last executing test programs: 14m28.269310883s ago: executing program 2 (id=5420): r0 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="80000000", @ANYRES16=0x0, @ANYBLOB="08006762c36285468ba90c00000008001c36", @ANYRES32=0x0, @ANYBLOB="0c009900040000006500000009000700dcd6daa5dd000000080037000000000034005080040005000c0004003fc1f81937c4e2ee080007000200000004000500110001005b94b347465636e51f4899d4b600000008003700000000000800370001000000"], 0x80}, 0x1, 0x0, 0x0, 0x4}, 0x4040840) (async) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b25, &(0x7f0000000000)={'wlan1\x00'}) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x8, 0x10, r1, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000000)) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newtaction={0x19c, 0x30, 0x100, 0x70bd29, 0x25dfdbfe, {}, [{0x188, 0x1, [@m_skbedit={0x7c, 0x1b, 0x0, 0x0, {{0xc}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x7}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x6, 0xe}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x9, 0x3, 0x8, 0xfffffff7, 0xfff}}]}, {0x1d, 0x6, "6cbc0be399313f4862f2515a09a917bc7d87e474f1fa546fba"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x6b31a6586b121e0b, 0x2}}}}, @m_simple={0x108, 0x4, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x4, 0x7, 0x8, 0xf57, 0x6}}]}, {0xc1, 0x6, "09a7bbbcdd987105102c3cd60b8f1e721b29b5f143f83318d3db9fd2dc1e2261178a95b4b390a51ed2ffbf6011bbe599ef94204f95bfc7a7c1b93b738b12106e76bcde509367972a2f6ff3adcde7b7f55a8c8a70fcfa7ebeb854ebd2551ae4949c8b29f2d3f79e707ee1ce57b9214d76ec477152112547e9b75f5e8bfb49da0abd0784bb18241282316bbcc2966e3c780a91098e4e5723f9a14153abafe909b53729219743eddb0add7b5e3b4d8a19acb89ccc48f1348298d19d3408a1"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x19c}}, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) (async) r7 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x6}, @empty, @private=0xa010101, 0xff000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0) (async) write$tun(r4, &(0x7f0000000500)=ANY=[@ANYBLOB="000008004500001c000100004001"], 0xfdef) (async) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e21, @multicast2}, 0x10) (async) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, &(0x7f0000000080)='wg0\x00', 0x4) sendto$inet(r2, &(0x7f0000000900)="2e552f5d9fd8b0d9627c4980f0d1ea2bf8f617a682acd2841acd878bd68344d4f50f83b0c51fa9135a01c95d4a128ec8b12d01010000a44c4505ba9a36f2cf4cc5e8308126d0a2c3b9d24e57c5011376b6263e2a1258eec1eb72bedea3eb5ccf73eb081b4c6d5faa998d7b795c057dd757d14200a8a6dbb3e59df96b77d16753ac4b32b94ffe6b5ee304d0428eb18056657c8c5c71c632be66cb26fe5c9abec7591ef3cb9b2a1133e9fa9bf0de6c378bed7b51cb8a07c343aabfda193349b91a5dc81a658cb61fbbfa51ef95abe03381ee2cb8d41da19ea8b96ec68ce17cf57da60f1d04acaf34a643db8d2d5ad2991f306b42744347a0c9e1fe2136b2b3da49032d3a57df1e236222cf6d6fe396aff8e5fe7fff5baa88789b783c12045e2c904a5d118369fdddc3e6e2f24bdbb26df92ac9bf4751c897a87c0223888e36ad14ba6e4d879ff464cac6f13a3a543e067d922e99c50f2fc6391e9c1c82b7195005eafdbb3374200c134cbd0f11739e8c19dd07140686242fea48caf3a1a93b86f35d77f258a2c9ce24cf321068551a584262d7a74a344e428c77c8af755e72904b0ca8a0bb359fb0", 0xffffff5d, 0x12, 0x0, 0x0) (async) recvfrom$inet(r2, 0x0, 0x0, 0xc9100120, 0x0, 0x0) (async) shutdown(r2, 0x1) (async) socket$rds(0x15, 0x5, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001fc0)=ANY=[@ANYRESDEC=r5, @ANYRES32=0x0, @ANYBLOB="00351835e8c225196bdfa3ce950500000002ba00007fc1f78c000014000280060027"], 0x44}}, 0x0) 14m26.665360163s ago: executing program 2 (id=5422): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=@newtaction={0xe98, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0xe84, 0x1, [@m_gact={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x1, 0x4, 0x790434c2, 0x8}, 0x2, 0xa8}, [{0x7, 0x1, 0xfffffff9, 0x9, 0x67fb, 0x7}, {0x100, 0x80000000, 0x2, 0x3027, 0x7fff, 0x8}, {0x80000000, 0x36b, 0xd, 0x517, 0x1, 0x800}, {0x8, 0xfffffff4, 0x6140e1a4, 0x9, 0x95b9, 0x6}, {0x9, 0x4, 0x6, 0xfff, 0x4, 0x10001}, {0x401, 0x6, 0xfdd, 0xc0, 0x4, 0xb}, {0x26000000, 0x31400000, 0x5, 0x401, 0x8000, 0x3}, {0x9, 0x5, 0x1, 0x6, 0xae8, 0x8}, {0x10, 0x1, 0x4, 0x4, 0x2, 0x5}, {0x21, 0x101, 0x7, 0xffffffff, 0x4, 0x6}, {0x5, 0x5, 0x4, 0x0, 0x7, 0x9}, {0x5, 0x3, 0x1, 0x3, 0x4, 0x401}, {0xfffffff9, 0x6, 0xfffffffa, 0x7, 0x7, 0x3d}, {0x0, 0x7, 0x0, 0xff, 0x6, 0x5}, {0x5, 0xfffffffb, 0x1, 0xfffffe01, 0x8, 0x1}, {0x7fff, 0x200, 0x1, 0xae0a, 0x4, 0x7ff}, {0x3, 0x9, 0x8, 0x1, 0x2, 0x4}, {0x8, 0x0, 0x275, 0x7ff, 0xb, 0xffffff23}, {0x68, 0x0, 0x7, 0x400000, 0x1, 0x3}, {0x1, 0x8, 0x8, 0x3ff, 0x3f5, 0x8}, {0x7ff, 0x1, 0xffff, 0x6, 0x0, 0xfffffdbe}, {0x8001, 0x1ff, 0x0, 0x7, 0xe00, 0xf406}, {0x3, 0x18, 0x6, 0x2, 0x1, 0x1}, {0xae, 0x80000001, 0x51, 0x5, 0x9, 0x82c}, {0x6e, 0x1, 0x4, 0x2, 0x2, 0x81}, {0x9, 0x7fffffff, 0x5, 0x8, 0x80000001, 0x362}, {0x7, 0x1, 0x7, 0xf, 0x7ff, 0x6}, {0xe655, 0xffffffff, 0x2da, 0x6, 0xfffffff8, 0xd389}, {0x0, 0x9, 0xd5e, 0xaa7c, 0x10001, 0x37}, {0x5, 0x2, 0x37, 0x8, 0x5, 0x4}, {0x3, 0x0, 0x3ff, 0x100, 0x4, 0x200}, {0x0, 0xcb8, 0xffff8000, 0x3, 0x2}, {0x6, 0x0, 0xfff, 0x4, 0x6, 0x7}, {0x28000, 0xf, 0x9, 0x3, 0xdd, 0xffffff86}, {0x5, 0x5, 0x3ff, 0x4, 0x70a, 0x7fffffff}, {0x1ff, 0x2e390d2b, 0x4, 0x4, 0x2, 0x6}, {0x4, 0x0, 0x8, 0x80000001, 0x3d5, 0x9}, {0x6, 0x40, 0x6, 0x1c000000, 0x1, 0x1000}, {0x0, 0x0, 0xb1, 0x1, 0x6, 0x10001}, {0xd, 0x4f, 0x900, 0x3, 0x400, 0x9}, {0x1, 0x3, 0x7, 0xa, 0xff, 0x6}, {0x7dd, 0x8, 0x62182213, 0x8, 0x8000, 0x8f4c}, {0x36b, 0xb6, 0x0, 0x5f60be42, 0x8, 0x7}, {0x2, 0x3, 0x7, 0x3, 0x5, 0x3}, {0x3, 0x7182, 0x55b, 0xf0b, 0x4, 0x6}, {0x9, 0xc3c, 0xffffffb2, 0xf, 0x1000, 0x2f}, {0xc7, 0x962b, 0x1, 0x8, 0x3, 0x3ff}, {0xfffffffe, 0x800, 0x1, 0x6, 0x0, 0xa7a}, {0x6, 0x8, 0xe, 0x6, 0x8000, 0x7}, {0x0, 0x6, 0x40, 0x6, 0x0, 0x3}, {0xf, 0x0, 0x6, 0xc2, 0x6}, {0x700, 0x6, 0x6, 0xaa06, 0x2, 0x2}, {0x6, 0x0, 0xfffffffe, 0x101, 0x9, 0x4}, {0xffffff4d, 0x5, 0x2, 0x3, 0xbba8, 0x2}, {0x7, 0x70, 0x4, 0x9}, {0x7, 0x200, 0x9, 0x1000, 0x3, 0x7f}, {0x2, 0x8, 0x9, 0x1000, 0x5, 0xffff}, {0x9, 0x4, 0x5a, 0x8, 0x3, 0x1}, {0x5, 0x836, 0x7f, 0x8, 0x8b59, 0x5}, {0x1ff, 0x7, 0x400, 0x9, 0x8, 0xd}, {0x5, 0x2, 0x7, 0x6, 0x8, 0x1}, {0x400, 0x5, 0x7, 0x0, 0x7, 0x8}, {0x3, 0xd, 0x1, 0x4, 0x5}, {0x0, 0xb23, 0x101, 0x7, 0x0, 0x4}, {0x9, 0x9146, 0x0, 0x5, 0x80000001, 0x7}, {0x6925, 0x1c0b92e, 0x2, 0x39, 0x7, 0x5}, {0xf, 0xf, 0x1, 0x5c665eda, 0x9, 0xffffffff}, {0x8, 0x9, 0x401, 0x0, 0x7ba, 0x9}, {0xffffffb6, 0x4, 0x6, 0x8, 0x20, 0xc}, {0x8, 0xf, 0x8, 0x1, 0x48, 0x3}, {0x9, 0x0, 0x9c4, 0x400, 0x9, 0xc0000000}, {0x6, 0xc, 0x1, 0x6, 0x3, 0x7}, {0x8, 0x8153, 0x8000, 0x6, 0x9, 0x7}, {0x1ff, 0x80000001, 0x4, 0x6, 0xc, 0x7}, {0x7ff, 0x9, 0x3, 0xe3f6, 0x3b5, 0x4}, {0x3, 0x7, 0xd376, 0x3, 0x2d3, 0x1}, {0x2, 0xffff, 0x10000, 0x6, 0x0, 0x1}, {0x80000000, 0x6, 0x8, 0x7, 0x8, 0x7}, {0xc390, 0xfead, 0x8001, 0x1ff, 0x7, 0x3}, {0x4, 0x7fff, 0x210e, 0xf, 0x1, 0x7}, {0x2, 0xfffffc01, 0xffffff92, 0x2d447236, 0x1, 0x5}, {0x4, 0x6, 0xff, 0x7, 0x5, 0x9}, {0xfffffffe, 0x6, 0x57, 0x3, 0x8000, 0x800}, {0x8, 0xf, 0x0, 0x3, 0x8000, 0x3fd}, {0x2, 0x7, 0xb9ab, 0x81, 0x2, 0x2}, {0x100, 0x7, 0x0, 0x6, 0x8001, 0x1}, {0x7ff, 0xfffffffc, 0x0, 0x5, 0x7f, 0xee3}, {0x7000000, 0x4, 0xfffffff7, 0x3, 0x9, 0x5}, {0x8, 0x5, 0xb, 0xfffffffe, 0x5, 0x74e}, {0x9, 0x5, 0xfc000000, 0x5, 0xfffffff8, 0x4}, {0x8, 0x7, 0xe, 0x8000, 0xffff0000, 0x2}, {0x401b, 0x9, 0x96, 0xf2a, 0x400, 0x8}, {0x2, 0xb, 0x6, 0xea1, 0xf, 0x90d2}, {0x800, 0x8, 0xc04, 0xffffffff, 0x3, 0x7}, {0x4, 0x8, 0x3ff, 0x7fffffff, 0x3ef, 0x3}, {0xa, 0x7, 0x1, 0x3, 0xffffffff, 0x5}, {0xf, 0x6, 0x1, 0xeb4, 0x0, 0xbb}, {0x8000, 0x10, 0x9dc, 0x9, 0x2f, 0x9}, {0x9, 0xa572, 0x6, 0x7, 0x5}, {0x8, 0x5, 0x2, 0x9, 0x9f, 0x7}, {0xa2fd, 0x80000001, 0x4, 0x0, 0x4, 0xffff}, {0x8, 0x80, 0x2, 0xa, 0x5, 0x3ff}, {0x8d0, 0x6, 0x2, 0x80000000, 0x8001, 0xffffffff}, {0x0, 0x4, 0x0, 0xfffffffe, 0x8, 0x2}, {0x9, 0x101, 0x0, 0x1, 0x100, 0x2}, {0x7, 0x5cbd, 0x10000, 0x4, 0x7, 0x92ff}, {0x5, 0x6, 0x4, 0x9, 0x5, 0x9}, {0x9, 0xfffff98b, 0x8, 0x9, 0x2, 0x3}, {0x3, 0xff, 0x9, 0x6, 0x6, 0x10001}, {0x4, 0xffff, 0x8000, 0x3, 0x81, 0x20000}, {0x1, 0x1, 0x6, 0x7, 0x1, 0x4000}, {0x7ff, 0x3ff, 0xe40a, 0x7, 0x3, 0x10001}, {0xb, 0xd, 0x9, 0x30, 0x7, 0xebbc}, {0xa, 0x7f, 0x5, 0x9, 0xc, 0x9}, {0x1, 0x1, 0x6, 0x7b19, 0x80000, 0x4}, {0x1, 0x9, 0x0, 0x7f, 0x7, 0xf69a}, {0x0, 0x9, 0x8, 0x7, 0x4b, 0x3}, {0x51, 0x3, 0x2ed, 0xff, 0xfffffffd, 0x401}, {0x6, 0x1, 0x0, 0xdac7, 0x3, 0xd}, {0x6, 0x1006, 0x0, 0xfffffff7, 0x8, 0x3}, {0x806e, 0x9e, 0x80, 0xffffffff, 0xfffff000, 0xfffffff8}, {0x4, 0x7ff, 0x8, 0x9, 0x0, 0x73deaf7e}, {0x29, 0x4, 0x4, 0xf, 0xffffc754}, {0x4, 0x1, 0x10001, 0x3, 0x9e5, 0x538}, {0xa, 0x1, 0xffffffff, 0x8, 0x100, 0x4}, {0x4, 0x0, 0x8000, 0x1, 0x4, 0xfffff7cb}, {0x400, 0x200, 0x100000, 0x1c, 0x800, 0x1c00}, {0x3, 0x81, 0xe, 0x6, 0x4, 0x7}], [{0x3, 0x1}, {0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3}, {0x2}, {0x5}, {}, {0x3}, {0x5, 0x1}, {0x3}, {0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x4}, {0x4}, {0x7}, {0x0, 0x1}, {0x4}, {0x3}, {0x6, 0x1}, {0x5}, {0x4}, {0x2}, {0x4}, {0x5}, {0x2, 0x1}, {0x2}, {0x4, 0x1}, {0x5}, {0x2, 0x1}, {0x5}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x3}, {0x4}, {0x3}, {0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x5}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x6c25a6da58bcaee9}, {0x226d596e0d911f29}, {0x2}, {0x1}, {0x1}, {0x4}, {0x4}, {0x3}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {0x2}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x6}, {0x2, 0x1}, {0x5}, {0x0, 0x1}, {}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {0x2}, {0x4, 0x1}, {}, {0x4, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x3}, {0x2}, {0x0, 0x1}, {0xd, 0x1}, {0x0, 0x1}, {0x3}, {0x3}, {}, {0x6, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x4}, {0x5}, {0x3}, {0x2}]}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xe98}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0200001900010029bd700000000000fc020000000000000000000000000000fe88000000000000000000000000000100000006000000000a0000002c00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000400000000000000000000010000000000000000080000000000000000000000000000000000000000000000000000001d000000000000007f00000000000000990c0000000000000000000000000000dd020000000000000000000000000000010100020000000084010500ac141439000000000000000000000000000004d32b00000000000000ac14140c000000000000000000000000000000000000ff00010000000000000000000000fc020000000000000000000000000000000000003200"/229], 0x23c}}, 0x40044) 14m26.058681124s ago: executing program 2 (id=5425): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r2, 0x29, 0x37, &(0x7f0000000080)=ANY=[], 0x8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23, 0x9, @empty, 0x8}, 0x1c) setsockopt$inet6_buf(r2, 0x29, 0x6, 0x0, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) accept$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, &(0x7f00000000c0)=0x1c) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r7, 0x117, 0x5, 0x0, 0x752) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002940)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$TUNGETFILTER(r4, 0x801054db, &(0x7f0000000440)=""/155) sendmsg$kcm(r5, &(0x7f0000002900)={&(0x7f0000000340)=@xdp={0x2c, 0x8, r9, 0x109}, 0x80, &(0x7f0000000140)}, 0x2885) 14m24.638414487s ago: executing program 2 (id=5430): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x14, r3, 0x1, 0x70bd2d, 0x25dfdbfa, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c80000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200e00000010c000280050001000000000008000740000000013c0010800800024000000007080001"], 0xc8}, 0x1, 0x0, 0x0, 0x4000090}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000006000000000000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000700008500000086000000bf0920000000000055090100048000009500000000000000cd0a0100000000002500000001000480180000000200048000000000f4ffffffae90f8ff00000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x61}, 0x94) 14m23.727222792s ago: executing program 2 (id=5434): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xd, 0x10, &(0x7f0000000000)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [@call={0x85, 0x0, 0x0, 0xc4}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0xf1, 0x0, 0x0, 0x6b, '\x00', 0x0, @sock_ops=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) 14m23.5038639s ago: executing program 2 (id=5435): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r1 = socket(0x8, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000700)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffffc}, @generic={0x65, 0x8, 0x0, 0xfffa}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @exit]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) 14m8.275094117s ago: executing program 32 (id=5435): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r1 = socket(0x8, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000700)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffffc}, @generic={0x65, 0x8, 0x0, 0xfffa}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @exit]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) 3.970781867s ago: executing program 1 (id=9332): socket$alg(0x26, 0x5, 0x0) (async) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha512)\x00'}, 0x58) (async) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha512)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000004780)=[{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)='2', 0x1}], 0x1}], 0x1, 0x40048000) accept4(r1, 0x0, 0x0, 0x0) 3.742528684s ago: executing program 1 (id=9335): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x14e24, 0x1000}, 0x1c) setsockopt$inet6_buf(r1, 0x29, 0xb, &(0x7f0000000140)="a56f35d26595af27dbae9e5198d058fd0eacf99d5a5626c62001ebe433a07d89f72c2844e60dd98d12304da3187da284d40aedd455b164eb00ef4046a8f15ac8b38c4a44d5319f56a913cebbe478ae7adb95501037c6a8f074b055b6ee1210df9b7301e9bd16d84d7094770178ea5d1900398c53b41c5829ac33adc71fcd986e0906f2", 0x83) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @rand_addr, 0x7fffffd}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000880)}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)="6c7831733ca886e99a61", 0xa}], 0x1}}], 0x2, 0xc8040) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x72}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x39) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x8000) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r5, @ANYBLOB="60005080110001004abee339084eeef16f162471f4000000080003000aac0f0005000200"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x80, 0x0, 0x2, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0xa9c, 0x24}}}}, [@NL80211_ATTR_BSS_BASIC_RATES={0x24, 0x24, [{0x48}, {0x5}, {0x1b, 0x1}, {0x2, 0x1}, {0x16}, {0x48}, {0x18, 0x1}, {0x18}, {0x1, 0x1}, {0x24, 0x1}, {0x5, 0x1}, {0xc95df9d82dc29d37}, {0x2}, {0x18, 0x1}, {0xb}, {0x36, 0x1}, {0x5}, {0x30, 0x1}, {0x24, 0x1}, {0x5}, {0x12}, {0x5}, {0x6c, 0x1}, {0x9, 0x1}, {0x36}, {0x0, 0x1}, {0x12, 0x1}, {0xb, 0x1}, {0x3}, {0x1, 0x1}, {0x18, 0x1}, {0x12, 0x1}]}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0xa}, @NL80211_MESHCONF_HT_OPMODE={0x6, 0x16, 0x3}]}, @NL80211_ATTR_BSS_BASIC_RATES={0x13, 0x24, [{0xc, 0x1}, {0x16, 0x1}, {0x1b}, {0x2, 0x1}, {0x2}, {0x9, 0x1}, {0x2}, {0x5}, {0xc}, {0x48, 0x1}, {0x1b}, {0x16}, {0x30, 0x1}, {0x48, 0x1}, {0xc}]}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x8000}, 0x50) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="0700000000000000000000000000000000000000fc1ea1bde4e3a005a1876b63dd76d6a91ef4c0233372e531e9daa58d1a66eb42f0e73f0f38ad5b4333de8676129a323616aa34bac468931788dc5a7b24b677f32103c8a178f8666924b68768db4d2a90a46adbb4efabffc51752505443b070b7dc3288", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r7, 0xffffffffffffffff}, 0x4) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xfffffffc, {0x0, 0x0, 0x0, r11, {0x0, 0x4}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x6, 0xc}, {}, {0xa, 0xe}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x8, 0x2, [@TCA_CGROUP_EMATCHES={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x84}, 0x40010) r12 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r13, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r13, {0xc, 0xc}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_LABEL={0x8, 0x46, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24008895}, 0x20040054) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000800)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0x98, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x1}, 0x880) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x19, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000ffffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000b700008500000082000000b7080000000000007b8af8ff00000000b70800000b0000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r14}, 0xc) splice(r1, 0x0, r0, 0x0, 0x7ffff010, 0x4) 3.256942321s ago: executing program 4 (id=9341): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000080)=@security={'security\x00', 0xe, 0x4, 0x330, 0xffffffff, 0xd0, 0xd0, 0x0, 0xffffffff, 0xffffffff, 0x298, 0x298, 0x298, 0xffffffff, 0x4, &(0x7f0000000000), {[{{@ip={@dev={0xac, 0x14, 0x14, 0x1d}, @dev={0xac, 0x14, 0x14, 0x35}, 0x0, 0xff, 'team0\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x8, 0x1, 0x2}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x0, 0x2, 0x0, 0x6, 0x4, 0x4], 0x6, 0x1}, {0x1, [0xf, 0x6, 0x5, 0x2, 0x4, 0x1], 0x2, 0x1}}}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@icmp={{0x28}, {0xd, 'j6', 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @local, 0x9, 0xc, [0x32, 0x2e, 0x13, 0x18, 0x12, 0x3c, 0x3b, 0x35, 0x12, 0x21, 0x13, 0x30, 0x8001, 0x2, 0x37, 0xd], 0x0, 0x2, 0x6}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local, 0x6a0, 0x0, [0x9, 0x5, 0xc, 0x31, 0x10, 0x11, 0x6, 0x36, 0x35, 0x19, 0x29, 0x7, 0x12, 0x2c, 0x39, 0x1e], 0x0, 0x3, 0x137}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x390) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610448000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) 2.981382513s ago: executing program 4 (id=9343): r0 = epoll_create1(0x0) r1 = socket$unix(0x1, 0x1, 0x0) close(r1) socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0x10009, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000002c0)) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="ff84b50ea1e2e5f2fb670efbbebbc126c9b1d16b136884634159dad05ce2492c624fff0ccc6c8d", 0x27}, {0x0}], 0x2, 0x0, 0x1f0}, 0x11) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffffe8, 0x0, 0xffffffffffffffff, 0x5a}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f086dd", 0x0, 0x64, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70}, 0x50) 2.844263938s ago: executing program 1 (id=9344): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000005000400000000000900020073797a300000000014000780080013400000000008001240000a1800050005000000000005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3000000}, @generic={0x67, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa, 0x0, 0xfffd, 0xfffffff8}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0xc}, 0x94) 2.671563696s ago: executing program 0 (id=9346): unshare(0x8000400) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x11e, 0x1b, 0x0, &(0x7f0000000000)=0xfffffffffffffe8c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x6, 0xe, &(0x7f0000000900)=@raw=[@ldst={0x2, 0x0, 0x6, 0xb, 0x4, 0xfffffffffffffffe}, @generic={0x7, 0x2, 0x0, 0x0, 0xffffffc0}, @generic={0xb7, 0x3, 0x0, 0x0, 0x5}, @generic={0xb7, 0x4}, @exit, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @generic={0x95}], &(0x7f0000001180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000021c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000002240)="0011223344550011223344560800", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80000) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) 2.5962135s ago: executing program 4 (id=9347): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x4, 0x4) socket$nl_crypto(0x10, 0x3, 0x15) (async) r1 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000007600)=[{&(0x7f0000007140)={0xe0, 0x13, 0x1, 0x70bd2d, 0x25dfdbfc, "", [@typed={0x8, 0x4c, 0x0, 0x0, @pid}, @typed={0x8, 0x75, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @nested={0x95, 0x40, 0x0, 0x1, [@generic="55ca19c098dcdc103b4cf7590a127f5adef5dca766d9ff64ab4e89b42af4306799a08d6dbdc8821465735ea703ad528f3da9b462b02dd8dc8199da6cfcadcf54937920c1f2affb2ceaa330903963ba0b0203401d8cd5f8adfa413be0cdc1e27d79f3df14c51fa4c063f8458bcfa86e94a3741d568a6c1131fa23034b51a4499c79525483dc", @typed={0x8, 0x157, 0x0, 0x0, @str='GPL\x00'}, @nested={0x4, 0x35}]}, @nested={0x25, 0x46, 0x0, 0x1, [@generic="89ed77d239c4f087c78dd43403873167f11c49437e5b486c4a54909a43ea43659b"]}]}, 0xe0}], 0x1, 0x0, 0x0, 0x1c001}, 0x20040044) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000440)={{0xffffffffffffffff, &(0x7f0000000000)='$%\x00', 0x8000, &(0x7f0000000040)={@align=0x80000000, {0xa051, 0x0, 0x8001, 0x1}}, 0x80, &(0x7f0000000080), &(0x7f00000000c0)=0x7}, 0x3, &(0x7f00000003c0)=[{0x3, 0x1, &(0x7f0000000100)='-\x00', &(0x7f0000000140)="ea8af48b6ffd659fdc6d1bc47d2488a3ea409cb21f3238f26b30bcd25df11ae69a16203600c31a326db5cb2a8ca4e1185bbd17e6f1b2948c5403b8fcbb864e7242762de893ece138cc4296a2cacbb6917c8c8c4e9dd20a1343ef12", 0x5b, 0x22}, {0x1, 0x800, &(0x7f00000001c0)='\x00', &(0x7f0000000200)="aa72de166bfa6ff77cde15b478170b16fb6c0894eb4a02d11f6cc49a89c1d27a8554e72ff77fb24c680a628af3652380433075f0bdb4e3e9f9cacfac79fe799bfc34a5a78cf5408c566e6a928c55ba62e91fd2f6e46c5b9d250672fd5c7168bdee1c175563153327683f5ce18796f92a8d78865039d519c8c0dd2a37026e48ba242fd646948a42892af004ab44c7bc904eb91e5255d64aa3f17d854b03b33ee8309e83487c82689bfc2e0fed60bd29f8c50f4c75db5351ad59b0fda52f91e52bcf23e0e276ac4f9c6567645c13ebc4e7484c495b84e2300818adbd7e7033c48c8faca390683c8f1a6e2ffb2e8656306867067ae80ae41ad7df", 0xf9, 0x1a}, {0x1, 0x81, &(0x7f0000000300)='\':)\\\x00', &(0x7f0000000340)="688492a9f98424c7cb8088127b95264ea813887dbee4135c4813e356dc687beb340b114cf9a869e5328156b6d8a37d6c8a2c752d94b45fd2be3d80fdfa122448ab0387cc5841ac5973932675f7df709ac57b53738bb68dd1a17aca85d2c3625eafda8924a99ab065c4", 0x69, 0x22}]}) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e20, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x1}}, [0x8, 0x100, 0x41c, 0x2, 0x599, 0x6, 0x9ae8, 0x8000000000000000, 0x100, 0x9, 0x80000000, 0x1, 0xa989, 0x4, 0x81]}, &(0x7f00000005c0)=0x100) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e20, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x1}}, [0x8, 0x100, 0x41c, 0x2, 0x599, 0x6, 0x9ae8, 0x8000000000000000, 0x100, 0x9, 0x80000000, 0x1, 0xa989, 0x4, 0x81]}, &(0x7f00000005c0)=0x100) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000600)={r3, 0x15, 0x20}, &(0x7f0000000640)=0xc) 2.26429455s ago: executing program 0 (id=9349): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x4}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x1, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0xae}], 0x0, 0x9, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x38}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0x100, 0x9, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0x8, r1}, 0x38) (async) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r1}, 0x38) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$tipc(0x1e, 0x0, 0x0) close(r2) 2.221395584s ago: executing program 4 (id=9350): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket(0x1, 0x80802, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000f80)=ANY=[@ANYBLOB="1802000001000000000000000000000085000000870000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b00)={r2, 0x0, 0xe, 0x0, &(0x7f00000001c0)="e0b9547ed387dbe9abc800000c94", 0x0, 0xeb7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f00000000c0)={0x10000001}) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32=r4, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000020000000000000009a88b9b3000000001abafff0010000000000"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x16, 0x18, &(0x7f0000000b80)=ANY=[@ANYBLOB="1800061b0097144df3dc5f0d466e61c70367076f548000001811000092727c622e122f7d21a9eaf31fe2005a66ea467223accae65aec4dc8726c0a95c9a58379c5be9525eede9c75ca34dcb417d4425fe9198186049fc10ffdd81738d51fee166ea8586753e85d00ea7052b8db5479be17d08b426359a105a1e0cf6383af4aa80c35bc421ceadf63af3f1ef70f0b8ccaff7736e9f4332c7e199d0079b339c8e2191f42ff6710cfc6f426ac48b802a73044f3fed2015ce0a47b1ba697e56122af687efa063bce4e5b2366", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES8=r0], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x4}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x2000) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r9 = accept4(r8, 0x0, 0x0, 0x800) sendmmsg$alg(r9, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x3}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r10, 0x215eb000) socket$unix(0x1, 0x1, 0x0) 2.166126901s ago: executing program 5 (id=9351): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@empty, 0x0, 0x400, 0x1000, 0x0, 0x2, 0x20, 0x10, 0x84}, {0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4000000000000}}}, 0xb8}, 0x1, 0x0, 0x0, 0x20008044}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001030000000000000000fc0100000000000000070000000000003ed300000000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 1.864222454s ago: executing program 0 (id=9353): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05080000000000000000070000060900010073797a30000000003c000000090a010400000000000000000700000308000a40000000000900020073797a31f5ff00000900010073797a30000000000800054000000021900000000c0a01030000000000000000070000000900020073797a31000000000900010073797a300000000064000380600000"], 0x114}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x40004}, 0x50) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x40004}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0x200, 0x70bd26, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x3, 0x4, 0x0, 0x1, 0x0, 0x5, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x10, 0x0, 0x7, 0x4], 0x2, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc, 0x0, 0x1000], [0x0, 0x4, 0x0, 0x0, 0xffff, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x2, 0xfffd, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008004}, 0x20000000) write(0xffffffffffffffff, &(0x7f0000000300)="600000001800050601000000000000000a400000fe040001000000001400200020010db8000100000000000000000001080004000100000006", 0x39) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="4000000041000100000000000000000001010000000000000400080004000280200001801000040000000000000000000000000004"], 0x40}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x4, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000006000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x4, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000006000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.83045331s ago: executing program 5 (id=9354): r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@rc, &(0x7f0000000080)=0x80, 0x80000) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xd0, r1, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0xd0}, 0x1, 0x0, 0x0, 0x8050}, 0x80) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f00000002c0)={0x0, 0x4f, 0x1, [0x7fffffffffffffff, 0x101, 0x2, 0x5, 0x3], [0xffffffffffffffff, 0x9, 0x5, 0x0, 0x64be, 0x6, 0x800, 0x9, 0xf5c, 0x6, 0x9, 0x5, 0xa, 0x4, 0x800, 0x1a4, 0x8001, 0x7, 0xb, 0x0, 0x80000001, 0x8000000000000000, 0x9, 0x6, 0x1, 0x4, 0x0, 0xffffffffffffff43, 0x0, 0x3, 0x40, 0x3000000, 0x8, 0x0, 0xfffffffffffffff9, 0x80000000, 0xd5c, 0x5bd67df1, 0x43b1, 0x0, 0x7d35, 0x4, 0x36ac, 0x100, 0x1, 0xae38, 0x1, 0x10001, 0x3, 0x5, 0x2, 0x7, 0x3, 0x675f, 0x200, 0x6, 0x0, 0xf, 0x1, 0x545, 0x7, 0xfffffffe00000, 0x100000000, 0x1, 0x3, 0x8, 0x1f, 0x9, 0x4, 0x8, 0x3, 0x1, 0x4, 0x8, 0x1, 0xd, 0x1, 0xffffffffffffff56, 0x800, 0x5, 0x3, 0x10, 0x2, 0xc, 0x4, 0x8, 0x10000, 0x9, 0x4, 0x0, 0x6, 0x4, 0x2f, 0x6, 0xfffffffffffffff8, 0x7, 0x4, 0x4, 0x8, 0x1ff, 0xfffffffffffff75a, 0x4, 0x1ff, 0xb, 0x1, 0x4, 0x1, 0x3, 0x7, 0x5, 0x6, 0x7, 0xb87c, 0x7, 0x3, 0x3, 0x6, 0x5, 0x2, 0xc]}) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000700)={0x0, 0x6, 0x0, [0x5, 0x3, 0x81, 0xf, 0x5], [0x7fae, 0x2, 0x18, 0x10000, 0x7, 0x2, 0x8, 0x8, 0x6, 0x3, 0x1, 0x8, 0x1, 0x8000, 0x7, 0x81, 0xd36, 0x4, 0x3, 0xffffffff00000001, 0x4e, 0x10001, 0x8, 0x9, 0x200, 0x7, 0x6, 0x9, 0x0, 0x7d4c, 0x7fffffff, 0xfff, 0x8fc, 0x8, 0x0, 0x7, 0xf8, 0x6, 0x2, 0x80000000, 0x667, 0x100000001, 0x8000, 0x8, 0x4955, 0x2, 0x1, 0xd, 0x2, 0x8000, 0xe9, 0x6, 0x10001, 0xa, 0x3, 0xffff, 0x9, 0x40, 0xf, 0x7, 0x7, 0xf26, 0x7, 0x4, 0x7, 0x100000001, 0x401, 0x80000001, 0xffffffffffffffff, 0x32f, 0x0, 0x4, 0x5, 0xfffffffffffffffe, 0x0, 0x4, 0xd, 0x8, 0x8, 0x6, 0x5, 0xd, 0x4, 0x4, 0x2, 0x5, 0x1, 0x3, 0x2, 0x0, 0x6, 0x6, 0x40, 0x8, 0x1, 0x8, 0x4000000000000000, 0x3, 0x401, 0x1000, 0x0, 0x5, 0x9, 0x5, 0xd, 0x5, 0xfffffffffffffff2, 0x1, 0x6, 0x7, 0x100000001, 0x10001, 0xfffffffffffffffa, 0x40, 0x2, 0x8, 0x8, 0x1000, 0x81, 0x547, 0xfffffffffffffffc]}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000b40)={0x12, 0x2, {0x2, @usage=0x7, 0x0, 0xffffffff, 0x48, 0x7fffffffffffffff, 0x29d, 0xaa, 0x200, @struct={0x1, 0x81}, 0x6, 0x0, [0x52b0, 0x9, 0xdb6, 0x8, 0x6f63, 0xc000000000]}, {0x400, @struct={0x0, 0x8}, r2, 0x1, 0x0, 0xffffffffffffffff, 0xbe, 0xffff, 0x12, @usage=0x3, 0x3, 0x5, [0x7fff, 0xb, 0x37, 0x8, 0xbee, 0x8]}, {0x80, @usage=0x4, r3, 0xfffffffffffffffd, 0x48, 0x4, 0x0, 0x6, 0x10, @struct={0x8, 0x5}, 0x2, 0xffffff93, [0x200, 0x3ff, 0x0, 0x5, 0x1000, 0xfffffffffffffff7]}, {0x3, 0x7ff, 0x167}}) ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, &(0x7f0000000f40)) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000001380)={0x0, 0x10, &(0x7f0000001340)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f00000013c0)=0x10) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000001400)={r4, 0x3}, &(0x7f0000001440)=0x8) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000001480), r6) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000014c0)={r5, @in={{0x2, 0x4e24, @loopback}}, 0x6, 0x9}, 0x90) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000001580), 0x4) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f00000016c0)={r0, &(0x7f00000015c0)='0000:00:10.0\x00', 0x0, &(0x7f0000001600)={@align=0x1162, {0x0, 0x40, 0x8001, 0xa}}, 0x149, &(0x7f0000001640), &(0x7f0000001680)=0x6}) sendmsg$NLBL_MGMT_C_VERSION(r6, &(0x7f00000017c0)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001780)={&(0x7f0000001740)={0x20, 0x0, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0xb, 0x1, '\\\xdc\x8b{+)\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x20000004) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000001800)=@sack_info={r4, 0x2, 0x8}, &(0x7f0000001840)=0xc) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000018c0), r0) sendmsg$TIPC_NL_PUBL_GET(r7, &(0x7f0000001ac0)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001900)={0x158, r8, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xc}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xe}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6000000}]}, @TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x24c4c819}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fffffff}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1000}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}]}]}, @TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "706f7ac7ddfcf3890135f14508b6d10625480480ba62c84016a25e479817beedde"}}]}, @TIPC_NLA_LINK={0x60, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7d53}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x593f}]}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x4000001}, 0xc846) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000001b00)={'filter\x00', 0x0, 0x0, 0x0, [0x6, 0x6, 0xf, 0x0, 0x6, 0x9]}, &(0x7f0000001b80)=0x78) sendmsg$TIPC_NL_BEARER_DISABLE(r7, &(0x7f0000001e00)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001c00)={0x1a8, r8, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x68, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e23, @loopback}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xf}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}]}, @TIPC_NLA_NODE={0x108, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_ID={0x6a, 0x3, "d71bd75c0ee11e5dbd2d5ea153bb214abd0b38354b5a8bb2fe84d27bb3338e7d8c10145a5623944b847839775b248b92b6db3603bd3f7c61d25b61886d09e6895b26f22eb9fae3408d13ddbb6fc13e6abc8829052302d6001c4de98b5ceceef4f51d0d038118"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x6}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0xc, 0x3, "94459ba6095a22cf"}, @TIPC_NLA_NODE_ID={0x66, 0x3, "7bd1ceed6629dd98237b38f9f87c6896e7d069e0926ed6a3ce3f3db44a0d6253a6e7a2eab1104e2d203b50459effac7972ee655f5b125e9656c365de555f343dd8ed3d8ce1f64f79957c9c2961ed0c1b71475d1a1c284917c9c29defa182733f8b7f"}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x8000}, 0x8010) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r7, 0x84, 0x12, &(0x7f0000001e40)=0x2, 0x4) r9 = accept4$unix(r7, &(0x7f0000001e80)=@abs, &(0x7f0000001f00)=0x6e, 0x800) ioctl$BTRFS_IOC_WAIT_SYNC(r9, 0x40089416, &(0x7f0000001f40)) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001fc0), r7) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r7, &(0x7f0000002080)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002040)={&(0x7f0000002000)={0x38, r10, 0x800, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x6d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x36}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2f}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x20000010) ioctl$XFS_IOC_BULKSTAT(r9, 0x8040587f, &(0x7f0000002300)={{0x7, 0x6, 0x7097dd6c, 0x80000000, 0x101}, &(0x7f00000020c0)=[{}, {}, {}]}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r11, &(0x7f0000002440)={&(0x7f0000002380)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002400)={&(0x7f00000023c0)={0x3c, 0x3, 0x1, 0x301, 0x0, 0x0, {0xa}, [@CTA_LABELS={0x28, 0x16, 0x1, 0x0, [0x6, 0x7, 0x800, 0x7fff, 0xa3b, 0xfff, 0x7, 0x4, 0xfa]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000) sendmsg$TIPC_CMD_GET_NETID(r7, &(0x7f0000002540)={&(0x7f0000002480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002500)={&(0x7f00000024c0)={0x1c, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x10) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r7, 0x84, 0x4, &(0x7f0000002580), &(0x7f00000025c0)=0x4) 1.77034983s ago: executing program 3 (id=9355): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$tcp_congestion(r0, &(0x7f0000000100)='reno\x00', 0x5) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x21, 0x0, 0x2) getsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0xe) recvmmsg(r1, 0x0, 0x0, 0x40012000, 0x0) 1.644488031s ago: executing program 1 (id=9356): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000480)={0x2, 0x3, 0x0, 0x9, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x6c, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_nat_t_port={0x1, 0x15, 0x4e20}, @sadb_x_nat_t_type={0x1, 0x14, 0x3}]}, 0x60}}, 0x0) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff, 0x3, 0x0, @void}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002380), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000023c0)={'veth1_to_batadv\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000002540)={&(0x7f0000002400)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000c0000000c00018008000100", @ANYRES32=r3, @ANYBLOB="200003800400010010000400004017b402000000000000000800020049"], 0x40}}, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x8, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) pselect6(0x40, &(0x7f00000000c0)={0x6, 0x8b, 0x3, 0x8, 0x1, 0x712df127, 0x0, 0x6}, &(0x7f0000000140)={0x7f, 0x4, 0x5, 0x14, 0x7, 0x4, 0x3, 0x4}, &(0x7f00000001c0)={0x10001, 0x7fffffffffffffff, 0x6, 0x7, 0xc7, 0x4, 0x0, 0x5facb55b}, &(0x7f0000000240), &(0x7f00000002c0)={&(0x7f0000000280)={[0x750c]}, 0x8}) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @empty, 0x7}, 0x1c) (async) listen(r6, 0x5) (async) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x28}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) (async) sendmsg$nl_netfilter(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900000600030006bb00003400028014000180080001007f000001080002007f0000011c00028005000100060000000600020006bb00000600030030390000080003000000000e08000700000000780d0005800900010070707470"], 0xbc}}, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000000)=[{0x6, 0x71, 0xc, 0x43}]}, 0x10) (async) getsockopt$sock_buf(r10, 0x1, 0x1a, 0xfffffffffffffffd, &(0x7f00000003c0)=0x4d) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 1.452101178s ago: executing program 0 (id=9357): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'wg1\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x24, 0x1e, 0x305, 0x1000000, 0x25dfdbfe, {}, [@typed={0x8, 0x3ffe, 0x0, 0x0, @pid}, @typed={0x8, 0x9, 0x0, 0x0, @fd}]}, 0x24}, 0x1, 0x8000000, 0x0, 0x400c880}, 0x0) sendto$l2tp(r3, &(0x7f0000000140)="93c97fd800e934a44b6dbdfdea5e30acfa8eb81f31ffbc1166a793e2e041332817584882cd7437fb115f8a959241f1b7e426ccdf3a5384cd3aeeee39e89dac86cf670b962f898056b8cdc98ca21c7058abefaf265fbc", 0x56, 0x44000, &(0x7f00000001c0)={0x2, 0x0, @local, 0x4}, 0x10) syz_emit_ethernet(0x4e, &(0x7f00000001c0)={@local, @local, @val={@void}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "080108", 0x14, 0x2f, 0x0, @mcast1, @mcast2, {[], {{0x0, 0x8906, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffe}}}}}}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x5}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x3b9aca00}]}}]}, 0x40}}, 0x0) 1.4508057s ago: executing program 5 (id=9358): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0xffffffc1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8044) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000280)=""/85, 0x55}], 0x2, 0x0, 0x0, 0xa1}}], 0x1, 0x2040000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e) setsockopt$inet_buf(r0, 0x0, 0x26, &(0x7f00000003c0)="182e4c5baf47a845897fda534e7cfbfa370ad52b2187574b6ac024403c2c92d2b5363d3b09a7151be163a01dc8d0471d25a2c688df02dc0e3deea14c4c3c0371f47438985ea3a138d87ffe2bee1adf909471aa017dd4628168d9a551f5fb16d2e2012477ec60f09d3ab7a6c067a40e7f1478a5cb5833b57b1e362b885414e376de28d5fea44de0cef13661a517f44495de8852d207422f0d67386e44221f5d6a5f8e2d86e4a81096092f950ab5a7f0a2f7c73ca4e1bf15c72a0f67842d7c195619c76515f8e41984a40e10e745b6ad12400dd6b9fc2df47080bcc47e456cb29e0259a0a97845b9dedc315bdfbb67204d", 0xf0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r2, 0x4058587a, &(0x7f0000000700)={{r1, &(0x7f00000004c0)='cgroup.controllers\x00', 0x40, &(0x7f0000000500)={@align=0x100000000000000, {0x1, 0x0, 0x58e, 0x7}}, 0x34400000, &(0x7f0000000540)={@_ha_fsid}, &(0x7f00000005c0)=0x8}, {[0x6, 0xa, 0x10, 0x1000]}, 0x5a6, 0xcf, &(0x7f0000000600)=""/207}) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYRES8=r0], 0x30}, 0x1, 0x0, 0x0, 0x40080}, 0x40050080) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)={0x4c, r5, 0x1, 0x70bd28, 0x40, {0x5}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @empty}}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @local}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x12}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4800}, 0x4) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) write$tun(r6, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x1, 0x80010, r2, 0x785ba000) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0xd0, 0x111, 0x4b4, 0xd0, 0xd4feffff, 0x1e0, 0x20a, 0x278, 0x1e0, 0x278, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, [0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0xffffff00], 'pimreg1\x00', 'veth1_vlan\x00', {}, {}, 0x6}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28}}, {{@ipv6={@local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [0x0, 0x0, 0x0, 0xff], 'syzkaller1\x00', 'caif0\x00', {0xff}, {0xff}}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) 1.450141504s ago: executing program 3 (id=9359): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000feffffff0000000000000000850000004100000018010000756c6c2500000000003c20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x11, 0x0, &(0x7f0000000040)="54cb62b700a391528b23c7109800629bd8", 0x0, 0x1408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9}, 0x50) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f00000005c0)={0x1f, 0x7, @none, 0x2, 0x2}, 0xe) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b000000000000000000000006000000001e0000abd92d98fb691e751f97965c3d36d86ca45a1722b95085ec24a6c30a4b4bfc00"/67, @ANYRES32=0x1, @ANYBLOB="cd00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000020000000500"/28], 0x50) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) socket$can_j1939(0x1d, 0x2, 0x7) vmsplice(r4, &(0x7f0000003fc0)=[{&(0x7f0000002b80)="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", 0x1000}, {&(0x7f0000003b80)="38d73cd1fdf6", 0x6}], 0x2, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x18, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, &(0x7f0000000300)='syzkaller\x00', 0x400, 0xda, &(0x7f0000000340)=""/218, 0x41000, 0x58, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000480)={0x1, 0x1, 0x7fff, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0xffffffffffffffff]}, 0x94) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f0000000680)={0xd}, 0x4) 1.228716868s ago: executing program 4 (id=9360): syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaa028eaaaa0180c200000086dd60b8192300000000c78900000000000000aafe8000000000000000314e270a9da0b83c0100000000000031"], 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x1ff, 0x0, 0x0, 0x41000, 0x1}, 0x94) (async) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) unshare(0x6a040000) 1.16807858s ago: executing program 1 (id=9361): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x29, 0x2, 0xfd, 0x5ae9}, {0x20, 0x7d, 0x4, 0xfffff024}, {0x6, 0x0, 0x7, 0x7}]}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4004000}, 0x850) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a88000000060a010400000000000000000a0000010900010073797a31000000005c000480580001800b0001007461726765740000480002802c0003009ac420002ef0afb9fdd672bad09dfb78c7699c74e82fa0c70000000000000000000000000000000008000240000000000e00010049444c4554494d45520000000900020073797a32"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x28, r4, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040194) sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x8c, r4, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffff47e}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffc}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xf}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1ff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x448d0}, 0x83) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) 977.802587ms ago: executing program 3 (id=9362): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) 963.093813ms ago: executing program 0 (id=9363): sendmsg$sock(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f0000000000)=@rc={0x1f, @any, 0xf}, 0x80, &(0x7f0000001880)=[{&(0x7f0000000100)="f1842067bc6a3d1b2cc50da3333b3c9658ac7b7d25eb371eccbd7ed84cbd2e9b9b58f62fa3ef845ef8ba09c20bfabb4c171c9c06a0ae6f097a008a03e18d278784db3f05abf680bcd31779f711cb17f8126780179b8080831e62f4fa193b72d62ff1425ae555180f37b1080014f2a42495d5a28e85c1239257ac31f806224d812c40236c9c6497b5ddd777514a1d184d579b89f1038856d858bd226d8b5a1b5fd7adcbca965622f786773de1663af03544defc080ab6dfff5fe4e85a5c2eacf85ca5", 0xc2}, {&(0x7f0000000640)="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", 0x1000}, {&(0x7f0000001640)}, {&(0x7f0000001680)="ec7e33245cae7bf3cf53f256f647206b638f3bb7fc9a1bdc7176d61d2eceb8d1", 0x20}, {&(0x7f00000016c0)="67eb960754743609b993fb59981d7942ef4a80878fa44d1356f030645ff40c4f7b1c064475d2b425bba9c77b169dc47f98ef0b025198472e5594b1b0d1336d5e77764869472d1679e9c7dcea32b697d32fef506a8a705321134c87c2cfb1a5d4a7e62f648ba021c5351744467c4d1e5f126da643c04e67f3202b5f95e85f93b20f", 0x81}, {&(0x7f0000001780)="ec0bf59ff0d75140d4dcf10d2c26d143d26956e39191843cb1da5577a59006e810859be5d13cb2efdaec7090c1a526f5e8fcb9169f60ed11e7856fb0cd9e7540b9c696e81efed732d9cc71c36dff36c21bddef4bc77e500d33d8c08c9000e59897c072eb7da30dc4b3f24f3fcca5435d68d367945ce60bb80188ae8f3d2858d9bb04ce88636f98e5b9767684b3bea2e5ae62f74342d89bbde6b2a6867df762c2b79fa1b7908e7d089e6764c5af3cf4b119d166989bb44b6138939ee255665254fc113ebcd6a2a77553", 0xc9}], 0x6, &(0x7f0000001900)=[@timestamping={{0x14, 0x1, 0x25, 0xe}}, @txtime={{0x18, 0x1, 0x3d, 0x10000}}, @mark={{0x14, 0x1, 0x24, 0x8f}}], 0x48}, 0x24000000) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000180)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='batadv0\x00', 0xfc3d) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@setlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4280}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_to_bond\x00'}, @IFLA_MASTER={0x8, 0x3a}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004804}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x20}, 0x0) sendto$inet6(r0, &(0x7f00000000c0)="797d82e4f660df92e576727698ce19ee1a436e79fca85e2f", 0x18, 0x3b00, 0x0, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000280)={0x3c, 0x18, '\x00', [@jumbo={0xc2, 0x4, 0x3}, @jumbo={0xc2, 0x4, 0xffff1571}, @ra={0x5, 0x2, 0x3a8}, @ra={0x5, 0x2, 0x9c00}, @generic={0x8, 0xab, "51051bec62ca06e77eab77ef59d4fc7d42b51e3f93a399c103de8fe6176a231ee615ee995d3a236bfde36adaa48078ae9c20fc3950a92f3d521329e3cac81f769af2b8fca2d899df00e0bb6d59c87941f4ccb9b7b8da56b218e3aa7b145c4e6e3d543bef583891e2888da082f80baba522e3967ca0713e8c2fb11d5d02e53ba90b3d0506103a0003748713e6403d9df51c9b89225db8e8806dc3bd8fe3d5b6c4c8cf55dff0812fc673e85b"}]}, 0xd0) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000005c0)={@loopback, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3, 0x2, 0x5, 0x100, 0x9af, 0x8c20022}) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x13, &(0x7f00000003c0)=0xfffffffd, 0x4) 864.468642ms ago: executing program 5 (id=9364): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@empty, 0x0, 0x400, 0x1000, 0x0, 0x2, 0x20, 0x10, 0x84}, {0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4000000000000}}}, 0xb8}, 0x1, 0x0, 0x0, 0x20008044}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001030000000000000000fc0100000000000000100000000000003ed300000000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 725.780785ms ago: executing program 3 (id=9365): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=@newtaction={0x78, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x64, 0x1, [@m_gact={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0x30, 0x1, 0x0, 0x0, {{0xa}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0200001900010029bd700000000000fc020000000000000000000000000000fe88000000000000000000000000000100000006000000000a0000002c000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000400000000000000000000010000000000000000080000000000000080ffffff000000000000000000000000000000001d000000000000007f00000000000000990c0000000000000000000000000000dd020000000000000000000000000000010100020000000084010500ac141439000000000000000000000000000004d32b00000000"], 0x23c}}, 0x40044) 521.683316ms ago: executing program 5 (id=9366): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000cc0)={0x2c, r1, 0x1, 0x70bd24, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20009005}, 0x4000080) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000008c0)=@raw={'raw\x00', 0x8, 0x3, 0x3b8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x2e8, 0xffffffff, 0xffffffff, 0x2e8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast1, @mcast2, [0xff000000, 0x0, 0xff000000, 0xffffffff], [0xff, 0xffffff00, 0xffffffff, 0xffffff00], 'bond_slave_0\x00', 'team_slave_1\x00', {}, {}, 0x2c, 0x2, 0x6, 0x8}, 0x0, 0xe0, 0x100, 0x60030000, {0x0, 0xff000000}, [@common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x8, {0xffc0000000}}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@local, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'syzkaller0\x00', 'bridge_slave_1\x00', {}, {}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x1c8, 0x1e8, 0x0, {}, [@common=@ipv6header={{0x28}, {0x2c, 0x10, 0x1}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x10000006, 0x4, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) 320.035981ms ago: executing program 0 (id=9367): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xfd}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0xc}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x60}, 0x1, 0x0, 0x0, 0x40010}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'team_slave_1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r0, r3, 0x25, 0x4, @void}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f0000000000)={0x2, 0x4e21, @remote}, 0x10, 0x0}, 0x20004010) unshare(0x20000400) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x10, r4, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x1c, 0x23, 0x9, 0x70bd25, 0x25dfd3ff, {0x1}, [@typed={0x8, 0x1, 0x0, 0x0, @ipv4=@loopback}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040811}, 0x8410) getsockopt$inet6_mptcp_buf(r5, 0x11c, 0x1, 0x0, &(0x7f0000000000)) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newlink={0x28, 0x10, 0x1, 0x70bd28, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) 318.252821ms ago: executing program 3 (id=9368): unshare(0x20040600) pipe(&(0x7f0000000240)={0xffffffffffffffff}) tee(r0, r0, 0x200, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_group_source_req(r1, 0x29, 0x7, &(0x7f0000000600)={0x7fff, {{0xa, 0x4e24, 0x5, @empty, 0xffffffff}}, {{0xa, 0x4e20, 0x1000009, @loopback, 0xfffffffa}}}, 0x108) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000040)) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x1}, 0x0) 317.646789ms ago: executing program 5 (id=9369): r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4010480) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a300000000048000000030a01040000000000000000020000000900010073797a30000000000900030073797a30000000001400048008000140000000030800024000000000080005400000000198000000060a01040000000000000000020000000900010073797a30000000000900020073797a30000000006c000480680001800a0001006d61746368000000580002800e000100686173686c696d697400000008000240000000013c0003006c6f"], 0x128}}, 0x0) r1 = socket(0x28, 0xa, 0xe25) r2 = accept4(r1, 0x0, &(0x7f0000000080), 0x80800) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r1) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000580)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, r5, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DURATION={0x17, 0x57, 0x1338}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x11fd}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000c0}, 0x40080) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r7, @ANYBLOB="0000000002000000b705000008000000850000005e00000095"], &(0x7f0000000200)='syzkaller\x00', 0x2, 0xff6, &(0x7f0000001e00)=""/4086}, 0x90) setsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000500)=0x1, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000001500010300000000000000000a00000008000200", @ANYRES16=r4], 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000080) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x80}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r2) sendmsg$nl_route(r8, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x5ba8aec43a755617, 0x70ad27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x800, 0x6358b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0x8}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x15}, 0xc084) r9 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="050000000000000000f2e1cfb7e807a8dd"], 0x50) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r10) r12 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000700)=@base={0x2, 0x7, 0x8, 0x6, 0x0, 0x1}, 0x50) r13 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r13, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r13, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r12, &(0x7f0000000280), &(0x7f0000000a80)=@udp6=r13}, 0x20) sendmsg$IEEE802154_START_REQ(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000000d0000000500070012000000050018007f00000006000800feff0000050017000000000005001a000000000006000a00ffff00000500190004000000050007000700000005001b00ff0000000500010001000000060008"], 0x6c}, 0x1, 0x0, 0x0, 0x18000}, 0x0) sendmsg$nl_route(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@bridge_getneigh={0x20, 0x1e, 0x3c964e403b131b43, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x460}}, 0x20}}, 0x0) 151.524194ms ago: executing program 3 (id=9370): syz_init_net_socket$llc(0x1a, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000380000003800000003000000010000000000000100000000000000000000000000000001050000001000000000000000000000030000000001"], 0x0, 0x53, 0x0, 0x1}, 0x28) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10], 0xff, [0x5, 0xfffe, 0x6, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2006, 0x0, 0x8001]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x800}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000000)={@remote, r5}, 0x14) accept$packet(r0, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000340)=0x14) setsockopt$inet6_mreq(r4, 0x29, 0x1c, &(0x7f0000000040)={@remote, r5}, 0x14) r6 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r6, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0xfee7, &(0x7f0000000140)=[{&(0x7f00000001c0)="d80000001c0081064e81f782db44b9040a1d08040000000000000aa1180002000607002603600e12080b0f0000810401a8001605200001400200000803604e0cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee422fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef5d2defd5ccae8d3fb7c27a1059ae31c60e2234d732", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x400c0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000040)={0x1c, 0x0, 0x300, 0x70bc2d, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4048804) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r7, 0x8b27, &(0x7f0000000040)) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) setsockopt$XDP_UMEM_REG(r9, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) r10 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r10, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000640)={r8, r4, 0x5, 0x8b, &(0x7f00000004c0)="9356e31ebaaa56b2c37f08563abfea5c76f5a470cf97c3f8d7f67202bc493914270b087806a28930ddd8818e6d0e4f0beba91781eda514790e18f89887e6532197251b5ab8915a9d92d4d5173ee9c243b6f35834d2c8ec884c74a389ff71a8321154325046b04ba2a93d25883adf79c83107df576f5f0127c520e8a4a142501e404b8388b067a733b45bb8", 0x0, 0x6, 0x8, 0x800, 0x5, 0x2, 0x5, 'syz1\x00'}) connect$inet(r10, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r10, &(0x7f0000007fc0), 0x800001d, 0x0) socket$nl_route(0x10, 0x3, 0x0) 94.751406ms ago: executing program 4 (id=9371): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x3c, r1, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x16c}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}]}, 0x3c}}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2, 0x1}}, {0x4}}]}]}, 0x50}}, 0x4000010) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000fc0), r6) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000240)=0x110, 0x4) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r6, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000200)={0x40, r7, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0xf}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000001}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x2004800) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xe, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x78, 0x30, 0x9, 0x0, 0x0, {}, [{0x64, 0x1, [@m_simple={0x60, 0x3, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x9, 0x7fffffff, 0xffffffffffffffff, 0xe, 0x1}}, @TCA_DEF_PARMS={0x18, 0x2, {0x1, 0x3, 0x0, 0x200, 0x4aae}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x78}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a00001400028010000b800c"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(0xffffffffffffffff, 0x5, &(0x7f0000000340)="db312b9bfbb8270f9e7f106a804a28f239d11e38da7543d5159c9e561a9c3f6e33") r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000340), 0x7ff, r10}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001880), &(0x7f0000001900), 0x8, r10}, 0x38) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100014800c00", @ANYRES8=r11], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r5, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r7, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000800}, 0x11) 0s ago: executing program 1 (id=9372): r0 = socket(0x2b, 0x80801, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f00000000c0)=0x400) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f00000001c0)={r0, &(0x7f0000000080)='!\x00', 0x200000, &(0x7f0000000100)={@_ha_fsid={[0x4d, 0x7]}, {0x401, 0x40, 0x8, 0x1ff}}, 0xffff, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000180)=0x9}) sendmsg$tipc(r2, &(0x7f0000000480)={&(0x7f0000000200)=@id={0x1e, 0x3, 0x3, {0x4e20, 0x4}}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000240)="baf637b1c9b0471a6ccd8e0f5214880f687fd4362ff334e5de58af192a93c14dc23949da52b86303bfeb4f2e1b79654f9e4bfa72c263e9da9e67093d606a4f771d8449f5e6fc054bfbf7955c297792f0841ae3cef9243a", 0x57}, {&(0x7f00000002c0)="2c5a023aa6aed17c65fc345d0222c60214e8036c492a31060a07e6ab5bdf545f64fb5a2340a3c32cf406fde878183d19024a41539140eae84986650e95f993e2feacbbf9e30b241c9404491ff2b94e2aec638c596a9a6889a90d36c292eb255780b8f5f06f8535e5fe6647291857b521284a34ae79b546e800bcd2b51cddac56dc788fb5fcb7e1b3476a9c4a850694acfa316f32149d32221204a2fa86c3d76fb8ef83368158d9f544dd610dfa6483215d6078347ee09be5265c5f884c294b8826a7cc094b5e2bd544f9157bac966c5a41db0b2fdbe4a1b89763578e9bd4027a35e56e9818d685d3c5b5652fcf9e2759dcc8d74a", 0xf4}], 0x2, &(0x7f0000000400)="31749d25dc1145b39c1229780cbba2149694af1e5c24f089e6a1cf3398ccd082c662a39db85792c4281e397e0b0c1f3374cfcadef798b7e51eaf799cf31a368c60e3", 0x42, 0x4}, 0x0) r3 = gettid() ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000000)=r3) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000000)=r3) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f0000001ac0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001a80)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x1508}, 0x1, 0x0, 0x0, 0x10}, 0x8) sendto$inet6(r0, 0x0, 0x0, 0x2200c055, &(0x7f0000000500)={0xa, 0x4e1e, 0x0, @loopback={0x0, 0xa0211fffe000001}, 0x3}, 0x1c) kernel console output (not intermixed with test programs): 000000000002e [ 1518.318241][ T7345] RAX: ffffffffffffffda RBX: 00007fba0dc25fa0 RCX: 00007fba0d99e159 [ 1518.318255][ T7345] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000006 [ 1518.318268][ T7345] RBP: 00007fba0e8ac090 R08: 0000000000000000 R09: 0000000000000000 [ 1518.318280][ T7345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1518.318292][ T7345] R13: 00007fba0dc26038 R14: 00007fba0dc25fa0 R15: 00007ffe59955118 [ 1518.318323][ T7345] [ 1518.399894][ T7043] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1518.980212][T26172] Bluetooth: hci2: command tx timeout [ 1519.090733][ T7366] FAULT_INJECTION: forcing a failure. [ 1519.090733][ T7366] name failslab, interval 1, probability 0, space 0, times 0 [ 1519.091019][ T7366] CPU: 1 UID: 0 PID: 7366 Comm: syz.0.8903 Not tainted syzkaller #0 PREEMPT(full) [ 1519.091046][ T7366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1519.091060][ T7366] Call Trace: [ 1519.091069][ T7366] [ 1519.091079][ T7366] dump_stack_lvl+0xe8/0x150 [ 1519.091123][ T7366] should_fail_ex+0x410/0x560 [ 1519.091161][ T7366] should_failslab+0xa8/0x100 [ 1519.091188][ T7366] __kmalloc_cache_noprof+0xa3/0x600 [ 1519.091221][ T7366] ? __kmalloc_cache_noprof+0x14d/0x600 [ 1519.091250][ T7366] ? sctp_add_bind_addr+0x8c/0x370 [ 1519.091276][ T7366] ? sctp_add_bind_addr+0x8c/0x370 [ 1519.091309][ T7366] sctp_add_bind_addr+0x8c/0x370 [ 1519.091345][ T7366] sctp_copy_local_addr_list+0x31a/0x4e0 [ 1519.091376][ T7366] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 1519.091404][ T7366] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1519.091432][ T7366] ? sctp_v6_is_any+0x64/0x80 [ 1519.091463][ T7366] ? sctp_copy_one_addr+0x93/0x360 [ 1519.091492][ T7366] sctp_bind_addr_copy+0xb3/0x3c0 [ 1519.091519][ T7366] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1519.091547][ T7366] sctp_connect_new_asoc+0x2ff/0x6b0 [ 1519.091583][ T7366] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1519.091622][ T7366] ? __local_bh_enable_ip+0xd6/0x140 [ 1519.091650][ T7366] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1519.091677][ T7366] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1519.091711][ T7366] sctp_sendmsg+0x159b/0x2d00 [ 1519.091752][ T7366] ? kstrtouint+0x6e/0xe0 [ 1519.091783][ T7366] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1519.091811][ T7366] ? lock_acquire+0x115/0x350 [ 1519.091834][ T7366] ? get_pid_task+0x20/0x1f0 [ 1519.091873][ T7366] ? aa_sock_msg_perm+0xf5/0x210 [ 1519.091896][ T7366] ? sock_rps_record_flow+0x19/0x350 [ 1519.091929][ T7366] ? inet_sendmsg+0x298/0x320 [ 1519.091959][ T7366] ? __pfx_inet_sendmsg+0x10/0x10 [ 1519.091994][ T7366] sock_sendmsg_nosec+0x10e/0x180 [ 1519.092025][ T7366] __sys_sendto+0x408/0x5a0 [ 1519.092046][ T7366] ? ksys_write+0x1e6/0x270 [ 1519.092079][ T7366] ? __pfx___sys_sendto+0x10/0x10 [ 1519.092097][ T7366] ? __mutex_unlock_slowpath+0x731/0x900 [ 1519.092162][ T7366] ? __pfx_ksys_write+0x10/0x10 [ 1519.092198][ T7366] __x64_sys_sendto+0xde/0x100 [ 1519.092224][ T7366] do_syscall_64+0x166/0x520 [ 1519.092253][ T7366] ? trace_irq_disable+0x3b/0x140 [ 1519.092274][ T7366] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1519.092296][ T7366] ? clear_bhb_loop+0x70/0xc0 [ 1519.092323][ T7366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1519.092343][ T7366] RIP: 0033:0x7fba0d99e159 [ 1519.092365][ T7366] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1519.092383][ T7366] RSP: 002b:00007fba0e88b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1519.092409][ T7366] RAX: ffffffffffffffda RBX: 00007fba0dc26090 RCX: 00007fba0d99e159 [ 1519.092425][ T7366] RDX: 0000000000034000 RSI: 0000200000000500 RDI: 0000000000000008 [ 1519.092439][ T7366] RBP: 00007fba0e88b090 R08: 0000200000000140 R09: 000000000000001c [ 1519.092454][ T7366] R10: 000000002000c851 R11: 0000000000000246 R12: 0000000000000002 [ 1519.092467][ T7366] R13: 00007fba0dc26128 R14: 00007fba0dc26090 R15: 00007ffe59955118 [ 1519.092502][ T7366] [ 1520.485057][ T7222] bridge0: port 1(bridge_slave_0) entered blocking state [ 1520.496619][ T7222] bridge0: port 1(bridge_slave_0) entered disabled state [ 1520.507655][ T7222] bridge_slave_0: entered allmulticast mode [ 1520.526708][ T7222] bridge_slave_0: entered promiscuous mode [ 1520.617076][ T7391] veth1_to_team: entered allmulticast mode [ 1520.658984][ T5845] net_ratelimit: 94 callbacks suppressed [ 1520.659035][ T5845] bond2: (slave bridge1): failed to get link speed/duplex [ 1520.659080][ T5845] bond8: (slave batadv0): failed to get link speed/duplex [ 1520.755237][ T7222] bridge0: port 2(bridge_slave_1) entered blocking state [ 1520.785421][ T7222] bridge0: port 2(bridge_slave_1) entered disabled state [ 1520.785646][ T7222] bridge_slave_1: entered allmulticast mode [ 1520.798606][ T7222] bridge_slave_1: entered promiscuous mode [ 1520.814843][ T7388] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8908'. [ 1520.959859][ T5279] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1521.120152][ T2758] bond2: (slave bridge1): failed to get link speed/duplex [ 1521.185162][ T7042] bond8: (slave batadv0): failed to get link speed/duplex [ 1521.292860][ T7222] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1521.316393][ T7222] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1521.397696][T22847] hsr_slave_0: left promiscuous mode [ 1521.403611][T22847] hsr_slave_1: left promiscuous mode [ 1521.414060][T22847] dummy0: left allmulticast mode [ 1521.579640][ T7418] netlink: 'syz.1.8912': attribute type 1 has an invalid length. [ 1521.806499][ T7425] netlink: 104 bytes leftover after parsing attributes in process `syz.1.8912'. [ 1522.542045][T14329] bond8: (slave batadv0): failed to get link speed/duplex [ 1522.542327][T14329] bond2: (slave bridge1): failed to get link speed/duplex [ 1522.681800][ T7418] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1522.688350][T14329] bond2: (slave bridge1): failed to get link speed/duplex [ 1522.717928][ T7430] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8915'. [ 1522.816903][ T7222] team0: Port device team_slave_0 added [ 1522.833118][ T7222] team0: Port device team_slave_1 added [ 1523.024249][ T7433] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8917'. [ 1523.033618][ T7433] openvswitch: netlink: Flow actions attr not present in new flow. [ 1523.125498][ T7436] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8917'. [ 1523.274988][ T7440] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8916'. [ 1523.311485][ T7222] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1523.311729][ T7222] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1523.311757][ T7222] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1523.315626][ T7222] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1523.315639][ T7222] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1523.315664][ T7222] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1523.452773][ T7445] netlink: 240 bytes leftover after parsing attributes in process `syz.5.8916'. [ 1523.467358][ T608] bond8: (slave batadv0): failed to get link speed/duplex [ 1523.467664][ T608] bond2: (slave bridge1): failed to get link speed/duplex [ 1523.501888][ T7445] netlink: 'syz.5.8916': attribute type 9 has an invalid length. [ 1523.588739][ T7437] syzkaller0: entered promiscuous mode [ 1523.594344][ T7437] syzkaller0: entered allmulticast mode [ 1523.744827][T22847] IPVS: stop unused estimator thread 0... [ 1523.855833][ T7222] hsr_slave_0: entered promiscuous mode [ 1523.865938][ T7222] hsr_slave_1: entered promiscuous mode [ 1523.872839][ T7222] debugfs: 'hsr0' already exists in 'hsr' [ 1523.884532][ T7222] Cannot create hsr debugfs directory [ 1523.918872][ T7455] netlink: 1319 bytes leftover after parsing attributes in process `syz.4.8921'. [ 1524.370854][ T7467] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8924'. [ 1524.558585][ T7482] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8925'. [ 1525.244224][ T7222] netdevsim netdevsim3 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1525.389998][ T7498] netlink: 'syz.5.8929': attribute type 1 has an invalid length. [ 1525.901563][ T7222] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1526.398412][ T2758] net_ratelimit: 13 callbacks suppressed [ 1526.398462][ T2758] bond2: (slave bridge1): failed to get link speed/duplex [ 1526.398520][ T2758] bond8: (slave batadv0): failed to get link speed/duplex [ 1526.491259][ T7528] tipc: Enabled bearer , priority 0 [ 1526.492399][ T7510] tipc: Resetting bearer [ 1526.686251][ T7222] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1526.754142][ T7523] syzkaller0: entered promiscuous mode [ 1526.754185][ T7523] syzkaller0: entered allmulticast mode [ 1526.974770][ T7544] __nla_validate_parse: 1 callbacks suppressed [ 1526.974831][ T7544] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8936'. [ 1527.001405][ T7505] tipc: Resetting bearer [ 1527.049591][ T7505] tipc: Disabling bearer [ 1527.108041][ T7546] FAULT_INJECTION: forcing a failure. [ 1527.108041][ T7546] name failslab, interval 1, probability 0, space 0, times 0 [ 1527.108534][ T7546] CPU: 1 UID: 0 PID: 7546 Comm: syz.5.8937 Not tainted syzkaller #0 PREEMPT(full) [ 1527.108559][ T7546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1527.108571][ T7546] Call Trace: [ 1527.108579][ T7546] [ 1527.108587][ T7546] dump_stack_lvl+0xe8/0x150 [ 1527.108621][ T7546] should_fail_ex+0x410/0x560 [ 1527.108652][ T7546] ? __alloc_skb+0x1db/0x7a0 [ 1527.108679][ T7546] should_failslab+0xa8/0x100 [ 1527.108703][ T7546] ? __alloc_skb+0x1db/0x7a0 [ 1527.108727][ T7546] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 1527.108753][ T7546] ? __alloc_skb+0x18d/0x7a0 [ 1527.108779][ T7546] ? __alloc_skb+0x1db/0x7a0 [ 1527.108811][ T7546] __alloc_skb+0x1db/0x7a0 [ 1527.108842][ T7546] netlink_ack+0x136/0xb30 [ 1527.108862][ T7546] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1527.108897][ T7546] ? __pfx_devlink_nl_post_doit+0x10/0x10 [ 1527.108988][ T7546] ? __pfx_ref_tracker_free+0x10/0x10 [ 1527.109018][ T7546] netlink_rcv_skb+0x2a4/0x4a0 [ 1527.109042][ T7546] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1527.109070][ T7546] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1527.109107][ T7546] ? down_read+0x2be/0x330 [ 1527.109132][ T7546] genl_rcv+0x28/0x40 [ 1527.109157][ T7546] netlink_unicast+0x7bd/0x940 [ 1527.109188][ T7546] netlink_sendmsg+0x813/0xb40 [ 1527.109220][ T7546] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1527.109251][ T7546] ? apparmor_socket_sendmsg+0x98/0x360 [ 1527.109281][ T7546] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1527.109302][ T7546] sock_sendmsg_nosec+0x13a/0x180 [ 1527.109330][ T7546] ____sys_sendmsg+0x54e/0x850 [ 1527.109356][ T7546] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1527.109385][ T7546] ? import_iovec+0x73/0xa0 [ 1527.109410][ T7546] ___sys_sendmsg+0x2a5/0x360 [ 1527.109429][ T7546] ? __lock_acquire+0x6df/0x2e50 [ 1527.109454][ T7546] ? __pfx____sys_sendmsg+0x10/0x10 [ 1527.109509][ T7546] ? __fget_files+0x2a/0x420 [ 1527.109532][ T7546] ? __fget_files+0x3a2/0x420 [ 1527.109565][ T7546] __x64_sys_sendmsg+0x1b1/0x290 [ 1527.109594][ T7546] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1527.109635][ T7546] do_syscall_64+0x166/0x520 [ 1527.109662][ T7546] ? trace_irq_disable+0x3b/0x140 [ 1527.109680][ T7546] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1527.109699][ T7546] ? clear_bhb_loop+0x70/0xc0 [ 1527.109723][ T7546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1527.109741][ T7546] RIP: 0033:0x7f484039e159 [ 1527.109760][ T7546] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1527.109778][ T7546] RSP: 002b:00007f48411e4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1527.109800][ T7546] RAX: ffffffffffffffda RBX: 00007f4840625fa0 RCX: 00007f484039e159 [ 1527.109814][ T7546] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000000000000004 [ 1527.109826][ T7546] RBP: 00007f48411e4090 R08: 0000000000000000 R09: 0000000000000000 [ 1527.109838][ T7546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1527.109850][ T7546] R13: 00007f4840626038 R14: 00007f4840625fa0 R15: 00007ffea4e21d48 [ 1527.109880][ T7546] [ 1527.268942][ T7544] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8936'. [ 1527.268977][ T7544] netlink: 'syz.1.8936': attribute type 20 has an invalid length. [ 1527.268990][ T7544] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8936'. [ 1527.533004][ T7222] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1527.578424][ T7552] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8938'. [ 1527.632031][ T7557] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1527.676038][T22847] bond2: (slave bridge1): failed to get link speed/duplex [ 1527.676302][T22847] bond8: (slave batadv0): failed to get link speed/duplex [ 1527.909746][ T7043] bond8: (slave batadv0): failed to get link speed/duplex [ 1527.910011][ T7043] bond2: (slave bridge1): failed to get link speed/duplex [ 1527.994348][ T7565] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1528.048848][T22847] bond2: (slave bridge1): failed to get link speed/duplex [ 1528.048935][T22847] bond8: (slave batadv0): failed to get link speed/duplex [ 1528.227052][T14329] bond2: (slave bridge1): failed to get link speed/duplex [ 1528.824396][ T7595] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8946'. [ 1529.099394][ T7609] netlink: 48 bytes leftover after parsing attributes in process `syz.0.8948'. [ 1529.099637][ T7609] netlink: 'syz.0.8948': attribute type 2 has an invalid length. [ 1529.099654][ T7609] netlink: 'syz.0.8948': attribute type 1 has an invalid length. [ 1529.310268][ T7604] bond2 (unregistering): Released all slaves [ 1529.624443][ T7222] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1529.643387][ T7222] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1529.652860][ T7222] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1529.707994][ T7222] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1529.774436][ T7222] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1529.907982][ T7222] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1529.914044][ T7222] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1530.221049][ T7651] netlink: 'syz.5.8954': attribute type 1 has an invalid length. [ 1530.229762][ T7222] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1530.261260][ T7635] hsr0: entered allmulticast mode [ 1530.261302][ T7635] hsr_slave_0: entered allmulticast mode [ 1530.662115][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1530.807306][ T7665] pimreg: entered allmulticast mode [ 1530.838309][ T7665] syzkaller1: entered promiscuous mode [ 1530.838351][ T7665] syzkaller1: entered allmulticast mode [ 1530.941202][ T7668] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8956'. [ 1531.029067][ T7669] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8956'. [ 1531.172813][ T7222] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1531.253035][ T7222] 8021q: adding VLAN 0 to HW filter on device team0 [ 1531.314901][T22847] bridge0: port 1(bridge_slave_0) entered blocking state [ 1531.315038][T22847] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1531.418811][ T7678] FAULT_INJECTION: forcing a failure. [ 1531.418811][ T7678] name failslab, interval 1, probability 0, space 0, times 0 [ 1531.431934][ T7678] CPU: 0 UID: 0 PID: 7678 Comm: syz.1.8958 Not tainted syzkaller #0 PREEMPT(full) [ 1531.431963][ T7678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1531.431976][ T7678] Call Trace: [ 1531.431985][ T7678] [ 1531.431996][ T7678] dump_stack_lvl+0xe8/0x150 [ 1531.432032][ T7678] should_fail_ex+0x410/0x560 [ 1531.432068][ T7678] should_failslab+0xa8/0x100 [ 1531.432095][ T7678] __kmalloc_cache_noprof+0xa3/0x600 [ 1531.432126][ T7678] ? __kmalloc_cache_noprof+0x14d/0x600 [ 1531.432154][ T7678] ? sctp_add_bind_addr+0x8c/0x370 [ 1531.432179][ T7678] ? sctp_add_bind_addr+0x8c/0x370 [ 1531.432210][ T7678] sctp_add_bind_addr+0x8c/0x370 [ 1531.432240][ T7678] sctp_copy_local_addr_list+0x31a/0x4e0 [ 1531.432268][ T7678] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 1531.432295][ T7678] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1531.432321][ T7678] ? sctp_v6_is_any+0x64/0x80 [ 1531.432349][ T7678] ? sctp_copy_one_addr+0x93/0x360 [ 1531.432385][ T7678] sctp_bind_addr_copy+0xb3/0x3c0 [ 1531.432412][ T7678] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1531.432438][ T7678] sctp_connect_new_asoc+0x2ff/0x6b0 [ 1531.432470][ T7678] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1531.432506][ T7678] ? __local_bh_enable_ip+0xd6/0x140 [ 1531.432530][ T7678] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1531.432555][ T7678] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1531.432588][ T7678] sctp_sendmsg+0x159b/0x2d00 [ 1531.432628][ T7678] ? kstrtouint+0x6e/0xe0 [ 1531.432657][ T7678] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1531.432684][ T7678] ? lock_acquire+0x115/0x350 [ 1531.432705][ T7678] ? get_pid_task+0x20/0x1f0 [ 1531.432743][ T7678] ? aa_sock_msg_perm+0xf5/0x210 [ 1531.432765][ T7678] ? sock_rps_record_flow+0x19/0x350 [ 1531.432795][ T7678] ? inet_sendmsg+0x298/0x320 [ 1531.432823][ T7678] ? __pfx_inet_sendmsg+0x10/0x10 [ 1531.432847][ T7678] sock_sendmsg_nosec+0x10e/0x180 [ 1531.432877][ T7678] __sys_sendto+0x408/0x5a0 [ 1531.432898][ T7678] ? ksys_write+0x1e6/0x270 [ 1531.432929][ T7678] ? __pfx___sys_sendto+0x10/0x10 [ 1531.432946][ T7678] ? __mutex_unlock_slowpath+0x731/0x900 [ 1531.433011][ T7678] ? __pfx_ksys_write+0x10/0x10 [ 1531.433046][ T7678] __x64_sys_sendto+0xde/0x100 [ 1531.433070][ T7678] do_syscall_64+0x166/0x520 [ 1531.433098][ T7678] ? trace_irq_disable+0x3b/0x140 [ 1531.433117][ T7678] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1531.433139][ T7678] ? clear_bhb_loop+0x70/0xc0 [ 1531.433165][ T7678] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1531.433186][ T7678] RIP: 0033:0x7f8cf5b9e159 [ 1531.433206][ T7678] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1531.433225][ T7678] RSP: 002b:00007f8cf3df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1531.433248][ T7678] RAX: ffffffffffffffda RBX: 00007f8cf5e26090 RCX: 00007f8cf5b9e159 [ 1531.433264][ T7678] RDX: 0000000000034000 RSI: 0000200000000500 RDI: 0000000000000008 [ 1531.433277][ T7678] RBP: 00007f8cf3df6090 R08: 0000200000000140 R09: 000000000000001c [ 1531.433291][ T7678] R10: 000000002000c851 R11: 0000000000000246 R12: 0000000000000002 [ 1531.433304][ T7678] R13: 00007f8cf5e26128 R14: 00007f8cf5e26090 R15: 00007ffce39df8b8 [ 1531.433338][ T7678] [ 1531.850226][ T7043] bridge0: port 2(bridge_slave_1) entered blocking state [ 1531.850381][ T7043] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1531.871202][ T7043] net_ratelimit: 17 callbacks suppressed [ 1531.876990][ T7043] bond2: (slave bridge1): failed to get link speed/duplex [ 1532.255784][ T7689] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1532.279340][ T608] bond2: (slave bridge1): failed to get link speed/duplex [ 1532.340785][T14329] bond8: (slave batadv0): failed to get link speed/duplex [ 1532.389274][ T7042] bond2: (slave bridge1): failed to get link speed/duplex [ 1532.453019][T14329] bond8: (slave batadv0): failed to get link speed/duplex [ 1532.518435][T14329] bond2: (slave bridge1): failed to get link speed/duplex [ 1532.611172][ T7691] tipc: Enabling of bearer rejected, failed to enable media [ 1532.619846][ T7044] bond8: (slave batadv0): failed to get link speed/duplex [ 1532.640021][ T7044] bond2: (slave bridge1): failed to get link speed/duplex [ 1532.708298][ T7694] netlink: 'syz.0.8962': attribute type 21 has an invalid length. [ 1532.769781][ T608] bond2: (slave bridge1): failed to get link speed/duplex [ 1532.807427][ T7694] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8962'. [ 1533.472329][ T7715] netlink: 'syz.1.8966': attribute type 1 has an invalid length. [ 1533.472371][ T7715] netlink: 64399 bytes leftover after parsing attributes in process `syz.1.8966'. [ 1533.702254][ T7728] netlink: 'syz.4.8967': attribute type 1 has an invalid length. [ 1534.091415][ T7728] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1534.221109][ T7222] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1534.242891][ T7737] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8969'. [ 1534.273325][ T7737] netlink: 'syz.1.8969': attribute type 1 has an invalid length. [ 1534.569083][ T7747] FAULT_INJECTION: forcing a failure. [ 1534.569083][ T7747] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1534.569139][ T7747] CPU: 0 UID: 0 PID: 7747 Comm: syz.0.8970 Not tainted syzkaller #0 PREEMPT(full) [ 1534.569163][ T7747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1534.569176][ T7747] Call Trace: [ 1534.569185][ T7747] [ 1534.569195][ T7747] dump_stack_lvl+0xe8/0x150 [ 1534.569229][ T7747] should_fail_ex+0x410/0x560 [ 1534.569264][ T7747] prepare_alloc_pages+0x223/0x600 [ 1534.569293][ T7747] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 1534.569319][ T7747] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1534.569345][ T7747] ? __pfx_policy_nodemask+0x10/0x10 [ 1534.569368][ T7747] ? __get_vm_area_node+0x155/0x2f0 [ 1534.569392][ T7747] ? __vmalloc_node_range_noprof+0x343/0x1540 [ 1534.569419][ T7747] ? __vmalloc_noprof+0xd2/0x120 [ 1534.569443][ T7747] ? bpf_check+0x10ee/0x2e10 [ 1534.569464][ T7747] ? bpf_prog_load+0x14d6/0x1c20 [ 1534.569485][ T7747] ? __x64_sys_bpf+0xba/0xd0 [ 1534.569502][ T7747] ? do_syscall_64+0x166/0x520 [ 1534.569531][ T7747] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1534.569558][ T7747] alloc_pages_mpol+0x21e/0x390 [ 1534.569589][ T7747] alloc_pages_noprof+0xb1/0x2b0 [ 1534.569615][ T7747] get_free_pages_noprof+0xf/0x80 [ 1534.569636][ T7747] __kasan_populate_vmalloc+0x38/0x1c0 [ 1534.569666][ T7747] ? do_raw_spin_unlock+0xf5/0x200 [ 1534.569698][ T7747] alloc_vmap_area+0xd1a/0x1420 [ 1534.569743][ T7747] ? __pfx_alloc_vmap_area+0x10/0x10 [ 1534.569774][ T7747] ? __kmalloc_cache_node_noprof+0x3d1/0x620 [ 1534.569807][ T7747] ? __kmalloc_cache_node_noprof+0x1f7/0x620 [ 1534.569838][ T7747] ? __get_vm_area_node+0x155/0x2f0 [ 1534.569870][ T7747] __get_vm_area_node+0x200/0x2f0 [ 1534.569905][ T7747] __vmalloc_node_range_noprof+0x343/0x1540 [ 1534.569933][ T7747] ? bpf_check+0x10ee/0x2e10 [ 1534.569965][ T7747] ? lruvec_stat_mod_folio+0x6e/0x3e0 [ 1534.569997][ T7747] ? lruvec_stat_mod_folio+0x6e/0x3e0 [ 1534.570037][ T7747] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1534.570069][ T7747] ? apparmor_capable+0x126/0x170 [ 1534.570100][ T7747] ? bpf_lsm_capable+0x9/0x20 [ 1534.570129][ T7747] ? security_capable+0x7e/0x2c0 [ 1534.570154][ T7747] ? bpf_check+0x10ee/0x2e10 [ 1534.570175][ T7747] __vmalloc_noprof+0xd2/0x120 [ 1534.570204][ T7747] ? bpf_check+0x10ee/0x2e10 [ 1534.570229][ T7747] bpf_check+0x10ee/0x2e10 [ 1534.570263][ T7747] ? ktime_get_with_offset+0x93/0x2d0 [ 1534.570290][ T7747] ? __pfx_bpf_check+0x10/0x10 [ 1534.570316][ T7747] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1534.570349][ T7747] bpf_prog_load+0x14d6/0x1c20 [ 1534.570385][ T7747] ? __pfx_bpf_prog_load+0x10/0x10 [ 1534.570443][ T7747] __sys_bpf+0xd0d/0xd90 [ 1534.570475][ T7747] ? __pfx___sys_bpf+0x10/0x10 [ 1534.570510][ T7747] ? __fget_files+0x2a/0x420 [ 1534.570557][ T7747] ? ksys_write+0x242/0x270 [ 1534.570589][ T7747] ? __pfx_ksys_write+0x10/0x10 [ 1534.570623][ T7747] __x64_sys_bpf+0xba/0xd0 [ 1534.570649][ T7747] do_syscall_64+0x166/0x520 [ 1534.570677][ T7747] ? trace_irq_disable+0x3b/0x140 [ 1534.570697][ T7747] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1534.570719][ T7747] ? clear_bhb_loop+0x70/0xc0 [ 1534.570752][ T7747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1534.570782][ T7747] RIP: 0033:0x7fba0d99e159 [ 1534.570802][ T7747] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1534.570821][ T7747] RSP: 002b:00007fba0e8ac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1534.570846][ T7747] RAX: ffffffffffffffda RBX: 00007fba0dc25fa0 RCX: 00007fba0d99e159 [ 1534.570863][ T7747] RDX: 0000000000000094 RSI: 0000200000000140 RDI: 0000000000000005 [ 1534.570877][ T7747] RBP: 00007fba0e8ac090 R08: 0000000000000000 R09: 0000000000000000 [ 1534.570891][ T7747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1534.570906][ T7747] R13: 00007fba0dc26038 R14: 00007fba0dc25fa0 R15: 00007ffe59955118 [ 1534.570941][ T7747] [ 1534.591623][ T7222] veth0_vlan: entered promiscuous mode [ 1534.647798][ T7043] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1534.647821][ T7043] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1534.812643][ T7747] syz.0.8970: vmalloc error: size 1088, align 0x1, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1534.812713][ T7747] CPU: 1 UID: 0 PID: 7747 Comm: syz.0.8970 Not tainted syzkaller #0 PREEMPT(full) [ 1534.812734][ T7747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1534.812746][ T7747] Call Trace: [ 1534.812754][ T7747] [ 1534.812763][ T7747] dump_stack_lvl+0xe8/0x150 [ 1534.812803][ T7747] warn_alloc+0x24d/0x270 [ 1534.812832][ T7747] ? lockdep_hardirqs_on+0x7b/0x110 [ 1534.812862][ T7747] ? __pfx_warn_alloc+0x10/0x10 [ 1534.812892][ T7747] ? kfree+0x1c5/0x650 [ 1534.812922][ T7747] ? __get_vm_area_node+0x219/0x2f0 [ 1534.812954][ T7747] __vmalloc_node_range_noprof+0x36b/0x1540 [ 1534.812991][ T7747] ? lruvec_stat_mod_folio+0x6e/0x3e0 [ 1534.813016][ T7747] ? lruvec_stat_mod_folio+0x6e/0x3e0 [ 1534.813050][ T7747] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1534.813077][ T7747] ? apparmor_capable+0x126/0x170 [ 1534.813103][ T7747] ? bpf_lsm_capable+0x9/0x20 [ 1534.813128][ T7747] ? security_capable+0x7e/0x2c0 [ 1534.813149][ T7747] ? bpf_check+0x10ee/0x2e10 [ 1534.813167][ T7747] __vmalloc_noprof+0xd2/0x120 [ 1534.813192][ T7747] ? bpf_check+0x10ee/0x2e10 [ 1534.813213][ T7747] bpf_check+0x10ee/0x2e10 [ 1534.813243][ T7747] ? ktime_get_with_offset+0x93/0x2d0 [ 1534.813267][ T7747] ? __pfx_bpf_check+0x10/0x10 [ 1534.813290][ T7747] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1534.813318][ T7747] bpf_prog_load+0x14d6/0x1c20 [ 1534.813350][ T7747] ? __pfx_bpf_prog_load+0x10/0x10 [ 1534.813394][ T7747] __sys_bpf+0xd0d/0xd90 [ 1534.813421][ T7747] ? __pfx___sys_bpf+0x10/0x10 [ 1534.813451][ T7747] ? __fget_files+0x2a/0x420 [ 1534.813491][ T7747] ? ksys_write+0x242/0x270 [ 1534.813518][ T7747] ? __pfx_ksys_write+0x10/0x10 [ 1534.813548][ T7747] __x64_sys_bpf+0xba/0xd0 [ 1534.813569][ T7747] do_syscall_64+0x166/0x520 [ 1534.813594][ T7747] ? trace_irq_disable+0x3b/0x140 [ 1534.813612][ T7747] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1534.813631][ T7747] ? clear_bhb_loop+0x70/0xc0 [ 1534.813653][ T7747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1534.813672][ T7747] RIP: 0033:0x7fba0d99e159 [ 1534.813691][ T7747] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1534.813707][ T7747] RSP: 002b:00007fba0e8ac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1534.813728][ T7747] RAX: ffffffffffffffda RBX: 00007fba0dc25fa0 RCX: 00007fba0d99e159 [ 1534.813742][ T7747] RDX: 0000000000000094 RSI: 0000200000000140 RDI: 0000000000000005 [ 1534.813755][ T7747] RBP: 00007fba0e8ac090 R08: 0000000000000000 R09: 0000000000000000 [ 1534.813767][ T7747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1534.813786][ T7747] R13: 00007fba0dc26038 R14: 00007fba0dc25fa0 R15: 00007ffe59955118 [ 1534.813816][ T7747] [ 1534.816684][ T7747] Mem-Info: [ 1534.816695][ T7747] active_anon:9113 inactive_anon:0 isolated_anon:0 [ 1534.816695][ T7747] active_file:0 inactive_file:44372 isolated_file:0 [ 1534.816695][ T7747] unevictable:0 dirty:152 writeback:0 [ 1534.816695][ T7747] slab_reclaimable:12535 slab_unreclaimable:123235 [ 1534.816695][ T7747] mapped:29993 shmem:528 pagetables:1276 [ 1534.816695][ T7747] sec_pagetables:0 bounce:0 [ 1534.816695][ T7747] kernel_misc_reclaimable:0 [ 1534.816695][ T7747] free:1248861 free_pcp:9231 free_cma:0 [ 1534.816744][ T7747] Node 0 active_anon:36452kB inactive_anon:0kB active_file:0kB inactive_file:177292kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:119972kB dirty:608kB writeback:0kB shmem:2112kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15996kB pagetables:5008kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1534.816805][ T7747] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:96kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1534.816853][ T7747] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1534.816907][ T7747] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 1534.816941][ T7747] Node 0 DMA32 free:1041220kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:36452kB inactive_anon:0kB active_file:0kB inactive_file:177292kB unevictable:0kB writepending:608kB zspages:0kB present:3129332kB managed:2546712kB mlocked:0kB bounce:0kB free_pcp:36924kB local_pcp:21228kB free_cma:0kB [ 1534.816996][ T7747] lowmem_reserve[]: 0 0 0 0 0 [ 1534.817028][ T7747] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1534.817078][ T7747] lowmem_reserve[]: 0 0 0 0 0 [ 1534.817110][ T7747] Node 1 Normal free:3938864kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1534.873993][ T7222] veth1_vlan: entered promiscuous mode [ 1534.876220][ T7747] lowmem_reserve[]: 0 0 0 0 0 [ 1534.876260][ T7747] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1534.876369][ T7747] Node 0 DMA32: 1511*4kB (UM) 233*8kB (UME) 372*16kB (UM) 520*32kB (UME) 145*64kB (UME) 233*128kB (UME) 137*256kB (UME) 39*512kB (UM) 15*1024kB (UM) 8*2048kB (UM) 216*4096kB (UM) = 1041124kB [ 1534.876516][ T7747] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1534.876606][ T7747] Node 1 Normal: 2*4kB (M) 5*8kB (UM) 8*16kB (UM) 12*32kB (UM) 12*64kB (UM) 4*128kB (UM) 3*256kB (UM) 4*512kB (UM) 2*1024kB (UM) 0*2048kB 960*4096kB (UM) = 3938864kB [ 1534.876745][ T7747] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1534.876762][ T7747] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1534.876784][ T7747] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1534.876800][ T7747] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1534.876815][ T7747] 44896 total pagecache pages [ 1534.876823][ T7747] 0 pages in swap cache [ 1534.876829][ T7747] Free swap = 124996kB [ 1534.876837][ T7747] Total swap = 124996kB [ 1534.876845][ T7747] 2097051 pages RAM [ 1534.876852][ T7747] 0 pages HighMem/MovableOnly [ 1534.876859][ T7747] 428757 pages reserved [ 1534.876866][ T7747] 0 pages cma reserved [ 1535.407768][T26172] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1535.932100][ T7222] veth0_macvtap: entered promiscuous mode [ 1535.980312][ T7750] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1535.995798][ T7222] veth1_macvtap: entered promiscuous mode [ 1536.032382][ T7222] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1536.067554][ T7222] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1536.211119][ T7044] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1536.212082][ T7044] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1536.212148][ T7044] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1536.212190][ T7044] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1536.747740][T22847] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1536.747780][T22847] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1536.878288][T22847] net_ratelimit: 40 callbacks suppressed [ 1536.878550][T22847] bond2: (slave bridge1): failed to get link speed/duplex [ 1536.878820][T22847] bond8: (slave batadv0): failed to get link speed/duplex [ 1536.935691][ T7783] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8980'. [ 1537.077298][ T7784] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1537.109023][ T2758] bond8: (slave batadv0): failed to get link speed/duplex [ 1537.135185][T22847] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1537.135447][T22847] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1537.143125][ T7044] bond2: (slave bridge1): failed to get link speed/duplex [ 1537.194722][ T7790] netlink: 'syz.1.8982': attribute type 8 has an invalid length. [ 1537.203125][ T7790] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8982'. [ 1537.263371][ T608] bond2: (slave bridge1): failed to get link speed/duplex [ 1537.301874][ T7790] veth1_to_team: entered promiscuous mode [ 1537.324804][ T7790] veth1_to_team: left promiscuous mode [ 1537.411393][ T7043] bond2: (slave bridge1): failed to get link speed/duplex [ 1537.621811][ T2758] bond2: (slave bridge1): failed to get link speed/duplex [ 1537.622099][ T2758] bond8: (slave batadv0): failed to get link speed/duplex [ 1537.758489][ T578] bond8: (slave batadv0): failed to get link speed/duplex [ 1537.773967][ T7800] gre0: Caught tx_queue_len zero misconfig [ 1537.925480][ T7804] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8985'. [ 1538.164948][ T327] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1538.187758][ T327] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1538.199546][ T327] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1538.214367][ T327] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1538.226141][ T327] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1538.884121][ T7830] netlink: 'syz.4.8990': attribute type 8 has an invalid length. [ 1538.892914][ T7830] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8990'. [ 1539.094011][ T7831] syzkaller0: entered promiscuous mode [ 1539.094057][ T7831] syzkaller0: entered allmulticast mode [ 1539.305682][ T7839] FAULT_INJECTION: forcing a failure. [ 1539.305682][ T7839] name failslab, interval 1, probability 0, space 0, times 0 [ 1539.324095][ T7839] CPU: 0 UID: 0 PID: 7839 Comm: syz.3.8992 Not tainted syzkaller #0 PREEMPT(full) [ 1539.324127][ T7839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1539.324140][ T7839] Call Trace: [ 1539.324149][ T7839] [ 1539.324158][ T7839] dump_stack_lvl+0xe8/0x150 [ 1539.324195][ T7839] should_fail_ex+0x410/0x560 [ 1539.324232][ T7839] should_failslab+0xa8/0x100 [ 1539.324259][ T7839] __kmalloc_cache_noprof+0xa3/0x600 [ 1539.324290][ T7839] ? __kmalloc_cache_noprof+0x14d/0x600 [ 1539.324318][ T7839] ? sctp_add_bind_addr+0x8c/0x370 [ 1539.324342][ T7839] ? sctp_add_bind_addr+0x8c/0x370 [ 1539.324374][ T7839] sctp_add_bind_addr+0x8c/0x370 [ 1539.324403][ T7839] sctp_copy_local_addr_list+0x31a/0x4e0 [ 1539.324431][ T7839] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 1539.324458][ T7839] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1539.324485][ T7839] ? sctp_v6_is_any+0x64/0x80 [ 1539.324513][ T7839] ? sctp_copy_one_addr+0x93/0x360 [ 1539.324543][ T7839] sctp_bind_addr_copy+0xb3/0x3c0 [ 1539.324569][ T7839] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1539.324596][ T7839] sctp_connect_new_asoc+0x2ff/0x6b0 [ 1539.324629][ T7839] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1539.324665][ T7839] ? __local_bh_enable_ip+0xd6/0x140 [ 1539.324690][ T7839] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1539.324716][ T7839] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1539.324756][ T7839] sctp_sendmsg+0x159b/0x2d00 [ 1539.324801][ T7839] ? kstrtouint+0x6e/0xe0 [ 1539.324830][ T7839] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1539.324857][ T7839] ? lock_acquire+0x115/0x350 [ 1539.324877][ T7839] ? get_pid_task+0x20/0x1f0 [ 1539.324917][ T7839] ? aa_sock_msg_perm+0xf5/0x210 [ 1539.324938][ T7839] ? sock_rps_record_flow+0x19/0x350 [ 1539.324968][ T7839] ? inet_sendmsg+0x298/0x320 [ 1539.324998][ T7839] ? __pfx_inet_sendmsg+0x10/0x10 [ 1539.325023][ T7839] sock_sendmsg_nosec+0x10e/0x180 [ 1539.325055][ T7839] __sys_sendto+0x408/0x5a0 [ 1539.325075][ T7839] ? ksys_write+0x1e6/0x270 [ 1539.325107][ T7839] ? __pfx___sys_sendto+0x10/0x10 [ 1539.325125][ T7839] ? __mutex_unlock_slowpath+0x731/0x900 [ 1539.325185][ T7839] ? __pfx_ksys_write+0x10/0x10 [ 1539.325220][ T7839] __x64_sys_sendto+0xde/0x100 [ 1539.325245][ T7839] do_syscall_64+0x166/0x520 [ 1539.325272][ T7839] ? trace_irq_disable+0x3b/0x140 [ 1539.325292][ T7839] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1539.325313][ T7839] ? clear_bhb_loop+0x70/0xc0 [ 1539.325340][ T7839] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1539.325361][ T7839] RIP: 0033:0x7f216f99e159 [ 1539.325382][ T7839] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1539.325400][ T7839] RSP: 002b:00007f217090b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1539.325424][ T7839] RAX: ffffffffffffffda RBX: 00007f216fc25fa0 RCX: 00007f216f99e159 [ 1539.325439][ T7839] RDX: 0000000000034000 RSI: 0000200000000500 RDI: 0000000000000008 [ 1539.325453][ T7839] RBP: 00007f217090b090 R08: 0000200000000140 R09: 000000000000001c [ 1539.325467][ T7839] R10: 000000002000c851 R11: 0000000000000246 R12: 0000000000000002 [ 1539.325481][ T7839] R13: 00007f216fc26038 R14: 00007f216fc25fa0 R15: 00007ffd006b3658 [ 1539.325515][ T7839] [ 1539.870923][ T7843] veth0_macvtap: left promiscuous mode [ 1539.888655][ T7843] macvtap0: entered allmulticast mode [ 1540.034082][ T7848] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8993'. [ 1540.199222][ T7856] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8994'. [ 1540.342114][T26172] Bluetooth: hci5: command tx timeout [ 1540.422060][ T578] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 60387 - 0 [ 1540.440226][ T578] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 1540.453008][ T578] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1540.575961][ T7866] Cannot find add_set index 0 as target [ 1540.811702][ T7870] can: request_module (can-proto-0) failed. [ 1540.826914][ T7856] bond2: option lacp_active: invalid value (5) [ 1540.850155][ T7856] bond2 (unregistering): Released all slaves [ 1541.314022][ T7811] lo speed is unknown, defaulting to 1000 [ 1541.536948][ T578] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 60387 - 0 [ 1541.570843][ T578] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 1541.570909][ T578] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1541.634251][ T7892] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9001'. [ 1541.662988][ T7811] lo speed is unknown, defaulting to 1000 [ 1541.682549][ T7811] lo speed is unknown, defaulting to 1000 [ 1542.038985][T22847] net_ratelimit: 363 callbacks suppressed [ 1542.039038][T22847] bond2: (slave bridge1): failed to get link speed/duplex [ 1542.039086][T22847] bond8: (slave batadv0): failed to get link speed/duplex [ 1542.100681][ T578] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 60387 - 0 [ 1542.111432][ T578] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 1542.122247][ T578] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1542.149504][T22847] bond8: (slave batadv0): failed to get link speed/duplex [ 1542.149770][T22847] bond2: (slave bridge1): failed to get link speed/duplex [ 1542.222749][ T7919] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9005'. [ 1542.418259][T26172] Bluetooth: hci5: command tx timeout [ 1542.486467][ T7924] FAULT_INJECTION: forcing a failure. [ 1542.486467][ T7924] name failslab, interval 1, probability 0, space 0, times 0 [ 1542.500508][ T7923] netlink: 240 bytes leftover after parsing attributes in process `syz.3.9005'. [ 1542.509931][ T7923] netlink: 'syz.3.9005': attribute type 9 has an invalid length. [ 1542.519786][ T7924] CPU: 0 UID: 0 PID: 7924 Comm: syz.5.9006 Not tainted syzkaller #0 PREEMPT(full) [ 1542.519813][ T7924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1542.519825][ T7924] Call Trace: [ 1542.519834][ T7924] [ 1542.519842][ T7924] dump_stack_lvl+0xe8/0x150 [ 1542.519877][ T7924] should_fail_ex+0x410/0x560 [ 1542.519915][ T7924] should_failslab+0xa8/0x100 [ 1542.519941][ T7924] __kmalloc_cache_noprof+0xa3/0x600 [ 1542.519974][ T7924] ? __kmalloc_cache_noprof+0x14d/0x600 [ 1542.520003][ T7924] ? sctp_add_bind_addr+0x8c/0x370 [ 1542.520033][ T7924] ? sctp_add_bind_addr+0x8c/0x370 [ 1542.520067][ T7924] sctp_add_bind_addr+0x8c/0x370 [ 1542.520098][ T7924] sctp_copy_local_addr_list+0x31a/0x4e0 [ 1542.520129][ T7924] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 1542.520157][ T7924] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1542.520185][ T7924] ? sctp_v6_is_any+0x64/0x80 [ 1542.520224][ T7924] ? sctp_copy_one_addr+0x93/0x360 [ 1542.520254][ T7924] sctp_bind_addr_copy+0xb3/0x3c0 [ 1542.520282][ T7924] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1542.520309][ T7924] sctp_connect_new_asoc+0x2ff/0x6b0 [ 1542.520344][ T7924] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1542.520382][ T7924] ? __local_bh_enable_ip+0xd6/0x140 [ 1542.520408][ T7924] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1542.520435][ T7924] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1542.520470][ T7924] sctp_sendmsg+0x159b/0x2d00 [ 1542.520514][ T7924] ? kstrtouint+0x6e/0xe0 [ 1542.520544][ T7924] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1542.520573][ T7924] ? lock_acquire+0x115/0x350 [ 1542.520595][ T7924] ? get_pid_task+0x20/0x1f0 [ 1542.520635][ T7924] ? aa_sock_msg_perm+0xf5/0x210 [ 1542.520657][ T7924] ? sock_rps_record_flow+0x19/0x350 [ 1542.520689][ T7924] ? inet_sendmsg+0x298/0x320 [ 1542.520717][ T7924] ? __pfx_inet_sendmsg+0x10/0x10 [ 1542.520743][ T7924] sock_sendmsg_nosec+0x10e/0x180 [ 1542.520776][ T7924] __sys_sendto+0x408/0x5a0 [ 1542.520796][ T7924] ? ksys_write+0x1e6/0x270 [ 1542.520830][ T7924] ? __pfx___sys_sendto+0x10/0x10 [ 1542.520848][ T7924] ? __mutex_unlock_slowpath+0x731/0x900 [ 1542.520913][ T7924] ? __pfx_ksys_write+0x10/0x10 [ 1542.520949][ T7924] __x64_sys_sendto+0xde/0x100 [ 1542.520974][ T7924] do_syscall_64+0x166/0x520 [ 1542.521003][ T7924] ? trace_irq_disable+0x3b/0x140 [ 1542.521024][ T7924] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1542.521047][ T7924] ? clear_bhb_loop+0x70/0xc0 [ 1542.521074][ T7924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1542.521095][ T7924] RIP: 0033:0x7f484039e159 [ 1542.521117][ T7924] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1542.521135][ T7924] RSP: 002b:00007f48411c3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1542.521159][ T7924] RAX: ffffffffffffffda RBX: 00007f4840626090 RCX: 00007f484039e159 [ 1542.521175][ T7924] RDX: 0000000000034000 RSI: 0000200000000500 RDI: 0000000000000008 [ 1542.521190][ T7924] RBP: 00007f48411c3090 R08: 0000200000000140 R09: 000000000000001c [ 1542.521212][ T7924] R10: 000000002000c851 R11: 0000000000000246 R12: 0000000000000002 [ 1542.521226][ T7924] R13: 00007f4840626128 R14: 00007f4840626090 R15: 00007ffea4e21d48 [ 1542.521260][ T7924] [ 1542.890479][ T578] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 60387 - 0 [ 1542.890728][ T578] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 1542.890756][ T578] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1542.990299][ T7923] sch_fq: defrate 2 ignored. [ 1543.007842][ T7925] veth0_macvtap: left promiscuous mode [ 1543.027079][ T7925] macvtap0: entered allmulticast mode [ 1543.045495][ T7928] syzkaller0: entered promiscuous mode [ 1543.045538][ T7928] syzkaller0: entered allmulticast mode [ 1543.500473][T22847] bond8: (slave batadv0): failed to get link speed/duplex [ 1543.570597][ T7944] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9010'. [ 1543.580627][ T7944] netlink: 56 bytes leftover after parsing attributes in process `syz.4.9010'. [ 1543.601599][T14329] bond2: (slave bridge1): failed to get link speed/duplex [ 1543.678865][ T7944] netlink: 'syz.4.9010': attribute type 2 has an invalid length. [ 1543.750167][ T7949] netlink: 'syz.1.9011': attribute type 1 has an invalid length. [ 1543.823552][ T7955] netlink: 328 bytes leftover after parsing attributes in process `syz.1.9011'. [ 1543.833868][ T7955] netlink: 'syz.1.9011': attribute type 9 has an invalid length. [ 1543.838359][ T7955] netlink: 108 bytes leftover after parsing attributes in process `syz.1.9011'. [ 1543.838377][ T7955] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9011'. [ 1544.055207][ T7949] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1544.080883][ T608] bond8: (slave batadv0): failed to get link speed/duplex [ 1544.083441][ T608] bond2: (slave bridge1): failed to get link speed/duplex [ 1544.365957][ T7967] netlink: zone id is out of range [ 1544.433463][ T7967] netlink: zone id is out of range [ 1544.498310][T26172] Bluetooth: hci5: command tx timeout [ 1544.585229][ T7952] bond2: (slave veth13): Enslaving as an active interface with a down link [ 1544.612942][ T7042] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1544.847218][ T7970] batadv_slave_1: entered promiscuous mode [ 1545.089521][ T2758] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1545.099059][ T7044] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1545.352481][ T578] pimreg: left allmulticast mode [ 1545.992822][ T8005] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9022'. [ 1546.387113][ T578] bond2 (unregistering): (slave bridge1): Releasing backup interface [ 1546.404357][ T578] bond2 (unregistering): (slave bridge1): the permanent HWaddr of slave - aa:f8:3a:cf:4a:f8 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1546.439205][ T578] bond2 (unregistering): (slave bridge2): Releasing backup interface [ 1546.490710][ T578] bond2 (unregistering): (slave bridge3): Releasing backup interface [ 1546.578226][T26172] Bluetooth: hci5: command tx timeout [ 1546.671656][ T578] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1546.693029][ T578] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1546.706086][ T578] bond0 (unregistering): Released all slaves [ 1546.727424][ T578] bond1 (unregistering): Released all slaves [ 1546.772944][ T578] bond2 (unregistering): Released all slaves [ 1546.830686][ T578] bond3 (unregistering): (slave team0): Releasing active interface [ 1546.841519][ T578] bond3 (unregistering): Released all slaves [ 1546.886161][ T578] bond4 (unregistering): Released all slaves [ 1546.953222][ T7995] batadv0: entered promiscuous mode [ 1546.974213][ T2758] netdevsim netdevsim0 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 1547.103102][ T8001] tipc: Started in network mode [ 1547.103154][ T8001] tipc: Node identity ff020000000000000000000000000001, cluster identity 4711 [ 1547.103227][ T8001] tipc: Enabling of bearer rejected, failed to enable media [ 1547.290006][ T4571] lo speed is unknown, defaulting to 1000 [ 1547.300614][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 1547.301061][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 1547.320035][ T578] : left promiscuous mode [ 1547.414128][ T8022] netlink: 'syz.5.9023': attribute type 8 has an invalid length. [ 1547.423075][ T8022] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9023'. [ 1547.502010][ T7044] net_ratelimit: 676 callbacks suppressed [ 1547.509609][ T7044] bond8: (slave batadv0): failed to get link speed/duplex [ 1547.517936][ T8017] syzkaller0: entered promiscuous mode [ 1547.524257][ T8017] syzkaller0: entered allmulticast mode [ 1547.800426][ T8028] netlink: 68 bytes leftover after parsing attributes in process `syz.3.9025'. [ 1547.827593][ T578] tipc: Disabling bearer [ 1547.836612][ T578] tipc: Left network mode [ 1547.843811][ T7044] bond8: (slave batadv0): failed to get link speed/duplex [ 1548.444929][ T7811] bridge0: port 1(bridge_slave_0) entered blocking state [ 1548.445079][ T7811] bridge0: port 1(bridge_slave_0) entered disabled state [ 1548.445266][ T7811] bridge_slave_0: entered allmulticast mode [ 1548.478239][ T7811] bridge_slave_0: entered promiscuous mode [ 1548.561366][T14329] bond8: (slave batadv0): failed to get link speed/duplex [ 1548.562153][ T7811] bridge0: port 2(bridge_slave_1) entered blocking state [ 1548.562629][ T7811] bridge0: port 2(bridge_slave_1) entered disabled state [ 1548.562975][ T7811] bridge_slave_1: entered allmulticast mode [ 1548.639259][ T7811] bridge_slave_1: entered promiscuous mode [ 1548.777210][ T7811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1548.788514][ T2758] bond8: (slave batadv0): failed to get link speed/duplex [ 1548.815534][ T7811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1548.890424][ T8054] netlink: 'syz.3.9035': attribute type 8 has an invalid length. [ 1548.899920][ T8054] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9035'. [ 1549.042299][ T8061] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9033'. [ 1549.052708][ T8061] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9033'. [ 1549.480897][ T8054] veth1_to_team: entered promiscuous mode [ 1549.508494][ T8054] gretap0: entered promiscuous mode [ 1549.521626][ T8054] veth1_to_team: left promiscuous mode [ 1549.537158][ T8054] gretap0: left promiscuous mode [ 1549.933266][ T7811] team0: Port device team_slave_0 added [ 1549.956440][ T7811] team0: Port device team_slave_1 added [ 1549.971672][T14329] bond8: (slave batadv0): failed to get link speed/duplex [ 1550.248585][ T608] bond8: (slave batadv0): failed to get link speed/duplex [ 1550.263007][ T8080] tipc: Enabled bearer , priority 0 [ 1550.306378][ T7811] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1550.306621][ T7811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1550.306657][ T7811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1550.674781][ T578] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1550.685244][ T578] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1550.697299][ T578] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1550.710160][ T578] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1550.736432][ T578] veth1_macvtap: left promiscuous mode [ 1550.736614][ T578] veth1_vlan: left promiscuous mode [ 1550.736729][ T578] veth0_vlan: left promiscuous mode [ 1551.516460][ T8106] netlink: 104 bytes leftover after parsing attributes in process `syz.3.9043'. [ 1551.516780][ T8106] netlink: 104 bytes leftover after parsing attributes in process `syz.3.9043'. [ 1551.517067][ T8106] netlink: 104 bytes leftover after parsing attributes in process `syz.3.9043'. [ 1551.517337][ T8106] netlink: 104 bytes leftover after parsing attributes in process `syz.3.9043'. [ 1551.519988][ T8106] netlink: 104 bytes leftover after parsing attributes in process `syz.3.9043'. [ 1551.520268][ T8106] netlink: 104 bytes leftover after parsing attributes in process `syz.3.9043'. [ 1551.520534][ T8106] netlink: 104 bytes leftover after parsing attributes in process `syz.3.9043'. [ 1552.065660][ T578] team0 (unregistering): Port device team_slave_1 removed [ 1552.302904][ T7042] smbdirect: ib_dev[syz2] removed [ 1552.309204][ T7811] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1552.309240][ T7811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1552.309310][ T7811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1552.461195][ T8080] tipc: Resetting bearer [ 1552.471198][ T5279] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1552.480831][ T8083] syzkaller0: entered promiscuous mode [ 1552.480871][ T8083] syzkaller0: entered allmulticast mode [ 1552.493626][ T8094] syz_tun: entered allmulticast mode [ 1552.561879][ T8095] syz_tun (unregistering): left allmulticast mode [ 1552.587914][ T8075] tipc: Resetting bearer [ 1552.666352][ T8075] tipc: Disabling bearer [ 1552.686098][ T4571] lo speed is unknown, defaulting to 1000 [ 1552.692559][T22847] bond8: (slave batadv0): failed to get link speed/duplex [ 1552.704048][ T4571] infiniband syz2: ib_query_port failed (-19) [ 1552.726974][ T8116] tipc: Enabling of bearer rejected, failed to enable media [ 1553.021374][ T7811] hsr_slave_0: entered promiscuous mode [ 1553.031831][ T7811] hsr_slave_1: entered promiscuous mode [ 1553.032717][ T7811] debugfs: 'hsr0' already exists in 'hsr' [ 1553.032755][ T7811] Cannot create hsr debugfs directory [ 1553.322927][ T8134] tc_dump_action: action bad kind [ 1554.039714][ T7042] bond8: (slave batadv0): failed to get link speed/duplex [ 1554.197667][ T8154] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1554.236388][ T8154] __nla_validate_parse: 30 callbacks suppressed [ 1554.243226][ T8154] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9049'. [ 1554.357886][ T8158] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9048'. [ 1554.573181][ T608] bond8: (slave batadv0): failed to get link speed/duplex [ 1554.757484][ T8163] netlink: 'syz.1.9050': attribute type 10 has an invalid length. [ 1554.814539][ T8157] syzkaller0: entered promiscuous mode [ 1554.823703][ T8157] syzkaller0: entered allmulticast mode [ 1554.847165][ T5279] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1554.856799][ T8163] A link change request failed with some changes committed already. Interface netdevsim1 may have been left with an inconsistent configuration, please check. [ 1554.905019][ T8179] netlink: 52 bytes leftover after parsing attributes in process `syz.5.9052'. [ 1554.921142][ T578] IPVS: stop unused estimator thread 0... [ 1555.220873][ T8180] netlink: 'syz.5.9052': attribute type 2 has an invalid length. [ 1555.788413][ T8190] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9053'. [ 1559.892678][ T8174] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9051'. [ 1559.931582][ T8174] bridge0: port 2(bridge_slave_1) entered disabled state [ 1559.981544][ T7811] netdevsim netdevsim0 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1560.093615][ T8180] : entered promiscuous mode [ 1560.121605][T32465] bond8: (slave batadv0): failed to get link speed/duplex [ 1560.293170][ T7811] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1560.403193][T26172] Bluetooth: hci2: link tx timeout [ 1560.403403][T26172] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1560.420273][ T578] bond8: (slave batadv0): failed to get link speed/duplex [ 1560.734623][ T7811] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1560.838683][ T608] bond8: (slave batadv0): failed to get link speed/duplex [ 1560.957913][ T8219] bridge0: port 2(bridge_slave_1) entered disabled state [ 1560.958210][ T8219] bridge0: port 1(bridge_slave_0) entered disabled state [ 1561.047000][ T7811] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1561.104359][ T8198] Bluetooth: hci2: link tx timeout [ 1561.104592][ T8198] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1561.111460][ T7043] bond8: (slave batadv0): failed to get link speed/duplex [ 1561.224070][ T7042] bond8: (slave batadv0): failed to get link speed/duplex [ 1561.321399][ T8226] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9063'. [ 1561.367097][ T8226] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9063'. [ 1561.440426][T32465] bond8: (slave batadv0): failed to get link speed/duplex [ 1561.633098][ T8229] batman_adv: batadv0: Adding interface: ip6gretap1 [ 1561.642256][ T8229] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1561.642317][ T8229] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 1561.669324][T14329] bond8: (slave batadv0): failed to get link speed/duplex [ 1561.672728][ T7811] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1561.716438][ T7811] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1561.766684][ T7811] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1561.787538][ T7811] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1561.799549][ T7811] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1561.837896][ T7811] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1561.865003][ T7811] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1561.949673][ T7811] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1561.968086][T32465] bond8: (slave batadv0): failed to get link speed/duplex [ 1562.208568][ T8249] openvswitch: netlink: Unknown key attributes 1 [ 1562.270575][T14329] bond8: (slave batadv0): failed to get link speed/duplex [ 1562.441828][ T7811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1562.498357][T26172] Bluetooth: hci2: command 0x0406 tx timeout [ 1562.515667][ T7811] 8021q: adding VLAN 0 to HW filter on device team0 [ 1562.544995][ T608] bridge0: port 1(bridge_slave_0) entered blocking state [ 1562.545140][ T608] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1562.622122][ T578] bridge0: port 2(bridge_slave_1) entered blocking state [ 1562.622254][ T578] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1563.110871][ T8270] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9074'. [ 1563.148865][ T8270] netlink: 240 bytes leftover after parsing attributes in process `syz.3.9074'. [ 1563.148908][ T8270] netlink: 'syz.3.9074': attribute type 9 has an invalid length. [ 1563.231690][ T8270] sch_fq: defrate 2 ignored. [ 1563.233490][ T8270] syzkaller0: entered promiscuous mode [ 1563.233704][ T8270] syzkaller0: entered allmulticast mode [ 1563.319002][ T8270] tipc: Enabling of bearer rejected, failed to enable media [ 1563.782566][ T8289] netlink: 'syz.4.9078': attribute type 21 has an invalid length. [ 1563.782607][ T8289] netlink: 'syz.4.9078': attribute type 20 has an invalid length. [ 1564.036665][ T8292] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9079'. [ 1564.138428][ T8297] lo: entered promiscuous mode [ 1564.138759][ T8297] tunl0: entered promiscuous mode [ 1564.292169][ T8297] erspan0: entered promiscuous mode [ 1564.390955][ T8297] ip_vti0: entered promiscuous mode [ 1564.456555][ T8297] ip6_vti0: entered promiscuous mode [ 1564.457875][ T8297] sit0: entered promiscuous mode [ 1564.470895][ T8297] ip6tnl0: entered promiscuous mode [ 1564.787142][ T8297] ip6gre0: entered promiscuous mode [ 1564.866107][ T8297] ip6gretap0: entered promiscuous mode [ 1564.903240][ T8297] vcan0: entered promiscuous mode [ 1565.237198][ T8297] nlmon0: entered promiscuous mode [ 1565.258807][ T8297] vxcan0: entered promiscuous mode [ 1565.270201][ T8297] vxcan1: entered promiscuous mode [ 1565.277966][ T8297] veth0: entered promiscuous mode [ 1565.294743][ T8297] veth1: entered promiscuous mode [ 1565.308226][ T8297] wg0: entered promiscuous mode [ 1565.321763][ T8297] wg1: entered promiscuous mode [ 1565.329905][ T8297] wg2: entered promiscuous mode [ 1565.337259][ T8297] veth0_to_bridge: entered promiscuous mode [ 1565.346797][ T8297] bridge_slave_0: entered promiscuous mode [ 1565.358797][ T8297] : entered promiscuous mode [ 1565.391819][ T8297] veth1_to_bond: entered promiscuous mode [ 1565.406080][ T8297] veth0_to_team: entered promiscuous mode [ 1565.424223][ T8297] veth1_to_team: entered promiscuous mode [ 1565.435485][ T8297] veth0_to_batadv: entered promiscuous mode [ 1565.577318][ T8297] batadv_slave_0: entered promiscuous mode [ 1565.629343][ T8297] veth1_to_batadv: entered promiscuous mode [ 1565.638421][ T8297] batadv_slave_1: entered promiscuous mode [ 1565.651827][ T8297] xfrm0: entered promiscuous mode [ 1565.665115][ T8297] veth0_to_hsr: entered promiscuous mode [ 1565.683311][ T8297] hsr0: entered promiscuous mode [ 1565.694389][ T8297] veth1_virt_wifi: entered promiscuous mode [ 1565.705688][ T8297] veth0_virt_wifi: entered promiscuous mode [ 1565.720145][ T8297] virt_wifi0: entered promiscuous mode [ 1565.739660][ T8297] vlan0: entered promiscuous mode [ 1565.749416][ T8297] vlan1: entered promiscuous mode [ 1565.760959][ T8297] macvlan0: entered promiscuous mode [ 1565.828560][ T8297] macvlan1: entered promiscuous mode [ 1565.842904][ T8297] ipvlan0: entered promiscuous mode [ 1565.852921][ T8297] ipvlan1: entered promiscuous mode [ 1565.866550][ T8297] veth0_macvtap: entered promiscuous mode [ 1565.876045][ T8297] macvtap0: entered promiscuous mode [ 1565.907386][ T8297] macsec0: entered promiscuous mode [ 1566.074460][ T8297] geneve1: entered promiscuous mode [ 1566.206189][ T8297] netdevsim netdevsim1 netdevsim1: entered promiscuous mode [ 1566.262128][ T8297] netdevsim netdevsim1 netdevsim2: entered promiscuous mode [ 1566.308680][ T8297] netdevsim netdevsim1 netdevsim3: entered promiscuous mode [ 1566.350724][ T8297] mac80211_hwsim hwsim63 wlan0: entered promiscuous mode [ 1566.363147][ T8297] veth2: entered promiscuous mode [ 1566.372901][ T8297] veth4: entered promiscuous mode [ 1566.381523][ T8297] veth5: entered promiscuous mode [ 1566.389724][ T8297] vxlan0: entered promiscuous mode [ 1566.399566][ T8297] bridge1: entered promiscuous mode [ 1566.406299][ T8297] mac80211_hwsim hwsim67 wlan2: entered promiscuous mode [ 1566.414076][ T8297] macvlan2: entered promiscuous mode [ 1566.423457][ T8297] ip6tnl1: entered promiscuous mode [ 1566.431952][ T8297] bond1: entered promiscuous mode [ 1566.439290][ T8297] dummy0.3: entered promiscuous mode [ 1566.447418][ T8297] gre1: entered promiscuous mode [ 1566.481242][ T8297] veth6: entered promiscuous mode [ 1566.490118][ T8297] veth7: entered promiscuous mode [ 1566.497866][ T8297] ip6gre1: entered promiscuous mode [ 1566.508861][ T8297] gtp0: entered promiscuous mode [ 1566.516259][ T8297] bridge0: entered promiscuous mode [ 1566.522634][ T8297] vlan2: entered promiscuous mode [ 1566.528683][ T8297] veth8: entered promiscuous mode [ 1566.533951][ T8297] veth9: entered promiscuous mode [ 1566.539878][ T8297] mac80211_hwsim hwsim72 wlan1: entered promiscuous mode [ 1566.547464][ T8297] macvlan3: entered promiscuous mode [ 1566.555923][ T8297] macvlan4: entered promiscuous mode [ 1566.565297][ T8297] macvlan5: entered promiscuous mode [ 1566.573459][ T8297] ip6tnl2: entered promiscuous mode [ 1566.579243][ T8297] vrf0: entered promiscuous mode [ 1566.584431][ T8297] vrf1: entered promiscuous mode [ 1566.590237][ T8297] ip6erspan0: entered promiscuous mode [ 1566.590613][ T8297] ip6tnl3: entered promiscuous mode [ 1566.604162][ T8297] xfrm1: entered promiscuous mode [ 1566.610412][ T8297] bridge2: entered promiscuous mode [ 1566.622104][ T8297] macsec1: entered promiscuous mode [ 1566.629293][ T8297] gre2: entered promiscuous mode [ 1566.635360][ T8297] pim6reg: entered promiscuous mode [ 1566.642541][ T8297] macvlan6: entered promiscuous mode [ 1566.654354][ T8297] gre3: entered promiscuous mode [ 1566.662161][ T8297] ip6tnl4: entered promiscuous mode [ 1566.668597][ T8297] sit1: entered promiscuous mode [ 1566.697591][ T8297] sit2: entered promiscuous mode [ 1566.707039][ T8297] veth10: entered promiscuous mode [ 1566.713585][ T8297] veth11: entered promiscuous mode [ 1566.719929][ T8297] vlan3: entered promiscuous mode [ 1566.727496][ T8297] sit3: entered promiscuous mode [ 1566.758332][ T8297] bond2: entered promiscuous mode [ 1566.764837][ T8297] veth12: entered promiscuous mode [ 1566.773868][ T8297] veth13: entered promiscuous mode [ 1567.196069][ T8375] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9088'. [ 1567.223802][ T4574] lo speed is unknown, defaulting to 1000 [ 1567.230328][T32465] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1567.230376][T32465] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1567.230431][T32465] net_ratelimit: 10 callbacks suppressed [ 1567.230449][T32465] bond8: (slave batadv0): failed to get link speed/duplex [ 1567.249749][ T7043] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1567.249783][ T7043] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1567.249817][ T7043] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1567.249841][ T7043] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1567.249871][ T7043] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1567.249895][ T7043] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1567.358185][T22847] bond8: (slave batadv0): failed to get link speed/duplex [ 1567.385101][ T8372] netlink: 240 bytes leftover after parsing attributes in process `syz.4.9088'. [ 1567.394822][ T8372] netlink: 'syz.4.9088': attribute type 9 has an invalid length. [ 1567.473606][ T8385] FAULT_INJECTION: forcing a failure. [ 1567.473606][ T8385] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1567.490876][ T8385] CPU: 0 UID: 0 PID: 8385 Comm: syz.1.9092 Not tainted syzkaller #0 PREEMPT(full) [ 1567.490909][ T8385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1567.490922][ T8385] Call Trace: [ 1567.490932][ T8385] [ 1567.490942][ T8385] dump_stack_lvl+0xe8/0x150 [ 1567.490978][ T8385] should_fail_ex+0x410/0x560 [ 1567.491023][ T8385] _copy_from_iter+0x1d3/0x1660 [ 1567.491054][ T8385] ? sctp_chunkify+0x5a/0x260 [ 1567.491085][ T8385] ? sctp_addto_chunk+0xf8/0x220 [ 1567.491110][ T8385] ? __asan_memcpy+0x40/0x70 [ 1567.491142][ T8385] ? __pfx__copy_from_iter+0x10/0x10 [ 1567.491171][ T8385] ? __asan_memcpy+0x40/0x70 [ 1567.491200][ T8385] ? sctp_make_datafrag_empty+0x184/0x240 [ 1567.491223][ T8385] ? __kasan_kmalloc+0x93/0xb0 [ 1567.491243][ T8385] ? __pfx_sctp_make_datafrag_empty+0x10/0x10 [ 1567.491264][ T8385] ? skb_put+0x112/0x210 [ 1567.491286][ T8385] sctp_user_addto_chunk+0x7c/0x230 [ 1567.491314][ T8385] sctp_datamsg_from_user+0x754/0xef0 [ 1567.491359][ T8385] sctp_sendmsg_to_asoc+0x13cf/0x1880 [ 1567.491457][ T8385] ? sctp_assoc_add_peer+0xd57/0x1430 [ 1567.491501][ T8385] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 1567.491528][ T8385] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1567.491562][ T8385] ? __local_bh_enable_ip+0xd6/0x140 [ 1567.491585][ T8385] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1567.491612][ T8385] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1567.491645][ T8385] sctp_sendmsg+0x1bb5/0x2d00 [ 1567.491686][ T8385] ? kstrtouint+0x6e/0xe0 [ 1567.491714][ T8385] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1567.491741][ T8385] ? lock_acquire+0x115/0x350 [ 1567.491762][ T8385] ? get_pid_task+0x20/0x1f0 [ 1567.491799][ T8385] ? aa_sock_msg_perm+0xf5/0x210 [ 1567.491821][ T8385] ? sock_rps_record_flow+0x19/0x350 [ 1567.491851][ T8385] ? inet_sendmsg+0x298/0x320 [ 1567.491879][ T8385] ? __pfx_inet_sendmsg+0x10/0x10 [ 1567.491904][ T8385] sock_sendmsg_nosec+0x10e/0x180 [ 1567.491935][ T8385] __sys_sendto+0x408/0x5a0 [ 1567.491956][ T8385] ? ksys_write+0x1e6/0x270 [ 1567.491988][ T8385] ? __pfx___sys_sendto+0x10/0x10 [ 1567.492016][ T8385] ? __mutex_unlock_slowpath+0x731/0x900 [ 1567.492076][ T8385] ? __pfx_ksys_write+0x10/0x10 [ 1567.492110][ T8385] __x64_sys_sendto+0xde/0x100 [ 1567.492134][ T8385] do_syscall_64+0x166/0x520 [ 1567.492161][ T8385] ? trace_irq_disable+0x3b/0x140 [ 1567.492181][ T8385] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1567.492202][ T8385] ? clear_bhb_loop+0x70/0xc0 [ 1567.492227][ T8385] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1567.492247][ T8385] RIP: 0033:0x7f8cf5b9e159 [ 1567.492268][ T8385] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1567.492286][ T8385] RSP: 002b:00007f8cf699d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1567.492310][ T8385] RAX: ffffffffffffffda RBX: 00007f8cf5e25fa0 RCX: 00007f8cf5b9e159 [ 1567.492326][ T8385] RDX: 0000000000034000 RSI: 0000200000000500 RDI: 0000000000000008 [ 1567.492339][ T8385] RBP: 00007f8cf699d090 R08: 0000200000000140 R09: 000000000000001c [ 1567.492353][ T8385] R10: 000000002000c851 R11: 0000000000000246 R12: 0000000000000002 [ 1567.492366][ T8385] R13: 00007f8cf5e26038 R14: 00007f8cf5e25fa0 R15: 00007ffce39df8b8 [ 1567.492400][ T8385] [ 1567.570286][ T8372] sch_fq: defrate 2 ignored. [ 1567.571951][ T8375] syzkaller0: entered promiscuous mode [ 1567.572158][ T8375] syzkaller0: entered allmulticast mode [ 1567.627816][ T8387] macvtap0: left promiscuous mode [ 1567.629828][ T608] bond8: (slave batadv0): failed to get link speed/duplex [ 1567.635279][ T8372] tipc: Enabling of bearer rejected, failed to enable media [ 1567.739441][ T608] bond8: (slave batadv0): failed to get link speed/duplex [ 1567.777524][ T7811] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1568.131928][ T578] bond8: (slave batadv0): failed to get link speed/duplex [ 1568.223880][ T7811] veth0_vlan: entered promiscuous mode [ 1568.313661][ T7811] veth1_vlan: entered promiscuous mode [ 1568.405641][ T7811] veth0_macvtap: entered promiscuous mode [ 1568.588397][ T8398] Cannot find map_set index 2 as target [ 1568.598086][ T7811] veth1_macvtap: entered promiscuous mode [ 1568.699610][T32465] bond8: (slave batadv0): failed to get link speed/duplex [ 1568.836390][ T8408] bond1: option primary_reselect: invalid value (6) [ 1568.845107][ T8408] bond1 (unregistering): Released all slaves [ 1569.095782][ T8415] netlink: 'syz.5.9099': attribute type 10 has an invalid length. [ 1569.155604][ T8418] netlink: 14 bytes leftover after parsing attributes in process `syz.5.9099'. [ 1569.186123][ T8415] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1569.206498][ T8415] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 1569.299666][ T8418] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1569.351189][ T8418] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1569.386270][ T8424] Cannot find add_set index 2 as target [ 1569.453914][ T8418] bond0 (unregistering): (slave netdevsim1): Releasing backup interface [ 1569.470040][ T8418] bond0 (unregistering): Released all slaves [ 1569.575932][ T578] bond8: (slave batadv0): failed to get link speed/duplex [ 1569.726493][ T7811] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1569.810382][ T7811] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1569.823709][ T8431] FAULT_INJECTION: forcing a failure. [ 1569.823709][ T8431] name failslab, interval 1, probability 0, space 0, times 0 [ 1569.823773][ T8431] CPU: 0 UID: 0 PID: 8431 Comm: syz.4.9103 Not tainted syzkaller #0 PREEMPT(full) [ 1569.823797][ T8431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1569.823809][ T8431] Call Trace: [ 1569.823818][ T8431] [ 1569.823828][ T8431] dump_stack_lvl+0xe8/0x150 [ 1569.823863][ T8431] should_fail_ex+0x410/0x560 [ 1569.823900][ T8431] should_failslab+0xa8/0x100 [ 1569.823926][ T8431] __kmalloc_cache_noprof+0xa3/0x600 [ 1569.823956][ T8431] ? __kmalloc_cache_noprof+0x14d/0x600 [ 1569.823984][ T8431] ? sctp_add_bind_addr+0x8c/0x370 [ 1569.824007][ T8431] ? sctp_add_bind_addr+0x8c/0x370 [ 1569.824039][ T8431] sctp_add_bind_addr+0x8c/0x370 [ 1569.824068][ T8431] sctp_copy_local_addr_list+0x31a/0x4e0 [ 1569.824097][ T8431] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 1569.824123][ T8431] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1569.824150][ T8431] ? sctp_v6_is_any+0x64/0x80 [ 1569.824178][ T8431] ? sctp_copy_one_addr+0x93/0x360 [ 1569.824206][ T8431] sctp_bind_addr_copy+0xb3/0x3c0 [ 1569.824232][ T8431] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1569.824259][ T8431] sctp_connect_new_asoc+0x2ff/0x6b0 [ 1569.824291][ T8431] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1569.824327][ T8431] ? __local_bh_enable_ip+0xd6/0x140 [ 1569.824352][ T8431] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1569.824378][ T8431] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1569.824410][ T8431] sctp_sendmsg+0x159b/0x2d00 [ 1569.824451][ T8431] ? kstrtouint+0x6e/0xe0 [ 1569.824491][ T8431] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1569.824518][ T8431] ? lock_acquire+0x115/0x350 [ 1569.824539][ T8431] ? get_pid_task+0x20/0x1f0 [ 1569.824576][ T8431] ? aa_sock_msg_perm+0xf5/0x210 [ 1569.824597][ T8431] ? sock_rps_record_flow+0x19/0x350 [ 1569.824632][ T8431] ? inet_sendmsg+0x298/0x320 [ 1569.824660][ T8431] ? __pfx_inet_sendmsg+0x10/0x10 [ 1569.824684][ T8431] sock_sendmsg_nosec+0x10e/0x180 [ 1569.824715][ T8431] __sys_sendto+0x408/0x5a0 [ 1569.824734][ T8431] ? ksys_write+0x1e6/0x270 [ 1569.824767][ T8431] ? __pfx___sys_sendto+0x10/0x10 [ 1569.824784][ T8431] ? __mutex_unlock_slowpath+0x731/0x900 [ 1569.824844][ T8431] ? __pfx_ksys_write+0x10/0x10 [ 1569.824879][ T8431] __x64_sys_sendto+0xde/0x100 [ 1569.824903][ T8431] do_syscall_64+0x166/0x520 [ 1569.824932][ T8431] ? trace_irq_disable+0x3b/0x140 [ 1569.824953][ T8431] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1569.824975][ T8431] ? clear_bhb_loop+0x70/0xc0 [ 1569.825000][ T8431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1569.825021][ T8431] RIP: 0033:0x7fcdc9d9e159 [ 1569.825041][ T8431] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1569.825059][ T8431] RSP: 002b:00007fcdcabc0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1569.825083][ T8431] RAX: ffffffffffffffda RBX: 00007fcdca025fa0 RCX: 00007fcdc9d9e159 [ 1569.825098][ T8431] RDX: 0000000000034000 RSI: 0000200000000500 RDI: 0000000000000008 [ 1569.825112][ T8431] RBP: 00007fcdcabc0090 R08: 0000200000000140 R09: 000000000000001c [ 1569.825126][ T8431] R10: 000000002000c851 R11: 0000000000000246 R12: 0000000000000002 [ 1569.825139][ T8431] R13: 00007fcdca026038 R14: 00007fcdca025fa0 R15: 00007fff57053238 [ 1569.825173][ T8431] [ 1569.842832][T32465] bond8: (slave batadv0): failed to get link speed/duplex [ 1570.429047][ T578] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1570.429114][ T578] bond8: (slave batadv0): failed to get link speed/duplex [ 1570.430066][ T578] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1570.430121][ T578] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1570.430160][ T578] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1570.539341][ T7043] bond8: (slave batadv0): failed to get link speed/duplex [ 1570.777392][ T8440] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9105'. [ 1571.134756][ T7042] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1571.134795][ T7042] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1571.335908][ T608] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1571.345309][ T608] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1571.447645][ T8469] netlink: 32 bytes leftover after parsing attributes in process `syz.5.9111'. [ 1571.465013][ T8461] netlink: 52 bytes leftover after parsing attributes in process `syz.3.9109'. [ 1571.465969][ T8461] bridge0: port 1(bridge_slave_0) entered disabled state [ 1571.714912][ T8476] netlink: 36 bytes leftover after parsing attributes in process `syz.5.9111'. [ 1571.715012][ T8476] bridge0: entered promiscuous mode [ 1571.715051][ T8476] bridge0: entered allmulticast mode [ 1571.869918][ T8477] erspan1: entered promiscuous mode [ 1571.994868][ T8486] FAULT_INJECTION: forcing a failure. [ 1571.994868][ T8486] name failslab, interval 1, probability 0, space 0, times 0 [ 1571.994922][ T8486] CPU: 0 UID: 0 PID: 8486 Comm: syz.5.9116 Not tainted syzkaller #0 PREEMPT(full) [ 1571.994946][ T8486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1571.994958][ T8486] Call Trace: [ 1571.994968][ T8486] [ 1571.994978][ T8486] dump_stack_lvl+0xe8/0x150 [ 1571.995013][ T8486] should_fail_ex+0x410/0x560 [ 1571.995049][ T8486] should_failslab+0xa8/0x100 [ 1571.995076][ T8486] __kmalloc_cache_noprof+0xa3/0x600 [ 1571.995108][ T8486] ? __kmalloc_cache_noprof+0x14d/0x600 [ 1571.995136][ T8486] ? sctp_add_bind_addr+0x8c/0x370 [ 1571.995167][ T8486] ? sctp_add_bind_addr+0x8c/0x370 [ 1571.995199][ T8486] sctp_add_bind_addr+0x8c/0x370 [ 1571.995228][ T8486] sctp_copy_local_addr_list+0x31a/0x4e0 [ 1571.995256][ T8486] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 1571.995282][ T8486] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1571.995309][ T8486] ? sctp_v6_is_any+0x64/0x80 [ 1571.995337][ T8486] ? sctp_copy_one_addr+0x93/0x360 [ 1571.995365][ T8486] sctp_bind_addr_copy+0xb3/0x3c0 [ 1571.995391][ T8486] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1571.995422][ T8486] sctp_connect_new_asoc+0x2ff/0x6b0 [ 1571.995455][ T8486] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1571.995492][ T8486] ? __local_bh_enable_ip+0xd6/0x140 [ 1571.995516][ T8486] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1571.995542][ T8486] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1571.995574][ T8486] sctp_sendmsg+0x159b/0x2d00 [ 1571.995614][ T8486] ? kstrtouint+0x6e/0xe0 [ 1571.995641][ T8486] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1571.995667][ T8486] ? lock_acquire+0x115/0x350 [ 1571.995689][ T8486] ? get_pid_task+0x20/0x1f0 [ 1571.995727][ T8486] ? aa_sock_msg_perm+0xf5/0x210 [ 1571.995748][ T8486] ? sock_rps_record_flow+0x19/0x350 [ 1571.995779][ T8486] ? inet_sendmsg+0x298/0x320 [ 1571.995807][ T8486] ? __pfx_inet_sendmsg+0x10/0x10 [ 1571.995831][ T8486] sock_sendmsg_nosec+0x10e/0x180 [ 1571.995862][ T8486] __sys_sendto+0x408/0x5a0 [ 1571.995881][ T8486] ? ksys_write+0x1e6/0x270 [ 1571.995913][ T8486] ? __pfx___sys_sendto+0x10/0x10 [ 1571.995931][ T8486] ? __mutex_unlock_slowpath+0x731/0x900 [ 1571.995992][ T8486] ? __pfx_ksys_write+0x10/0x10 [ 1571.996026][ T8486] __x64_sys_sendto+0xde/0x100 [ 1571.996051][ T8486] do_syscall_64+0x166/0x520 [ 1571.996079][ T8486] ? trace_irq_disable+0x3b/0x140 [ 1571.996098][ T8486] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1571.996119][ T8486] ? clear_bhb_loop+0x70/0xc0 [ 1571.996152][ T8486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1571.996173][ T8486] RIP: 0033:0x7f484039e159 [ 1571.996194][ T8486] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1571.996212][ T8486] RSP: 002b:00007f48411e4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1571.996237][ T8486] RAX: ffffffffffffffda RBX: 00007f4840625fa0 RCX: 00007f484039e159 [ 1571.996252][ T8486] RDX: 0000000000034000 RSI: 0000200000000500 RDI: 0000000000000008 [ 1571.996266][ T8486] RBP: 00007f48411e4090 R08: 0000200000000140 R09: 000000000000001c [ 1571.996280][ T8486] R10: 000000002000c851 R11: 0000000000000246 R12: 0000000000000002 [ 1571.996294][ T8486] R13: 00007f4840626038 R14: 00007f4840625fa0 R15: 00007ffea4e21d48 [ 1571.996328][ T8486] [ 1572.328363][ T2758] net_ratelimit: 12 callbacks suppressed [ 1572.328385][ T2758] bond8: (slave batadv0): failed to get link speed/duplex [ 1572.491215][ T7043] bond8: (slave batadv0): failed to get link speed/duplex [ 1572.515423][ T8489] netlink: 'syz.0.9117': attribute type 1 has an invalid length. [ 1572.515466][ T8489] netlink: 224 bytes leftover after parsing attributes in process `syz.0.9117'. [ 1572.700272][ T7043] bond8: (slave batadv0): failed to get link speed/duplex [ 1573.038292][ T7042] bond8: (slave batadv0): failed to get link speed/duplex [ 1573.149008][ T7042] bond8: (slave batadv0): failed to get link speed/duplex [ 1573.248685][ T8505] netlink: 'syz.1.9122': attribute type 17 has an invalid length. [ 1573.258207][ T7042] bond8: (slave batadv0): failed to get link speed/duplex [ 1573.286061][ T8511] openvswitch: netlink: VXLAN extension 248 out of range max 1 [ 1573.310262][ T8505] tc_dump_action: action bad kind [ 1573.389817][ T7042] bond8: (slave batadv0): failed to get link speed/duplex [ 1573.529740][ T2758] bond8: (slave batadv0): failed to get link speed/duplex [ 1573.648935][ T7042] bond8: (slave batadv0): failed to get link speed/duplex [ 1573.926244][ T8527] FAULT_INJECTION: forcing a failure. [ 1573.926244][ T8527] name failslab, interval 1, probability 0, space 0, times 0 [ 1573.940016][ T8527] CPU: 0 UID: 0 PID: 8527 Comm: syz.0.9131 Not tainted syzkaller #0 PREEMPT(full) [ 1573.940047][ T8527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1573.940068][ T8527] Call Trace: [ 1573.940078][ T8527] [ 1573.940087][ T8527] dump_stack_lvl+0xe8/0x150 [ 1573.940123][ T8527] should_fail_ex+0x410/0x560 [ 1573.940161][ T8527] should_failslab+0xa8/0x100 [ 1573.940189][ T8527] __kmalloc_cache_noprof+0xa3/0x600 [ 1573.940219][ T8527] ? __kmalloc_cache_noprof+0x14d/0x600 [ 1573.940247][ T8527] ? sctp_add_bind_addr+0x8c/0x370 [ 1573.940271][ T8527] ? sctp_add_bind_addr+0x8c/0x370 [ 1573.940302][ T8527] sctp_add_bind_addr+0x8c/0x370 [ 1573.940331][ T8527] sctp_copy_local_addr_list+0x31a/0x4e0 [ 1573.940359][ T8527] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 1573.940385][ T8527] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1573.940413][ T8527] ? sctp_v6_is_any+0x64/0x80 [ 1573.940445][ T8527] ? sctp_copy_one_addr+0x93/0x360 [ 1573.940474][ T8527] sctp_bind_addr_copy+0xb3/0x3c0 [ 1573.940500][ T8527] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1573.940526][ T8527] sctp_connect_new_asoc+0x2ff/0x6b0 [ 1573.940558][ T8527] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1573.940594][ T8527] ? __local_bh_enable_ip+0xd6/0x140 [ 1573.940619][ T8527] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1573.940644][ T8527] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1573.940676][ T8527] sctp_sendmsg+0x159b/0x2d00 [ 1573.940716][ T8527] ? kstrtouint+0x6e/0xe0 [ 1573.940745][ T8527] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1573.940771][ T8527] ? lock_acquire+0x115/0x350 [ 1573.940793][ T8527] ? get_pid_task+0x20/0x1f0 [ 1573.940830][ T8527] ? aa_sock_msg_perm+0xf5/0x210 [ 1573.940851][ T8527] ? sock_rps_record_flow+0x19/0x350 [ 1573.940880][ T8527] ? inet_sendmsg+0x298/0x320 [ 1573.940908][ T8527] ? __pfx_inet_sendmsg+0x10/0x10 [ 1573.940932][ T8527] sock_sendmsg_nosec+0x10e/0x180 [ 1573.940963][ T8527] __sys_sendto+0x408/0x5a0 [ 1573.940984][ T8527] ? ksys_write+0x1e6/0x270 [ 1573.941014][ T8527] ? __pfx___sys_sendto+0x10/0x10 [ 1573.941032][ T8527] ? __mutex_unlock_slowpath+0x731/0x900 [ 1573.941099][ T8527] ? __pfx_ksys_write+0x10/0x10 [ 1573.941136][ T8527] __x64_sys_sendto+0xde/0x100 [ 1573.941160][ T8527] do_syscall_64+0x166/0x520 [ 1573.941188][ T8527] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1573.941210][ T8527] ? clear_bhb_loop+0x70/0xc0 [ 1573.941235][ T8527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1573.941257][ T8527] RIP: 0033:0x7fd8f3b9e159 [ 1573.941278][ T8527] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1573.941295][ T8527] RSP: 002b:00007fd8f4b23028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1573.941319][ T8527] RAX: ffffffffffffffda RBX: 00007fd8f3e25fa0 RCX: 00007fd8f3b9e159 [ 1573.941334][ T8527] RDX: 0000000000034000 RSI: 0000200000000500 RDI: 0000000000000008 [ 1573.941348][ T8527] RBP: 00007fd8f4b23090 R08: 0000200000000140 R09: 000000000000001c [ 1573.941363][ T8527] R10: 000000002000c851 R11: 0000000000000246 R12: 0000000000000002 [ 1573.941376][ T8527] R13: 00007fd8f3e26038 R14: 00007fd8f3e25fa0 R15: 00007ffebea970c8 [ 1573.941407][ T8527] [ 1574.118856][ T8529] veth0_macvtap: left promiscuous mode [ 1574.171400][ T8529] macvtap0: entered allmulticast mode [ 1575.108067][ T8551] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9138'. [ 1575.224691][ T8555] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9138'. [ 1575.303911][ T8551] FAULT_INJECTION: forcing a failure. [ 1575.303911][ T8551] name failslab, interval 1, probability 0, space 0, times 0 [ 1575.317070][ T8551] CPU: 0 UID: 0 PID: 8551 Comm: syz.0.9138 Not tainted syzkaller #0 PREEMPT(full) [ 1575.317098][ T8551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1575.317111][ T8551] Call Trace: [ 1575.317120][ T8551] [ 1575.317130][ T8551] dump_stack_lvl+0xe8/0x150 [ 1575.317163][ T8551] should_fail_ex+0x410/0x560 [ 1575.317199][ T8551] should_failslab+0xa8/0x100 [ 1575.317225][ T8551] __kvmalloc_node_noprof+0x176/0x820 [ 1575.317248][ T8551] ? rcu_is_watching+0x16/0xb0 [ 1575.317272][ T8551] ? analyze_subprog+0x846/0x9e00 [ 1575.317293][ T8551] ? analyze_subprog+0x846/0x9e00 [ 1575.317321][ T8551] analyze_subprog+0x846/0x9e00 [ 1575.317342][ T8551] ? is_bpf_text_address+0x292/0x2b0 [ 1575.317371][ T8551] ? kernel_text_address+0xa5/0xe0 [ 1575.317399][ T8551] ? arch_stack_walk+0xfb/0x150 [ 1575.317438][ T8551] ? __pfx_stack_trace_save+0x10/0x10 [ 1575.317483][ T8551] ? call_instance+0x263/0x560 [ 1575.317503][ T8551] ? bpf_compute_subprog_arg_access+0x2a3/0x14d0 [ 1575.317525][ T8551] ? bpf_compute_live_registers+0x8d3/0x1ff0 [ 1575.317548][ T8551] ? __pfx_analyze_subprog+0x10/0x10 [ 1575.317568][ T8551] ? __x64_sys_bpf+0xba/0xd0 [ 1575.317585][ T8551] ? do_syscall_64+0x166/0x520 [ 1575.317614][ T8551] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1575.317672][ T8551] ? call_instance+0x263/0x560 [ 1575.317692][ T8551] ? rcu_is_watching+0x16/0xb0 [ 1575.317715][ T8551] ? call_instance+0x263/0x560 [ 1575.317734][ T8551] ? trace_kmalloc+0x2a/0xf0 [ 1575.317764][ T8551] ? call_instance+0x263/0x560 [ 1575.317784][ T8551] ? __kvmalloc_node_noprof+0x52f/0x820 [ 1575.317806][ T8551] ? __kvmalloc_node_noprof+0x345/0x820 [ 1575.317826][ T8551] ? call_instance+0x263/0x560 [ 1575.317846][ T8551] ? call_instance+0x263/0x560 [ 1575.317873][ T8551] ? call_instance+0x42e/0x560 [ 1575.317910][ T8551] bpf_compute_subprog_arg_access+0x2c9/0x14d0 [ 1575.317954][ T8551] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 1575.317982][ T8551] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 1575.318004][ T8551] ? trace_kmalloc+0x2a/0xf0 [ 1575.318031][ T8551] ? __pfx_bpf_compute_subprog_arg_access+0x10/0x10 [ 1575.318058][ T8551] ? __kvmalloc_node_noprof+0x345/0x820 [ 1575.318078][ T8551] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 1575.318099][ T8551] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 1575.318128][ T8551] bpf_compute_live_registers+0x8d3/0x1ff0 [ 1575.318170][ T8551] ? __pfx_bpf_compute_live_registers+0x10/0x10 [ 1575.318203][ T8551] bpf_check+0x25ed/0x2e10 [ 1575.318235][ T8551] ? ktime_get_with_offset+0x93/0x2d0 [ 1575.318261][ T8551] ? __pfx_bpf_check+0x10/0x10 [ 1575.318286][ T8551] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1575.318317][ T8551] bpf_prog_load+0x14d6/0x1c20 [ 1575.318352][ T8551] ? __pfx_bpf_prog_load+0x10/0x10 [ 1575.318399][ T8551] __sys_bpf+0xd0d/0xd90 [ 1575.318430][ T8551] ? __pfx___sys_bpf+0x10/0x10 [ 1575.318463][ T8551] ? __fget_files+0x2a/0x420 [ 1575.318506][ T8551] ? ksys_write+0x242/0x270 [ 1575.318536][ T8551] ? __pfx_ksys_write+0x10/0x10 [ 1575.318569][ T8551] __x64_sys_bpf+0xba/0xd0 [ 1575.318593][ T8551] do_syscall_64+0x166/0x520 [ 1575.318620][ T8551] ? trace_irq_disable+0x3b/0x140 [ 1575.318639][ T8551] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1575.318659][ T8551] ? clear_bhb_loop+0x70/0xc0 [ 1575.318684][ T8551] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1575.318705][ T8551] RIP: 0033:0x7fd8f3b9e159 [ 1575.318725][ T8551] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1575.318743][ T8551] RSP: 002b:00007fd8f4b23028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1575.318766][ T8551] RAX: ffffffffffffffda RBX: 00007fd8f3e25fa0 RCX: 00007fd8f3b9e159 [ 1575.318781][ T8551] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 1575.318795][ T8551] RBP: 00007fd8f4b23090 R08: 0000000000000000 R09: 0000000000000000 [ 1575.318808][ T8551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1575.318821][ T8551] R13: 00007fd8f3e26038 R14: 00007fd8f3e25fa0 R15: 00007ffebea970c8 [ 1575.318853][ T8551] [ 1575.905183][ T8553] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9139'. [ 1575.925693][ T8568] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9141'. [ 1576.245706][ T8577] FAULT_INJECTION: forcing a failure. [ 1576.245706][ T8577] name failslab, interval 1, probability 0, space 0, times 0 [ 1576.262458][ T8577] CPU: 0 UID: 0 PID: 8577 Comm: syz.4.9144 Not tainted syzkaller #0 PREEMPT(full) [ 1576.262490][ T8577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1576.262504][ T8577] Call Trace: [ 1576.262514][ T8577] [ 1576.262524][ T8577] dump_stack_lvl+0xe8/0x150 [ 1576.262561][ T8577] should_fail_ex+0x410/0x560 [ 1576.262601][ T8577] should_failslab+0xa8/0x100 [ 1576.262629][ T8577] __kmalloc_cache_noprof+0xa3/0x600 [ 1576.262662][ T8577] ? __kmalloc_cache_noprof+0x14d/0x600 [ 1576.262691][ T8577] ? sctp_add_bind_addr+0x8c/0x370 [ 1576.262716][ T8577] ? sctp_add_bind_addr+0x8c/0x370 [ 1576.262749][ T8577] sctp_add_bind_addr+0x8c/0x370 [ 1576.262780][ T8577] sctp_copy_local_addr_list+0x31a/0x4e0 [ 1576.262810][ T8577] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 1576.262837][ T8577] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1576.262865][ T8577] ? sctp_v6_is_any+0x64/0x80 [ 1576.262895][ T8577] ? sctp_copy_one_addr+0x93/0x360 [ 1576.262925][ T8577] sctp_bind_addr_copy+0xb3/0x3c0 [ 1576.262956][ T8577] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1576.262984][ T8577] sctp_connect_new_asoc+0x2ff/0x6b0 [ 1576.263018][ T8577] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1576.263056][ T8577] ? __local_bh_enable_ip+0xd6/0x140 [ 1576.263083][ T8577] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1576.263110][ T8577] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1576.263144][ T8577] sctp_sendmsg+0x159b/0x2d00 [ 1576.263187][ T8577] ? kstrtouint+0x6e/0xe0 [ 1576.263217][ T8577] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1576.263246][ T8577] ? lock_acquire+0x115/0x350 [ 1576.263268][ T8577] ? get_pid_task+0x20/0x1f0 [ 1576.263308][ T8577] ? aa_sock_msg_perm+0xf5/0x210 [ 1576.263330][ T8577] ? sock_rps_record_flow+0x19/0x350 [ 1576.263361][ T8577] ? inet_sendmsg+0x298/0x320 [ 1576.263413][ T8577] ? __pfx_inet_sendmsg+0x10/0x10 [ 1576.263439][ T8577] sock_sendmsg_nosec+0x10e/0x180 [ 1576.263472][ T8577] __sys_sendto+0x408/0x5a0 [ 1576.263492][ T8577] ? ksys_write+0x1e6/0x270 [ 1576.263527][ T8577] ? __pfx___sys_sendto+0x10/0x10 [ 1576.263545][ T8577] ? __mutex_unlock_slowpath+0x731/0x900 [ 1576.263610][ T8577] ? __pfx_ksys_write+0x10/0x10 [ 1576.263645][ T8577] __x64_sys_sendto+0xde/0x100 [ 1576.263671][ T8577] do_syscall_64+0x166/0x520 [ 1576.263701][ T8577] ? trace_irq_disable+0x3b/0x140 [ 1576.263722][ T8577] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1576.263744][ T8577] ? clear_bhb_loop+0x70/0xc0 [ 1576.263771][ T8577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1576.263793][ T8577] RIP: 0033:0x7fcdc9d9e159 [ 1576.263814][ T8577] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1576.263833][ T8577] RSP: 002b:00007fcdcabc0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1576.263859][ T8577] RAX: ffffffffffffffda RBX: 00007fcdca025fa0 RCX: 00007fcdc9d9e159 [ 1576.263876][ T8577] RDX: 0000000000034000 RSI: 0000200000000500 RDI: 0000000000000008 [ 1576.263889][ T8577] RBP: 00007fcdcabc0090 R08: 0000200000000140 R09: 000000000000001c [ 1576.263904][ T8577] R10: 000000002000c851 R11: 0000000000000246 R12: 0000000000000002 [ 1576.263918][ T8577] R13: 00007fcdca026038 R14: 00007fcdca025fa0 R15: 00007fff57053238 [ 1576.263954][ T8577] [ 1576.411545][ T8579] veth0_macvtap: left allmulticast mode [ 1576.411947][ T8579] veth0_macvtap: left promiscuous mode [ 1576.782300][ T8588] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9145'. [ 1577.428276][ T7042] net_ratelimit: 21 callbacks suppressed [ 1577.428328][ T7042] bond8: (slave batadv0): failed to get link speed/duplex [ 1577.543704][ T8617] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9153'. [ 1577.555093][ T8617] openvswitch: netlink: Flow actions attr not present in new flow. [ 1577.564404][ T8606] lo speed is unknown, defaulting to 1000 [ 1577.572990][ T5845] bond8: (slave batadv0): failed to get link speed/duplex [ 1577.611202][ T8606] lo speed is unknown, defaulting to 1000 [ 1577.669406][ T8617] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9153'. [ 1577.775953][ T8629] bridge4: entered promiscuous mode [ 1577.906690][ T8629] bridge4: entered promiscuous mode [ 1578.148223][ T5845] bond8: (slave batadv0): failed to get link speed/duplex [ 1578.246029][ T8636] netlink: 'syz.5.9158': attribute type 1 has an invalid length. [ 1578.271320][ T8642] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9160'. [ 1578.271558][ T8642] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9160'. [ 1578.325151][ T8629] bridge4: entered promiscuous mode [ 1578.385665][ T8640] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1578.411837][ T8640] bond1 (unregistering): Released all slaves [ 1578.622279][ T8629] bridge4: entered promiscuous mode [ 1578.644756][ T8647] netlink: 'syz.1.9161': attribute type 1 has an invalid length. [ 1578.644798][ T8647] netlink: 224 bytes leftover after parsing attributes in process `syz.1.9161'. [ 1578.680175][ T7043] bond8: (slave batadv0): failed to get link speed/duplex [ 1578.966156][ T5845] bond8: (slave batadv0): failed to get link speed/duplex [ 1579.021692][ T8660] bridge0: port 2(bridge_slave_1) entered disabled state [ 1579.022384][ T8660] bridge0: port 1(bridge_slave_0) entered disabled state [ 1579.088123][ T578] bond8: (slave batadv0): failed to get link speed/duplex [ 1579.200634][ T7043] bond8: (slave batadv0): failed to get link speed/duplex [ 1579.318575][ T7043] bond8: (slave batadv0): failed to get link speed/duplex [ 1579.353432][ T8670] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9169'. [ 1579.362865][ T8670] openvswitch: netlink: Flow actions attr not present in new flow. [ 1579.380631][ T8670] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9169'. [ 1579.395989][ T8670] FAULT_INJECTION: forcing a failure. [ 1579.395989][ T8670] name failslab, interval 1, probability 0, space 0, times 0 [ 1579.409954][ T8670] CPU: 0 UID: 0 PID: 8670 Comm: syz.3.9169 Not tainted syzkaller #0 PREEMPT(full) [ 1579.409982][ T8670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1579.409995][ T8670] Call Trace: [ 1579.410004][ T8670] [ 1579.410013][ T8670] dump_stack_lvl+0xe8/0x150 [ 1579.410048][ T8670] should_fail_ex+0x410/0x560 [ 1579.410086][ T8670] should_failslab+0xa8/0x100 [ 1579.410114][ T8670] __kvmalloc_node_noprof+0x176/0x820 [ 1579.410139][ T8670] ? __kvmalloc_node_noprof+0x345/0x820 [ 1579.410161][ T8670] ? analyze_subprog+0x8ac/0x9e00 [ 1579.410186][ T8670] ? analyze_subprog+0x8ac/0x9e00 [ 1579.410216][ T8670] analyze_subprog+0x8ac/0x9e00 [ 1579.410239][ T8670] ? is_bpf_text_address+0x292/0x2b0 [ 1579.410269][ T8670] ? kernel_text_address+0xa5/0xe0 [ 1579.410317][ T8670] ? __pfx_stack_trace_save+0x10/0x10 [ 1579.410374][ T8670] ? call_instance+0x263/0x560 [ 1579.410394][ T8670] ? bpf_compute_subprog_arg_access+0x2a3/0x14d0 [ 1579.410415][ T8670] ? bpf_compute_live_registers+0x8d3/0x1ff0 [ 1579.410439][ T8670] ? __pfx_analyze_subprog+0x10/0x10 [ 1579.410460][ T8670] ? __x64_sys_bpf+0xba/0xd0 [ 1579.410478][ T8670] ? do_syscall_64+0x166/0x520 [ 1579.410508][ T8670] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1579.410569][ T8670] ? call_instance+0x263/0x560 [ 1579.410591][ T8670] ? rcu_is_watching+0x16/0xb0 [ 1579.410616][ T8670] ? call_instance+0x263/0x560 [ 1579.410636][ T8670] ? trace_kmalloc+0x2a/0xf0 [ 1579.410667][ T8670] ? call_instance+0x263/0x560 [ 1579.410687][ T8670] ? __kvmalloc_node_noprof+0x52f/0x820 [ 1579.410710][ T8670] ? __kvmalloc_node_noprof+0x345/0x820 [ 1579.410730][ T8670] ? call_instance+0x263/0x560 [ 1579.410749][ T8670] ? call_instance+0x263/0x560 [ 1579.410777][ T8670] ? call_instance+0x42e/0x560 [ 1579.410806][ T8670] bpf_compute_subprog_arg_access+0x2c9/0x14d0 [ 1579.410850][ T8670] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 1579.410875][ T8670] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 1579.410896][ T8670] ? trace_kmalloc+0x2a/0xf0 [ 1579.410923][ T8670] ? __pfx_bpf_compute_subprog_arg_access+0x10/0x10 [ 1579.410952][ T8670] ? __kvmalloc_node_noprof+0x345/0x820 [ 1579.410972][ T8670] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 1579.410994][ T8670] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 1579.411025][ T8670] bpf_compute_live_registers+0x8d3/0x1ff0 [ 1579.411069][ T8670] ? __pfx_bpf_compute_live_registers+0x10/0x10 [ 1579.411104][ T8670] bpf_check+0x25ed/0x2e10 [ 1579.411139][ T8670] ? ktime_get_with_offset+0x93/0x2d0 [ 1579.411166][ T8670] ? __pfx_bpf_check+0x10/0x10 [ 1579.411192][ T8670] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1579.411225][ T8670] bpf_prog_load+0x14d6/0x1c20 [ 1579.411262][ T8670] ? __pfx_bpf_prog_load+0x10/0x10 [ 1579.411312][ T8670] __sys_bpf+0xd0d/0xd90 [ 1579.411343][ T8670] ? __pfx___sys_bpf+0x10/0x10 [ 1579.411385][ T8670] ? __fget_files+0x2a/0x420 [ 1579.411429][ T8670] ? ksys_write+0x242/0x270 [ 1579.411460][ T8670] ? __pfx_ksys_write+0x10/0x10 [ 1579.411493][ T8670] __x64_sys_bpf+0xba/0xd0 [ 1579.411517][ T8670] do_syscall_64+0x166/0x520 [ 1579.411545][ T8670] ? trace_irq_disable+0x3b/0x140 [ 1579.411565][ T8670] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1579.411587][ T8670] ? clear_bhb_loop+0x70/0xc0 [ 1579.411613][ T8670] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1579.411633][ T8670] RIP: 0033:0x7f216f99e159 [ 1579.411654][ T8670] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1579.411671][ T8670] RSP: 002b:00007f217090b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1579.411694][ T8670] RAX: ffffffffffffffda RBX: 00007f216fc25fa0 RCX: 00007f216f99e159 [ 1579.411708][ T8670] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 1579.411722][ T8670] RBP: 00007f217090b090 R08: 0000000000000000 R09: 0000000000000000 [ 1579.411736][ T8670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1579.411749][ T8670] R13: 00007f216fc26038 R14: 00007f216fc25fa0 R15: 00007ffd006b3658 [ 1579.411782][ T8670] [ 1579.448817][ T8666] syzkaller0: entered promiscuous mode [ 1579.449027][ T8666] syzkaller0: entered allmulticast mode [ 1579.625228][ T8666] tipc: Started in network mode [ 1579.625261][ T8666] tipc: Node identity 269b504da873, cluster identity 4711 [ 1579.625815][ T8666] tipc: Enabled bearer , priority 0 [ 1579.840676][ T8663] tipc: Resetting bearer [ 1580.206435][ T8663] tipc: Disabling bearer [ 1581.315254][ T8715] syzkaller0: entered promiscuous mode [ 1581.315295][ T8715] syzkaller0: entered allmulticast mode [ 1581.633628][ T8733] syzkaller1: entered promiscuous mode [ 1581.645448][ T8733] syzkaller1: entered allmulticast mode [ 1581.680601][ T8733] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9183'. [ 1582.112299][ T8745] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9185'. [ 1582.539057][ T578] net_ratelimit: 17 callbacks suppressed [ 1582.539106][ T578] bond8: (slave batadv0): failed to get link speed/duplex [ 1582.650037][ T8751] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9188'. [ 1582.668141][ T5845] bond8: (slave batadv0): failed to get link speed/duplex [ 1582.693495][ T8751] netlink: 240 bytes leftover after parsing attributes in process `syz.5.9188'. [ 1582.693748][ T8751] netlink: 'syz.5.9188': attribute type 9 has an invalid length. [ 1582.717886][ T8751] sch_fq: defrate 2 ignored. [ 1582.727029][ T8751] syzkaller0: entered promiscuous mode [ 1582.727465][ T8751] syzkaller0: entered allmulticast mode [ 1582.780623][ T5845] bond8: (slave batadv0): failed to get link speed/duplex [ 1582.965664][ T8198] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1582.976721][ T8198] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1582.984526][ T8198] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1583.002097][ T8198] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1583.030270][ T8198] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1583.669917][T32465] bond8: (slave batadv0): failed to get link speed/duplex [ 1583.809172][ T7042] bond8: (slave batadv0): failed to get link speed/duplex [ 1583.921375][ T7043] bond8: (slave batadv0): failed to get link speed/duplex [ 1584.028304][ T7043] bond8: (slave batadv0): failed to get link speed/duplex [ 1584.097796][ T8795] netlink: 71 bytes leftover after parsing attributes in process `syz.3.9198'. [ 1584.187730][ T8802] xt_hashlimit: size too large, truncated to 1048576 [ 1584.187969][ T8802] xt_hashlimit: max too large, truncated to 1048576 [ 1584.665861][ T608] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1584.682522][ T608] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1584.809870][ T5845] bond8: (slave batadv0): failed to get link speed/duplex [ 1585.122416][ T8816] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9201'. [ 1585.138810][T26172] Bluetooth: hci0: command tx timeout [ 1585.185916][ T608] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1585.197281][ T608] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1585.439151][ T608] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1585.451264][ T608] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1585.488554][ T8825] netlink: 'syz.5.9204': attribute type 1 has an invalid length. [ 1585.628633][ T5845] bond8: (slave batadv0): failed to get link speed/duplex [ 1585.750181][ T8828] veth7: entered allmulticast mode [ 1585.758778][ T8763] lo speed is unknown, defaulting to 1000 [ 1585.851500][ T8838] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9207'. [ 1586.101418][ T8192] udevd[8192]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1586.152701][ T8191] udevd[8191]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1586.169141][ T8848] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9208'. [ 1586.344205][ T8852] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9208'. [ 1586.427919][ T8823] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1586.768223][ T8820] bond0: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1586.778604][ T2758] bond8: (slave batadv0): failed to get link speed/duplex [ 1586.786405][ T8763] lo speed is unknown, defaulting to 1000 [ 1586.910277][ T608] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1586.921563][ T608] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1587.126556][ T8823] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1587.225748][T26172] Bluetooth: hci0: command tx timeout [ 1587.287173][ T8867] netlink: 3528 bytes leftover after parsing attributes in process `syz.5.9210'. [ 1587.348405][ T8823] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1587.389742][ T7043] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1587.390316][ T7043] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1587.390444][ T7043] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1587.390560][ T7043] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1587.581816][ T5845] net_ratelimit: 1 callbacks suppressed [ 1587.581866][ T5845] bond8: (slave batadv0): failed to get link speed/duplex [ 1587.581916][ T5845] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1587.734435][ T8879] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9214'. [ 1587.748954][ T8880] netlink: 176 bytes leftover after parsing attributes in process `syz.5.9213'. [ 1587.775104][ T8823] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1588.890375][ T608] bridge_slave_1: left allmulticast mode [ 1588.896177][ T608] bridge_slave_1: left promiscuous mode [ 1588.910879][ T608] bridge0: port 2(bridge_slave_1) entered disabled state [ 1588.937316][ T608] bridge_slave_0: left allmulticast mode [ 1588.944625][ T608] bridge_slave_0: left promiscuous mode [ 1588.952889][ T608] bridge0: port 1(bridge_slave_0) entered disabled state [ 1588.985404][ T608] erspan0: left allmulticast mode [ 1588.993480][ T608] erspan0: left promiscuous mode [ 1588.999502][ T608] bridge2: port 1(erspan0) entered disabled state [ 1589.042396][ T608] pim6reg99999999: left allmulticast mode [ 1589.048668][ T608] pimreg: left allmulticast mode [ 1589.299706][T26172] Bluetooth: hci0: command tx timeout [ 1590.243232][ T608] bond9 (unregistering): (slave geneve2): Releasing active interface [ 1590.344543][ T608] bond1 (unregistering): Released all slaves [ 1590.366456][ T608] bond2 (unregistering): Released all slaves [ 1590.396284][ T608] bond3 (unregistering): Released all slaves [ 1590.432400][ T608] bond4 (unregistering): Released all slaves [ 1590.455224][ T608] bond5 (unregistering): Released all slaves [ 1590.485170][ T608] bond6 (unregistering): (slave bond7): Releasing backup interface [ 1590.499925][ T608] bond6 (unregistering): Released all slaves [ 1590.521932][ T608] bond7 (unregistering): Released all slaves [ 1590.546495][ T608] bond0 (unregistering): (slave veth0_to_bond): Releasing active interface [ 1590.569138][ T608] bond0 (unregistering): Released all slaves [ 1590.593486][ T608] bond8 (unregistering): (slave batadv0): Removing an active aggregator [ 1590.607447][ T608] bond8 (unregistering): (slave batadv0): Releasing backup interface [ 1590.619212][ T608] bond8 (unregistering): Released all slaves [ 1590.649934][ T608] bond9 (unregistering): Released all slaves [ 1590.677892][ T608] bond10 (unregistering): Released all slaves [ 1590.824913][ T578] netdevsim netdevsim4 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 1590.825222][ T578] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1590.825510][ T578] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1590.880660][ T8901] netlink: 'syz.3.9217': attribute type 11 has an invalid length. [ 1591.001677][ T578] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1591.002871][ T578] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1591.034734][ T5279] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1591.138343][ T608] : left promiscuous mode [ 1591.378762][T26172] Bluetooth: hci0: command tx timeout [ 1591.854102][ T608] tipc: Left network mode [ 1591.971349][ T8954] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9225'. [ 1592.057207][ T8962] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1592.510716][ T8976] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9229'. [ 1592.568354][ T8980] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9229'. [ 1594.899215][ T7043] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1594.907629][ T7043] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1594.934993][ T8976] ip6tnl2: entered allmulticast mode [ 1595.208417][ T8989] ref_ctr_offset mismatch. inode: 0x64 offset: 0x0 ref_ctr_offset(old): 0x300000006 ref_ctr_offset(new): 0x0 [ 1595.255542][ T8991] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9232'. [ 1595.444622][ T8996] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9235'. [ 1595.602977][ T9001] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9235'. [ 1595.692661][ T8996] erspan0: entered promiscuous mode [ 1595.748016][ T8996] netlink: 68 bytes leftover after parsing attributes in process `syz.0.9235'. [ 1595.785966][ T9008] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1595.805731][ T8763] bridge0: port 1(bridge_slave_0) entered blocking state [ 1595.806430][ T8763] bridge0: port 1(bridge_slave_0) entered disabled state [ 1595.806783][ T8763] bridge_slave_0: entered allmulticast mode [ 1595.814377][ T8763] bridge_slave_0: entered promiscuous mode [ 1595.866461][ T8763] bridge0: port 2(bridge_slave_1) entered blocking state [ 1595.867158][ T8763] bridge0: port 2(bridge_slave_1) entered disabled state [ 1595.867513][ T8763] bridge_slave_1: entered allmulticast mode [ 1595.915489][ T8763] bridge_slave_1: entered promiscuous mode [ 1596.208350][ T9021] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1596.224868][ T9025] netlink: 'syz.3.9244': attribute type 1 has an invalid length. [ 1596.225129][ T9025] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1596.449296][ T8763] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1596.627007][ T8763] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1596.651150][ T9035] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9245'. [ 1596.831343][ T9035] netlink: 240 bytes leftover after parsing attributes in process `syz.1.9245'. [ 1596.831562][ T9035] netlink: 'syz.1.9245': attribute type 9 has an invalid length. [ 1596.880733][ T608] hsr_slave_0: left promiscuous mode [ 1596.881713][ T608] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1596.881755][ T608] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1596.927484][ T608] veth1_macvtap: left promiscuous mode [ 1596.927660][ T608] veth1_vlan: left promiscuous mode [ 1596.927753][ T608] veth0_vlan: left promiscuous mode [ 1597.206278][ T9050] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9249'. [ 1597.672890][ T608] team0 (unregistering): Port device 76žÿ removed [ 1597.707819][ T608] team0 (unregistering): Port device team_slave_0 removed [ 1597.933117][ T8763] team0: Port device team_slave_0 added [ 1597.967878][ T8763] team0: Port device team_slave_1 added [ 1597.968484][ T9035] sch_fq: defrate 2 ignored. [ 1597.982970][ T2758] smbdirect: ib_dev[syz0] removed [ 1598.013229][ T9039] syzkaller0: entered promiscuous mode [ 1598.013697][ T9039] syzkaller0: entered allmulticast mode [ 1598.080305][ T4568] lo speed is unknown, defaulting to 1000 [ 1598.080349][ T4568] infiniband syz0: ib_query_port failed (-19) [ 1598.223318][ T5279] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1598.578344][ T8763] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1598.585494][ T8763] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1598.613647][ T8763] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1598.623213][ T8763] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1598.623231][ T8763] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1598.623256][ T8763] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1599.380171][ T8763] hsr_slave_0: entered promiscuous mode [ 1599.396604][ T8763] hsr_slave_1: entered promiscuous mode [ 1599.403639][ T8763] debugfs: 'hsr0' already exists in 'hsr' [ 1599.410805][ T8763] Cannot create hsr debugfs directory [ 1600.143451][ T608] IPVS: stop unused estimator thread 0... [ 1600.282043][ T9122] netlink: 'syz.3.9261': attribute type 4 has an invalid length. [ 1600.355492][ T9116] netlink: 80 bytes leftover after parsing attributes in process `syz.3.9261'. [ 1600.355807][ T9116] netlink: 80 bytes leftover after parsing attributes in process `syz.3.9261'. [ 1600.379147][ T9124] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9262'. [ 1600.403646][ T9116] netlink: 'syz.3.9261': attribute type 4 has an invalid length. [ 1600.710978][ T9118] netlink: 240 bytes leftover after parsing attributes in process `syz.0.9262'. [ 1600.711021][ T9118] netlink: 'syz.0.9262': attribute type 9 has an invalid length. [ 1600.795741][ T9124] syzkaller0: entered promiscuous mode [ 1600.795811][ T9124] syzkaller0: entered allmulticast mode [ 1600.829683][ T9118] sch_fq: defrate 2 ignored. [ 1601.289590][ T8763] netdevsim netdevsim4 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1601.539919][ T8763] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1601.688472][ T9153] netlink: 'syz.3.9271': attribute type 2 has an invalid length. [ 1601.701509][ T9153] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9271'. [ 1602.633450][ T8763] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1602.725271][ T9171] batadv0: entered promiscuous mode [ 1602.732235][ T9171] macvtap1: entered promiscuous mode [ 1602.738412][ T9171] macvtap1: entered allmulticast mode [ 1602.745411][ T9171] batadv0: entered allmulticast mode [ 1602.756260][ T9171] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1602.787154][ T9171] batadv0: left allmulticast mode [ 1602.788658][ T9171] batadv0: left promiscuous mode [ 1602.927292][ T9183] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9275'. [ 1603.162529][ T9179] netlink: 240 bytes leftover after parsing attributes in process `syz.1.9275'. [ 1603.162799][ T9179] netlink: 'syz.1.9275': attribute type 9 has an invalid length. [ 1603.263735][ T8763] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1603.321283][ T9179] sch_fq: defrate 2 ignored. [ 1603.323974][ T9183] syzkaller0: entered promiscuous mode [ 1603.324179][ T9183] syzkaller0: entered allmulticast mode [ 1603.724570][ T9199] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9279'. [ 1603.733610][ T9200] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9279'. [ 1603.838718][ T9199] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9279'. [ 1603.927598][ T9199] tipc: Invalid UDP bearer configuration [ 1603.927702][ T9199] tipc: Enabling of bearer rejected, failed to enable media [ 1603.949680][ T9200] tipc: Invalid UDP bearer configuration [ 1603.949749][ T9200] tipc: Enabling of bearer rejected, failed to enable media [ 1603.965843][ T8763] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1604.002084][ T8763] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1604.003000][ T8763] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1604.060822][ T8763] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1604.070445][ T8763] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1604.091572][ T8763] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1604.106171][ T8763] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1604.212100][ T8763] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1604.233009][ T9211] openvswitch: netlink: Flow actions attr not present in new flow. [ 1604.456950][ T9199] bond1: Removing last arp target with arp_interval on [ 1604.521986][ T9200] bond2: Removing last arp target with arp_interval on [ 1604.604406][ T8763] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1604.667758][ T8763] 8021q: adding VLAN 0 to HW filter on device team0 [ 1604.726641][T14329] bridge0: port 1(bridge_slave_0) entered blocking state [ 1604.726802][T14329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1604.791049][T14329] bridge0: port 2(bridge_slave_1) entered blocking state [ 1604.791180][T14329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1604.954268][ T9225] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1605.017346][ T9225] netlink: 'syz.1.9283': attribute type 10 has an invalid length. [ 1605.046084][ T9225] wg2: left promiscuous mode [ 1605.096400][ T9225] wg2: entered promiscuous mode [ 1605.105534][ T9225] wg2: entered allmulticast mode [ 1605.113661][ T9225] team0: Device wg2 is of different type [ 1605.864988][ T9260] __nla_validate_parse: 4 callbacks suppressed [ 1605.865255][ T9260] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9292'. [ 1605.891701][ T9260] netlink: 240 bytes leftover after parsing attributes in process `syz.3.9292'. [ 1605.891949][ T9260] netlink: 'syz.3.9292': attribute type 9 has an invalid length. [ 1605.892339][ T9261] netlink: 'syz.0.9291': attribute type 1 has an invalid length. [ 1605.892353][ T9261] netlink: 224 bytes leftover after parsing attributes in process `syz.0.9291'. [ 1605.892368][ T9261] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9291'. [ 1605.904439][ T9260] sch_fq: defrate 2 ignored. [ 1605.911294][ T9260] syzkaller0: entered promiscuous mode [ 1605.911502][ T9260] syzkaller0: entered allmulticast mode [ 1606.787815][ T9279] tipc: New replicast peer: 255.255.255.255 [ 1606.795179][ T9279] tipc: Enabled bearer , priority 10 [ 1606.809323][ T9279] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9295'. [ 1606.823561][ T9279] netlink: 'syz.5.9295': attribute type 1 has an invalid length. [ 1607.077262][ T9285] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9295'. [ 1607.100563][ T9279] bond2: entered promiscuous mode [ 1607.112627][ T9279] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1607.126895][ T9285] bond2: entered allmulticast mode [ 1609.847672][ T9317] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9296'. [ 1609.857582][ T9317] openvswitch: netlink: Flow actions attr not present in new flow. [ 1609.879100][ T9285] bond2: (slave bridge1): making interface the new active one [ 1609.886777][ T9285] bridge1: entered promiscuous mode [ 1609.892420][ T9285] bridge1: entered allmulticast mode [ 1609.901376][ T9285] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 1610.012770][ T9319] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9296'. [ 1610.044694][ T4564] tipc: Node number set to 2397589581 [ 1610.155910][ T9323] ip6erspan1: entered allmulticast mode [ 1610.208249][ T9325] x_tables: duplicate underflow at hook 3 [ 1610.327626][ T8763] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1610.522019][ T9334] netlink: 220 bytes leftover after parsing attributes in process `syz.3.9303'. [ 1610.813539][ T9346] xt_connbytes: Forcing CT accounting to be enabled [ 1610.846978][ T9339] erspan1: entered promiscuous mode [ 1610.892679][ T9339] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9302'. [ 1610.923602][ T9339] netlink: 240 bytes leftover after parsing attributes in process `syz.1.9302'. [ 1610.923647][ T9339] netlink: 'syz.1.9302': attribute type 9 has an invalid length. [ 1611.031923][ T9339] sch_fq: defrate 2 ignored. [ 1611.042079][ T9339] syzkaller0: entered promiscuous mode [ 1611.042118][ T9339] syzkaller0: entered allmulticast mode [ 1611.084904][ T9336] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9304'. [ 1611.703386][ T8763] veth0_vlan: entered promiscuous mode [ 1611.766448][ T8763] veth1_vlan: entered promiscuous mode [ 1611.835223][ T9374] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1611.921710][ T8763] veth0_macvtap: entered promiscuous mode [ 1611.946699][ T8763] veth1_macvtap: entered promiscuous mode [ 1612.055969][ T9380] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9313'. [ 1612.056016][ T9380] netlink: 3 bytes leftover after parsing attributes in process `syz.0.9313'. [ 1612.056049][ T9380] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9313'. [ 1612.056078][ T9380] netlink: 3 bytes leftover after parsing attributes in process `syz.0.9313'. [ 1612.107757][T26172] Bluetooth: hci2: link tx timeout [ 1612.107794][T26172] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 1612.139349][ T8763] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1612.221339][ T8763] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1612.358259][T32465] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1612.370947][T32465] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1612.371937][T32465] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1612.371978][T32465] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1612.641452][ T9390] netlink: 272 bytes leftover after parsing attributes in process `syz.5.9314'. [ 1612.739200][ T9395] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1612.897269][ T5845] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1612.897308][ T5845] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1612.951608][ T9397] bond0: (slave dummy0): Releasing backup interface [ 1612.996987][ T9397] dummy0: left allmulticast mode [ 1613.005621][ T9397] batman_adv: batadv0: Adding interface: dummy0 [ 1613.005854][ T9397] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1613.005881][ T9397] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 1613.150178][ T7042] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1613.150437][ T7042] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1613.240773][ T9411] netlink: 32 bytes leftover after parsing attributes in process `syz.5.9318'. [ 1613.286575][ T9406] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1613.596503][ T9415] netlink: 'syz.4.9187': attribute type 1 has an invalid length. [ 1613.933701][ T9441] netlink: 'syz.0.9324': attribute type 1 has an invalid length. [ 1614.051613][ T9415] veth3: entered allmulticast mode [ 1614.184934][T26172] Bluetooth: hci2: command 0x0406 tx timeout [ 1614.546752][ T9452] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9327'. [ 1615.236531][ T9476] syzkaller0: entered promiscuous mode [ 1615.242310][ T9476] syzkaller0: entered allmulticast mode [ 1615.846468][ T9503] x_tables: duplicate underflow at hook 2 [ 1616.454991][ T9527] tipc: New replicast peer: 127.0.0.1 [ 1616.464224][ T9527] tipc: Enabled bearer , priority 10 [ 1617.248705][ T9554] __nla_validate_parse: 2 callbacks suppressed [ 1617.248804][ T9554] netlink: 92 bytes leftover after parsing attributes in process `syz.0.9353'. [ 1617.474811][ T9564] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9356'. [ 1618.180716][ T9582] lo speed is unknown, defaulting to 1000 [ 1618.274777][ T9591] veth0_to_bond: entered allmulticast mode [ 1618.578656][ T9601] xt_recent: hitcount (268435462) is larger than allowed maximum (65535) [ 1619.241479][ T9624] nbd6: detected capacity change from 0 to 63 [ 1619.253846][ T486] [ 1619.256216][ T486] ====================================================== [ 1619.263272][ T486] WARNING: possible circular locking dependency detected [ 1619.270377][ T486] syzkaller #0 Not tainted [ 1619.274808][ T486] ------------------------------------------------------ [ 1619.281889][ T486] kworker/0:1H/486 is trying to acquire lock: [ 1619.287979][ T486] ffff88807f047e68 (&nsock->tx_lock){+.+.}-{4:4}, at: nbd_queue_rq+0x373/0xff0 [ 1619.297101][ T486] [ 1619.297101][ T486] but task is already holding lock: [ 1619.304475][ T486] ffff888026bb7178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc1/0xff0 [ 1619.312933][ T486] [ 1619.312933][ T486] which lock already depends on the new lock. [ 1619.312933][ T486] [ 1619.323346][ T486] [ 1619.323346][ T486] the existing dependency chain (in reverse order) is: [ 1619.332368][ T486] [ 1619.332368][ T486] -> #6 (&cmd->lock){+.+.}-{4:4}: [ 1619.339636][ T486] __mutex_lock+0x19d/0x1550 [ 1619.344775][ T486] nbd_queue_rq+0xc1/0xff0 [ 1619.349732][ T486] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1619.355900][ T486] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1619.362827][ T486] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1619.369357][ T486] blk_mq_run_work_fn+0x16c/0x300 [ 1619.374921][ T486] process_scheduled_works+0xc3d/0x1630 [ 1619.381013][ T486] worker_thread+0xa47/0xfb0 [ 1619.386143][ T486] kthread+0x38b/0x480 [ 1619.390745][ T486] ret_from_fork+0x514/0xb70 [ 1619.395872][ T486] ret_from_fork_asm+0x1a/0x30 [ 1619.401179][ T486] [ 1619.401179][ T486] -> #5 (set->srcu){.+.+}-{0:0}: [ 1619.408328][ T486] __synchronize_srcu+0xc9/0x2f0 [ 1619.413804][ T486] elevator_switch+0x1e8/0x7b0 [ 1619.419172][ T486] elevator_change+0x2fa/0x480 [ 1619.424551][ T486] elevator_set_default+0x375/0x440 [ 1619.430281][ T486] blk_register_queue+0x3f3/0x4e0 [ 1619.435873][ T486] __add_disk+0x6cb/0xe30 [ 1619.440738][ T486] add_disk_fwnode+0x100/0x3a0 [ 1619.446037][ T486] nbd_dev_add+0x733/0xb60 [ 1619.450982][ T486] nbd_init+0x168/0x1f0 [ 1619.455760][ T486] do_one_initcall+0x250/0x870 [ 1619.461066][ T486] do_initcall_level+0x10a/0x1a0 [ 1619.466606][ T486] do_initcalls+0x59/0xa0 [ 1619.471470][ T486] kernel_init_freeable+0x29d/0x3e0 [ 1619.477194][ T486] kernel_init+0x22/0x1d0 [ 1619.482053][ T486] ret_from_fork+0x514/0xb70 [ 1619.487176][ T486] ret_from_fork_asm+0x1a/0x30 [ 1619.492469][ T486] [ 1619.492469][ T486] -> #4 (&q->elevator_lock){+.+.}-{4:4}: [ 1619.500301][ T486] __mutex_lock+0x19d/0x1550 [ 1619.505436][ T486] elevator_change+0x1af/0x480 [ 1619.510747][ T486] elevator_set_none+0xb5/0x140 [ 1619.516148][ T486] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 1619.522487][ T486] nbd_start_device+0x189/0xb30 [ 1619.527865][ T486] nbd_genl_connect+0x167d/0x1cd0 [ 1619.533418][ T486] genl_family_rcv_msg_doit+0x233/0x340 [ 1619.539516][ T486] genl_rcv_msg+0x614/0x7a0 [ 1619.544565][ T486] netlink_rcv_skb+0x226/0x4a0 [ 1619.549871][ T486] genl_rcv+0x28/0x40 [ 1619.554413][ T486] netlink_unicast+0x7bd/0x940 [ 1619.559734][ T486] netlink_sendmsg+0x813/0xb40 [ 1619.565034][ T486] sock_sendmsg_nosec+0x13a/0x180 [ 1619.570591][ T486] ____sys_sendmsg+0x54e/0x850 [ 1619.575883][ T486] ___sys_sendmsg+0x2a5/0x360 [ 1619.581099][ T486] __x64_sys_sendmsg+0x1b1/0x290 [ 1619.586565][ T486] do_syscall_64+0x166/0x520 [ 1619.591698][ T486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1619.598128][ T486] [ 1619.598128][ T486] -> #3 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 1619.606809][ T486] blk_alloc_queue+0x544/0x690 [ 1619.612122][ T486] __blk_mq_alloc_disk+0x194/0x390 [ 1619.617772][ T486] nbd_dev_add+0x494/0xb60 [ 1619.622809][ T486] nbd_init+0x168/0x1f0 [ 1619.627502][ T486] do_one_initcall+0x250/0x870 [ 1619.632809][ T486] do_initcall_level+0x10a/0x1a0 [ 1619.638282][ T486] do_initcalls+0x59/0xa0 [ 1619.643151][ T486] kernel_init_freeable+0x29d/0x3e0 [ 1619.648895][ T486] kernel_init+0x22/0x1d0 [ 1619.653764][ T486] ret_from_fork+0x514/0xb70 [ 1619.658895][ T486] ret_from_fork_asm+0x1a/0x30 [ 1619.664208][ T486] [ 1619.664208][ T486] -> #2 (fs_reclaim){+.+.}-{0:0}: [ 1619.671453][ T486] fs_reclaim_acquire+0x71/0x100 [ 1619.676933][ T486] __kmalloc_noprof+0xbc/0x720 [ 1619.682242][ T486] tls_sw_sendmsg+0x59b/0x2b50 [ 1619.687608][ T486] sock_sendmsg_nosec+0x90/0x180 [ 1619.693082][ T486] sock_sendmsg+0x1ca/0x2d0 [ 1619.698157][ T486] splice_to_socket+0xb5e/0x12a0 [ 1619.703637][ T486] direct_splice_actor+0x101/0x160 [ 1619.709279][ T486] splice_direct_to_actor+0x57b/0xcb0 [ 1619.715190][ T486] do_splice_direct+0x195/0x290 [ 1619.720577][ T486] do_sendfile+0x52e/0x7c0 [ 1619.725514][ T486] __se_sys_sendfile64+0x144/0x1a0 [ 1619.731153][ T486] do_syscall_64+0x166/0x520 [ 1619.736286][ T486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1619.742710][ T486] [ 1619.742710][ T486] -> #1 (sk_lock-AF_INET6-NBD){+.+.}-{0:0}: [ 1619.750797][ T486] lock_sock_nested+0x41/0x100 [ 1619.756100][ T486] inet_shutdown+0x6a/0x390 [ 1619.761136][ T486] nbd_mark_nsock_dead+0x2cb/0x550 [ 1619.766790][ T486] recv_work+0x1cee/0x1e10 [ 1619.771749][ T486] process_scheduled_works+0xc3d/0x1630 [ 1619.777834][ T486] worker_thread+0xa47/0xfb0 [ 1619.782982][ T486] kthread+0x38b/0x480 [ 1619.787580][ T486] ret_from_fork+0x514/0xb70 [ 1619.792696][ T486] ret_from_fork_asm+0x1a/0x30 [ 1619.798001][ T486] [ 1619.798001][ T486] -> #0 (&nsock->tx_lock){+.+.}-{4:4}: [ 1619.805666][ T486] __lock_acquire+0x15ff/0x2e50 [ 1619.811053][ T486] lock_acquire+0x115/0x350 [ 1619.816078][ T486] __mutex_lock+0x19d/0x1550 [ 1619.821203][ T486] nbd_queue_rq+0x373/0xff0 [ 1619.826247][ T486] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1619.832338][ T486] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1619.839197][ T486] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1619.845705][ T486] blk_mq_run_work_fn+0x16c/0x300 [ 1619.851267][ T486] process_scheduled_works+0xc3d/0x1630 [ 1619.857354][ T486] worker_thread+0xa47/0xfb0 [ 1619.862486][ T486] kthread+0x38b/0x480 [ 1619.867086][ T486] ret_from_fork+0x514/0xb70 [ 1619.872203][ T486] ret_from_fork_asm+0x1a/0x30 [ 1619.877496][ T486] [ 1619.877496][ T486] other info that might help us debug this: [ 1619.877496][ T486] [ 1619.887735][ T486] Chain exists of: [ 1619.887735][ T486] &nsock->tx_lock --> set->srcu --> &cmd->lock [ 1619.887735][ T486] [ 1619.899837][ T486] Possible unsafe locking scenario: [ 1619.899837][ T486] [ 1619.907313][ T486] CPU0 CPU1 [ 1619.912689][ T486] ---- ---- [ 1619.918099][ T486] lock(&cmd->lock); [ 1619.922101][ T486] lock(set->srcu); [ 1619.928553][ T486] lock(&cmd->lock); [ 1619.935056][ T486] lock(&nsock->tx_lock); [ 1619.939483][ T486] [ 1619.939483][ T486] *** DEADLOCK *** [ 1619.939483][ T486] [ 1619.947624][ T486] locks held by kworker/0:1H/486: 4, last CPU#0: [ 1619.954013][ T486] #0: ffff888020af6d40 ((wq_completion)kblockd){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1619.965096][ T486] #1: ffffc90003b1fc40 ((work_completion)(&(&hctx->run_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1619.977995][ T486] #2: ffff888026886298 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_work_fn+0x144/0x300 [ 1619.987424][ T486] #3: ffff888026bb7178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc1/0xff0 [ 1619.996356][ T486] [ 1619.996356][ T486] stack backtrace: [ 1620.002261][ T486] CPU: 0 UID: 0 PID: 486 Comm: kworker/0:1H Not tainted syzkaller #0 PREEMPT(full) [ 1620.011649][ T486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1620.021730][ T486] Workqueue: kblockd blk_mq_run_work_fn [ 1620.027310][ T486] Call Trace: [ 1620.030607][ T486] [ 1620.033551][ T486] dump_stack_lvl+0xe8/0x150 [ 1620.038169][ T486] print_circular_bug+0x2e2/0x300 [ 1620.043217][ T486] check_noncircular+0x12f/0x150 [ 1620.048179][ T486] __lock_acquire+0x15ff/0x2e50 [ 1620.053055][ T486] lock_acquire+0x115/0x350 [ 1620.057574][ T486] ? nbd_queue_rq+0x373/0xff0 [ 1620.062452][ T486] __mutex_lock+0x19d/0x1550 [ 1620.067067][ T486] ? nbd_queue_rq+0x373/0xff0 [ 1620.071768][ T486] ? lock_acquire+0x115/0x350 [ 1620.076455][ T486] ? nbd_queue_rq+0x373/0xff0 [ 1620.081149][ T486] ? __pfx___mutex_lock+0x10/0x10 [ 1620.086203][ T486] ? ktime_get+0x45/0x220 [ 1620.090553][ T486] nbd_queue_rq+0x373/0xff0 [ 1620.095081][ T486] ? __pfx_clockevents_program_event+0x10/0x10 [ 1620.101258][ T486] ? __pfx_nbd_queue_rq+0x10/0x10 [ 1620.106335][ T486] ? irqentry_exit+0x218/0x910 [ 1620.111121][ T486] ? lockdep_hardirqs_on+0x7b/0x110 [ 1620.116345][ T486] ? irqentry_exit+0x218/0x910 [ 1620.121137][ T486] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1620.126719][ T486] ? sbitmap_get+0x229/0x390 [ 1620.131328][ T486] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 1620.137423][ T486] ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0 [ 1620.143252][ T486] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1620.149604][ T486] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 1620.156383][ T486] ? lock_acquire+0x115/0x350 [ 1620.161082][ T486] ? process_scheduled_works+0x97a/0x1630 [ 1620.166824][ T486] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1620.172821][ T486] ? blk_mq_run_work_fn+0x144/0x300 [ 1620.178036][ T486] blk_mq_run_work_fn+0x16c/0x300 [ 1620.183086][ T486] ? process_scheduled_works+0x97a/0x1630 [ 1620.188829][ T486] process_scheduled_works+0xc3d/0x1630 [ 1620.194405][ T486] ? __pfx_process_scheduled_works+0x10/0x10 [ 1620.200407][ T486] ? assign_work+0x3cf/0x5d0 [ 1620.205019][ T486] worker_thread+0xa47/0xfb0 [ 1620.209637][ T486] ? __kthread_parkme+0x71/0x1f0 [ 1620.214630][ T486] kthread+0x38b/0x480 [ 1620.218717][ T486] ? __pfx_worker_thread+0x10/0x10 [ 1620.223854][ T486] ? __pfx_kthread+0x10/0x10 [ 1620.228550][ T486] ret_from_fork+0x514/0xb70 [ 1620.233164][ T486] ? __pfx_ret_from_fork+0x10/0x10 [ 1620.238299][ T486] ? __switch_to+0xc89/0x1420 [ 1620.242999][ T486] ? __pfx_kthread+0x10/0x10 [ 1620.247606][ T486] ret_from_fork_asm+0x1a/0x30 [ 1620.252398][ T486] [ 1620.307561][ T9610] bridge0: port 2(bridge_slave_1) entered blocking state [ 1620.307662][ T9610] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1620.307881][ T9610] bridge0: port 1(bridge_slave_0) entered blocking state [ 1620.307999][ T9610] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1620.416085][ T9610] veth0_macvtap: entered promiscuous mode [ 1620.424615][ T9610] veth0_macvtap: entered allmulticast mode [ 1620.441479][ T9610] 8021q: adding VLAN 0 to HW filter on device eth0 [ 1620.450105][ T9610] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1620.460065][ T9610] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1620.468960][ T9610] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1620.506663][ T578] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1620.506892][ T578] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1620.506925][ T578] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1620.506955][ T578] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1620.509869][ T9635] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1620.626325][ T9624] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1620.747029][ T8198] block nbd6: Receive control failed (result -104)