last executing test programs: 15m44.21968878s ago: executing program 0 (id=4258): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r4, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414bb080004"], 0x44}, 0x1, 0x2, 0x0, 0x4000000}, 0x40000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0xc}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x5fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x6, 0xffe0}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xe, 0x6}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20048040}, 0x4800) r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.events.local\x00', 0x0, 0x0) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r10, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) socket$key(0xf, 0x3, 0x2) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0xfffffffe, @private1, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r11, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r10, 0x84, 0x5, &(0x7f00000001c0)={r12, @in={{0x2, 0x4e24, @multicast1}}}, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r9, 0x84, 0x6, &(0x7f0000000380)={r12, @in={{0x2, 0x4e21, @empty}}}, &(0x7f0000000440)=0x84) openat$tun(0xffffffffffffff9c, 0x0, 0x101001, 0x0) 15m44.084254047s ago: executing program 2 (id=4259): r0 = epoll_create1(0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x20, r2, 0x30d, 0x4, 0xfffffffd, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xe8c}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x44011}, 0x20000800) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x100007ff, 0xf83, 0xd3}, 0x1c) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x33, &(0x7f000002eff0)={0x3, &(0x7f0000000040)=[{}, {0x7f, 0xf, 0xb, 0x3}, {0xa121, 0x3, 0x81, 0x1}]}, 0x10) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newsa={0x144, 0x10, 0x1, 0x1, 0x25dfdbfd, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@multicast2, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x80, 0x3c}, {@in6=@loopback, 0x4d4, 0x6c}, @in=@local, {0x8000000, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8, 0x2}, {0xffffffffffffffff, 0x2a, 0x1f, 0x7b8}, {0x2, 0xfffffffc, 0xfffffbbc}, 0x70bd2a, 0x0, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075b, 0x8}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r6, &(0x7f0000000480)={0x2, 0x22, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0x3, 0x0, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x39}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe, 0xfffffffe}}, 0xe8) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x1c) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r7, 0x20, 0x70bd2b, 0x25dfdbff, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4004021) socket$nl_netfilter(0x10, 0x3, 0xc) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000800)={0x30000000}) socket$inet_icmp_raw(0x2, 0x3, 0x1) 15m43.841311848s ago: executing program 2 (id=4264): syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x9c, 0x0, @wg}}}}}, 0x0) syz_emit_ethernet(0x9e, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x7c, 0x0, @wg=@data={0x4, 0x0, 0x0, "000000000000000000009000"/100}}}}}}, 0x0) 15m43.814443176s ago: executing program 2 (id=4265): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x20008001) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000f0cd00000000000004000000850000000500000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) setsockopt$sock_attach_bpf(r2, 0x1, 0x7, &(0x7f0000000000), 0x4) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x48844) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a40)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0xffec}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x10, 0x4}}]}}]}, 0x3c}}, 0x4000) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) r8 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x9662}, @TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x24}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r11, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000850600"/18, @ANYRES32=r12, @ANYBLOB="010000000000ff7f1c0012000c000100626f6e64"], 0x3c}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000640)={&(0x7f00000014c0)=ANY=[@ANYRES16=r5, @ANYRESHEX=r6], 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x4004810) r13 = socket$nl_route(0x10, 0x3, 0x0) r14 = socket$netlink(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r14, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r15, 0x1, 0x0, 0x25dfdbff, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x24004804) r16 = gettid() sendmsg$DEVLINK_CMD_RELOAD(r8, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x11c, r15, 0x300, 0x70bd28, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r16}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r13}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x20000010}, 0x10000040) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x3c}}, 0x8000) 15m43.168719049s ago: executing program 0 (id=4268): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0xf) sendto(r0, &(0x7f0000000140)='A', 0xfffff, 0x40008c1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000380)=@delqdisc={0x434, 0x25, 0x100, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x2, 0xf}, {0xa, 0x7}, {0x0, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x3, 0xfffffff8, 0x4, 0x40, 0x2, 0x2, 0x5, 0x7fff, 0x4, 0x1, 0x6, 0x1c8, 0x7, 0x0, 0x5, 0x0, 0x8, 0x9, 0x9, 0x9, 0xf5, 0x200, 0x1, 0x5, 0x6, 0xfff, 0x9, 0x1, 0x80, 0x10400, 0x0, 0x6, 0xff, 0x4, 0x6, 0x9, 0xe6c1, 0x6, 0x65, 0x6, 0x5, 0x71, 0x1f146d7e, 0x80000001, 0x89, 0xe9, 0x80000001, 0x2, 0xff, 0x8, 0xffff8dc2, 0x400, 0x0, 0x2, 0xffff, 0x10001, 0x3ff, 0x0, 0x5, 0xa000000, 0x0, 0x5, 0x8, 0x3, 0x0, 0x401, 0x5, 0x8, 0x4ad1, 0x1, 0x25ae, 0x1, 0xfff, 0x6, 0xe, 0xffffffff, 0x7, 0x5, 0x3ff, 0xfff, 0x8, 0xf, 0x0, 0x4, 0x626cfd3b, 0x0, 0x60df8662, 0x2, 0x5, 0x4, 0xc6, 0x8, 0x7, 0xfffffffa, 0x9, 0x2, 0x1, 0x3, 0x0, 0x7, 0x2, 0xffff8000, 0xe13, 0x8, 0x7, 0xc, 0xfdc1, 0x7ff, 0x4, 0xfffffff0, 0x4, 0x7fff, 0x40, 0x1, 0x1f1f, 0x3, 0x665195e5, 0x5, 0x7, 0x5, 0x5, 0x7, 0x4, 0x800, 0x101, 0x400, 0x2, 0x6, 0xd, 0x9, 0x7, 0xc5, 0x99, 0x4, 0x2e9, 0x4, 0x3, 0x401, 0xfffffffe, 0x7, 0x80000000, 0x8, 0x0, 0x4, 0x37, 0x84, 0x31, 0x2, 0x2, 0x3, 0x6, 0x1, 0x690c, 0x0, 0x9, 0x2, 0xe, 0xb, 0x8, 0x5597, 0x3, 0x4, 0x7fff, 0x62, 0xf6, 0x5, 0x0, 0x7fffffff, 0x9, 0x9, 0x2, 0x100, 0x6, 0x101, 0x5, 0x2, 0x3, 0x4, 0xfc8d, 0x8, 0x401, 0x3, 0xaeb3, 0x3, 0x5, 0x9, 0xfc, 0x8000, 0x1, 0x7, 0x20000, 0x4, 0x2, 0x9f85, 0x65, 0x85, 0x0, 0x2, 0x4, 0x3, 0x7, 0xd92, 0x40, 0xfff, 0xe1, 0x8, 0x426, 0x5, 0x9, 0x1, 0x1000, 0x9, 0x36ae765f, 0x401, 0x9, 0x200000, 0x3, 0x4, 0x5, 0x0, 0x89, 0x5, 0x80000000, 0x4007, 0x1, 0x41632842, 0x6, 0x10, 0x2, 0x8001, 0x5, 0x100, 0x8, 0x9, 0xfe64, 0xd, 0x1c2, 0x2, 0x6, 0x2, 0x80000001, 0xa, 0x6, 0xfffffffc, 0x5, 0x3, 0x7f, 0x8001, 0x5, 0x3, 0x6, 0x8001, 0x10001, 0x5, 0xb, 0x7]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40000}, 0x8010) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newqdisc={0x6c, 0x14, 0xf0b, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {0x4, 0xa}, {0xb, 0xa}, {0x5}}, [@TCA_STAB={0xfffffe1e, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x40, 0xfc, 0x603, 0x400a, 0x0, 0xfffffffd, 0x7f}}, {0x4}}, {{0x1c, 0x1, {0x9, 0x5, 0x8, 0x40d, 0x0, 0x8, 0x2, 0x2}}, {0x8}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x24008814}, 0x20000040) accept4$llc(0xffffffffffffffff, &(0x7f0000000200)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000240)=0x10, 0x0) 15m43.149025062s ago: executing program 0 (id=4269): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000001300)=@raw={'raw\x00', 0x8, 0x3, 0x448, 0x0, 0xffffffff, 0xffffffff, 0x128, 0xffffffff, 0x378, 0xffffffff, 0xffffffff, 0x378, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x4, 0x8, 0x2, 0x1}}, @inet=@rpfilter={{0x28}, {0x5}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x2, 0x10e4}}}, {{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @loopback}, [0x0, 0x0, 0x1fe0000ff], [0xff, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'veth0_vlan\x00', {}, {0xff}, 0x0, 0x0, 0x3}, 0x0, 0x230, 0x250, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'lo\x00', {0x2, 0x0, 0x3, 0xb, 0x18000000, 0x200, 0x5, 0x9, 0x38, 0x40}, {0x30}}}, @common=@ah={{0x30}, {[0x4d4, 0x4d4], 0x84, 0x8, 0x1}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4a8) 15m42.987433075s ago: executing program 0 (id=4272): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x20, 0xf, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8fea, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x67a021c03d2005e9, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r3, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2d, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) 15m42.876649188s ago: executing program 0 (id=4274): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1, 0xffffffffffffffff}, 0x4) r1 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0x7) r2 = socket$netlink(0x10, 0x3, 0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x38, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}]}]}], {0x14, 0x10}}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604"], 0x0, 0x37}, 0x28) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}}, 0x44080) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x28, &(0x7f0000000140), &(0x7f00000001c0)=0x4) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100006"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000380)={0x14, 0x0, 0x8, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0x44000) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xf, &(0x7f0000000040)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffafb}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x22, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet_udp(0x2, 0x2, 0x0) recvfrom(0xffffffffffffffff, &(0x7f00000000c0)=""/125, 0x7d, 0x10100, &(0x7f0000000440)=@pppol2tpv3in6={0x18, 0x1, {0x0, r6, 0x3, 0x3, 0x3, 0x2, {0xa, 0x4e23, 0x11, @local, 0xffffffff}}}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000340)={'gre0\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x8, 0x8, 0x6, 0x8, {{0x2f, 0x4, 0x3, 0x5, 0xbc, 0x64, 0x0, 0x1, 0x29, 0x0, @empty, @private=0xa010101, {[@rr={0x7, 0x7, 0x6b, [@rand_addr=0x64010100]}, @noop, @generic={0x86, 0x2}, @timestamp_prespec={0x44, 0x54, 0x29, 0x3, 0x4, [{@empty, 0x8001}, {@remote, 0x4}, {@loopback, 0x1}, {@multicast1, 0x1}, {@private=0xa010100, 0xffff}, {@multicast1}, {@dev={0xac, 0x14, 0x14, 0x12}, 0x8}, {@local, 0x3}, {@private=0xa010102, 0x86}, {@empty, 0x8001}]}, @timestamp_addr={0x44, 0x24, 0xac, 0x1, 0x6, [{@multicast2, 0xaaf1}, {@multicast1, 0x2}, {@loopback, 0x7}, {@loopback, 0x4}]}, @timestamp_prespec={0x44, 0x24, 0x3d, 0x3, 0x3, [{@multicast1, 0xc000000}, {@multicast2, 0xaa}, {@local, 0x8}, {@dev={0xac, 0x14, 0x14, 0x2c}, 0x87}]}]}}}}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r5, r7, 0x30, 0x0, @void}, 0x10) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r4}, 0xc) 15m42.844155365s ago: executing program 0 (id=4276): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x20008001) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000f0cd00000000000004000000850000000500000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) setsockopt$sock_attach_bpf(r2, 0x1, 0x7, &(0x7f0000000000), 0x4) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x48844) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a40)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0xffec}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x10, 0x4}}]}}]}, 0x3c}}, 0x4000) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) r8 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x9662}, @TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x24}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r11, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000850600"/19, @ANYRES32=r12, @ANYBLOB="010000000000ff7f1c0012000c000100626f6e64"], 0x3c}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000640)={&(0x7f00000014c0)=ANY=[@ANYRES16=r5, @ANYRESHEX=r6], 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x4004810) r13 = socket$nl_route(0x10, 0x3, 0x0) r14 = socket$netlink(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r14, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r15, 0x1, 0x0, 0x25dfdbff, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x24004804) r16 = gettid() sendmsg$DEVLINK_CMD_RELOAD(r8, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x11c, r15, 0x300, 0x70bd28, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r16}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r13}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x20000010}, 0x10000040) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x3c}}, 0x8000) 15m41.436330231s ago: executing program 2 (id=4293): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x3, &(0x7f0000000000)=0x7ff, 0x4) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid\x00') ioctl$NS_GET_OWNER_UID(r4, 0x8004b707, 0x0) (async) ioctl$XFS_IOC_SWAPEXT(r2, 0xc0c0586d, &(0x7f0000000100)={0x0, r2, r4, 0xffffffffffffff43, 0x0, '\x00', {0x2fe, 0x5, 0x8, 0x4, 0x519, 0x4, 0x3, 0xb9, {0x683f, 0x7}, {0x6, 0x400}, {0x9, 0x3}, 0x7, 0xcca, 0x65da, 0x8000, 0x4, 0x3, 0x401, 0x7, 0x8, 0xb7b9, '\x00', 0xffffffff, 0x3, 0xa5, 0x9}}) (async) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) (async, rerun: 32) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[], 0x6c}}, 0x0) (rerun: 32) 15m41.277565003s ago: executing program 2 (id=4294): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xf3f, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {0x7, 0xfff3}, {0xb, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) 15m41.174486665s ago: executing program 2 (id=4295): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000000)='\x00', 0x1, 0x40890, &(0x7f0000000480)={0xa, 0x4e22, 0x2, @loopback={0x900}, 0x1}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f0000000080)={'filter\x00', 0x4}, 0x68) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_udp_SIOCINQ(r2, 0x5760, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x4, 0x25dfdbfe, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040801}, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x70, r4, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@handle=@pci={{0x8}, {0x11}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 15m27.795987479s ago: executing program 32 (id=4276): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x20008001) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000f0cd00000000000004000000850000000500000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) setsockopt$sock_attach_bpf(r2, 0x1, 0x7, &(0x7f0000000000), 0x4) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x48844) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a40)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0xffec}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x10, 0x4}}]}}]}, 0x3c}}, 0x4000) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) r8 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x9662}, @TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x24}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r11, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000850600"/19, @ANYRES32=r12, @ANYBLOB="010000000000ff7f1c0012000c000100626f6e64"], 0x3c}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000640)={&(0x7f00000014c0)=ANY=[@ANYRES16=r5, @ANYRESHEX=r6], 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x4004810) r13 = socket$nl_route(0x10, 0x3, 0x0) r14 = socket$netlink(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r14, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r15, 0x1, 0x0, 0x25dfdbff, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x24004804) r16 = gettid() sendmsg$DEVLINK_CMD_RELOAD(r8, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x11c, r15, 0x300, 0x70bd28, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r16}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r13}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x20000010}, 0x10000040) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x3c}}, 0x8000) 15m26.034293863s ago: executing program 33 (id=4295): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000000)='\x00', 0x1, 0x40890, &(0x7f0000000480)={0xa, 0x4e22, 0x2, @loopback={0x900}, 0x1}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f0000000080)={'filter\x00', 0x4}, 0x68) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_udp_SIOCINQ(r2, 0x5760, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x4, 0x25dfdbfe, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040801}, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x70, r4, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@handle=@pci={{0x8}, {0x11}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 3.37168635s ago: executing program 6 (id=12959): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0xf, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x0, 0x20050000}}, {{0x5, 0x0, 0x6, 0x9, 0x0, 0x1, 0xf9ffffff}, {0x66, 0x0, 0x0, 0x6}}, [], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.20532735s ago: executing program 6 (id=12962): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="f8000000160001000000000000000000fc000000000000000000000000000001ac1414bb0000000000000000000000000000000000000000000080a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="01000080000000000000ffffac1414400000000033"], 0xf8}, 0x1, 0x0, 0x0, 0x4005}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) 3.074489471s ago: executing program 6 (id=12965): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000000700)=@deltaction={0x14, 0x31, 0x800, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x80) r0 = socket$netlink(0x10, 0x3, 0x13) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0xe, 0x4, &(0x7f0000000d40)=ANY=[@ANYBLOB="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", @ANYRESDEC=r0], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5}, 0x94) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000440), 0x10) listen(r2, 0x709) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b0000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x18) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="06005900000000000b0000000c00000000000000f890c4b66deac8c228473adbba1ebdd600637343d02d461c30fc9578da4be40593d57f591651c77eb62f135ebfc80f65b0a580fe44bd806f7becb1be646871b5c0c1", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$SOCK_DIAG_BY_FAMILY(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="28000000140019010000000000"], 0x28}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f0000000340)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000500)=@nat={'nat\x00', 0x670, 0x5, 0x4b0, 0x1e0, 0x290, 0xffffffff, 0x1e0, 0x0, 0x418, 0x418, 0xffffffff, 0x418, 0x418, 0x5, 0x0, {[{{@uncond, 0x0, 0x198, 0x1e0, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xf, 'kmp\x00', "4801d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@rateest={{0x68}, {'wlan1\x00', 'ip6tnl0\x00', 0x12, 0x2, 0x9, 0x2004, 0x5, 0x3, {0xc35}, {0x1ff}}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x12, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@rand_addr=' \x01\x00', @port=0x4e21, @icmp_id=0x68}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x2a, 0x4, "ed481ca2c99b76ccda2879f6a12da5725ea2669d62d23b45710a851be124"}}}, {{@ip={@local, @remote, 0xff, 0x0, 'virt_wifi0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x3}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @local, @empty, @icmp_id=0x68, @port=0x4e22}}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@icmp={{0x28}, {0xc, "1542", 0x1}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x2, @ipv4=@broadcast, @ipv4=@empty, @gre_key=0x3, @icmp_id=0x64}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x510) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) socket(0x25, 0x3, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000040)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f0000004680)=[@rdma_args={0x48, 0x114, 0x1, {{0x2, 0x1}, {0x0}, &(0x7f0000000c80)=[{&(0x7f0000000b00)=""/139, 0x8b}, {0xfffffffffffffffe}, {&(0x7f00000001c0)=""/233, 0xe9}, {&(0x7f0000000480)=""/36, 0x24}, {&(0x7f0000000bc0)=""/155, 0x9b}], 0x5}}], 0x48}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x10000, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) close(0x3) 2.681232625s ago: executing program 1 (id=12970): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000fff300010000b7080000000000087b8ae8ff00000000b7080000000000107b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000008e00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) 2.679243496s ago: executing program 6 (id=12971): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99bfa0018", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0xffffffffffffffff}, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newchain={0x24, 0x64, 0x100, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0x9}, {0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x20844) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r2, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xeb, 0x8, 0x0, 0x0}}, 0x10) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r4, 0x913e0000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r7 = socket$inet6(0xa, 0xa, 0x5) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x569) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r6, 0x0) mmap(&(0x7f0000707000/0x2000)=nil, 0x2000, 0x3, 0x12, r5, 0xc3ceb000) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r8, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="02008dff0400"}) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, 0x28011, r4, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$OCFS2_IOC_UNRESVSP(r10, 0x40305829, &(0x7f0000000040)={0x2, 0x0, 0x1, 0x5, 0x9b9a, 0x7}) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000a00)={r3, &(0x7f0000000940), &(0x7f00000009c0)=""/20}, 0x20) 2.45375313s ago: executing program 1 (id=12974): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6erspan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}]}]}, @NFT_MSG_DELFLOWTABLE={0x48, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6erspan0\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0xfff5}}, 0xe8}}, 0x0) 2.221173165s ago: executing program 1 (id=12977): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd8073a46b08b94214d816f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb4147000001000000008f2b9000f22425e4097ed62cbc891061017cfa6f6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe68db8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3542646bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) listen(r2, 0x0) ioctl$sock_TIOCINQ(r2, 0x541b, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=r4, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=@setlink={0x20, 0x13, 0x5, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r3, 0x312}}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x42) 2.094082395s ago: executing program 3 (id=12978): unshare(0x20400) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r0}}, {{}, {0x95, 0x0, 0x0, 0xa00}}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x3a, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) 2.067159784s ago: executing program 5 (id=12979): unshare(0x24020400) socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000500)) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300000100000000fbdbdf25fc000000000000000000000100000001e000000200000000000000000000000000000004000000000a0060803b000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000200000000000000000000000000000000000000000002004000000000000000fdfdffffffffffff500000000000000000000000000000000500"/84], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}}, 0x20004001) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000080ffffffffffffff0000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 1.740713643s ago: executing program 5 (id=12981): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYBLOB="00010000120001002cbd7000ffdbdf2567636d2d6165732d636500000600000000000000000000000000000000f8ff0000000000000000000000000000000000000000000000004100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f54cf41c000000000000040000002400000000000000000000080001"], 0x100}, 0x1, 0x0, 0x0, 0x200040c0}, 0x0) 1.740268725s ago: executing program 3 (id=12982): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000001300)=@raw={'raw\x00', 0x8, 0x3, 0x448, 0x0, 0xffffffff, 0xffffffff, 0x128, 0xffffffff, 0x378, 0xffffffff, 0xffffffff, 0x378, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x4, 0x8, 0x2, 0x1}}, @inet=@rpfilter={{0x28}, {0x5}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x2, 0x1000}}}, {{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @loopback}, [0x0, 0x0, 0x1fe0000ff], [0xff, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'veth0_vlan\x00', {}, {0xff}, 0xe400, 0x0, 0x3}, 0x0, 0x230, 0x250, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'lo\x00', {0x2, 0x0, 0x3, 0xb, 0x18000000, 0x200, 0x5, 0x9, 0x38, 0x40}, {0x30}}}, @common=@ah={{0x30}, {[0x4d4, 0x4d4], 0x84, 0x8, 0x1}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4a8) 1.705735929s ago: executing program 1 (id=12983): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000280)="96fa2c0bff2099297e1c1ea6d53ff4c2f69b32d385f14857ae25047e39555bbacdb216aa20b99d21a3aa5e5775e86006778ec677400377670a3422aa5184ed400cf452f14ef81d20a792091e037ed82c9ee401f0f428bd4951eab88952d04fd3c2201db3378816", 0xfffffdce) vmsplice(r2, &(0x7f0000000480)=[{&(0x7f0000000300)="93182908fe", 0x5}, {&(0x7f0000000400)="1d4f", 0x2}], 0x2, 0x3) tee(r0, r2, 0xfffffffffffffffd, 0x0) close(r0) close(r1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x54, 0x2, 0x6, 0x5, 0xa, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6}]}]}, 0x54}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x470b923, 0x7fffe, {0x0, 0x0, 0x0, r8, {0x0, 0xffe0}, {0xb, 0xb}, {0x2, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x808, 0x205, 0x1, 0xc}, 0xb, 0x1, 0x32, 0x5, 0x9, 0x7, 0x9, 0x10, 0x1, 0x1, {0xffff1c72, 0x23, 0x100007, 0x8, 0xdffffffe, 0x7583}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x44040}, 0xc000) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031400d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @multicast}, 0x14) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_STATS(r11, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd26, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x8040) 1.673100493s ago: executing program 6 (id=12984): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x1b4, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r7, {0x7}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@TCA_STAB={0x190, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x10, 0x9, 0xbc, 0xcc, 0x2, 0x6f9, 0x6, 0x3}}, {0xa, 0x2, [0x5, 0x94, 0xdc7a]}}, {{0x1c, 0x1, {0x4, 0x6, 0x1000, 0x1, 0x0, 0x3e, 0x0, 0x6}}, {0x10, 0x2, [0xfe01, 0x2f4, 0x1, 0xd, 0xfff7, 0x0]}}, {{0x1c, 0x1, {0x40, 0x2, 0x8, 0x7, 0x0, 0x4e, 0xffffffff, 0xa}}, {0x18, 0x2, [0x39, 0x48, 0x8, 0x400, 0x8, 0xb5, 0x2, 0x1, 0xcf, 0x5]}}, {{0x1c, 0x1, {0x7, 0x9, 0xffe9, 0x1, 0x2, 0x5, 0x2, 0x6}}, {0x10, 0x2, [0x3, 0x7fff, 0x8, 0xd28, 0x4, 0x5]}}, {{0x1c, 0x1, {0x2, 0x80, 0x7f, 0x2, 0x0, 0x50, 0x3ff, 0x3}}, {0xa, 0x2, [0x0, 0x6c8, 0x0]}}, {{0x1c, 0x1, {0x2, 0x7, 0x2, 0x9000, 0x1, 0xfd17, 0x8, 0x3}}, {0xa, 0x2, [0xfffa, 0x8, 0x1ff]}}, {{0x1c, 0x1, {0x3, 0x81, 0xffff, 0x7, 0x0, 0x7, 0x911, 0x8}}, {0x14, 0x2, [0x2f, 0x1893, 0x4, 0x7, 0x8001, 0x6, 0x80, 0x0]}}, {{0x1c, 0x1, {0x0, 0xf8, 0x3, 0x4, 0x0, 0x7ff, 0xc771, 0x7}}, {0x12, 0x2, [0x1, 0x4, 0x100, 0x0, 0x6, 0x169, 0x6]}}, {{0x1c, 0x1, {0x3, 0x1, 0x8, 0x101, 0x0, 0xfffffffb, 0x5, 0x3}}, {0xa, 0x2, [0xffff, 0x3, 0xc0b]}}]}]}, 0x1b4}}, 0x2000049) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002380)=@newtfilter={0x4f8, 0x2c, 0xf3f, 0x70fd2c, 0x25dfdbbd, {0x0, 0x0, 0x0, r7, {0xc, 0x10}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4c8, 0x2, [@TCA_CGROUP_EMATCHES={0x28, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0xc, 0x0, 0x0, {{0x1, 0x1, 0x7}, {0x6, 0x7, 0x6, 0x5, 0x2}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xbe}}]}, @TCA_CGROUP_POLICE={0x50, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x1b39, 0x6, 0x40, 0x9, 0xa9, {0x78, 0x0, 0x6, 0xa, 0x2, 0x10001}, {0x4, 0x2, 0x2, 0x7, 0x0, 0xda}, 0x83d, 0x6, 0x1}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x312}, @TCA_POLICE_RESULT={0x8, 0x5, 0xc4f3}]}, @TCA_CGROUP_POLICE={0x430, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}, @TCA_POLICE_RESULT={0x8, 0x5, 0xb718}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1000, 0x2, 0x5, 0x8000, 0x6, 0x1, 0x8, 0x3ff, 0x8, 0x9, 0x0, 0x102, 0x5, 0x10001, 0x7, 0x3, 0x4, 0x2, 0x1000, 0x79, 0x5, 0xc, 0x9, 0xfffffff4, 0xa, 0x1, 0x3, 0x6859, 0xe, 0x2, 0x5, 0x2, 0xfffffff8, 0x68, 0x1, 0x5, 0x10, 0x5, 0x8001, 0x8, 0x5, 0x7, 0x2, 0x3, 0x401, 0x0, 0x0, 0x1, 0x200, 0x80, 0x9, 0x1, 0x18, 0x6, 0x4655, 0xaeab, 0x3, 0x8, 0xfffffc01, 0x0, 0x7, 0xffff8000, 0x4, 0x9, 0x4, 0x40, 0x7, 0x200, 0xa, 0x28ca15d0, 0x2, 0x3, 0x4, 0x5, 0x8, 0x9, 0xb95, 0x7fffffff, 0xfffff000, 0x7, 0x3, 0x10, 0x7, 0x7, 0x1, 0x6, 0x9, 0x423b, 0x0, 0x9, 0x8, 0x8, 0x40, 0xd3, 0x1a8, 0x6, 0x2000000, 0x3, 0x4, 0x0, 0x8, 0x40, 0x5, 0x6, 0x3, 0x6e5, 0x0, 0xe, 0x4, 0x2, 0x6, 0xe7c, 0xfffffffd, 0x4, 0x80, 0x9, 0x0, 0x9180f58f, 0xe6, 0xe9c1282c, 0x400, 0x6, 0x5, 0x0, 0x8, 0x21, 0x0, 0xffffffff, 0x3ab30471, 0x5, 0x2, 0x5, 0xb8e8, 0xe75, 0x9, 0x0, 0x9, 0x2, 0x6, 0xfffffffa, 0x6, 0x2, 0x0, 0x40, 0xc178, 0x1000, 0x8, 0x1, 0xe, 0x120b, 0xfff, 0x4, 0x1, 0x9, 0x7, 0xe2, 0x9, 0x2, 0x6, 0x1, 0x2, 0x6650, 0x8001, 0x4, 0x2, 0x7, 0x3, 0x5, 0x2399, 0x7, 0x8996, 0x9, 0x1ff, 0x6, 0x3, 0x4, 0x2, 0x4d, 0x31d, 0x480f, 0xd239, 0x100, 0x21a6, 0x4, 0x6, 0x0, 0x9, 0x2, 0x8, 0x7, 0x7ff, 0x8, 0x1, 0x8, 0x8, 0x5, 0x7f, 0x2, 0x0, 0x4, 0xa00, 0x2, 0x5, 0x2, 0xfff, 0xc, 0x2, 0x1, 0x1a4, 0x7, 0x7, 0x1000, 0x7ff, 0x7fffffff, 0xc, 0xd91, 0x2, 0x3, 0x2, 0x0, 0x4, 0x6, 0x9, 0x4, 0x4, 0x4, 0xb, 0x4, 0x8, 0x10, 0xe29, 0x4, 0x1, 0x7, 0x6, 0xfff, 0x8, 0xf, 0x0, 0x9, 0x4, 0x7a, 0x7, 0x4, 0x80000000, 0x0, 0xe, 0x1, 0x80000001, 0x7, 0x87, 0x7, 0xc, 0x4, 0x10000, 0x1a8]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}]}, @TCA_CGROUP_EMATCHES={0x1c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xc7}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x64f2}}]}]}}]}, 0x4f8}, 0x1, 0x0, 0x0, 0x20041090}, 0x4880) bind$netlink(r4, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r9, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r8, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r9, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, 0x0, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r10, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r10, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r10, &(0x7f0000000080)={0xa, 0x4e22, 0x2000000, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendto$inet6(r6, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da8332bc4ae37be32f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee163", 0x55, 0x8840, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x12, r10, 0x604a6000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r10, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff87}, &(0x7f0000000000)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r10, 0x6, 0x23, &(0x7f0000000740)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31}, &(0x7f0000000780)=0x40) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000003c0)=ANY=[@ANYBLOB="64100000a1c97411c6858b7fddafb9eb5835c9f36b5fd14db3bf7c19a64dca421327e8742bbe91081c7bc551541046e7d17b3930542fad9962bd1bf61e363978b43740490816600c4aa3605b870fd667c7a86c87faee0dfbf1a5c5f04590a6d7ef04169595d7702af26bf8289890eef2f87fa5af7058122028c328b3b5eee202975a71f2e69c3905d3ea3564bfeffcaa1e9c2748b2057119b7a5dd2cce673751b23e516db2fced56f2ab20244650bb8d629aa82e4f72492d1be608de7955", @ANYRES16=r2, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r3, @ANYBLOB="4800028044000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000110004006163746976656261636b757000000000"], 0x64}, 0x1, 0x0, 0x0, 0x4000431}, 0x4040084) 1.588761338s ago: executing program 4 (id=12985): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="380000006800010003001000fdffff7f00000000000000000c00020001"], 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r2) sendmsg$ETHTOOL_MSG_COALESCE_GET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000740)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010002000000fcdbdf25310000000c000180080001"], 0x20}}, 0x4000000) (fail_nth: 2) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, 0x0, 0x0) 1.572691944s ago: executing program 5 (id=12986): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000140), r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd700101dcdf250100000008000100", @ANYRES32=r3, @ANYBLOB="44000280400001002400010071756575655f69640000000000000000000000000000000000000000000003000500030003000000080004000100000008000600", @ANYRES32=r1], 0x60}, 0x1, 0x400000000000000}, 0x40810) 1.565673565s ago: executing program 3 (id=12987): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0x3, 0x4}, 0x6) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0xfffffffc, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'batadv_slave_0\x00'}, @IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x2, 0x0, 0x0, 0x800}]}}]}]}, 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0x3, 0x4}, 0x6) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0xfffffffc, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'batadv_slave_0\x00'}, @IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x2, 0x0, 0x0, 0x800}]}}]}]}, 0x48}}, 0x0) (async) 1.048696031s ago: executing program 5 (id=12988): unshare(0x24020400) socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000500)) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300000100000000fbdbdf25fc000000000000000000000100000001e000000200000000000000000000000000000004000000000a0060803b000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000200000000000000000000000000000000000000000002004000000000000000fdfdffffffffffff500000000000000000000000000000000500"/84], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}}, 0x20004001) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc0000000000ffffffffffffff800000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 1.048489881s ago: executing program 4 (id=12989): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000003480)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9848519def38491bbc4173c3c6f357d0272b7319130feaab952ac4703cad04be68907e50e", 0x27}, {&(0x7f0000000c80)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba069186a8d026bd209da8ffa6a26e3b3f8075704a4356bad3f7e1e7db2f609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035d1e18c2d2462d0bb25fff9d3b1ce90b597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b2568635be000000000000000000000000000000001c8a9f7956583e26f6f0edc415851d0b8305fe66c2b7c114e3712d87744938848f24a13cb604000000000000000000", 0xf5}, {&(0x7f0000001340)="641a6a2b8647e6b5208cf9599b1d890aa834ebb75a925ab48c8442218425232932fc2e37e327de21450df098c113e179a0186c6e", 0x34}], 0x3}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000014c0)="fa98151f51a5cd01a13cca732ada71da23eb1dbc1760afa900e0a7e5bd78d1aae07a60bfa40ae396026e0e2659a1e1332ac789341255aedc3223c16d66ce458c85f3c4372aa7f0ba420f8f046adc689289", 0x51}, {&(0x7f0000001640)="22c042cdf9bd9c9359e29aca901441bdb830df717384916ecdcc1d0484ed", 0x1e}], 0x2}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000180)="9ed900f8a0d57b7656fa291a92dc9f58d067b2f1f69c6459442d67fb9436fd2078b14a2f", 0x24}, {&(0x7f00000002c0)="1a88f556665b77544a4f49495e71b694fb12eed4456b2ee14a4b13db92ebb7c2218e99c782d0b6a4bdeb49b9fc1638681e1b9d3264936a5602931030d6d53f6b979b85b0fedb3308b25785b1460fa910931a49d5107106e4e748a8679ded0e7b6fd03f2739a7ebb6399eabcd10bbaca33fa48116bc41b10eab20e805e435f5c7a75325387052bf0d4fefc4d414aed4ce8f82b0c627471a7fa0a789bbf6b5632a048ec0f3e391965bf6c6a64065b36c8c01cc6cfbbaba2316e3a8c34704a0de866867ff8af9f6f2227f7e9686fa75c310943d8ef74921e792ea7d378c237bb817c3", 0xe1}, {&(0x7f00000003c0)="7131821ef34992a7c3b4a30c7b10ab67375b1bdb027a5e1bdf1bff0a522c00e69535b60e7a4de35915f5f45a8f035f024d1a2ebd2ca1851fde44ef6ea33b34a5f71eb9c5db3573f871121fd352bffebb0535c4fa382bb7b35858425c0574055585dfc9236c0b008a04e25cda5f35f40550110c34741f377c963922a4acf4b39fbb260a7ef745bf706ed34c423eca2fbed0acf3b4915062e4aa13d770c023c057da26bec248682391fe18b640a7071c29834424d724b2755a8a6ea73eaf2b7c14bccfbe19b3f14366c9687e3f48eb4fe042c246f0433b0b0f178070", 0xdb}, {0x0}, {&(0x7f0000000640)}], 0x5, &(0x7f0000000a40)}}, {{0x0, 0x0, &(0x7f00000031c0)=[{&(0x7f0000001e00)="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", 0xfee}, {&(0x7f0000002e00)="6a902fb346886d412922bc4676c8f3c8a848623b2c9066cdbb53cd8adad44fcaa84c6cba3ae8193b2970f20840cf59ce0a", 0x31}, {&(0x7f0000002f40)="ffe7f778156d4e585d8ae6ba65324c7e11305859a7490dbadda979ae2e379008453eeb293fe4068b0583fbc15c4b1b776b492f271bd7c3a15b4e29834ee3a36c3d3037cd54cfea086dfec1fed56b9ead57eb419273ec88e9e7b67bac2098a900215f29bcfb72923aea987be67d8e8d016dd98bd25102bd7ec12fbca0e124422d2cb01f905bb0c5574631a4", 0x8b}, {&(0x7f0000000740)="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", 0x13e}, {0x0}], 0x5, &(0x7f0000003300)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1000}}, @ip_ttl={{0x14, 0x0, 0x2, 0xffff}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x10}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6b962cc0}}], 0x78}}], 0x4, 0x4000000) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000000c0)="f43945ca864918caf5375823337eb7c72fc5b6b5161a2c0ca175ff29e6e88a7cc3f70000000000", 0xffffffffffffff73, 0x340080d1, 0x0, 0x0) 935.921158ms ago: executing program 4 (id=12990): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000018110000", @ANYRESOCT=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x8}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007500000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) 896.518904ms ago: executing program 6 (id=12991): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'veth0_to_bridge\x00'}) r0 = socket$phonet(0x23, 0x2, 0x1) writev(r0, &(0x7f0000000700)=[{&(0x7f0000000580)="00160011365b07ca62309907eb333bf34154ca0e1fd2887b2ae338b5d1f5", 0x1e}], 0x1) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="d40000001b0001000000000000000000fc0000000000000000000000000000000000000000000000000000000000000100000000000000000000002000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005d0b633236ae0000000000000000000000000000000000000000000000000000000c001500000000000000000008001f00"], 0xd4}, 0x1, 0x0, 0x0, 0x400c001}, 0x0) r2 = gettid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0}, &(0x7f00000001c0)=0xc) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001b00)=ANY=[@ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="04009180a2022380b338b3f4cfae1aff4b034e6a23fc6c8fe77b82a27fed11b97d8080040487da8db03002309a82bd4a83a16af24d82649da183111bf89ff9f67a626049a8b7642aec314290d92027a6cda4f4da81c972ca3d12ec0f887b506c9cc9b92cd96206a8ff8e23fa643be90769a84c7877b9d4fc5908a0b5efa1b5d10acd1adcb0d0a8d9bc25ebeafdd4b0d405962d9a08000a00", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="04000f800400320005000b0000000000d900a380126122af4eba9f3cfef1ef16b9635280170802c782c885fc141776fe22d26079a59a261e5a053e0ed6a1841f3fe8301f60a0ec72e4d442b759846a6c2547424e264d8eab15aa87c667faab6d450d4d8f3f86c508378c2c6c91b481939ae26749c9de2b7864437a6ab3eeca0cf06af8dbfed3386656386864c746dfdedacf35529c971d14c1961ed76a01f3ec323308f6cd9245b15e75eb2f71fa326819266ce4866b97ce24a7d09abad67434f36daf82f596a7a3563098d4e5965ca7508fb70b506b5eb44404003e80040062800800e200e000000200000000000400e9800800fd00", @ANYRES32=r3, @ANYBLOB="461fe6115536b4f48c580df7b534dc1dce06c54fb1957da2e7fce0b165f06c19951a579fb4113a49ed1ca7e113e887921fc4c79dfbdff57a308a4f5b569b934a4301e3f7f841a667218f2287689389ccb47092377df8f32f7a6a3b958854a5735433c024511978e163620c035c6ddb4a6910450140b01fa093388cd00cd4dd467bd714003c00ff01000000000000000000000000000108003f007f000001000c00018006", @ANYRES32=0x0, @ANYBLOB], 0x11b4}, 0x1, 0x0, 0x0, 0x4048011}, 0xc800) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="d85f3e36c100100000000000070000008500693f79eb000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000700000085000000170000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000040000000800000014100000", @ANYRES32, @ANYBLOB='\x00\t\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f00000000c0)=r8, 0x4) sendmsg$unix(r7, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000880), 0x2, 0x0) r12 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r11, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000080)={0x6c, r12, 0x1, 0x70bd2c, 0xffe, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SOCKETS={0x40, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r9}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r9}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r13}}, {0x24, 0x1, 0x0, 0x1, {0x8, 0x1, r10}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r10}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x128}]}, 0x6c}}, 0x4) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r14, 0x8933, &(0x7f0000003640)={'wpan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r15 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r15, 0x8933, &(0x7f0000000440)={'wlan1\x00'}) 896.310519ms ago: executing program 3 (id=12992): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xf, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000004b1801"], 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2608054c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (fail_nth: 95) 801.472335ms ago: executing program 4 (id=12993): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0xf, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x46}}, {{0x5, 0x0, 0x6, 0x9, 0x0, 0x1, 0xf9ffffff}, {0x66, 0x0, 0x0, 0x6}}, [], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) 799.475584ms ago: executing program 5 (id=12994): bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x7, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0x79}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0xaf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) 683.056908ms ago: executing program 1 (id=12995): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x28, 0x5, 0x6, 0xfffff018}, {0x6, 0x8, 0x6e, 0x1}]}) (async) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x28, 0x5, 0x6, 0xfffff018}, {0x6, 0x8, 0x6e, 0x1}]}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x109a42, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001000010801000000fbdbdf2500010000", @ANYRES32=0x0, @ANYBLOB="000000002104020008001b000000000024001a80080002800400018018002d80"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) 365.155498ms ago: executing program 3 (id=12996): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x11, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYRES8=r0], 0xc4}, 0x1, 0x0, 0x0, 0x40000}, 0x4000040) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000400)={0x1f, 0xffff, 0x4}, 0xffffffffffffff91) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x1070bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000008c0)=@gettfilter={0x2c, 0x2e, 0x10, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xf, 0xfff2}, {0x6, 0xc}, {0xe, 0xc}}, [{0x8, 0xb, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48800}, 0x2000c044) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r7 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000380)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x16}, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1, 0x0, 0x0, 0x86dd}, 0x4) write(0xffffffffffffffff, &(0x7f0000000280)="3b0000000100060518d757783acd4113a9098680a78f7c98fb3a0e637d102a22dc2b1d20898e8f9ab77b5a1d149373156e324f080056132b24b80dc5c20d20e6b505948098be4a90b1c8f177a843ae756090f2bc86bee40b91241bea35fc42", 0x5f) r8 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r9, 0x65, 0x8, &(0x7f0000000200), &(0x7f0000002140)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x200000a, 0x11, r9, 0x3b3a1000) ioctl$int_out(r9, 0x0, &(0x7f0000000080)) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4c854}, 0x4040000) connect$inet(0xffffffffffffffff, 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x11a, 0x3, 0x0, 0x0) 302.022632ms ago: executing program 5 (id=12997): socket$nl_generic(0x10, 0x3, 0x10) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, r0, 0x215eb000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket(0x40000000015, 0x5, 0x0) pread64(r1, &(0x7f0000000000)=""/34, 0x22, 0x9) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv4_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x10}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x19, 0x33}]}, 0x24}}, 0x48850) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x23}, 0x1}, 0x1c) 232.669541ms ago: executing program 4 (id=12998): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000d0ff00010000b7080000000000087b8ae8ff00000000b7080000000000107b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000008e00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) 223.058873ms ago: executing program 3 (id=12999): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11, 0x9c, 0x7b5, 0x0, 0x0, 0x7579e159, 0x0, 0xfffffdfc, 0xef4}}) r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x298, 0x168, 0x0, 0x0, 0x200, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x298}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x0, 0x0, 0x300]}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4, 0x11000000]}}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) 187.714092ms ago: executing program 1 (id=13000): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000003480)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9848519def38491bbc4173c3c6f357d0272b7319130feaab952ac4703cad04be68907e50e", 0x27}, {&(0x7f0000000c80)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba069186a8d026bd209da8ffa6a26e3b3f8075704a4356bad3f7e1e7db2f609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035d1e18c2d2462d0bb25fff9d3b1ce90b597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b2568635be000000000000000000000000000000001c8a9f7956583e26f6f0edc415851d0b8305fe66c2b7c114e3712d87744938848f24a13cb604000000000000000000", 0xf5}, {&(0x7f0000001340)="641a6a2b8647e6b5208cf9599b1d890aa834ebb75a925ab48c8442218425232932fc2e37e327de21450df098c113e179a0186c6e", 0x34}], 0x3}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000014c0)="fa98151f51a5cd01a13cca732ada71da23eb1dbc1760afa900e0a7e5bd78d1aae07a60bfa40ae396026e0e2659a1e1332ac789341255aedc3223c16d66ce458c85f3c4372aa7f0ba420f8f046adc689289", 0x51}, {&(0x7f0000001640)="22c042cdf9bd9c9359e29aca901441bdb830df717384916ecdcc1d0484ed", 0x1e}], 0x2}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000180)="9ed900f8a0d57b7656fa291a92dc9f58d067b2f1f69c6459442d67fb9436fd2078b14a2f", 0x24}, {&(0x7f00000002c0)="1a88f556665b77544a4f49495e71b694fb12eed4456b2ee14a4b13db92ebb7c2218e99c782d0b6a4bdeb49b9fc1638681e1b9d3264936a5602931030d6d53f6b979b85b0fedb3308b25785b1460fa910931a49d5107106e4e748a8679ded0e7b6fd03f2739a7ebb6399eabcd10bbaca33fa48116bc41b10eab20e805e435f5c7a75325387052bf0d4fefc4d414aed4ce8f82b0c627471a7fa0a789bbf6b5632a048ec0f3e391965bf6c6a64065b36c8c01cc6cfbbaba2316e3a8c34704a0de866867ff8af9f6f2227f7e9686fa75c310943d8ef74921e792ea7d378c237bb817c3", 0xe1}, {&(0x7f00000003c0)="7131821ef34992a7c3b4a30c7b10ab67375b1bdb027a5e1bdf1bff0a522c00e69535b60e7a4de35915f5f45a8f035f024d1a2ebd2ca1851fde44ef6ea33b34a5f71eb9c5db3573f871121fd352bffebb0535c4fa382bb7b35858425c0574055585dfc9236c0b008a04e25cda5f35f40550110c34741f377c963922a4acf4b39fbb260a7ef745bf706ed34c423eca2fbed0acf3b4915062e4aa13d770c023c057da26bec248682391fe18b640a7071c29834424d724b2755a8a6ea73eaf2b7c14bccfbe19b3f14366c9687e3f48eb4fe042c246f0433b0b0f178070", 0xdb}, {0x0}, {&(0x7f0000000640)}], 0x5, &(0x7f0000000a40)}}, {{0x0, 0x0, &(0x7f00000031c0)=[{&(0x7f0000001e00)="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", 0xfee}, {&(0x7f0000002e00)="6a902fb346886d412922bc4676c8f3c8a848623b2c9066cdbb53cd8adad44fcaa84c6cba3ae8193b2970f20840cf59ce0a", 0x31}, {&(0x7f0000002f40)="ffe7f778156d4e585d8ae6ba65324c7e11305859a7490dbadda979ae2e379008453eeb293fe4068b0583fbc15c4b1b776b492f271bd7c3a15b4e29834ee3a36c3d3037cd54cfea086dfec1fed56b9ead57eb419273ec88e9e7b67bac2098a900215f29bcfb72923aea987be67d8e8d016dd98bd25102bd7ec12fbca0e124422d2cb01f905bb0c5574631a4", 0x8b}, {&(0x7f0000000740)="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", 0x13e}, {0x0}], 0x5, &(0x7f0000003300)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1000}}, @ip_ttl={{0x14, 0x0, 0x2, 0xffff}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x10}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6b962cc0}}], 0x78}}], 0x4, 0x4000000) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000000c0)="f43945ca864918caf5375823337eb7c72fc5b6b5161a2c0ca175ff29e6e88a7cc3f70000000000", 0xffffffffffffff73, 0x340080d1, 0x0, 0x0) 0s ago: executing program 4 (id=13001): socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet_mptcp(0x2, 0x1, 0x106) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) setsockopt$llc_int(r0, 0x10c, 0x9, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000000)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r2, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x3f) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r3, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x40000}, 0x0) kernel console output (not intermixed with test programs): 8095][T13359] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1472.948312][T13359] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1472.961159][T13359] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1472.978216][T13359] batman_adv: batadv0: Removing interface: vlan2 [ 1473.011357][T13359] batman_adv: batadv0: Interface deactivated: dummy0 [ 1473.028189][T13359] batman_adv: batadv0: Removing interface: dummy0 [ 1473.093267][T13359] batadv0: left allmulticast mode [ 1473.114063][T13359] batadv0: left promiscuous mode [ 1473.124569][T13359] veth1_vlan: left promiscuous mode [ 1473.143367][T13359] veth0_vlan: left promiscuous mode [ 1473.391769][T13200] netlink: 'syz.6.11907': attribute type 16 has an invalid length. [ 1473.656447][T13359] team0 (unregistering): Port device vlan0 removed [ 1473.751861][T13216] netlink: 'syz.5.11911': attribute type 1 has an invalid length. [ 1473.831634][T13359] team0 (unregistering): Port device team_slave_1 removed [ 1473.860805][T13359] team0 (unregistering): Port device team_slave_0 removed [ 1474.233421][T13232] FAULT_INJECTION: forcing a failure. [ 1474.233421][T13232] name failslab, interval 1, probability 0, space 0, times 0 [ 1474.246520][T13232] CPU: 1 UID: 0 PID: 13232 Comm: syz.1.11914 Not tainted syzkaller #0 PREEMPT(full) [ 1474.246550][T13232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1474.246564][T13232] Call Trace: [ 1474.246574][T13232] [ 1474.246584][T13232] dump_stack_lvl+0xe8/0x150 [ 1474.246633][T13232] should_fail_ex+0x40c/0x560 [ 1474.246666][T13232] should_failslab+0xa8/0x100 [ 1474.246727][T13232] __kmalloc_cache_noprof+0xa8/0x660 [ 1474.246758][T13232] ? dev_ethtool+0x13f/0x29c0 [ 1474.246784][T13232] ? dev_ethtool+0x13f/0x29c0 [ 1474.246818][T13232] dev_ethtool+0x13f/0x29c0 [ 1474.246843][T13232] ? __lock_acquire+0x683/0x2cf0 [ 1474.246887][T13232] ? __pfx_dev_ethtool+0x10/0x10 [ 1474.246915][T13232] ? kasan_quarantine_put+0xbb/0x1f0 [ 1474.246947][T13232] ? dev_load+0x21/0x1f0 [ 1474.246991][T13232] ? dev_load+0x21/0x1f0 [ 1474.247025][T13232] ? dev_load+0x21/0x1f0 [ 1474.247058][T13232] dev_ioctl+0x392/0x1150 [ 1474.247095][T13232] sock_do_ioctl+0x23e/0x320 [ 1474.247126][T13232] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1474.247151][T13232] ? hook_file_ioctl+0x1f0/0x5f0 [ 1474.247204][T13232] sock_ioctl+0x57a/0x7e0 [ 1474.247233][T13232] ? __pfx_sock_ioctl+0x10/0x10 [ 1474.247260][T13232] ? __fget_files+0x2a/0x420 [ 1474.247288][T13232] ? __fget_files+0x3a2/0x420 [ 1474.247314][T13232] ? __fget_files+0x2a/0x420 [ 1474.247347][T13232] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1474.247374][T13232] ? __pfx_sock_ioctl+0x10/0x10 [ 1474.247407][T13232] __se_sys_ioctl+0xfc/0x170 [ 1474.247429][T13232] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1474.247459][T13232] do_syscall_64+0x174/0x580 [ 1474.247492][T13232] ? trace_irq_disable+0x3b/0x140 [ 1474.247520][T13232] ? clear_bhb_loop+0x40/0x90 [ 1474.247547][T13232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1474.247569][T13232] RIP: 0033:0x7f3fa659de99 [ 1474.247590][T13232] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1474.247607][T13232] RSP: 002b:00007f3fa73cb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1474.247638][T13232] RAX: ffffffffffffffda RBX: 00007f3fa6825fa0 RCX: 00007f3fa659de99 [ 1474.247654][T13232] RDX: 0000200000000040 RSI: 0000000000008946 RDI: 0000000000000014 [ 1474.247669][T13232] RBP: 00007f3fa73cb090 R08: 0000000000000000 R09: 0000000000000000 [ 1474.247682][T13232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1474.247696][T13232] R13: 00007f3fa6826038 R14: 00007f3fa6825fa0 R15: 00007ffec208d848 [ 1474.247733][T13232] [ 1474.527457][T13222] veth3: entered allmulticast mode [ 1474.545524][T13222] bond3: (slave veth3): Enslaving as an active interface with an up link [ 1474.567718][T13224] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1474.587151][T13225] macvlan0: entered promiscuous mode [ 1474.593792][T13225] macvlan0: entered allmulticast mode [ 1474.604210][T13225] bond3: entered promiscuous mode [ 1474.611236][T13225] veth3: entered promiscuous mode [ 1474.618253][T13225] veth0_to_bond: entered promiscuous mode [ 1474.625043][T13225] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 1474.633788][T13225] bond3: left promiscuous mode [ 1474.638822][T13225] veth3: left promiscuous mode [ 1474.643930][T13225] veth0_to_bond: left promiscuous mode [ 1474.770227][T12830] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1474.786020][T12830] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1474.827518][T13237] xt_hashlimit: max too large, truncated to 1048576 [ 1474.834246][T12830] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1474.861151][T12830] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1474.903754][T12830] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1474.922526][T13237] xt_hashlimit: overflow, try lower: 2/0 [ 1474.931567][T12830] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1474.969365][T12830] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1474.977224][T13244] netlink: 'syz.1.11919': attribute type 1 has an invalid length. [ 1475.040603][T12830] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1475.264404][T13359] IPVS: stop unused estimator thread 0... [ 1475.524476][T12830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1475.602936][T12830] 8021q: adding VLAN 0 to HW filter on device team0 [ 1475.655349][T13359] bridge0: port 1(bridge_slave_0) entered blocking state [ 1475.662640][T13359] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1475.713270][T13277] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 1475.724224][T13359] bridge0: port 2(bridge_slave_1) entered blocking state [ 1475.724348][T13359] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1475.746855][T13279] netlink: 'syz.4.11929': attribute type 23 has an invalid length. [ 1476.217020][T13300] netlink: 'syz.5.11935': attribute type 1 has an invalid length. [ 1476.310850][T13300] bond4: entered promiscuous mode [ 1476.316531][T13300] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1476.335133][T13310] __nla_validate_parse: 5 callbacks suppressed [ 1476.335157][T13310] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11937'. [ 1476.352057][T13310] netlink: 60 bytes leftover after parsing attributes in process `syz.6.11937'. [ 1476.402306][T13309] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1476.434732][T13309] bond4: (slave vti0): The slave device specified does not support setting the MAC address [ 1476.480703][T13309] bond4: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 1476.531492][T13309] bond4: (slave vti0): making interface the new active one [ 1476.558303][T13309] vti0: entered promiscuous mode [ 1476.587636][T13309] bond4: (slave vti0): Enslaving as an active interface with an up link [ 1476.900121][T13327] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11940'. [ 1476.945442][T13330] netlink: 24 bytes leftover after parsing attributes in process `syz.5.11941'. [ 1477.221112][T13346] FAULT_INJECTION: forcing a failure. [ 1477.221112][T13346] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1477.335358][T13346] CPU: 1 UID: 0 PID: 13346 Comm: syz.4.11942 Not tainted syzkaller #0 PREEMPT(full) [ 1477.335390][T13346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1477.335404][T13346] Call Trace: [ 1477.335415][T13346] [ 1477.335425][T13346] dump_stack_lvl+0xe8/0x150 [ 1477.335466][T13346] should_fail_ex+0x40c/0x560 [ 1477.335497][T13346] _copy_to_user+0x31/0xb0 [ 1477.335534][T13346] dev_ethtool+0x2571/0x29c0 [ 1477.335563][T13346] ? __lock_acquire+0x683/0x2cf0 [ 1477.335611][T13346] ? __pfx_dev_ethtool+0x10/0x10 [ 1477.335640][T13346] ? kasan_quarantine_put+0xbb/0x1f0 [ 1477.335672][T13346] ? dev_load+0x21/0x1f0 [ 1477.335717][T13346] ? dev_load+0x21/0x1f0 [ 1477.335750][T13346] ? dev_load+0x21/0x1f0 [ 1477.335785][T13346] dev_ioctl+0x392/0x1150 [ 1477.335822][T13346] sock_do_ioctl+0x23e/0x320 [ 1477.335853][T13346] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1477.335878][T13346] ? hook_file_ioctl+0x1f0/0x5f0 [ 1477.335931][T13346] sock_ioctl+0x57a/0x7e0 [ 1477.335961][T13346] ? __pfx_sock_ioctl+0x10/0x10 [ 1477.335988][T13346] ? __fget_files+0x2a/0x420 [ 1477.336024][T13346] ? __fget_files+0x3a2/0x420 [ 1477.336051][T13346] ? __fget_files+0x2a/0x420 [ 1477.336085][T13346] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1477.336111][T13346] ? __pfx_sock_ioctl+0x10/0x10 [ 1477.336138][T13346] __se_sys_ioctl+0xfc/0x170 [ 1477.336159][T13346] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1477.336185][T13346] do_syscall_64+0x174/0x580 [ 1477.336207][T13346] ? trace_irq_disable+0x3b/0x140 [ 1477.336236][T13346] ? clear_bhb_loop+0x40/0x90 [ 1477.336264][T13346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1477.336286][T13346] RIP: 0033:0x7fafb959de99 [ 1477.336307][T13346] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1477.336327][T13346] RSP: 002b:00007fafba425028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1477.336351][T13346] RAX: ffffffffffffffda RBX: 00007fafb9825fa0 RCX: 00007fafb959de99 [ 1477.336368][T13346] RDX: 0000200000000040 RSI: 0000000000008946 RDI: 0000000000000014 [ 1477.336383][T13346] RBP: 00007fafba425090 R08: 0000000000000000 R09: 0000000000000000 [ 1477.336397][T13346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1477.336411][T13346] R13: 00007fafb9826038 R14: 00007fafb9825fa0 R15: 00007ffd99904ed8 [ 1477.336448][T13346] [ 1477.625944][T13352] team0: Device vxcan1 is of different type [ 1477.644175][T13349] FAULT_INJECTION: forcing a failure. [ 1477.644175][T13349] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1477.660078][T13349] CPU: 1 UID: 0 PID: 13349 Comm: syz.5.11943 Not tainted syzkaller #0 PREEMPT(full) [ 1477.660108][T13349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1477.660122][T13349] Call Trace: [ 1477.660131][T13349] [ 1477.660141][T13349] dump_stack_lvl+0xe8/0x150 [ 1477.660181][T13349] should_fail_ex+0x40c/0x560 [ 1477.660214][T13349] prepare_alloc_pages+0x230/0x650 [ 1477.660254][T13349] __alloc_frozen_pages_noprof+0x12f/0x380 [ 1477.660309][T13349] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1477.660346][T13349] ? __pfx_policy_nodemask+0x10/0x10 [ 1477.660383][T13349] ? update_cfs_rq_load_avg+0x426/0x4e0 [ 1477.660415][T13349] alloc_pages_mpol+0x212/0x380 [ 1477.660454][T13349] folio_alloc_mpol_noprof+0x39/0x160 [ 1477.660498][T13349] vma_alloc_folio_noprof+0xe1/0x1e0 [ 1477.660535][T13349] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1477.660581][T13349] do_wp_page+0x1163/0x4c70 [ 1477.660624][T13349] ? __pfx_do_wp_page+0x10/0x10 [ 1477.660644][T13349] ? do_raw_spin_lock+0x12b/0x2f0 [ 1477.660672][T13349] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1477.660707][T13349] handle_mm_fault+0x1490/0x3080 [ 1477.660745][T13349] ? handle_mm_fault+0xec/0x3080 [ 1477.660779][T13349] ? __pfx_handle_mm_fault+0x10/0x10 [ 1477.660823][T13349] ? lock_mm_and_find_vma+0xa7/0x340 [ 1477.660858][T13349] do_user_addr_fault+0x744/0x1340 [ 1477.660909][T13349] exc_page_fault+0x6a/0xc0 [ 1477.660933][T13349] asm_exc_page_fault+0x26/0x30 [ 1477.660955][T13349] RIP: 0010:rep_movs_alternative+0x4a/0xa0 [ 1477.660985][T13349] Code: 61 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 1477.661003][T13349] RSP: 0018:ffffc9000427f928 EFLAGS: 00050206 [ 1477.661021][T13349] RAX: ffffffff84d32001 RBX: 0000000000000e40 RCX: 0000000000000140 [ 1477.661036][T13349] RDX: 0000000000000000 RSI: ffff888055ec0d40 RDI: 0000200000001000 [ 1477.661052][T13349] RBP: ffffc9000427fa70 R08: ffff888055ec0e7f R09: 1ffff1100abd81cf [ 1477.661068][T13349] R10: dffffc0000000000 R11: ffffed100abd81d0 R12: 0000200000001140 [ 1477.661084][T13349] R13: 00007ffffffff000 R14: ffff888055ec0040 R15: 0000200000000300 [ 1477.661110][T13349] ? __pfx__copy_to_user+0x1/0x10 [ 1477.661149][T13349] _copy_to_user+0x8a/0xb0 [ 1477.661181][T13349] bpf_test_finish+0x17e/0x690 [ 1477.661217][T13349] ? __pfx_bpf_test_finish+0x10/0x10 [ 1477.661256][T13349] bpf_prog_test_run_skb+0x11fe/0x2230 [ 1477.661304][T13349] ? __fget_files+0x3a2/0x420 [ 1477.661331][T13349] ? __fget_files+0x2a/0x420 [ 1477.661365][T13349] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1477.661388][T13349] bpf_prog_test_run+0x2c5/0x340 [ 1477.661423][T13349] __sys_bpf+0xa22/0xd90 [ 1477.661468][T13349] ? __pfx___sys_bpf+0x10/0x10 [ 1477.661510][T13349] ? __fget_files+0x2a/0x420 [ 1477.661560][T13349] ? ksys_write+0x242/0x270 [ 1477.661593][T13349] ? __pfx_ksys_write+0x10/0x10 [ 1477.661632][T13349] __x64_sys_bpf+0xba/0xd0 [ 1477.661658][T13349] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1477.661683][T13349] do_syscall_64+0x174/0x580 [ 1477.661705][T13349] ? trace_irq_disable+0x3b/0x140 [ 1477.661732][T13349] ? clear_bhb_loop+0x40/0x90 [ 1477.661760][T13349] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1477.661781][T13349] RIP: 0033:0x7f116139de99 [ 1477.661808][T13349] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1477.661832][T13349] RSP: 002b:00007f1162251028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1477.661855][T13349] RAX: ffffffffffffffda RBX: 00007f1161625fa0 RCX: 00007f116139de99 [ 1477.661872][T13349] RDX: 000000000000004c RSI: 0000200000000240 RDI: 000000000000000a [ 1477.661886][T13349] RBP: 00007f1162251090 R08: 0000000000000000 R09: 0000000000000000 [ 1477.661900][T13349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1477.661919][T13349] R13: 00007f1161626038 R14: 00007f1161625fa0 R15: 00007ffdcbb3ba48 [ 1477.661955][T13349] [ 1478.471165][T13374] netlink: 'syz.1.11949': attribute type 3 has an invalid length. [ 1478.497581][T12830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1478.669699][T12830] veth0_vlan: entered promiscuous mode [ 1478.712946][T12830] veth1_vlan: entered promiscuous mode [ 1478.825940][T13396] netlink: 52 bytes leftover after parsing attributes in process `syz.4.11954'. [ 1478.861606][T12830] veth0_macvtap: entered promiscuous mode [ 1478.882832][T13396] netlink: 36 bytes leftover after parsing attributes in process `syz.4.11954'. [ 1478.911767][T13396] tipc: Started in network mode [ 1478.931013][T13396] tipc: Node identity 4, cluster identity 4711 [ 1478.960102][T13396] tipc: Node number set to 4 [ 1478.976456][T13396] tipc: Cannot configure node identity twice [ 1479.020006][T12830] veth1_macvtap: entered promiscuous mode [ 1479.107491][T12830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1479.174144][T12830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1479.220201][ T3424] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1479.244796][ T3424] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1479.282747][ T3424] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1479.339441][ T3424] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1479.767130][ T3425] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1479.796793][ T3425] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1479.896534][T13433] IPVS: set_ctl: invalid protocol: 58 127.0.0.1:20004 [ 1479.918926][T13430] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11964'. [ 1479.930144][ T3424] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1479.943625][ T3424] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1480.038341][T13435] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1480.075147][T13434] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1480.162874][T13448] FAULT_INJECTION: forcing a failure. [ 1480.162874][T13448] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1480.188406][T13448] CPU: 0 UID: 0 PID: 13448 Comm: syz.3.11796 Not tainted syzkaller #0 PREEMPT(full) [ 1480.188434][T13448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1480.188446][T13448] Call Trace: [ 1480.188455][T13448] [ 1480.188464][T13448] dump_stack_lvl+0xe8/0x150 [ 1480.188500][T13448] should_fail_ex+0x40c/0x560 [ 1480.188529][T13448] _copy_from_iter+0x1d3/0x1660 [ 1480.188554][T13448] ? rcu_is_watching+0x15/0xb0 [ 1480.188585][T13448] ? trace_kmalloc+0x2a/0xf0 [ 1480.188613][T13448] ? kmem_cache_alloc_node_noprof+0x1f5/0x610 [ 1480.188637][T13448] ? __pfx__copy_from_iter+0x10/0x10 [ 1480.188669][T13448] ? __alloc_skb+0x52c/0x7a0 [ 1480.188696][T13448] ? skb_put+0x112/0x210 [ 1480.188735][T13448] ? tipc_msg_build+0xb29/0xf50 [ 1480.188762][T13448] tipc_msg_build+0x8b6/0xf50 [ 1480.188794][T13448] ? __pfx_tipc_msg_build+0x10/0x10 [ 1480.188818][T13448] ? net_generic+0x1e/0x240 [ 1480.188845][T13448] ? net_generic+0x1e/0x240 [ 1480.188874][T13448] ? tipc_group_bc_cong+0x15f/0x210 [ 1480.188979][T13448] tipc_send_group_bcast+0x7db/0xad0 [ 1480.189030][T13448] ? __pfx_tipc_send_group_bcast+0x10/0x10 [ 1480.189080][T13448] ? __pfx_woken_wake_function+0x10/0x10 [ 1480.189112][T13448] ? ima_match_policy+0x106/0x21c0 [ 1480.189182][T13448] __tipc_sendmsg+0x313/0x2b60 [ 1480.189224][T13448] ? process_measurement+0x443/0x1c10 [ 1480.189252][T13448] ? process_measurement+0x443/0x1c10 [ 1480.189281][T13448] ? __pfx___tipc_sendmsg+0x10/0x10 [ 1480.189315][T13448] ? aa_label_sk_perm+0x532/0x6e0 [ 1480.189346][T13448] ? process_measurement+0x7b2/0x1c10 [ 1480.189378][T13448] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 1480.189417][T13448] ? __lock_acquire+0x683/0x2cf0 [ 1480.189449][T13448] ? __lock_acquire+0x683/0x2cf0 [ 1480.189500][T13448] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1480.189527][T13448] ? tipc_sendmsg+0x47/0x70 [ 1480.189548][T13448] ? __local_bh_enable_ip+0xd0/0x130 [ 1480.189576][T13448] tipc_sendmsg+0x55/0x70 [ 1480.189596][T13448] ? __pfx_tipc_sendmsg+0x10/0x10 [ 1480.189613][T13448] sock_sendmsg_nosec+0x13a/0x180 [ 1480.189643][T13448] ____sys_sendmsg+0x54e/0x850 [ 1480.189669][T13448] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1480.189708][T13448] ? import_iovec+0x73/0xa0 [ 1480.189742][T13448] ___sys_sendmsg+0x2a5/0x360 [ 1480.189761][T13448] ? __lock_acquire+0x683/0x2cf0 [ 1480.189792][T13448] ? __pfx____sys_sendmsg+0x10/0x10 [ 1480.189817][T13448] ? kstrtouint+0x6e/0xe0 [ 1480.189867][T13448] ? __fget_files+0x2a/0x420 [ 1480.189891][T13448] ? __fget_files+0x3a2/0x420 [ 1480.189928][T13448] __sys_sendmmsg+0x273/0x4d0 [ 1480.189954][T13448] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1480.189984][T13448] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1480.190021][T13448] ? ksys_write+0x242/0x270 [ 1480.190054][T13448] ? __pfx_ksys_write+0x10/0x10 [ 1480.190091][T13448] __x64_sys_sendmmsg+0xa0/0xc0 [ 1480.190111][T13448] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1480.190144][T13448] do_syscall_64+0x174/0x580 [ 1480.190164][T13448] ? trace_irq_disable+0x3b/0x140 [ 1480.190189][T13448] ? clear_bhb_loop+0x40/0x90 [ 1480.190215][T13448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1480.190235][T13448] RIP: 0033:0x7f813239de99 [ 1480.190256][T13448] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1480.190273][T13448] RSP: 002b:00007f8133255028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1480.190294][T13448] RAX: ffffffffffffffda RBX: 00007f8132626090 RCX: 00007f813239de99 [ 1480.190309][T13448] RDX: 0400000000000181 RSI: 00002000000030c0 RDI: 0000000000000003 [ 1480.190322][T13448] RBP: 00007f8133255090 R08: 0000000000000000 R09: 0000000000000000 [ 1480.190334][T13448] R10: 9200000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1480.190347][T13448] R13: 00007f8132626128 R14: 00007f8132626090 R15: 00007fff10bafb98 [ 1480.190379][T13448] [ 1480.638122][T13454] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 1480.712953][T13456] netlink: 'syz.6.11967': attribute type 1 has an invalid length. [ 1480.724107][T13458] netlink: 'syz.5.11970': attribute type 11 has an invalid length. [ 1481.042779][T13472] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11976'. [ 1481.221539][T13484] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11982'. [ 1481.424676][T13492] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11986'. [ 1481.457518][T13492] batadv0: entered promiscuous mode [ 1481.468458][T13492] macvtap1: entered promiscuous mode [ 1481.478324][T13492] macvtap1: entered allmulticast mode [ 1481.494907][T13492] batadv0: entered allmulticast mode [ 1481.523457][T13492] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1481.642649][T13503] xt_hashlimit: max too large, truncated to 1048576 [ 1481.654215][T13503] xt_hashlimit: overflow, try lower: 2/0 [ 1482.112553][T13531] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12002'. [ 1482.157553][T13532] netlink: 'syz.5.12004': attribute type 1 has an invalid length. [ 1482.247148][T13532] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1482.816401][T13575] netlink: 12 bytes leftover after parsing attributes in process `syz.6.12021'. [ 1482.980758][T13583] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12023'. [ 1483.374201][T13605] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12030'. [ 1483.526605][T13613] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12034'. [ 1483.546342][T13616] netlink: 128 bytes leftover after parsing attributes in process `syz.3.12035'. [ 1483.573660][T13616] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12035'. [ 1483.594919][T13617] netlink: 128 bytes leftover after parsing attributes in process `syz.3.12035'. [ 1483.610880][T13617] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12035'. [ 1483.631273][T13619] syzkaller0: entered promiscuous mode [ 1483.637350][T13619] syzkaller0: entered allmulticast mode [ 1483.818058][T13628] Cannot find add_set index 1 as target [ 1484.003355][T13640] netlink: 'syz.3.12041': attribute type 23 has an invalid length. [ 1484.246770][T13644] bridge0: port 2(bridge_slave_1) entered disabled state [ 1484.254810][T13644] bridge0: port 1(bridge_slave_0) entered disabled state [ 1484.505249][T13644] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1484.524367][T13644] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1484.712617][T13644] batadv0: left allmulticast mode [ 1484.750346][T13360] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1484.781183][T13360] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1484.802822][T13360] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1484.819847][T13360] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1484.864637][T13360] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1484.884076][T13360] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1484.921358][T13360] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1484.952378][T13360] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1485.413978][T13687] syzkaller0: entered promiscuous mode [ 1485.432965][T13687] syzkaller0: entered allmulticast mode [ 1485.458778][T13691] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 1485.587585][ C0] vcan0: j1939_tp_rxtimer: 0xffff888067330000: rx timeout, send abort [ 1485.820400][T13693] macvtap2: entered promiscuous mode [ 1485.836269][T13693] macvtap2: entered allmulticast mode [ 1485.843956][T13693] batadv0: entered allmulticast mode [ 1485.859638][T13693] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 1486.087789][ C0] vcan0: j1939_tp_rxtimer: 0xffff888067332000: rx timeout, send abort [ 1486.096472][ C0] vcan0: j1939_tp_rxtimer: 0xffff888067330000: abort rx timeout. Force session deactivation [ 1486.433522][T13705] Cannot find add_set index 1 as target [ 1486.596059][ C0] vcan0: j1939_tp_rxtimer: 0xffff888067332000: abort rx timeout. Force session deactivation [ 1486.645551][T13715] FAULT_INJECTION: forcing a failure. [ 1486.645551][T13715] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1486.681899][T13715] CPU: 0 UID: 0 PID: 13715 Comm: syz.1.12069 Not tainted syzkaller #0 PREEMPT(full) [ 1486.681931][T13715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1486.681944][T13715] Call Trace: [ 1486.681953][T13715] [ 1486.681963][T13715] dump_stack_lvl+0xe8/0x150 [ 1486.682002][T13715] should_fail_ex+0x40c/0x560 [ 1486.682034][T13715] _copy_to_user+0x31/0xb0 [ 1486.682068][T13715] bpf_verifier_vlog+0x496/0x900 [ 1486.682104][T13715] btf_verifier_log+0x11d/0x1a0 [ 1486.682136][T13715] ? __pfx_btf_verifier_log+0x10/0x10 [ 1486.682166][T13715] ? btf_func_proto_log+0x63e/0x840 [ 1486.682202][T13715] __btf_verifier_log_type+0x45d/0x6a0 [ 1486.682240][T13715] ? __pfx___btf_verifier_log_type+0x10/0x10 [ 1486.682283][T13715] ? __pfx_sort+0x10/0x10 [ 1486.682312][T13715] ? __pfx_btf_sec_info_cmp+0x10/0x10 [ 1486.682348][T13715] btf_func_proto_check_meta+0xf4/0x160 [ 1486.682383][T13715] btf_parse_type_sec+0x3cf/0x2360 [ 1486.682423][T13715] ? btf_parse_hdr+0x1da/0x810 [ 1486.682459][T13715] ? btf_parse_hdr+0x5f2/0x810 [ 1486.682489][T13715] ? btf_parse_str_sec+0x244/0x2f0 [ 1486.682524][T13715] btf_new_fd+0x487/0xbb0 [ 1486.682564][T13715] __sys_bpf+0xd2e/0xd90 [ 1486.682603][T13715] ? __pfx___sys_bpf+0x10/0x10 [ 1486.682644][T13715] ? __fget_files+0x2a/0x420 [ 1486.682693][T13715] ? ksys_write+0x242/0x270 [ 1486.682730][T13715] ? __pfx_ksys_write+0x10/0x10 [ 1486.682770][T13715] __x64_sys_bpf+0xba/0xd0 [ 1486.682795][T13715] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1486.682821][T13715] do_syscall_64+0x174/0x580 [ 1486.682843][T13715] ? trace_irq_disable+0x3b/0x140 [ 1486.682870][T13715] ? clear_bhb_loop+0x40/0x90 [ 1486.682901][T13715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1486.682923][T13715] RIP: 0033:0x7f3fa659de99 [ 1486.682944][T13715] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1486.682964][T13715] RSP: 002b:00007f3fa73cb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1486.682987][T13715] RAX: ffffffffffffffda RBX: 00007f3fa6825fa0 RCX: 00007f3fa659de99 [ 1486.683004][T13715] RDX: 0000000000000028 RSI: 0000200000000000 RDI: 0000000000000012 [ 1486.683019][T13715] RBP: 00007f3fa73cb090 R08: 0000000000000000 R09: 0000000000000000 [ 1486.683033][T13715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1486.683047][T13715] R13: 00007f3fa6826038 R14: 00007f3fa6825fa0 R15: 00007ffec208d848 [ 1486.683083][T13715] [ 1487.013306][T13723] __nla_validate_parse: 8 callbacks suppressed [ 1487.013328][T13723] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12072'. [ 1487.031530][T13723] FAULT_INJECTION: forcing a failure. [ 1487.031530][T13723] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1487.044706][T13723] CPU: 0 UID: 0 PID: 13723 Comm: syz.1.12072 Not tainted syzkaller #0 PREEMPT(full) [ 1487.044737][T13723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1487.044752][T13723] Call Trace: [ 1487.044762][T13723] [ 1487.044772][T13723] dump_stack_lvl+0xe8/0x150 [ 1487.044812][T13723] should_fail_ex+0x40c/0x560 [ 1487.044844][T13723] _copy_from_iter+0x1d3/0x1660 [ 1487.044873][T13723] ? kmem_cache_alloc_node_noprof+0x1d1/0x610 [ 1487.044903][T13723] ? rcu_is_watching+0x15/0xb0 [ 1487.044938][T13723] ? trace_kmem_cache_alloc+0x29/0xe0 [ 1487.044968][T13723] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 1487.044995][T13723] ? __pfx__copy_from_iter+0x10/0x10 [ 1487.045024][T13723] ? __alloc_skb+0x276/0x7a0 [ 1487.045055][T13723] ? __alloc_skb+0x276/0x7a0 [ 1487.045093][T13723] ? netlink_sendmsg+0x650/0xb40 [ 1487.045115][T13723] ? skb_put+0x112/0x210 [ 1487.045241][T13723] netlink_sendmsg+0x6c0/0xb40 [ 1487.045278][T13723] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1487.045307][T13723] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1487.045337][T13723] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1487.045360][T13723] sock_sendmsg_nosec+0x13a/0x180 [ 1487.045393][T13723] ____sys_sendmsg+0x54e/0x850 [ 1487.045423][T13723] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1487.045457][T13723] ? import_iovec+0x73/0xa0 [ 1487.045495][T13723] ___sys_sendmsg+0x2a5/0x360 [ 1487.045516][T13723] ? __lock_acquire+0x683/0x2cf0 [ 1487.045551][T13723] ? __pfx____sys_sendmsg+0x10/0x10 [ 1487.045572][T13723] ? __lock_acquire+0x683/0x2cf0 [ 1487.045605][T13723] ? kstrtouint+0x6e/0xe0 [ 1487.045670][T13723] __sys_sendmmsg+0x273/0x4d0 [ 1487.045699][T13723] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1487.045731][T13723] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1487.045772][T13723] ? ksys_write+0x242/0x270 [ 1487.045807][T13723] ? __pfx_ksys_write+0x10/0x10 [ 1487.045847][T13723] __x64_sys_sendmmsg+0xa0/0xc0 [ 1487.045871][T13723] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1487.045895][T13723] do_syscall_64+0x174/0x580 [ 1487.045919][T13723] ? trace_irq_disable+0x3b/0x140 [ 1487.045947][T13723] ? clear_bhb_loop+0x40/0x90 [ 1487.045976][T13723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1487.045999][T13723] RIP: 0033:0x7f3fa659de99 [ 1487.046023][T13723] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1487.046043][T13723] RSP: 002b:00007f3fa73cb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1487.046067][T13723] RAX: ffffffffffffffda RBX: 00007f3fa6825fa0 RCX: 00007f3fa659de99 [ 1487.046083][T13723] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 1487.046099][T13723] RBP: 00007f3fa73cb090 R08: 0000000000000000 R09: 0000000000000000 [ 1487.046113][T13723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1487.046127][T13723] R13: 00007f3fa6826038 R14: 00007f3fa6825fa0 R15: 00007ffec208d848 [ 1487.046180][T13723] [ 1487.334579][T13721] netlink: 72 bytes leftover after parsing attributes in process `syz.6.12070'. [ 1487.861173][T13725] bridge0: port 1(bridge_slave_0) entered disabled state [ 1488.002642][T13755] netlink: 'syz.4.12077': attribute type 23 has an invalid length. [ 1488.545813][T13725] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1488.615353][T13725] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1489.052783][T13760] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12080'. [ 1489.216635][T13725] ip6gre1: left promiscuous mode [ 1489.223229][T13725] ip6gre1: left allmulticast mode [ 1489.238718][T13725] veth3: left allmulticast mode [ 1489.284257][T13740] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 1489.361099][T13565] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1489.383087][T13565] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1489.405779][T13565] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1489.425814][T13565] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1489.460366][T13565] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1489.491763][T13565] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1489.521717][T13565] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1489.550983][T13565] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1489.626704][T13774] netlink: 'syz.4.12085': attribute type 10 has an invalid length. [ 1489.943268][T13791] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12093'. [ 1490.022186][T13565] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1490.054393][T13565] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1490.077086][T13565] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1490.144417][T13565] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1490.237656][T13802] xt_hashlimit: max too large, truncated to 1048576 [ 1490.254993][T13802] xt_hashlimit: overflow, try lower: 2/0 [ 1490.279281][T13811] IPVS: set_ctl: invalid protocol: 50 172.30.1.7:20004 [ 1490.395031][T13815] netlink: 184 bytes leftover after parsing attributes in process `syz.4.12103'. [ 1490.509064][T13826] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12104'. [ 1490.537356][T13821] syzkaller0: entered promiscuous mode [ 1490.544562][T13821] syzkaller0: entered allmulticast mode [ 1490.576302][T13823] mac80211_hwsim hwsim133 wlan0: entered promiscuous mode [ 1490.592377][T13831] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12104'. [ 1490.605064][T13823] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1490.631836][T13835] FAULT_INJECTION: forcing a failure. [ 1490.631836][T13835] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1490.646561][T13835] CPU: 1 UID: 0 PID: 13835 Comm: syz.4.12110 Not tainted syzkaller #0 PREEMPT(full) [ 1490.646588][T13835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1490.646602][T13835] Call Trace: [ 1490.646611][T13835] [ 1490.646620][T13835] dump_stack_lvl+0xe8/0x150 [ 1490.646658][T13835] should_fail_ex+0x40c/0x560 [ 1490.646688][T13835] _copy_from_user+0x2d/0xb0 [ 1490.646721][T13835] ___sys_recvmsg+0x173/0x5a0 [ 1490.646752][T13835] ? __pfx____sys_recvmsg+0x10/0x10 [ 1490.646780][T13835] ? __fget_files+0x2a/0x420 [ 1490.646853][T13835] do_recvmmsg+0x31a/0x7f0 [ 1490.646888][T13835] ? __pfx_do_recvmmsg+0x10/0x10 [ 1490.646926][T13835] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1490.646952][T13835] ? __fget_files+0x3a2/0x420 [ 1490.646993][T13835] __x64_sys_recvmmsg+0x198/0x250 [ 1490.647020][T13835] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1490.647055][T13835] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1490.647078][T13835] do_syscall_64+0x174/0x580 [ 1490.647100][T13835] ? trace_irq_disable+0x3b/0x140 [ 1490.647127][T13835] ? clear_bhb_loop+0x40/0x90 [ 1490.647154][T13835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1490.647177][T13835] RIP: 0033:0x7fafb959de99 [ 1490.647197][T13835] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1490.647216][T13835] RSP: 002b:00007fafba425028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1490.647240][T13835] RAX: ffffffffffffffda RBX: 00007fafb9825fa0 RCX: 00007fafb959de99 [ 1490.647256][T13835] RDX: 03ffffffffffff67 RSI: 0000200000002440 RDI: 0000000000000005 [ 1490.647273][T13835] RBP: 00007fafba425090 R08: 0000000000000000 R09: 0000000000000000 [ 1490.647287][T13835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1490.647300][T13835] R13: 00007fafb9826038 R14: 00007fafb9825fa0 R15: 00007ffd99904ed8 [ 1490.647336][T13835] [ 1495.098364][ T62] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1495.108629][ T62] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1495.216062][T13840] syzkaller0: entered promiscuous mode [ 1495.222570][T13840] syzkaller0: entered allmulticast mode [ 1495.305709][T13853] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12115'. [ 1499.669708][ T62] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1499.678841][ T62] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1499.688737][T13866] IPVS: Error connecting to the multicast addr [ 1499.713058][T13873] ip6gre1: entered promiscuous mode [ 1499.719398][T13873] ip6gre1: entered allmulticast mode [ 1499.932200][T13904] netlink: 9 bytes leftover after parsing attributes in process `syz.5.12126'. [ 1500.081071][T13914] netlink: 5 bytes leftover after parsing attributes in process `syz.5.12126'. [ 1500.348831][T13918] netlink: 'syz.1.12132': attribute type 1 has an invalid length. [ 1500.363780][T13918] netlink: 76 bytes leftover after parsing attributes in process `syz.1.12132'. [ 1500.780417][T13898] bridge0: port 2(bridge_slave_1) entered disabled state [ 1500.788268][T13898] bridge0: port 1(bridge_slave_0) entered disabled state [ 1500.807343][T13898] bond_slave_0: left promiscuous mode [ 1500.820413][T13898] bond_slave_1: left promiscuous mode [ 1501.361294][T13898] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1501.378914][T13898] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1501.928793][T13898] netdevsim netdevsim5 netdevsim0: left allmulticast mode [ 1502.084396][T13898] ip6gre1: left promiscuous mode [ 1502.089845][T13898] ip6gre1: left allmulticast mode [ 1502.099350][T13898] veth3: left allmulticast mode [ 1502.121026][T13898] bond4: left promiscuous mode [ 1502.126052][T13898] vti0: left promiscuous mode [ 1502.150097][T13904] gretap0: entered promiscuous mode [ 1502.164767][T13914] 0ªî{X¹¦: renamed from gretap0 [ 1502.181633][T13914] 0ªî{X¹¦: left promiscuous mode [ 1502.187016][T13914] 0ªî{X¹¦: entered allmulticast mode [ 1502.196867][T13914] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 1502.369632][ T62] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1502.380115][ T62] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1502.416282][ T62] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1502.458203][ T62] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1502.485256][ T62] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1502.515649][ T62] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1502.551807][ T62] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1502.571145][ T62] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1502.585404][T13960] netlink: 'syz.5.12140': attribute type 11 has an invalid length. [ 1502.787290][T13978] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12147'. [ 1502.849219][T13981] netlink: 'syz.1.12146': attribute type 4 has an invalid length. [ 1502.886260][T13981] netlink: 17 bytes leftover after parsing attributes in process `syz.1.12146'. [ 1502.985241][T13987] netlink: 'syz.3.12149': attribute type 10 has an invalid length. [ 1503.104665][T13977] virt_wifi0 speed is unknown, defaulting to 1000 [ 1503.141773][T13987] team0: Port device vlan0 added [ 1503.303566][ T62] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1503.364055][T13995] team0: Device vxcan1 is of different type [ 1503.672334][T13993] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12151'. [ 1503.841634][T14016] FAULT_INJECTION: forcing a failure. [ 1503.841634][T14016] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1503.869845][T14016] CPU: 1 UID: 0 PID: 14016 Comm: syz.6.12157 Not tainted syzkaller #0 PREEMPT(full) [ 1503.869877][T14016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1503.869891][T14016] Call Trace: [ 1503.869901][T14016] [ 1503.869911][T14016] dump_stack_lvl+0xe8/0x150 [ 1503.869952][T14016] should_fail_ex+0x40c/0x560 [ 1503.869986][T14016] _copy_from_iter+0x1d3/0x1660 [ 1503.870015][T14016] ? rcu_is_watching+0x15/0xb0 [ 1503.870050][T14016] ? trace_kmalloc+0x2a/0xf0 [ 1503.870082][T14016] ? kmem_cache_alloc_node_noprof+0x1f5/0x610 [ 1503.870111][T14016] ? __pfx__copy_from_iter+0x10/0x10 [ 1503.870154][T14016] ? __alloc_skb+0x52c/0x7a0 [ 1503.870185][T14016] ? skb_put+0x112/0x210 [ 1503.870215][T14016] ? tipc_msg_build+0xb29/0xf50 [ 1503.870245][T14016] tipc_msg_build+0x8b6/0xf50 [ 1503.870282][T14016] ? __pfx_tipc_msg_build+0x10/0x10 [ 1503.870311][T14016] ? net_generic+0x1e/0x240 [ 1503.870340][T14016] ? net_generic+0x1e/0x240 [ 1503.870373][T14016] ? tipc_group_bc_cong+0x15f/0x210 [ 1503.870409][T14016] tipc_send_group_bcast+0x7db/0xad0 [ 1503.870466][T14016] ? __pfx_tipc_send_group_bcast+0x10/0x10 [ 1503.870519][T14016] ? __pfx_woken_wake_function+0x10/0x10 [ 1503.870551][T14016] ? ima_match_policy+0x106/0x21c0 [ 1503.870593][T14016] __tipc_sendmsg+0x313/0x2b60 [ 1503.870637][T14016] ? process_measurement+0x443/0x1c10 [ 1503.870669][T14016] ? process_measurement+0x443/0x1c10 [ 1503.870703][T14016] ? __pfx___tipc_sendmsg+0x10/0x10 [ 1503.870742][T14016] ? aa_label_sk_perm+0x532/0x6e0 [ 1503.870785][T14016] ? process_measurement+0x7b2/0x1c10 [ 1503.870822][T14016] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 1503.870866][T14016] ? __lock_acquire+0x683/0x2cf0 [ 1503.870904][T14016] ? __lock_acquire+0x683/0x2cf0 [ 1503.870963][T14016] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1503.870994][T14016] ? tipc_sendmsg+0x47/0x70 [ 1503.871019][T14016] ? __local_bh_enable_ip+0xd0/0x130 [ 1503.871051][T14016] tipc_sendmsg+0x55/0x70 [ 1503.871074][T14016] ? __pfx_tipc_sendmsg+0x10/0x10 [ 1503.871093][T14016] sock_sendmsg_nosec+0x13a/0x180 [ 1503.871125][T14016] ____sys_sendmsg+0x54e/0x850 [ 1503.871155][T14016] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1503.871189][T14016] ? import_iovec+0x73/0xa0 [ 1503.871226][T14016] ___sys_sendmsg+0x2a5/0x360 [ 1503.871259][T14016] ? __lock_acquire+0x683/0x2cf0 [ 1503.871294][T14016] ? __pfx____sys_sendmsg+0x10/0x10 [ 1503.871324][T14016] ? kstrtouint+0x6e/0xe0 [ 1503.871382][T14016] ? __fget_files+0x2a/0x420 [ 1503.871410][T14016] ? __fget_files+0x3a2/0x420 [ 1503.871452][T14016] __sys_sendmmsg+0x273/0x4d0 [ 1503.871483][T14016] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1503.871518][T14016] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1503.871559][T14016] ? ksys_write+0x242/0x270 [ 1503.871597][T14016] ? __pfx_ksys_write+0x10/0x10 [ 1503.871638][T14016] __x64_sys_sendmmsg+0xa0/0xc0 [ 1503.871661][T14016] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1503.871684][T14016] do_syscall_64+0x174/0x580 [ 1503.871706][T14016] ? trace_irq_disable+0x3b/0x140 [ 1503.871734][T14016] ? clear_bhb_loop+0x40/0x90 [ 1503.871770][T14016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1503.871792][T14016] RIP: 0033:0x7f4a74d9de99 [ 1503.871815][T14016] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1503.871833][T14016] RSP: 002b:00007f4a75b82028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1503.871855][T14016] RAX: ffffffffffffffda RBX: 00007f4a75026090 RCX: 00007f4a74d9de99 [ 1503.871871][T14016] RDX: 0400000000000181 RSI: 00002000000030c0 RDI: 0000000000000003 [ 1503.871887][T14016] RBP: 00007f4a75b82090 R08: 0000000000000000 R09: 0000000000000000 [ 1503.871901][T14016] R10: 9200000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1503.871915][T14016] R13: 00007f4a75026128 R14: 00007f4a75026090 R15: 00007fff26659a68 [ 1503.871951][T14016] [ 1504.804433][T14033] netlink: 24 bytes leftover after parsing attributes in process `syz.6.12163'. [ 1505.204848][T14050] netlink: 'syz.6.12170': attribute type 11 has an invalid length. [ 1505.285889][ T5622] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1505.301826][ T5622] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1505.317172][ T5622] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1505.332515][ T5622] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1505.344249][ T5622] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1506.470677][T14093] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 1506.635688][ T62] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1506.679880][ T62] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1506.791752][T14102] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12186'. [ 1506.808265][T14075] virt_wifi0 speed is unknown, defaulting to 1000 [ 1507.054289][T14102] syzkaller0: entered promiscuous mode [ 1507.061698][T14102] syzkaller0: entered allmulticast mode [ 1507.069859][T14051] virt_wifi0 speed is unknown, defaulting to 1000 [ 1507.190615][ T62] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1507.202405][ T62] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1507.255589][T14118] FAULT_INJECTION: forcing a failure. [ 1507.255589][T14118] name failslab, interval 1, probability 0, space 0, times 0 [ 1507.290189][T14118] CPU: 1 UID: 0 PID: 14118 Comm: syz.3.12193 Not tainted syzkaller #0 PREEMPT(full) [ 1507.290221][T14118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1507.290235][T14118] Call Trace: [ 1507.290244][T14118] [ 1507.290254][T14118] dump_stack_lvl+0xe8/0x150 [ 1507.290294][T14118] should_fail_ex+0x40c/0x560 [ 1507.290327][T14118] should_failslab+0xa8/0x100 [ 1507.290363][T14118] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 1507.290390][T14118] ? kmem_cache_alloc_node_noprof+0x1f5/0x610 [ 1507.290419][T14118] ? __alloc_skb+0x1d7/0x7a0 [ 1507.290450][T14118] ? __alloc_skb+0x1d7/0x7a0 [ 1507.290497][T14118] __alloc_skb+0x1d7/0x7a0 [ 1507.290534][T14118] tipc_buf_acquire+0x2b/0xe0 [ 1507.290559][T14118] tipc_msg_build+0x911/0xf50 [ 1507.290596][T14118] ? __pfx_tipc_msg_build+0x10/0x10 [ 1507.290625][T14118] ? net_generic+0x1e/0x240 [ 1507.290654][T14118] ? net_generic+0x1e/0x240 [ 1507.290687][T14118] ? tipc_group_bc_cong+0x15f/0x210 [ 1507.290718][T14118] tipc_send_group_bcast+0x7db/0xad0 [ 1507.290775][T14118] ? __pfx_tipc_send_group_bcast+0x10/0x10 [ 1507.290826][T14118] ? __pfx_woken_wake_function+0x10/0x10 [ 1507.290859][T14118] ? ima_match_policy+0x106/0x21c0 [ 1507.290900][T14118] __tipc_sendmsg+0x313/0x2b60 [ 1507.290945][T14118] ? process_measurement+0x443/0x1c10 [ 1507.290977][T14118] ? process_measurement+0x443/0x1c10 [ 1507.291011][T14118] ? __pfx___tipc_sendmsg+0x10/0x10 [ 1507.291050][T14118] ? aa_label_sk_perm+0x532/0x6e0 [ 1507.291085][T14118] ? process_measurement+0x7b2/0x1c10 [ 1507.291121][T14118] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 1507.291166][T14118] ? __lock_acquire+0x683/0x2cf0 [ 1507.291202][T14118] ? __lock_acquire+0x683/0x2cf0 [ 1507.291261][T14118] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1507.291292][T14118] ? tipc_sendmsg+0x47/0x70 [ 1507.291317][T14118] ? __local_bh_enable_ip+0xd0/0x130 [ 1507.291349][T14118] tipc_sendmsg+0x55/0x70 [ 1507.291372][T14118] ? __pfx_tipc_sendmsg+0x10/0x10 [ 1507.291391][T14118] sock_sendmsg_nosec+0x13a/0x180 [ 1507.291422][T14118] ____sys_sendmsg+0x54e/0x850 [ 1507.291451][T14118] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1507.291484][T14118] ? import_iovec+0x73/0xa0 [ 1507.291529][T14118] ___sys_sendmsg+0x2a5/0x360 [ 1507.291550][T14118] ? __lock_acquire+0x683/0x2cf0 [ 1507.291585][T14118] ? __pfx____sys_sendmsg+0x10/0x10 [ 1507.291619][T14118] ? kstrtouint+0x6e/0xe0 [ 1507.291677][T14118] ? __fget_files+0x2a/0x420 [ 1507.291705][T14118] ? __fget_files+0x3a2/0x420 [ 1507.291746][T14118] __sys_sendmmsg+0x273/0x4d0 [ 1507.291778][T14118] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1507.291813][T14118] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1507.291855][T14118] ? ksys_write+0x242/0x270 [ 1507.291892][T14118] ? __pfx_ksys_write+0x10/0x10 [ 1507.291934][T14118] __x64_sys_sendmmsg+0xa0/0xc0 [ 1507.291959][T14118] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1507.291983][T14118] do_syscall_64+0x174/0x580 [ 1507.292006][T14118] ? trace_irq_disable+0x3b/0x140 [ 1507.292035][T14118] ? clear_bhb_loop+0x40/0x90 [ 1507.292063][T14118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1507.292086][T14118] RIP: 0033:0x7f813239de99 [ 1507.292108][T14118] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1507.292128][T14118] RSP: 002b:00007f8133255028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1507.292154][T14118] RAX: ffffffffffffffda RBX: 00007f8132626090 RCX: 00007f813239de99 [ 1507.292170][T14118] RDX: 0400000000000181 RSI: 00002000000030c0 RDI: 0000000000000003 [ 1507.292187][T14118] RBP: 00007f8133255090 R08: 0000000000000000 R09: 0000000000000000 [ 1507.292201][T14118] R10: 9200000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1507.292216][T14118] R13: 00007f8132626128 R14: 00007f8132626090 R15: 00007fff10bafb98 [ 1507.292254][T14118] [ 1507.668163][T12093] Bluetooth: hci2: command tx timeout [ 1509.719285][T12093] Bluetooth: hci2: command tx timeout [ 1511.812365][T12093] Bluetooth: hci2: command tx timeout [ 1512.230622][ T62] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1512.241220][ T62] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1512.423153][T14145] FAULT_INJECTION: forcing a failure. [ 1512.423153][T14145] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1512.437541][T14145] CPU: 0 UID: 0 PID: 14145 Comm: syz.5.12205 Not tainted syzkaller #0 PREEMPT(full) [ 1512.437570][T14145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1512.437583][T14145] Call Trace: [ 1512.437591][T14145] [ 1512.437600][T14145] dump_stack_lvl+0xe8/0x150 [ 1512.437637][T14145] should_fail_ex+0x40c/0x560 [ 1512.437667][T14145] _copy_to_user+0x31/0xb0 [ 1512.437703][T14145] simple_read_from_buffer+0xe1/0x170 [ 1512.437743][T14145] proc_fail_nth_read+0x1bb/0x230 [ 1512.437777][T14145] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1512.437810][T14145] ? rw_verify_area+0x24a/0x4c0 [ 1512.437844][T14145] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1512.437873][T14145] vfs_read+0x213/0xa80 [ 1512.437909][T14145] ? __pfx___mutex_lock+0x10/0x10 [ 1512.437934][T14145] ? __pfx_vfs_read+0x10/0x10 [ 1512.437969][T14145] ? __fget_files+0x2a/0x420 [ 1512.438001][T14145] ? __fget_files+0x3a2/0x420 [ 1512.438029][T14145] ? __fget_files+0x2a/0x420 [ 1512.438068][T14145] ksys_read+0x150/0x270 [ 1512.438104][T14145] ? __pfx_ksys_read+0x10/0x10 [ 1512.438145][T14145] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1512.438169][T14145] do_syscall_64+0x174/0x580 [ 1512.438192][T14145] ? trace_irq_disable+0x3b/0x140 [ 1512.438219][T14145] ? clear_bhb_loop+0x40/0x90 [ 1512.438256][T14145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1512.438278][T14145] RIP: 0033:0x7f116135e6ce [ 1512.438299][T14145] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1512.438318][T14145] RSP: 002b:00007f1162250fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1512.438341][T14145] RAX: ffffffffffffffda RBX: 00007f11622516c0 RCX: 00007f116135e6ce [ 1512.438357][T14145] RDX: 000000000000000f RSI: 00007f11622510a0 RDI: 0000000000000003 [ 1512.438371][T14145] RBP: 00007f1162251090 R08: 0000000000000000 R09: 0000000000000000 [ 1512.438385][T14145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1512.438398][T14145] R13: 00007f1161626038 R14: 00007f1161625fa0 R15: 00007ffdcbb3ba48 [ 1512.438433][T14145] [ 1512.650357][ T62] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1512.662532][ T62] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1512.861678][T14158] FAULT_INJECTION: forcing a failure. [ 1512.861678][T14158] name failslab, interval 1, probability 0, space 0, times 0 [ 1512.900850][T14158] CPU: 1 UID: 0 PID: 14158 Comm: syz.5.12208 Not tainted syzkaller #0 PREEMPT(full) [ 1512.900882][T14158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1512.900896][T14158] Call Trace: [ 1512.900905][T14158] [ 1512.900915][T14158] dump_stack_lvl+0xe8/0x150 [ 1512.900955][T14158] should_fail_ex+0x40c/0x560 [ 1512.900988][T14158] should_failslab+0xa8/0x100 [ 1512.901023][T14158] __kmalloc_cache_noprof+0xa8/0x660 [ 1512.901054][T14158] ? tcf_chain_create+0xaf/0x310 [ 1512.901176][T14158] ? tcf_chain_create+0xaf/0x310 [ 1512.901209][T14158] tcf_chain_create+0xaf/0x310 [ 1512.901231][T14158] ? __tcf_chain_get+0xfb/0x3c0 [ 1512.901297][T14158] __tcf_chain_get+0x111/0x3c0 [ 1512.901336][T14158] tc_new_tfilter+0x7e2/0x1850 [ 1512.901392][T14158] ? __pfx_tc_new_tfilter+0x10/0x10 [ 1512.901437][T14158] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1512.901489][T14158] ? __pfx_tc_new_tfilter+0x10/0x10 [ 1512.901513][T14158] rtnetlink_rcv_msg+0x802/0xc00 [ 1512.901545][T14158] ? netlink_sendmsg+0x5d4/0xb40 [ 1512.901573][T14158] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1512.901605][T14158] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1512.901639][T14158] ? __lock_acquire+0x683/0x2cf0 [ 1512.901685][T14158] netlink_rcv_skb+0x226/0x4a0 [ 1512.901718][T14158] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1512.901753][T14158] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1512.901793][T14158] ? netlink_deliver_tap+0x2e/0x1b0 [ 1512.901815][T14158] ? netlink_deliver_tap+0x2e/0x1b0 [ 1512.901846][T14158] netlink_unicast+0x7bb/0x940 [ 1512.901893][T14158] netlink_sendmsg+0x813/0xb40 [ 1512.901929][T14158] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1512.901958][T14158] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1512.901989][T14158] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1512.902011][T14158] sock_sendmsg_nosec+0x13a/0x180 [ 1512.902044][T14158] ____sys_sendmsg+0x54e/0x850 [ 1512.902074][T14158] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1512.902108][T14158] ? import_iovec+0x73/0xa0 [ 1512.902145][T14158] ___sys_sendmsg+0x2a5/0x360 [ 1512.902166][T14158] ? __lock_acquire+0x683/0x2cf0 [ 1512.902201][T14158] ? __pfx____sys_sendmsg+0x10/0x10 [ 1512.902290][T14158] ? __fget_files+0x2a/0x420 [ 1512.902318][T14158] ? __fget_files+0x3a2/0x420 [ 1512.902359][T14158] __x64_sys_sendmsg+0x1b1/0x290 [ 1512.902387][T14158] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1512.902432][T14158] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1512.902457][T14158] do_syscall_64+0x174/0x580 [ 1512.902480][T14158] ? trace_irq_disable+0x3b/0x140 [ 1512.902508][T14158] ? clear_bhb_loop+0x40/0x90 [ 1512.902537][T14158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1512.902559][T14158] RIP: 0033:0x7f116139de99 [ 1512.902581][T14158] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1512.902601][T14158] RSP: 002b:00007f1162251028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1512.902625][T14158] RAX: ffffffffffffffda RBX: 00007f1161625fa0 RCX: 00007f116139de99 [ 1512.902642][T14158] RDX: 0000000024040084 RSI: 0000200000000700 RDI: 0000000000000003 [ 1512.902657][T14158] RBP: 00007f1162251090 R08: 0000000000000000 R09: 0000000000000000 [ 1512.902672][T14158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1512.902686][T14158] R13: 00007f1161626038 R14: 00007f1161625fa0 R15: 00007ffdcbb3ba48 [ 1512.902730][T14158] [ 1512.905325][T14160] netlink: 'syz.3.12209': attribute type 1 has an invalid length. [ 1513.250237][T14162] IPVS: ip_vs_add_dest(): server weight less than zero [ 1513.566732][T14184] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 1513.581274][T14160] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1513.727944][T14182] netlink: 24 bytes leftover after parsing attributes in process `syz.6.12216'. [ 1513.882241][T12093] Bluetooth: hci2: command tx timeout [ 1514.291653][ T62] bridge_slave_1: left allmulticast mode [ 1514.304784][ T62] bridge_slave_1: left promiscuous mode [ 1514.317460][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 1514.343478][ T62] bridge_slave_0: left allmulticast mode [ 1514.359902][ T62] bridge_slave_0: left promiscuous mode [ 1514.382273][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 1515.007135][T14246] netlink: 'syz.4.12228': attribute type 11 has an invalid length. [ 1515.232327][ T62] bond1 (unregistering): (slave gretap6): Removing an active aggregator [ 1515.243775][ T62] bond1 (unregistering): (slave gretap6): Releasing backup interface [ 1515.353008][ T62] team0: Port device bridge4 removed [ 1515.427449][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1515.446210][ T62] bond0 (unregistering): Released all slaves [ 1515.458111][ T62] bond1 (unregistering): Released all slaves [ 1515.474440][ T62] bond2 (unregistering): Released all slaves [ 1515.627243][T14237] 0ªî{X¹¦: left allmulticast mode [ 1515.684918][ T5283] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1515.777421][ T62] tipc: Left network mode [ 1515.961198][T14051] bridge0: port 1(bridge_slave_0) entered blocking state [ 1515.989921][T14266] netlink: 'syz.6.12234': attribute type 23 has an invalid length. [ 1516.008255][T14051] bridge0: port 1(bridge_slave_0) entered disabled state [ 1516.037582][T14051] bridge_slave_0: entered allmulticast mode [ 1516.080528][T14051] bridge_slave_0: entered promiscuous mode [ 1516.096717][T14051] bridge0: port 2(bridge_slave_1) entered blocking state [ 1516.104937][T14051] bridge0: port 2(bridge_slave_1) entered disabled state [ 1516.114884][T14051] bridge_slave_1: entered allmulticast mode [ 1516.138004][T14051] bridge_slave_1: entered promiscuous mode [ 1516.367628][T14051] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1516.395711][T14051] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1516.442588][ T62] batman_adv: batadv0: Removing interface: wlan0 [ 1516.616561][T14051] team0: Port device team_slave_0 added [ 1516.631511][T14051] team0: Port device team_slave_1 added [ 1516.687033][T14051] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1516.695838][T14051] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1516.746420][T14051] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1516.792677][T14051] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1516.803981][T14051] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1516.837971][T14051] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1517.000886][T14051] hsr_slave_0: entered promiscuous mode [ 1517.007621][T14051] hsr_slave_1: entered promiscuous mode [ 1517.026493][T14051] debugfs: 'hsr0' already exists in 'hsr' [ 1517.042148][T14051] Cannot create hsr debugfs directory [ 1517.300155][ T5283] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1517.646257][T14334] netlink: 9 bytes leftover after parsing attributes in process `syz.3.12254'. [ 1517.669869][T14334] netlink: 9 bytes leftover after parsing attributes in process `syz.3.12254'. [ 1517.797674][T14338] netlink: 'syz.4.12256': attribute type 9 has an invalid length. [ 1518.274271][T14354] bridge_slave_0: left allmulticast mode [ 1518.298034][T14354] bridge_slave_0: left promiscuous mode [ 1518.305148][T14354] bridge0: port 1(bridge_slave_0) entered disabled state [ 1518.319844][T14354] bridge_slave_1: left allmulticast mode [ 1518.325982][T14354] bridge_slave_1: left promiscuous mode [ 1518.333716][T14354] bridge0: port 2(bridge_slave_1) entered disabled state [ 1518.361104][T14354] bond0: (slave bond_slave_0): Releasing backup interface [ 1518.392507][T14354] team0: Port device team_slave_0 removed [ 1518.416891][T14354] team0: Port device team_slave_1 removed [ 1518.431347][T14354] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1518.454076][T14354] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1518.483017][T14354] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1518.532893][T14376] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12263'. [ 1518.556238][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1518.572065][T14376] netlink: 24 bytes leftover after parsing attributes in process `syz.5.12263'. [ 1518.575108][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1518.630341][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1518.646589][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1518.679581][ T62] batadv0: left allmulticast mode [ 1518.688149][ T62] batadv0: left promiscuous mode [ 1518.702267][ T62] veth1_macvtap: left promiscuous mode [ 1518.714323][ T62] veth0_macvtap: left promiscuous mode [ 1518.727973][ T62] veth1_vlan: left promiscuous mode [ 1518.735034][ T62] veth0_vlan: left promiscuous mode [ 1519.072800][ T62] team0 (unregistering): Port device vlan0 removed [ 1519.213727][ T62] team0 (unregistering): Port device team_slave_1 removed [ 1519.231336][ T62] team0 (unregistering): Port device team_slave_0 removed [ 1519.933046][T14406] netlink: 24 bytes leftover after parsing attributes in process `syz.5.12272'. [ 1520.314751][ T62] IPVS: stop unused estimator thread 0... [ 1520.646201][T14051] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1520.682826][T14051] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1520.711687][T14051] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1520.752430][T14051] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1520.773577][T14051] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1520.805458][T14051] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1520.829004][T14051] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1520.874529][T14051] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1521.056940][T14468] vlan3: entered promiscuous mode [ 1521.071719][T14468] ip6gretap0: entered promiscuous mode [ 1521.098851][T14470] netlink: 'syz.6.12286': attribute type 1 has an invalid length. [ 1521.273423][T14470] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1521.328890][T14472] bond7: (slave gretap4): Enslaving as a backup interface with an up link [ 1521.339339][T14453] virt_wifi0 speed is unknown, defaulting to 1000 [ 1521.390030][T14477] bond7 (unregistering): (slave gretap4): Releasing backup interface [ 1521.424032][T14477] bond7 (unregistering): Released all slaves [ 1521.511261][T14485] netlink: 60 bytes leftover after parsing attributes in process `syz.3.12288'. [ 1521.535096][T14482] lo speed is unknown, defaulting to 1000 [ 1521.605787][T14482] lo speed is unknown, defaulting to 1000 [ 1521.639818][T14482] lo speed is unknown, defaulting to 1000 [ 1521.664056][T14482] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1521.738899][T14482] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1521.820146][T14482] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1521.855616][T14495] netlink: 'syz.4.12289': attribute type 7 has an invalid length. [ 1521.951011][T14498] netlink: 'syz.6.12290': attribute type 11 has an invalid length. [ 1521.968653][T14482] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1522.132161][T14051] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1522.154694][T14482] lo speed is unknown, defaulting to 1000 [ 1522.173042][T14482] lo speed is unknown, defaulting to 1000 [ 1522.217599][T14051] 8021q: adding VLAN 0 to HW filter on device team0 [ 1522.242443][T14482] lo speed is unknown, defaulting to 1000 [ 1522.277141][T14482] lo speed is unknown, defaulting to 1000 [ 1522.284698][T13360] bridge0: port 1(bridge_slave_0) entered blocking state [ 1522.291961][T13360] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1522.323685][T13360] bridge0: port 2(bridge_slave_1) entered blocking state [ 1522.330973][T13360] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1522.373692][T14482] lo speed is unknown, defaulting to 1000 [ 1522.402423][T14482] lo speed is unknown, defaulting to 1000 [ 1522.418622][T14482] lo speed is unknown, defaulting to 1000 [ 1522.447439][T14482] lo speed is unknown, defaulting to 1000 [ 1522.490206][T14482] lo speed is unknown, defaulting to 1000 [ 1522.588295][T14514] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12295'. [ 1523.828633][T14051] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1523.955267][T14051] veth0_vlan: entered promiscuous mode [ 1523.971696][T14573] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12310'. [ 1524.014672][T14051] veth1_vlan: entered promiscuous mode [ 1524.087563][T14051] veth0_macvtap: entered promiscuous mode [ 1524.103442][T14051] veth1_macvtap: entered promiscuous mode [ 1524.161493][T14051] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1524.209673][T14051] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1524.252136][T14584] netlink: 244 bytes leftover after parsing attributes in process `syz.4.12314'. [ 1524.274713][ T48] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1524.323683][T14587] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12314'. [ 1524.387551][ T48] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1524.425029][T14589] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12314'. [ 1524.430000][ T48] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1524.511765][ T48] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1524.864629][ T6863] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1524.887239][ T6863] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1525.010343][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1525.030824][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1525.280035][T14616] netlink: 'syz.6.12323': attribute type 11 has an invalid length. [ 1525.558184][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1525.656743][T14628] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12327'. [ 1526.156243][T14657] netlink: 'syz.4.12334': attribute type 1 has an invalid length. [ 1526.195527][T14657] netlink: 224 bytes leftover after parsing attributes in process `syz.4.12334'. [ 1526.614034][T14675] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12341'. [ 1526.704574][T14678] netlink: 9 bytes leftover after parsing attributes in process `syz.5.12342'. [ 1526.726444][T14678] netlink: 9 bytes leftover after parsing attributes in process `syz.5.12342'. [ 1527.652644][T14694] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12346'. [ 1528.099793][T14729] netlink: 44 bytes leftover after parsing attributes in process `syz.1.12355'. [ 1528.227142][T14735] netlink: 'syz.5.12358': attribute type 9 has an invalid length. [ 1528.288713][T14738] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12358'. [ 1528.330360][T12093] block nbd4: Receive control failed (result -1) [ 1529.446035][T14781] tipc: Started in network mode [ 1529.457533][T14781] tipc: Node identity 080211, cluster identity 4711 [ 1529.479580][T14781] tipc: Enabled bearer , priority 0 [ 1529.512915][T14781] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1529.570161][T14788] netlink: 'syz.3.12372': attribute type 1 has an invalid length. [ 1529.589651][T14773] veth1: entered promiscuous mode [ 1529.609140][T14773] veth1: entered allmulticast mode [ 1529.683936][T14794] netlink: 'syz.6.12374': attribute type 23 has an invalid length. [ 1529.928136][T14805] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12381'. [ 1530.273229][T14819] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12387'. [ 1530.379754][T21781] syzkaller0: tun_net_xmit 76 [ 1530.498084][T13744] syzkaller0: tun_net_xmit 76 [ 1530.710565][T21781] tipc: Node number set to 134353152 [ 1530.738186][T13936] syzkaller0: tun_net_xmit 76 [ 1530.805548][T14850] netlink: 'syz.6.12394': attribute type 1 has an invalid length. [ 1530.814503][T14850] __nla_validate_parse: 1 callbacks suppressed [ 1530.814523][T14850] netlink: 44 bytes leftover after parsing attributes in process `syz.6.12394'. [ 1530.857645][T14831] bond6: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1530.895969][T14831] bond6 (unregistering): Released all slaves [ 1530.964046][T14854] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 1531.555781][T14881] xt_hashlimit: max too large, truncated to 1048576 [ 1531.573752][T14881] xt_hashlimit: overflow, try lower: 2/0 [ 1531.686749][T14888] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12410'. [ 1531.708199][T14888] netlink: 24 bytes leftover after parsing attributes in process `syz.5.12410'. [ 1531.830665][T14895] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12411'. [ 1535.585193][T14895] macvtap1: entered promiscuous mode [ 1535.595821][T14895] batadv0: entered promiscuous mode [ 1535.609873][T14895] macvtap1: entered allmulticast mode [ 1535.616183][T14895] batadv0: entered allmulticast mode [ 1535.626281][T14895] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1535.752859][T14903] netlink: 'syz.5.12413': attribute type 1 has an invalid length. [ 1535.847789][T14903] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1535.913686][T14916] bond6: (slave gretap0): Enslaving as a backup interface with an up link [ 1535.981392][T14903] bond6 (unregistering): (slave gretap0): Releasing backup interface [ 1536.012888][T14903] bond6 (unregistering): Released all slaves [ 1536.061920][T14920] tipc: New replicast peer: 255.255.255.255 [ 1536.069034][T14920] tipc: Enabled bearer , priority 10 [ 1536.155471][T14928] geneve2: entered promiscuous mode [ 1536.166927][T14928] geneve2: entered allmulticast mode [ 1536.626051][T14948] netlink: 'syz.3.12427': attribute type 23 has an invalid length. [ 1536.751428][T14952] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12428'. [ 1536.880815][T14960] tipc: Failed to remove unknown binding: 66,1,1/4:2062728390/2062728392 [ 1536.910584][T14962] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12432'. [ 1536.959725][T14960] syzkaller0: entered promiscuous mode [ 1536.972819][T14960] syzkaller0: entered allmulticast mode [ 1537.236706][T14977] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12436'. [ 1537.885806][T14915] Bluetooth: hci3: command 0x0406 tx timeout [ 1537.892364][T14915] Bluetooth: hci5: command 0x0406 tx timeout [ 1538.420142][T15052] netlink: 'syz.4.12458': attribute type 1 has an invalid length. [ 1538.515206][T15052] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1538.550615][T15058] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 1538.648242][ T6863] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1538.723668][T15052] bond1 (unregistering): (slave gretap1): Removing an active aggregator [ 1538.751245][T15052] bond1 (unregistering): (slave gretap1): Releasing backup interface [ 1538.797984][T15052] bond1 (unregistering): Released all slaves [ 1538.946667][T15031] tipc: Failed to remove unknown binding: 66,0,0/4:2413271110/2413271112 [ 1538.981311][T15031] tipc: Failed to remove unknown binding: 66,0,0/4:2413271110/2413271111 [ 1539.030158][T15031] tipc: Failed to remove unknown binding: 66,0,0/4:2413271110/2413271112 [ 1539.041058][T15031] tipc: Failed to remove unknown binding: 66,0,0/4:2413271110/2413271111 [ 1539.673413][T15098] Bluetooth: MGMT ver 1.23 [ 1540.110170][T15118] netlink: 'syz.6.12477': attribute type 1 has an invalid length. [ 1540.179183][T15123] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 1540.310649][T15118] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1540.410274][T15121] bond7: (slave gretap5): Enslaving as a backup interface with an up link [ 1540.438868][T13360] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1540.512425][T15126] bond7 (unregistering): (slave gretap5): Removing an active aggregator [ 1540.568129][T15126] bond7 (unregistering): (slave gretap5): Releasing backup interface [ 1540.631374][T15126] bond7 (unregistering): Released all slaves [ 1540.743960][T15130] netlink: 16 bytes leftover after parsing attributes in process `syz.5.12481'. [ 1540.775879][T15130] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1541.437160][T15159] netlink: 68 bytes leftover after parsing attributes in process `syz.5.12488'. [ 1541.694038][T15167] FAULT_INJECTION: forcing a failure. [ 1541.694038][T15167] name failslab, interval 1, probability 0, space 0, times 0 [ 1541.706898][T15167] CPU: 0 UID: 0 PID: 15167 Comm: syz.6.12491 Not tainted syzkaller #0 PREEMPT(full) [ 1541.706940][T15167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1541.706955][T15167] Call Trace: [ 1541.706964][T15167] [ 1541.706975][T15167] dump_stack_lvl+0xe8/0x150 [ 1541.707020][T15167] should_fail_ex+0x40c/0x560 [ 1541.707055][T15167] should_failslab+0xa8/0x100 [ 1541.707091][T15167] kmem_cache_alloc_bulk_noprof+0x8b/0x7b0 [ 1541.707125][T15167] ? pfn_valid+0x125/0x4c0 [ 1541.707153][T15167] ? pfn_valid+0x125/0x4c0 [ 1541.707178][T15167] ? pfn_valid+0x125/0x4c0 [ 1541.707207][T15167] bpf_test_run_xdp_live+0x16e9/0x1c20 [ 1541.707246][T15167] ? bpf_test_run_xdp_live+0x43e/0x1c20 [ 1541.707283][T15167] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 1541.707309][T15167] ? bpf_dispatcher_xdp+0x800/0x1000 [ 1541.707385][T15167] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 1541.707420][T15167] ? _copy_from_user+0x94/0xb0 [ 1541.707460][T15167] ? bpf_test_init+0x113/0x150 [ 1541.707481][T15167] ? xdp_convert_md_to_buff+0x5b/0x330 [ 1541.707508][T15167] bpf_prog_test_run_xdp+0x7d8/0x11d0 [ 1541.707550][T15167] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1541.707581][T15167] ? __fget_files+0x2a/0x420 [ 1541.707617][T15167] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1541.707643][T15167] bpf_prog_test_run+0x2c5/0x340 [ 1541.707680][T15167] __sys_bpf+0xa22/0xd90 [ 1541.707717][T15167] ? __pfx___sys_bpf+0x10/0x10 [ 1541.707762][T15167] ? __fget_files+0x2a/0x420 [ 1541.707809][T15167] ? ksys_write+0x242/0x270 [ 1541.707846][T15167] ? __pfx_ksys_write+0x10/0x10 [ 1541.707887][T15167] __x64_sys_bpf+0xba/0xd0 [ 1541.707914][T15167] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1541.707941][T15167] do_syscall_64+0x174/0x580 [ 1541.707967][T15167] ? trace_irq_disable+0x3b/0x140 [ 1541.707994][T15167] ? clear_bhb_loop+0x40/0x90 [ 1541.708021][T15167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1541.708044][T15167] RIP: 0033:0x7f4a74d9de99 [ 1541.708065][T15167] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1541.708085][T15167] RSP: 002b:00007f4a75ba3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1541.708109][T15167] RAX: ffffffffffffffda RBX: 00007f4a75025fa0 RCX: 00007f4a74d9de99 [ 1541.708125][T15167] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 1541.708139][T15167] RBP: 00007f4a75ba3090 R08: 0000000000000000 R09: 0000000000000000 [ 1541.708154][T15167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1541.708167][T15167] R13: 00007f4a75026038 R14: 00007f4a75025fa0 R15: 00007fff26659a68 [ 1541.708204][T15167] [ 1542.453145][T15183] syzkaller0: entered promiscuous mode [ 1542.470215][T15183] syzkaller0: entered allmulticast mode [ 1542.563261][T15187] FAULT_INJECTION: forcing a failure. [ 1542.563261][T15187] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1542.597874][T15187] CPU: 1 UID: 0 PID: 15187 Comm: syz.5.12496 Not tainted syzkaller #0 PREEMPT(full) [ 1542.597914][T15187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1542.597928][T15187] Call Trace: [ 1542.597938][T15187] [ 1542.597948][T15187] dump_stack_lvl+0xe8/0x150 [ 1542.597989][T15187] should_fail_ex+0x40c/0x560 [ 1542.598022][T15187] _copy_from_iter+0x1d3/0x1660 [ 1542.598050][T15187] ? rcu_is_watching+0x15/0xb0 [ 1542.598086][T15187] ? trace_kmalloc+0x2a/0xf0 [ 1542.598118][T15187] ? kmem_cache_alloc_node_noprof+0x1f5/0x610 [ 1542.598147][T15187] ? __pfx__copy_from_iter+0x10/0x10 [ 1542.598184][T15187] ? __alloc_skb+0x52c/0x7a0 [ 1542.598216][T15187] ? skb_put+0x112/0x210 [ 1542.598247][T15187] ? tipc_msg_build+0xb29/0xf50 [ 1542.598278][T15187] tipc_msg_build+0x8b6/0xf50 [ 1542.598316][T15187] ? __pfx_tipc_msg_build+0x10/0x10 [ 1542.598345][T15187] ? net_generic+0x1e/0x240 [ 1542.598374][T15187] ? net_generic+0x1e/0x240 [ 1542.598407][T15187] ? tipc_group_bc_cong+0x15f/0x210 [ 1542.598438][T15187] tipc_send_group_bcast+0x7db/0xad0 [ 1542.598496][T15187] ? __pfx_tipc_send_group_bcast+0x10/0x10 [ 1542.598547][T15187] ? __pfx_woken_wake_function+0x10/0x10 [ 1542.598578][T15187] ? ima_match_policy+0x106/0x21c0 [ 1542.598620][T15187] __tipc_sendmsg+0x313/0x2b60 [ 1542.598664][T15187] ? process_measurement+0x443/0x1c10 [ 1542.598696][T15187] ? process_measurement+0x443/0x1c10 [ 1542.598730][T15187] ? __pfx___tipc_sendmsg+0x10/0x10 [ 1542.598769][T15187] ? aa_label_sk_perm+0x532/0x6e0 [ 1542.598804][T15187] ? process_measurement+0x7b2/0x1c10 [ 1542.598841][T15187] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 1542.598888][T15187] ? __lock_acquire+0x683/0x2cf0 [ 1542.598932][T15187] ? __lock_acquire+0x683/0x2cf0 [ 1542.598990][T15187] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1542.599021][T15187] ? tipc_sendmsg+0x47/0x70 [ 1542.599046][T15187] ? __local_bh_enable_ip+0xd0/0x130 [ 1542.599079][T15187] tipc_sendmsg+0x55/0x70 [ 1542.599101][T15187] ? __pfx_tipc_sendmsg+0x10/0x10 [ 1542.599121][T15187] sock_sendmsg_nosec+0x13a/0x180 [ 1542.599153][T15187] ____sys_sendmsg+0x54e/0x850 [ 1542.599183][T15187] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1542.599217][T15187] ? import_iovec+0x73/0xa0 [ 1542.599255][T15187] ___sys_sendmsg+0x2a5/0x360 [ 1542.599276][T15187] ? __lock_acquire+0x683/0x2cf0 [ 1542.599311][T15187] ? __pfx____sys_sendmsg+0x10/0x10 [ 1542.599341][T15187] ? kstrtouint+0x6e/0xe0 [ 1542.599398][T15187] ? __fget_files+0x2a/0x420 [ 1542.599426][T15187] ? __fget_files+0x3a2/0x420 [ 1542.599463][T15187] __sys_sendmmsg+0x273/0x4d0 [ 1542.599488][T15187] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1542.599517][T15187] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1542.599553][T15187] ? ksys_write+0x242/0x270 [ 1542.599585][T15187] ? __pfx_ksys_write+0x10/0x10 [ 1542.599620][T15187] __x64_sys_sendmmsg+0xa0/0xc0 [ 1542.599639][T15187] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1542.599660][T15187] do_syscall_64+0x174/0x580 [ 1542.599679][T15187] ? trace_irq_disable+0x3b/0x140 [ 1542.599707][T15187] ? clear_bhb_loop+0x40/0x90 [ 1542.599733][T15187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1542.599750][T15187] RIP: 0033:0x7f116139de99 [ 1542.599768][T15187] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1542.599787][T15187] RSP: 002b:00007f1162230028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1542.599811][T15187] RAX: ffffffffffffffda RBX: 00007f1161626090 RCX: 00007f116139de99 [ 1542.599826][T15187] RDX: 0400000000000181 RSI: 00002000000030c0 RDI: 0000000000000003 [ 1542.599841][T15187] RBP: 00007f1162230090 R08: 0000000000000000 R09: 0000000000000000 [ 1542.599855][T15187] R10: 9200000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1542.599869][T15187] R13: 00007f1161626128 R14: 00007f1161626090 R15: 00007ffdcbb3ba48 [ 1542.599915][T15187] [ 1544.652389][T15166] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1544.892216][T15209] netlink: 'syz.3.12504': attribute type 11 has an invalid length. [ 1545.597491][T15222] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12510'. [ 1548.112633][T15229] xt_hashlimit: max too large, truncated to 1048576 [ 1548.125793][T15229] xt_hashlimit: overflow, try lower: 2/0 [ 1548.320358][T15247] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12519'. [ 1548.349064][T15247] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12519'. [ 1548.374172][T15257] netlink: 'syz.3.12521': attribute type 23 has an invalid length. [ 1548.450493][T15262] netlink: 24 bytes leftover after parsing attributes in process `syz.6.12524'. [ 1548.637197][T15265] bond0: (slave ip6tnl0): refused to change device type [ 1548.646136][T15268] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 1548.735969][T15273] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12525'. [ 1548.812387][T15276] virt_wifi0 speed is unknown, defaulting to 1000 [ 1548.822175][T15276] lo speed is unknown, defaulting to 1000 [ 1549.186212][T15289] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12532'. [ 1549.275887][T15289] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12532'. [ 1549.320627][T15291] virt_wifi0 speed is unknown, defaulting to 1000 [ 1549.416583][T15302] netlink: 'syz.3.12537': attribute type 1 has an invalid length. [ 1549.425491][T15302] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12537'. [ 1549.447374][T15300] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12536'. [ 1549.463454][T15292] bond1 (unregistering): Released all slaves [ 1549.544879][T15291] lo speed is unknown, defaulting to 1000 [ 1549.830400][T15314] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12541'. [ 1550.489884][T15346] macvtap2: entered promiscuous mode [ 1550.495778][T15346] macvtap2: entered allmulticast mode [ 1550.502741][T15346] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 1551.123569][T15375] __nla_validate_parse: 9 callbacks suppressed [ 1551.123599][T15375] netlink: 9 bytes leftover after parsing attributes in process `syz.3.12561'. [ 1551.151475][T15375] netlink: 9 bytes leftover after parsing attributes in process `syz.3.12561'. [ 1551.304916][T15386] netlink: 'syz.4.12564': attribute type 23 has an invalid length. [ 1551.315875][T15387] FAULT_INJECTION: forcing a failure. [ 1551.315875][T15387] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1551.332398][T15387] CPU: 0 UID: 0 PID: 15387 Comm: syz.3.12566 Not tainted syzkaller #0 PREEMPT(full) [ 1551.332426][T15387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1551.332438][T15387] Call Trace: [ 1551.332446][T15387] [ 1551.332455][T15387] dump_stack_lvl+0xe8/0x150 [ 1551.332491][T15387] should_fail_ex+0x40c/0x560 [ 1551.332523][T15387] _copy_from_iter+0x1d3/0x1660 [ 1551.332551][T15387] ? kmem_cache_alloc_node_noprof+0x1d1/0x610 [ 1551.332580][T15387] ? rcu_is_watching+0x15/0xb0 [ 1551.332624][T15387] ? trace_kmem_cache_alloc+0x29/0xe0 [ 1551.332653][T15387] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 1551.332679][T15387] ? __pfx__copy_from_iter+0x10/0x10 [ 1551.332706][T15387] ? __alloc_skb+0x276/0x7a0 [ 1551.332735][T15387] ? __alloc_skb+0x276/0x7a0 [ 1551.332772][T15387] ? netlink_sendmsg+0x650/0xb40 [ 1551.332795][T15387] ? skb_put+0x112/0x210 [ 1551.332829][T15387] netlink_sendmsg+0x6c0/0xb40 [ 1551.332864][T15387] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1551.332891][T15387] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1551.332918][T15387] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1551.332939][T15387] sock_sendmsg_nosec+0x13a/0x180 [ 1551.332970][T15387] ____sys_sendmsg+0x54e/0x850 [ 1551.332998][T15387] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1551.333030][T15387] ? import_iovec+0x73/0xa0 [ 1551.333065][T15387] ___sys_sendmsg+0x2a5/0x360 [ 1551.333086][T15387] ? __lock_acquire+0x683/0x2cf0 [ 1551.333121][T15387] ? __pfx____sys_sendmsg+0x10/0x10 [ 1551.333182][T15387] ? __fget_files+0x2a/0x420 [ 1551.333210][T15387] ? __fget_files+0x3a2/0x420 [ 1551.333250][T15387] __x64_sys_sendmsg+0x1b1/0x290 [ 1551.333279][T15387] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1551.333322][T15387] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1551.333347][T15387] do_syscall_64+0x174/0x580 [ 1551.333370][T15387] ? trace_irq_disable+0x3b/0x140 [ 1551.333398][T15387] ? clear_bhb_loop+0x40/0x90 [ 1551.333425][T15387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1551.333446][T15387] RIP: 0033:0x7f813239de99 [ 1551.333468][T15387] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1551.333488][T15387] RSP: 002b:00007f8133276028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1551.333512][T15387] RAX: ffffffffffffffda RBX: 00007f8132625fa0 RCX: 00007f813239de99 [ 1551.333528][T15387] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000004 [ 1551.333541][T15387] RBP: 00007f8133276090 R08: 0000000000000000 R09: 0000000000000000 [ 1551.333554][T15387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1551.333568][T15387] R13: 00007f8132626038 R14: 00007f8132625fa0 R15: 00007fff10bafb98 [ 1551.333602][T15387] [ 1551.780194][T15397] Cannot find add_set index 1 as target [ 1551.874957][T15402] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12571'. [ 1551.925184][T15402] netlink: 28 bytes leftover after parsing attributes in process `syz.5.12571'. [ 1551.939251][T15402] netlink: 28 bytes leftover after parsing attributes in process `syz.5.12571'. [ 1551.951967][T15402] netlink: 28 bytes leftover after parsing attributes in process `syz.5.12571'. [ 1551.962452][T15402] netlink: 28 bytes leftover after parsing attributes in process `syz.5.12571'. [ 1552.007692][T15408] syzkaller0: entered promiscuous mode [ 1552.013563][T15408] syzkaller0: entered allmulticast mode [ 1552.150984][T15412] netlink: 'syz.5.12575': attribute type 1 has an invalid length. [ 1552.317529][T15412] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1552.408949][T15414] bond6: (slave gretap2): Enslaving as a backup interface with an up link [ 1552.460239][ T3347] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1552.479165][T15424] tipc: Enabling of bearer rejected, already enabled [ 1552.545279][T15418] bond6 (unregistering): (slave gretap2): Removing an active aggregator [ 1552.578058][T15418] bond6 (unregistering): (slave gretap2): Releasing backup interface [ 1552.614111][T15418] bond6 (unregistering): Released all slaves [ 1552.808896][T15434] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12579'. [ 1552.818760][T15434] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1552.826299][T15434] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1552.837714][T15434] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1552.855503][T15434] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1553.199412][T15444] netlink: 32 bytes leftover after parsing attributes in process `syz.5.12586'. [ 1553.488726][T15451] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12589'. [ 1553.539285][T15451] batadv0: entered promiscuous mode [ 1553.546221][T15451] macvtap1: entered promiscuous mode [ 1553.562614][T15451] macvtap1: entered allmulticast mode [ 1553.576996][T15451] batadv0: entered allmulticast mode [ 1553.598625][T15451] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1553.872088][T15469] syzkaller0: entered promiscuous mode [ 1553.898171][T15469] syzkaller0: entered allmulticast mode [ 1554.215178][T15482] nbd: must specify at least one socket [ 1554.380855][T15492] netlink: 'syz.6.12605': attribute type 1 has an invalid length. [ 1554.431687][T15493] Cannot find add_set index 1 as target [ 1554.686392][T15495] sch_tbf: burst 88 is lower than device veth5 mtu (1514) ! [ 1555.040303][T15510] syzkaller0: entered promiscuous mode [ 1555.060070][T15510] syzkaller0: entered allmulticast mode [ 1555.338812][T15530] siw: device registration error -23 [ 1559.726455][T15522] tipc: Started in network mode [ 1559.733994][T15522] tipc: Node identity ac14140f, cluster identity 4711 [ 1559.741413][T15522] tipc: New replicast peer: 255.255.255.255 [ 1559.748228][T15522] tipc: Enabled bearer , priority 10 [ 1559.765077][T15531] bridge_slave_0: left allmulticast mode [ 1559.775008][T15531] bridge_slave_0: left promiscuous mode [ 1559.783032][T15531] bridge0: port 1(bridge_slave_0) entered disabled state [ 1559.830549][T15531] bridge_slave_1: left allmulticast mode [ 1559.836316][T15531] bridge_slave_1: left promiscuous mode [ 1559.842691][T15531] bridge0: port 2(bridge_slave_1) entered disabled state [ 1559.884800][T15531] bond0: (slave bond_slave_0): Releasing backup interface [ 1559.942881][T15531] bond0: (slave bond_slave_1): Releasing backup interface [ 1560.025844][T15531] team0: Port device team_slave_0 removed [ 1560.087639][T15531] team0: Port device team_slave_1 removed [ 1560.110747][T15531] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1560.145021][T15531] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1560.170673][T15531] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1560.188681][T15531] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1560.215421][T15531] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1560.244531][T15559] __nla_validate_parse: 4 callbacks suppressed [ 1560.244555][T15559] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12627'. [ 1560.276407][T13764] lo speed is unknown, defaulting to 1000 [ 1560.444675][T15567] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12631'. [ 1560.472762][T15567] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12631'. [ 1560.502473][T15567] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12631'. [ 1560.525042][T15574] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12634'. [ 1560.536083][T15567] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12631'. [ 1560.585548][T15575] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12632'. [ 1560.675103][T15580] netlink: 'syz.4.12637': attribute type 1 has an invalid length. [ 1560.714117][T15580] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1560.746448][T15580] bond1: (slave gretap2): Enslaving as a backup interface with an up link [ 1560.754615][T15583] netlink: 68 bytes leftover after parsing attributes in process `syz.5.12636'. [ 1560.801181][T15580] bond1 (unregistering): (slave gretap2): Releasing backup interface [ 1560.815341][T15580] bond1 (unregistering): Released all slaves [ 1560.850910][T15585] xt_hashlimit: max too large, truncated to 1048576 [ 1560.858253][T15585] xt_hashlimit: overflow, try lower: 2/0 [ 1560.909940][T13744] tipc: Node number set to 2886997007 [ 1561.263932][T15605] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12646'. [ 1561.292123][T15607] netlink: 40 bytes leftover after parsing attributes in process `syz.5.12645'. [ 1561.355257][T15602] virt_wifi0 speed is unknown, defaulting to 1000 [ 1561.376372][T15602] lo speed is unknown, defaulting to 1000 [ 1561.527649][T15614] virt_wifi0 speed is unknown, defaulting to 1000 [ 1561.600935][T15614] lo speed is unknown, defaulting to 1000 [ 1562.385434][T15653] netlink: 'syz.4.12662': attribute type 1 has an invalid length. [ 1563.022256][T15675] ip6tnl1: entered allmulticast mode [ 1563.049639][T21719] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1563.073399][T21719] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1563.082622][T13744] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1563.252146][T15681] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1563.265562][T15681] 8021q: adding VLAN 0 to HW filter on device team0 [ 1563.303197][T15681] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1563.438721][T13749] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1563.470902][T15681] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1563.499327][T15681] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1563.561895][T15681] veth1_vlan: left promiscuous mode [ 1563.589087][T15681] veth0_vlan: left promiscuous mode [ 1563.622422][T15681] veth0_vlan: entered promiscuous mode [ 1563.643992][T15681] veth1_vlan: entered promiscuous mode [ 1563.676886][T15681] veth1_macvtap: left promiscuous mode [ 1563.698245][T15681] veth0_macvtap: left promiscuous mode [ 1563.712611][T15681] veth0_macvtap: entered promiscuous mode [ 1563.729734][T15681] veth1_macvtap: entered promiscuous mode [ 1563.736291][T15706] netlink: 'syz.4.12681': attribute type 5 has an invalid length. [ 1563.752168][T15681] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1563.762529][T15681] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1563.772586][T15681] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1563.782734][T15681] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1563.798382][T13749] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1563.813322][T15681] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1563.829302][T15681] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1563.842564][ T48] bond2: (slave gretap2): link status up again after 0 ms [ 1563.853302][T15681] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1563.867937][ T48] bond2: (slave gretap2): link status up again after 0 ms [ 1563.868297][T15681] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1563.885829][T15681] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1563.893773][T21719] bond2: (slave gretap2): link status up again after 0 ms [ 1563.905415][T15681] A link change request failed with some changes committed already. Interface veth1_to_bod may have been left with an inconsistent configuration, please check. [ 1563.922011][ T48] bond2: (slave gretap2): link status up again after 0 ms [ 1563.947922][ T3314] bond2: (slave gretap2): link status up again after 0 ms [ 1563.958156][T15690] macvtap2: entered promiscuous mode [ 1563.965440][T15690] macvtap2: entered allmulticast mode [ 1563.975963][T15690] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 1563.988470][ T3314] bond2: (slave gretap2): link status up again after 0 ms [ 1564.039922][T21719] bond2: (slave gretap2): link status up again after 0 ms [ 1564.078780][ T6863] bond2: (slave gretap2): link status up again after 0 ms [ 1564.145906][ T62] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1564.164837][ T62] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1564.221026][ T62] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1564.237828][ T62] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1564.259219][ T62] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1564.282453][ T62] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1564.318828][ T62] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1564.340450][ T62] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1564.380374][ T48] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1564.406810][ T48] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1564.415086][T13749] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1564.435229][T15720] netlink: 'syz.3.12683': attribute type 23 has an invalid length. [ 1564.797708][T15721] nbd: couldn't find a device at index 5 [ 1564.834839][T15746] netlink: 'syz.6.12693': attribute type 1 has an invalid length. [ 1564.868548][T15746] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1564.879809][T13749] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1564.899856][T15746] bond7: (slave gretap6): Enslaving as a backup interface with an up link [ 1564.915791][T13749] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1564.976929][T15746] bond7 (unregistering): (slave gretap6): Removing an active aggregator [ 1565.002951][T15746] bond7 (unregistering): (slave gretap6): Releasing backup interface [ 1565.035925][T15746] bond7 (unregistering): Released all slaves [ 1565.308082][T21717] net_ratelimit: 26 callbacks suppressed [ 1565.308104][T21717] bond2: (slave gretap2): failed to get link speed/duplex [ 1565.487929][T21717] bond2: (slave gretap2): failed to get link speed/duplex [ 1565.602332][ T48] bond2: (slave gretap2): failed to get link speed/duplex [ 1565.661482][T15792] __nla_validate_parse: 3 callbacks suppressed [ 1565.661506][T15792] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12704'. [ 1565.748870][ T48] bond2: (slave gretap2): failed to get link speed/duplex [ 1565.868020][T21717] bond2: (slave gretap2): failed to get link speed/duplex [ 1565.978575][T21717] bond2: (slave gretap2): failed to get link speed/duplex [ 1566.088065][ T48] bond2: (slave gretap2): failed to get link speed/duplex [ 1566.236954][T21717] bond2: (slave gretap2): failed to get link speed/duplex [ 1566.350242][T21719] bond2: (slave gretap2): failed to get link speed/duplex [ 1566.359274][T15803] netlink: 'syz.3.12710': attribute type 1 has an invalid length. [ 1566.482291][T15803] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1566.604384][T15809] bond2: (slave gretap1): Enslaving as a backup interface with an up link [ 1566.613302][T21719] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1566.716914][T15811] bond2 (unregistering): (slave gretap1): Removing an active aggregator [ 1566.729209][T15811] bond2 (unregistering): (slave gretap1): Releasing backup interface [ 1566.742244][T15811] bond2 (unregistering): Released all slaves [ 1566.746537][T15823] netlink: 'syz.5.12716': attribute type 1 has an invalid length. [ 1566.785753][T15821] tipc: Enabling of bearer rejected, already enabled [ 1566.953137][T15823] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1567.004129][ T6863] wlan1: Trigger new scan to find an IBSS to join [ 1567.056090][T15825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1567.072508][T15825] 8021q: adding VLAN 0 to HW filter on device team0 [ 1567.089460][T15825] batadv0: left promiscuous mode [ 1567.096592][T15825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1567.156102][T15825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1567.167226][T15825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1567.181273][T15825] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1567.193327][T15825] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1567.209972][T15825] veth1_vlan: left promiscuous mode [ 1567.216295][T15825] veth0_vlan: left promiscuous mode [ 1567.223844][T15825] veth0_vlan: entered promiscuous mode [ 1567.233497][T15825] veth1_vlan: entered promiscuous mode [ 1567.242945][T15825] veth1_macvtap: left promiscuous mode [ 1567.252728][T15825] veth0_macvtap: left promiscuous mode [ 1567.260164][T15825] veth0_macvtap: entered promiscuous mode [ 1567.267390][T15825] veth1_macvtap: entered promiscuous mode [ 1567.280520][T15825] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1567.289461][T15825] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1567.298280][T15825] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1567.306780][T15825] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1567.316279][T15825] batadv0: entered promiscuous mode [ 1567.323184][T15825] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1567.333943][T15825] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1567.345352][T15825] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1567.363349][T15825] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1567.373892][T15825] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1567.404176][T15824] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1567.418185][T15824] bond6: (slave batadv1): making interface the new active one [ 1567.427464][T15824] bond6: (slave batadv1): Enslaving as an active interface with an up link [ 1567.436789][T13749] bond_slave_0: entered promiscuous mode [ 1567.442544][T13749] bond_slave_1: entered promiscuous mode [ 1567.455947][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 1567.463525][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1567.474288][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 1567.481529][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1567.556823][T15833] syzkaller1: entered promiscuous mode [ 1567.570683][T15833] syzkaller1: entered allmulticast mode [ 1567.590735][T21719] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1567.603236][T21719] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1567.613878][T21719] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1567.624490][T21719] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1567.715184][T15846] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12722'. [ 1567.774501][T15846] macvtap2: entered promiscuous mode [ 1567.788286][T15846] macvtap2: entered allmulticast mode [ 1567.817029][T15846] batadv0: entered allmulticast mode [ 1567.846003][T15846] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 1567.884268][T21719] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1567.899609][T21719] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1567.935780][T21719] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1567.971532][T21719] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1568.191721][T15868] netlink: 'syz.4.12731': attribute type 1 has an invalid length. [ 1568.208810][T13764] ip6_tnl_xmit_ctl: 4 callbacks suppressed [ 1568.208832][T13764] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1568.286229][T15868] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1568.367523][T15873] bond1: (slave gretap3): Enslaving as a backup interface with an up link [ 1568.420070][T15876] bond1 (unregistering): (slave gretap3): Releasing backup interface [ 1568.464820][T15876] bond1 (unregistering): Released all slaves [ 1568.471364][T13764] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1568.473645][T15885] netlink: 9 bytes leftover after parsing attributes in process `syz.5.12737'. [ 1568.493989][T15885] netlink: 9 bytes leftover after parsing attributes in process `syz.5.12737'. [ 1568.537130][T15886] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12736'. [ 1568.757954][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1568.813636][T15896] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12741'. [ 1568.912660][T15894] virt_wifi0 speed is unknown, defaulting to 1000 [ 1568.929868][T15901] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 1568.983150][T15894] lo speed is unknown, defaulting to 1000 [ 1569.411661][T15926] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12750'. [ 1569.440723][T15928] netlink: 'syz.6.12751': attribute type 1 has an invalid length. [ 1569.474496][T15928] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1569.550827][T15928] bond7: (slave gretap7): Enslaving as a backup interface with an up link [ 1569.585845][T15932] bond7 (unregistering): (slave gretap7): Releasing backup interface [ 1569.624511][T15932] bond7 (unregistering): Released all slaves [ 1569.890326][T15941] Cannot find add_set index 1 as target [ 1569.975569][ T6863] wlan1: Trigger new scan to find an IBSS to join [ 1570.348766][ T48] net_ratelimit: 13 callbacks suppressed [ 1570.348788][ T48] bond2: (slave gretap2): failed to get link speed/duplex [ 1570.479915][ T48] bond2: (slave gretap2): failed to get link speed/duplex [ 1570.584153][T15965] netlink: 'syz.5.12767': attribute type 1 has an invalid length. [ 1570.646285][T15965] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1570.702513][T15969] bond7: (slave gretap3): Enslaving as a backup interface with an up link [ 1570.728117][ T3314] bond2: (slave gretap2): failed to get link speed/duplex [ 1570.766582][T15965] bond7 (unregistering): (slave gretap3): Releasing backup interface [ 1570.797432][T15975] openvswitch: netlink: Message has 12 unknown bytes. [ 1570.808387][T15975] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1570.829178][T15965] bond7 (unregistering): Released all slaves [ 1571.117896][ T6863] bond2: (slave gretap2): failed to get link speed/duplex [ 1571.130431][T15991] netlink: 9 bytes leftover after parsing attributes in process `syz.6.12774'. [ 1571.183269][T15991] netlink: 9 bytes leftover after parsing attributes in process `syz.6.12774'. [ 1571.247890][ T48] bond2: (slave gretap2): failed to get link speed/duplex [ 1571.388368][ T48] bond2: (slave gretap2): failed to get link speed/duplex [ 1571.530088][T21717] bond2: (slave gretap2): failed to get link speed/duplex [ 1571.670623][ T6863] bond2: (slave gretap2): failed to get link speed/duplex [ 1571.905769][T16019] netlink: 'syz.5.12785': attribute type 1 has an invalid length. [ 1571.950136][T16019] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1571.957975][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1572.014576][T16022] bond7: (slave gretap4): Enslaving as a backup interface with an up link [ 1572.077151][T16019] bond7 (unregistering): (slave gretap4): Releasing backup interface [ 1572.092076][T16019] bond7 (unregistering): Released all slaves [ 1572.144674][T16029] netlink: 'syz.1.12786': attribute type 12 has an invalid length. [ 1572.441070][T16037] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12791'. [ 1572.463962][T16037] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12791'. [ 1572.529041][T16044] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12794'. [ 1572.544484][T16044] netlink: 60 bytes leftover after parsing attributes in process `syz.5.12794'. [ 1572.779886][T16058] netlink: 'syz.5.12800': attribute type 1 has an invalid length. [ 1572.886923][T16058] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1573.007952][T16065] bond7: (slave gretap5): Enslaving as a backup interface with an up link [ 1573.010217][T12260] wlan1: Trigger new scan to find an IBSS to join [ 1573.032703][T16074] netlink: 'syz.6.12804': attribute type 11 has an invalid length. [ 1573.144992][T16072] bond7 (unregistering): (slave gretap5): Removing an active aggregator [ 1573.162544][T16072] bond7 (unregistering): (slave gretap5): Releasing backup interface [ 1573.186466][T16072] bond7 (unregistering): Released all slaves [ 1573.503615][T16086] virt_wifi0 speed is unknown, defaulting to 1000 [ 1573.521410][T16086] lo speed is unknown, defaulting to 1000 [ 1573.882990][T16111] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12815'. [ 1573.942059][ T6863] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1574.017010][T16116] netlink: 'syz.6.12816': attribute type 23 has an invalid length. [ 1574.061304][T16111] syz_tun: entered allmulticast mode [ 1574.082187][T16111] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12815'. [ 1574.096173][T16110] syz_tun: left allmulticast mode [ 1574.197936][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1574.213929][T16120] netlink: 'syz.3.12820': attribute type 1 has an invalid length. [ 1574.251382][T16120] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1574.276463][T16120] bond2: (slave gretap2): Enslaving as a backup interface with an up link [ 1574.336000][T16120] bond2 (unregistering): (slave gretap2): Removing an active aggregator [ 1574.373349][T16120] bond2 (unregistering): (slave gretap2): Releasing backup interface [ 1574.406794][T16120] bond2 (unregistering): Released all slaves [ 1574.820679][T16152] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12829'. [ 1575.202387][T16162] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 1575.221361][T16165] syz_tun: entered allmulticast mode [ 1575.240592][T16151] syz_tun: left allmulticast mode [ 1575.390231][ T6863] net_ratelimit: 19 callbacks suppressed [ 1575.390253][ T6863] bond2: (slave gretap2): failed to get link speed/duplex [ 1575.528289][ T6863] bond2: (slave gretap2): failed to get link speed/duplex [ 1575.660749][ T6863] bond2: (slave gretap2): failed to get link speed/duplex [ 1575.673728][T16182] netlink: 'syz.3.12839': attribute type 1 has an invalid length. [ 1575.749539][T16182] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1575.820514][T16189] bond2: (slave gretap3): Enslaving as a backup interface with an up link [ 1575.893744][T16182] bond2 (unregistering): (slave gretap3): Releasing backup interface [ 1575.932888][T16182] bond2 (unregistering): Released all slaves [ 1576.137965][T21717] bond2: (slave gretap2): failed to get link speed/duplex [ 1576.249281][T21717] bond2: (slave gretap2): failed to get link speed/duplex [ 1576.381945][T21717] bond2: (slave gretap2): failed to get link speed/duplex [ 1576.389609][T16209] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12847'. [ 1576.413321][T16212] Cannot find add_set index 1 as target [ 1576.506265][T16209] syz_tun: entered allmulticast mode [ 1576.536390][T16206] syz_tun: left allmulticast mode [ 1576.544733][T16215] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 1576.580396][T12260] bond2: (slave gretap2): failed to get link speed/duplex [ 1576.684999][T16221] netlink: 'syz.6.12854': attribute type 1 has an invalid length. [ 1576.809191][T16221] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1576.859614][ T6863] bond2: (slave gretap2): failed to get link speed/duplex [ 1577.008511][ T6863] bond2: (slave gretap2): failed to get link speed/duplex [ 1577.021562][T16232] netlink: 'syz.3.12858': attribute type 1 has an invalid length. [ 1577.117363][T16232] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1577.226887][T16238] bond2: (slave gretap4): Enslaving as a backup interface with an up link [ 1577.247414][T21717] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1577.335375][T16232] bond2 (unregistering): (slave gretap4): Removing an active aggregator [ 1577.364454][T16232] bond2 (unregistering): (slave gretap4): Releasing backup interface [ 1577.408112][T16232] bond2 (unregistering): Released all slaves [ 1578.043757][T16262] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12864'. [ 1578.055008][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1578.211757][T16268] netlink: 'syz.5.12871': attribute type 1 has an invalid length. [ 1578.275745][T16268] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1578.541069][T16278] netlink: 'syz.1.12875': attribute type 1 has an invalid length. [ 1578.582751][T16278] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1578.590989][T16281] netlink: 'syz.4.12874': attribute type 1 has an invalid length. [ 1578.617977][T16281] netlink: 'syz.4.12874': attribute type 2 has an invalid length. [ 1578.665670][T16278] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 1578.741259][T16287] bond1 (unregistering): (slave gretap1): Releasing backup interface [ 1578.772396][T16287] bond1 (unregistering): Released all slaves [ 1579.176497][T16314] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12883'. [ 1579.447622][T16325] netlink: 76 bytes leftover after parsing attributes in process `syz.1.12888'. [ 1579.706065][T16330] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12890'. [ 1580.398851][ T3347] net_ratelimit: 23 callbacks suppressed [ 1580.398873][ T3347] bond2: (slave gretap2): failed to get link speed/duplex [ 1580.519898][ T48] bond2: (slave gretap2): failed to get link speed/duplex [ 1580.598300][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1580.629140][ T48] bond2: (slave gretap2): failed to get link speed/duplex [ 1580.658904][T16335] netlink: 'syz.4.12892': attribute type 1 has an invalid length. [ 1580.690392][T16335] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1580.709956][T16335] bond1: (slave gretap4): Enslaving as a backup interface with an up link [ 1580.724544][T16335] bond1 (unregistering): (slave gretap4): Releasing backup interface [ 1580.737408][T16335] bond1 (unregistering): Released all slaves [ 1580.760682][ T48] bond2: (slave gretap2): failed to get link speed/duplex [ 1580.880131][T21719] bond2: (slave gretap2): failed to get link speed/duplex [ 1580.953771][T16339] netlink: 3 bytes leftover after parsing attributes in process `syz.4.12893'. [ 1580.964091][T16339] netlink: 33 bytes leftover after parsing attributes in process `syz.4.12893'. [ 1581.008831][T21717] bond2: (slave gretap2): failed to get link speed/duplex [ 1581.026853][T16342] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12894'. [ 1581.117960][T21717] bond2: (slave gretap2): failed to get link speed/duplex [ 1581.228150][ T3347] bond2: (slave gretap2): failed to get link speed/duplex [ 1581.347938][T21719] bond2: (slave gretap2): failed to get link speed/duplex [ 1581.458384][T12260] bond2: (slave gretap2): failed to get link speed/duplex [ 1581.893859][T16296] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1581.904886][T16312] netlink: 244 bytes leftover after parsing attributes in process `syz.3.12884'. [ 1582.158616][T16360] netlink: 'syz.3.12903': attribute type 1 has an invalid length. [ 1582.185281][T16362] netlink: 'syz.6.12900': attribute type 23 has an invalid length. [ 1582.204989][T16364] netlink: 'syz.4.12904': attribute type 5 has an invalid length. [ 1582.213857][T16365] netlink: 'syz.4.12904': attribute type 5 has an invalid length. [ 1582.254580][T16360] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1582.282353][T16366] bond2: (slave gretap5): Enslaving as a backup interface with an up link [ 1582.324424][T16360] bond2 (unregistering): (slave gretap5): Releasing backup interface [ 1582.361762][T16360] bond2 (unregistering): Released all slaves [ 1582.425052][T16371] syz_tun: entered allmulticast mode [ 1582.503904][T16371] syz_tun (unregistering): left allmulticast mode [ 1582.722053][T16378] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 1583.098825][T16393] netlink: 'syz.1.12916': attribute type 1 has an invalid length. [ 1583.146008][T16393] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1583.182911][T16397] bond1: (slave gretap2): Enslaving as a backup interface with an up link [ 1583.268091][T16393] bond1 (unregistering): (slave gretap2): Releasing backup interface [ 1583.305574][T16393] bond1 (unregistering): Released all slaves [ 1583.715161][T16421] team0: Device vxcan1 is of different type [ 1583.774156][T16422] syzkaller1: entered promiscuous mode [ 1583.790228][T16422] syzkaller1: entered allmulticast mode [ 1583.933442][T16431] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12929'. [ 1583.943073][T16431] netlink: 60 bytes leftover after parsing attributes in process `syz.3.12929'. [ 1584.183123][T16445] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 1584.214082][T16445] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 1584.261888][T16447] netlink: 'syz.3.12934': attribute type 1 has an invalid length. [ 1584.435266][T16447] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1584.543858][T16450] bond2: (slave gretap6): Enslaving as a backup interface with an up link [ 1584.632523][T16453] bond2 (unregistering): (slave gretap6): Removing an active aggregator [ 1584.647535][T16453] bond2 (unregistering): (slave gretap6): Releasing backup interface [ 1584.658895][T16460] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12937'. [ 1584.671128][T16453] bond2 (unregistering): Released all slaves [ 1584.724680][T16459] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12937'. [ 1584.772768][T16460] ip6gre1: entered promiscuous mode [ 1584.786724][T16460] ip6gre1: entered allmulticast mode [ 1584.822071][ T48] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1584.840983][ T48] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1584.849398][T13744] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1584.970721][T16472] IPv6: Can't replace route, no match found [ 1585.039510][T16476] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12944'. [ 1585.048977][T13744] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1585.278233][T16490] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12949'. [ 1585.316015][T16492] netlink: 'syz.5.12950': attribute type 21 has an invalid length. [ 1585.326832][T16492] netlink: 164 bytes leftover after parsing attributes in process `syz.5.12950'. [ 1585.362635][T16492] syzkaller0: entered promiscuous mode [ 1585.368503][T16492] syzkaller0: entered allmulticast mode [ 1585.529657][T21719] net_ratelimit: 29 callbacks suppressed [ 1585.529681][T21719] bond2: (slave gretap2): failed to get link speed/duplex [ 1585.659218][ T48] bond2: (slave gretap2): failed to get link speed/duplex [ 1585.712935][T16509] netlink: 28 bytes leftover after parsing attributes in process `syz.6.12955'. [ 1585.731925][T13734] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1585.840333][T21719] bond2: (slave gretap2): failed to get link speed/duplex [ 1585.960243][T21719] bond2: (slave gretap2): failed to get link speed/duplex [ 1586.015294][T16521] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 1586.087866][ T48] bond2: (slave gretap2): failed to get link speed/duplex [ 1586.114358][T16524] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12962'. [ 1586.207868][T21719] bond2: (slave gretap2): failed to get link speed/duplex [ 1586.378914][T13763] IPVS: starting estimator thread 0... [ 1586.414124][T16539] netlink: 'syz.1.12967': attribute type 22 has an invalid length. [ 1586.425267][T16539] netlink: 'syz.1.12967': attribute type 22 has an invalid length. [ 1586.478040][T16537] IPVS: using max 26 ests per chain, 62400 per kthread [ 1586.517540][ T6863] bond2: (slave gretap2): failed to get link speed/duplex [ 1586.649721][T21719] bond2: (slave gretap2): failed to get link speed/duplex [ 1586.781561][T21717] bond2: (slave gretap2): failed to get link speed/duplex [ 1586.919399][T21717] bond2: (slave gretap2): failed to get link speed/duplex [ 1587.115357][T16569] netlink: 'syz.4.12975': attribute type 7 has an invalid length. [ 1587.140877][T16569] __nla_validate_parse: 3 callbacks suppressed [ 1587.140900][T16569] netlink: 224 bytes leftover after parsing attributes in process `syz.4.12975'. [ 1587.198837][T16569] netlink: 248 bytes leftover after parsing attributes in process `syz.4.12975'. [ 1587.222333][T16569] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12975'. [ 1587.247272][T16569] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12975'. [ 1587.271005][T16575] netlink: 232 bytes leftover after parsing attributes in process `syz.4.12975'. [ 1587.273308][T16576] validate_nla: 1 callbacks suppressed [ 1587.273352][T16576] netlink: 'syz.1.12977': attribute type 1 has an invalid length. [ 1587.334665][T16576] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1587.399966][T16586] netlink: 9 bytes leftover after parsing attributes in process `syz.4.12980'. [ 1587.411304][T16583] bond1: entered promiscuous mode [ 1587.428719][T16583] bond1: entered allmulticast mode [ 1587.441852][T16586] netlink: 9 bytes leftover after parsing attributes in process `syz.4.12980'. [ 1587.574792][T16591] xt_hashlimit: max too large, truncated to 1048576 [ 1587.590341][T16592] netlink: 24 bytes leftover after parsing attributes in process `syz.5.12981'. [ 1587.602379][T16591] xt_hashlimit: overflow, try lower: 2/0 [ 1587.758646][T16602] FAULT_INJECTION: forcing a failure. [ 1587.758646][T16602] name failslab, interval 1, probability 0, space 0, times 0 [ 1587.795892][T16602] CPU: 1 UID: 0 PID: 16602 Comm: syz.4.12985 Not tainted syzkaller #0 PREEMPT(full) [ 1587.795922][T16602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1587.795936][T16602] Call Trace: [ 1587.795945][T16602] [ 1587.795956][T16602] dump_stack_lvl+0xe8/0x150 [ 1587.795996][T16602] should_fail_ex+0x40c/0x560 [ 1587.796029][T16602] should_failslab+0xa8/0x100 [ 1587.796064][T16602] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 1587.796091][T16602] ? local_lock_release+0x9c/0x160 [ 1587.796124][T16602] ? __alloc_skb+0x1d7/0x7a0 [ 1587.796153][T16602] ? __alloc_skb+0x1d7/0x7a0 [ 1587.796191][T16602] __alloc_skb+0x1d7/0x7a0 [ 1587.796228][T16602] netlink_sendmsg+0x5d4/0xb40 [ 1587.796264][T16602] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1587.796293][T16602] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1587.796322][T16602] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1587.796345][T16602] sock_sendmsg_nosec+0x13a/0x180 [ 1587.796376][T16602] ____sys_sendmsg+0x54e/0x850 [ 1587.796412][T16602] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1587.796444][T16602] ? import_iovec+0x73/0xa0 [ 1587.796485][T16602] ___sys_sendmsg+0x2a5/0x360 [ 1587.796506][T16602] ? __lock_acquire+0x683/0x2cf0 [ 1587.796541][T16602] ? __pfx____sys_sendmsg+0x10/0x10 [ 1587.796602][T16602] ? __fget_files+0x2a/0x420 [ 1587.796629][T16602] ? __fget_files+0x3a2/0x420 [ 1587.796673][T16602] __x64_sys_sendmsg+0x1b1/0x290 [ 1587.796698][T16602] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1587.796741][T16602] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1587.796765][T16602] do_syscall_64+0x174/0x580 [ 1587.796789][T16602] ? trace_irq_disable+0x3b/0x140 [ 1587.796817][T16602] ? clear_bhb_loop+0x40/0x90 [ 1587.796844][T16602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1587.796867][T16602] RIP: 0033:0x7fafb959de99 [ 1587.796889][T16602] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1587.796909][T16602] RSP: 002b:00007fafba425028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1587.796933][T16602] RAX: ffffffffffffffda RBX: 00007fafb9825fa0 RCX: 00007fafb959de99 [ 1587.796949][T16602] RDX: 0000000004000000 RSI: 0000200000000380 RDI: 0000000000000006 [ 1587.796964][T16602] RBP: 00007fafba425090 R08: 0000000000000000 R09: 0000000000000000 [ 1587.796978][T16602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1587.796992][T16602] R13: 00007fafb9826038 R14: 00007fafb9825fa0 R15: 00007ffd99904ed8 [ 1587.797027][T16602] [ 1588.086349][T16605] syzkaller0: entered promiscuous mode [ 1588.092127][T16605] syzkaller0: entered allmulticast mode [ 1588.277936][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1588.494890][T16626] netlink: 20 bytes leftover after parsing attributes in process `syz.6.12991'. [ 1588.539904][T16625] FAULT_INJECTION: forcing a failure. [ 1588.539904][T16625] name failslab, interval 1, probability 0, space 0, times 0 [ 1588.552661][T16625] CPU: 1 UID: 0 PID: 16625 Comm: syz.3.12992 Not tainted syzkaller #0 PREEMPT(full) [ 1588.552691][T16625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1588.552705][T16625] Call Trace: [ 1588.552714][T16625] [ 1588.552724][T16625] dump_stack_lvl+0xe8/0x150 [ 1588.552763][T16625] should_fail_ex+0x40c/0x560 [ 1588.552796][T16625] should_failslab+0xa8/0x100 [ 1588.552831][T16625] kmem_cache_alloc_bulk_noprof+0x8b/0x7b0 [ 1588.552864][T16625] ? pfn_valid+0x125/0x4c0 [ 1588.552890][T16625] ? pfn_valid+0x125/0x4c0 [ 1588.552915][T16625] ? pfn_valid+0x125/0x4c0 [ 1588.552944][T16625] bpf_test_run_xdp_live+0x16e9/0x1c20 [ 1588.552980][T16625] ? bpf_test_run_xdp_live+0x43e/0x1c20 [ 1588.553016][T16625] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 1588.553041][T16625] ? bpf_dispatcher_xdp+0x800/0x1000 [ 1588.553118][T16625] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 1588.553152][T16625] ? _copy_from_user+0x94/0xb0 [ 1588.553185][T16625] ? bpf_test_init+0x113/0x150 [ 1588.553205][T16625] ? xdp_convert_md_to_buff+0x5b/0x330 [ 1588.553232][T16625] bpf_prog_test_run_xdp+0x7d8/0x11d0 [ 1588.553274][T16625] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1588.553304][T16625] ? __fget_files+0x2a/0x420 [ 1588.553347][T16625] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1588.553372][T16625] bpf_prog_test_run+0x2c5/0x340 [ 1588.553409][T16625] __sys_bpf+0xa22/0xd90 [ 1588.553447][T16625] ? __pfx___sys_bpf+0x10/0x10 [ 1588.553488][T16625] ? __fget_files+0x2a/0x420 [ 1588.553536][T16625] ? ksys_write+0x242/0x270 [ 1588.553572][T16625] ? __pfx_ksys_write+0x10/0x10 [ 1588.553611][T16625] __x64_sys_bpf+0xba/0xd0 [ 1588.553637][T16625] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1588.553662][T16625] do_syscall_64+0x174/0x580 [ 1588.553685][T16625] ? trace_irq_disable+0x3b/0x140 [ 1588.553713][T16625] ? clear_bhb_loop+0x40/0x90 [ 1588.553741][T16625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1588.553763][T16625] RIP: 0033:0x7f813239de99 [ 1588.553784][T16625] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1588.553803][T16625] RSP: 002b:00007f8133276028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1588.553828][T16625] RAX: ffffffffffffffda RBX: 00007f8132625fa0 RCX: 00007f813239de99 [ 1588.553844][T16625] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 1588.553859][T16625] RBP: 00007f8133276090 R08: 0000000000000000 R09: 0000000000000000 [ 1588.553872][T16625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1588.553886][T16625] R13: 00007f8132626038 R14: 00007f8132625fa0 R15: 00007fff10bafb98 [ 1588.553921][T16625] [ 1588.839672][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1588.941915][T16630] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12995'. [ 1589.003537][T16638] tipc: Resetting bearer [ 1589.175270][ T6863] tipc: Resetting bearer [ 1589.248815][T16626] [ 1589.251216][T16626] ====================================================== [ 1589.258319][T16626] WARNING: possible circular locking dependency detected [ 1589.265506][T16626] syzkaller #0 Not tainted [ 1589.269956][T16626] ------------------------------------------------------ [ 1589.277061][T16626] syz.6.12991/16626 is trying to acquire lock: [ 1589.283250][T16626] ffff888026fd1828 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1af/0x480 [ 1589.292888][T16626] [ 1589.292888][T16626] but task is already holding lock: [ 1589.300376][T16626] ffff888026fd1300 (&q->q_usage_counter(io)#55){++++}-{0:0}, at: elevator_change+0x194/0x480 [ 1589.310753][T16626] [ 1589.310753][T16626] which lock already depends on the new lock. [ 1589.310753][T16626] [ 1589.321244][T16626] [ 1589.321244][T16626] the existing dependency chain (in reverse order) is: [ 1589.330556][T16626] [ 1589.330556][T16626] -> #6 (&q->q_usage_counter(io)#55){++++}-{0:0}: [ 1589.339314][T16626] blk_alloc_queue+0x544/0x690 [ 1589.344687][T16626] __blk_mq_alloc_disk+0x194/0x390 [ 1589.350426][T16626] nbd_dev_add+0x494/0xb60 [ 1589.355473][T16626] nbd_init+0x15f/0x1e0 [ 1589.360288][T16626] do_one_initcall+0x250/0x870 [ 1589.365613][T16626] do_initcall_level+0x10a/0x1a0 [ 1589.371188][T16626] do_initcalls+0x59/0xa0 [ 1589.376064][T16626] kernel_init_freeable+0x29d/0x3e0 [ 1589.381807][T16626] kernel_init+0x1d/0x1d0 [ 1589.386712][T16626] ret_from_fork+0x514/0xb70 [ 1589.391854][T16626] ret_from_fork_asm+0x1a/0x30 [ 1589.397187][T16626] [ 1589.397187][T16626] -> #5 (fs_reclaim){+.+.}-{0:0}: [ 1589.404427][T16626] fs_reclaim_acquire+0x71/0x100 [ 1589.409920][T16626] __kmalloc_cache_node_noprof+0x66/0x630 [ 1589.416193][T16626] create_worker+0x112/0x7b0 [ 1589.421353][T16626] workqueue_prepare_cpu+0xe4/0x170 [ 1589.427123][T16626] cpuhp_invoke_callback+0x434/0x810 [ 1589.432974][T16626] _cpu_up+0x2ce/0x5b0 [ 1589.437602][T16626] cpu_up+0x1d2/0x220 [ 1589.442160][T16626] cpuhp_bringup_mask+0xb2/0x1a0 [ 1589.447780][T16626] cpuhp_bringup_cpus_parallel+0x109/0x120 [ 1589.454251][T16626] bringup_nonboot_cpus+0x17/0x30 [ 1589.459840][T16626] smp_init+0x32/0x110 [ 1589.464544][T16626] kernel_init_freeable+0x27f/0x3e0 [ 1589.470298][T16626] kernel_init+0x1d/0x1d0 [ 1589.475260][T16626] ret_from_fork+0x514/0xb70 [ 1589.480419][T16626] ret_from_fork_asm+0x1a/0x30 [ 1589.485736][T16626] [ 1589.485736][T16626] -> #4 (cpu_hotplug_lock){++++}-{0:0}: [ 1589.493498][T16626] cpus_read_lock+0x42/0x160 [ 1589.498770][T16626] static_key_slow_inc+0x12/0x30 [ 1589.504305][T16626] nbd_genl_reconfigure+0x1301/0x1e80 [ 1589.510253][T16626] genl_family_rcv_msg_doit+0x233/0x340 [ 1589.516368][T16626] genl_rcv_msg+0x614/0x7a0 [ 1589.521445][T16626] netlink_rcv_skb+0x226/0x4a0 [ 1589.526762][T16626] genl_rcv+0x28/0x40 [ 1589.531470][T16626] netlink_unicast+0x7bb/0x940 [ 1589.536796][T16626] netlink_sendmsg+0x813/0xb40 [ 1589.542211][T16626] sock_sendmsg_nosec+0x13a/0x180 [ 1589.547796][T16626] ____sys_sendmsg+0x54e/0x850 [ 1589.553125][T16626] ___sys_sendmsg+0x2a5/0x360 [ 1589.558372][T16626] __x64_sys_sendmsg+0x1b1/0x290 [ 1589.563863][T16626] do_syscall_64+0x174/0x580 [ 1589.569008][T16626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1589.575464][T16626] [ 1589.575464][T16626] -> #3 (&nsock->tx_lock){+.+.}-{4:4}: [ 1589.583154][T16626] __mutex_lock+0x19d/0x1550 [ 1589.588297][T16626] nbd_queue_rq+0x373/0x1150 [ 1589.593447][T16626] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1589.599544][T16626] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1589.606514][T16626] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1589.613062][T16626] blk_mq_run_work_fn+0x16c/0x300 [ 1589.618637][T16626] process_scheduled_works+0xa8e/0x14e0 [ 1589.624724][T16626] worker_thread+0xa47/0xfb0 [ 1589.629858][T16626] kthread+0x388/0x470 [ 1589.634471][T16626] ret_from_fork+0x514/0xb70 [ 1589.639619][T16626] ret_from_fork_asm+0x1a/0x30 [ 1589.644927][T16626] [ 1589.644927][T16626] -> #2 (&cmd->lock){+.+.}-{4:4}: [ 1589.652163][T16626] __mutex_lock+0x19d/0x1550 [ 1589.657312][T16626] nbd_queue_rq+0xc1/0x1150 [ 1589.662397][T16626] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1589.668496][T16626] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1589.675378][T16626] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1589.681906][T16626] blk_mq_run_work_fn+0x16c/0x300 [ 1589.687475][T16626] process_scheduled_works+0xa8e/0x14e0 [ 1589.693559][T16626] worker_thread+0xa47/0xfb0 [ 1589.698729][T16626] kthread+0x388/0x470 [ 1589.703387][T16626] ret_from_fork+0x514/0xb70 [ 1589.708532][T16626] ret_from_fork_asm+0x1a/0x30 [ 1589.713851][T16626] [ 1589.713851][T16626] -> #1 (set->srcu){.+.+}-{0:0}: [ 1589.721013][T16626] __synchronize_srcu+0xc9/0x2f0 [ 1589.726504][T16626] elevator_switch+0x1e8/0x7b0 [ 1589.731815][T16626] elevator_change+0x2fa/0x480 [ 1589.737124][T16626] elevator_set_default+0x375/0x440 [ 1589.742868][T16626] blk_register_queue+0x3f3/0x4e0 [ 1589.748478][T16626] __add_disk+0x6cb/0xe30 [ 1589.753346][T16626] add_disk_fwnode+0x100/0x3a0 [ 1589.758657][T16626] nbd_dev_add+0x733/0xb60 [ 1589.763661][T16626] nbd_init+0x15f/0x1e0 [ 1589.768373][T16626] do_one_initcall+0x250/0x870 [ 1589.773689][T16626] do_initcall_level+0x10a/0x1a0 [ 1589.779196][T16626] do_initcalls+0x59/0xa0 [ 1589.784074][T16626] kernel_init_freeable+0x29d/0x3e0 [ 1589.789826][T16626] kernel_init+0x1d/0x1d0 [ 1589.794710][T16626] ret_from_fork+0x514/0xb70 [ 1589.799854][T16626] ret_from_fork_asm+0x1a/0x30 [ 1589.805157][T16626] [ 1589.805157][T16626] -> #0 (&q->elevator_lock){+.+.}-{4:4}: [ 1589.813006][T16626] __lock_acquire+0x1520/0x2cf0 [ 1589.818417][T16626] lock_acquire+0x106/0x350 [ 1589.823488][T16626] __mutex_lock+0x19d/0x1550 [ 1589.828649][T16626] elevator_change+0x1af/0x480 [ 1589.833969][T16626] elevator_set_none+0xb5/0x140 [ 1589.839371][T16626] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 1589.845730][T16626] nbd_start_device+0x189/0xb30 [ 1589.851135][T16626] nbd_genl_connect+0x1597/0x1c10 [ 1589.856711][T16626] genl_family_rcv_msg_doit+0x233/0x340 [ 1589.862826][T16626] genl_rcv_msg+0x614/0x7a0 [ 1589.867881][T16626] netlink_rcv_skb+0x226/0x4a0 [ 1589.873185][T16626] genl_rcv+0x28/0x40 [ 1589.877714][T16626] netlink_unicast+0x7bb/0x940 [ 1589.883032][T16626] netlink_sendmsg+0x813/0xb40 [ 1589.888338][T16626] sock_sendmsg_nosec+0x13a/0x180 [ 1589.893902][T16626] ____sys_sendmsg+0x54e/0x850 [ 1589.899204][T16626] ___sys_sendmsg+0x2a5/0x360 [ 1589.904419][T16626] __x64_sys_sendmsg+0x1b1/0x290 [ 1589.909901][T16626] do_syscall_64+0x174/0x580 [ 1589.915052][T16626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1589.921498][T16626] [ 1589.921498][T16626] other info that might help us debug this: [ 1589.921498][T16626] [ 1589.931743][T16626] Chain exists of: [ 1589.931743][T16626] &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#55 [ 1589.931743][T16626] [ 1589.945540][T16626] Possible unsafe locking scenario: [ 1589.945540][T16626] [ 1589.953090][T16626] CPU0 CPU1 [ 1589.958522][T16626] ---- ---- [ 1589.963961][T16626] lock(&q->q_usage_counter(io)#55); [ 1589.969366][T16626] lock(fs_reclaim); [ 1589.975917][T16626] lock(&q->q_usage_counter(io)#55); [ 1589.983837][T16626] lock(&q->elevator_lock); [ 1589.988447][T16626] [ 1589.988447][T16626] *** DEADLOCK *** [ 1589.988447][T16626] [ 1589.996669][T16626] 6 locks held by syz.6.12991/16626: [ 1590.001973][T16626] #0: ffffffff9009d8e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1590.010252][T16626] #1: ffffffff9009d720 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1590.019256][T16626] #2: ffff8880276949c0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xab/0x19f0 [ 1590.030880][T16626] #3: ffff8880276948d0 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xbe/0x19f0 [ 1590.041891][T16626] #4: ffff888026fd1300 (&q->q_usage_counter(io)#55){++++}-{0:0}, at: elevator_change+0x194/0x480 [ 1590.052547][T16626] #5: ffff888026fd1338 (&q->q_usage_counter(queue)#39){+.+.}-{0:0}, at: elevator_change+0x194/0x480 [ 1590.063469][T16626] [ 1590.063469][T16626] stack backtrace: [ 1590.069395][T16626] CPU: 1 UID: 0 PID: 16626 Comm: syz.6.12991 Not tainted syzkaller #0 PREEMPT(full) [ 1590.069419][T16626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1590.069431][T16626] Call Trace: [ 1590.069439][T16626] [ 1590.069447][T16626] dump_stack_lvl+0xe8/0x150 [ 1590.069480][T16626] print_circular_bug+0x2e1/0x300 [ 1590.069501][T16626] check_noncircular+0x12e/0x150 [ 1590.069533][T16626] __lock_acquire+0x1520/0x2cf0 [ 1590.069568][T16626] ? elevator_change+0x1af/0x480 [ 1590.069649][T16626] lock_acquire+0x106/0x350 [ 1590.069691][T16626] ? elevator_change+0x1af/0x480 [ 1590.069723][T16626] __mutex_lock+0x19d/0x1550 [ 1590.069743][T16626] ? elevator_change+0x1af/0x480 [ 1590.069767][T16626] ? rcu_is_watching+0x15/0xb0 [ 1590.069799][T16626] ? elevator_change+0x1af/0x480 [ 1590.069823][T16626] ? __pfx___mutex_lock+0x10/0x10 [ 1590.069847][T16626] ? enable_work+0x17f/0x230 [ 1590.069875][T16626] ? lockdep_hardirqs_on+0x7a/0x110 [ 1590.069895][T16626] ? __cancel_work_sync+0xf7/0x110 [ 1590.069919][T16626] ? blk_mq_cancel_work_sync+0xa5/0xe0 [ 1590.069949][T16626] elevator_change+0x1af/0x480 [ 1590.069977][T16626] elevator_set_none+0xb5/0x140 [ 1590.070001][T16626] ? __pfx_elevator_set_none+0x10/0x10 [ 1590.070029][T16626] ? xa_load+0x1db/0x210 [ 1590.070052][T16626] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 1590.070082][T16626] ? kernfs_add_one+0x480/0x5e0 [ 1590.070112][T16626] ? nbd_start_device+0x17d/0xb30 [ 1590.070144][T16626] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 1590.070178][T16626] ? sysfs_add_file_mode_ns+0x258/0x300 [ 1590.070202][T16626] nbd_start_device+0x189/0xb30 [ 1590.070233][T16626] ? device_create_file+0xf4/0x1b0 [ 1590.070264][T16626] nbd_genl_connect+0x1597/0x1c10 [ 1590.070295][T16626] ? __pfx_nbd_genl_connect+0x10/0x10 [ 1590.070324][T16626] ? rcu_is_watching+0x15/0xb0 [ 1590.070351][T16626] ? trace_kmalloc+0x2a/0xf0 [ 1590.070374][T16626] ? __kmalloc_noprof+0x396/0x720 [ 1590.070397][T16626] ? __nla_parse+0x40/0x60 [ 1590.070424][T16626] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 1590.070451][T16626] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 1590.070481][T16626] genl_family_rcv_msg_doit+0x233/0x340 [ 1590.070517][T16626] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1590.070548][T16626] ? __lock_acquire+0x683/0x2cf0 [ 1590.070576][T16626] genl_rcv_msg+0x614/0x7a0 [ 1590.070603][T16626] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1590.070626][T16626] ? __pfx_nbd_genl_connect+0x10/0x10 [ 1590.070659][T16626] netlink_rcv_skb+0x226/0x4a0 [ 1590.070678][T16626] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1590.070703][T16626] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1590.070729][T16626] ? down_read+0x2be/0x330 [ 1590.070751][T16626] genl_rcv+0x28/0x40 [ 1590.070775][T16626] netlink_unicast+0x7bb/0x940 [ 1590.070808][T16626] netlink_sendmsg+0x813/0xb40 [ 1590.070832][T16626] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1590.070853][T16626] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1590.070875][T16626] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1590.070893][T16626] sock_sendmsg_nosec+0x13a/0x180 [ 1590.070918][T16626] ____sys_sendmsg+0x54e/0x850 [ 1590.070939][T16626] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1590.070961][T16626] ? import_iovec+0x73/0xa0 [ 1590.070989][T16626] ___sys_sendmsg+0x2a5/0x360 [ 1590.071008][T16626] ? __lock_acquire+0x683/0x2cf0 [ 1590.071038][T16626] ? __pfx____sys_sendmsg+0x10/0x10 [ 1590.071060][T16626] ? futex_wait+0x2a2/0x390 [ 1590.071096][T16626] ? __fget_files+0x2a/0x420 [ 1590.071120][T16626] ? __fget_files+0x3a2/0x420 [ 1590.071148][T16626] __x64_sys_sendmsg+0x1b1/0x290 [ 1590.071169][T16626] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1590.071196][T16626] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1590.071214][T16626] do_syscall_64+0x174/0x580 [ 1590.071232][T16626] ? trace_irq_disable+0x3b/0x140 [ 1590.071256][T16626] ? clear_bhb_loop+0x40/0x90 [ 1590.071277][T16626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1590.071297][T16626] RIP: 0033:0x7f4a74d9de99 [ 1590.071317][T16626] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1590.071334][T16626] RSP: 002b:00007f4a75ba3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1590.071356][T16626] RAX: ffffffffffffffda RBX: 00007f4a75025fa0 RCX: 00007f4a74d9de99 [ 1590.071371][T16626] RDX: 0000000000000004 RSI: 0000200000001ac0 RDI: 000000000000000b [ 1590.071383][T16626] RBP: 00007f4a74e33eaf R08: 0000000000000000 R09: 0000000000000000 [ 1590.071395][T16626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1590.071407][T16626] R13: 00007f4a75026038 R14: 00007f4a75025fa0 R15: 00007fff26659a68 [ 1590.071428][T16626] [ 1590.639655][T16644] RDS: rds_bind could not find a transport for fe80::23, load rds_tcp or rds_rdma? [ 1590.645407][ T3314] net_ratelimit: 14 callbacks suppressed [ 1590.645478][ T3314] bond2: (slave gretap2): failed to get link speed/duplex [ 1590.769309][T21719] bond2: (slave gretap2): failed to get link speed/duplex [ 1590.777208][ T5622] block nbd6: Receive control failed (result -32) [ 1590.777244][T12093] block nbd6: Receive control failed (result -32) [ 1590.783967][ T5622] block nbd6: Receive control failed (result -32) [ 1590.878234][ T3314] bond2: (slave gretap2): failed to get link speed/duplex [ 1590.988100][ T3314] bond2: (slave gretap2): failed to get link speed/duplex [ 1591.097934][T12260] bond2: (slave gretap2): failed to get link speed/duplex [ 1591.217953][T21717] bond2: (slave gretap2): failed to get link speed/duplex [ 1591.327949][T21717] bond2: (slave gretap2): failed to get link speed/duplex [ 1591.437920][ T3314] bond2: (slave gretap2): failed to get link speed/duplex [ 1591.548037][T12260] bond2: (slave gretap2): failed to get link speed/duplex [ 1591.657918][ T3314] bond2: (slave gretap2): failed to get link speed/duplex [ 1594.198107][T15016] Bluetooth: hci1: command 0x0406 tx timeout [ 1595.747943][T21719] net_ratelimit: 36 callbacks suppressed [ 1595.747966][T21719] bond2: (slave gretap2): failed to get link speed/duplex [ 1595.868174][T12260] bond2: (slave gretap2): failed to get link speed/duplex [ 1595.977904][T21717] bond2: (slave gretap2): failed to get link speed/duplex [ 1596.088203][T21717] bond2: (slave gretap2): failed to get link speed/duplex [ 1596.198019][T21719] bond2: (slave gretap2): failed to get link speed/duplex [ 1596.308676][T21719] bond2: (slave gretap2): failed to get link speed/duplex [ 1596.418101][T21719] bond2: (slave gretap2): failed to get link speed/duplex [ 1596.528378][ T3347] bond2: (slave gretap2): failed to get link speed/duplex [ 1596.598462][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1596.638473][T21717] bond2: (slave gretap2): failed to get link speed/duplex [ 1596.748219][T21717] bond2: (slave gretap2): failed to get link speed/duplex [ 1597.238853][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1597.240590][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!