last executing test programs: 4.597279259s ago: executing program 1 (id=3293): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00'}) (async, rerun: 64) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000080)={0x8}, 0x10) (async, rerun: 64) write(r0, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x13f, 0x40, 0x44}, 0x50) (async) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 4.256034051s ago: executing program 1 (id=3297): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x88, @private2, 0xa77}, 0x1c) recvfrom$rose(r1, &(0x7f00000000c0)=""/225, 0xe1, 0x10020, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000080)) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2, 0x1}}, {0x4}}]}]}, 0x58}}, 0x4000010) 3.603860714s ago: executing program 2 (id=3306): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0xf, 0x3, 0x8, 0x1}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0xf, 0x3, 0x8, 0x1}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="12"], 0x48) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="12"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r3}, &(0x7f0000000840), &(0x7f0000000880)=r2}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000005c0)={r3, &(0x7f00000004c0)="29e1", 0x0}, 0x20) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)) shutdown(r1, 0x0) (async) shutdown(r1, 0x0) epoll_wait(r0, &(0x7f0000000000)=[{}], 0x1, 0x101) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000140)={0x2000200b}) 3.461195856s ago: executing program 2 (id=3308): syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r0, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/pid_for_children\x00') mkdirat$cgroup(r1, &(0x7f0000000000)='syz0\x00', 0x1ff) (async) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x6, @private=0xa410100, 0x4e21, 0x2, 'sed\x00', 0x2, 0x80000000, 0x68}, 0x2c) (async, rerun: 64) r3 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) r4 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) r5 = socket(0x10, 0x803, 0x0) (rerun: 32) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000064171c93a4742b42"], 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async, rerun: 32) r7 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) (async) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newlink={0xd4, 0x10, 0x2, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x84, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x74, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1f}}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9fe, 0x80000000}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x331f, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x7f}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4d, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2000f4aa, 0x69}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8}}]}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x3}, @IFLA_PHYS_PORT_ID={0x18, 0x22, "138605764ac0f2290f39f4a696a0d4d0023d8942"}, @IFLA_WEIGHT={0x8, 0xf, 0x2}]}, 0xd4}, 0x1, 0x0, 0x0, 0x610}, 0x0) 3.354717246s ago: executing program 1 (id=3309): r0 = socket(0x1e, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x10f, 0x12, 0x0, &(0x7f0000000240)) (async) getsockopt$inet_tcp_int(r0, 0x10f, 0x12, 0x0, &(0x7f0000000240)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000800000008"], 0x48) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000f00000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000f00000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) unshare(0x22020400) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000", @ANYRES32], 0x50) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@rose={'rose', 0x0}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x8000) ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000)) (async) ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000)) 3.044709662s ago: executing program 3 (id=3312): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000400000000001f00000071028000100000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xb, &(0x7f0000000080)=""/11, 0x41000, 0x62, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000b}, 0x94) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x5761, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r3, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000004080100000900010073797a3100000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x20004000}, 0x100040c1) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/cgroup\x00') bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYRES64=r1], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100)={0x0, 0xfffffffc}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffdfff}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000400)={r0, 0xffffffffffffffff, 0x18, 0x0, @void}, 0xffffffffffffff74) unshare(0x6a040000) r4 = socket$netlink(0x10, 0x3, 0x0) pwritev(r4, &(0x7f0000000080)=[{&(0x7f0000000000)="7f8f941a818fae60b4716ce2b8e2d8bc025c9d70f4bea51e6d99b84da032586bb7b396f48272b6ce0eed5d17e343f01635c35f472f11d0ce6efed41dbad414e7951f6ede559a1d8020a458e93a739aec05d96d05c25082b2d977cdde8bdef8eb856c0ffab2", 0x65}], 0x1, 0x3, 0x12000000) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_emit_ethernet(0x5e, &(0x7f0000000440)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaa36c2950e69692e3e318c00283afffe8000000000000000000000000000bbff0200000000000000000000000000018900907800000014ff02000000000000000000000000010000000000004000"/94], 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x21, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x7, &(0x7f0000000040)=0x8005, 0x4) sendmsg$inet6(r6, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e23, 0x80000, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="110000000000000001"], 0x18}, 0x40c0) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000480)=@assoc_value={0x0}, &(0x7f0000000540)=0x4b) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000040)={r7, 0x8}, 0xc) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r4, 0x8983, &(0x7f00000000c0)={0x1, 'pimreg1\x00'}) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000000)=0x6, 0xa) bind$inet6(r2, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) r9 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r9, 0x1, 0xf, &(0x7f0000000000)=0x6, 0xa) bind$inet6(r9, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) 2.924138396s ago: executing program 4 (id=3313): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='\b\x00'/20, @ANYRESHEX, @ANYRESOCT, @ANYBLOB="00df27563235d960679000000004000000000000000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x4, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000006300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x5c, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.879618284s ago: executing program 0 (id=3314): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002fc0)=[{&(0x7f0000001a40)={0x18, 0x14, 0x1, 0x70bd25, 0x25dfdbfc, "", [@typed={0x8, 0x105, 0x0, 0x0, @fd}]}, 0x18}], 0x1, 0x0, 0x0, 0x4000}, 0x40000c4) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000002d00070100000000ffdbdf25037c00000800018004", @ANYRESHEX=r0], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x480c) 2.832470152s ago: executing program 1 (id=3315): r0 = socket$inet(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r0}, 0x8) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{0x1, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000340)}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x6, 0x20104, 0x4, 0x8a3, r2, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x4}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000140)={r3, &(0x7f0000000040), 0x0}, 0x20) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) (async) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) (async) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), &(0x7f00000001c0)=0xc) (async) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='bic', 0x3) (async) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) (async) sendmmsg$inet(r4, &(0x7f0000001f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) (async) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x0) ioctl$sock_inet_SIOCRTMSG(r1, 0x890d, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @broadcast}, {0x2, 0x4e22, @empty}, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x30}}, 0x210, 0x0, 0x0, 0x0, 0x8d, 0x0, 0x400, 0x2, 0xe}) (async) close(0x3) (async) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c"], 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x20000000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_CONTEXT(r6, 0x84, 0x11, 0x0, &(0x7f0000000140)) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) (async) connect$inet(r7, &(0x7f0000000280)={0x2, 0x4, @multicast1}, 0x10) (async) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @multicast1}, 0x10) 2.711790492s ago: executing program 4 (id=3316): bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x20044084) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000001900)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000000c0)="5bdbd57a0e656889964df9937f561de9b944d1e381fed329742e239cb13cf2af711d48d2f15b3118abd8fd087f117830209a631f9dfbec5cbbbb2216a2d87dfb0d7dd906c594125a10053c8e288ac4445ff0e999d423cc250e31e8650d248e49ba5fb3be8db01db38acf5a4455630ecb10f753530ada6598a1ff4805370a5cebf05e199368871b2751c242633419d13a6b05a390d21ab1d44be1254385b3d882c646f9762bf3480e05e98c9cc655adb7caa279e66709794e3b93cda0b9a14794e6d020cc68ea70e71a083e1a2b375591203ce218e8d244cf32f5dd7af0ee1ed032d3b59e4d57136639d68b7577553393a9", 0xf1}, {&(0x7f0000000000)="ef7791000dc7777cb951ca638ea0e1b5d280548c882aa59a68cd17c0e7f23d6d", 0x20}], 0x2, &(0x7f00000006c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x2}], 0x1, 0x0) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @sack_perm, @window={0x3, 0x9, 0x2}, @mss={0x2, 0x400}, @mss={0x2, 0xcb2}, @mss={0x2, 0x3}, @timestamp, @sack_perm], 0x26) shutdown(r5, 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x12, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="5000000010000104020006000000000000000000", @ANYRES32=0x0, @ANYBLOB="2825020000080000280012800c0001006d6163766c616e00180002800a0009000000000000000000080007000100000008000500", @ANYRES32=r4], 0x50}}, 0x800) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000080) recvmmsg(r2, &(0x7f0000003f40)=[{{0x0, 0x0, 0x0}, 0xeb8}, {{0x0, 0x0, &(0x7f0000003480)=[{&(0x7f0000000440)=""/28, 0x1c}, {&(0x7f00000022c0)=""/4096, 0x1000}], 0x2}, 0x2d}], 0x2, 0x2120, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r8, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x90}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001d0001000000000004086aa42d"], 0x30}}, 0x3ef25a5f5a59b1af) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x3, 'veth1_vlan\x00', {0x7}, 0x2}) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket(0x10, 0x4, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 2.615546207s ago: executing program 0 (id=3317): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="440000001a00010000000000fdffffff0a000000", @ANYRES32, @ANYBLOB="0000000b14000300070000000000000200000000fdff070014000100fc01"], 0x44}}, 0x40000d0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f00000002c0)="cc", 0x1, 0x41, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x2}, 0x8) sendmmsg$inet6(r2, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000740)='y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000040), 0x8) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0e000000040000000400000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x60000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) socket$inet6_sctp(0xa, 0x801, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000080)) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="0300000000cd9189c3e100000000000000cceb000000000000", @ANYRES32=r5, @ANYBLOB="0b1b050000000000180012800b00010069703667726500000800028004001200"], 0x38}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) sendto$packet(r3, &(0x7f0000000580)='o=', 0x2, 0x4, &(0x7f0000000180)={0x11, 0x8100, r5, 0x1, 0xe9, 0x6, @local}, 0x14) socket$key(0xf, 0x3, 0x2) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 2.491901854s ago: executing program 4 (id=3318): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x40}, 0x94) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x3) (async) sendmsg$inet(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="04", 0x1}], 0x1}, 0x41) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$sock_int(r1, 0x1, 0x3c, 0x0, &(0x7f0000000480)) (async) getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000180)=0x5, &(0x7f0000000340)=0x4) (async) r2 = socket(0x1d, 0x2, 0x6) (async) r3 = socket(0x40000000015, 0x805, 0x0) getsockopt(r3, 0x114, 0x2720, 0x0, &(0x7f00000000c0)) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2400000001040102000100000000004b16000500000406000640000700000500010003000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000004) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="14ea0019296f66bbf94686000000000004000100434ba595168f0bcf6a7c1784a13046d93c20de654434a2ef50bf35827636bddb6d46c8fc5c53f30706ffb7c9d231e0fa06bd84c2420693bcda92fcf6911862c097d6b6ce0cde0a06088d09ea4c86b852754a4634cedb1c3d9c1f5600000024052124b3311fdbdd8b2f5c6babea7ee0363de94d5387175b48bb183756bb87ea5cd47af8e0951ab79afee9b09ca8323acbce9e4571043369f00b342547f380671eea576277072d613373fd94175a17e8fcfd7b23fb8f959c4173443afde6ca093bdb33"], 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0) (async) recvmsg(r6, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) (async) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000004c0), 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000170100000300000001"], 0x18}], 0x1, 0x0) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000000780), 0x0, 0x50, 0x0) (async) accept4$alg(r2, 0x0, 0x0, 0x0) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000080), 0xffffffffffffffff) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="6023f0c7920a72474dbd70000400000000000000", @ANYRESOCT=r1, @ANYRESOCT], 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x8000) (async) r9 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r9, &(0x7f0000000000)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e23, 0x6, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10001}}, 0x24) 2.439600172s ago: executing program 3 (id=3319): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000180001000000005955ee0e662d"], 0x24}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000070000000900010073797a300000000064010000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000210c001040000000000000000310010980480002801c000180080001"], 0x254}}, 0x10) sendfile(r1, r0, 0x0, 0x8000000000000000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001e00010027bd7000fcdbdf250a000000", @ANYRES32=r2, @ANYBLOB="00000800140001"], 0x30}}, 0x20000000) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000180001000000005955ee0e662d"], 0x24}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000070000000900010073797a300000000064010000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000210c001040000000000000000310010980480002801c000180080001"], 0x254}}, 0x10) (async) sendfile(r1, r0, 0x0, 0x8000000000000000) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001e00010027bd7000fcdbdf250a000000", @ANYRES32=r2, @ANYBLOB="00000800140001"], 0x30}}, 0x20000000) (async) 2.397392203s ago: executing program 0 (id=3320): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x4, 0x9, 0x0, 0x1, 0xe7030000}, {0x16, 0x0, 0x0, 0x6}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x24, 0x9}}], {{0x4, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000002e0f00"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000007c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a80016002000014004000000035c1f61c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cee0090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc", 0xd8}], 0x1}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b00)={r1, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001c80)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, 0x8, 0x0, 0x0}}, 0x10) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) syz_emit_ethernet(0x34e, &(0x7f0000000780)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00cd04", 0x318, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x27}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x5a, 0x1, 0x0, 0x0, [{0x3, 0xa, "a78c000005dc8080a2030003004003493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af0502"}, {0x0, 0x1, "000005000000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf3915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x5, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea468000000000054740a5d4901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2bce9ac946a3f0e2bc4000091394c02bcfbbb7d71138537d68e2d2c6393a9f3cc271a9ff09a48b5b303f425"}, {0xe, 0x7, "b8a3e10000a3e1100000006f00ffc0ffff00000000600000ff0bc0fe000000000000000000000000d9a0274400"/55}, {0x0, 0xc, "5e14ccb44d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d260600aa89c8f267d76ece1c9f6ae2e1eb3d8bf9c6ab2642c4808298e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c"}]}}}}}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c9f4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75055df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83766b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b556381768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225c380fac12f8205d182f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42ddd5f393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05bea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d96ee1b84bb64b14aebc6b5194c55dd6890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b07838a3ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8dc0d472672286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8455029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a82a6ef09d0ed9829dec16ab67a4f59a504e09f55ab82bbd405087a17a229a149c53ee9145500db213cb36489a10957739e481a756e65bde579bbbfb404213f661eeaaffacbcfbfd60b1a715c366da2b37ac7e9e3033f8ec04db1c2412e02ccd0617d9fb646c4897750d068c936c3558a94b05d7c65c0d458c0d70d0aa864bc1e324d3f69b1b4061627da875a4b5c2668ab0990623fe6f3b54cd1c79da4baf256f88750c18486330589473e267fa44e220cf40db662b570c2a2fbba9a34a3dd7bbd8368fe506daa62b45797d4b397905a69e58eb436c08cc78963197adb1b16ad83a1a9b420e74c6bcdf1ed0b306141a83bf1268e954ad069257fbfaa1a7ea582badc1a7f2a5b0965f3535872d85c0bc3a233a3ea85df6a8ed76f0f803d54b7bef77d8ea71621f8a78dd17c3b58c5c7476ed6191acbb949e77f7cac81c543f7751e5e1000"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000001680)={@cgroup=r6, r5, 0x2f}, 0x20) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000300)={0x8, 0x0}, 0x8) r8 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000180)=r7, 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000008c0)={@cgroup=r5, r6, 0x2f, 0x2000, 0x4, @value=r8}, 0x20) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r4, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffd1f) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000680)={0x0, 0x61, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e1406ca000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 2.375946274s ago: executing program 1 (id=3321): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="97eb01001800000000000000500000005000000002000000090000000000000e03000000010000000a0000000000000203000000000000000500000d0000fa8c99dc00000100000000000000000000000000000000000000090000000000000001000000030010"], 0x0, 0x6a, 0x0, 0x0, 0x7fffffff}, 0x28) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) ioctl$AUTOFS_IOC_READY(r1, 0x9360, 0x2) bind$bt_hci(r1, &(0x7f0000000340)={0x27}, 0x6) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000b00)=ANY=[@ANYBLOB="1c0000005a00056086816cf3347327380400008008000380"], 0x1c}], 0x1, 0x0, 0x0, 0x488c0}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000140)=ANY=[@ANYRES32], 0x20) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000001c0)=@newtfilter={0x7c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0xffff, 0x5}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x4c, 0x2, [@TCA_BASIC_POLICE={0x48, 0x4, [@TCA_POLICE_RESULT={0x8, 0x5, 0x7}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x8, 0x3, 0xffffffb6, 0x8, {0x81, 0x0, 0x81, 0xc437, 0x3, 0x5}, {0x1, 0x2, 0x6, 0x8, 0x79, 0x7}, 0x6, 0x9cf, 0x9}}]}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x404c000}, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r11) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 2.297580599s ago: executing program 2 (id=3322): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) (async) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x33601}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCRYPT={0x5, 0x7, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x20049848}, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x2c, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8800}, 0x4000808) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000023c0)=@newlink={0x38, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40810, 0x1}, [@IFLA_GROUP={0x8}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x10000}, @IFLA_TXQLEN={0x8, 0xd, 0x80}]}, 0x38}, 0x1, 0x0, 0x0, 0x240420d1}, 0x4000000) (async) r8 = socket(0x2b, 0x1, 0x1) r9 = epoll_create1(0x0) (async) close(0x3) (async) unshare(0x400) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000480)={0x68000005}) (async) r10 = openat$cgroup_procs(r6, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) (async) write$cgroup_pid(r10, &(0x7f00000000c0), 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r12 = openat$cgroup_procs(r11, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r12, &(0x7f0000000c40), 0x12) openat$cgroup_procs(r11, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) 2.1436189s ago: executing program 4 (id=3323): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0xfffffffffffffe5d, &(0x7f00000000c0)="5fd63edbfd8a4a6077fd87686f9a", 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xe69, 0x298d}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x2000c004) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xc, 0xa}, {0x0, 0x9}, {0xffff, 0x3}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x8, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x4}}, @TCA_FLOWER_KEY_MPLS_LABEL={0x8, 0x46, 0xfffffff9}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4010}, 0x20000080) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000002600), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000000300)={0x30, r4, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x40d6}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000002c0), 0xc, &(0x7f0000000540)={&(0x7f0000000680)=ANY=[@ANYBLOB="5400000066d678f660b8edc153f83f3c805d28f352c3", @ANYRES16=r5, @ANYBLOB="10002bbd7000fedbdf25210000000c000600010000000100000008000300", @ANYRES32=r6, @ANYBLOB="2c002d8008000300090000000500040000000000080003000300000005000100020000000800020001800000"], 0x54}, 0x1, 0x0, 0x0, 0x60000880}, 0x28080) unshare(0x2c060000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') r7 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x84, &(0x7f0000000340)=[@in={0x2, 0x4e21, @remote}, @in6={0xa, 0x4e20, 0x6, @dev={0xfe, 0x80, '\x00', 0x30}, 0x8001}, @in={0x2, 0x4e20, @local}, @in={0x2, 0x4e20, @local}, @in6={0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @remote}, 0x7}, @in6={0xa, 0x4e24, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffff7}]}, &(0x7f0000000280)=0x10) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x28, 0x5, 0x2, 0x70ff}, {0x20, 0x7, 0x0, 0xa56e}, {0x6, 0xfe, 0x0, 0xa1a}]}, 0x10) sendmmsg(r8, &(0x7f0000002900)=[{{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000b40)="97a797c5", 0xa797}], 0x1}}], 0x1, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000002e00010026bdf000fcdbdf2504"], 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) socket$inet_sctp(0x2, 0x5, 0x84) socket(0x2, 0x1, 0xffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="1400000015000103000000000000e7ff0b"], 0x1c}}, 0x4000000) socket$inet6_sctp(0xa, 0x0, 0x84) 2.136844935s ago: executing program 3 (id=3324): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000000), 0x4) r1 = socket$inet(0x2, 0x3, 0x8d) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x14c, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0xfffffffffffffcfa, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0xffffffff, 0x401, 0xffff, 0x2, 0xc, 0xe, 0x24}}]}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x8040}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WDS_PEER(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, r4, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="08b552b01473"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="d6aeb4cfb6fe"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="0457b775e141"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008010}, 0x5) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000180)=ANY=[@ANYRESDEC=r1], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000200)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000400)=ANY=[@ANYBLOB="44000000100003052dbd702000000000000000004b1ad5e9092f4986cd37fcc6fe7833290ea3a98b4d56178d4ce385823b793fb818b4362056d1091809df8f46f6bd84a378635ffd594707b1993330b27d47b089c4566b65121e0e37461327963976ad8b9fbb9fc739dba2f4ef08ccd38bc74d58cf8f22358ce9c4d8bfa477ce0e1a645b35e431367b3257807058c9214c809b9e85e2faa92135adfe7d94deebe1fc2bda70a0ac5f899d2b17d945623fe8d6a20283d4c18b1bd8e25252a8b4ea8c858dcfba499fdd94d9c5d775b0ba5eb2046f7586f4b9c00ceb5d486d255d3bcaee9e1e8550dde2bd176d4e2bda18e42b20", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=0x0, @ANYBLOB], 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@gettfilter={0x3c, 0x2e, 0x100, 0x70bc25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x10, 0xfff1}, {0xe, 0xf}, {0x8, 0xffff}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0xc0e}]}, 0x3c}}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000000)={@remote, 0x35, r6}) r9 = socket(0xa, 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) r11 = socket$inet(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r11, 0x0, 0x487, 0x0, &(0x7f00000001c0)) r12 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r12, 0x84, 0x9, &(0x7f0000000540)={r10, @in6={{0xa, 0x4e23, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1053}}, 0x80000000, 0x48, 0x1c00000, 0x2c4a, 0x8a, 0x89c3, 0x7}, 0x9c) ioctl(r7, 0x8916, &(0x7f0000000000)) ioctl(r9, 0x8936, &(0x7f0000000000)) 1.972772095s ago: executing program 0 (id=3325): ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wg0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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", @ANYBLOB="a5ea36555e204ee73119ad384219bc99178b68ca94927c8b85cece90c1de65417814964549a560394220707b247d6a571f2059710afbc3e5e7f7ac19aca435b7f4518eb6412e6cb53a73ffacf0ae4a689a0452607c76c2c4737e981fb60ca9b01eeb72eab37b277db20d83c152b43aa1b482f181f8f0ca2a7842f05f93dd6ada0539065f9ecd6465a112df4047284740443ba8b774c82605aba52949e7703dfe273480aa", @ANYRES64=0x0, @ANYRES8=r0], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, @fallback=0x28}, 0x94) 1.884022472s ago: executing program 2 (id=3326): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001800090000000000010000001c140000fe0000010000000008000100000001"], 0x24}}, 0x0) ioctl$OCFS2_IOC_UNRESVSP64(r0, 0x4030582b, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x6, 0x1ff, 0x7}) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) socket$kcm(0x2, 0x3, 0x2) (async) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x891b, &(0x7f0000000040)={'wlan1\x00', @random="0200ac7f7f00"}) (async) ioctl$SIOCSIFHWADDR(r3, 0x891b, &(0x7f0000000040)={'wlan1\x00', @random="0200ac7f7f00"}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000004dc0)={0x6, 0x14, &(0x7f0000000a80)=ANY=[@ANYBLOB="1800000001040000000000004000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000183a0000040000000000000000000040032d0300010001001861000001000000000000000e000000bf91000000000000b702000002830000008500000085000000b70000000004f2ae71aba0fb2441bb9c782039b1a040c477b3eeff1e9402666d0c67e374689600000000538689283cc145cea8b542b82293d17666bdf114bea04122bedfe93a84fd5fa4a9e8acc3c7548f0826c4c5d9d477450a55dbbc1fb31f49d36660e60fecd9441bfd6ab231e88f6b5b42c5f165b50c03754d6c00"/258], &(0x7f0000004b80)='syzkaller\x00', 0x0, 0xed, &(0x7f0000004bc0)=""/237, 0x41100, 0x23, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4b0, 0x158, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3e0, 0xffffffff, 0xffffffff, 0x3e0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x0, 0x0, 0xff], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x138, 0x158, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0x2}, {0x7f}], 0x2, 0x2}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [0x0, 0xffffffff], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x5, 0x41, 0x0, 0x2, 0x1800, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x510) (async) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4b0, 0x158, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3e0, 0xffffffff, 0xffffffff, 0x3e0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x0, 0x0, 0xff], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x138, 0x158, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0x2}, {0x7f}], 0x2, 0x2}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [0x0, 0xffffffff], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x5, 0x41, 0x0, 0x2, 0x1800, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x510) 1.827071815s ago: executing program 0 (id=3327): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {0x2}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x54}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x8, [@var={0x5, 0x0, 0x0, 0xe, 0x4004, 0x1}]}, {0x0, [0x5f, 0x30, 0x2e, 0x2e, 0x5f, 0x5f]}}, 0x0, 0x30, 0x0, 0x1, 0x7}, 0x28) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISCONNECT(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x2, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x41}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c0c4}, 0x20040044) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x240}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, 0x0, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3d4d}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @loopback}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8014}, 0x20000000) 1.764955867s ago: executing program 3 (id=3328): r0 = socket$unix(0x1, 0x1, 0x0) close(0x3) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x10000) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) shutdown(r0, 0x0) connect$unix(r0, &(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 1.639497415s ago: executing program 3 (id=3329): r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000017c00000400c2800c0001800600060008060000971b02"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x48, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x51483}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x3}, @IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0x6a0000}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @remote}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r3, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440)=r12, 0x4) r13 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r13, 0x29, 0x40, &(0x7f0000001a80)=@raw={'raw\x00', 0x8, 0x3, 0x12d8, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1208, 0xffffffff, 0xffffffff, 0x1208, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x62], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {0xff}, 0x0, 0xfd}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x7fff, 0x30, 0x1}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [0x0, 0x0, 0xff000000], [], 'wg1\x00', 'ip6gretap0\x00', {}, {}, 0x3b, 0x0, 0x0, 0x3}, 0x0, 0x1108, 0x1138, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.cpu/syz0\x00', 0x2, {0x8}}}, @common=@srh={{0x30}, {0x1, 0x4, 0x7, 0x3, 0x8001, 0x4000, 0x3004}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0x0, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x1338) 238.764554ms ago: executing program 2 (id=3330): r0 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)={'gre0\x00', 0x0, 0x10, 0x40, 0x9, 0xd65a, {{0x18, 0x4, 0x2, 0x2, 0x60, 0x64, 0x0, 0x3, 0x2f, 0x0, @broadcast, @loopback, {[@cipso={0x86, 0x3a, 0x3, [{0x4, 0x2}, {0x0, 0x12, "bf5c63fe6b95033d86b2ceeffb0fccbb"}, {0x0, 0x11, "4e570715ccc5dcb38ecb49ec01cdba"}, {0x7, 0xf, "6cc60289842266151a18c81d23"}]}, @ssrr={0x89, 0xf, 0x24, [@remote, @remote, @broadcast]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'tunl0\x00', &(0x7f00000000c0)={'syztnl2\x00', r1, 0x700, 0x10, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x60, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x2, 0x0}}}}}) 172.544552ms ago: executing program 0 (id=3331): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000080)="2e00000010008188040f46ecdb4cb9cca7480ef431000000e3bd6efb010509000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x8000) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f00000000c0)=""/239) 172.073893ms ago: executing program 4 (id=3332): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xce) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, 0x0, 0x0) r1 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) ioctl$BTRFS_IOC_INO_PATHS(r1, 0xc0389423, &(0x7f0000000040)={0x6, 0x0, [0x1, 0x4, 0x9, 0x100000001]}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_AF_SPEC={0x44, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8, 0x6, 0x0, 0x0, 0x8}, {0x8, 0x1, 0x0, 0x0, 0x9}, {0x8, 0x2, 0x0, 0x0, 0x4}, {0x8, 0x3, 0x0, 0x0, 0xffff}]}}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x94}, 0x1, 0x0, 0x0, 0x840}, 0x0) 111.911112ms ago: executing program 2 (id=3333): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r1 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080)=0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0xc) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000140)=':\x00', 0x24000, &(0x7f0000000180)={@_ha_fsid={[0x0, 0x6]}, {0x7, 0x59, 0x7, 0xc1}}, 0x6, &(0x7f00000001c0), &(0x7f0000000200)=0xd}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000280)=0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000002c0)=0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x7c, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x4a}, @void, @val={0xc, 0x99, {0x0, 0x2a}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0xb55e, 0x3b}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r0}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r1}, @NL80211_ATTR_PID={0x8, 0x52, r2}, @NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_PID={0x8, 0x52, r3}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r4}, @NL80211_ATTR_PID={0x8, 0x52, r5}, @NL80211_ATTR_PID={0x8, 0x52, r6}]}, 0x7c}}, 0x800) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r4, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f0000000440)=[0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0], 0x0, 0x5a, &(0x7f00000004c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0xad, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000780)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000013c0)={&(0x7f00000007c0)={0xbf4, r9, 0x100, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x7, 0x1a}}}}, [@NL80211_ATTR_BEACON_HEAD={0x214, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x6}, @device_a, @device_a, @random="067245c431c6", {0x2, 0xbb8}}, 0x5, @random=0x7, 0x120, @val={0x0, 0x12, @random="4ab11f45532522427481f750daedd6b075dd"}, @void, @void, @val={0x4, 0x6, {0x3, 0x80, 0x3, 0x7}}, @val={0x6, 0x2, 0x4}, @void, @val={0x25, 0x3, {0x0, 0x8, 0x6}}, @val={0x2a, 0x1, {0x1, 0x1}}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x64, 0x3, 0x19, 0x5}}, [{0xdd, 0x8a, "68f5e4e71e2b2bcb1cc68fc819350efe1f8668ebd92bc044f4b9db0f8bb0a521fc6acf20542495bfc391c1e7a303150f52737c21028b88ee1c515e3bb5e1f54a7fd0c4b70615cba8924a8e9d0510194565de10c28400f706c74687aa0515aedec3ba0149a017af0cbaf333d747dca3f87d9d6eeff6f424e0679b51cc219905f9c90cc5a8463dbc92a7e0"}, {0xdd, 0x45, "e7990103f19a399b8ef06c264af2cbf208f4f04cedf54300347e841bd69c543222ea5881af4d012fd4bfaaf820f2167bbacfa8557bbcab7eeaa9ffa7ab744261aa6a1fb160"}, {0xdd, 0x36, "5ab803da2b3cb2cff0044f698c91e9fe9da84face5dec7b0005d297c72a0f47569c1e8a280c4d8bf0901d5f511b64cd1ac762e9c7190"}, {0xdd, 0xa7, "d84781322505312c1913945c6363cfaf264c72367e8a4e7e2a52006d76127a5b2c551ca4a214df8431f285be3ed7c9defaf72e1a06034bd8d6edce821d5c57286de5bdb3f1ff9dab52ff1fce67bc345529ed28aa7f5fd803de1a252732b3a96b63782ebe1cf2a7b6c31340dac2ccf3c62e78afc4986c22afc10c5e6925a74efe71d737b6adb92af63ecfac8b62a65e8e2cf77077058809d3a585efc1be1f9f90780bdff266f814"}]}}, @NL80211_ATTR_IE_ASSOC_RESP={0xa, 0x80, [@ext_channel_switch={0x3c, 0x4, {0x0, 0xf8, 0x99, 0x31}}]}, @NL80211_ATTR_PROBE_RESP={0x8d0, 0x91, "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"}, @NL80211_ATTR_IE={0x94, 0x2a, [@challenge={0x10, 0x1, 0x76}, @ibss={0x6, 0x2, 0x40}, @channel_switch={0x25, 0x3, {0x1, 0x6c, 0xe}}, @random_vendor={0xdd, 0x82, "37ca2c1603258cfa38c9bbc1696c84dfe0b8dd9c35f9bbd70799ce9ad51534f8efab1c64106d353f7b3d1fb86e42202b155fef6a54b856463b3dada41dc761efd08f79cf4b40931de0bed33ed12b2b487072d7361a7b6724e23f6fc955c8e8c8c60ddff6ece32019fcf8a7fe8dbf20e2a80bfa674710b9165e058c78bf0097e9df40"}]}, @NL80211_ATTR_BEACON_TAIL={0x46, 0xf, [@peer_mgmt={0x75, 0x14, {0x0, 0x5, @void, @void, @val="a6da4dd1dee707307d5cb5c38acb1c73"}}, @perr={0x84, 0x22, {0x9, 0x2, [{{}, @device_b, 0xfffffff7, @void, 0x37}, {{0x0, 0x1}, @device_b, 0x9, @value, 0x29}]}}, @mesh_chsw={0x76, 0x6, {0x81, 0x2, 0x1d, 0x401}}]}]}, 0xbf4}, 0x1, 0x0, 0x0, 0x400}, 0x8000) connect$packet(r4, &(0x7f0000001440)={0x11, 0x1c, r7, 0x1, 0xc, 0x6, @random="6a9ee3c1be1d"}, 0x14) r11 = socket$xdp(0x2c, 0x3, 0x0) sendmsg(r11, &(0x7f0000002b00)={&(0x7f0000001480)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x4e22, @multicast1}, 0x4, 0x4, 0x4, 0x1}}, 0x80, &(0x7f0000001800)=[{&(0x7f0000001500)="5e5ec09690ca6df1cceb4a044b40ab0ff924fb487b896ef964603cf97be7aa2c3e213d264e830875e817ba762cd52a076ceef5988c77ee02cdd0f31afdb943361caea6d6cdf45f2869baae4147576ec7bcc18ab7f4823aae68f3ea0ec1070c69c47382f2720655e32d3b3a318c0dccc1adff7d7163ec7b22e530669e7a23acad610fff30579ea80e995a8d7d1c8f9e57d7cd0649461ee0ffa05e99dafe1d08d86dee3d496e4af8f9e0bc6f4a59da5c07335f4eda1a79ca9fdef482022cba56812c8a0f9adcfbf8226b9a138b73", 0xcd}, {&(0x7f0000001600)="9f285a5e53196694d0ba0f424da6232d4ecb92fd447430f44f220718a3cba31b1349bae2f96e813a21b93b959a9df31262759fd8d4a2a759e1e017d3152b8bad3ba07fecabefbad7458441903f88ee4f2cc086eb180b023e44a5f459d939bbe9fe694c8597c15b3e8f647fdf586b45f35d35d6bd5e9957e4efb0f10c17f56041c4dcce887ed8eec7707a73c59f4de3e786bc5973973537450c3a1467cccf0202e7a0152f028aa673f47beefe9d2067d37126a657be34cb622a16aec2533eae77cad45892dddf976c92c76408aad404342fd36813d1b13d50dab2eb199743", 0xde}, {&(0x7f0000001700)="4b4532638f209ee2c6045343f62b0ee2f9f4d0630f8d14f91362dcf3fb14962583621181a352c82a76e3a74c3b1d0d04d1aec07457db808f416ac1f60ca31d3d2a698997e2e82f8173f215fcecee631899b2eb8db9c44b3d80a7c89936df2cc4e174bd80de0d453ca39e358f412361719c", 0x71}, {&(0x7f0000001780)="a091fe8985ff6e43d9941fe8c3ce2feef756ffb86210f64133e398200182022935ad1cbe4df78304d0f8a55e3c1ace48536ac9c78349df780cc2bea085725e53ebcabab2ba7ebe054a5cdd0c8205d4fc062f9ca648338f4e77fb412424c764b30aff8e8baff11ad3c827d4c267bf32cfad3698331d31ab7b9774cb2570", 0x7d}], 0x4, &(0x7f0000001840)=[{0xd8, 0xc1a36b08c851b286, 0xe, "f6b98b5d950b5fa543c4c0ad20a4adb3f2f33eb839b8734eda1df791610fb7d80e5f6a57bdde3273455fb1dc00a0a975a625b3b9b02ab2eb22b8f3ff37ea92f5da0b1af5de55567cdf291b68dfffe4100b7b73d8d490dcc9ecf0bd4cf059f422c36674cd655759a33fc083d483f0b70cb6d47b51b9790179e0502f1169d91fc28acbfb6d34e33562b898c84d146606e2ea7bc012a41eeba522bf7bb4c1e54ef7e2dae47b71ab6fced5fae29221f8e25a1afe14ee70efac4caade565f0b03b9fe5e"}, {0x1010, 0x118, 0x9f25, "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"}, {0xc0, 0x0, 0x4, "d3514c20718297f5857be65d30a26f80966a5d624482126e3f8076433137d10525c2b479f265e07034b9bad8a4351d8872642aa05e3cb6c411b31febdf3d5b831304980a13498e2731882b17f3fa3402bf7e5697d96c2e82422becd5d83d35be5540aaaa033b3691dd49910402fee28ca0f499257cb60c893a057890fd5038355f548f864bed73ab2b865a6bef431c745bdeffe6a45933680d6001a099f3a54a7fe9d84459153fd8ead98e3d"}, {0x108, 0x10d, 0x9, "43e7bc977e721182786fc894ebadc0e3eff829ddbef12bcba38b6bb13b923248ce4b4665129ba717efa57dc96ecc35ea33b1fd74112ccca86e13b1887f38fee271421878be7132503e15ad8656265afa31e2997e27453b2bcc5a9578b6e01b0d9cd14f086aac9848f9bf9f890ede58286bc7e7d396646b3c7bb7a7d44b21a355e04fdf6c9afbba20a45d081c552682879d969fe67b65fae718d870e280dac9d73a32cc35c512dc30f6732fbbc1bf0386e345a9a893fd3ce2144094c9f555f605406b27cf86f8406fddb2a6c870fd84449cf6741e7e59a526854031a6693b9d4e5d0ca2199cd488f2c42052f2a5e03aed1e"}], 0x12b0}, 0x20048040) r12 = socket(0x0, 0x1, 0x1) sendmsg$IPSET_CMD_ADD(r12, &(0x7f0000002c00)={&(0x7f0000002b40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002bc0)={&(0x7f0000002b80)={0x1c, 0x9, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r13 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r13, 0x8933, &(0x7f0000002c40)) ioctl$sock_ifreq(r12, 0x8949, 0xfffffffffffffffe) ioctl$sock_kcm_SIOCKCMCLONE(r12, 0x89e2, &(0x7f0000002c80)={r13}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r14, &(0x7f0000002dc0)={&(0x7f0000002cc0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002d80)={&(0x7f0000002d00)={0x74, r9, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xc, 0x2c}}}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @random="25e2a72a2d5e"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x65}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_PMKID={0x14, 0x55, "9ea8897e4d687061575203a0af14e807"}, @NL80211_ATTR_PMKID={0x14, 0x55, "610926cd7f1e8a01edd46a95db9b09ac"}]}, 0x74}, 0x1, 0x0, 0x0, 0x8001}, 0x44) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r12, &(0x7f0000002ec0)={&(0x7f0000002e00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002e80)={&(0x7f0000002e40)={0x30, 0x0, 0x1, 0x70bd2c, 0x25dfdbff, {{}, {}, {0x14, 0x18, {0x7, @bearer=@udp='udp:syz1\x00'}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000050}, 0x4000) unshare(0x10020000) getsockopt$TIPC_CONN_TIMEOUT(r12, 0x10f, 0x82, &(0x7f0000002f00), &(0x7f0000002f40)=0x4) r15 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000002fc0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(r15, &(0x7f0000003080)={&(0x7f0000002f80), 0xc, &(0x7f0000003040)={&(0x7f0000003000)={0x24, r16, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010100}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20040004) unshare(0x40000200) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000030c0)=r8, 0x4) 110.645381ms ago: executing program 1 (id=3334): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="c3dc3e518f472dc21cf24e1e25288ba51b000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x19, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000000700000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000040000008500000082000000bf91000000000020b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0xe80, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000010880)=@base={0xa, 0x4, 0x8, 0xc}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xd, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000001000500050007000000000008000900030000001400200040000000000000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r7, r6}, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)={0x34, r5, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r10}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x926}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0xd}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv4_newroute={0x2c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x25dfdbfe, {0x2, 0x20, 0x10, 0x0, 0xfd, 0x4, 0xfe, 0x2, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x1}, @RTA_PREFSRC={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x27}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4a044}, 0x20004090) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r14 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000500)={0x0, 0x22, "69d18a99e47f65bb5f5392f6b9cd2908ecaba17b4c564265de70ca26b74f7e5b7c2f"}, &(0x7f0000000540)=0x2a) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000580)=@sack_info={r15, 0xfffffc00, 0x4}, 0xc) connect$inet(r14, &(0x7f0000003580)={0x2, 0x0, @dev}, 0x10) setsockopt$sock_int(r14, 0x1, 0x20, &(0x7f0000000100)=0x9, 0x4) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x635f, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r13, {0x0, 0xc}, {0xa, 0xb}, {0xa, 0xb}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x405c071}, 0x400c840) sendmsg$nl_route_sched(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r13, {0xb, 0xd}, {0x0, 0xc}, {0xe}}}, 0x24}}, 0x0) 24.613592ms ago: executing program 4 (id=3335): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000001040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x118, 0xc, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x104, 0x3, 0x0, 0x1, [{0x100, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x50, 0x7, 0x0, 0x1, @byteorder={{0xe}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0x59}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0xc8}, @NFTA_BYTEORDER_OP={0x8}, @NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_BYTEORDER_OP={0x8}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0x28}, @NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0x3}]}}}, @NFTA_SET_ELEM_EXPRESSIONS={0xac, 0xb, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_FLAGS={0x8}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x83}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x4}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x36}]}}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}, {0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}, {0x30, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x11}]}}}, {0x10, 0x1, 0x0, 0x1, @objref={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}]}]}]}]}, @NFT_MSG_DELFLOWTABLE={0x20c, 0x18, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x94, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_team\x00'}, {0x14, 0x1, 'syzkaller1\x00'}, {0x14, 0x1, 'macvtap0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'batadv0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x120, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xf55}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_bridge\x00'}, {0x14, 0x1, 'ip6_vti0\x00'}, {0x14}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'netpci0\x00'}, {0x14, 0x1, 'batadv_slave_0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'pim6reg0\x00'}, {0x14, 0x1, 'team_slave_0\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}, {0x14, 0x1, 'wg0\x00'}, {0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'wlan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWTABLE={0x40, 0x0, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELCHAIN={0x4c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_CHAIN_USERDATA={0x30, 0xc, "d74280f852630d59af038d7d0bff9c2a06624d6451b873d99efe692d40088f7e399e69be6b4bf32e99f5a7b7"}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELFLOWTABLE={0x280, 0x18, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_FLOWTABLE_HOOK={0x234, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0xb8, 0x3, 0x0, 0x1, [{0x14, 0x1, 'virt_wifi0\x00'}, {0x14, 0x1, 'hsr0\x00'}, {0x14, 0x1, 'dvmrp1\x00'}, {0x14, 0x1, 'ip6tnl0\x00'}, {0x14, 0x1, 'pimreg0\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'pimreg\x00'}, {0x14, 0x1, 'veth1\x00'}, {0x14, 0x1, 'veth0_to_hsr\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6gretap0\x00'}, {0x14, 0x1, 'veth1_to_bond\x00'}, {0x14, 0x1, 'batadv_slave_0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7fff}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0xcc, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1\x00'}, {0x14, 0x1, 'veth0_to_hsr\x00'}, {0x14, 0x1, 'vlan1\x00'}, {0x14, 0x1, 'dvmrp0\x00'}, {0x14, 0x1, 'syz_tun\x00'}, {0x14, 0x1, 'veth0_to_bond\x00'}, {0x14, 0x1, 'veth1_macvtap\x00'}, {0x14, 0x1, 'geneve1\x00'}, {0x14, 0x1, 'pim6reg0\x00'}, {0x14, 0x1, 'vlan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'batadv_slave_1\x00'}, {0x14, 0x1, 'gretap0\x00'}, {0x14, 0x1, 'wg0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_FLOWTABLE_HOOK_DEVS={0x4}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x1}, @NFT_OBJECT_LIMIT=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x678}, 0x1, 0x0, 0x0, 0x4801}, 0x4000084) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000004c0)="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", 0x142}, {&(0x7f0000000d00)="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", 0x33f}], 0x2}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x100000}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a9}, 0x0, 0x0) 0s ago: executing program 3 (id=3336): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000900)=ANY=[@ANYBLOB="77000000f228ecc89797d4f2eeac98298483a12e7aca9620b93c2c317f974551f93469bc436432fc5fad74a47c307af5a12cfe5dc488cffdf979ce55eab91776a5426c371bb357cf01b4a98376f24111cfee3c868c5ac04b14da35bbb15ed9e4785739bbe73fc6f22e147a70774523a4214cd1005923e5094f9bd057b802f52d62c47bc83e5032d2757ebfc8ac273980c5cc19596c39e0bdd03fe7acdc65288896", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="000000000100000077b59df4a9"], 0x80}}, 0x0) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x16, 0x27, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff3c, 0x0, 0x0, 0x0, 0xe}, [@map_fd={0x18, 0x2}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x6}, @tail_call, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}]}, &(0x7f0000000080)='GPL\x00', 0x5, 0x7e, &(0x7f0000000140)=""/126, 0x41000, 0x8, '\x00', r1, @fallback=0x29, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x56, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x4, 0xc, 0x2, 0xfffffffc}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x0, &(0x7f0000000380)=[{0x5, 0x5, 0x2, 0x8}, {0x4, 0x5, 0x9, 0x2}, {0x4, 0x1, 0x3, 0x2}, {0x3, 0x3, 0x5, 0x3}], 0x10, 0x10000}, 0x94) ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, &(0x7f0000000880)={0x1, 0x2, 0x1000, 0x1c, &(0x7f00000003c0)="62c9271b0bd460863d788feb5033a419a0d3d84c8cdee617db4aa972", 0x63, 0x0, &(0x7f0000000800)="1a823371660e2d16f71db9d389291d34cc3886bde562b2aa70cc86bf49154da58cb37dd8364c427c8f49201f55f12c57c6fa23a41aa1125486c83620ea92c500c1f199dca4723235f428c3847104072dd359730b0d79ca9b927dfd5e9eed3488f51eb5"}) (async) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000000)=0x1, 0x4) (async) r3 = socket$alg(0x26, 0x5, 0x0) (async) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async) r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) (async) ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, &(0x7f0000000a00)={r5, r5, 0x8, 0x0, &(0x7f00000000c0), 0x7, 0x7, 0x5, 0x1, 0x60b, 0x3, 0x2, 'syz0\x00'}) (async) setsockopt$bt_BT_SECURITY(r5, 0x112, 0x4, &(0x7f0000000000)={0x1, 0x2}, 0x2) (async) setsockopt$inet6_int(r4, 0x29, 0xb, &(0x7f0000000040)=0x8, 0x4) (async) recvmmsg(r4, &(0x7f0000001bc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000ec0)=""/232, 0xe8}, 0x101}], 0x1, 0x3, 0x0) (async) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) (async) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) (async) r7 = socket(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_ADDRFORM(r7, 0x3a, 0x1, 0x0, 0x0) (async) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r8 = accept4(r3, 0x0, 0x0, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000003b80), r9) sendmsg$NFC_CMD_DISABLE_SE(r9, &(0x7f0000003c80)={0x0, 0x0, &(0x7f0000003c40)={&(0x7f0000003c00)={0x14, r10, 0x1, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4008011}, 0x8) (async) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) (async) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) kernel console output (not intermixed with test programs): 787] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 379.333291][T15633] netlink: 43 bytes leftover after parsing attributes in process `syz.3.2504'. [ 379.362524][T15634] netlink: 43 bytes leftover after parsing attributes in process `syz.3.2504'. [ 379.374070][ T7792] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 379.395283][T15633] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2504'. [ 379.440877][T15641] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2506'. [ 379.471279][T15634] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2504'. [ 379.486406][T15642] team0: Device gtp2 is of different type [ 379.503995][ T7794] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 379.634158][ T7794] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 379.754933][T15655] nbd9: detected capacity change from 0 to 63 [ 379.765421][ T5837] block nbd9: Receive control failed (result -104) [ 379.785042][T15620] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 379.958475][T15668] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2514'. [ 379.980369][T15668] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2514'. [ 380.000972][T15668] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2514'. [ 380.098802][T15671] ±ÿ speed is unknown, defaulting to 1000 [ 380.187847][T15677] netlink: 'syz.0.2516': attribute type 7 has an invalid length. [ 380.310346][T15682] ±ÿ speed is unknown, defaulting to 1000 [ 380.580987][T15697] ip6gretap0: entered promiscuous mode [ 380.612729][T15697] syz_tun: entered promiscuous mode [ 380.634774][T15697] debugfs: 'hsr1' already exists in 'hsr' [ 380.660939][T15697] Cannot create hsr debugfs directory [ 380.681910][T15702] netlink: 'syz.3.2523': attribute type 11 has an invalid length. [ 380.683347][T15697] hsr1: Slave A (ip6gretap0) is not up; please bring it up to get a fully working HSR network [ 380.692183][T15702] netlink: 'syz.3.2523': attribute type 11 has an invalid length. [ 380.711049][T15697] hsr1: Slave B (syz_tun) is not up; please bring it up to get a fully working HSR network [ 380.875946][T15707] ksmbd: Unknown IPC event: 1, ignore. [ 381.017030][ T5837] Bluetooth: hci2: command 0x0406 tx timeout [ 381.432135][T15742] geneve2: entered promiscuous mode [ 381.445557][T15742] geneve2: entered allmulticast mode [ 381.461625][ T7794] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 381.481264][ T7794] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 381.491563][ T7794] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 381.508120][ T7794] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 381.668226][T15756] netlink: 'syz.4.2541': attribute type 12 has an invalid length. [ 381.885959][T15772] netlink: 'syz.4.2546': attribute type 1 has an invalid length. [ 381.934791][T15768] ±ÿ speed is unknown, defaulting to 1000 [ 382.034744][T15777] block nbd10: server does not support multiple connections per device. [ 382.053483][T15777] block nbd10: shutting down sockets [ 382.124688][T15788] syzkaller1: left promiscuous mode [ 382.135096][T15788] syzkaller1: left allmulticast mode [ 382.461101][T15804] netlink: 'syz.3.2555': attribute type 1 has an invalid length. [ 382.547721][T15804] bond15: entered promiscuous mode [ 382.578775][T15804] 8021q: adding VLAN 0 to HW filter on device bond15 [ 382.597567][T15814] IPv6: Can't replace route, no match found [ 382.606671][T15814] IPv6: Can't replace route, no match found [ 382.622323][T15809] 8021q: adding VLAN 0 to HW filter on device bond15 [ 382.630033][T15809] bond15: (slave wireguard0): The slave device specified does not support setting the MAC address [ 382.644216][T15809] bond15: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 382.658793][T15804] netlink: 'syz.3.2555': attribute type 58 has an invalid length. [ 382.669071][T15809] bond15: (slave wireguard0): making interface the new active one [ 382.677488][T15809] wireguard0: entered promiscuous mode [ 382.685147][T15809] bond15: (slave wireguard0): Enslaving as an active interface with an up link [ 382.695148][T15788] syzkaller1: entered promiscuous mode [ 382.702168][T15788] syzkaller1: entered allmulticast mode [ 382.726553][T15814] bond15: (slave wireguard1): The slave device specified does not support setting the MAC address [ 382.742965][T15814] bond15: (slave wireguard1): Enslaving as a backup interface with an up link [ 382.795138][T15825] block nbd10: server does not support multiple connections per device. [ 382.807664][T15825] block nbd10: shutting down sockets [ 382.820156][T15830] xt_hashlimit: size too large, truncated to 1048576 [ 382.850741][T15830] xt_hashlimit: overflow, try lower: 0/0 [ 383.108308][T15842] veth1_macvtap: renamed from veth0_vlan [ 383.297646][T15852] pim6reg: entered allmulticast mode [ 383.309026][T15859] nbd: must specify at least one socket [ 383.401873][T15864] syz_tun: Device is already in use. [ 383.420577][T15865] pim6reg: left allmulticast mode [ 383.564218][T15873] SET target dimension over the limit! [ 383.575508][ T7795] net_ratelimit: 25 callbacks suppressed [ 383.575531][ T7795] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 383.725785][ T7795] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 383.733831][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5230 ms [ 383.741889][ C0] lec:lec_tx_timeout: lec0 [ 383.867666][ T7792] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 384.003950][ T7792] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 384.144095][ T7794] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 384.185970][T15909] __nla_validate_parse: 19 callbacks suppressed [ 384.185990][T15909] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2584'. [ 384.255774][ T7792] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 384.384447][ T7795] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 384.465172][T15924] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2585'. [ 384.503939][T15924] netlink: 'syz.3.2585': attribute type 7 has an invalid length. [ 384.511775][T15924] netlink: 'syz.3.2585': attribute type 8 has an invalid length. [ 384.524749][ T7786] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 384.543957][T15924] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2585'. [ 384.631400][T15891] netlink: 'syz.2.2579': attribute type 1 has an invalid length. [ 384.702116][T15928] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2586'. [ 384.711181][T15928] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2586'. [ 384.713963][ T7787] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 384.913503][ T5489] veth1_macvtap: left promiscuous mode [ 384.981816][ T5489] veth1_macvtap: entered promiscuous mode [ 384.997342][T15952] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2593'. [ 385.005155][T15945] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2593'. [ 385.034351][ T7786] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 385.100509][T15953] syzkaller1: left promiscuous mode [ 385.106067][T15953] syzkaller1: left allmulticast mode [ 385.117348][T15945] syzkaller0: entered promiscuous mode [ 385.122841][T15945] syzkaller0: entered allmulticast mode [ 385.220700][T15967] xt_CT: You must specify a L4 protocol and not use inversions on it [ 385.386750][T15975] netlink: 'syz.1.2596': attribute type 3 has an invalid length. [ 385.410647][T15977] netlink: 'syz.2.2597': attribute type 12 has an invalid length. [ 385.444157][T15977] netlink: 'syz.2.2597': attribute type 29 has an invalid length. [ 385.474202][T15977] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2597'. [ 385.500864][T15977] netlink: 'syz.2.2597': attribute type 2 has an invalid length. [ 385.514261][T15977] netlink: 'syz.2.2597': attribute type 3 has an invalid length. [ 385.522443][T15977] netlink: 11 bytes leftover after parsing attributes in process `syz.2.2597'. [ 385.606643][T15980] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2598'. [ 385.639660][T15986] netlink: 'syz.4.2599': attribute type 1 has an invalid length. [ 385.664514][T15987] netlink: 'syz.3.2601': attribute type 12 has an invalid length. [ 385.732357][T15986] bond9: entered promiscuous mode [ 385.738519][T15986] 8021q: adding VLAN 0 to HW filter on device bond9 [ 385.832879][T15986] vlan5: entered allmulticast mode [ 385.874189][T15986] bond9: entered allmulticast mode [ 385.882028][ T7795] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 385.907107][ T7795] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 385.923275][ T7795] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 385.957433][ T7795] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 386.215258][ T9668] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 386.452114][T16041] 8021q: adding VLAN 0 to HW filter on device bond11 [ 386.499432][T16044] bond11: (slave veth13): Enslaving as an active interface with a down link [ 386.976313][T16069] team1: entered promiscuous mode [ 386.998515][T16069] team1: entered allmulticast mode [ 387.004883][T16069] 8021q: adding VLAN 0 to HW filter on device team1 [ 387.062029][T16074] team2: entered promiscuous mode [ 387.080151][T16074] team2: entered allmulticast mode [ 387.099991][T16074] 8021q: adding VLAN 0 to HW filter on device team2 [ 387.187401][ T9668] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 387.491744][T16109] 8021q: adding VLAN 0 to HW filter on device bond14 [ 387.688770][ T7792] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 387.707914][ T7792] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 387.757395][ T7792] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 387.782651][ T7792] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 387.974869][T16145] bond15: entered promiscuous mode [ 387.980605][T16145] 8021q: adding VLAN 0 to HW filter on device bond15 [ 388.041595][T16145] bond15: (slave bridge10): making interface the new active one [ 388.049939][T16145] bridge10: entered promiscuous mode [ 388.059841][T16145] bond15: (slave bridge10): Enslaving as an active interface with an up link [ 388.248920][T16149] batman_adv: batadv0: Adding interface: ipvlan0 [ 388.276788][T16149] batman_adv: batadv0: The MTU of interface ipvlan0 is too small (1536) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1568 would solve the problem. [ 388.386936][T16149] batman_adv: batadv0: Not using interface ipvlan0 (retrying later): interface not active [ 388.593965][ T7496] net_ratelimit: 20 callbacks suppressed [ 388.593986][ T7496] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 388.623017][T16185] sch_tbf: burst 0 is lower than device tunl0 mtu (68) ! [ 388.729731][ T7496] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 388.787020][ T7789] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 388.810072][ T7789] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 388.840943][ T7789] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 388.860155][ T7789] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 388.894467][ T7789] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 389.043915][ T7795] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 389.163884][ T7789] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 389.274143][ T7496] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 389.383925][ T7496] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 389.504448][ T7794] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 389.556939][T16235] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 389.567621][T16235] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.625153][ T7794] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 389.670651][T16235] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 389.680985][T16235] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.734512][ T7792] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 389.765472][T16245] __nla_validate_parse: 24 callbacks suppressed [ 389.765493][T16245] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2668'. [ 389.789535][T16235] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 389.806449][T16235] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.831739][T16245] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2668'. [ 389.901272][T16235] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 389.913975][T16235] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.034606][T16250] validate_nla: 5 callbacks suppressed [ 390.034625][T16250] netlink: 'syz.4.2669': attribute type 1 has an invalid length. [ 390.036564][T16251] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 390.075130][T16250] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 390.171120][ T7792] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 390.194481][ T7792] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.204988][T16256] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2670'. [ 390.222661][ T7792] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 390.232287][ T7792] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.259030][ T7792] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 390.288720][ T7792] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.359811][T16259] netlink: 'syz.0.2671': attribute type 15 has an invalid length. [ 390.396144][ T7795] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 390.419027][ T7795] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.436656][T16272] x_tables: ip6_tables: udplite match: only valid for protocol 136 [ 390.505165][T16281] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 390.813486][T16313] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2685'. [ 390.841357][T16315] dvmrp1: entered allmulticast mode [ 390.850433][T16313] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2685'. [ 390.869380][T16317] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2683'. [ 390.883953][T16315] dvmrp1: left allmulticast mode [ 390.918861][T16316] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2685'. [ 390.937719][T16317] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 391.012025][T16323] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2687'. [ 391.074890][T16323] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2687'. [ 391.170385][T16325] ±ÿ speed is unknown, defaulting to 1000 [ 391.277017][T16336] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2691'. [ 391.388734][T16342] x_tables: duplicate underflow at hook 2 [ 391.405730][T16337] tipc: Disabling bearer [ 391.838822][T16325] IPVS: length: 132 != 8 [ 391.849480][T16325] pimreg: entered allmulticast mode [ 391.856011][T16325] pimreg: left allmulticast mode [ 392.167055][T16388] ±ÿ speed is unknown, defaulting to 1000 [ 392.547518][T16405] netlink: 'syz.4.2704': attribute type 10 has an invalid length. [ 392.582849][T16407] syz.1.2705: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 392.707064][T16407] CPU: 0 UID: 0 PID: 16407 Comm: syz.1.2705 Not tainted syzkaller #0 PREEMPT(full) [ 392.707090][T16407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 392.707101][T16407] Call Trace: [ 392.707109][T16407] [ 392.707116][T16407] dump_stack_lvl+0xe8/0x150 [ 392.707148][T16407] warn_alloc+0x249/0x340 [ 392.707205][T16407] ? stack_trace_save+0xa9/0x100 [ 392.707228][T16407] ? __pfx_warn_alloc+0x10/0x10 [ 392.707254][T16407] ? kasan_save_track+0x4f/0x80 [ 392.707271][T16407] ? kasan_save_track+0x3e/0x80 [ 392.707286][T16407] ? __kasan_kmalloc+0x93/0xb0 [ 392.707303][T16407] ? __kmalloc_cache_noprof+0x31c/0x660 [ 392.707321][T16407] ? xskq_create+0x56/0x170 [ 392.707438][T16407] ? xsk_setsockopt+0x54c/0x990 [ 392.707458][T16407] ? do_sock_setsockopt+0x17c/0x1b0 [ 392.707512][T16407] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 392.707535][T16407] ? do_syscall_64+0x14d/0xf80 [ 392.707555][T16407] __vmalloc_node_range_noprof+0x132/0x1730 [ 392.707606][T16407] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 392.707632][T16407] ? __kasan_kmalloc+0x93/0xb0 [ 392.707658][T16407] vmalloc_user_noprof+0xad/0xe0 [ 392.707677][T16407] ? xskq_create+0xbf/0x170 [ 392.707701][T16407] xskq_create+0xbf/0x170 [ 392.707728][T16407] xsk_init_queue+0x8a/0xe0 [ 392.707753][T16407] xsk_setsockopt+0x54c/0x990 [ 392.707778][T16407] ? __pfx_xsk_setsockopt+0x10/0x10 [ 392.707801][T16407] ? __pfx_aa_sk_perm+0x10/0x10 [ 392.707859][T16407] ? aa_sock_opt_perm+0xff/0x1a0 [ 392.707916][T16407] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 392.707935][T16407] ? __pfx_xsk_setsockopt+0x10/0x10 [ 392.707959][T16407] do_sock_setsockopt+0x17c/0x1b0 [ 392.707990][T16407] __x64_sys_setsockopt+0x13d/0x1b0 [ 392.708020][T16407] do_syscall_64+0x14d/0xf80 [ 392.708036][T16407] ? trace_irq_disable+0x3b/0x150 [ 392.708058][T16407] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.708075][T16407] ? clear_bhb_loop+0x40/0x90 [ 392.708095][T16407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.708110][T16407] RIP: 0033:0x7f687f79c799 [ 392.708126][T16407] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 392.708141][T16407] RSP: 002b:00007f6880599028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 392.708157][T16407] RAX: ffffffffffffffda RBX: 00007f687fa15fa0 RCX: 00007f687f79c799 [ 392.708168][T16407] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 392.708177][T16407] RBP: 00007f687f832c99 R08: 0000000000000004 R09: 0000000000000000 [ 392.708187][T16407] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 392.708197][T16407] R13: 00007f687fa16038 R14: 00007f687fa15fa0 R15: 00007ffecb7b8f98 [ 392.708224][T16407] [ 392.708238][T16407] Mem-Info: [ 392.811966][T16424] sctp: [Deprecated]: syz.4.2710 (pid 16424) Use of int in max_burst socket option deprecated. [ 392.811966][T16424] Use struct sctp_assoc_value instead [ 392.843607][T16407] active_anon:8094 inactive_anon:6 isolated_anon:0 [ 392.843607][T16407] active_file:3053 inactive_file:40470 isolated_file:0 [ 392.843607][T16407] unevictable:768 dirty:300 writeback:0 [ 392.843607][T16407] slab_reclaimable:12367 slab_unreclaimable:139782 [ 392.843607][T16407] mapped:30744 shmem:1395 pagetables:1500 [ 392.843607][T16407] sec_pagetables:0 bounce:0 [ 392.843607][T16407] kernel_misc_reclaimable:0 [ 392.843607][T16407] free:1282614 free_pcp:11039 free_cma:0 [ 392.897082][T16431] sctp: [Deprecated]: syz.4.2710 (pid 16431) Use of int in max_burst socket option deprecated. [ 392.897082][T16431] Use struct sctp_assoc_value instead [ 392.909521][T16417] netlink: 'syz.2.2707': attribute type 1 has an invalid length. [ 393.086037][T16407] Node 0 active_anon:32376kB inactive_anon:24kB active_file:12212kB inactive_file:161680kB unevictable:5736kB isolated(anon):0kB isolated(file):0kB mapped:127776kB dirty:1196kB writeback:0kB shmem:8344kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16076kB pagetables:5972kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 393.176143][T16407] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 393.222852][T16407] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 393.296280][T16407] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 393.314793][T16407] Node 0 DMA32 free:1171924kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:32376kB inactive_anon:24kB active_file:12212kB inactive_file:161680kB unevictable:9936kB writepending:1196kB zspages:0kB present:3129332kB managed:2552728kB mlocked:8400kB bounce:0kB free_pcp:37352kB local_pcp:17400kB free_cma:0kB [ 393.343527][T16444] syzkaller1: entered promiscuous mode [ 393.370607][T16444] syzkaller1: entered allmulticast mode [ 393.377935][T16407] lowmem_reserve[]: 0 0 0 0 0 [ 393.411548][T16407] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:884kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 393.464681][T16407] lowmem_reserve[]: 0 0 0 0 0 [ 393.469599][T16407] Node 1 Normal free:3942872kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 393.538898][T16407] lowmem_reserve[]: 0 0 0 0 0 [ 393.557891][T16407] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 393.603951][T16407] Node 0 DMA32: 4583*4kB (UME) 3428*8kB (UME) 1715*16kB (UME) 427*32kB (UME) 372*64kB (UME) 391*128kB (UME) 230*256kB (UM) 198*512kB (UM) 155*1024kB (UE) 78*2048kB (UME) 130*4096kB (UM) = 1171916kB [ 393.651332][T16407] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 393.694581][T16407] Node 1 Normal: 2*4kB (UE) 8*8kB (UME) 21*16kB (UME) 10*32kB (UME) 12*64kB (UME) 2*128kB (UM) 5*256kB (UME) 5*512kB (UME) 1*1024kB (M) 2*2048kB (UE) 960*4096kB (M) = 3942872kB [ 393.712938][ T7496] net_ratelimit: 23 callbacks suppressed [ 393.712958][ T7496] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 393.744666][T16407] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 393.774119][T16407] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 393.797108][T16407] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 393.823909][T16407] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 393.866395][T16407] 45550 total pagecache pages [ 393.878257][T16407] 0 pages in swap cache [ 393.882456][T16407] Free swap = 124996kB [ 393.887107][ T7794] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 393.903641][T16407] Total swap = 124996kB [ 393.909265][T16407] 2097051 pages RAM [ 393.914998][T16407] 0 pages HighMem/MovableOnly [ 393.918031][T16465] dvmrp12: entered allmulticast mode [ 393.919690][T16407] 427033 pages reserved [ 393.981020][T16407] 0 pages cma reserved [ 394.007873][T16464] dvmrp12: left allmulticast mode [ 394.043941][ T7795] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 394.156402][ T7787] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 394.324347][ T7496] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 394.433997][ T7787] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 394.565028][ T7789] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 394.674503][ T7789] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 394.815557][ T7795] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 394.954053][ T7781] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 395.280959][T16533] __nla_validate_parse: 6 callbacks suppressed [ 395.280980][T16533] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2729'. [ 395.336062][T16533] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2729'. [ 395.365113][T16537] netlink: 'syz.3.2730': attribute type 11 has an invalid length. [ 395.374178][T16537] netlink: 140 bytes leftover after parsing attributes in process `syz.3.2730'. [ 395.398327][T16538] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2731'. [ 395.399733][T16533] bridge0: entered promiscuous mode [ 395.444317][T16533] bridge0: left promiscuous mode [ 395.509784][T16545] netlink: 'syz.0.2731': attribute type 1 has an invalid length. [ 395.709816][T16550] netlink: 'syz.4.2732': attribute type 4 has an invalid length. [ 395.719761][T16552] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2734'. [ 395.742854][T16550] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2732'. [ 395.799070][T16560] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2734'. [ 395.812994][T16560] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2734'. [ 395.818092][T16550] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2732'. [ 395.828791][T16560] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2734'. [ 395.840052][T16554] nbd10: detected capacity change from 0 to 63 [ 395.869386][T16550] vlan6: entered promiscuous mode [ 395.869763][ T5837] block nbd10: Receive control failed (result -104) [ 395.885011][T16550] bridge0: entered promiscuous mode [ 396.036194][T16567] netlink: 'syz.1.2736': attribute type 1 has an invalid length. [ 396.146159][T16569] syzkaller0: entered promiscuous mode [ 396.166407][T16569] syzkaller0: entered allmulticast mode [ 396.459549][T16576] syzkaller1: entered promiscuous mode [ 396.472146][T16576] syzkaller1: entered allmulticast mode [ 396.476359][T16587] netlink: 'syz.2.2742': attribute type 1 has an invalid length. [ 396.723932][T16603] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 396.765722][T16602] netlink: 'syz.4.2745': attribute type 13 has an invalid length. [ 396.773579][T16602] netlink: 'syz.4.2745': attribute type 17 has an invalid length. [ 396.795976][ T29] audit: type=1800 audit(1773324290.836:5): pid=16585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2740" name="memory.events" dev="tmpfs" ino=2790 res=0 errno=0 [ 397.603946][T16629] nbd11: detected capacity change from 0 to 63 [ 397.616110][ T5837] block nbd11: Receive control failed (result -104) [ 397.627141][T16633] netlink: 'syz.0.2756': attribute type 2 has an invalid length. [ 397.780234][T16639] veth1: entered allmulticast mode [ 397.855046][T16650] lo: entered allmulticast mode [ 397.860355][T16650] lo: left allmulticast mode [ 398.003761][T16656] 8021q: VLANs not supported on syzkaller1 [ 398.044330][T16656] syzkaller1: left promiscuous mode [ 398.061358][T16656] syzkaller1: left allmulticast mode [ 398.143699][T16665] bridge10: the hash_elasticity option has been deprecated and is always 16 [ 398.187092][T16665] bridge10: entered allmulticast mode [ 398.272750][T16678] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 398.295473][T16678] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.332727][T16684] netlink: 'syz.0.2771': attribute type 10 has an invalid length. [ 398.357209][T16682] vlan0: entered promiscuous mode [ 398.362454][T16682] geneve1: entered promiscuous mode [ 398.489906][ T5838] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 398.490568][T16678] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 398.510186][ T5838] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 398.525039][ T5838] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 398.554637][ T5838] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 398.562403][ T5838] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 398.569967][T16678] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.747450][T16694] can: request_module (can-proto-0) failed. [ 398.833967][ T7792] net_ratelimit: 26 callbacks suppressed [ 398.833986][ T7792] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 398.894542][T16678] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 398.905077][T16678] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.173333][T16678] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 399.185593][T16678] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.245670][T16689] ±ÿ speed is unknown, defaulting to 1000 [ 399.251961][ T7792] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 399.395947][ T7792] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 399.410461][ T7792] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.446654][ T7792] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 399.466335][ T7792] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.501390][T16731] openvswitch: netlink: Unexpected mask (mask=100000000, allowed=10048) [ 399.516842][ T7789] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 399.528901][ T7789] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.578931][ T7496] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 399.590324][ T7496] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.665900][ T7792] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 399.673708][T16745] netlink: 'syz.0.2784': attribute type 10 has an invalid length. [ 399.702849][T16745] team0: Device vxcan1 is of different type [ 399.728374][T16689] chnl_net:caif_netlink_parms(): no params data found [ 399.882755][T16689] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.891240][T16689] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.900179][T16689] bridge_slave_0: entered allmulticast mode [ 399.907910][T16689] bridge_slave_0: entered promiscuous mode [ 399.916225][T16689] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.923365][T16689] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.930802][T16689] bridge_slave_1: entered allmulticast mode [ 399.938349][T16689] bridge_slave_1: entered promiscuous mode [ 399.985223][T16689] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 399.999635][T16689] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 400.039276][T16689] team0: Port device team_slave_0 added [ 400.045030][T16762] ±ÿ speed is unknown, defaulting to 1000 [ 400.048149][T16689] team0: Port device team_slave_1 added [ 400.096642][T16689] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 400.103662][T16689] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 400.130323][T16689] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 400.165382][T16689] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 400.172560][T16689] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 400.199075][T16689] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 400.241575][T16689] hsr_slave_0: entered promiscuous mode [ 400.247971][T16689] hsr_slave_1: entered promiscuous mode [ 400.254529][T16689] debugfs: 'hsr0' already exists in 'hsr' [ 400.260289][T16689] Cannot create hsr debugfs directory [ 400.368612][T16689] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 400.414011][ T7792] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 400.449213][T16689] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 400.497906][T16689] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 400.524669][ T7496] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 400.538245][T16689] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 400.663915][ T7790] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 400.693995][ T5837] Bluetooth: hci5: command tx timeout [ 400.774404][ T7792] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 400.884136][ T7790] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 400.993968][ T7790] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 402.227963][T16713] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 402.256516][T16689] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 402.288414][T16689] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 402.336889][T16689] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 402.390048][T16770] __nla_validate_parse: 26 callbacks suppressed [ 402.390066][T16770] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.2790'. [ 402.409923][T16689] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 402.596229][T16782] block nbd12: server does not support multiple connections per device. [ 402.596720][T16689] 8021q: adding VLAN 0 to HW filter on device bond0 [ 402.617203][T16782] block nbd12: shutting down sockets [ 402.680180][T16689] 8021q: adding VLAN 0 to HW filter on device team0 [ 402.696516][ T7792] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.703718][ T7792] bridge0: port 1(bridge_slave_0) entered forwarding state [ 402.727289][ T7792] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.734572][ T7792] bridge0: port 2(bridge_slave_1) entered forwarding state [ 402.777556][ T5837] Bluetooth: hci5: command tx timeout [ 403.120425][T16819] syzkaller0: entered promiscuous mode [ 403.127300][T16819] syzkaller0: entered allmulticast mode [ 403.182256][T16689] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 403.189904][T16813] nbd12: detected capacity change from 0 to 63 [ 403.197913][ T5837] block nbd12: Receive control failed (result -104) [ 403.285788][T16689] veth0_vlan: entered promiscuous mode [ 403.323338][T16689] veth1_vlan: entered promiscuous mode [ 403.410507][T16689] veth0_macvtap: entered promiscuous mode [ 403.424442][T16825] block nbd13: server does not support multiple connections per device. [ 403.433950][T16825] block nbd13: shutting down sockets [ 403.455070][T16689] veth1_macvtap: entered promiscuous mode [ 403.503464][T16689] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 403.541637][T16689] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 403.579566][ T7496] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.589050][ T7496] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.668836][ T7496] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.702327][ T7496] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.875161][ T7786] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 403.883009][ T7786] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 403.954475][ T7795] net_ratelimit: 19 callbacks suppressed [ 403.954497][ T7795] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 403.992240][ T7496] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 404.014675][ T7496] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 404.032749][T16868] ±ÿ speed is unknown, defaulting to 1000 [ 404.166612][T16876] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2819'. [ 404.180918][ T7789] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 404.197048][T16876] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2819'. [ 404.374385][T16880] nbd13: detected capacity change from 0 to 63 [ 404.383353][ T5837] block nbd13: Receive control failed (result -104) [ 404.435839][ T7792] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 404.472358][T16884] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2822'. [ 404.514456][T16886] RDS: rds_bind could not find a transport for fc02::, load rds_tcp or rds_rdma? [ 404.575048][ T7792] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 404.682269][T16891] lec:lec_vcc_attach: copy from user failed for 28 bytes [ 404.706891][ T7792] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 404.792848][T16897] ±ÿ speed is unknown, defaulting to 1000 [ 404.863937][ T5837] Bluetooth: hci5: command tx timeout [ 404.903947][ T7792] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 405.015272][ T7786] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 405.123963][T16924] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2831'. [ 405.155859][ T7795] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 405.184332][T16924] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2831'. [ 405.280124][T16928] x_tables: duplicate underflow at hook 2 [ 405.513937][ T7496] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 405.673918][ T7496] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 405.748057][T16945] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2837'. [ 405.762142][T16941] ipvlan1: entered promiscuous mode [ 405.802219][T16947] IPVS: set_ctl: invalid protocol: 0 172.30.1.1:20004 [ 406.072060][T16955] netlink: 'syz.0.2841': attribute type 1 has an invalid length. [ 406.597928][T16989] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2849'. [ 406.662059][T16995] netlink: 'syz.4.2852': attribute type 3 has an invalid length. [ 406.786341][T17000] syzkaller1: entered promiscuous mode [ 406.791858][T17000] syzkaller1: entered allmulticast mode [ 406.879441][T16999] syzkaller0: entered allmulticast mode [ 406.935392][ T5837] Bluetooth: hci5: command tx timeout [ 407.065890][T17008] bpq0: left promiscuous mode [ 407.070814][T17008] bpq0: left allmulticast mode [ 407.221088][T17015] syzkaller0: entered promiscuous mode [ 407.233321][T17015] syzkaller0: entered allmulticast mode [ 407.503601][T17031] netlink: 176 bytes leftover after parsing attributes in process `syz.2.2862'. [ 407.625817][T17035] netlink: 176 bytes leftover after parsing attributes in process `syz.2.2862'. [ 407.718306][T17038] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2864'. [ 407.751586][T17043] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2865'. [ 407.897614][ T2306] block nbd7: Possible stuck request ffff888026ca8000: control (read@0,1024B). Runtime 30 seconds [ 407.910712][ T2306] block nbd7: Possible stuck request ffff888026ca8200: control (read@1024,1024B). Runtime 30 seconds [ 407.921774][ T2306] block nbd7: Possible stuck request ffff888026ca8400: control (read@2048,1024B). Runtime 30 seconds [ 407.933374][ T2306] block nbd7: Possible stuck request ffff888026ca8600: control (read@3072,1024B). Runtime 30 seconds [ 407.956905][T17046] FAULT_INJECTION: forcing a failure. [ 407.956905][T17046] name failslab, interval 1, probability 0, space 0, times 0 [ 407.970824][T17046] CPU: 1 UID: 0 PID: 17046 Comm: syz.2.2866 Not tainted syzkaller #0 PREEMPT(full) [ 407.970846][T17046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 407.970856][T17046] Call Trace: [ 407.970863][T17046] [ 407.970870][T17046] dump_stack_lvl+0xe8/0x150 [ 407.970900][T17046] should_fail_ex+0x412/0x560 [ 407.970926][T17046] ? __d_alloc+0x37/0x6f0 [ 407.970977][T17046] should_failslab+0xa8/0x100 [ 407.971001][T17046] kmem_cache_alloc_lru_noprof+0x87/0x640 [ 407.971031][T17046] __d_alloc+0x37/0x6f0 [ 407.971056][T17046] d_alloc+0x4b/0x190 [ 407.971070][T17046] ? lookup_one_qstr_excl+0xc8/0x360 [ 407.971098][T17046] lookup_one_qstr_excl+0xdc/0x360 [ 407.971123][T17046] ? lookup_noperm_common+0x245/0x430 [ 407.971152][T17046] start_dirop+0x5c/0x90 [ 407.971178][T17046] simple_start_creating+0xcc/0x110 [ 407.971206][T17046] ? __pfx_simple_start_creating+0x10/0x10 [ 407.971244][T17046] debugfs_start_creating+0xdb/0x1a0 [ 407.971290][T17046] __debugfs_create_file+0x6f/0x400 [ 407.971320][T17046] debugfs_create_file_unsafe+0x3a/0x50 [ 407.971349][T17046] nbd_start_device+0x3d3/0xb10 [ 407.971383][T17046] ? device_create_file+0xf4/0x1b0 [ 407.971481][T17046] nbd_genl_connect+0x165b/0x1cf0 [ 407.971517][T17046] ? __pfx_nbd_genl_connect+0x10/0x10 [ 407.971547][T17046] ? rcu_is_watching+0x15/0xb0 [ 407.971571][T17046] ? trace_kmalloc+0x2a/0x110 [ 407.971593][T17046] ? __nla_parse+0x40/0x60 [ 407.971620][T17046] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 407.971649][T17046] genl_family_rcv_msg_doit+0x22a/0x330 [ 407.971674][T17046] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 407.971705][T17046] ? __lock_acquire+0x6b5/0x2cf0 [ 407.971734][T17046] genl_rcv_msg+0x61c/0x7a0 [ 407.971758][T17046] ? __pfx_genl_rcv_msg+0x10/0x10 [ 407.971774][T17046] ? __pfx_nbd_genl_connect+0x10/0x10 [ 407.971799][T17046] ? __lock_acquire+0x6b5/0x2cf0 [ 407.971830][T17046] netlink_rcv_skb+0x232/0x4b0 [ 407.971854][T17046] ? __pfx_genl_rcv_msg+0x10/0x10 [ 407.971874][T17046] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 407.971917][T17046] ? down_read+0x272/0x2e0 [ 407.971935][T17046] ? genl_rcv+0xd/0x40 [ 407.971953][T17046] genl_rcv+0x28/0x40 [ 407.971968][T17046] netlink_unicast+0x80f/0x9b0 [ 407.971999][T17046] ? __pfx_netlink_unicast+0x10/0x10 [ 407.972023][T17046] ? netlink_sendmsg+0x650/0xb40 [ 407.972042][T17046] ? skb_put+0x11b/0x210 [ 407.972070][T17046] netlink_sendmsg+0x813/0xb40 [ 407.972100][T17046] ? __pfx_netlink_sendmsg+0x10/0x10 [ 407.972125][T17046] ? aa_sock_msg_perm+0xf1/0x1b0 [ 407.972150][T17046] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 407.972175][T17046] ____sys_sendmsg+0x972/0x9f0 [ 407.972203][T17046] ? __pfx_____sys_sendmsg+0x10/0x10 [ 407.972231][T17046] ? import_iovec+0x73/0xa0 [ 407.972262][T17046] ___sys_sendmsg+0x2a5/0x360 [ 407.972285][T17046] ? __pfx____sys_sendmsg+0x10/0x10 [ 407.972342][T17046] ? __fget_files+0x2a/0x420 [ 407.972366][T17046] ? __fget_files+0x3a0/0x420 [ 407.972402][T17046] __x64_sys_sendmsg+0x1bd/0x2a0 [ 407.972423][T17046] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 407.972462][T17046] ? __pfx_ksys_write+0x10/0x10 [ 407.972494][T17046] do_syscall_64+0x14d/0xf80 [ 407.972511][T17046] ? trace_irq_disable+0x3b/0x150 [ 407.972535][T17046] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.972553][T17046] ? clear_bhb_loop+0x40/0x90 [ 407.972576][T17046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.972594][T17046] RIP: 0033:0x7f980379c799 [ 407.972611][T17046] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 407.972627][T17046] RSP: 002b:00007f9804674028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 407.972646][T17046] RAX: ffffffffffffffda RBX: 00007f9803a15fa0 RCX: 00007f980379c799 [ 407.972659][T17046] RDX: 0000000004000000 RSI: 0000200000001ac0 RDI: 0000000000000004 [ 407.972671][T17046] RBP: 00007f9804674090 R08: 0000000000000000 R09: 0000000000000000 [ 407.972681][T17046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 407.972691][T17046] R13: 00007f9803a16038 R14: 00007f9803a15fa0 R15: 00007fffed796898 [ 407.972723][T17046] [ 408.447746][T17046] nbd14: detected capacity change from 0 to 63 [ 408.516704][ T5837] block nbd14: Receive control failed (result -32) [ 408.536361][T16856] block nbd14: Dead connection, failed to find a fallback [ 408.543520][T16856] block nbd14: shutting down sockets [ 408.589520][T16856] blk_print_req_error: 286 callbacks suppressed [ 408.589538][T16856] I/O error, dev nbd14, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 408.606039][T16856] buffer_io_error: 286 callbacks suppressed [ 408.606055][T16856] Buffer I/O error on dev nbd14, logical block 0, async page read [ 408.635527][T16856] I/O error, dev nbd14, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 408.647156][T16856] Buffer I/O error on dev nbd14, logical block 1, async page read [ 408.655696][T16856] I/O error, dev nbd14, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 408.686265][T16856] Buffer I/O error on dev nbd14, logical block 2, async page read [ 408.714773][T16856] I/O error, dev nbd14, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 408.770258][T16856] Buffer I/O error on dev nbd14, logical block 3, async page read [ 408.794679][T17082] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2875'. [ 408.815585][T17084] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2873'. [ 408.834118][T17084] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2873'. [ 408.853308][T16856] I/O error, dev nbd14, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 408.869432][T16856] Buffer I/O error on dev nbd14, logical block 0, async page read [ 408.877381][T16856] I/O error, dev nbd14, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 408.886989][T16856] Buffer I/O error on dev nbd14, logical block 1, async page read [ 408.895169][T16856] I/O error, dev nbd14, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 408.905646][T16856] Buffer I/O error on dev nbd14, logical block 2, async page read [ 408.914170][T16856] I/O error, dev nbd14, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 408.925948][T16856] Buffer I/O error on dev nbd14, logical block 3, async page read [ 408.934658][T16856] I/O error, dev nbd14, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 408.944413][T16856] Buffer I/O error on dev nbd14, logical block 0, async page read [ 408.947439][T17084] bridge0: entered promiscuous mode [ 408.952290][T16856] I/O error, dev nbd14, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 408.967908][T16856] Buffer I/O error on dev nbd14, logical block 1, async page read [ 408.978538][T16856] ldm_validate_partition_table(): Disk read failed. [ 408.999503][T17084] ip6gretap0: entered promiscuous mode [ 409.014572][T16856] Dev nbd14: unable to read RDB block 0 [ 409.020663][T16856] nbd14: unable to read partition table [ 409.021844][T17084] debugfs: 'hsr1' already exists in 'hsr' [ 409.046949][T17084] Cannot create hsr debugfs directory [ 409.048150][T16856] ldm_validate_partition_table(): Disk read failed. [ 409.081522][T16856] Dev nbd14: unable to read RDB block 0 [ 409.089314][T16856] nbd14: unable to read partition table [ 409.139400][T17088] bond10: option arp_all_targets: invalid value (129) [ 409.149410][T17088] bond10 (unregistering): Released all slaves [ 409.276719][T17092] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2878'. [ 409.428334][T17095] batman_adv: batadv0: Adding interface: dummy0 [ 409.443151][T17095] batman_adv: batadv0: The MTU of interface dummy0 is too small (1536) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1568 would solve the problem. [ 409.483981][T17095] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 409.499854][ T7786] net_ratelimit: 20 callbacks suppressed [ 409.499874][ T7786] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 409.602479][T17112] syz.2.2881 uses old SIOCAX25GETINFO [ 409.624524][ T7792] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 409.676975][T17118] bond16: option lacp_active: invalid value (8) [ 409.826984][ T2306] block nbd9: Possible stuck request ffff888026d20000: control (read@0,1024B). Runtime 30 seconds [ 409.837718][ T2306] block nbd9: Possible stuck request ffff888026d20200: control (read@1024,1024B). Runtime 30 seconds [ 409.848819][ T2306] block nbd9: Possible stuck request ffff888026d20400: control (read@2048,1024B). Runtime 30 seconds [ 409.860030][ T2306] block nbd9: Possible stuck request ffff888026d20600: control (read@3072,1024B). Runtime 30 seconds [ 410.009525][T17118] bond16 (unregistering): Released all slaves [ 410.084819][ T7789] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 410.093337][T17134] netlink: 65051 bytes leftover after parsing attributes in process `syz.2.2886'. [ 410.205465][ T7795] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 410.333962][ T7789] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 410.362742][T17154] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2894'. [ 410.447411][ T7789] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 410.564079][ T7789] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 410.694534][ T7789] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 410.803912][ T7792] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 410.933880][ T7790] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 410.987786][T17197] No such timeout policy "syz1" [ 411.017352][T17197] No such timeout policy "syz1" [ 411.022863][T17197] No such timeout policy "syz1" [ 411.033217][T17197] No such timeout policy "syz1" [ 411.040222][T17197] No such timeout policy "syz1" [ 411.048645][T17197] No such timeout policy "syz1" [ 411.056170][T17197] No such timeout policy "syz1" [ 411.061857][T17197] No such timeout policy "syz1" [ 411.068274][T17197] No such timeout policy "syz1" [ 411.073623][T17197] No such timeout policy "syz1" [ 411.110267][T17200] FAULT_INJECTION: forcing a failure. [ 411.110267][T17200] name failslab, interval 1, probability 0, space 0, times 0 [ 411.128737][T17200] CPU: 1 UID: 0 PID: 17200 Comm: syz.3.2905 Not tainted syzkaller #0 PREEMPT(full) [ 411.128762][T17200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 411.128772][T17200] Call Trace: [ 411.128779][T17200] [ 411.128787][T17200] dump_stack_lvl+0xe8/0x150 [ 411.128819][T17200] should_fail_ex+0x412/0x560 [ 411.128846][T17200] ? alloc_inode+0x6a/0x1b0 [ 411.128871][T17200] should_failslab+0xa8/0x100 [ 411.128894][T17200] kmem_cache_alloc_lru_noprof+0x87/0x640 [ 411.128915][T17200] ? __pfx_simple_start_creating+0x10/0x10 [ 411.128943][T17200] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 411.128968][T17200] alloc_inode+0x6a/0x1b0 [ 411.128989][T17200] new_inode+0x22/0x170 [ 411.129015][T17200] __debugfs_create_file+0xb8/0x400 [ 411.129043][T17200] debugfs_create_file_unsafe+0x3a/0x50 [ 411.129071][T17200] nbd_start_device+0x3d3/0xb10 [ 411.129105][T17200] ? device_create_file+0xf4/0x1b0 [ 411.129128][T17200] nbd_genl_connect+0x165b/0x1cf0 [ 411.129166][T17200] ? __pfx_nbd_genl_connect+0x10/0x10 [ 411.129197][T17200] ? rcu_is_watching+0x15/0xb0 [ 411.129222][T17200] ? trace_kmalloc+0x2a/0x110 [ 411.129247][T17200] ? __nla_parse+0x40/0x60 [ 411.129275][T17200] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 411.129304][T17200] genl_family_rcv_msg_doit+0x22a/0x330 [ 411.129331][T17200] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 411.129366][T17200] ? __lock_acquire+0x6b5/0x2cf0 [ 411.129396][T17200] genl_rcv_msg+0x61c/0x7a0 [ 411.129421][T17200] ? __pfx_genl_rcv_msg+0x10/0x10 [ 411.129439][T17200] ? __pfx_nbd_genl_connect+0x10/0x10 [ 411.129463][T17200] ? __lock_acquire+0x6b5/0x2cf0 [ 411.129496][T17200] netlink_rcv_skb+0x232/0x4b0 [ 411.129521][T17200] ? __pfx_genl_rcv_msg+0x10/0x10 [ 411.129549][T17200] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 411.129592][T17200] ? down_read+0x272/0x2e0 [ 411.129609][T17200] ? genl_rcv+0xd/0x40 [ 411.129628][T17200] genl_rcv+0x28/0x40 [ 411.129642][T17200] netlink_unicast+0x80f/0x9b0 [ 411.129672][T17200] ? __pfx_netlink_unicast+0x10/0x10 [ 411.129694][T17200] ? netlink_sendmsg+0x650/0xb40 [ 411.129714][T17200] ? skb_put+0x11b/0x210 [ 411.129745][T17200] netlink_sendmsg+0x813/0xb40 [ 411.129777][T17200] ? __pfx_netlink_sendmsg+0x10/0x10 [ 411.129802][T17200] ? trace_irq_disable+0x3b/0x150 [ 411.129828][T17200] ? aa_sock_msg_perm+0xf1/0x1b0 [ 411.129854][T17200] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 411.129877][T17200] ____sys_sendmsg+0x972/0x9f0 [ 411.129904][T17200] ? __pfx_____sys_sendmsg+0x10/0x10 [ 411.129931][T17200] ? import_iovec+0x73/0xa0 [ 411.129962][T17200] ___sys_sendmsg+0x2a5/0x360 [ 411.129987][T17200] ? __pfx____sys_sendmsg+0x10/0x10 [ 411.130042][T17200] ? __fget_files+0x2a/0x420 [ 411.130065][T17200] ? __fget_files+0x3a0/0x420 [ 411.130103][T17200] __x64_sys_sendmsg+0x1bd/0x2a0 [ 411.130124][T17200] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 411.130152][T17200] ? __pfx_ksys_write+0x10/0x10 [ 411.130184][T17200] do_syscall_64+0x14d/0xf80 [ 411.130202][T17200] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.130221][T17200] ? clear_bhb_loop+0x40/0x90 [ 411.130243][T17200] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.130261][T17200] RIP: 0033:0x7fdef119c799 [ 411.130277][T17200] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 411.130291][T17200] RSP: 002b:00007fdef210d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 411.130310][T17200] RAX: ffffffffffffffda RBX: 00007fdef1415fa0 RCX: 00007fdef119c799 [ 411.130324][T17200] RDX: 0000000004000000 RSI: 0000200000001ac0 RDI: 0000000000000004 [ 411.130335][T17200] RBP: 00007fdef210d090 R08: 0000000000000000 R09: 0000000000000000 [ 411.130346][T17200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 411.130356][T17200] R13: 00007fdef1416038 R14: 00007fdef1415fa0 R15: 00007ffcb247ba38 [ 411.130386][T17200] [ 411.130459][T17200] debugfs: out of free dentries, can not create file 'blocksize_bits' [ 411.157724][T17202] vlan7: entered allmulticast mode [ 411.526285][T17202] bridge12: entered allmulticast mode [ 411.566343][T17200] nbd15: detected capacity change from 0 to 63 [ 411.575812][ T5837] block nbd15: Receive control failed (result -32) [ 411.612876][T16856] block nbd15: Dead connection, failed to find a fallback [ 411.639774][T16856] block nbd15: shutting down sockets [ 411.649915][T16856] ldm_validate_partition_table(): Disk read failed. [ 411.657645][T16856] Dev nbd15: unable to read RDB block 0 [ 411.664162][T16856] nbd15: unable to read partition table [ 411.687900][T16856] ldm_validate_partition_table(): Disk read failed. [ 411.701374][T16856] Dev nbd15: unable to read RDB block 0 [ 411.707943][T16856] nbd15: unable to read partition table [ 411.732192][T17217] x_tables: ip6_tables: SNPT target: used from hooks FORWARD, but only usable from INPUT/POSTROUTING [ 412.128220][T17242] lo speed is unknown, defaulting to 1000 [ 412.141093][T17245] ip6erspan0: entered allmulticast mode [ 412.283327][T17242] lo speed is unknown, defaulting to 1000 [ 412.307675][T17253] ip6gre1: entered promiscuous mode [ 412.312900][T17253] ip6gre1: entered allmulticast mode [ 412.325052][T17242] lo speed is unknown, defaulting to 1000 [ 412.352207][T17242] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 412.440957][T17242] lo speed is unknown, defaulting to 1000 [ 412.459784][T17242] lo speed is unknown, defaulting to 1000 [ 412.470778][T17242] lo speed is unknown, defaulting to 1000 [ 412.487095][T17261] macsec2: entered promiscuous mode [ 412.494259][T17261] geneve1: entered promiscuous mode [ 412.499659][T17261] macsec2: entered allmulticast mode [ 412.505100][T17261] geneve1: entered allmulticast mode [ 412.511877][T17242] lo speed is unknown, defaulting to 1000 [ 412.527270][T17242] lo speed is unknown, defaulting to 1000 [ 412.555120][T17242] lo speed is unknown, defaulting to 1000 [ 412.888716][T17285] __nla_validate_parse: 11 callbacks suppressed [ 412.888736][T17285] netlink: 212336 bytes leftover after parsing attributes in process `syz.2.2928'. [ 413.029143][T17291] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2933'. [ 413.083233][T17293] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2931'. [ 413.169920][T17298] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2934'. [ 413.179073][T17298] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2934'. [ 413.494335][T17324] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2940'. [ 413.593576][T17329] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2941'. [ 413.629079][T17329] veth1_virt_wifi: Caught tx_queue_len zero misconfig [ 413.642188][T17329] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 413.675595][T17334] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2943'. [ 413.762265][T17341] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2946'. [ 413.806205][T17341] veth13: entered promiscuous mode [ 413.942345][T17358] veth0_to_bridge: entered promiscuous mode [ 413.961482][T17358] veth0_to_bridge: entered allmulticast mode [ 414.076128][T17365] nbd64: detected capacity change from 0 to 63 [ 414.086600][ T5837] block nbd64: Receive control failed (result -32) [ 414.104619][T16856] block nbd64: Dead connection, failed to find a fallback [ 414.131076][T16856] block nbd64: shutting down sockets [ 414.140199][T16856] blk_print_req_error: 286 callbacks suppressed [ 414.140216][T16856] I/O error, dev nbd64, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 414.141771][T17374] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2955'. [ 414.182703][T16856] buffer_io_error: 286 callbacks suppressed [ 414.182719][T16856] Buffer I/O error on dev nbd64, logical block 0, async page read [ 414.197980][T16856] I/O error, dev nbd64, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 414.208081][T16856] Buffer I/O error on dev nbd64, logical block 1, async page read [ 414.216835][T16856] I/O error, dev nbd64, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 414.217110][T17374] bond1: entered promiscuous mode [ 414.227966][T16856] Buffer I/O error on dev nbd64, logical block 2, async page read [ 414.241037][T16856] I/O error, dev nbd64, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 414.251540][T16856] Buffer I/O error on dev nbd64, logical block 3, async page read [ 414.259809][T16856] I/O error, dev nbd64, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 414.270390][T16856] Buffer I/O error on dev nbd64, logical block 0, async page read [ 414.275983][T17374] 8021q: adding VLAN 0 to HW filter on device bond1 [ 414.278718][T16856] I/O error, dev nbd64, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 414.295073][T16856] Buffer I/O error on dev nbd64, logical block 1, async page read [ 414.303029][T16856] I/O error, dev nbd64, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 414.315318][T16856] Buffer I/O error on dev nbd64, logical block 2, async page read [ 414.323725][T16856] I/O error, dev nbd64, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 414.334813][T16856] Buffer I/O error on dev nbd64, logical block 3, async page read [ 414.343142][T16856] I/O error, dev nbd64, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 414.345175][ T9685] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 414.353258][T16856] Buffer I/O error on dev nbd64, logical block 0, async page read [ 414.392360][T16856] I/O error, dev nbd64, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 414.412675][T16856] Buffer I/O error on dev nbd64, logical block 1, async page read [ 414.434515][T16856] ldm_validate_partition_table(): Disk read failed. [ 414.442753][T16856] Dev nbd64: unable to read RDB block 0 [ 414.456431][T16856] nbd64: unable to read partition table [ 414.466338][T17378] 8021q: adding VLAN 0 to HW filter on device bond2 [ 414.475112][T17378] bond2: entered promiscuous mode [ 414.481211][T17378] bond1: (slave bond2): Enslaving as an active interface with an up link [ 414.499017][T17376] lo speed is unknown, defaulting to 1000 [ 414.505100][ T7789] net_ratelimit: 22 callbacks suppressed [ 414.505119][ T7789] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 414.540905][T16856] ldm_validate_partition_table(): Disk read failed. [ 414.562565][T16856] Dev nbd64: unable to read RDB block 0 [ 414.578335][T16856] nbd64: unable to read partition table [ 414.583065][T17390] xfrm0: left promiscuous mode [ 414.591024][T17390] ip6gre1: left promiscuous mode [ 414.639610][T17390] bond10: left promiscuous mode [ 414.650216][T17390] macsec1: left promiscuous mode [ 414.655581][T17390] geneve1: left promiscuous mode [ 414.662068][T17390] veth7: left promiscuous mode [ 414.668449][ T9685] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 414.677075][ T7795] bond11: (slave ip6gretap1): link status up again after 0 ms [ 414.689732][T17390] veth13: left promiscuous mode [ 414.704046][ T7792] bond11: (slave ip6gretap1): link status up again after 0 ms [ 414.735705][ T7795] bond11: (slave ip6gretap1): link status up again after 0 ms [ 414.814749][ T7789] bond11: (slave ip6gretap1): link status up again after 0 ms [ 414.864512][ T7789] bond11: (slave ip6gretap1): link status up again after 0 ms [ 414.904372][ T7789] bond11: (slave ip6gretap1): link status up again after 0 ms [ 414.930303][ T7789] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 415.205110][ T7795] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 415.324118][ T9685] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 415.443871][ T7790] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 415.620350][T17434] lo speed is unknown, defaulting to 1000 [ 415.787726][T17459] netlink: 'syz.3.2971': attribute type 1 has an invalid length. [ 416.040694][T17470] lo speed is unknown, defaulting to 1000 [ 416.647889][T17514] veth3: entered promiscuous mode [ 416.754225][T17507] block nbd16: server does not support multiple connections per device. [ 416.763207][T17507] block nbd16: shutting down sockets [ 416.907228][T17531] x_tables: duplicate underflow at hook 2 [ 416.908662][T17530] syzkaller1: entered promiscuous mode [ 416.919494][T17530] syzkaller1: entered allmulticast mode [ 417.168299][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 417.179055][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 417.189008][ T5838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 417.197552][ T5838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 417.208897][ T5838] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 417.315045][T17540] lo speed is unknown, defaulting to 1000 [ 417.452814][ T5839] syz_tun (unregistering): left promiscuous mode [ 417.595125][T17552] block nbd16: server does not support multiple connections per device. [ 417.622011][T17552] block nbd16: shutting down sockets [ 417.630292][T17558] netlink: 'syz.3.2999': attribute type 61 has an invalid length. [ 417.807164][T17540] chnl_net:caif_netlink_parms(): no params data found [ 418.045633][T17540] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.053054][T17540] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.060886][T17540] bridge_slave_0: entered allmulticast mode [ 418.079003][T17540] bridge_slave_0: entered promiscuous mode [ 418.088955][T17540] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.096639][T17540] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.105932][T17540] bridge_slave_1: entered allmulticast mode [ 418.113616][T17540] bridge_slave_1: entered promiscuous mode [ 418.153172][T17540] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 418.166271][T17540] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 418.242414][T17585] __nla_validate_parse: 19 callbacks suppressed [ 418.242435][T17585] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3003'. [ 418.258088][T17585] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3003'. [ 418.269465][T17540] team0: Port device team_slave_0 added [ 418.287157][T17540] team0: Port device team_slave_1 added [ 418.400419][T17540] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 418.425658][T17540] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 418.519444][T17540] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 418.574164][T17540] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 418.581154][T17540] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 418.633960][ T29] audit: type=1107 audit(1773324312.656:6): pid=17594 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 418.649155][ T29] audit: type=1107 audit(1773324312.666:7): pid=17594 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 418.663262][T17600] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3007'. [ 418.672496][T17540] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 418.814495][T17612] batadv_slave_0: entered promiscuous mode [ 418.866059][T17540] hsr_slave_0: entered promiscuous mode [ 418.866407][T17621] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3013'. [ 418.873218][T17540] hsr_slave_1: entered promiscuous mode [ 418.890534][T17540] debugfs: 'hsr0' already exists in 'hsr' [ 418.896569][T17540] Cannot create hsr debugfs directory [ 418.903599][T17619] bond2: option mode: unable to set because the bond device has slaves [ 418.921704][T17626] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3010'. [ 418.945659][T17616] block nbd16: server does not support multiple connections per device. [ 418.954552][T17616] block nbd16: shutting down sockets [ 419.071286][T17617] lo speed is unknown, defaulting to 1000 [ 419.090047][T17618] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 419.116110][ T5883] lo speed is unknown, defaulting to 1000 [ 419.134346][ T5883] syz2: Port: 1 Link DOWN [ 419.211604][T17628] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3014'. [ 419.255806][ T5837] Bluetooth: hci3: command tx timeout [ 419.263127][T17633] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3015'. [ 419.402443][T17633] netlink: 'syz.2.3015': attribute type 11 has an invalid length. [ 419.436757][T17630] lo speed is unknown, defaulting to 1000 [ 419.590970][T17540] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 419.603456][T17540] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 419.676915][T17611] batadv_slave_0: left promiscuous mode [ 419.712168][T17540] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 419.730529][T17540] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 419.783971][ T7790] net_ratelimit: 21 callbacks suppressed [ 419.783992][ T7790] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 419.862008][T17540] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 419.872926][T17540] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 419.891732][T17654] netlink: 'syz.4.3019': attribute type 3 has an invalid length. [ 419.914210][ T7496] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 419.914315][T17654] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3019'. [ 419.993002][T17540] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 420.039113][T17540] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 420.083127][T17659] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3021'. [ 420.092366][T17659] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3021'. [ 420.105973][ T7496] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 420.135173][T17667] xt_hashlimit: max too large, truncated to 1048576 [ 420.142049][T17667] xt_bpf: check failed: parse error [ 420.258356][T17666] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 420.284283][ T7786] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 420.354221][T17674] block nbd16: server does not support multiple connections per device. [ 420.390987][T17674] block nbd16: shutting down sockets [ 420.443890][ T7496] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 420.574164][ T7792] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 420.598253][T17540] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 420.628001][T17540] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 420.664596][T17540] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 420.720210][T17540] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 420.785100][T17699] FAULT_INJECTION: forcing a failure. [ 420.785100][T17699] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 420.813860][T17699] CPU: 1 UID: 0 PID: 17699 Comm: syz.1.3033 Not tainted syzkaller #0 PREEMPT(full) [ 420.813927][T17699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 420.813938][T17699] Call Trace: [ 420.813945][T17699] [ 420.813953][T17699] dump_stack_lvl+0xe8/0x150 [ 420.813983][T17699] should_fail_ex+0x412/0x560 [ 420.814012][T17699] _copy_from_user+0x2d/0xb0 [ 420.814128][T17699] ___sys_sendmsg+0x1c6/0x360 [ 420.814151][T17699] ? __pfx____sys_sendmsg+0x10/0x10 [ 420.814202][T17699] ? __fget_files+0x2a/0x420 [ 420.814226][T17699] ? __fget_files+0x3a0/0x420 [ 420.814260][T17699] __x64_sys_sendmsg+0x1bd/0x2a0 [ 420.814280][T17699] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 420.814306][T17699] ? __pfx_ksys_write+0x10/0x10 [ 420.814334][T17699] do_syscall_64+0x14d/0xf80 [ 420.814352][T17699] ? trace_irq_disable+0x3b/0x150 [ 420.814376][T17699] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.814393][T17699] ? clear_bhb_loop+0x40/0x90 [ 420.814412][T17699] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.814429][T17699] RIP: 0033:0x7f687f79c799 [ 420.814445][T17699] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 420.814459][T17699] RSP: 002b:00007f6880599028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 420.814479][T17699] RAX: ffffffffffffffda RBX: 00007f687fa15fa0 RCX: 00007f687f79c799 [ 420.814490][T17699] RDX: 0000000000000010 RSI: 0000200000000240 RDI: 0000000000000004 [ 420.814501][T17699] RBP: 00007f6880599090 R08: 0000000000000000 R09: 0000000000000000 [ 420.814511][T17699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 420.814522][T17699] R13: 00007f687fa16038 R14: 00007f687fa15fa0 R15: 00007ffecb7b8f98 [ 420.814551][T17699] [ 421.092335][ T7781] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 421.334261][ T5837] Bluetooth: hci3: command tx timeout [ 421.346984][ T7787] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 421.395711][T17723] bond0: (slave bridge_slave_1): Releasing active interface [ 421.421692][T17723] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 421.464135][ T7496] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 421.464445][T17721] block nbd16: server does not support multiple connections per device. [ 421.483257][T17721] block nbd16: shutting down sockets [ 421.529824][T17540] 8021q: adding VLAN 0 to HW filter on device bond0 [ 421.591522][T17540] 8021q: adding VLAN 0 to HW filter on device team0 [ 421.643483][ T7781] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.650657][ T7781] bridge0: port 1(bridge_slave_0) entered forwarding state [ 421.667712][ T7781] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.674924][ T7781] bridge0: port 2(bridge_slave_1) entered forwarding state [ 421.751831][T17739] netlink: 'syz.3.3043': attribute type 1 has an invalid length. [ 421.821183][T17746] FAULT_INJECTION: forcing a failure. [ 421.821183][T17746] name failslab, interval 1, probability 0, space 0, times 0 [ 421.856471][T17746] CPU: 1 UID: 0 PID: 17746 Comm: syz.2.3045 Not tainted syzkaller #0 PREEMPT(full) [ 421.856496][T17746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 421.856506][T17746] Call Trace: [ 421.856514][T17746] [ 421.856521][T17746] dump_stack_lvl+0xe8/0x150 [ 421.856550][T17746] should_fail_ex+0x412/0x560 [ 421.856577][T17746] should_failslab+0xa8/0x100 [ 421.856601][T17746] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 421.856621][T17746] ? __alloc_skb+0x186/0x7d0 [ 421.856645][T17746] ? __alloc_skb+0x1d0/0x7d0 [ 421.856666][T17746] ? __local_bh_enable_ip+0xd0/0x130 [ 421.856726][T17746] __alloc_skb+0x1d0/0x7d0 [ 421.856754][T17746] netlink_sendmsg+0x5d4/0xb40 [ 421.856796][T17746] ? __pfx_netlink_sendmsg+0x10/0x10 [ 421.856820][T17746] ? aa_sock_msg_perm+0xf1/0x1b0 [ 421.856843][T17746] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 421.856866][T17746] ____sys_sendmsg+0x972/0x9f0 [ 421.856891][T17746] ? __pfx_____sys_sendmsg+0x10/0x10 [ 421.856914][T17746] ? import_iovec+0x73/0xa0 [ 421.856942][T17746] ___sys_sendmsg+0x2a5/0x360 [ 421.856965][T17746] ? __pfx____sys_sendmsg+0x10/0x10 [ 421.856988][T17746] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 421.857032][T17746] ? __fget_files+0x2a/0x420 [ 421.857055][T17746] ? __fget_files+0x3a0/0x420 [ 421.857089][T17746] __x64_sys_sendmsg+0x1bd/0x2a0 [ 421.857109][T17746] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 421.857124][T17746] ? kvm_sched_clock_read+0x11/0x20 [ 421.857158][T17746] ? __pfx_sched_clock_cpu+0x10/0x10 [ 421.857202][T17746] do_syscall_64+0x14d/0xf80 [ 421.857219][T17746] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.857237][T17746] ? clear_bhb_loop+0x40/0x90 [ 421.857258][T17746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.857275][T17746] RIP: 0033:0x7f980379c799 [ 421.857294][T17746] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 421.857308][T17746] RSP: 002b:00007f9804674028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 421.857327][T17746] RAX: ffffffffffffffda RBX: 00007f9803a15fa0 RCX: 00007f980379c799 [ 421.857340][T17746] RDX: 0000000000000010 RSI: 0000200000000240 RDI: 0000000000000004 [ 421.857350][T17746] RBP: 00007f9804674090 R08: 0000000000000000 R09: 0000000000000000 [ 421.857361][T17746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 421.857371][T17746] R13: 00007f9803a16038 R14: 00007f9803a15fa0 R15: 00007fffed796898 [ 421.857400][T17746] [ 422.181013][T17739] bond16: (slave geneve4): making interface the new active one [ 422.189745][T17739] bond16: (slave geneve4): Enslaving as an active interface with an up link [ 422.198830][ T7781] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 422.254307][ T7781] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 422.299196][ T7781] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 422.355256][ T7781] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 422.384745][T17759] syzkaller0: entered promiscuous mode [ 422.390410][T17759] syzkaller0: entered allmulticast mode [ 422.413155][T17759] netlink: 'syz.2.3048': attribute type 7 has an invalid length. [ 422.433542][T17759] netlink: 'syz.2.3048': attribute type 8 has an invalid length. [ 422.462585][T17759] netlink: 'syz.2.3048': attribute type 9 has an invalid length. [ 422.487958][T17773] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 422.629593][T17540] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 422.897622][T17540] veth0_vlan: entered promiscuous mode [ 422.915472][T17791] sctp: [Deprecated]: syz.1.3055 (pid 17791) Use of int in max_burst socket option. [ 422.915472][T17791] Use struct sctp_assoc_value instead [ 422.946940][T17540] veth1_vlan: entered promiscuous mode [ 422.992426][T17540] veth0_macvtap: entered promiscuous mode [ 423.007657][T17540] veth1_macvtap: entered promiscuous mode [ 423.024751][T17795] xt_policy: output policy not valid in PREROUTING and INPUT [ 423.059838][T17540] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 423.092312][T17540] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 423.166887][ T7794] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.233227][ T7794] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.261036][ T7794] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.283563][ T7794] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.414188][ T5837] Bluetooth: hci3: command tx timeout [ 423.472637][ T7787] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.499075][ T7787] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 423.549998][T17805] tipc: Enabling of bearer rejected, media not registered [ 423.569647][ T7794] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.595381][ T7794] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 424.036045][T17831] __nla_validate_parse: 14 callbacks suppressed [ 424.036065][T17831] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3066'. [ 424.062290][T17831] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3066'. [ 424.146130][ T5838] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 424.157729][ T5838] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 424.179388][ T5838] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 424.188779][ T5838] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 424.199353][ T5838] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 424.244050][T17834] netlink: 'syz.2.3068': attribute type 1 has an invalid length. [ 424.275093][T17841] netlink: 'syz.0.3070': attribute type 30 has an invalid length. [ 424.317911][T17834] bond3: entered promiscuous mode [ 424.323425][T17834] 8021q: adding VLAN 0 to HW filter on device bond3 [ 424.346102][T17846] netlink: 392 bytes leftover after parsing attributes in process `syz.4.3069'. [ 424.390997][T17834] IPv6: Can't replace route, no match found [ 424.415580][T17834] IPv6: Can't replace route, no match found [ 424.573543][T17835] lo speed is unknown, defaulting to 1000 [ 424.659208][T17861] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3076'. [ 425.313912][ T7787] net_ratelimit: 19 callbacks suppressed [ 425.313931][ T7787] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 425.391781][T17884] netlink: 'syz.4.3079': attribute type 1 has an invalid length. [ 425.395524][T17835] chnl_net:caif_netlink_parms(): no params data found [ 425.494101][ T7787] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 425.494861][ T5837] Bluetooth: hci3: command tx timeout [ 425.567778][T17902] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3080'. [ 425.619210][T17902] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3080'. [ 425.674283][ T7781] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 425.720017][T17910] delete_channel: no stack [ 425.741139][T17902] bridge0: entered promiscuous mode [ 425.752430][T17902] ip6gretap0: entered promiscuous mode [ 425.759270][T17902] debugfs: 'hsr1' already exists in 'hsr' [ 425.765725][T17902] Cannot create hsr debugfs directory [ 425.773557][T17898] tipc: Started in network mode [ 425.779590][T17898] tipc: Node identity fa5289be75e8, cluster identity 4711 [ 425.787281][T17898] tipc: Enabled bearer , priority 0 [ 425.794146][T17835] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.802102][T17835] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.811884][T17835] bridge_slave_0: entered allmulticast mode [ 425.820842][T17835] bridge_slave_0: entered promiscuous mode [ 425.887900][T17909] syzkaller0: entered promiscuous mode [ 425.893499][T17909] syzkaller0: entered allmulticast mode [ 425.899997][T17909] tipc: Resetting bearer [ 425.904835][T17916] netlink: 'syz.4.3084': attribute type 16 has an invalid length. [ 425.907102][ T7792] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 425.922239][T17916] netlink: 'syz.4.3084': attribute type 17 has an invalid length. [ 425.937661][T17918] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3085'. [ 425.947005][T17835] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.955157][T17835] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.962608][T17835] bridge_slave_1: entered allmulticast mode [ 425.971004][T17835] bridge_slave_1: entered promiscuous mode [ 426.026905][T17916] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 426.054171][T17896] tipc: Resetting bearer [ 426.255302][T17929] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3087'. [ 426.275288][T17926] block nbd16: server does not support multiple connections per device. [ 426.311229][ T5837] Bluetooth: hci4: command tx timeout [ 426.319526][T17926] block nbd16: shutting down sockets [ 426.463926][ T2263] block nbd10: Possible stuck request ffff888026dd8000: control (read@0,1024B). Runtime 30 seconds [ 426.475066][ T2263] block nbd10: Possible stuck request ffff888026dd8200: control (read@1024,1024B). Runtime 30 seconds [ 426.486186][ T2263] block nbd10: Possible stuck request ffff888026dd8400: control (read@2048,1024B). Runtime 30 seconds [ 426.497608][ T2263] block nbd10: Possible stuck request ffff888026dd8600: control (read@3072,1024B). Runtime 30 seconds [ 427.551381][T17896] tipc: Disabling bearer [ 427.634187][ T7781] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 427.644338][ T5883] tipc: Node number set to 2411366846 [ 427.665659][T17835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 427.668326][T17935] FAULT_INJECTION: forcing a failure. [ 427.668326][T17935] name failslab, interval 1, probability 0, space 0, times 0 [ 427.685093][T17835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 427.718215][T17935] CPU: 1 UID: 0 PID: 17935 Comm: syz.2.3090 Not tainted syzkaller #0 PREEMPT(full) [ 427.718242][T17935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 427.718255][T17935] Call Trace: [ 427.718262][T17935] [ 427.718270][T17935] dump_stack_lvl+0xe8/0x150 [ 427.718297][T17935] should_fail_ex+0x412/0x560 [ 427.718325][T17935] should_failslab+0xa8/0x100 [ 427.718350][T17935] __kmalloc_noprof+0xe8/0x760 [ 427.718369][T17935] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 427.718519][T17935] tomoyo_realpath_from_path+0xe3/0x5d0 [ 427.718553][T17935] ? tomoyo_path_number_perm+0x219/0x630 [ 427.718572][T17935] tomoyo_path_number_perm+0x246/0x630 [ 427.718594][T17935] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 427.718615][T17935] ? __lock_acquire+0x6b5/0x2cf0 [ 427.718648][T17935] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 427.718687][T17935] ? __fget_files+0x2a/0x420 [ 427.718714][T17935] ? __fget_files+0x2a/0x420 [ 427.718736][T17935] ? __fget_files+0x3a0/0x420 [ 427.718758][T17935] ? __fget_files+0x2a/0x420 [ 427.718786][T17935] security_file_ioctl+0xc3/0x2a0 [ 427.718836][T17935] __se_sys_ioctl+0x47/0x170 [ 427.718860][T17935] do_syscall_64+0x14d/0xf80 [ 427.718875][T17935] ? trace_irq_disable+0x3b/0x150 [ 427.718899][T17935] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.718917][T17935] ? clear_bhb_loop+0x40/0x90 [ 427.718939][T17935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.718956][T17935] RIP: 0033:0x7f980379c799 [ 427.718973][T17935] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 427.718986][T17935] RSP: 002b:00007f9804674028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 427.719006][T17935] RAX: ffffffffffffffda RBX: 00007f9803a15fa0 RCX: 00007f980379c799 [ 427.719018][T17935] RDX: 0000200000000000 RSI: 0000000000008b34 RDI: 0000000000000003 [ 427.719029][T17935] RBP: 00007f9804674090 R08: 0000000000000000 R09: 0000000000000000 [ 427.719039][T17935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 427.719050][T17935] R13: 00007f9803a16038 R14: 00007f9803a15fa0 R15: 00007fffed796898 [ 427.719080][T17935] [ 427.719087][T17935] ERROR: Out of memory at tomoyo_realpath_from_path. [ 427.770280][ T2263] block nbd11: Possible stuck request ffff888026e30000: control (read@0,1024B). Runtime 30 seconds [ 427.819121][T17939] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3093'. [ 427.823109][ T2263] block nbd11: Possible stuck request ffff888026e30200: control (read@1024,1024B). Runtime 30 seconds [ 427.883924][T17939] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3093'. [ 427.893154][ T2263] block nbd11: Possible stuck request ffff888026e30400: control (read@2048,1024B). Runtime 30 seconds [ 428.006560][ T2263] block nbd11: Possible stuck request ffff888026e30600: control (read@3072,1024B). Runtime 30 seconds [ 428.048721][ T7792] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 428.071334][T17835] team0: Port device team_slave_0 added [ 428.087243][T17949] 8021q: VLANs not supported on wg2 [ 428.096586][T17835] team0: Port device team_slave_1 added [ 428.140692][T17835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 428.175761][T17835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 428.236740][T17958] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 428.237079][T17835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 428.274696][T17958] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 428.317280][T17835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 428.324585][T17835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 428.351437][T17835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 428.379354][ T5837] Bluetooth: hci4: command tx timeout [ 428.441497][T17835] hsr_slave_0: entered promiscuous mode [ 428.465733][T17835] hsr_slave_1: entered promiscuous mode [ 428.472547][T17968] netlink: 'syz.0.3098': attribute type 2 has an invalid length. [ 428.485145][T17835] debugfs: 'hsr0' already exists in 'hsr' [ 428.490900][T17835] Cannot create hsr debugfs directory [ 428.514228][ T7792] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 428.565432][T17973] netlink: 'syz.0.3100': attribute type 1 has an invalid length. [ 428.573554][T17972] netlink: 'syz.0.3100': attribute type 1 has an invalid length. [ 428.713892][ T7786] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 428.759563][T17835] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 428.773670][T17835] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.781892][T17982] FAULT_INJECTION: forcing a failure. [ 428.781892][T17982] name failslab, interval 1, probability 0, space 0, times 0 [ 428.796728][T17982] CPU: 0 UID: 0 PID: 17982 Comm: syz.0.3104 Not tainted syzkaller #0 PREEMPT(full) [ 428.796751][T17982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 428.796762][T17982] Call Trace: [ 428.796769][T17982] [ 428.796775][T17982] dump_stack_lvl+0xe8/0x150 [ 428.796803][T17982] should_fail_ex+0x412/0x560 [ 428.796830][T17982] should_failslab+0xa8/0x100 [ 428.796853][T17982] __kmalloc_noprof+0xe8/0x760 [ 428.796871][T17982] ? tomoyo_encode+0x28b/0x550 [ 428.796896][T17982] tomoyo_encode+0x28b/0x550 [ 428.796921][T17982] tomoyo_realpath_from_path+0x58d/0x5d0 [ 428.796952][T17982] ? tomoyo_path_number_perm+0x219/0x630 [ 428.796972][T17982] tomoyo_path_number_perm+0x246/0x630 [ 428.796994][T17982] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 428.797017][T17982] ? __lock_acquire+0x6b5/0x2cf0 [ 428.797050][T17982] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 428.797086][T17982] ? __fget_files+0x2a/0x420 [ 428.797108][T17982] ? __fget_files+0x2a/0x420 [ 428.797126][T17982] ? __fget_files+0x3a0/0x420 [ 428.797148][T17982] ? __fget_files+0x2a/0x420 [ 428.797176][T17982] security_file_ioctl+0xc3/0x2a0 [ 428.797196][T17982] __se_sys_ioctl+0x47/0x170 [ 428.797215][T17982] do_syscall_64+0x14d/0xf80 [ 428.797226][T17982] ? trace_irq_disable+0x3b/0x150 [ 428.797245][T17982] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.797258][T17982] ? clear_bhb_loop+0x40/0x90 [ 428.797275][T17982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.797288][T17982] RIP: 0033:0x7fee1eb9c799 [ 428.797302][T17982] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 428.797314][T17982] RSP: 002b:00007fee1f973028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 428.797329][T17982] RAX: ffffffffffffffda RBX: 00007fee1ee15fa0 RCX: 00007fee1eb9c799 [ 428.797338][T17982] RDX: 0000200000000000 RSI: 0000000000008b34 RDI: 0000000000000003 [ 428.797360][T17982] RBP: 00007fee1f973090 R08: 0000000000000000 R09: 0000000000000000 [ 428.797368][T17982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 428.797376][T17982] R13: 00007fee1ee16038 R14: 00007fee1ee15fa0 R15: 00007ffd10d16d38 [ 428.797401][T17982] [ 428.797418][T17982] ERROR: Out of memory at tomoyo_realpath_from_path. [ 428.824496][ T7786] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 429.093257][T17835] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 429.114100][T17835] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.215255][T17835] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 429.234935][T17835] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.300504][T18005] __nla_validate_parse: 8 callbacks suppressed [ 429.300635][T18005] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3110'. [ 429.457355][T18010] netlink: 'syz.4.3111': attribute type 3 has an invalid length. [ 429.467810][T18010] netlink: 'syz.4.3111': attribute type 1 has an invalid length. [ 429.479380][T18010] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3111'. [ 429.584952][T17999] veth1: left allmulticast mode [ 429.597442][T17999] wg1: left promiscuous mode [ 429.603058][T17999] wg1: left allmulticast mode [ 429.616194][T17999] .70·: left allmulticast mode [ 429.622193][T17999] hsr_slave_0: left allmulticast mode [ 429.631516][T17999] hsr_slave_1: left allmulticast mode [ 429.639187][T17999] geneve3: left promiscuous mode [ 429.644516][T17999] vlan3: left promiscuous mode [ 429.649363][T17999] vlan3: left allmulticast mode [ 429.655816][T17999] bridge0: left allmulticast mode [ 429.661852][T17999] bond12: left promiscuous mode [ 429.677401][T17999] bond15: left promiscuous mode [ 429.682334][T17999] wireguard0: left promiscuous mode [ 429.711297][T17999] bridge10: left allmulticast mode [ 429.758309][T17835] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 429.771968][T17835] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.828735][T18022] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3113'. [ 429.828786][ T7787] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 429.847624][ T7787] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 429.849403][T18022] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3113'. [ 429.861833][ T7787] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 429.874672][ T7787] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 429.889549][ T7787] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 429.890573][T18008] lo speed is unknown, defaulting to 1000 [ 429.898689][ T7787] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 429.898980][ T7787] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 429.925167][T18022] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3113'. [ 429.934595][ T7787] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 429.964697][T18016] lo speed is unknown, defaulting to 1000 [ 430.364563][ T7795] net_ratelimit: 3 callbacks suppressed [ 430.364581][ T7795] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 430.385589][T18031] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 430.418813][T18034] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3116'. [ 430.429140][T17835] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 430.461249][ T5837] Bluetooth: hci4: command tx timeout [ 430.546888][T17835] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 430.593065][T17835] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 430.655380][T18047] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3119'. [ 430.691446][T18049] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3116'. [ 430.748597][T17835] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 430.843124][T18055] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3121'. [ 430.857321][T18053] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3122'. [ 431.016117][ T7786] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 431.551609][ T7795] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 431.659160][T17835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 431.723979][ T7786] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 431.747950][T17835] 8021q: adding VLAN 0 to HW filter on device team0 [ 431.777281][ T7787] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.784458][ T7787] bridge0: port 1(bridge_slave_0) entered forwarding state [ 431.794549][T18108] netlink: 'syz.3.3135': attribute type 4 has an invalid length. [ 431.856065][ T7787] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 431.910386][T18122] netlink: 'syz.2.3139': attribute type 29 has an invalid length. [ 431.929410][ T7787] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.936648][ T7787] bridge0: port 2(bridge_slave_1) entered forwarding state [ 432.008213][T18124] netlink: 'syz.2.3139': attribute type 1 has an invalid length. [ 432.014807][ T7781] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 432.016234][T18124] netlink: 'syz.2.3139': attribute type 2 has an invalid length. [ 432.174487][ T7792] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 432.284323][ T7792] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 432.333362][T18147] netlink: 'syz.3.3135': attribute type 4 has an invalid length. [ 432.404333][ T7781] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 432.536698][ T5837] Bluetooth: hci4: command tx timeout [ 432.563589][T18154] team0: Device wlan1 is up. Set it down before adding it as a team port [ 432.597958][T17835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 432.648472][T17835] veth0_vlan: entered promiscuous mode [ 432.692615][T17835] veth1_vlan: entered promiscuous mode [ 432.787041][T17835] veth0_macvtap: entered promiscuous mode [ 432.823181][T17835] veth1_macvtap: entered promiscuous mode [ 432.876498][T18165] syzkaller1: entered promiscuous mode [ 432.882031][T18165] syzkaller1: entered allmulticast mode [ 432.912253][T18165] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324 [ 432.927020][T17835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 432.969261][T17835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 433.009349][ T7781] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.028515][ T7781] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.063137][ T7781] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.495515][ T2263] block nbd12: Possible stuck request ffff888026ea8000: control (read@0,1024B). Runtime 30 seconds [ 433.506620][ T2263] block nbd12: Possible stuck request ffff888026ea8200: control (read@1024,1024B). Runtime 30 seconds [ 433.518082][ T2263] block nbd12: Possible stuck request ffff888026ea8400: control (read@2048,1024B). Runtime 30 seconds [ 433.529594][ T2263] block nbd12: Possible stuck request ffff888026ea8600: control (read@3072,1024B). Runtime 30 seconds [ 433.625850][ T7781] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.058884][T18207] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 434.323020][T18221] validate_nla: 1 callbacks suppressed [ 434.323038][T18221] netlink: 'syz.2.3158': attribute type 2 has an invalid length. [ 434.774242][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 434.784404][ T2263] block nbd13: Possible stuck request ffff888026f50000: control (read@0,1024B). Runtime 30 seconds [ 434.795318][ T2263] block nbd13: Possible stuck request ffff888026f50200: control (read@1024,1024B). Runtime 30 seconds [ 434.806378][ T2263] block nbd13: Possible stuck request ffff888026f50400: control (read@2048,1024B). Runtime 30 seconds [ 434.818253][ T2263] block nbd13: Possible stuck request ffff888026f50600: control (read@3072,1024B). Runtime 30 seconds [ 435.908206][T18221] : entered promiscuous mode [ 435.922246][ T7903] lec:lec_start_xmit: lec0:No lecd attached [ 435.994182][ T7795] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 436.030721][ T7795] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 436.120700][T18236] vti1: entered promiscuous mode [ 436.138147][T18238] net_ratelimit: 5 callbacks suppressed [ 436.138166][T18238] netlink: zone id is out of range [ 436.154426][ T7496] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 436.187008][T18238] netlink: zone id is out of range [ 436.196341][T18238] netlink: zone id is out of range [ 436.211072][ T7787] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 436.219447][T18238] netlink: zone id is out of range [ 436.219498][T18238] netlink: zone id is out of range [ 436.219796][T18238] netlink: zone id is out of range [ 436.243596][T18238] netlink: zone id is out of range [ 436.259021][T18244] netlink: 'syz.3.3165': attribute type 1 has an invalid length. [ 436.261869][ T7787] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 436.267463][ T7496] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 436.282167][T18238] netlink: zone id is out of range [ 436.288617][T18244] __nla_validate_parse: 11 callbacks suppressed [ 436.288633][T18244] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3165'. [ 436.639940][T18258] block nbd16: server does not support multiple connections per device. [ 436.653270][T18258] block nbd16: shutting down sockets [ 436.904511][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 436.920556][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 436.942491][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 436.957819][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 436.968063][ T5838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 437.200916][T18277] lo speed is unknown, defaulting to 1000 [ 437.212563][T18283] syzkaller0: entered promiscuous mode [ 437.224044][T18283] syzkaller0: entered allmulticast mode [ 437.241929][T18283] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 437.322300][T18288] Bluetooth: MGMT ver 1.23 [ 437.418968][T18288] syzkaller0: entered promiscuous mode [ 437.438616][T18288] syzkaller0: entered allmulticast mode [ 437.564509][T18297] block nbd16: server does not support multiple connections per device. [ 437.573457][T18297] block nbd16: shutting down sockets [ 437.826050][T18303] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.3184'. [ 437.868113][T18310] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.875927][T18310] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.896664][T18312] block nbd16: server does not support multiple connections per device. [ 437.907102][T18312] block nbd16: shutting down sockets [ 437.987765][ T2306] block nbd7: Possible stuck request ffff888026ca8000: control (read@0,1024B). Runtime 60 seconds [ 437.998720][ T2306] block nbd7: Possible stuck request ffff888026ca8200: control (read@1024,1024B). Runtime 60 seconds [ 438.007655][T18310] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 438.010602][ T2306] block nbd7: Possible stuck request ffff888026ca8400: control (read@2048,1024B). Runtime 60 seconds [ 438.029063][ T2306] block nbd7: Possible stuck request ffff888026ca8600: control (read@3072,1024B). Runtime 60 seconds [ 438.042443][T18310] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 438.079795][T18316] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3187'. [ 438.173464][T18277] chnl_net:caif_netlink_parms(): no params data found [ 438.225866][ T7792] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.340925][ T7792] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.367167][ T7792] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.392820][ T7792] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.599831][T18277] bridge0: port 1(bridge_slave_0) entered blocking state [ 438.607753][T18277] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.615568][T18277] bridge_slave_0: entered allmulticast mode [ 438.623499][T18277] bridge_slave_0: entered promiscuous mode [ 438.633059][T18277] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.659647][T18277] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.674201][T18277] bridge_slave_1: entered allmulticast mode [ 438.682151][T18277] bridge_slave_1: entered promiscuous mode [ 438.771417][T18277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 438.787581][T18277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 438.869948][T18277] team0: Port device team_slave_0 added [ 438.937924][T18344] block nbd16: server does not support multiple connections per device. [ 438.947332][T18344] block nbd16: shutting down sockets [ 438.967680][ T9668] IPVS: starting estimator thread 0... [ 438.999419][T18351] 8021q: adding VLAN 0 to HW filter on device bond0 [ 439.014353][ T5837] Bluetooth: hci0: command tx timeout [ 439.041024][T18351] 8021q: adding VLAN 0 to HW filter on device team0 [ 439.094251][T18358] IPVS: using max 31 ests per chain, 74400 per kthread [ 439.133045][T18277] team0: Port device team_slave_1 added [ 439.198690][T18277] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 439.231270][T18379] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3198'. [ 439.249236][T18277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 439.282257][T18277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 439.299126][T18277] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 439.311689][T18381] netlink: 'syz.1.3200': attribute type 1 has an invalid length. [ 439.314371][T18277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 439.323187][T18381] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3200'. [ 439.347302][T18277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 439.374569][T18379] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 439.387128][T18379] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 439.398616][T18379] bond0 (unregistering): Released all slaves [ 439.485547][T18277] hsr_slave_0: entered promiscuous mode [ 439.492317][T18277] hsr_slave_1: entered promiscuous mode [ 439.514949][T18277] debugfs: 'hsr0' already exists in 'hsr' [ 439.529813][T18277] Cannot create hsr debugfs directory [ 439.545640][T18384] tipc: New replicast peer: 255.255.255.255 [ 439.552563][T18384] tipc: Enabled bearer , priority 10 [ 439.743057][T18389] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 439.758724][T18389] syzkaller0: linktype set to 270 [ 439.821596][T18374] infiniband syz0: set down [ 439.829486][T18374] infiniband syz0: added bond0 [ 439.862144][ T9668] syz0: Port: 1 Link DOWN [ 439.899952][ T2306] block nbd9: Possible stuck request ffff888026d20000: control (read@0,1024B). Runtime 60 seconds [ 439.912108][ T2306] block nbd9: Possible stuck request ffff888026d20200: control (read@1024,1024B). Runtime 60 seconds [ 439.924400][ T2306] block nbd9: Possible stuck request ffff888026d20400: control (read@2048,1024B). Runtime 60 seconds [ 439.943841][ T2306] block nbd9: Possible stuck request ffff888026d20600: control (read@3072,1024B). Runtime 60 seconds [ 440.159229][T18374] RDS/IB: syz0: added [ 440.176153][T18374] smc: adding ib device syz0 with port count 1 [ 440.223061][T18374] smc: ib device syz0 port 1 has no pnetid [ 440.595566][T18408] nbd: socks must be embedded in a SOCK_ITEM attr [ 440.633188][T18408] block nbd16: shutting down sockets [ 440.934036][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 440.942105][ C0] lec:lec_tx_timeout: lec0 [ 440.947065][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 440.972216][T18414] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3209'. [ 441.054777][T18413] block nbd16: server does not support multiple connections per device. [ 441.066552][T18413] block nbd16: shutting down sockets [ 441.094231][ T5837] Bluetooth: hci0: command tx timeout [ 441.176462][T18277] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 441.192060][T18420] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3211'. [ 441.238944][T18277] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 441.285359][T18277] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 441.360565][T18277] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 441.434648][ T7781] net_ratelimit: 71 callbacks suppressed [ 441.434667][ T7781] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 441.648496][T18277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 441.690020][T18277] 8021q: adding VLAN 0 to HW filter on device team0 [ 441.704617][ T7792] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 441.731782][ T7792] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.739003][ T7792] bridge0: port 1(bridge_slave_0) entered forwarding state [ 441.769760][ T7792] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.777018][ T7792] bridge0: port 2(bridge_slave_1) entered forwarding state [ 441.874337][ T7789] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 441.926452][T18447] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3215'. [ 442.006543][ T7781] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 442.124315][ T7786] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 442.244260][ T7792] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 442.327321][T18277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 442.425135][T18277] veth0_vlan: entered promiscuous mode [ 442.454564][ T7792] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 442.463334][T18277] veth1_vlan: entered promiscuous mode [ 442.547881][T18277] veth0_macvtap: entered promiscuous mode [ 442.584223][ T7786] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 442.605731][T18277] veth1_macvtap: entered promiscuous mode [ 442.686332][T18277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 442.748575][T18277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 442.796863][ T7781] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.820041][ T7781] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.868267][ T7781] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.887892][ T7781] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.934466][ T7792] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 442.979884][T18468] netlink: 'syz.4.3222': attribute type 2 has an invalid length. [ 443.098864][ T7792] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 443.115731][ T7496] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 443.143929][ T7496] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 443.175820][ T5837] Bluetooth: hci0: command tx timeout [ 443.205480][ T7792] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 443.248382][ T7792] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 443.745599][T18493] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3227'. [ 443.764318][T18493] netlink: 'syz.1.3227': attribute type 1 has an invalid length. [ 443.772084][T18493] netlink: 'syz.1.3227': attribute type 2 has an invalid length. [ 444.271171][ T7787] smc: removing ib device syz0 [ 444.386549][T18503] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3230'. [ 444.582583][T18506] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3231'. [ 444.745454][T18506] team1: entered promiscuous mode [ 444.778503][T18506] team1: entered allmulticast mode [ 444.820179][T18506] 8021q: adding VLAN 0 to HW filter on device team1 [ 444.963074][ T5838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 444.973457][ T5838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 444.984821][ T5838] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 445.004252][ T5838] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 445.015947][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 445.056621][T18521] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3237'. [ 445.165377][T18515] lo speed is unknown, defaulting to 1000 [ 445.254739][ T51] Bluetooth: hci0: command tx timeout [ 445.399083][T18525] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3236'. [ 445.414964][T18519] lo speed is unknown, defaulting to 1000 [ 445.901372][ T5824] syz_tun (unregistering): left promiscuous mode [ 446.537952][T18557] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3246'. [ 446.773836][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5830 ms [ 446.781893][ C0] lec:lec_tx_timeout: lec0 [ 446.894825][ T7786] net_ratelimit: 18 callbacks suppressed [ 446.894843][ T7786] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 447.010696][T18574] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3252'. [ 447.089368][T18515] chnl_net:caif_netlink_parms(): no params data found [ 447.097115][ T51] Bluetooth: hci2: command tx timeout [ 447.396897][T18592] netlink: 'syz.3.3256': attribute type 1 has an invalid length. [ 447.551789][T18593] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3256'. [ 447.597590][T18515] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.605419][T18515] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.613619][T18515] bridge_slave_0: entered allmulticast mode [ 447.621327][T18515] bridge_slave_0: entered promiscuous mode [ 447.693940][T18515] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.701353][T18515] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.721906][T18515] bridge_slave_1: entered allmulticast mode [ 447.740204][T18515] bridge_slave_1: entered promiscuous mode [ 447.797324][T18601] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3257'. [ 447.871406][T18515] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 447.892634][T18605] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3259'. [ 447.897491][T18515] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 447.970284][T18515] team0: Port device team_slave_0 added [ 448.037892][T18515] team0: Port device team_slave_1 added [ 448.241670][T18515] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 448.256075][T18515] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 448.314341][T18515] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 448.352144][T18515] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 448.360480][T18515] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 448.390897][T18515] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 448.404129][ T7496] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 448.508334][T18515] hsr_slave_0: entered promiscuous mode [ 448.515657][T18515] hsr_slave_1: entered promiscuous mode [ 448.522109][T18515] debugfs: 'hsr0' already exists in 'hsr' [ 448.545503][T18515] Cannot create hsr debugfs directory [ 448.619776][T18628] IPv6: NLM_F_CREATE should be specified when creating new route [ 448.634625][ T7787] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 448.805934][T18635] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3269'. [ 448.980535][T18515] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 448.999002][T18515] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.034146][ T7787] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 449.116545][T18515] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 449.138032][T18515] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.174709][ T7496] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 449.182654][ T51] Bluetooth: hci2: command tx timeout [ 449.221768][T18515] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 449.238843][T18515] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.293941][ T7496] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 449.311629][T18663] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.3279'. [ 449.332917][T18515] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 449.348682][T18515] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.369578][T18663] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 449.421936][T18663] syzkaller1: entered promiscuous mode [ 449.428047][T18663] syzkaller1: entered allmulticast mode [ 449.496858][ T7787] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 449.630229][T18515] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 449.648088][T18515] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 449.698016][T18515] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 449.708432][T18515] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 449.739215][ T7787] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 449.801514][T18681] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3285'. [ 449.915787][ T7786] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 450.056284][T18515] 8021q: adding VLAN 0 to HW filter on device bond0 [ 450.118437][T18515] 8021q: adding VLAN 0 to HW filter on device team0 [ 450.152968][ T7787] bridge0: port 1(bridge_slave_0) entered blocking state [ 450.160162][ T7787] bridge0: port 1(bridge_slave_0) entered forwarding state [ 450.192558][T18691] netlink: 'syz.2.3287': attribute type 1 has an invalid length. [ 450.218065][ T7496] bridge0: port 2(bridge_slave_1) entered blocking state [ 450.225272][ T7496] bridge0: port 2(bridge_slave_1) entered forwarding state [ 450.286333][T18691] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3287'. [ 450.842891][T18721] netlink: 'syz.3.3295': attribute type 39 has an invalid length. [ 450.858467][T18515] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 450.880726][T18724] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3296'. [ 450.908782][T18724] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3296'. [ 450.968160][T18729] RDS: rds_bind could not find a transport for fc02::, load rds_tcp or rds_rdma? [ 451.264271][ T51] Bluetooth: hci2: command tx timeout [ 451.350557][T18515] veth0_vlan: entered promiscuous mode [ 451.371590][T18515] veth1_vlan: entered promiscuous mode [ 451.446773][T18515] veth0_macvtap: entered promiscuous mode [ 451.456096][T18750] delete_channel: no stack [ 451.457444][T18515] veth1_macvtap: entered promiscuous mode [ 451.485521][T18515] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 451.506064][T18515] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 451.566753][ T7786] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.582803][ T7786] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.620530][ T7786] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.640220][ T7786] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.752212][ T7786] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 451.778387][ T7786] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 451.840747][ T7786] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 451.860737][ T7786] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 451.872887][T18767] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 451.902498][T18767] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 451.938061][T18767] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 451.946599][T18767] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 451.953075][T18767] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 451.985199][T18767] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 451.995003][ T7493] net_ratelimit: 14 callbacks suppressed [ 451.995020][ T7493] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 452.037503][T18767] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 452.045106][T18767] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 452.053197][T18767] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 452.089736][T18767] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 452.124839][T18767] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 452.144587][T18775] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 452.164668][T18767] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 452.217728][T18767] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 452.254724][ T7797] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 452.261297][T18767] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 452.299444][T18767] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 452.344501][T18767] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 452.350736][T18767] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 452.372768][T18793] lo speed is unknown, defaulting to 1000 [ 452.379754][ T7790] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 452.409169][T18767] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 452.420496][T18767] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 452.448414][T18767] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 452.450402][T18800] __nla_validate_parse: 1 callbacks suppressed [ 452.450420][T18800] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3314'. [ 452.456125][T18767] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 452.492032][T18800] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3314'. [ 452.494517][T18767] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 452.536741][T18767] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 452.557449][T18767] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 452.574449][T18802] netlink: 'syz.4.3316': attribute type 9 has an invalid length. [ 452.598514][T18802] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3316'. [ 452.604211][T18767] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 452.607909][ T7790] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 452.624189][T18767] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 452.631365][T18767] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 452.649224][T18767] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 452.657917][T18767] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 452.665105][T18767] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 452.671466][T18767] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 452.677749][T18767] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 452.684938][T18767] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 452.699441][T18767] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 452.709701][T18807] netlink: 'syz.0.3317': attribute type 3 has an invalid length. [ 452.724080][T18775] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 452.832948][T18810] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3318'. [ 452.867609][T18815] netlink: 'syz.0.3320': attribute type 21 has an invalid length. [ 452.880006][T18816] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3319'. [ 452.909719][T18816] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3319'. [ 452.939551][T18816] netlink: 196 bytes leftover after parsing attributes in process `syz.3.3319'. [ 452.954635][T18815] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3320'. [ 452.966446][T18816] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3319'. [ 452.989423][T18815] netlink: 'syz.0.3320': attribute type 10 has an invalid length. [ 452.993932][ T1101] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 453.058040][T18815] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 453.130418][T18827] veth1: entered promiscuous mode [ 453.153245][T18827] macsec1: entered allmulticast mode [ 453.160002][T18827] veth1: entered allmulticast mode [ 453.184433][ T1101] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 453.212567][T18833] netlink: 280 bytes leftover after parsing attributes in process `syz.3.3324'. [ 453.351223][ T51] Bluetooth: hci2: command tx timeout [ 453.569743][T18859] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 455.007432][ T7493] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 455.097163][T18866] netlink: 'syz.0.3331': attribute type 10 has an invalid length. [ 455.112066][T18866] hsr0: entered promiscuous mode [ 455.124804][T18866] bridge0: port 3(hsr0) entered blocking state [ 455.144461][T18866] bridge0: port 3(hsr0) entered disabled state [ 455.150894][T18866] hsr0: entered allmulticast mode [ 455.180394][T18866] hsr_slave_0: entered allmulticast mode [ 455.188510][T18866] hsr_slave_1: entered allmulticast mode [ 455.207904][T18866] bridge0: port 3(hsr0) entered blocking state [ 455.214274][T18866] bridge0: port 3(hsr0) entered forwarding state [ 455.260412][ C1] [ 455.262786][ C1] ============================================ [ 455.269036][ C1] WARNING: possible recursive locking detected [ 455.275275][ C1] syzkaller #0 Not tainted [ 455.279739][ C1] -------------------------------------------- [ 455.285881][ C1] ksoftirqd/1/23 is trying to acquire lock: [ 455.291767][ C1] ffff88805312ef70 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x237/0x360 [ 455.300937][ C1] [ 455.300937][ C1] but task is already holding lock: [ 455.308291][ C1] ffff88807c282f70 (&hsr->seqnr_lock){+.-.}-{3:3}, at: send_hsr_supervision_frame+0x380/0xcb0 [ 455.318560][ C1] [ 455.318560][ C1] other info that might help us debug this: [ 455.326605][ C1] Possible unsafe locking scenario: [ 455.326605][ C1] [ 455.334113][ C1] CPU0 [ 455.337386][ C1] ---- [ 455.340672][ C1] lock(&hsr->seqnr_lock); [ 455.345167][ C1] lock(&hsr->seqnr_lock); [ 455.349660][ C1] [ 455.349660][ C1] *** DEADLOCK *** [ 455.349660][ C1] [ 455.357786][ C1] May be due to missing lock nesting notation [ 455.357786][ C1] [ 455.366089][ C1] 8 locks held by ksoftirqd/1/23: [ 455.371103][ C1] #0: ffffc900001d7a80 ((&hsr->announce_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd4/0x640 [ 455.381153][ C1] #1: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: hsr_announce+0x89/0x370 [ 455.390293][ C1] #2: ffff88807c282f70 (&hsr->seqnr_lock){+.-.}-{3:3}, at: send_hsr_supervision_frame+0x380/0xcb0 [ 455.400996][ C1] #3: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: hsr_forward_skb+0xb3/0x2860 [ 455.410490][ C1] #4: ffffffff8e760340 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x28d/0x38d0 [ 455.420492][ C1] #5: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: br_dev_xmit+0x193/0x1930 [ 455.429785][ C1] #6: ffffffff8e760340 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x28d/0x38d0 [ 455.439702][ C1] #7: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: hsr_dev_xmit+0x2d/0x360 [ 455.448849][ C1] [ 455.448849][ C1] stack backtrace: [ 455.454735][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full) [ 455.454757][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 455.454769][ C1] Call Trace: [ 455.454777][ C1] [ 455.454785][ C1] dump_stack_lvl+0xe8/0x150 [ 455.454813][ C1] print_deadlock_bug+0x279/0x290 [ 455.454839][ C1] __lock_acquire+0x253f/0x2cf0 [ 455.454863][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 455.454887][ C1] lock_acquire+0xf0/0x2e0 [ 455.454906][ C1] ? hsr_dev_xmit+0x237/0x360 [ 455.454929][ C1] ? hsr_dev_xmit+0x237/0x360 [ 455.454946][ C1] _raw_spin_lock_bh+0x36/0x50 [ 455.455037][ C1] ? hsr_dev_xmit+0x237/0x360 [ 455.455055][ C1] hsr_dev_xmit+0x237/0x360 [ 455.455072][ C1] ? hsr_dev_xmit+0x2d/0x360 [ 455.455091][ C1] dev_hard_start_xmit+0x2d8/0x870 [ 455.455114][ C1] __dev_queue_xmit+0x17a7/0x38d0 [ 455.455132][ C1] ? __dev_queue_xmit+0x28d/0x38d0 [ 455.455150][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 455.455173][ C1] ? ebt_do_table+0x2665/0x2830 [ 455.455255][ C1] ? ebt_do_table+0x2665/0x2830 [ 455.455275][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 455.455300][ C1] ? br_nf_post_routing+0x219/0xfe0 [ 455.455320][ C1] br_dev_queue_push_xmit+0x370/0x4a0 [ 455.455358][ C1] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 455.455374][ C1] NF_HOOK+0x360/0x3f0 [ 455.455388][ C1] ? NF_HOOK+0xa2/0x3f0 [ 455.455401][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 455.455414][ C1] ? ret_from_fork_asm+0x1a/0x30 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 455.455437][ C1] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 455.455456][ C1] br_forward_finish+0xd3/0x130 [ 455.455470][ C1] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 455.455484][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 455.455499][ C1] NF_HOOK+0x360/0x3f0 [ 455.455513][ C1] ? NF_HOOK+0xa2/0x3f0 [ 455.455526][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 455.455540][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 455.455556][ C1] ? __skb_clone+0x483/0x7a0 [ 455.455569][ C1] ? br_handle_vlan+0x61/0x530 [ 455.455621][ C1] __br_forward+0x397/0x540 [ 455.455634][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 455.455650][ C1] br_flood+0x6ee/0xb80 [ 455.455669][ C1] ? br_dev_xmit+0x193/0x1930 [ 455.455688][ C1] br_dev_xmit+0x1292/0x1930 [ 455.455707][ C1] ? br_dev_xmit+0x193/0x1930 [ 455.455728][ C1] ? __pfx_br_dev_xmit+0x10/0x10 [ 455.455745][ C1] ? __skb_get_hash_net+0x13f/0x2e0 [ 455.455787][ C1] ? __pfx___skb_get_hash_net+0x10/0x10 [ 455.455802][ C1] ? qdisc_pkt_len_segs_init+0x2c4/0x970 [ 455.455819][ C1] ? skb_network_protocol+0x234/0x3f0 [ 455.455835][ C1] ? __pfx_passthru_features_check+0x10/0x10 [ 455.455853][ C1] dev_hard_start_xmit+0x2d8/0x870 [ 455.455873][ C1] __dev_queue_xmit+0x17a7/0x38d0 [ 455.455889][ C1] ? handle_softirqs+0x22a/0x870 [ 455.455912][ C1] ? __dev_queue_xmit+0x28d/0x38d0 [ 455.455933][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 455.455953][ C1] ? __copy_skb_header+0xa3/0x4a0 [ 455.455972][ C1] ? hsr_addr_subst_dest+0x30d/0xa90 [ 455.455991][ C1] ? skb_clone+0x246/0x3a0 [ 455.456007][ C1] hsr_forward_skb+0x157b/0x2860 [ 455.456033][ C1] ? hsr_forward_skb+0xb3/0x2860 [ 455.456055][ C1] ? __pfx_hsr_forward_skb+0x10/0x10 [ 455.456076][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 455.456093][ C1] ? __asan_memset+0x22/0x50 [ 455.456108][ C1] ? __skb_pad+0x405/0x610 [ 455.456125][ C1] send_hsr_supervision_frame+0x731/0xcb0 [ 455.456149][ C1] ? __pfx_send_hsr_supervision_frame+0x10/0x10 [ 455.456170][ C1] hsr_announce+0x1db/0x370 [ 455.456188][ C1] ? hsr_announce+0x89/0x370 [ 455.456206][ C1] ? __pfx_hsr_announce+0x10/0x10 [ 455.456228][ C1] call_timer_fn+0x192/0x640 [ 455.456249][ C1] ? __pfx_hsr_announce+0x10/0x10 [ 455.456267][ C1] ? call_timer_fn+0xd4/0x640 [ 455.456286][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 455.456309][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 455.456330][ C1] ? __pfx_hsr_announce+0x10/0x10 [ 455.456348][ C1] __run_timer_base+0x652/0x8b0 [ 455.456372][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 455.456392][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 455.456416][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 455.456438][ C1] run_timer_softirq+0xb7/0x170 [ 455.456456][ C1] handle_softirqs+0x22a/0x870 [ 455.456476][ C1] ? schedule+0x90/0x360 [ 455.456497][ C1] ? run_ksoftirqd+0x36/0x60 [ 455.456521][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 455.456542][ C1] run_ksoftirqd+0x36/0x60 [ 455.456563][ C1] smpboot_thread_fn+0x541/0xa50 [ 455.456592][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 455.456617][ C1] kthread+0x388/0x470 [ 455.456632][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 455.456653][ C1] ? __pfx_kthread+0x10/0x10 [ 455.456667][ C1] ret_from_fork+0x51e/0xb90 [ 455.456695][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 455.456714][ C1] ? __switch_to+0xc7d/0x1450 [ 455.456742][ C1] ? __pfx_kthread+0x10/0x10 [ 455.456756][ C1] ret_from_fork_asm+0x1a/0x30 [ 455.456785][ C1] [ 455.471047][T18872] lo speed is unknown, defaulting to 1000 [ 456.300651][ T1101] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.357944][ T1101] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.389640][ T1101] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.457234][ T1101] bond0: (slave netdevsim0): Releasing backup interface [ 456.466032][ T1101] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.536670][ T2263] block nbd10: Possible stuck request ffff888026dd8000: control (read@0,1024B). Runtime 60 seconds [ 456.548737][ T2263] block nbd10: Possible stuck request ffff888026dd8200: control (read@1024,1024B). Runtime 60 seconds [ 456.559818][ T2263] block nbd10: Possible stuck request ffff888026dd8400: control (read@2048,1024B). Runtime 60 seconds [ 456.571008][ T2263] block nbd10: Possible stuck request ffff888026dd8600: control (read@3072,1024B). Runtime 60 seconds [ 456.617584][ T1101] hsr0: left allmulticast mode [ 456.622915][ T1101] hsr_slave_0: left allmulticast mode [ 456.628689][ T1101] hsr_slave_1: left allmulticast mode [ 456.635042][ T1101] bridge0: port 3(hsr0) entered disabled state [ 456.642180][ T1101] bridge_slave_1: left allmulticast mode [ 456.648961][ T1101] bridge_slave_1: left promiscuous mode [ 456.654776][ T1101] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.662884][ T1101] bridge_slave_0: left allmulticast mode [ 456.668864][ T1101] bridge_slave_0: left promiscuous mode [ 456.674662][ T1101] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.699803][ T1101] ip6gretap0 (unregistering): left promiscuous mode [ 456.732047][ T1101] bridge0 (unregistering): left promiscuous mode [ 456.797114][ T1101] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 456.807454][ T1101] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 456.819128][ T1101] bond0 (unregistering): Released all slaves [ 457.062683][ T1101] hsr_slave_0: left promiscuous mode [ 457.070920][ T1101] hsr_slave_1: left promiscuous mode [ 457.079706][ T1101] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 457.087244][ T1101] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 457.096615][ T1101] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 457.104120][ T1101] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 457.115123][ T1101] veth1_macvtap: left promiscuous mode [ 457.120594][ T1101] veth0_macvtap: left promiscuous mode [ 457.126404][ T1101] veth1_vlan: left promiscuous mode [ 457.131623][ T1101] veth0_vlan: left promiscuous mode [ 457.222846][ T1101] team0 (unregistering): Port device team_slave_1 removed [ 457.239229][ T1101] team0 (unregistering): Port device team_slave_0 removed [ 457.294347][ T7797] net_ratelimit: 11 callbacks suppressed [ 457.294367][ T7797] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 457.414098][T18775] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 457.524140][ T7493] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 457.633908][ T7493] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 457.670582][ T1101] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.701149][ T1101] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.749811][ T7790] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 457.763088][ T1101] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.810898][ T1101] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.864250][ T7493] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 457.994247][ T7493] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 458.103888][ T7493] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 458.189245][ T1101] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.215505][ T7790] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 458.237610][ T1101] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.283367][ T1101] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.333632][ T1101] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.364038][T18775] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 458.440712][ T1101] bridge_slave_1: left allmulticast mode [ 458.447267][ T1101] bridge_slave_1: left promiscuous mode [ 458.452903][ T1101] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.462092][ T2263] block nbd11: Possible stuck request ffff888026e30000: control (read@0,1024B). Runtime 60 seconds [ 458.473352][ T2263] block nbd11: Possible stuck request ffff888026e30200: control (read@1024,1024B). Runtime 60 seconds [ 458.474445][ T1101] bridge_slave_0: left allmulticast mode [ 458.485046][ T2263] block nbd11: Possible stuck request ffff888026e30400: control (read@2048,1024B). Runtime 60 seconds [ 458.492330][ T1101] bridge_slave_0: left promiscuous mode [ 458.501231][ T2263] block nbd11: Possible stuck request ffff888026e30600: control (read@3072,1024B). Runtime 60 seconds [ 458.518804][ T1101] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.527684][ T1101] bridge_slave_1: left allmulticast mode [ 458.533318][ T1101] bridge_slave_1: left promiscuous mode [ 458.539555][ T1101] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.547571][ T1101] bridge_slave_0: left allmulticast mode [ 458.553204][ T1101] bridge_slave_0: left promiscuous mode [ 458.559185][ T1101] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.568481][ T1101] bridge_slave_1: left allmulticast mode [ 458.574251][ T1101] bridge_slave_1: left promiscuous mode [ 458.579885][ T1101] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.588404][ T1101] bridge_slave_0: left allmulticast mode [ 458.594302][ T1101] bridge_slave_0: left promiscuous mode [ 458.599934][ T1101] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.709211][ T1101] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 458.719307][ T1101] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 458.729127][ T1101] bond0 (unregistering): Released all slaves [ 458.809737][ T1101] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 458.819717][ T1101] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 458.829186][ T1101] bond0 (unregistering): Released all slaves [ 458.864386][ T1101] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 458.875131][ T1101] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 458.884997][ T1101] bond0 (unregistering): Released all slaves [ 458.892574][ T1101] bond1 (unregistering): Released all slaves [ 459.493736][ T1101] hsr_slave_0: left promiscuous mode [ 459.500207][ T1101] hsr_slave_1: left promiscuous mode [ 459.507823][ T1101] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 459.520068][ T1101] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 459.529094][ T1101] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 459.536919][ T1101] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 459.568266][ T1101] hsr_slave_0: left promiscuous mode [ 459.575555][ T1101] hsr_slave_1: left promiscuous mode [ 459.581240][ T1101] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 459.589249][ T1101] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 459.601213][ T1101] hsr_slave_0: left promiscuous mode [ 459.608280][ T1101] hsr_slave_1: left promiscuous mode [ 459.617251][ T1101] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 459.626714][ T1101] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 459.637875][ T1101] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 459.647068][ T1101] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 459.670590][ T1101] veth1_macvtap: left promiscuous mode [ 459.676227][ T1101] veth0_macvtap: left promiscuous mode [ 459.681778][ T1101] veth1_vlan: left promiscuous mode [ 459.690172][ T1101] veth0_vlan: left promiscuous mode [ 459.696441][ T1101] veth1_macvtap: left promiscuous mode [ 459.701930][ T1101] veth0_macvtap: left promiscuous mode [ 459.708593][ T1101] veth1_vlan: left promiscuous mode [ 459.714402][ T1101] veth0_vlan: left promiscuous mode [ 459.834465][ T1101] team0 (unregistering): Port device team_slave_1 removed [ 459.846150][ T1101] team0 (unregistering): Port device team_slave_0 removed [ 459.961261][ T1101] team0 (unregistering): Port device team_slave_1 removed [ 459.971571][ T1101] team0 (unregistering): Port device team_slave_0 removed [ 460.067566][ T1101] team0 (unregistering): Port device team_slave_1 removed [ 460.091331][ T1101] team0 (unregistering): Port device team_slave_0 removed [ 462.394353][ T7790] net_ratelimit: 25 callbacks suppressed [ 462.394384][ T7790] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 462.514024][ T7790] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 462.624154][ T7790] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 462.733970][ T7791] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 462.844228][ T1101] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 462.953914][ T7790] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 463.064278][ T7785] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 463.174059][ T1101] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 463.284132][ T7785] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 463.393940][ T7493] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 463.574242][ T2263] block nbd12: Possible stuck request ffff888026ea8000: control (read@0,1024B). Runtime 60 seconds [ 463.585294][ T2263] block nbd12: Possible stuck request ffff888026ea8200: control (read@1024,1024B). Runtime 60 seconds [ 463.596339][ T2263] block nbd12: Possible stuck request ffff888026ea8400: control (read@2048,1024B). Runtime 60 seconds [ 463.607509][ T2263] block nbd12: Possible stuck request ffff888026ea8600: control (read@3072,1024B). Runtime 60 seconds [ 463.814413][ T5194] udevd[5194]: worker [15961] /devices/virtual/block/nbd10 is taking a long time [ 463.823575][ T5194] udevd[5194]: worker [12771] /devices/virtual/block/nbd7 is taking a long time [ 463.833206][ T5194] udevd[5194]: worker [12741] /devices/virtual/block/nbd9 is taking a long time [ 463.842915][ T5194] udevd[5194]: worker [15951] /devices/virtual/block/nbd11 is taking a long time [ 463.852133][ T5194] udevd[5194]: worker [12737] /devices/virtual/block/nbd12 is taking a long time [ 464.874233][ T2263] block nbd13: Possible stuck request ffff888026f50000: control (read@0,1024B). Runtime 60 seconds [ 464.885111][ T2263] block nbd13: Possible stuck request ffff888026f50200: control (read@1024,1024B). Runtime 60 seconds [ 464.896502][ T2263] block nbd13: Possible stuck request ffff888026f50400: control (read@2048,1024B). Runtime 60 seconds [ 464.907533][ T2263] block nbd13: Possible stuck request ffff888026f50600: control (read@3072,1024B). Runtime 60 seconds