] IPVS: sed: FWM 3 0x00000003 - no destination available [ 755.222605][T23156] netlink: 'syz.1.4395': attribute type 4 has an invalid length. [ 755.251828][ T7035] bond4: (slave bridge1): failed to get link speed/duplex [ 755.286320][T23156] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.4395'. [ 755.391858][ T7024] bond4: (slave bridge1): failed to get link speed/duplex [ 755.453630][T23176] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4400'. [ 755.507875][T23176] xt_TCPMSS: Only works on TCP SYN packets [ 755.549691][ T7029] bond4: (slave bridge1): failed to get link speed/duplex [ 755.574928][T23169] syzkaller0: entered promiscuous mode [ 755.632387][T23169] syzkaller0: entered allmulticast mode [ 756.582609][T23231] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4408'. [ 756.602786][T23231] block nbd1: Unsupported socket: should be TCP or UNIX. [ 756.721133][T23239] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 756.756245][T23237] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4409'. [ 757.484688][T23271] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4417'. [ 758.170477][ C1] ip6_tnl_xmit_ctl: 25 callbacks suppressed [ 758.170512][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 758.250896][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 758.410153][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 758.421976][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 758.723377][T23323] syzkaller0: entered promiscuous mode [ 758.752385][T23323] syzkaller0: entered allmulticast mode [ 758.990703][T23334] macvlan4: entered promiscuous mode [ 758.996711][T23334] batadv0: entered promiscuous mode [ 759.003809][T23334] macvlan4: entered allmulticast mode [ 759.009410][T23334] batadv0: entered allmulticast mode [ 759.019227][T23341] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4430'. [ 759.029007][T23334] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 759.033833][T23339] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4432'. [ 759.049751][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 759.056728][T23334] batadv0: left allmulticast mode [ 759.083220][T23334] batadv0: left promiscuous mode [ 759.311069][T23345] lo speed is unknown, defaulting to 1000 [ 759.440591][ T156] net_ratelimit: 25 callbacks suppressed [ 759.440614][ T156] bond4: (slave bridge1): failed to get link speed/duplex [ 759.536188][T23361] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4439'. [ 759.548416][T23361] netlink: 192 bytes leftover after parsing attributes in process `syz.1.4439'. [ 759.559222][T23361] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4439'. [ 759.600279][ T7015] bond4: (slave bridge1): failed to get link speed/duplex [ 759.659056][T23361] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4439'. [ 759.720975][ T7015] bond4: (slave bridge1): failed to get link speed/duplex [ 759.840992][T22298] bond4: (slave bridge1): failed to get link speed/duplex [ 759.971236][T22298] bond4: (slave bridge1): failed to get link speed/duplex [ 760.105300][T23389] syzkaller0: entered promiscuous mode [ 760.135923][T23389] syzkaller0: entered allmulticast mode [ 760.193603][T23389] tipc: Enabled bearer , priority 0 [ 760.221629][T23345] lo speed is unknown, defaulting to 1000 [ 760.229933][ T156] bond4: (slave bridge1): failed to get link speed/duplex [ 760.240017][T23389] netlink: 'syz.3.4446': attribute type 13 has an invalid length. [ 760.318921][T23387] tipc: Resetting bearer [ 760.404932][T23387] tipc: Disabling bearer [ 760.471351][ T7018] bond4: (slave bridge1): failed to get link speed/duplex [ 760.558644][T23401] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 760.630086][ T150] bond4: (slave bridge1): failed to get link speed/duplex [ 760.859749][ T156] bond4: (slave bridge1): failed to get link speed/duplex [ 760.983226][ T7015] bond4: (slave bridge1): failed to get link speed/duplex [ 761.161287][T23414] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 761.183687][T23414] dvmrp1: linktype set to 776 [ 761.382571][T23422] bond7: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 761.403550][T23422] bond7 (unregistering): Released all slaves [ 761.516897][T23437] __nla_validate_parse: 3 callbacks suppressed [ 761.516920][T23437] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4461'. [ 761.542505][T23437] IPv6: NLM_F_CREATE should be specified when creating new route [ 761.707226][T23443] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4463'. [ 761.716844][T23445] netlink: 244 bytes leftover after parsing attributes in process `syz.1.4464'. [ 761.744174][T23443] netlink: 'syz.4.4463': attribute type 1 has an invalid length. [ 761.759789][T23443] netlink: 228 bytes leftover after parsing attributes in process `syz.4.4463'. [ 762.060160][T23458] lo speed is unknown, defaulting to 1000 [ 762.261991][T23475] Bluetooth: MGMT ver 1.23 [ 762.294555][T23479] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4474'. [ 762.305839][T23477] netlink: 'syz.4.4473': attribute type 1 has an invalid length. [ 762.428574][T23490] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 762.444132][T23485] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 762.483879][T23479] bond11: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 762.563862][T23479] bond11 (unregistering): Released all slaves [ 762.712491][T23477] bond7: entered promiscuous mode [ 762.717755][T23477] bond7: entered allmulticast mode [ 762.724076][T23477] 8021q: adding VLAN 0 to HW filter on device bond7 [ 762.741793][T23482] erspan2: entered allmulticast mode [ 762.751491][T23482] bond7: (slave erspan2): making interface the new active one [ 762.759022][T23482] erspan2: entered promiscuous mode [ 762.766382][T23482] bond7: (slave erspan2): Enslaving as an active interface with an up link [ 762.785337][T23491] bond7: left promiscuous mode [ 762.825042][T23491] erspan2: left promiscuous mode [ 762.842097][T23458] lo speed is unknown, defaulting to 1000 [ 763.200879][T23521] netlink: 17 bytes leftover after parsing attributes in process `syz.4.4484'. [ 763.297267][ T31] audit: type=1804 audit(1784726156.466:8): pid=23526 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.4482" name="/newroot/329/cgroup.controllers" dev="tmpfs" ino=1710 res=1 errno=0 [ 763.383987][ T31] audit: type=1800 audit(1784726156.466:9): pid=23526 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4482" name="cgroup.controllers" dev="tmpfs" ino=1710 res=0 errno=0 [ 763.491809][ T31] audit: type=1800 audit(1784726156.466:10): pid=23526 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4482" name="cgroup.controllers" dev="tmpfs" ino=1710 res=0 errno=0 [ 763.572604][T23534] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4489'. [ 763.585525][T23534] dummy0: Device is already in use. [ 763.930945][T23543] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4491'. [ 763.991279][T23543] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4491'. [ 764.161143][T23550] netlink: 112 bytes leftover after parsing attributes in process `syz.3.4493'. [ 764.277379][T23555] netlink: 'syz.4.4494': attribute type 3 has an invalid length. [ 764.482724][T23562] netlink: 'syz.3.4496': attribute type 5 has an invalid length. [ 764.516796][T23559] syzkaller0: entered promiscuous mode [ 764.541021][T23559] syzkaller0: entered allmulticast mode [ 764.575648][ T7018] net_ratelimit: 17 callbacks suppressed [ 764.575688][ T7018] bond4: (slave bridge1): failed to get link speed/duplex [ 764.682716][T23567] smc: removing ib device syz1 [ 764.754411][ T7015] bond4: (slave bridge1): failed to get link speed/duplex [ 764.897726][T23567] [ 764.900128][T23567] ====================================================== [ 764.907243][T23567] WARNING: possible circular locking dependency detected [ 764.914368][T23567] syzkaller #0 Not tainted [ 764.918814][T23567] ------------------------------------------------------ [ 764.925916][T23567] syz.2.4497/23567 is trying to acquire lock: [ 764.932049][T23567] ffff88801c2952a0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove+0x35/0x80 [ 764.942130][T23567] [ 764.942130][T23567] but task is already holding lock: [ 764.949514][T23567] ffffffff8f5e3f00 (gdp_mutex){+.+.}-{4:4}, at: cleanup_glue_dir+0xc3/0x220 [ 764.958355][T23567] [ 764.958355][T23567] which lock already depends on the new lock. [ 764.958355][T23567] [ 764.968787][T23567] [ 764.968787][T23567] the existing dependency chain (in reverse order) is: [ 764.977917][T23567] [ 764.977917][T23567] -> #10 (gdp_mutex){+.+.}-{4:4}: [ 764.985588][T23567] __mutex_lock+0x19d/0x1550 [ 764.990752][T23567] get_device_parent+0x16f/0x3a0 [ 764.996333][T23567] device_add+0x2d4/0xb80 [ 765.001207][T23567] device_create+0x269/0x300 [ 765.006355][T23567] msr_device_create+0x33/0x50 [ 765.011753][T23567] cpuhp_invoke_callback+0x434/0x810 [ 765.017606][T23567] cpuhp_thread_fun+0x362/0x780 [ 765.022999][T23567] smpboot_thread_fn+0x57c/0xa80 [ 765.028495][T23567] kthread+0x388/0x470 [ 765.033241][T23567] ret_from_fork+0x514/0xb70 [ 765.038413][T23567] ret_from_fork_asm+0x1a/0x30 [ 765.043895][T23567] [ 765.043895][T23567] -> #9 (cpuhp_state-up){+.+.}-{0:0}: [ 765.051478][T23567] cpuhp_thread_fun+0x127/0x780 [ 765.056972][T23567] smpboot_thread_fn+0x57c/0xa80 [ 765.062457][T23567] kthread+0x388/0x470 [ 765.067107][T23567] ret_from_fork+0x514/0xb70 [ 765.072333][T23567] ret_from_fork_asm+0x1a/0x30 [ 765.077634][T23567] [ 765.077634][T23567] -> #8 (cpu_hotplug_lock){++++}-{0:0}: [ 765.085413][T23567] cpus_read_lock+0x42/0x160 [ 765.090573][T23567] static_key_slow_inc+0x12/0x30 [ 765.096093][T23567] nbd_genl_reconfigure+0x1301/0x1e80 [ 765.102089][T23567] genl_family_rcv_msg_doit+0x233/0x340 [ 765.108185][T23567] genl_rcv_msg+0x614/0x7a0 [ 765.113240][T23567] netlink_rcv_skb+0x226/0x4a0 [ 765.118544][T23567] genl_rcv+0x28/0x40 [ 765.123075][T23567] netlink_unicast+0x7bb/0x940 [ 765.128391][T23567] netlink_sendmsg+0x813/0xb40 [ 765.134043][T23567] sock_sendmsg_nosec+0x13a/0x180 [ 765.139612][T23567] ____sys_sendmsg+0x54e/0x850 [ 765.144996][T23567] ___sys_sendmsg+0x2a5/0x360 [ 765.150220][T23567] __x64_sys_sendmsg+0x1b1/0x290 [ 765.155708][T23567] do_syscall_64+0x174/0x580 [ 765.160845][T23567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 765.167287][T23567] [ 765.167287][T23567] -> #7 (&nsock->tx_lock){+.+.}-{4:4}: [ 765.174963][T23567] __mutex_lock+0x19d/0x1550 [ 765.180093][T23567] nbd_queue_rq+0x373/0x1150 [ 765.185243][T23567] blk_mq_dispatch_rq_list+0x499/0x1990 [ 765.191453][T23567] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 765.198367][T23567] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 765.204897][T23567] blk_mq_run_work_fn+0x16c/0x300 [ 765.210463][T23567] process_scheduled_works+0xa8e/0x14e0 [ 765.216551][T23567] worker_thread+0xa47/0xfb0 [ 765.222201][T23567] kthread+0x388/0x470 [ 765.227002][T23567] ret_from_fork+0x514/0xb70 [ 765.232342][T23567] ret_from_fork_asm+0x1a/0x30 [ 765.237907][T23567] [ 765.237907][T23567] -> #6 (&cmd->lock){+.+.}-{4:4}: [ 765.245173][T23567] __mutex_lock+0x19d/0x1550 [ 765.250503][T23567] nbd_queue_rq+0xc1/0x1150 [ 765.255570][T23567] blk_mq_dispatch_rq_list+0x499/0x1990 [ 765.261784][T23567] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 765.268760][T23567] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 765.275474][T23567] blk_mq_run_work_fn+0x16c/0x300 [ 765.281057][T23567] process_scheduled_works+0xa8e/0x14e0 [ 765.287491][T23567] worker_thread+0xa47/0xfb0 [ 765.292832][T23567] kthread+0x388/0x470 [ 765.297621][T23567] ret_from_fork+0x514/0xb70 [ 765.302759][T23567] ret_from_fork_asm+0x1a/0x30 [ 765.308174][T23567] [ 765.308174][T23567] -> #5 (set->srcu){.+.+}-{0:0}: [ 765.315410][T23567] __synchronize_srcu+0xc9/0x2f0 [ 765.320902][T23567] elevator_switch+0x1e8/0x7b0 [ 765.326277][T23567] elevator_change+0x2fa/0x480 [ 765.331613][T23567] elevator_set_default+0x375/0x440 [ 765.337358][T23567] blk_register_queue+0x3f3/0x4e0 [ 765.342997][T23567] __add_disk+0x6cb/0xe30 [ 765.347878][T23567] add_disk_fwnode+0x100/0x3a0 [ 765.353183][T23567] nbd_dev_add+0x733/0xb60 [ 765.358152][T23567] nbd_init+0x15f/0x1e0 [ 765.362988][T23567] do_one_initcall+0x250/0x870 [ 765.368310][T23567] do_initcall_level+0x10a/0x1a0 [ 765.374038][T23567] do_initcalls+0x59/0xa0 [ 765.378958][T23567] kernel_init_freeable+0x29d/0x3e0 [ 765.384733][T23567] kernel_init+0x1d/0x1d0 [ 765.389634][T23567] ret_from_fork+0x514/0xb70 [ 765.394793][T23567] ret_from_fork_asm+0x1a/0x30 [ 765.400123][T23567] [ 765.400123][T23567] -> #4 (&q->elevator_lock){+.+.}-{4:4}: [ 765.408022][T23567] __mutex_lock+0x19d/0x1550 [ 765.413174][T23567] elevator_change+0x1af/0x480 [ 765.418497][T23567] elevator_set_none+0xb5/0x140 [ 765.423898][T23567] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 765.430256][T23567] nbd_start_device+0x189/0xb30 [ 765.435658][T23567] nbd_genl_connect+0x1597/0x1c10 [ 765.441252][T23567] genl_family_rcv_msg_doit+0x233/0x340 [ 765.447350][T23567] genl_rcv_msg+0x614/0x7a0 [ 765.452401][T23567] netlink_rcv_skb+0x226/0x4a0 [ 765.457711][T23567] genl_rcv+0x28/0x40 [ 765.462252][T23567] netlink_unicast+0x7bb/0x940 [ 765.467619][T23567] netlink_sendmsg+0x813/0xb40 [ 765.473002][T23567] sock_sendmsg_nosec+0x13a/0x180 [ 765.478606][T23567] ____sys_sendmsg+0x54e/0x850 [ 765.483919][T23567] ___sys_sendmsg+0x2a5/0x360 [ 765.489149][T23567] __x64_sys_sendmsg+0x1b1/0x290 [ 765.494649][T23567] do_syscall_64+0x174/0x580 [ 765.499964][T23567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 765.506414][T23567] [ 765.506414][T23567] -> #3 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 765.515072][T23567] blk_alloc_queue+0x544/0x690 [ 765.520478][T23567] __blk_mq_alloc_disk+0x194/0x390 [ 765.526231][T23567] nbd_dev_add+0x494/0xb60 [ 765.531205][T23567] nbd_init+0x15f/0x1e0 [ 765.535912][T23567] do_one_initcall+0x250/0x870 [ 765.541309][T23567] do_initcall_level+0x10a/0x1a0 [ 765.546790][T23567] do_initcalls+0x59/0xa0 [ 765.552054][T23567] kernel_init_freeable+0x29d/0x3e0 [ 765.558070][T23567] kernel_init+0x1d/0x1d0 [ 765.562945][T23567] ret_from_fork+0x514/0xb70 [ 765.568117][T23567] ret_from_fork_asm+0x1a/0x30 [ 765.573537][T23567] [ 765.573537][T23567] -> #2 (fs_reclaim){+.+.}-{0:0}: [ 765.580798][T23567] fs_reclaim_acquire+0x71/0x100 [ 765.586387][T23567] kmem_cache_alloc_lru_noprof+0x65/0x5f0 [ 765.592915][T23567] alloc_inode+0xb8/0x1b0 [ 765.597797][T23567] iget_locked+0x131/0x6a0 [ 765.602764][T23567] kernfs_get_inode+0x4f/0x770 [ 765.608170][T23567] kernfs_get_tree+0x5cd/0x980 [ 765.613477][T23567] vfs_get_tree+0x92/0x2a0 [ 765.618426][T23567] do_new_mount+0x319/0xdc0 [ 765.623506][T23567] __se_sys_mount+0x31d/0x420 [ 765.628732][T23567] do_syscall_64+0x174/0x580 [ 765.634168][T23567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 765.640635][T23567] [ 765.640635][T23567] -> #1 (&root->kernfs_rwsem){++++}-{4:4}: [ 765.648739][T23567] down_write+0x96/0x200 [ 765.653534][T23567] kernfs_remove_by_name_ns+0x4e/0x140 [ 765.659642][T23567] device_links_driver_bound+0x4ab/0x1440 [ 765.666595][T23567] driver_bound+0xd8/0x2e0 [ 765.671674][T23567] really_probe+0x774/0xae0 [ 765.676901][T23567] __driver_probe_device+0x1e8/0x360 [ 765.682924][T23567] driver_probe_device+0x4f/0x240 [ 765.688603][T23567] __device_attach_driver+0x270/0x410 [ 765.694543][T23567] bus_for_each_drv+0x258/0x2f0 [ 765.699956][T23567] __device_attach+0x2c4/0x450 [ 765.705271][T23567] device_initial_probe+0xa1/0xd0 [ 765.710853][T23567] bus_probe_device+0x12a/0x220 [ 765.716263][T23567] device_add+0x7d7/0xb80 [ 765.721148][T23567] faux_device_create_with_groups+0x1a5/0x2b0 [ 765.727912][T23567] regulator_dummy_init+0x19/0x40 [ 765.733540][T23567] regulator_init+0xca/0x110 [ 765.738772][T23567] do_one_initcall+0x250/0x870 [ 765.744091][T23567] do_initcall_level+0x10a/0x1a0 [ 765.749670][T23567] do_initcalls+0x59/0xa0 [ 765.754737][T23567] kernel_init_freeable+0x29d/0x3e0 [ 765.760493][T23567] kernel_init+0x1d/0x1d0 [ 765.765375][T23567] ret_from_fork+0x514/0xb70 [ 765.770525][T23567] ret_from_fork_asm+0x1a/0x30 [ 765.775834][T23567] [ 765.775834][T23567] -> #0 (&root->kernfs_supers_rwsem){++++}-{4:4}: [ 765.784479][T23567] __lock_acquire+0x1520/0x2cf0 [ 765.789887][T23567] lock_acquire+0x106/0x350 [ 765.795031][T23567] down_read+0x4a/0x330 [ 765.799739][T23567] kernfs_remove+0x35/0x80 [ 765.804892][T23567] __kobject_del+0xe0/0x310 [ 765.810129][T23567] kobject_del+0x45/0x60 [ 765.814953][T23567] cleanup_glue_dir+0x1a3/0x220 [ 765.820351][T23567] device_del+0x77d/0x8f0 [ 765.825226][T23567] cdev_device_del+0x27/0xf0 [ 765.830373][T23567] ib_umad_kill_port+0xf2/0x310 [ 765.836389][T23567] ib_umad_remove_one+0x160/0x270 [ 765.842049][T23567] remove_client_context+0xb9/0x1e0 [ 765.847866][T23567] disable_device+0x137/0x330 [ 765.853093][T23567] __ib_unregister_device+0x2c9/0x400 [ 765.859031][T23567] ib_unregister_device_and_put+0xb8/0xf0 [ 765.865345][T23567] nldev_dellink+0x39e/0x430 [ 765.870566][T23567] rdma_nl_rcv+0x6ef/0xa40 [ 765.875594][T23567] netlink_unicast+0x7bb/0x940 [ 765.880922][T23567] netlink_sendmsg+0x813/0xb40 [ 765.886588][T23567] sock_sendmsg_nosec+0x13a/0x180 [ 765.892167][T23567] ____sys_sendmsg+0x54e/0x850 [ 765.897561][T23567] ___sys_sendmsg+0x2a5/0x360 [ 765.902790][T23567] __x64_sys_sendmsg+0x1b1/0x290 [ 765.908558][T23567] do_syscall_64+0x174/0x580 [ 765.913696][T23567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 765.920146][T23567] [ 765.920146][T23567] other info that might help us debug this: [ 765.920146][T23567] [ 765.930396][T23567] Chain exists of: [ 765.930396][T23567] &root->kernfs_supers_rwsem --> cpuhp_state-up --> gdp_mutex [ 765.930396][T23567] [ 765.943816][T23567] Possible unsafe locking scenario: [ 765.943816][T23567] [ 765.951436][T23567] CPU0 CPU1 [ 765.956964][T23567] ---- ---- [ 765.962362][T23567] lock(gdp_mutex); [ 765.966294][T23567] lock(cpuhp_state-up); [ 765.973199][T23567] lock(gdp_mutex); [ 765.979639][T23567] rlock(&root->kernfs_supers_rwsem); [ 765.985161][T23567] [ 765.985161][T23567] *** DEADLOCK *** [ 765.985161][T23567] [ 765.993404][T23567] 3 locks held by syz.2.4497/23567: [ 765.998621][T23567] #0: ffffffff9ab211e8 (&rdma_nl_types[idx].sem){.+.+}-{4:4}, at: rdma_nl_rcv+0x33d/0xa40 [ 766.008733][T23567] #1: ffff88805bbe86f8 (&device->unregistration_lock){+.+.}-{4:4}, at: __ib_unregister_device+0x279/0x400 [ 766.020352][T23567] #2: ffffffff8f5e3f00 (gdp_mutex){+.+.}-{4:4}, at: cleanup_glue_dir+0xc3/0x220 [ 766.030138][T23567] [ 766.030138][T23567] stack backtrace: [ 766.036332][T23567] CPU: 1 UID: 0 PID: 23567 Comm: syz.2.4497 Not tainted syzkaller #0 PREEMPT(full) [ 766.036356][T23567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 766.036370][T23567] Call Trace: [ 766.036381][T23567] [ 766.036391][T23567] dump_stack_lvl+0xe8/0x150 [ 766.036425][T23567] print_circular_bug+0x2e1/0x300 [ 766.036449][T23567] check_noncircular+0x12e/0x150 [ 766.036486][T23567] __lock_acquire+0x1520/0x2cf0 [ 766.036521][T23567] ? irqentry_exit+0x218/0x8f0 [ 766.036543][T23567] ? lockdep_hardirqs_on+0x7a/0x110 [ 766.036565][T23567] ? __pfx___schedule+0x10/0x10 [ 766.036598][T23567] ? kernfs_remove+0x35/0x80 [ 766.036627][T23567] lock_acquire+0x106/0x350 [ 766.036655][T23567] ? kernfs_remove+0x35/0x80 [ 766.036691][T23567] down_read+0x4a/0x330 [ 766.036714][T23567] ? kernfs_remove+0x35/0x80 [ 766.036744][T23567] kernfs_remove+0x35/0x80 [ 766.036776][T23567] __kobject_del+0xe0/0x310 [ 766.036804][T23567] kobject_del+0x45/0x60 [ 766.036829][T23567] cleanup_glue_dir+0x1a3/0x220 [ 766.036851][T23567] device_del+0x77d/0x8f0 [ 766.036875][T23567] ? __pfx_device_del+0x10/0x10 [ 766.036897][T23567] ? xa_load+0x60/0x210 [ 766.036979][T23567] cdev_device_del+0x27/0xf0 [ 766.037002][T23567] ib_umad_kill_port+0xf2/0x310 [ 766.037024][T23567] ib_umad_remove_one+0x160/0x270 [ 766.037047][T23567] ? __pfx_ib_umad_remove_one+0x10/0x10 [ 766.037066][T23567] remove_client_context+0xb9/0x1e0 [ 766.037089][T23567] disable_device+0x137/0x330 [ 766.037114][T23567] ? __pfx_disable_device+0x10/0x10 [ 766.037138][T23567] ? __mutex_unlock_slowpath+0x731/0x900 [ 766.037163][T23567] __ib_unregister_device+0x2c9/0x400 [ 766.037188][T23567] ib_unregister_device_and_put+0xb8/0xf0 [ 766.037210][T23567] nldev_dellink+0x39e/0x430 [ 766.037248][T23567] ? __pfx_nldev_dellink+0x10/0x10 [ 766.037332][T23567] ? apparmor_capable+0x126/0x170 [ 766.037401][T23567] ? bpf_lsm_capable+0x9/0x20 [ 766.037427][T23567] ? security_capable+0x7e/0x2c0 [ 766.037508][T23567] ? __pfx_nldev_dellink+0x10/0x10 [ 766.037538][T23567] rdma_nl_rcv+0x6ef/0xa40 [ 766.037574][T23567] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 766.037615][T23567] ? netlink_deliver_tap+0x2e/0x1b0 [ 766.037638][T23567] ? netlink_deliver_tap+0x2e/0x1b0 [ 766.037661][T23567] netlink_unicast+0x7bb/0x940 [ 766.037697][T23567] netlink_sendmsg+0x813/0xb40 [ 766.037724][T23567] ? __pfx_netlink_sendmsg+0x10/0x10 [ 766.037748][T23567] ? aa_sock_msg_perm+0xf1/0x1b0 [ 766.037771][T23567] ? __pfx_netlink_sendmsg+0x10/0x10 [ 766.037792][T23567] sock_sendmsg_nosec+0x13a/0x180 [ 766.037821][T23567] ____sys_sendmsg+0x54e/0x850 [ 766.037843][T23567] ? __pfx_____sys_sendmsg+0x10/0x10 [ 766.037868][T23567] ? import_iovec+0x73/0xa0 [ 766.037900][T23567] ___sys_sendmsg+0x2a5/0x360 [ 766.037920][T23567] ? __lock_acquire+0x683/0x2cf0 [ 766.037949][T23567] ? __pfx____sys_sendmsg+0x10/0x10 [ 766.037971][T23567] ? futex_wait+0x2a2/0x390 [ 766.038016][T23567] ? __fget_files+0x2a/0x420 [ 766.038041][T23567] ? __fget_files+0x3a2/0x420 [ 766.038072][T23567] __x64_sys_sendmsg+0x1b1/0x290 [ 766.038094][T23567] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 766.038124][T23567] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 766.038145][T23567] do_syscall_64+0x174/0x580 [ 766.038166][T23567] ? trace_irq_disable+0x3b/0x140 [ 766.038192][T23567] ? clear_bhb_loop+0x40/0x90 [ 766.038215][T23567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 766.038236][T23567] RIP: 0033:0x7fe397b9de99 [ 766.038257][T23567] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 766.038281][T23567] RSP: 002b:00007fe398ab5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 766.038302][T23567] RAX: ffffffffffffffda RBX: 00007fe397e25fa0 RCX: 00007fe397b9de99 [ 766.038318][T23567] RDX: 0000000000000004 RSI: 00002000000001c0 RDI: 000000000000000f [ 766.038332][T23567] RBP: 00007fe397c33eaf R08: 0000000000000000 R09: 0000000000000000 [ 766.038345][T23567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 766.038358][T23567] R13: 00007fe397e26038 R14: 00007fe397e25fa0 R15: 00007fff928438f8 [ 766.038382][T23567] [ 766.445646][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 766.453940][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 766.527625][T23583] __nla_validate_parse: 4 callbacks suppressed [ 766.527645][T23583] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4501'. [ 766.565085][T23567] smbdirect: ib_dev[syz1] removed [ 766.571418][T23576] netlink: 'syz.3.4499': attribute type 1 has an invalid length. [ 766.580331][T22298] bond4: (slave bridge1): failed to get link speed/duplex [ 766.691331][T22298] bond4: (slave bridge1): failed to get link speed/duplex [ 766.800294][ T156] bond4: (slave bridge1): failed to get link speed/duplex [ 766.917485][ T7018] bond4: (slave bridge1): failed to get link speed/duplex [ 767.040958][ T7018] bond4: (slave bridge1): failed to get link speed/duplex [ 767.180073][ T7015] bond4: (slave bridge1): failed to get link speed/duplex [ 767.289921][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 767.293288][ T7018] bond4: (slave bridge1): failed to get link speed/duplex [ 767.298511][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 767.430130][ T7018] bond4: (slave bridge1): failed to get link speed/duplex [ 768.569690][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 769.640269][T22298] net_ratelimit: 19 callbacks suppressed [ 769.640291][T22298] bond4: (slave bridge1): failed to get link speed/duplex [ 769.772000][ T156] bond4: (slave bridge1): failed to get link speed/duplex [ 769.889728][ T7018] bond4: (slave bridge1): failed to get link speed/duplex [ 770.000234][ T7018] bond4: (slave bridge1): failed to get link speed/duplex [ 770.109738][ T7018] bond4: (slave bridge1): failed to get link speed/duplex [ 770.219731][ T7008] bond4: (slave bridge1): failed to get link speed/duplex [ 770.340637][T22298] bond4: (slave bridge1): failed to get link speed/duplex [ 770.449887][ T7008] bond4: (slave bridge1): failed to get link speed/duplex [ 770.560720][T22298] bond4: (slave bridge1): failed to get link speed/duplex [ 770.670926][ T7008] bond4: (slave bridge1): failed to get link speed/duplex [ 774.649843][T22298] net_ratelimit: 35 callbacks suppressed [ 774.649867][T22298] bond4: (slave bridge1): failed to get link speed/duplex [ 774.769669][T22298] bond4: (slave bridge1): failed to get link speed/duplex [ 774.880127][ T7008] bond4: (slave bridge1): failed to get link speed/duplex