last executing test programs: 6.259193132s ago: executing program 3 (id=4306): socket$netlink(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x94}, 0x24000000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)}, 0x10001) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0xe0}}, 0x0) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x0, 0x40000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000c18000)="ad", 0x1) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r7 = socket(0x10, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x28, r9, 0x65aebf9dafbebb59, 0x70bd28, 0x1, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x6, 0x112}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x400c080}, 0x24048840) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0x0, 0xfffffffc, 0x8}, 0xc) ioctl$XFS_IOC_AG_GEOMETRY(r10, 0xc080583d, &(0x7f0000000440)={0x10001, 0x8, 0x2, 0x7, 0x2, 0xeff, 0x58, 0x9e}) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000380)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbee, {0x0, 0x0, 0x0, 0x0, 0x40c35}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_PORT={0x6, 0x2, 0x1, 0x0, 0x4e23}]}}}, @IFLA_LINK={0x8, 0x5, r12}]}, 0x44}, 0x1, 0x0, 0x0, 0x20028001}, 0x8000) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x30, 0xd, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000805}, 0x4004084) socket(0x10, 0x3, 0x0) 5.87776558s ago: executing program 3 (id=4311): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x7fff}, &(0x7f0000000040)=0x8) (async) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x7fff}, &(0x7f0000000040)=0x8) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x7800, 0x8, 0x4f1, 0xfffffffd, {{0x16, 0x4, 0x3, 0x4, 0x58, 0x64, 0x0, 0xf8, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x18}, {[@cipso={0x86, 0x2d, 0x0, [{0x5, 0x7, "664dd86e59"}, {0x0, 0x8, "13d34dff9d96"}, {0x0, 0x8, "581311dff970"}, {0x5, 0x10, "c8f0734d492114d5f2dac276c19b"}]}, @timestamp={0x44, 0x14, 0x8e, 0x0, 0x2, [0xdf, 0x7, 0x4, 0xfffffffc]}]}}}}}) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000140)={@private0={0xfc, 0x0, '\x00', 0x1}, r3}, 0x14) r4 = socket(0x25, 0x4, 0x7) sendto$l2tp(r4, &(0x7f0000000180)="95a202a8b4db281377bfc8ddc38a3e9cfee15dbe0bde6aa101475786024ebcebeac8e3d2c4b5087dd570193295133456efdaef873fadd617d92c67e41cddd6056222c6a0a3fba3fff666018a951c67445966a53fa1272dc48e1006e776c039be643af026eabea17e963c37e250d6cefaec0f5053c337b77d79fcf6313d47892a9fd39a4520d2f99135efae521fb4abc46060c3716ce9d4101767472dd61f59419fef5bec5ecce6d52b4033530921f159534f5d931382226e05c42f0415a5b9c45c02dd65195fb74e46586dc57d6533da54d9e4955ea677", 0xd7, 0x80, &(0x7f0000000280)={0x2, 0x0, @loopback, 0x4}, 0x10) (async) sendto$l2tp(r4, &(0x7f0000000180)="95a202a8b4db281377bfc8ddc38a3e9cfee15dbe0bde6aa101475786024ebcebeac8e3d2c4b5087dd570193295133456efdaef873fadd617d92c67e41cddd6056222c6a0a3fba3fff666018a951c67445966a53fa1272dc48e1006e776c039be643af026eabea17e963c37e250d6cefaec0f5053c337b77d79fcf6313d47892a9fd39a4520d2f99135efae521fb4abc46060c3716ce9d4101767472dd61f59419fef5bec5ecce6d52b4033530921f159534f5d931382226e05c42f0415a5b9c45c02dd65195fb74e46586dc57d6533da54d9e4955ea677", 0xd7, 0x80, &(0x7f0000000280)={0x2, 0x0, @loopback, 0x4}, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f00000002c0)={r4}) bind$phonet(r5, &(0x7f0000000300)={0x23, 0xf9, 0x3, 0x4}, 0x10) (async) bind$phonet(r5, &(0x7f0000000300)={0x23, 0xf9, 0x3, 0x4}, 0x10) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000340)={0x7, [0x7, 0x401, 0x1, 0x200, 0x531, 0x4, 0x401]}, &(0x7f0000000380)=0x12) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) recvfrom$inet6(r6, &(0x7f00000003c0)=""/35, 0x23, 0x0, 0x0, 0x0) (async) recvfrom$inet6(r6, &(0x7f00000003c0)=""/35, 0x23, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000400), &(0x7f0000000440)=0x8) ioctl$XFS_IOC_FD_TO_HANDLE(r2, 0xc038586a, &(0x7f0000000580)={r2, &(0x7f0000000480)='[*-\xbb},-\x00', 0x40, &(0x7f00000004c0)={@_ha_fsid={[0x9, 0xa]}, {0x2d18, 0x496, 0x2, 0xd10f}}, 0x34, &(0x7f0000000500)={@_ha_fsid}, &(0x7f0000000540)=0x1}) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x1, &(0x7f00000005c0)=@gcm_256={{0x303}, "772c31dd808daad1", "a510dc7cd0d1f5e09e26e02ccb3da133cab7cb8eba93ae1a6a9d116137499788", "1920483d", "35d6f367853adb0c"}, 0x38) (async) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x1, &(0x7f00000005c0)=@gcm_256={{0x303}, "772c31dd808daad1", "a510dc7cd0d1f5e09e26e02ccb3da133cab7cb8eba93ae1a6a9d116137499788", "1920483d", "35d6f367853adb0c"}, 0x38) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r2, 0x4048587b, &(0x7f0000000ac0)={{r5, &(0x7f0000000740)='\x00', 0x800, &(0x7f0000000780)={@align, {0x6, 0x806, 0xffff5c2b, 0x4}}, 0x5, &(0x7f00000007c0)={@_ha_fsid}, &(0x7f0000000800)=0x6d}, 0x2, &(0x7f0000000a80)=[{0x2, 0x3, &(0x7f0000000840)='#\\\x00', &(0x7f0000000880)="3ad5271473ac87627207151c08d68990318f808a3e94b10ef128280fbdd534fbc482f8eb30ae756206e58ef04695d8909e01f73c24b563caaa1661977330bb78e887e3a3b1c5fff5747d2e51bc57c84cbbd5986f1f1b22fe32c7245e15d478228ab352476927fb66d83479820123b6b9404f04463494d82675a3b900f0ed7fd1b7b57accd13d643e0c62fe151abbebe4f27953c42899da9db9a816de5459a79ccbb02bbf40f8a109dc897b350e6edd7cab3849d01694d4b860512863bffed91714896f054963e0485de08d1a", 0xcc, 0x28}, {0x2, 0x7, &(0x7f0000000980)='syztnl0\x00', &(0x7f00000009c0)="382a7f1cef775b302c2ca2ab5298b9f142712bbcaa7a54d567bb21781732857228ce3028de427e3932c1dd58fb72c654602d9011e19e70b014c8c94eb37f0b2ebc649033cbe7a9d1ebe3caf2e053e1b0036d5226380b1d6a9bf8b2810656afd610d18895a1cbd3ad362e0d529c497df250f568b0924e2f0f47b109e7fa288030c42ec33af9f146", 0x87, 0x48}]}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000b80)={0x1ff}, 0x8) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000b80)={0x1ff, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x1, 0x14, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3ff}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@exit, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x6}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000006c0)='syzkaller\x00', 0xaf5, 0x40, &(0x7f0000000700)=""/64, 0x41000, 0x2, '\x00', r3, @fallback=0x14, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000b40)={0x5, 0x6, 0xfff, 0x4}, 0x10, r9, r7, 0x6, 0x0, &(0x7f0000000bc0)=[{0x1, 0x1, 0x9, 0xb}, {0x3, 0x5, 0x8}, {0x0, 0x5, 0x10, 0x2}, {0x5, 0x3, 0x5, 0xb}, {0x0, 0x5, 0x4, 0x9}, {0x3, 0x4, 0x5, 0xa}], 0x10, 0xfffffffa}, 0x94) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x1, 0x14, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3ff}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@exit, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x6}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000006c0)='syzkaller\x00', 0xaf5, 0x40, &(0x7f0000000700)=""/64, 0x41000, 0x2, '\x00', r3, @fallback=0x14, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000b40)={0x5, 0x6, 0xfff, 0x4}, 0x10, r9, r7, 0x6, 0x0, &(0x7f0000000bc0)=[{0x1, 0x1, 0x9, 0xb}, {0x3, 0x5, 0x8}, {0x0, 0x5, 0x10, 0x2}, {0x5, 0x3, 0x5, 0xb}, {0x0, 0x5, 0x4, 0x9}, {0x3, 0x4, 0x5, 0xa}], 0x10, 0xfffffffa}, 0x94) pwrite64(r4, &(0x7f0000000d00)="3f0496e2cdd8fd7d8e891abe8377571e05873de3bfaa781bf5dc389c00d6d467a2ef875cff5ae4472b8538bad29da277b4fa1ca01e9e3d11ba38e5e8fa1f685cd18ab45adf46b83da507e7b6f9a4b672bf1916d4110b63f3681cfebf63b38e1b0d5d6ea799a2a0a244cb085de8cb189c90438a7935d9c03464b6a2ab7663db15c56af8b04a74fdd371cfd46b0ea3c4394e9f3126a367477ea07de984bd7b8f694f64f95acb5500a58e4c2fd4cd3f8ddfea4274466dba40e54512abb9d69a86556307e1a48e66503bd9", 0xc9, 0x2) r11 = openat$cgroup_ro(r8, &(0x7f0000000e00)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000e40)={0x1b, 0x0, 0x0, 0x898, 0x0, r7, 0x80, '\x00', r3, r11, 0x2, 0x3, 0x5}, 0x50) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f0000000ec0)={r1, 0x4, 0x6}, &(0x7f0000000f00)=0x8) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, 0xfffffffffffffffd) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r7, 0x84, 0x13, &(0x7f0000000f40)={r12, 0x6}, &(0x7f0000000f80)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000fc0)={r13, 0x1000, "e8cadabec794a4a9707833f38f9ec80de2feb879a1d4a4e23319563c43e580770f01d38e69d018fae9972a96b2fe224c09d6002689374f663c81f80867995687c8213dbd4cf6276437d6c4bf57346adfe3eb92c0978cd54db923b37cac96d64634632e5fdc4d9daf8635a79b027ca8c0bbfb2dddcc33400b7e485d88233e90498b421865e463edf3de66d524aab60c392fb9f78bda747d7327159ddc700a7c40439d8cef2a12f72f94cf700841bf2a80f62c7a9711409522a8b37c9d726f6989a76541382eabce2702a9865d86df37f7490f3d78551117b1045d303e09064f4eceeb3183419f27e0328da947ec83a472949b0005f4d6d54e2537c0141ead3d28f1efb989d3e8cd5dc56eef3f15c5da42b1d75137bd2178ebd4f5b0edc62c403fc1dd1a59983f11b69c6cfe3e36634ddd499ab62d6db088559ff17fe09057b4950c22ecd537959b43cf5880b76c1a2871952590e457ee96caa903de21a8234d067027750cf6704c09b16fc55ef20f72eb0b9f5bdfa9504a7020560a13aaa540e10e5b2c5480337abeabfb31e1459ecdf998ef3c72303a6393822b95aaf2e944ec24712d3df895b563b939c156b20b90d2a34a7e307e90623208dad73e5507339b23fc429118bd3997044fe4a7fa7b048fc3ec2ded51a9d2d9dfb965d7ee95ca55bf7db8e115cd8a61de6813417f2a318181dd536b57f3f3cdfbdee8fbbe39884e192c9c09ae160f005cc6a2784352385d10452a7677c150aa09ed160f85e787937447a72c756d7fca8526b4f3c50365db6af7de8da98eed2150ec45aefadfb8e4466cc1b3053e4736fbf48cb5c699431c11b2362a2a79652cfa726d70bd4729103b70e45778fc970742dcf76ebf7030300428a116e09a52802208ab0944738782edde2dc5afc14a34074aedbc11ccf249b70f81b68ccf9ab640a404997b9b25961bd5ad8869589f9b6947eaecde5cc928d8b632c4cacde26e866cb66ded8851c535d1a95a7e1b40e968b076d9bafec7ef9751d90fc459c8b8df62d707e58bc48fd2dc5112503f9db13fb5de108efbcffa0eb70892569240b2777c44834cfc6a751e0ecc7e7d4f22879c6ce62abbe8b97f7b94c3ad4a4438b8b3d86314e8acdbdfc2517d582146e85354904b9ceebdded1a2b1bffd3e8c1f8327b564bdfa145233c79c7b1f2dd16e1faefa3332329e514d804671b58ada8d6c6dbb09aa6204c1350cca3c0a13f7d62a9aeab183359889dbe88da7a178f1e76cfdf2cabd9b00b0f10d1f813955f250eeec2147e26c9250d01ca30c9a763816e926872b7d13c662fe6ca4e5b94c2713690fc05c70b3a30dbbbcabba05760022489f4869930f2c633a4f4dc2283516d794dd4ccba97d5f745d6591b153abc98b613f72c3207ffbdfd64ac4a659433f1774b411441ca5b3855d7f0e4e824cb4d21fdcd55fd1f9d2e8f36c3cf501270bf5f9ec38d2f68fddce0dbf9d3e4b0fe0812b6273aa3c31ee84dd7bbe26dc6b83db3c07977f5e90ec3c9fccf03fcf02f420c70cba673932b9139e4e5a93d4cac8eefdec3bf7e4e72c96d4111b07d313209e6afe97f6f26cbaed6a791c5020cb99dbea3210344cfc9b61d17a3641b4cb64a2e018b0f9376abd2bfd2290ba1d0ff8bc6d92b1e68fc100dc1ae9ebad2bc74313a1db32d041c12477973cdd5611d9bd6f12deb23cf21757e373b1a3cf1032b2530ddb7c301ab7ddb4492ba00332010e07642496b629033f5c6862f063a3c38797f99c89550f1c04e1613c92576114f5fd93ab2d2fd5ed714597e6cb7b3229ddf65719b8aabfb8cb49a0322c96b8daec4f3c67c7c13e2ec3fac0a99e00bfcf0a7a7c65a2a6c07fe0a204df69f7bd664fc9e9dbd84d653af9dd1b2e55cdea36333cbb9fde9e65e9547c0e7b1e02900e9fa55f7debcaf53401b3225657ede9670a7a657931be43e052a1b4e2de9a852235a83ad6e5c1b1db253a69fe3dca9a6404518ec396251cf9d87b2423f88f63fab3b7f670634de8f5488fceafe18df8aa2e7ce422f76fe1a41334a4b6650bdafc3663c29b0f6402e01271f7deae93e1ec6729ddcee75c9ff6d88cef3deeade30708ddeef78d0066b241b99cd6d3427c23e97a0557ef545229b3316a88e42ab9951476831ae36bc1a26dd4fe05482dcd9a2bdf231ad7aa439b4f70b13ccb85c75a3c46051875285e63c586054ced320db8fd34ee84d05ad16a92fd4a0d6cc636d6a69f57c8304b2320f33d089690bca286f2b0085c9ff9cc601ad028e0d4ae102a4da8f0cce3fb44186fb1fc1ccaa14f44e0bf8234dcbcc4c81cf51f5e4b5915f55d04669e4c284d20af5f61512029a965a4610aae8121f39f5f03b627241a351e3f41592643f4b5093577471462c791571a7bc4b1d89d7fa108e7dd2943b658c0982c681f19db570e3ae746bfbe381efb9aa1615a9201d1bdce7deb142ece5f7ac7515ced0234593a58aa07267fa27947aae9f59ff1c46a24de3edb2c90f05174e0560db63e7f165306ce1b56350ff2fca9b551b5ea252de6190411dc5c5a068a093dbed657cac19a7fc222550bdbb77aae4a2282488fe03b170fb1a6501f331bbf6259853bf95e10c7fa603b701089bd6da03be11d40682801557a9aedf2d09883855c358c74e63ea6b2b6f45b07d8ee20a5c1a877a3b40f6210e429b3827b3c941c2649f61beb88c2dc9fbd5f0b29206fd96909440ca72ec3b33fca49de90f92e8e3de3fce65ced7d7b310bf50f50695afbe037c5a8de0a8644f36617f3d530fd7af8af7bcdd281542a3d35172c1d633bfda699dd5dbba9afefca2459435b54a3d577461b43dcf6f7387c28dec93363cc5615f2131f2d31b67ccdffb6e29d2cfea15959edd9b9b3b3aceebdba889a80f0c47804251f232987aa858061100c295f6b51601aed06405811e3c06f3d476eb4e60ca532f6c09a266f001003eee3c0579c42af82ae4221f4b4e584e8cc431c96c5b948d98d231242318245652aa59d34f1bb1f4cdfe2d5fd005bc3c7bb8cfc77a7a034e0cf1036af57ee82792361153526be37d1d5067a96685cd15bc13a797083a1f6a4c7857d850dea0b8495e1d0bfc7a19a54682c9b6ccb4ad086ec6482aa37eadcdcc94776bda55c06b9063a9e114bc7c43309c14dbc8261bd076738b6f07fafd46c4096ee767389888e2c227a67a29cf2c12b7d6a081141eb4d03a8ffb5ad84f9680fe33cf9ad5fa04213e873a4267c58e6c92963a9fd9130c74739b8a8c25231f76d7ac29a91d63274134932ad59e392df7c2d5e11ce6944b97f0ba6cac1c6e362ebaad5bd4325118ecfb80ebf10d30ed98b3119442d967fb37c368ea94d3c3474ecd22060d0e176753a412372a47bf7c8efe129e05d87b85558264f5386a6a5457ac6fbda0edcb71dce46953a367ef7fea26a8ff8d1adf95d319d0f5f57a806c6b1111e89480eadf18eddfadbca08dcef02d84d77e6485b1c0e534f70fba8bfdabc902ef1e66637c25784e808076c7751c307ed287399b70d91f55b43d3f43e67e719245da1ab143f83a3cdd316c9a5ef57c859cb1531e894b74c9154d1abe0ff6959411e48db8ac9defdd68df39180dfc5fc60b72bb855b0937d436e855d4101c5d3afa79c64a8239d783733a072cdffc9eecfedd8c6ed5e9176843053f2c1ef9b25dd4edbf2c38714d4ae7c4208e2263ee2a10d396c04dac2328465d502e72e07bde796112d4c6251a9342f03a7290d2da086cd4f8d9bfe0fba31e8eba8a117ec1969d366dee8c9618186bba4e7c0924cba1e0dbdcf4bf4643cfa7b46dbb0eebf3c90fff9e2b0e841f2f5aca2072ab508d206d26ecdf67935ab73bf9512e26a13151b7efa2cae85c1ac87402b1bf49fbd928d2e4ca92df34e54fc90a93b4d4662f9b74517f513da6fa62a81020ac5146e61af8cba7206d57afc1350740d6e6d75d44e66b521b57e75880c58f56cff482c04c60c681862762d61a70e78cf6d49273cb9061432725cea318f8e3649914bc3128f32085a6b0f5c5368b6e275de0d95b765437661551a810cde27cc46b4ec6c062eee8fc640c730138a5c003b70f1097adc4f6ddaaf18c335d7aae12de9b0576a66e52742f4939c0951f781359e9688f03a18a38101ae4842688acb7d881e444a2b373daa9768d4084b47818849ac3d21776232cf5e1bac73fc0a4f55b53c20d881be9579952d1ecf9c42e8d67b17882933d6b3e44231ba581e183b8cdad24b3cf67905b28106ac11ff0ee7d1606f65b96d9c0b03c7fc39e48e320ea13aefb0f1f288f2115344787e06812908d177258ceaf79b676495b275d7dd5951fd7045c24c35ae103dc3d1c5f80700b547bcd85af5ac72a0dabafb1669af7aef20315115652da0cb4004514675628274b17864e77030de1d99eeb229277f80886535d6ee837a745ff50d671261afd2ad451d46ae2577ca19901ec407a17ded801a36ee6a320708c28a429506a45d08232fae8307120249cf65920cd33df16a4f34678558dd13df91e09325cd73bb7d8c6c2344229807290132ac3d83848d4f63af888edf2eb0ce36aa204d31d8d10d3683bcf9076e93ece1dce6d653fe9fe912e4a9b70ef682644fe352ebec4109c0dca3c6ecb40f5c57ee7be38832cca4f5a764ad2983c62b6b57f82c38335fd50ebf8ff92c41f1ec6aa3f994366d2ba98954beda4a2b5f59c491e1994026346df03cbc1086604146615d96ff7059052423f554044f66894156a094290ef7a613eac836832a085a7c22b4a6afab7bc7776d488820da13732aa3e4f314eac67a9c8ceef5db092454399c2add6b95736b561cd2f571220dba8d8f2d90bd7f6c15194c5bca4272a87146397a1f75732494daa79a6ef2c113391b5cb5dec1e6758a2067485dca1fea9b537434ac61a003f43f013179d92a721128ce69c862c0c7df85c8c054b8036a2e9b8a7e4e6d5625dcbafff6e7da275fed95d5e17578f0274b80d488a86d99f2279a0366fd2b9453770c8649fae81118ec4d07ef5750ebd37a4d2d3f53a1cea0e5f9fbc972a59f353eaf2ac3fbafd2ae00866500d01864d2b0137f056c46037d02123d07c29cf25e3e6ff9cb0f084c7cd947f9e36342106f68ecf68464b9bdbd0294451d9ccd0d9d2ab4b425b8e7741d914d8d75f81e2eb1fdf17f3ec0aeacc40b0e91087aa689c2a3d3ee895f3b9e5659034ad9eeaf308e7b6b0c638ececc17b92d2e69e88bd3e91b90096d8d1b57d8d51212797e71bbe986174e5812d2da31441738f6a391eb0df40aa8cc7e33b9a36410b36942137301b3c6ed474fc0874fe9db425e888d696144cd06e3f743233671365e15c1e473fa82e5dd2ea56ae13a6237653a73814b2d18b5cf09ef2dc57705062ce3fa22f9070ff499f36d3e0baa20154e399b95d37061cab0dcc8e280fd51b42fa5e9c0d678074be5ad80f5b74041ec6741e6a66c63729a2564af2355faff66612159ae883368ff4c9d92fcbd5cd8313675c6eb74dc145e945a318d3d84e86dec3d49d5006d723873431ee4286609fbf1870a2f8c595a87463e180bd90b1dcfa072a1bbccbe2f9410aa99e59cdf9cbb60e0d85e0936b39e616068de34565910cec293f6837afc06583ff0b724b154f8c6b82929ec8360f360d778ece64e5be8fc2b0a8e5765a980f89ea788580edc003a91d4d887de58cf98e3b871cd42dd7909d21c08fa7f7b9129d02569eb957dabb17e8b350808d4297f4b21667e1a55bfec44fc59f7d64d80fe2cd40f1761ca793ad8449a26ed47112612cd97b11cd3ef7f179c5b5cb3f62a8a0595cb4caf99db337e"}, &(0x7f0000002000)=0x1008) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x9, 0x80010, r10, 0xda301000) (async) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x9, 0x80010, r10, 0xda301000) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000002040)=r7, 0x4) syz_genetlink_get_family_id$tipc2(&(0x7f00000020c0), r5) (async) r14 = syz_genetlink_get_family_id$tipc2(&(0x7f00000020c0), r5) sendmsg$TIPC_NL_KEY_SET(r11, &(0x7f00000021c0)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002180)={&(0x7f0000002100)={0x78, r14, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x40, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8c}]}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8001}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x48}, 0x4040000) (async) sendmsg$TIPC_NL_KEY_SET(r11, &(0x7f00000021c0)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002180)={&(0x7f0000002100)={0x78, r14, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x40, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8c}]}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8001}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x48}, 0x4040000) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x8010, r0, 0x2f3f6000) 5.60222558s ago: executing program 3 (id=4316): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x17, 0x16, &(0x7f0000000000)=ANY=[@ANYBLOB="db57000004000000850000000a00000004f4080005000000b7080000000000007b8af8ff00000000b7080000331b00007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000018190000", @ANYRES32=r0, @ANYBLOB="000000000000000818580000060000ce34de1d9b5a14fee4c0e69ee6", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f00000001c0)='syzkaller\x00', 0xe06, 0xbc, &(0x7f0000000200)=""/188, 0x41000, 0x3, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000300)={0x3, 0x10, 0xa88, 0x3}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x8, &(0x7f0000000340)=[r0, r0], &(0x7f0000000380)=[{0x1, 0x4, 0x9, 0x3}, {0x1, 0x1, 0xc, 0x3}, {0x0, 0x1, 0x10, 0xa}, {0x5, 0x5, 0x4, 0xc}, {0x2, 0x7, 0x4, 0x7}, {0x2, 0x3, 0x2, 0x3}, {0x3, 0x1, 0x5, 0x4}, {0x0, 0x4, 0x0, 0xc}], 0x10, 0x2}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r2, 0x10040) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x20, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x5, 0x18, 0x0, 0x0, @binary="01"}, @typed={0x4, 0x1e}]}, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c0000001a00010029bd700000000000022020000000000000"], 0x2c}}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4d6, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x17}]}, &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ffffc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0x9d, 0x0, &(0x7f0000000700)="10d70e73c1be2f1f4b333e43298296c6240a834e9879c51c09c1b867016602859490813e9ddc6a367066a9ddc563e66a33c231ee091f303ed87cedb714c30c15a2b08e7727f4c6737769b2e5187ccc2dd5152cc394ce7beb4dd23c561c0de7f139a8d15a5904d33e32b6d3f87d29f1afad8d101fc1600e0853a7b7f7864e4de971ed4fcaca26c1b751871aff7878bd3f23853ce2c6175f5c71b36a1d1d", 0x0, 0x1005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0xe) syz_emit_ethernet(0x116, &(0x7f0000001280)={@remote, @broadcast, @val={@void, {0x8100, 0x5, 0x0, 0x4}}, {@llc_tr={0x11, {@snap={0xaa, 0x2, 'GU', "7ffbda", 0x8914, "a617ecfa0d7dc35f986c514a96869249c1e50281ab593c18b2f23d165078a623ae5836dbb5808e77142c4afef487740196c886b3af5b963d2ec7f75d076c80662630d1bb583145b1767a7f53a66a89cffcd725f9db7d970ffb2cb8512d847271381b13ab2f50924d6155cd5a5bf26c82ad71f5fbb5dd98e1b51e6d691d29dfa97b3865e455a9b6fdb49537849325b327b79a1cdf7e9f5204210a4835a97a9015a228a975a92d7ad55c646317b7f41973bd35405049835320c36a34c247d278e659c5e7971a510a0229444696ef1f59556bbe48df765e16f944c125980c385d6e66bd8d5fef0176b581dec2b1f5f6b5a364cf89c4697774c0dad45a"}}}}}, &(0x7f00000013c0)={0x1, 0x2, [0xd3e, 0x846, 0x19b, 0xb06]}) sendmsg$nl_route(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001180)=ANY=[@ANYRES32=r3, @ANYRESHEX=r2, @ANYRESOCT=r1, @ANYRESDEC=r6, @ANYBLOB="7f6e3b31961a2a12048b3991b256c64a9f9db7f270967ffecd9b6f0fd66e8aa6d78ab2e6a0752fc07cf386a73cbbb0b7d0d81aff595b23bc4517d903b11b9afca684f32c4bc0fb96a81552010940bff35041bfe624894ab99d0178445661bb26baeaf8dab051008af6bf92244206133e74467e7536d3cb53", @ANYRES64=r1, @ANYRESDEC=r4], 0x38}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7020000000df100bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000be000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r8, 0x0, 0xe, 0x0, &(0x7f0000000200)="1d5fe8317ca952a2ba4bfee0f003", 0x0, 0x2100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6}, 0x50) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="240000005e00010004000000000000000c000000010000000000008008000180040005"], 0x24}], 0x1}, 0x8000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r10 = openat$cgroup_devices(r9, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r10, &(0x7f00000002c0)=ANY=[@ANYBLOB='c 75:', @ANYRESDEC=r9], 0xc) sendmsg$DEVLINK_CMD_RATE_SET(r7, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000840}, 0x40041) unshare(0x400) bpf$MAP_DELETE_ELEM(0x15, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) 5.46286713s ago: executing program 3 (id=4319): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) r2 = accept4$inet(0xffffffffffffffff, &(0x7f0000000700)={0x2, 0x0, @local}, &(0x7f00000006c0)=0x10, 0x80800) getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x40, &(0x7f00000002c0)={'filter\x00', 0x0, [0x1, 0x6, 0x401, 0xe3b6, 0x2]}, &(0x7f0000000340)=0x54) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc00080005000900000014000400"], 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$alg(r4, &(0x7f0000001d00)={0x0, 0x0, &(0x7f0000001c80)=[{&(0x7f0000000380)="946f4d9d5c5f140044fe0da425cb76cb3cff03a8df68063a074246ab991aae1221bbafe017a2a21dd1d36a52", 0x2c}, {&(0x7f0000000400)="e58c85823d3aa0622b4bb295c784a0dab6b95e032f717438817321182efc7afbaecc864d412f", 0x26}, {&(0x7f0000000440)="1d53f73799d093eb796c2008b2b52cab586aef83d6aa6f6c367ee24e9dee23b24f755ec2b120a03847614a5f6a468067b0320727b15debd868a4d6b06a269bb452681efaf9a7432f63051e633a86cf56b21aecc451ab13d3549c4025ac816c868b1c8ee08647", 0x66}, {&(0x7f00000005c0)="c030c1cd30fbe710fc9fdaa21c43852ef3c6da921fe48dadad101d0139ab69dbac0842a1e4d93459651a61a947895b9c2c37f710fb219e9047d578d5552be489deb74e21e3c95fe480569c52f2ceeb2ff4161c3241b44297589252587e8a42297fc98133ffa53d2c941d295db1adf611e862538b53ffb58c681c0d0ef219c0f20decf9b135c2ab166dc9a7aa78a5782aba9e", 0x92}, {&(0x7f0000000c00)="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", 0xff8}, {&(0x7f0000001c00)="51f8edd0edad5d3f338f9f953c003a3d7c283888d97c679d6f1fd64aa26566eaabe1e2ee9a81b3d3828f8479f728493bc893393217371aeb6b57e8e302054c31697b60354c124b36f9d18e479326ed74d9add3a33c7a775411a71879e67ce0aa2ecc6d7a2427", 0x66}], 0x6, 0x0, 0x0, 0x4000}, 0x4000000) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x1d, '\x00', 0x0, 0x24}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000740), r0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRESOCT=r0, @ANYBLOB="01032757c38d085641a7260000000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x20000805}, 0xc895) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68014}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x2, 0x0, 0x7, 0x4}, {0x34, 0x29, 0x0, 0x8}, {0x6, 0x81}]}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8010}, 0x20000000) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r3) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$nl_generic(0x10, 0x3, 0x10) close(r9) socket$inet6_sctp(0xa, 0x801, 0x84) 4.967579729s ago: executing program 3 (id=4324): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x100) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x3ec0) close(0x3) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="ad00"/16, 0x10) recvmmsg(r2, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) 3.633436546s ago: executing program 4 (id=4340): setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp384-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000047c0)=[{{0x0, 0x0, &(0x7f0000002ac0)=[{&(0x7f0000000340)=""/1, 0x30}], 0x21}, 0xe75}], 0x3aa0, 0x60002000, 0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r2 = socket(0x8, 0x3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x90}, 0x40c0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f0000000440)={'ip6tnl0\x00', 0x0, 0x2f, 0x8, 0xe7, 0x1af, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x8000, 0x6, 0x7}}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)={0x1b, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x2, '\x00', r3, 0xffffffffffffffff, 0x1, 0x2, 0x4}, 0x50) getsockopt$inet6_mreq(r2, 0x29, 0x1b, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB], 0x0, 0x26, 0x0, 0x1, 0xfffffffd}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r4, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840)=r5, 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0xf543, 0x0, 0x1, 0x80a, 0xffffffffffffffff, 0xe37, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x1, 0x8}, 0x50) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000002c0)={0x0, 0x9, 0x10}, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x0, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000300)={0xffffffffffffffff, 0x1, 0x1c}, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2}, 0x50) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x51e89645, 0x18}, 0xc) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRES16=r1, @ANYRESHEX=r6], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r7}, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) 3.067644186s ago: executing program 2 (id=4344): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="f68ded77286c53e27a617e528624", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000001, 0x10, r0, 0x599fc000) 2.197597096s ago: executing program 2 (id=4347): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, 0x0, 0x2, 0x0) unshare(0x22020600) r2 = syz_open_procfs$namespace(0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, 0x0) r3 = socket$inet_icmp(0x2, 0x2, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000300"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="880000001900010000000000000000001d01000005000d0001000000150003000000000000000000062e346aa0f998570000000015000200000000000002000003ef7506ecbef9700600000015000400000000000000000000000000000000010100000008000900", @ANYRES32=0x0, @ANYBLOB="0c000b00000000000000000008000e00", @ANYRES32=0x0, @ANYBLOB="080005"], 0x88}}, 0x0) syz_emit_ethernet(0x62, &(0x7f0000000240)={@remote, @link_local, @void, {@x25={0x805, {0x3, 0x7, 0x20, "ad705ff7e77330a76443efcadf7e065a730d33150f0dda422c84b0e1dcfb5e9ce473135d59e80c8b1b75d49a7a7e682d20dc11eb4d859fee48cdae0e6bd8aa94715c9786c9536355c80f62723346e79376"}}}}, &(0x7f00000002c0)={0x1, 0x1, [0xa1e, 0x1c6, 0xe1c, 0xf70]}) pread64(r3, &(0x7f0000000000)=""/95, 0x5f, 0x4) write$cgroup_pid(r1, 0x0, 0x0) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) recvmmsg(r5, &(0x7f0000007580)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x7fffffff}], 0x1, 0x8020, 0x0) sendmsg$802154_dgram(r5, &(0x7f000000b8c0)={&(0x7f000000b800)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0102}}}, 0x14, &(0x7f000000b880)={0x0}}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000380)={0x0, r1}, 0x8) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x200000, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e40)=ANY=[@ANYBLOB="d0040000", @ANYRES16=r8, @ANYBLOB="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"], 0x4d0}, 0x1, 0x0, 0x0, 0x24008000}, 0x8040) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x9, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x4, 0x0, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)={@broadcast, @random, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x1, 0x0, 0xe0, 0x0, 0xe000, {0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x7, 0x0, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @cipso={0x86, 0x23, 0x0, [{0x7, 0x6, "95452dd4"}, {0x2, 0x11, "ad4cfc6d0c114a69c613f8d51edcd6"}, {0x2, 0x6, "ba2a891b"}]}]}}}}}}}, 0x0) 2.082850699s ago: executing program 0 (id=4348): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x4, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) unshare(0x22020400) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x2, 0x0, {}, [{0x8, 0x1, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040094}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd700006dcdf250100000008000100", @ANYRES32=r4], 0x60}, 0x1, 0x400000000000000}, 0x84) r5 = socket$inet(0x2, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r7 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r6, r6, 0x2f, 0x0, @void}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0xf, &(0x7f0000000d80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a30000000004c00048024000180090001006d65746100000000140002800800014000000001080002400000001724000180090001006d61737100000000140002800800024000000008080003"], 0xa0}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newtaction={0x74, 0x30, 0x9, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x3}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000001c0)=@generic={0x0, r7}, 0x18) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x4c, 0x2c, 0xd09, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa, 0x7}, {}, {0x1c, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x84}, @TCA_FLOWER_KEY_SCTP_SRC={0x6}]}}]}, 0x4c}}, 0x24004000) r10 = socket$netlink(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.928020784s ago: executing program 1 (id=4350): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000061042c000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000061042c000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x9bd}}, [0x0, 0xc09, 0x9, 0x8000, 0x6, 0xc641, 0x7ff, 0x1, 0xfffffffffffffffe, 0x5, 0x1ff, 0x8000000000000001, 0x7, 0x8, 0xb]}, &(0x7f00000003c0)=0x100) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f0009000000080026000816"], 0x40}}, 0x0) (async) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f0009000000080026000816"], 0x40}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)={0x64, r4, 0x1, 0x170bd25, 0x25dfdbfc, {0x39}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x448c9}, 0x4004810) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000000)={'veth0_to_team\x00', {0x2, 0x4e22, @broadcast}}) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r1, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x43}, @void, @val={0xc, 0x99, {0x5, 0x79}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x850) 1.852216454s ago: executing program 0 (id=4351): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x1bc, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@empty, 0x0, 0x3, 0x0, 0x0, 0xa, 0x0, 0x20, 0x8}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d}, {0x0, 0x0, 0x0, 0x2dd}}, [@tmpl={0x104, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x3b}, 0x0, 0x2b}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0xc}, 0x0, 0x0, 0x0, 0xff}, {{@in=@broadcast, 0x0, 0x32}, 0x0, @in6=@empty}, {{@in6=@mcast2, 0x0, 0x3c}, 0x2, @in=@remote, 0x0, 0x1, 0x3}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x6c}, 0x0, @in=@broadcast, 0x0, 0x4}]}]}, 0x1bc}}, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000024c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000002600)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0005009b5b516e8d8fadf3cfe43c32ac817779cd2ee2132fa16119ed0f7ecd8049d9b303cb2db47a361b340c5b1ccbc0561387b5f0373594ba3d858518044608b0e8455102a42f37f12d659446d5f8b7ba46dc7ae59968205f2583cb351fd1bd24cd8184a5fc265b9fb03e96fa70a6f07638ffb9", @ANYRES16=r2, @ANYBLOB="e1c226bd7000ffdbdf25450000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e0002000000"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) 1.69674167s ago: executing program 0 (id=4352): socket$kcm(0x2, 0x200000000000001, 0x106) socket$kcm(0x10, 0x2, 0x4) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) socket(0x2a, 0x3, 0xa402) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x6, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0xcc}, @exit], &(0x7f0000000280)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x90}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$llc(r0, &(0x7f00000000c0)={0x1a, 0x302, 0x9, 0x3, 0x2, 0x2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xb, &(0x7f0000000100)=0xc, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000e00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_BEACON(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f00000005c0)={0x7c4, r5, 0x1, 0x21, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_PROBE_RESP={0x7a5, 0x91, "82c5733948e55681966cbfe33f3040244cd13179c5cbfc7d207c2dde046812a32bcdc74c786d9a4ef935963c58ff6e2345c3dbfab0ece745b4a298eaf6ca50d62e1c425e300817db15c192dfcbdbfbee175d392c771afd3879489bf46850bc20ece921cb4a20051ba98c310dd8ef232f826697f61619037cc681164b57bdbc403ef4470508e2f0d17f9ec4d4d016e1912811211d36d98001a283e0668263a4cb1c4c9984fd4554b07bd9d13d4615cb3de779cd2a2525602ca0c07d254135b5652024b58f4c3b0606c790403bf3a2b263f256330731f4283234d34182ab28cc672f1d84698e660b8c1622b60432ccccf1039c155d7901457f9165265cd24f070dae23a08fc94e3679823a7892dabd22f4321cd70d6fb9a63058f78f1ac5b08c9dd1329eb601115e68bceb140d5668257df8955eb8806063fdbc95d09b522cc0a57942acae14479c1c9287f49bf38c8b352839fb4f6d74ef4701afd7ba5416d64e54a09f5dbffaba3c5be1aadcc7657430d30828276908f0d618773033f11972d9913040c2343342eda037299aba82a118dfd8cb8f6759fd6acc780479d9e0d9f167dbe27a49875a23211f3db2dfe38c614139276c4ca7b016d2f38e7a206e05a4e5ff9e9b5b612b482422b7e38d8926ae454a0a69acc599d0289acd72b62a8f851af89cc23671d3bbad7188d9589847472b71bd88b90e6d12e25bd0b303cf5da44ffd73f16c61bf6ba44826c8091a51adccb9c1cc91e521cf786fdf2d7141ba49ac2c1e96b7b869a1576f9ed38ced8d0ff7e9f6e05c153e95e71db77e484bd7c534219bafb2ebb3049a54769558423cf8dfb9059c7536f93dab4d9a53480c020dfa9b734435c4f585b3c19316ea943b222086196529bc78dab889c0af44da09a0fe9a54a0940357e90cafb48833603cb89d6c2af1af1c79f68f382220640b59d0352136fb977f35132b5e57d054d4cef14fa1085a9546c0d36bbd14a5039b04794b6205718d52c35aa20301666a439e880a7cf6b4b45fdef1ca3a6d0fa149c965a28c4f124b9d96196fed6f9d8897bbb7963c16d29bb672753f8dd70b3dfc636393c4f6bbcd0ebee9ebb39817c9cf0d441d1d279917cd8d5f2b216e68febe7f71d182480d0898ebe95fb9aad2d024a4ada0e0344f8ae0eb9e7499f249fb5855bc2c7b52844768a154b89d22ea4a153cdb61497f15b1f86a456ac1b048e46050ea1b7f49cfeaabb07c7724df74116a00352ad2a9e3fedbf44e7d42db59c776320c55be3c1a76872435c6cd9616186a5701355c52d400f801137fdd4b06b4f305b5fa491b3e384c380b7e84d315acef4081093171a46f86c636c30218abe72a232392eefec7554f821bb41699db0b77ccd781738a6f7a7d29dcd1d237f37fdc1d2fb84a3f2ae7f74c7e29f3d528924362a83d6d1cb76b490762917466487e6289239379b65f5af5da94947c40b7eec95da49dbb3142637d2490dc792eb886cf73f344bbb883fa4316b281e305fcf1256dc5bcdcebf5d3a16814842d2b61fd5fa9bfa53ca26bc15d9c990ffc724ae143a0812de9030c93b47a83af885025baa8b98bd8d53bec7671630f8d918ab962350d1ca3dc4cdab40c7a28eb565151b5cbb3ac614868619b677c4cbe1b16684754852af54b9f992fb41d0c537e4bdf62f02f8c23d10c05c0b4fd9c67f572a349f0ebe46f00e690743289e45818d81b22affd3b1d7c75a668650c79f856190340224d43a9ab532883cd293ba475c5deb61518ca71d5141e72d167358b855b6a53bc94ba9ce23cee4661eedc280a133a33eb1397c97469b336a05d33c1e844ba1d4d54d8c49bd34ba51ac94652a8224353f242a807a32cbe9526d7c794dee099fc24577d703b706de2d935e0edeff2a645ba8a0f520cee379269bad802f3cab4f9b91740fbbb0e3e2234d3db26e607af4745a7344624a5d11a529d6537489f19f5c8edd6a9006f52b904d18f30fcf98878e2a7df9fecea5472a0f6dae1952922765a79548d9698f2418706f0e5b06512c19c11b1a548d0e601d009d5a9756896f49ecb91d6a2e6befd2af9675e183e570399db0664b8cfd13b24ae0108388ce98622e4280dc75f74815db389bbd4afe179732fa202e6c6caafa802f0083b8bdd480e174e26c4aa151774e5e612d78c105e59728e04b721743a7f6c6c608a61bf2a736d1dc93b18d83afcd72036da942be44170e6c7c363289a28367e5cec842ebb1fcac41c9112a73bbe03a99accd2607519540fc8b06558642f575ed4c21784eaa863c87d6ec35a819acc4c4c683c491782dcabb9b11a6934fcc96758679ef679a4ea44ef7767084f3fe37adf650125e868bb319261846a95d0b7527235f8ebade5a863bc8ae1bdf6dbb57a070df727821f191e902f015a50dd2015ed58fa4755611e3f9ba954649a7c54b95efa9b223eae2aa466118e5d2f613a87f8e8d2a18d11b67fe3b19384ddb54d99585a8a42b53acf46717528fbdcfea971a4d23cf635fe9d24eea27ff67fccb4556e541beecd779a3a1f33c96ac914104ddb857ad501493ee18eea4795a7c463c48439a6836e28ae8a993fe1813d4775cf774fddd54d31851a921aebe7f6c464dbf322cb3a43d4e93c9930b08578a2f48f2ff536251c0ad4f0f2049facb9520b0eaae7fd4a6ffd402d3de622fafbdece8d34902359966b5ba0478dfcc083fd421b107aabf1e9bc4df2e81c35fc2e27067858c0fffd4a40e62c6c02ce6643cab0a44164dc3ea538f5fa6f"}]}, 0x7c4}, 0x1, 0x0, 0x0, 0x4800}, 0x4014080) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000080)="b9ff05760a03076804268c989e14", 0x0, 0x10503, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.69642112s ago: executing program 1 (id=4353): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd2c, 0x25dedbff, {0x0, 0x0, 0x0, 0x0, 0x56d09, 0x41025}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x14000000}, 0x40040) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newneigh={0x38, 0x1c, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, r5, 0x80, 0x10}, [@NDA_DST_IPV6={0x14, 0x1, @mcast1}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}]}, 0x38}}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x4, [@union={0x0, 0x4, 0x0, 0x5, 0x1, 0x401, [{0xf, 0x2, 0xffffff1b}, {0xc, 0x2, 0x7b}, {0x6, 0x2, 0x3}, {0xe, 0x4, 0x2}]}]}, {0x0, [0x5f, 0x30]}}, &(0x7f0000000240)=""/227, 0x58, 0xe3, 0x1, 0x8000, 0x10000}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, r6, 0x6, '\x00', 0x0, r7, 0x1, 0x4, 0x4}, 0x50) 1.534176054s ago: executing program 1 (id=4354): bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{0x1, 0xffffffffffffffff}, &(0x7f0000000380), &(0x7f00000003c0)='%-5lx \x00'}, 0x20) (async) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000840)={0x0, 0x4, 0x8000000000000001, 0x1}) (async) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000c40)={0x0, "0c71cdcce860e0b3cd466b9dcf91cd94"}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001c40)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000002040)={0x8, 0x3, {0xf, @struct={0x61b8480b, 0x4}, r1, 0x0, 0x3, 0xfffffffffffffffa, 0x9, 0xb9d0, 0x80, @struct={0x7a, 0x5}, 0x3, 0x7, [0x5, 0x5, 0x8, 0x2, 0x401]}, {0xb, @struct={0x45, 0x8}, r2, 0x6, 0x5, 0x1, 0x991, 0x8263, 0x6f259865e8b994a6, @usage=0x1, 0xe, 0x40, [0x5, 0x30, 0x0, 0x57, 0x8, 0x6d]}, {0x9, @usage=0xf5, r3, 0x6, 0x78, 0x5, 0x1ff, 0x4, 0x81, @struct={0x0, 0x1ba2}, 0x3, 0xfffffffd, [0x32, 0x7f, 0x8000, 0xff, 0x9, 0x3e0]}, {0x0, 0x5, 0x7}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000032200000000000010000000cd0000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x3}, 0x94) (async) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r4, &(0x7f0000002680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @private0, 0x80000001}, 0x1c, &(0x7f0000000800)=[{&(0x7f0000000180)="ed", 0x1}], 0x1}}], 0x2, 0x0) close(0x3) r5 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r5) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) (async) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000100)={r4, 0x1, 0x1, 0x3}) (async) r7 = syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/cgroup\x00') sendmsg$RDMA_NLDEV_CMD_SYS_SET(r5, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c000000071400012cbd7000fcdbdf2508004400", @ANYRES32, @ANYBLOB='\b\x00D\x00', @ANYRES32=r6, @ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="0900020073797a3100000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40000000}, 0x40000) 1.305027519s ago: executing program 1 (id=4355): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) write$cgroup_pressure(r1, &(0x7f00000000c0)={'some', 0x20, 0x200000020000002, 0x20, 0x8}, 0x2f) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "c8bf5d03ac85c25d", "9a5d38a17f00c500000000feff00", "a1c4776d", "3c84a3a3be2adbff"}, 0x28) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014210000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) (async) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) (async) recvfrom(r3, &(0x7f0000000440)=""/4070, 0x20, 0x101, 0x0, 0x0) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r3) setsockopt$sock_int(r3, 0x1, 0x12, &(0x7f00000000c0)=0x8, 0x4) close(r2) (async) socket$inet6_sctp(0xa, 0x1, 0x84) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r6, &(0x7f0000000000)={0x0, 0x5, 0x2, 0x0, 0x1}, 0x8) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0xfff7, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x6}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x2}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r9, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000440)={0x0, @in6={{0xa, 0x4e23, 0x239, @mcast1, 0x3}}, 0xe88, 0x4, 0x2, 0xf47b, 0x5}, &(0x7f0000000500)=0x98) ioctl$F2FS_IOC_GARBAGE_COLLECT(r7, 0x4004f506, &(0x7f0000000180)=0x1) 1.124179716s ago: executing program 0 (id=4356): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x90, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {}, {0x7, 0x10}}, [@TCA_RATE={0x6, 0x5, {0x81, 0x7}}, @filter_kind_options=@f_route={{0xa}, {0x58, 0x2, [@TCA_ROUTE4_ACT={0x54, 0x6, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x4}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x40}, 0x2008c014) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002060207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009400000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r5) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r4}, 0xc) accept4$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed}, &(0x7f00000000c0)=0xe, 0x80000) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x58, 0x1416, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000400}, 0x0) 1.097313306s ago: executing program 1 (id=4357): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0a000000010000004000000020"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000005c0)="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", &(0x7f0000000040), 0x1003, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0), 0xfffffffffffffffc, 0x6, r0}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, 0x0, 0x0, 0x19406}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}, @IFLA_BOND_AD_LACP_RATE={0x5, 0x15, 0x3}]}}}]}, 0x44}}, 0x404c854) 886.342961ms ago: executing program 3 (id=4358): socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$nfc_raw(0x27, 0xffffffffffffffff, 0x0) unshare(0x28040680) r0 = socket(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000047c0)=r1, 0x4) getsockopt$sock_buf(r0, 0x1, 0x1a, 0x0, &(0x7f0000000240)) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r4, 0x29, 0x1a, &(0x7f0000000100)=0x8001, 0x4) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e23, 0xa, @empty, 0x9}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000140)='2', 0x1}], 0x1}}], 0x1, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e23, 0x100002, @ipv4={'\x00', '\xff\xff', @empty}, 0xffff}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000000680)=[{{&(0x7f0000000080)={0xa, 0x4e21, 0xab, @loopback, 0x2}, 0x1c, &(0x7f0000000780)}}], 0x1, 0x20000014) shutdown(r5, 0x1) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xd, 0x1e, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xf2000000}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8, 0x100}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r6}, {}, {0x46, 0x0, 0x0, 0x76}}, @map_fd={0x18, 0x4, 0x1, 0x0, r7}], {{}, {0x6, 0x0, 0x7, 0x8}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48080}, 0x20004056) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffd}, 0x10}, 0x94) socket$kcm(0x2, 0x3, 0x2) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, 0x0, 0x10) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[], 0x1c}}, 0x0) 780.561941ms ago: executing program 1 (id=4359): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020205d0af8ff00000000bea100000000000007010000f8ffffffb702000008000000b7030000ffee0000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x74, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = accept(r1, &(0x7f0000000500)=@ieee802154, &(0x7f0000000580)=0x80) ioctl$SIOCX25GCALLUSERDATA(r2, 0x89e4, &(0x7f00000005c0)={0x4, "a76a79fe07d131abe24a7b77df6eb65c7addfa3a16c491cb6548efa9239fd32cb5d6dc7a72efec76a38fb28dc629cd1112df1c40a8888f2c2e79176306d084dcb522229d1fb17c936e5945208e821424f02893dd1f7df880922e711f37fafba6cab68aebcd521efd1a0d8e26f47493ecbc42a1a606c082352e88921d3f7420c7"}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_REMOVE(r1, &(0x7f00000004c0)={&(0x7f0000000000), 0xc, &(0x7f00000003c0)={&(0x7f0000000180)={0xa0, 0x0, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x29}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010100}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4004045}, 0x4004840) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000280)=0x40, 0x4) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x84, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e23, 0x400, @private2, 0x4}}, 0x0, 0x21}, 0x90) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400c2800c00018006000600655800000c000280080011"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400c2800c0001800600060086dd00000c0007"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x11, 0x4, 0x4, 0xc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000001800000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 679.676004ms ago: executing program 2 (id=4360): r0 = socket(0x1f, 0x3, 0x3) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$F2FS_IOC_SEC_TRIM_FILE(r0, 0x4018f514, &(0x7f0000000040)={0x6, 0x8, 0x3}) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async, rerun: 64) r2 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0x8, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @qdisc_kind_options=@q_mq={0x7}, @TCA_RATE={0x6, 0x5, {0x7, 0xc}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) (async, rerun: 64) close(0x4) (rerun: 64) 638.8164ms ago: executing program 0 (id=4361): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x60600) r3 = socket(0x2b, 0x80801, 0x1) shutdown(r3, 0x7ffffffe) bind$netlink(r2, &(0x7f00000001c0), 0xc) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)={0x38, r1, 0x209, 0x0, 0x25dfdbfe, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @loopback={0xff00000000000000}}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r7) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=@delqdisc={0xd8, 0x25, 0x400, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0xffff, 0xfff1}, {0xfff2, 0xa}, {0xf, 0x9}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x3}, @TCA_STAB={0x7c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x7f, 0x2, 0x400, 0x0, 0x8af7, 0x8, 0x5}}, {0xe, 0x2, [0xf8, 0x100, 0x7ff, 0x0, 0x0]}}, {{0x1c, 0x1, {0x10, 0xb, 0x4, 0x700, 0x0, 0x1, 0x300, 0x4}}, {0xc, 0x2, [0x2, 0x1000, 0x5, 0x1]}}, {{0x1c, 0x1, {0xd, 0xf4, 0x8, 0xf76, 0x2, 0x81, 0x5, 0x1}}, {0x6, 0x2, [0x6]}}]}, @TCA_STAB={0x30, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x5, 0xf, 0x100, 0x2, 0x7fffffff, 0x7, 0x6}}, {0x10, 0x2, [0x9c00, 0xb64e, 0x1, 0x2, 0x8, 0x101]}}]}]}, 0xd8}}, 0x41814) sendmsg$BATADV_CMD_GET_DAT_CACHE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, r4, 0x305, 0x0, 0x0, {0x7}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x24044080) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x18}, 0x18) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000000)={{r10, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000680)='%pI4 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r11, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0x1c, &(0x7f0000000440)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000d0c567cb7ab7ba1806dc2c275a361c93f64904fb2ee5aa85063cfeb625165b18d7b154bad724e4db21a19a34cab3c68978bd29f4f7ed2a1a62add97a4def9ee6587ffe131718d0b882355f132746b8215fd76e4c0d81bbc350d67476ba2d3a11c336cb3b0b81", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r12, @ANYBLOB="0000000000000000b70500000800000085000000a5000000de9800000000000056080000000000008500000005000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) socket$packet(0x11, 0x3, 0x300) r13 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r13, 0x1, 0x2a, &(0x7f0000000000)=0xb6, 0x4) bind$inet(r13, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000380)={@random="d990fe9596b6", @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x2, 0x40, 0x100, @void}}}}}}}, 0x0) recvfrom$inet(r13, 0x0, 0x0, 0x20, 0x0, 0x0) 600.108402ms ago: executing program 4 (id=4362): bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="b40500000000000061100c000000000063014b00000000009500090000000000005bbfeb9b312772330bea"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 503.240581ms ago: executing program 4 (id=4363): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000ff00000001"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b70500000800000085000000c200000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x40}, 0x94) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r2, &(0x7f00000000c0)={0x1d, r3}, 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0100"/16, @ANYRES64, @ANYRES64, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="ecff000001"], 0x48}}, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x2, 0x0, 0x0, {0x0, 0x2710}, {}, {0xffec}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ee6a491530f05065"}}, 0x48}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000180)=r1}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000006c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000640), &(0x7f0000000680)='%pi6 \x00'}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}, [@btf_id={0x18, 0x4, 0x3, 0x0, 0x2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}]}, &(0x7f0000000540)='GPL\x00', 0xa, 0x28, &(0x7f0000000580)=""/40, 0x41100, 0x20, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0x1, 0x2, 0x7}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000700)=[r0, r0, r5, r0], &(0x7f0000000740)=[{0x2, 0x1, 0x6}], 0x10, 0x10000}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00420000020001ffff00050054091e24be8f49bdb6b40bcbc8c0da81da3e2157fda7", @ANYRES32=0x0, @ANYBLOB="140012800b0001006c6f7770616e000004000280"], 0x3c}}, 0x4000) 441.01601ms ago: executing program 4 (id=4364): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x2}, @TCA_CAKE_RTT={0x8, 0x7, 0x8b22}]}}]}, 0x44}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000b50102008200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 410.495806ms ago: executing program 2 (id=4365): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x4, 0x13, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020200008500000070000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095", @ANYRES32], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0xfca804a0, 0xe, 0x0, &(0x7f0000000a80)="b8000005000000000152912e5763", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0xfca804a0, 0xe, 0x0, &(0x7f0000000a80)="b8000005000000000152912e5763", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 271.226184ms ago: executing program 2 (id=4366): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000000)=0xfff, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f00000000c0)=0x8, 0x4) ppoll(&(0x7f0000000180), 0x1f, &(0x7f0000000040)={0x0, 0x3938700}, &(0x7f0000000180)={[0x9da6]}, 0x8) bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x1000, @any, 0xfffa}, 0xe) 240.519919ms ago: executing program 2 (id=4367): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYRES16=r0, @ANYRES64=r0, @ANYRESHEX], 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x4000004) (async) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYRES16=r0, @ANYRES64=r0, @ANYRESHEX], 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x4000004) socket$pptp(0x18, 0x1, 0x2) (async) r1 = socket$pptp(0x18, 0x1, 0x2) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) (async) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) bind$pptp(r1, &(0x7f0000000140)={0x18, 0x2, {0xfffe, @loopback}}, 0x1e) (async) bind$pptp(r1, &(0x7f0000000140)={0x18, 0x2, {0xfffe, @loopback}}, 0x1e) connect$pptp(r1, &(0x7f0000000080)={0x18, 0x2, {0x0, @private=0xa010102}}, 0x1e) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0001, 0x0) (async) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0001, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000340)=0x1) syz_genetlink_get_family_id$devlink(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f0000001b40)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001b00)={&(0x7f0000000480)=ANY=[@ANYRES16=r2, @ANYRES64=r1, @ANYRES32], 0x23c}, 0x1, 0x0, 0x0, 0x4040001}, 0x1) ppoll(&(0x7f0000000180)=[{r1, 0x3082}, {r2, 0x4a6}], 0x2, 0x0, 0x0, 0x0) write$ppp(r2, &(0x7f0000000700)="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", 0x1000) (async) write$ppp(r2, &(0x7f0000000700)="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", 0x1000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x20004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000018c0)=@deltfilter={0x34, 0x2d, 0x800, 0x70bd26, 0x5, {0x0, 0x0, 0x0, 0x0, {0x6, 0xc}, {0xa, 0x3}, {0x6, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x7f}}, @TCA_RATE={0x6, 0x5, {0x8, 0x6}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) openat$tun(0xffffffffffffff9c, 0xfffffffffffffffd, 0x240440, 0x0) (async) openat$tun(0xffffffffffffff9c, 0xfffffffffffffffd, 0x240440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00", @ANYRESDEC=r3, @ANYRES8=r3], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00", @ANYRESDEC=r3, @ANYRES8=r3], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x0) socket$netlink(0x10, 0x3, 0x1) (async) r4 = socket$netlink(0x10, 0x3, 0x1) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r5) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r4, &(0x7f0000001800)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001700)=ANY=[@ANYRES16=r6, @ANYRES16=r6, @ANYBLOB="04002abd7000ffdbdf251c000000080001007063690011000200303030303a30303a31302e300000000008000b00000000120e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b00ffffffff0e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b0001000000"], 0x88}}, 0x40) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newtaction={0x18, 0x30, 0x1, 0x70bd25, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket(0x43, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000380)={0x29e9c931, 0x3, 0xffffff31, 0x4}, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000800800", @ANYRES16=r8], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r4) sendmsg$ETHTOOL_MSG_EEE_SET(r4, &(0x7f00000006c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000640)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="94010000", @ANYRES16=r9, @ANYBLOB="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"], 0x194}, 0x1, 0x0, 0x0, 0x48011}, 0x4000004) sendmmsg(r4, &(0x7f0000000200), 0x0, 0x4010) 127.315991ms ago: executing program 4 (id=4368): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x20000600}}, 0x0) sendmsg$sock(r0, 0x0, 0x0) 55.597942ms ago: executing program 4 (id=4369): r0 = socket$xdp(0x2c, 0x3, 0x0) sendmmsg(r0, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000003c0)="d7873e15810880e031da7266af5338864497255f818e7abd065d6fe81b192b58b2533c1860f537f3d60ed9ab990eebb138cf16fdcdc9a97c9c7d2d729a86576eff1da5a97d9ffde5cafa14f8945374481a3636af0ac6e01ad588a2645b32863c73106947a816aea8eb0414c36dde61231eb6d7131438ee9bb3358f4b56898ee2f357011a42cd177dc2a49a38356504581ca87b8af4029e7f7c223f59d9348991e77d3423569e227b82035e8c0d4e7957f87a2494a9273d19a32e9816278028037806dd260a8f5e31864ba4ea3dd7fa5c91d8bb3fbcf4a8eb131bcc7ec765486241f9defc70", 0xe5}, {&(0x7f00000004c0)="b1c6a1c63678c48fe8ce0020b102bfb3b7e9a0d0d9c881bdd184aa0ea59a44694a211e0c58504432747d7c70d1d99621c3b45ddeebf25f7672c5be358085fd792cc317b1b9ba4fb0f9dc34cd6284327524b135c8ef29efc819e9647167724e7b5aec74a618b7ac2209b9d77d1cbbdcde304cda10e55118281d84aca4336bfa31272e4ff19f4fffc1a30c103fa66723ffe2c1030e90d6de2e4208c5227b8985441d65caae33a96ba81136866715f6", 0xae}], 0x2, &(0x7f00000005c0)=[{0x18, 0x10e, 0x346367f7, "eb93333975"}, {0xd8, 0x107, 0x1, "190d45a2cce31acbca451fe24534fcd1e8bfe0127a2a24c6bc4d160b9cf8df0bb7c437a063d8f12d28eb97eaacdf7ab96ea9f739c9d1c89665050d4afc3d1da462a2c830e9350eafa3b1b70fb34ba15c0ce8b17a57d271843ecc40927a6ceb5a8ebcd94352d21e3d85c45864fbb98299418ab79f7572d078354e2c12d60afe47c59936c45262a4651faffd88c17b3458f8573e73186bc0c99dd79c76e3ed64d59fde26bc1490e1089c84aa47ce58859c9b0db9a3b289641dd85cbf42e42e32ad28018e9717"}], 0xf0}}], 0x1, 0x20000800) r1 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r1, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r1, 0x1) connect$rds(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x38, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "06bad7bf0800b3138b68a1c6d8c072743072481db271c450"}]]}, 0x38}}, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x110, r3, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_REKEY_DATA={0x20, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="b12668e2547a2a63589566f9496a413c"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x62c}]}, @NL80211_ATTR_REKEY_DATA={0x28, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="cd980f6ce6e1391075372ae16ea14e14357657759b568d57cfdae0bec05e91c4"}]}, @NL80211_ATTR_REKEY_DATA={0x6c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "24295b43c0937278"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="fa4897d0206a249849e6793cc53b8ccf94efc318f56cd2b3"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="ab82b0be1901cf53ca457c0321a7c6ea"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="ac485039dbd2002f235c406eb77317236b6ed1dbfdc4f094e67fc2011b4a226a"}, @NL80211_REKEY_DATA_AKM={0x8}]}, @NL80211_ATTR_REKEY_DATA={0x1c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "2994d117454dc4aa"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "753c1aaf4805e124"}]}, @NL80211_ATTR_REKEY_DATA={0x18, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "fad199e73bac736e"}]}, @NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "233fddedde7937de"}]}, @NL80211_ATTR_REKEY_DATA={0x4}]}, 0x110}, 0x1, 0x0, 0x0, 0x20008080}, 0x20008880) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)={0x3c, r8, 0x1, 0x70bd2c, 0x1000, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x5dda974614690250}]}, 0x3c}}, 0x4000004) sendmsg$NBD_CMD_STATUS(r5, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r8, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0xc000) 0s ago: executing program 0 (id=4370): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009400000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.time_recursive\x00', 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000002180)=[{&(0x7f00000001c0)='.', 0x1}], 0x1) write$cgroup_subtree(r2, 0x0, 0x78d0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000050000000000000000000000850000000e000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x81, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x3}, 0x50) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000500)={0x6, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x15, 0x1b, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80000000}, @exit, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x10001}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x67, 0x0, 0x0, 0x0, 0x81}, @generic={0x5, 0x9, 0x9, 0x9}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000005c0)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x78, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000640)={0x2, 0xb, 0x1c7c, 0x6}, 0x10, r7, r5, 0x0, &(0x7f0000000800)=[0xffffffffffffffff], &(0x7f0000000840)}, 0x94) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000380)=@generic={&(0x7f0000000340)='./file0\x00'}, 0x18) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000400)=@generic={&(0x7f00000003c0)='./file0\x00', 0x0, 0x8}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000440), &(0x7f0000000480)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1f, 0x20, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa036}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ldst={0x0, 0x2, 0x3, 0x3, 0x9, 0x40, 0x10}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @map_val={0x18, 0x7, 0x2, 0x0, r2}, @call={0x85, 0x0, 0x0, 0x6f}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='syzkaller\x00', 0x1, 0xb, &(0x7f0000000240)=""/11, 0x40f00, 0x58, '\x00', 0x0, @fallback=0x1d, r4, 0x8, &(0x7f00000002c0)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000300)={0x5, 0x5, 0x8000, 0x3}, 0x10, r7, r0, 0x7, &(0x7f0000000580)=[r8, r9, r10, 0xffffffffffffffff], &(0x7f00000005c0)=[{0x0, 0x2, 0x3, 0xa}, {0x3, 0x4, 0xe, 0xc}, {0x0, 0x3, 0x6, 0x5}, {0x1, 0x5, 0x7, 0x5}, {0x2, 0x2, 0x3, 0xc}, {0x0, 0x5, 0xc, 0x4}, {0x4, 0x1, 0xc, 0xc}], 0x10, 0x1}, 0x94) kernel console output (not intermixed with test programs): T76] hsr_slave_1: left promiscuous mode [ 446.572238][ T76] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 446.593511][ T76] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 446.608177][ T76] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 446.615580][ T76] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 446.649567][ T76] veth1_macvtap: left promiscuous mode [ 446.655988][ T76] veth0_macvtap: left promiscuous mode [ 446.661628][ T76] veth1_vlan: left promiscuous mode [ 446.666923][ T76] veth0_vlan: left promiscuous mode [ 447.108718][ T76] team0 (unregistering): Port device team_slave_1 removed [ 447.122766][ T76] team0 (unregistering): Port device team_slave_0 removed [ 447.517813][T18507] xfrm0 speed is unknown, defaulting to 1000 [ 447.543222][T18507] lo speed is unknown, defaulting to 1000 [ 447.577635][T18152] 8021q: adding VLAN 0 to HW filter on device bond0 [ 447.628129][T18152] 8021q: adding VLAN 0 to HW filter on device team0 [ 447.652255][ T814] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.659440][ T814] bridge0: port 1(bridge_slave_0) entered forwarding state [ 447.724374][ T3275] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.731540][ T3275] bridge0: port 2(bridge_slave_1) entered forwarding state [ 449.123961][T18152] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 449.635546][T18152] veth0_vlan: entered promiscuous mode [ 449.795836][T18152] veth1_vlan: entered promiscuous mode [ 449.858523][T18152] veth0_macvtap: entered promiscuous mode [ 449.912854][T18152] veth1_macvtap: entered promiscuous mode [ 450.000656][T18152] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 450.016512][T18152] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 450.104153][ T7730] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.139423][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 450.204141][ T7730] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.227512][ T7730] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.263384][ T7730] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.394094][ T76] IPVS: stop unused estimator thread 0... [ 450.543470][ T3391] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 450.564092][ T3391] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 450.588112][T18617] netlink: 'syz.1.3147': attribute type 4 has an invalid length. [ 450.595865][T18617] __nla_validate_parse: 84 callbacks suppressed [ 450.595878][T18617] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3147'. [ 450.742681][ T7730] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 450.750545][ T7730] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 450.897068][T18625] netlink: 'syz.0.3150': attribute type 1 has an invalid length. [ 450.927043][T18629] netlink: 'syz.0.3150': attribute type 1 has an invalid length. [ 450.963859][T18625] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3150'. [ 451.186727][T18625] bond26: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 451.280990][T18625] bond26 (unregistering): Released all slaves [ 451.376606][T18650] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3154'. [ 451.552795][T18648] netlink: 116 bytes leftover after parsing attributes in process `syz.1.3153'. [ 451.617805][T18661] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 451.660049][T18661] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3154'. [ 452.106514][T18667] veth1_macvtap: left promiscuous mode [ 452.165999][ T5633] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 452.190280][ T5633] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 452.202665][ T5633] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 452.214315][ T5633] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 452.222729][ T5633] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 453.432408][T18688] xfrm0 speed is unknown, defaulting to 1000 [ 453.440128][T18688] lo speed is unknown, defaulting to 1000 [ 453.675603][T18721] xt_hashlimit: size too large, truncated to 1048576 [ 453.688406][T18706] bond2: Removing last ns target with arp_interval on [ 453.782311][T18720] syzkaller0: entered promiscuous mode [ 453.825898][T18720] syzkaller0: entered allmulticast mode [ 453.950185][T18731] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3166'. [ 454.020689][T18674] xfrm0 speed is unknown, defaulting to 1000 [ 454.101876][T18674] lo speed is unknown, defaulting to 1000 [ 454.303729][T17139] Bluetooth: hci4: command tx timeout [ 454.540302][T18748] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3167'. [ 454.993737][T18674] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.000973][T18674] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.008222][T18674] bridge_slave_0: entered allmulticast mode [ 455.049655][T18674] bridge_slave_0: entered promiscuous mode [ 455.079451][T18674] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.107886][T18674] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.123859][T18674] bridge_slave_1: entered allmulticast mode [ 455.189781][T18780] netlink: 204 bytes leftover after parsing attributes in process `syz.1.3171'. [ 455.210075][T18780] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3171'. [ 455.389774][T18674] bridge_slave_1: entered promiscuous mode [ 455.696470][T18674] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 455.749051][T18674] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 456.011859][T18674] team0: Port device team_slave_0 added [ 456.089272][T18674] team0: Port device team_slave_1 added [ 456.296695][T18674] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 456.317028][T18674] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 456.347711][T17139] Bluetooth: hci4: command tx timeout [ 456.358745][T18674] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 456.373596][T18674] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 456.381148][T18674] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 456.384624][T18814] netlink: 'syz.1.3176': attribute type 4 has an invalid length. [ 456.407728][T18674] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 456.482866][T18816] netlink: 'syz.1.3176': attribute type 4 has an invalid length. [ 456.567544][T18674] hsr_slave_0: entered promiscuous mode [ 456.601654][T18674] hsr_slave_1: entered promiscuous mode [ 456.627500][T18674] debugfs: 'hsr0' already exists in 'hsr' [ 456.654993][T18674] Cannot create hsr debugfs directory [ 456.775755][T18818] syzkaller1: entered promiscuous mode [ 456.816269][T18818] syzkaller1: entered allmulticast mode [ 456.824090][T18818] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3944. macoff=96 [ 457.178691][T18840] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3182'. [ 457.504271][T18835] syzkaller0: entered promiscuous mode [ 457.513973][T18835] syzkaller0: entered allmulticast mode [ 457.539843][T18860] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3185'. [ 457.646639][T18674] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 457.657306][T18674] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.414309][T17139] Bluetooth: hci4: command tx timeout [ 460.060536][T18868] bridge1: port 1(veth3) entered blocking state [ 460.067127][T18868] bridge1: port 1(veth3) entered disabled state [ 460.075465][T18868] veth3: entered allmulticast mode [ 460.082558][T18868] veth3: entered promiscuous mode [ 460.111253][T18872] bridge1: port 2(veth0_to_bond) entered blocking state [ 460.124501][T18872] bridge1: port 2(veth0_to_bond) entered disabled state [ 460.131688][T18872] veth0_to_bond: entered allmulticast mode [ 460.139627][T18872] veth0_to_bond: entered promiscuous mode [ 460.192036][T18876] bridge1: port 3(veth5) entered blocking state [ 460.215024][T18876] bridge1: port 3(veth5) entered disabled state [ 460.224201][T18876] veth5: entered allmulticast mode [ 460.231487][T18876] veth5: entered promiscuous mode [ 460.240528][ T5289] veth1_macvtap: entered promiscuous mode [ 460.409057][T18895] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3191'. [ 460.497201][T18674] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 460.509619][T17139] Bluetooth: hci4: command tx timeout [ 460.536305][T18674] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.816018][T18908] syzkaller0: entered promiscuous mode [ 460.844543][T18908] syzkaller0: entered allmulticast mode [ 460.980891][ T1737] block nbd6: Possible stuck request ffff888026ce7000: control (read@0,2048B). Runtime 180 seconds [ 461.002409][T18674] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 461.023685][T18674] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.061542][T18926] netlink: 'syz.3.3199': attribute type 2 has an invalid length. [ 461.122084][T18919] xfrm0 speed is unknown, defaulting to 1000 [ 461.149026][T18924] nbd: socks must be embedded in a SOCK_ITEM attr [ 461.228167][T18674] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 461.250872][T18674] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.286270][T18924] nbd: device at index 0 is going down [ 461.406392][T18919] lo speed is unknown, defaulting to 1000 [ 461.406446][T18930] batadv_slave_1: entered promiscuous mode [ 461.526046][ T5642] udevd[5642]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory [ 461.583637][T18943] sock: sock_set_timeout: `syz.2.3200' (pid 18943) tries to set negative timeout [ 461.745432][T18948] Cannot find add_set index 2 as target [ 461.964846][T18955] ipt_ECN: cannot use operation on non-tcp rule [ 462.265627][ T1737] block nbd7: Possible stuck request ffff888026d55080: control (read@0,2048B). Runtime 180 seconds [ 464.445589][T18952] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.453445][T18952] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.594153][T18952] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 464.634769][T18952] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 464.707661][T18924] batadv_slave_1: left promiscuous mode [ 464.788501][ T7730] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.803614][ T7730] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.843179][ T7730] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.852162][ T7730] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.955412][T18977] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3208'. [ 464.967191][T18977] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3208'. [ 465.207921][T18674] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 465.353013][T18674] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 465.361180][T18674] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 465.388809][T18674] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 465.417802][T18989] netlink: 136 bytes leftover after parsing attributes in process `syz.3.3210'. [ 465.428256][T18674] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 465.467939][T18674] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 465.477870][T18674] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 465.514968][T18674] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 465.542796][T18986] tipc: Enabled bearer , priority 0 [ 465.586697][T18986] syzkaller0: entered promiscuous mode [ 465.592205][T18986] syzkaller0: entered allmulticast mode [ 465.600025][T18986] tipc: Resetting bearer [ 465.668479][T18986] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3209'. [ 465.709824][T18986] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3209'. [ 465.734049][T18674] 8021q: adding VLAN 0 to HW filter on device bond0 [ 465.764118][T18674] 8021q: adding VLAN 0 to HW filter on device team0 [ 465.776054][ T3275] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.783231][ T3275] bridge0: port 1(bridge_slave_0) entered forwarding state [ 465.987421][ T3275] tipc: Resetting bearer [ 466.006874][ T5865] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 466.018006][ T5865] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 466.040744][ T3275] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.045108][T19013] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 466.047909][ T3275] bridge0: port 2(bridge_slave_1) entered forwarding state [ 466.149048][T18985] tipc: Resetting bearer [ 468.699200][T18985] tipc: Disabling bearer [ 469.018418][T19025] xfrm0 speed is unknown, defaulting to 1000 [ 469.044265][T19025] lo speed is unknown, defaulting to 1000 [ 469.089497][T19037] netlink: 'syz.1.3219': attribute type 1 has an invalid length. [ 469.257369][T19038] bond3 (unregistering): Released all slaves [ 469.295102][T19044] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3219'. [ 469.295408][ T10] block nbd3: Possible stuck request ffff888026ba5080: control (read@0,4096B). Runtime 240 seconds [ 470.232809][T18674] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 470.280155][T18674] veth0_vlan: entered promiscuous mode [ 470.295179][T18674] veth1_vlan: entered promiscuous mode [ 470.392351][T18674] veth0_macvtap: entered promiscuous mode [ 470.426021][T18674] veth1_macvtap: entered promiscuous mode [ 470.450159][T19073] netlink: 'syz.4.3226': attribute type 3 has an invalid length. [ 470.458031][T19073] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3226'. [ 470.466320][T18674] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 470.490425][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888028e52400: rx timeout, send abort [ 470.503259][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888028e52400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 470.642879][T18674] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 470.760974][ T7730] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.792994][ T7730] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.866670][ T7730] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.886954][T19084] netlink: 'syz.4.3230': attribute type 5 has an invalid length. [ 470.899736][ T7730] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.917112][T19087] netlink: 'syz.2.3232': attribute type 13 has an invalid length. [ 471.048813][T19085] netlink: 'syz.3.3231': attribute type 1 has an invalid length. [ 471.066088][T19085] netlink: 'syz.3.3231': attribute type 2 has an invalid length. [ 471.085861][T19088] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3232'. [ 471.100834][T19084] gre1: entered allmulticast mode [ 471.197034][ T3275] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 471.216795][ T3275] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 471.250201][ T7823] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 471.302088][ T7823] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 471.348007][T19100] bond21: Unable to set up delay as MII monitoring is disabled [ 471.357214][T19099] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3234'. [ 471.367090][T19100] bond21 (unregistering): Released all slaves [ 471.427189][T19099] team0 (unregistering): Port device team_slave_0 removed [ 471.438884][T19099] team0 (unregistering): Port device team_slave_1 removed [ 471.501580][T19103] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3234'. [ 471.815562][T19113] xfrm0 speed is unknown, defaulting to 1000 [ 471.835537][T19113] lo speed is unknown, defaulting to 1000 [ 471.869998][T19115] netlink: 5360 bytes leftover after parsing attributes in process `syz.0.3236'. [ 471.881775][T19114] x_tables: duplicate underflow at hook 2 [ 471.897027][T19115] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3236'. [ 472.004270][T19118] Cannot find set identified by id 0 to match [ 472.017941][T19118] netlink: 'syz.4.3239': attribute type 1 has an invalid length. [ 472.028162][T19117] Cannot find set identified by id 0 to match [ 472.428420][T19129] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3241'. [ 472.506887][ T5633] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 472.518458][ T5633] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 472.527179][ T5633] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 472.540252][T19138] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 472.596935][T19138] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 472.789139][T19146] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3245'. [ 472.892883][T19149] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3245'. [ 473.085539][T19136] xfrm0 speed is unknown, defaulting to 1000 [ 473.093262][T19136] lo speed is unknown, defaulting to 1000 [ 473.440415][T19178] sctp: [Deprecated]: syz.0.3252 (pid 19178) Use of int in max_burst socket option. [ 473.440415][T19178] Use struct sctp_assoc_value instead [ 473.474318][T19175] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3253'. [ 473.492047][T19177] syzkaller0: renamed from batadv_slave_1 [ 474.420188][T19194] syzkaller0: entered promiscuous mode [ 474.425709][T19194] syzkaller0: entered allmulticast mode [ 474.653467][T17139] Bluetooth: hci3: command tx timeout [ 474.859412][ T3275] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 474.873054][ T3275] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.104830][T19136] bridge0: port 1(bridge_slave_0) entered blocking state [ 475.119749][T19136] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.127636][T19136] bridge_slave_0: entered allmulticast mode [ 475.151180][T19136] bridge_slave_0: entered promiscuous mode [ 475.160515][T19136] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.167717][T19136] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.175366][T19136] bridge_slave_1: entered allmulticast mode [ 475.183144][T19136] bridge_slave_1: entered promiscuous mode [ 475.218777][T19232] xfrm0 speed is unknown, defaulting to 1000 [ 475.281079][T19232] lo speed is unknown, defaulting to 1000 [ 475.284740][T19136] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 475.302460][T19136] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 475.386685][ T3275] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 475.400397][ T3275] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.518870][T19136] team0: Port device team_slave_0 added [ 475.547282][ T3275] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 475.559716][ T3275] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.586643][T19246] __nla_validate_parse: 3 callbacks suppressed [ 475.586660][T19246] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3269'. [ 475.650350][T19136] team0: Port device team_slave_1 added [ 475.761411][T19248] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3270'. [ 475.780788][T19248] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3270'. [ 475.806064][T19136] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 475.823682][T19136] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 475.858442][T19248] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3270'. [ 475.894405][T19136] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 475.950113][T19136] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 475.957090][T19136] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 476.018291][T19136] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 476.165942][ T3275] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 476.175723][ T3275] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.244378][T19249] tipc: Enabling of bearer rejected, failed to enable media [ 476.426994][T19136] hsr_slave_0: entered promiscuous mode [ 476.433696][T19136] hsr_slave_1: entered promiscuous mode [ 476.440005][T19136] debugfs: 'hsr0' already exists in 'hsr' [ 476.445783][T19136] Cannot create hsr debugfs directory [ 476.793371][T17139] Bluetooth: hci3: command tx timeout [ 477.327290][T19319] IPVS: set_ctl: invalid protocol: 43 10.1.1.1:20002 [ 477.519211][T19325] netlink: 27 bytes leftover after parsing attributes in process `syz.0.3284'. [ 477.599169][T19328] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3284'. [ 477.629796][ T3275] pim6reg: left allmulticast mode [ 477.654349][T19331] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3285'. [ 477.759868][ T3275] bond5 (unregistering): (slave ip6gretap1): Releasing active interface [ 477.768264][ T3275] ip6gretap1 (unregistering): left allmulticast mode [ 477.795484][ T3275] bond13 (unregistering): (slave ip6gre1): Releasing backup interface [ 477.897193][ T7730] smbdirect: ib_dev[syz0] removed [ 477.990746][ T3275] bond15 (unregistering): (slave geneve4): Releasing active interface [ 478.077105][ T3275] bond2 (unregistering): (slave bridge1): Releasing backup interface [ 478.140749][ T3275] bond0 (unregistering): Released all slaves [ 478.150759][ T3275] bond1 (unregistering): Released all slaves [ 478.164941][ T3275] bond2 (unregistering): (slave veth5): Releasing backup interface [ 478.175913][ T3275] bond2 (unregistering): Released all slaves [ 478.191986][ T3275] bond3 (unregistering): Released all slaves [ 478.205153][ T3275] bond4 (unregistering): Released all slaves [ 478.226321][ T3275] bond5 (unregistering): left allmulticast mode [ 478.235308][ T3275] team0: Port device macvlan2 removed [ 478.244701][ T3275] bond5 (unregistering): Released all slaves [ 478.258422][ T3275] bond6 (unregistering): Released all slaves [ 478.271971][ T3275] bond7 (unregistering): Released all slaves [ 478.288881][ T3275] bond8 (unregistering): Released all slaves [ 478.302213][ T3275] bond9 (unregistering): Released all slaves [ 478.315476][ T3275] bond10 (unregistering): Released all slaves [ 478.352578][ T3275] bond11 (unregistering): Released all slaves [ 478.378400][ T3275] bond12 (unregistering): Released all slaves [ 478.393570][ T3275] bond13 (unregistering): Released all slaves [ 478.406902][ T3275] bond14 (unregistering): Released all slaves [ 478.420039][ T3275] bond15 (unregistering): Released all slaves [ 478.441491][ T3275] bond16 (unregistering): Released all slaves [ 478.456614][ T3275] bond17 (unregistering): Released all slaves [ 478.469465][ T3275] bond18 (unregistering): Released all slaves [ 478.482368][ T3275] bond19 (unregistering): Released all slaves [ 478.496897][ T3275] bond20 (unregistering): Released all slaves [ 478.532172][ T8399] xfrm0 speed is unknown, defaulting to 1000 [ 478.551103][ T8399] infiniband syz0: ib_query_port failed (-19) [ 478.885992][T17139] Bluetooth: hci3: command tx timeout [ 479.174214][T19363] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3291'. [ 479.297586][ T3275] tipc: Disabling bearer [ 479.311992][ T3275] tipc: Left network mode [ 479.386212][T19370] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3292'. [ 479.396900][T19370] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3292'. [ 479.497599][T19370] 8021q: adding VLAN 0 to HW filter on device bond0 [ 479.525667][T19370] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 479.749621][T19370] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 479.829721][T19370] batman_adv: batadv0: Interface activated: syzkaller0 [ 479.900426][T19370] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 479.910791][T19370] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 480.161078][T19370] veth1_vlan: left promiscuous mode [ 480.167708][T19370] veth0_vlan: left promiscuous mode [ 480.174293][T19370] veth0_vlan: entered promiscuous mode [ 480.181569][T19370] veth1_vlan: entered promiscuous mode [ 480.197249][T19370] veth1_macvtap: left promiscuous mode [ 480.204438][T19370] veth0_macvtap: left promiscuous mode [ 480.235524][T19370] veth0_macvtap: entered promiscuous mode [ 480.242401][T19370] veth1_macvtap: entered promiscuous mode [ 480.252381][T19370] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 480.260437][T19370] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 480.268440][T19370] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 480.276939][T19370] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 480.288944][T19370] bond1: left promiscuous mode [ 480.293953][T19370] 8021q: adding VLAN 0 to HW filter on device bond1 [ 480.301738][T19370] 8021q: adding VLAN 0 to HW filter on device bond2 [ 480.331210][ T5865] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.338334][ T5865] bridge0: port 1(bridge_slave_0) entered forwarding state [ 480.347294][ T5865] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.354394][ T5865] bridge0: port 2(bridge_slave_1) entered forwarding state [ 480.363101][ T5865] bridge1: port 2(veth0_to_bond) entered blocking state [ 480.370110][ T5865] bridge1: port 2(veth0_to_bond) entered forwarding state [ 480.396507][ T5865] bridge1: port 1(veth3) entered blocking state [ 480.402838][ T5865] bridge1: port 1(veth3) entered forwarding state [ 480.410462][ T5865] bridge1: port 3(veth5) entered blocking state [ 480.416880][ T5865] bridge1: port 3(veth5) entered forwarding state [ 480.484809][T19382] macsec0: entered promiscuous mode [ 480.494603][T19381] macsec0: left promiscuous mode [ 480.515051][ T5289] 8021q: adding VLAN 0 to HW filter on device eth1 [ 480.631781][ T7823] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.665292][ T7730] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.901962][T17139] Bluetooth: hci3: command tx timeout [ 480.921947][ T7730] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.955053][ T7730] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.025597][T19398] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 481.201869][T19409] netlink: 'syz.3.3302': attribute type 1 has an invalid length. [ 481.409511][T19420] __nla_validate_parse: 79 callbacks suppressed [ 481.409529][T19420] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3302'. [ 481.432660][T19409] 8021q: adding VLAN 0 to HW filter on device bond3 [ 481.489535][T19414] bond3: (slave veth7): Enslaving as an active interface with a down link [ 481.501394][T19426] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3303'. [ 481.712370][T19419] veth1_to_bond: entered allmulticast mode [ 481.719718][T19421] veth1_to_bond: entered promiscuous mode [ 481.720700][T19413] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.3303'. [ 481.726486][T19410] syzkaller1: entered promiscuous mode [ 481.735003][T19413] openvswitch: netlink: Message has 512 unknown bytes. [ 481.740397][T19410] syzkaller1: entered allmulticast mode [ 481.760451][T19426] veth1_to_bond (unregistering): left allmulticast mode [ 481.785372][T19426] veth1_to_bond (unregistering): left promiscuous mode [ 481.801198][T19426] bond0: (slave bond_slave_1): Releasing backup interface [ 481.844804][T19409] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 481.856666][T19409] bond3: (slave batadv1): making interface the new active one [ 481.866715][T19409] batadv1: entered promiscuous mode [ 481.872561][T19409] bond3: (slave batadv1): Enslaving as an active interface with an up link [ 481.999502][ T7730] bond3: (slave veth7): link status definitely up, 10000 Mbps full duplex [ 482.063671][T19438] tipc: Started in network mode [ 482.070969][T19438] tipc: Node identity aaaaaaaaaa3f, cluster identity 4711 [ 482.078668][T19438] tipc: Enabled bearer , priority 0 [ 482.142877][T19438] syzkaller0: MTU too low for tipc bearer [ 482.148879][T19438] tipc: Disabling bearer [ 482.464600][T19454] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3310'. [ 482.467909][T19452] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3309'. [ 482.486926][T19136] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 482.494828][T19454] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3310'. [ 482.572675][T19136] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 482.581508][T19136] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 482.593761][T19136] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 482.625652][T19136] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 482.690234][T19136] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 482.740551][T19136] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 482.809470][T19136] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 482.819477][T19474] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 483.063542][T19485] syzkaller0: entered promiscuous mode [ 483.069629][T19485] syzkaller0: entered allmulticast mode [ 483.080967][ T3275] hsr_slave_0: left promiscuous mode [ 483.116642][ T3275] hsr_slave_1: left promiscuous mode [ 483.165713][ T3275] veth1_macvtap: left promiscuous mode [ 483.172420][ T3275] veth0_macvtap: left promiscuous mode [ 483.179363][ T3275] veth1_vlan: left promiscuous mode [ 483.184762][ T3275] veth0_vlan: left promiscuous mode [ 483.734686][T19493] netlink: 'syz.3.3318': attribute type 21 has an invalid length. [ 483.745713][T19493] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3318'. [ 483.809299][ T5735] IPVS: starting estimator thread 0... [ 483.833794][T19498] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.906303][T19499] IPVS: using max 34 ests per chain, 81600 per kthread [ 483.955289][ T3275] IPVS: stop unused estimator thread 0... [ 483.958422][T19501] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3320'. [ 483.971185][T19501] netlink: 'syz.3.3320': attribute type 20 has an invalid length. [ 483.979552][T19501] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3320'. [ 484.372731][T19505] netlink: 'syz.1.3321': attribute type 1 has an invalid length. [ 484.383428][T19505] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3321'. [ 484.403178][T19506] syzkaller0: entered promiscuous mode [ 484.409463][T19506] syzkaller0: entered allmulticast mode [ 485.388959][T19452] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 485.831961][T19136] 8021q: adding VLAN 0 to HW filter on device bond0 [ 485.883887][T19136] 8021q: adding VLAN 0 to HW filter on device team0 [ 485.924900][ T7730] bridge0: port 1(bridge_slave_0) entered blocking state [ 485.932094][ T7730] bridge0: port 1(bridge_slave_0) entered forwarding state [ 486.009255][ T7730] bridge0: port 2(bridge_slave_1) entered blocking state [ 486.016484][ T7730] bridge0: port 2(bridge_slave_1) entered forwarding state [ 486.521040][T19585] netlink: 'syz.3.3336': attribute type 8 has an invalid length. [ 486.640699][ T5289] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 486.668594][T19591] x_tables: duplicate underflow at hook 1 [ 486.691199][T19587] x_tables: duplicate underflow at hook 1 [ 486.814281][T19595] __nla_validate_parse: 3 callbacks suppressed [ 486.814301][T19595] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3339'. [ 486.860845][T19595] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3339'. [ 487.077239][T19600] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3341'. [ 487.729934][T19136] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 487.898193][T19136] veth0_vlan: entered promiscuous mode [ 487.967592][T19136] veth1_vlan: entered promiscuous mode [ 488.088052][T19136] veth0_macvtap: entered promiscuous mode [ 488.123344][T19136] veth1_macvtap: entered promiscuous mode [ 488.137268][T19634] netlink: 124 bytes leftover after parsing attributes in process `syz.1.3349'. [ 488.170497][T19136] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 488.211978][T19136] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 488.244300][ T5865] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.275594][ T5865] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.298048][ T5865] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.319636][ T5865] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.673873][T19647] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3352'. [ 490.690183][T19614] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 490.817385][ T7822] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 490.851393][ T7822] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 490.856815][T19653] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3356'. [ 490.889405][T19653] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3356'. [ 490.919856][T19653] netlink: 'syz.0.3356': attribute type 18 has an invalid length. [ 490.936154][T19653] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3356'. [ 490.949641][ T7823] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 490.958817][T19659] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3354'. [ 490.969245][ T7823] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 491.064768][ T1737] block nbd6: Possible stuck request ffff888026ce7000: control (read@0,2048B). Runtime 210 seconds [ 491.107684][T19666] netlink: 4928 bytes leftover after parsing attributes in process `syz.3.3358'. [ 491.498669][T19686] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20002 [ 491.969644][T19720] bond1 (unregistering): Released all slaves [ 492.330382][T19745] tipc: Started in network mode [ 492.339508][T19745] tipc: Node identity ac14140f, cluster identity 4711 [ 492.346584][ T1737] block nbd7: Possible stuck request ffff888026d55080: control (read@0,2048B). Runtime 210 seconds [ 492.350760][T19745] tipc: New replicast peer: 255.255.255.255 [ 492.377775][T19745] tipc: Enabled bearer , priority 10 [ 492.631051][T19765] __nla_validate_parse: 5 callbacks suppressed [ 492.631069][T19765] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3377'. [ 492.678654][T19766] tipc: Started in network mode [ 492.692365][T19766] tipc: Node identity ac14140f, cluster identity 4711 [ 492.701979][T19766] tipc: New replicast peer: 255.255.255.255 [ 492.709164][T19766] tipc: Enabled bearer , priority 10 [ 492.716506][T19761] syzkaller0: entered promiscuous mode [ 492.727566][T19761] syzkaller0: entered allmulticast mode [ 492.761685][T19766] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3380'. [ 492.773597][T19770] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3383'. [ 492.807858][T19761] sctp: [Deprecated]: syz.2.3381 (pid 19761) Use of int in maxseg socket option. [ 492.807858][T19761] Use struct sctp_assoc_value instead [ 492.821052][T19770] ip6gre1: entered promiscuous mode [ 492.829914][T19770] ip6gre1: entered allmulticast mode [ 492.889603][T19776] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3384'. [ 492.921662][T19780] ip6gre0: entered allmulticast mode [ 492.973751][T19775] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 493.074781][T19775] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 493.111241][T19785] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3388'. [ 493.217440][T19790] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3388'. [ 493.228565][T19789] tipc: Enabling of bearer rejected, failed to enable media [ 493.229304][T19789] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3390'. [ 493.247451][T19787] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 493.267147][ T3391] batadv1: left promiscuous mode [ 493.503255][ T8399] tipc: Node number set to 2886997007 [ 493.824787][ T8399] tipc: Node number set to 2886997007 [ 493.830504][T19827] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3401'. [ 493.907748][T19830] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3402'. [ 493.940770][T19827] netlink: 'syz.4.3401': attribute type 4 has an invalid length. [ 494.018105][T19842] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3404'. [ 494.347825][T19863] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 494.399690][T19863] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 494.507224][T19870] x_tables: duplicate underflow at hook 1 [ 494.638225][T19867] syzkaller0: entered promiscuous mode [ 494.646816][T19867] syzkaller0: entered allmulticast mode [ 494.689985][T19872] lo speed is unknown, defaulting to 1000 [ 494.967839][T19896] netlink: 'syz.3.3419': attribute type 13 has an invalid length. [ 495.017326][T19896] netlink: 'syz.3.3419': attribute type 17 has an invalid length. [ 496.875732][T19890] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.883330][T19890] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.920819][T19890] bridge1: port 2(veth0_to_bond) entered disabled state [ 496.957670][T19890] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 497.027056][T19890] bridge1: port 3(veth5) entered disabled state [ 497.033667][T19890] bridge1: port 1(veth3) entered disabled state [ 497.117435][T19896] 8021q: adding VLAN 0 to HW filter on device bond0 [ 497.127295][T19896] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 497.158262][T19896] syzkaller0: left promiscuous mode [ 497.163827][T19896] syzkaller0: left allmulticast mode [ 497.169648][T19896] batman_adv: batadv0: Interface activated: syzkaller0 [ 497.181924][T19896] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 497.193214][T19896] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 497.213299][T19896] veth1_vlan: left promiscuous mode [ 497.221014][T19896] veth0_vlan: left promiscuous mode [ 497.227951][T19896] veth0_vlan: entered promiscuous mode [ 497.235170][T19896] veth1_vlan: entered promiscuous mode [ 497.244390][T19896] veth1_macvtap: left promiscuous mode [ 497.250867][T19896] veth0_macvtap: left promiscuous mode [ 497.257715][T19896] veth0_macvtap: entered promiscuous mode [ 497.269810][T19896] veth1_macvtap: entered promiscuous mode [ 497.280229][T19896] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 497.291880][T19896] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 497.303346][T19896] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 497.318752][T19896] 8021q: adding VLAN 0 to HW filter on device bond1 [ 497.326793][T19896] 8021q: adding VLAN 0 to HW filter on device bond2 [ 497.339652][T19896] 8021q: adding VLAN 0 to HW filter on device bond3 [ 497.348979][T19896] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 497.358939][T19896] ip6gre1: left promiscuous mode [ 497.364292][T19896] ip6gre1: left allmulticast mode [ 497.395005][T19904] syzkaller0: entered promiscuous mode [ 497.400513][T19904] syzkaller0: entered allmulticast mode [ 497.440356][ T5865] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 497.473937][ T5865] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 497.531040][ T7822] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.538249][ T7822] bridge0: port 1(bridge_slave_0) entered forwarding state [ 497.569429][ T7822] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.576631][ T7822] bridge0: port 2(bridge_slave_1) entered forwarding state [ 497.586685][ T7822] bridge1: port 2(veth0_to_bond) entered blocking state [ 497.593784][ T7822] bridge1: port 2(veth0_to_bond) entered forwarding state [ 497.668305][ T7822] bridge1: port 1(veth3) entered blocking state [ 497.674734][ T7822] bridge1: port 1(veth3) entered forwarding state [ 497.683836][ T7822] bridge1: port 3(veth5) entered blocking state [ 497.690212][ T7822] bridge1: port 3(veth5) entered forwarding state [ 497.715998][ T5865] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 497.836637][T19929] tap0: tun_chr_ioctl cmd 2148553947 [ 497.928933][T19930] syzkaller0: MTU too low for tipc bearer [ 497.939956][T19930] tipc: Enabling of bearer rejected, failed to enable media [ 498.029402][T19927] geneve3: entered promiscuous mode [ 498.056290][T19927] geneve3: entered allmulticast mode [ 498.082251][T19943] __nla_validate_parse: 3 callbacks suppressed [ 498.082267][T19943] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3431'. [ 498.206424][T19949] ipip0: entered promiscuous mode [ 498.215397][T19952] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3434'. [ 498.222540][T19949] ipip0: entered allmulticast mode [ 498.500238][T19960] batadv_slave_1: entered promiscuous mode [ 498.562755][T19972] netlink: 'syz.1.3436': attribute type 1 has an invalid length. [ 498.573812][T19972] netlink: 'syz.1.3436': attribute type 1 has an invalid length. [ 498.574291][T19953] nbd: socks must be embedded in a SOCK_ITEM attr [ 498.610290][T19972] netlink: 'syz.1.3436': attribute type 2 has an invalid length. [ 498.622379][ T5652] block nbd0: NBD_DISCONNECT [ 498.674917][T19972] netlink: 'syz.1.3436': attribute type 1 has an invalid length. [ 498.703501][T19977] netlink: 'syz.3.3437': attribute type 15 has an invalid length. [ 498.746871][T19950] lo speed is unknown, defaulting to 1000 [ 498.973629][ T5642] udevd[5642]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory [ 499.129680][T19993] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3440'. [ 499.383113][T20004] netlink: 'syz.3.3442': attribute type 2 has an invalid length. [ 499.391027][ T10] block nbd3: Possible stuck request ffff888026ba5080: control (read@0,4096B). Runtime 270 seconds [ 499.416013][T20004] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3442'. [ 499.447066][T19991] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.673787][T20015] netlink: 272 bytes leftover after parsing attributes in process `syz.3.3444'. [ 499.694306][T20015] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3444'. [ 499.706993][T19968] batadv_slave_1: left promiscuous mode [ 499.757756][T19991] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.822585][T20025] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3447'. [ 499.915211][T20028] netlink: 'syz.1.3448': attribute type 1 has an invalid length. [ 499.951362][T19991] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.026706][T20030] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3448'. [ 500.218561][T19991] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.264779][T20030] bond3: option primary_reselect: invalid value (6) [ 500.274129][T20030] bond3 (unregistering): Released all slaves [ 500.407489][ T7822] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.529067][ T7822] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.569613][ T3391] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.614426][ T3391] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.699265][T20046] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3452'. [ 500.782038][T20048] netlink: 'syz.4.3453': attribute type 12 has an invalid length. [ 500.820552][T20048] netlink: 'syz.4.3453': attribute type 12 has an invalid length. [ 501.044631][T20065] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3459'. [ 501.303307][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.416739][T20124] batadv0: entered promiscuous mode [ 502.476202][T20124] macsec1: entered promiscuous mode [ 502.481837][T20124] macsec1: entered allmulticast mode [ 502.487711][T20124] batadv0: entered allmulticast mode [ 502.495470][T20124] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 502.504956][T20124] batadv0: left allmulticast mode [ 502.523261][T20124] batadv0: left promiscuous mode [ 503.300270][T20190] __nla_validate_parse: 8 callbacks suppressed [ 503.300286][T20190] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3493'. [ 503.408692][T20196] netlink: 'syz.1.3492': attribute type 1 has an invalid length. [ 503.998085][T20196] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 504.107188][T20212] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3499'. [ 504.355663][T20237] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3504'. [ 504.625301][T20246] syzkaller0: entered promiscuous mode [ 504.653186][T20246] syzkaller0: entered allmulticast mode [ 504.658566][T20224] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3502'. [ 504.782692][T20259] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3508'. [ 504.997509][T20265] lo speed is unknown, defaulting to 1000 [ 505.064413][T20272] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3511'. [ 505.102208][T20272] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3511'. [ 505.141318][T20272] gretap0: entered promiscuous mode [ 505.148115][T20280] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3510'. [ 505.283121][T20268] syzkaller0: entered promiscuous mode [ 505.288715][T20268] syzkaller0: entered allmulticast mode [ 505.307743][T20284] netlink: 'syz.4.3513': attribute type 1 has an invalid length. [ 505.364811][T20284] 8021q: adding VLAN 0 to HW filter on device bond1 [ 506.177663][T20312] xt_hashlimit: size too large, truncated to 1048576 [ 507.616014][T20289] bond1: (slave dummy0): making interface the new active one [ 507.626249][T20289] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 507.971373][T20328] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3521'. [ 508.153475][T20325] syzkaller0: entered promiscuous mode [ 508.167790][T20335] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3523'. [ 508.203192][T20325] syzkaller0: entered allmulticast mode [ 508.353693][T20341] __nla_validate_parse: 1 callbacks suppressed [ 508.353709][T20341] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3525'. [ 508.490544][T20341] 8021q: adding VLAN 0 to HW filter on device bond3 [ 508.498694][T20342] bond3: option ad_select: unable to set because the bond device is up [ 508.595042][T20350] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3528'. [ 509.168554][T20380] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3537'. [ 509.205996][T20362] lo speed is unknown, defaulting to 1000 [ 509.207837][T20378] 8021q: VLANs not supported on xfrm0 [ 509.451184][T20394] netlink: 276 bytes leftover after parsing attributes in process `syz.4.3540'. [ 509.940360][T20396] lo speed is unknown, defaulting to 1000 [ 510.399039][T20417] tipc: Resetting bearer [ 510.859755][T20448] xt_nfacct: accounting object `\$‚9ZúM#íü¾¦Eµ|¡^cÁ\F9YⳈ«ÃÖ' does not exist [ 511.128471][T20455] xt_hashlimit: size too large, truncated to 1048576 [ 511.211499][T20453] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3550'. [ 511.253695][T20461] netlink: 'syz.3.3551': attribute type 11 has an invalid length. [ 511.298659][T20453] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3550'. [ 511.304094][T20461] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3551'. [ 511.316438][T20458] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.382646][T20465] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3551'. [ 511.499858][T20458] bridge_slave_0 (unregistering): left allmulticast mode [ 511.545457][T20458] bridge_slave_0 (unregistering): left promiscuous mode [ 511.568690][T20458] bridge0: port 1(bridge_slave_0) entered disabled state [ 512.360278][T20524] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3556'. [ 512.778869][T20549] netlink: 'syz.2.3560': attribute type 30 has an invalid length. [ 513.087066][T20567] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 513.112875][T20567] netlink: 'syz.1.3566': attribute type 1 has an invalid length. [ 513.206224][T20567] 8021q: adding VLAN 0 to HW filter on device bond5 [ 513.251847][T20577] netlink: 'syz.3.3567': attribute type 8 has an invalid length. [ 513.268954][T20577] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3567'. [ 513.282546][T20571] bond5: (slave geneve2): making interface the new active one [ 513.304295][T20571] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 513.566727][T20586] netlink: 'syz.1.3568': attribute type 1 has an invalid length. [ 513.589538][T20587] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3569'. [ 513.607190][T20587] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3569'. [ 513.838608][T20603] netlink: 220 bytes leftover after parsing attributes in process `syz.1.3571'. [ 514.080126][T20610] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3574'. [ 514.829281][T20638] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3577'. [ 514.875681][T20613] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.883371][T20613] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.278567][T20613] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 515.317574][T20613] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 515.787030][T20650] netlink: 'syz.0.3579': attribute type 1 has an invalid length. [ 515.818768][T20630] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.826267][T20630] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.881428][T20630] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 515.895827][T20630] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 515.967838][ T7730] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.159632][T20651] bond4: (slave geneve2): making interface the new active one [ 516.170307][T20651] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 516.181583][ T7730] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.214003][T20666] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3580'. [ 516.218913][ T7730] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 516.282643][T20654] netlink: 1311 bytes leftover after parsing attributes in process `syz.4.3580'. [ 516.297150][ T7730] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.313475][ T7730] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 516.401667][T20668] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 516.439929][ T814] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.468838][ T814] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 516.509491][ T814] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.600227][ T814] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.623862][ T814] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.674137][ T814] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.711697][ T814] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 516.822126][T20703] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 516.892714][T20707] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3592'. [ 516.935974][T20696] lo speed is unknown, defaulting to 1000 [ 516.951143][T20698] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 517.030697][T20707] team1: entered promiscuous mode [ 517.048452][T20707] team1: entered allmulticast mode [ 517.071570][T20707] 8021q: adding VLAN 0 to HW filter on device team1 [ 517.273062][T20722] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3595'. [ 517.332131][T20722] vlan2: entered promiscuous mode [ 517.350604][T20722] bond0: entered promiscuous mode [ 517.365891][T20722] bond_slave_0: entered promiscuous mode [ 517.753387][T20736] can: request_module (can-proto-5) failed. [ 518.203538][T20760] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3602'. [ 518.475421][T20765] netlink: 'syz.0.3604': attribute type 16 has an invalid length. [ 518.497685][T20765] 8021q: adding VLAN 0 to HW filter on device bond0 [ 518.640245][T20767] ip6tnl1: entered promiscuous mode [ 518.720271][T20768] __nla_validate_parse: 1 callbacks suppressed [ 518.720289][T20768] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3603'. [ 518.779240][T20770] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 519.297153][T20805] netlink: 10 bytes leftover after parsing attributes in process `syz.1.3612'. [ 519.601757][T20820] batadv_slave_1: entered promiscuous mode [ 519.637686][T20822] netlink: 'syz.2.3617': attribute type 4 has an invalid length. [ 519.688235][T20823] netlink: 'syz.2.3617': attribute type 4 has an invalid length. [ 519.710639][T20832] netlink: 'syz.2.3617': attribute type 4 has an invalid length. [ 519.733234][T20820] batadv_slave_1: left promiscuous mode [ 519.792711][T20836] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3620'. [ 519.848162][T20836] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3620'. [ 519.887472][T20836] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3620'. [ 519.917894][T20841] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3620'. [ 519.962161][T20848] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 520.046789][T20853] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3625'. [ 520.101215][T20853] ip6gre1: entered promiscuous mode [ 520.137642][T20853] ip6gre1: entered allmulticast mode [ 520.238035][T20853] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 520.362188][T20870] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3631'. [ 520.391273][T20872] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3630'. [ 520.570350][T20885] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3634'. [ 520.660386][T20890] bridge1: entered allmulticast mode [ 520.676434][T20890] netlink: 'syz.0.3635': attribute type 2 has an invalid length. [ 521.143123][ T1737] block nbd6: Possible stuck request ffff888026ce7000: control (read@0,2048B). Runtime 240 seconds [ 521.537965][T20935] syzkaller0: entered promiscuous mode [ 521.553081][T20935] syzkaller0: entered allmulticast mode [ 521.690826][T20948] netlink: 'syz.4.3648': attribute type 21 has an invalid length. [ 521.765003][T20948] IPVS: Error connecting to the multicast addr [ 521.773737][ C1] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 521.774248][T17139] Bluetooth: hci3: command tx timeout [ 521.960806][T20957] syzkaller0: MTU too low for tipc bearer [ 521.970621][T20957] tipc: Enabling of bearer rejected, failed to enable media [ 522.038223][T20961] vlan2: entered promiscuous mode [ 522.050414][T20961] erspan0: entered promiscuous mode [ 522.404304][T20984] bond6: down delay (1) is not a multiple of miimon (100), value rounded to 0 ms [ 522.414016][ T1737] block nbd7: Possible stuck request ffff888026d55080: control (read@0,2048B). Runtime 240 seconds [ 522.426707][T20984] bond6: peer notification delay (49189) is not a multiple of miimon (100), value rounded to 49100 ms [ 522.959690][T21023] (: renamed from veth0_to_hsr (while UP) [ 523.110955][T21020] bridge4: entered promiscuous mode [ 523.147460][T21025] syzkaller1: entered promiscuous mode [ 523.159514][T21025] syzkaller1: entered allmulticast mode [ 523.616976][T21049] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 523.858946][T17139] Bluetooth: hci5: command 0x0406 tx timeout [ 523.975851][ T814] nci: nci_rsp_packet: unknown rsp opcode 0x8 [ 524.296766][T21073] IPVS: set_ctl: invalid protocol: 60 127.0.0.1:20002 [ 526.357999][T21113] __nla_validate_parse: 15 callbacks suppressed [ 526.358019][T21113] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3683'. [ 526.379223][T21113] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3683'. [ 526.420895][T21116] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3684'. [ 526.517999][T21123] syzkaller0: entered promiscuous mode [ 526.523978][T21123] syzkaller0: entered allmulticast mode [ 526.839612][T21065] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 527.034345][T21127] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3686'. [ 527.087899][T21127] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3686'. [ 527.205644][T21140] xt_hashlimit: size too large, truncated to 1048576 [ 527.245181][T21145] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3692'. [ 527.479165][T21168] openvswitch: netlink: Duplicate or invalid key (type 0). [ 527.503388][T21168] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 527.519859][T21170] FAULT_INJECTION: forcing a failure. [ 527.519859][T21170] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 527.563299][T21170] CPU: 0 UID: 0 PID: 21170 Comm: syz.1.3696 Not tainted syzkaller #0 PREEMPT(full) [ 527.563347][T21170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 527.563370][T21170] Call Trace: [ 527.563378][T21170] [ 527.563385][T21170] dump_stack_lvl+0xe8/0x150 [ 527.563415][T21170] should_fail_ex+0x40c/0x560 [ 527.563445][T21170] _copy_from_user+0x2d/0xb0 [ 527.563467][T21170] ___sys_recvmsg+0x173/0x5a0 [ 527.563503][T21170] ? __pfx____sys_recvmsg+0x10/0x10 [ 527.563529][T21170] ? __fget_files+0x2a/0x420 [ 527.563566][T21170] ? __fget_files+0x3a2/0x420 [ 527.563595][T21170] do_recvmmsg+0x31a/0x7f0 [ 527.563626][T21170] ? __pfx_do_recvmmsg+0x10/0x10 [ 527.563660][T21170] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 527.563692][T21170] ? __fget_files+0x3a2/0x420 [ 527.563720][T21170] __x64_sys_recvmmsg+0x198/0x250 [ 527.563748][T21170] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 527.563779][T21170] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.563800][T21170] do_syscall_64+0x174/0x580 [ 527.563817][T21170] ? trace_irq_disable+0x3b/0x140 [ 527.563835][T21170] ? clear_bhb_loop+0x40/0x90 [ 527.563859][T21170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.563878][T21170] RIP: 0033:0x7fa49eb9ce59 [ 527.563896][T21170] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 527.563911][T21170] RSP: 002b:00007fa49fae5028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 527.563931][T21170] RAX: ffffffffffffffda RBX: 00007fa49ee16090 RCX: 00007fa49eb9ce59 [ 527.563945][T21170] RDX: 0000000000003aa0 RSI: 00002000000047c0 RDI: 0000000000000005 [ 527.563957][T21170] RBP: 00007fa49fae5090 R08: 0000000000000000 R09: 0000000000000000 [ 527.563969][T21170] R10: 0000000060002000 R11: 0000000000000246 R12: 0000000000000001 [ 527.563980][T21170] R13: 00007fa49ee16128 R14: 00007fa49ee16090 R15: 00007ffdc9119b58 [ 527.564010][T21170] [ 527.676875][T21166] lo speed is unknown, defaulting to 1000 [ 527.732079][T21176] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 527.895048][T21175] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3700'. [ 527.911475][T21186] can: request_module (can-proto-0) failed. [ 528.076609][T21202] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 528.643844][T21215] netlink: 'syz.2.3708': attribute type 15 has an invalid length. [ 528.662539][T21215] netlink: 666 bytes leftover after parsing attributes in process `syz.2.3708'. [ 528.678923][T21224] bond_slave_1: Device is already in use. [ 528.960456][T21231] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3712'. [ 529.293974][T21253] pimreg: entered allmulticast mode [ 529.325767][T21254] netlink: 'syz.4.3717': attribute type 11 has an invalid length. [ 529.445833][T21260] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3719'. [ 529.461329][ T10] block nbd3: Possible stuck request ffff888026ba5080: control (read@0,4096B). Runtime 300 seconds [ 529.773500][T19138] Bluetooth: hci0: command 0x0401 tx timeout [ 530.267360][T21293] netlink: 'syz.3.3727': attribute type 16 has an invalid length. [ 531.431217][T21358] bond8: option lacp_rate: invalid value (128) [ 531.458420][T21358] bond8 (unregistering): Released all slaves [ 531.631416][T21371] netlink: 'syz.3.3747': attribute type 20 has an invalid length. [ 531.673522][T21371] __nla_validate_parse: 8 callbacks suppressed [ 531.673540][T21371] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3747'. [ 531.911705][T21379] lo speed is unknown, defaulting to 1000 [ 531.940289][T21387] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3750'. [ 532.227321][T21250] pimreg: left allmulticast mode [ 532.256105][T21399] netlink: 'syz.3.3753': attribute type 1 has an invalid length. [ 532.348044][T21399] 8021q: adding VLAN 0 to HW filter on device bond7 [ 532.464330][T21399] macvlan2: entered promiscuous mode [ 532.484230][T21399] macvlan2: entered allmulticast mode [ 532.490160][T21410] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3755'. [ 532.608047][T21381] lo speed is unknown, defaulting to 1000 [ 532.914472][T21425] IPVS: set_ctl: invalid protocol: 33 224.0.0.2:20003 [ 533.584578][T21459] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3767'. [ 533.917385][T21456] ip6gre0: left allmulticast mode [ 534.082018][T21456] dummy0: left promiscuous mode [ 534.878365][ T4994] udevd[4994]: worker [5645] /devices/virtual/block/nbd3 timeout; kill it [ 534.889918][ T4994] udevd[4994]: seq 17782 '/devices/virtual/block/nbd3' killed [ 534.903957][T21456] bond1: left promiscuous mode [ 534.906593][ T4994] udevd[4994]: worker [5626] /devices/virtual/block/nbd6 timeout; kill it [ 534.918172][ T4994] udevd[4994]: seq 20331 '/devices/virtual/block/nbd6' killed [ 534.926727][ T4994] udevd[4994]: worker [5635] /devices/virtual/block/nbd7 timeout; kill it [ 534.933678][T21456] ipip0: left promiscuous mode [ 534.937154][ T4994] udevd[4994]: seq 20336 '/devices/virtual/block/nbd7' killed [ 534.956331][T21456] ipip0: left allmulticast mode [ 535.058315][ T814] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.091632][ T814] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.119011][ T814] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.145304][ T814] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.497948][T21507] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 535.650934][T21520] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3778'. [ 536.309970][T21551] bridge2: entered promiscuous mode [ 536.360515][T21551] bridge2: entered allmulticast mode [ 536.392388][T21561] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3787'. [ 536.445942][T21561] ip6gre2: entered promiscuous mode [ 536.468553][T21561] ip6gre2: entered allmulticast mode [ 536.644394][T21585] IPv6: Can't replace route, no match found [ 536.667851][T21589] tipc: Enabled bearer , priority 0 [ 536.692533][T21589] syzkaller0: entered promiscuous mode [ 536.699684][T21585] IPv6: Can't replace route, no match found [ 536.708852][T21589] syzkaller0: entered allmulticast mode [ 536.724559][T21587] syzkaller0: entered promiscuous mode [ 536.733502][T21587] syzkaller0: entered allmulticast mode [ 536.748998][T21589] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 537.033345][T21605] tipc: Resetting bearer [ 537.064860][T21588] tipc: Resetting bearer [ 537.166024][T21588] tipc: Disabling bearer [ 537.210552][T21620] netlink: 'syz.1.3799': attribute type 32 has an invalid length. [ 537.298093][T21627] netlink: 'syz.4.3801': attribute type 1 has an invalid length. [ 537.520433][T21641] vxcan1: tx drop: invalid da for name 0x0000008000000000 [ 537.520807][T21627] bond2: entered promiscuous mode [ 537.555559][T21627] 8021q: adding VLAN 0 to HW filter on device bond2 [ 537.726980][T21622] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3801'. [ 537.814669][T21654] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3804'. [ 537.863879][T21654] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3804'. [ 537.994281][T21641] lo speed is unknown, defaulting to 1000 [ 538.247610][T21670] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3807'. [ 538.399372][T21678] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3810'. [ 538.508060][T21683] mac80211_hwsim hwsim23 wlan0: entered promiscuous mode [ 538.521233][T21683] mac80211_hwsim hwsim23 wlan0: entered allmulticast mode [ 538.545744][T21683] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 538.660624][T21685] netlink: 'syz.0.3813': attribute type 1 has an invalid length. [ 538.701118][T21685] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3813'. [ 538.743186][T21685] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3813'. [ 538.942083][T21691] syzkaller0: entered promiscuous mode [ 538.950507][T21691] syzkaller0: entered allmulticast mode [ 539.066123][T21698] syzkaller0: left promiscuous mode [ 539.088294][T21698] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 540.080983][T21731] x_tables: duplicate underflow at hook 1 [ 542.544536][T21749] tipc: Enabled bearer , priority 10 [ 542.651019][T21748] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3828'. [ 543.170599][ T7732] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 543.185336][T21783] netlink: 'syz.1.3835': attribute type 1 has an invalid length. [ 543.205228][ T7732] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.288330][T21783] 8021q: adding VLAN 0 to HW filter on device bond8 [ 543.343471][T21797] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3843'. [ 543.410788][T21802] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3842'. [ 543.428614][T21801] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 543.455485][T21801] syzkaller1: linktype set to 270 [ 543.777234][T21828] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3847'. [ 543.805332][T21828] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3847'. [ 543.971276][T21833] netlink: 'syz.2.3849': attribute type 40 has an invalid length. [ 544.183379][T21847] netlink: 732 bytes leftover after parsing attributes in process `syz.3.3852'. [ 544.235303][T21847] netlink: 732 bytes leftover after parsing attributes in process `syz.3.3852'. [ 544.262581][T21854] tipc: Enabled bearer , priority 0 [ 544.279430][T21854] syzkaller0: entered promiscuous mode [ 544.291392][T21854] syzkaller0: entered allmulticast mode [ 544.336634][T17139] Bluetooth: hci0: command 0x0401 tx timeout [ 544.360238][T21854] tipc: Resetting bearer [ 544.397105][T21853] tipc: Resetting bearer [ 544.442686][T21853] tipc: Disabling bearer [ 544.525743][T21872] netlink: 284 bytes leftover after parsing attributes in process `syz.0.3858'. [ 544.634474][T21880] lo: entered allmulticast mode [ 544.643518][T21482] IPVS: starting estimator thread 0... [ 544.652012][T21879] lo: left allmulticast mode [ 544.737405][T21881] IPVS: using max 30 ests per chain, 72000 per kthread [ 544.810159][T21887] netlink: 'syz.4.3862': attribute type 1 has an invalid length. [ 545.316363][T21905] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3869'. [ 545.327650][T21906] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3869'. [ 545.351568][T21905] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3869'. [ 545.421693][T21909] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 546.006745][T21932] syzkaller0: entered promiscuous mode [ 546.016728][T21942] netlink: 'syz.0.3878': attribute type 1 has an invalid length. [ 546.027023][T21932] syzkaller0: entered allmulticast mode [ 546.116321][T21942] xt_hashlimit: size too large, truncated to 1048576 [ 546.808410][T21967] netlink: 'syz.4.3886': attribute type 8 has an invalid length. [ 546.856567][T21967] geneve3: entered promiscuous mode [ 546.868242][T21967] geneve3: entered allmulticast mode [ 546.890069][ T814] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.911069][ T814] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.939303][T21978] netlink: 'syz.0.3888': attribute type 5 has an invalid length. [ 546.945385][ T814] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.999937][ T814] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.864081][T22005] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 547.945973][T22009] tipc: Enabled bearer , priority 30 [ 548.088125][T22019] netlink: 'syz.1.3898': attribute type 1 has an invalid length. [ 548.162359][T22019] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 548.264326][T22032] netlink: 'syz.4.3902': attribute type 6 has an invalid length. [ 548.325459][T22034] C: renamed from veth1_to_team [ 548.341911][T22034] netlink: 'syz.4.3903': attribute type 2 has an invalid length. [ 548.358799][T22034] __nla_validate_parse: 10 callbacks suppressed [ 548.358878][T22034] netlink: 116 bytes leftover after parsing attributes in process `syz.4.3903'. [ 548.375639][T22034] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 548.418877][T22036] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3904'. [ 548.520102][T22043] netlink: 'syz.4.3906': attribute type 4 has an invalid length. [ 548.617458][T22049] syzkaller0: entered promiscuous mode [ 548.640908][T22049] syzkaller0: entered allmulticast mode [ 549.146041][T22072] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3916'. [ 549.212179][T22076] netlink: 'syz.4.3917': attribute type 58 has an invalid length. [ 549.267951][T22078] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3917'. [ 549.338433][T22083] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3921'. [ 549.362742][T22083] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3921'. [ 549.604986][T22092] tipc: Enabled bearer , priority 0 [ 549.795565][T22099] lo speed is unknown, defaulting to 1000 [ 549.856510][T22104] syzkaller0: entered promiscuous mode [ 549.873966][T22104] syzkaller0: entered allmulticast mode [ 549.911881][T22104] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 550.175127][T22112] netlink: 'syz.0.3928': attribute type 1 has an invalid length. [ 550.228867][T22114] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3928'. [ 550.418603][T22118] bond7: (slave gretap1): making interface the new active one [ 550.436333][T22118] bond7: (slave gretap1): Enslaving as an active interface with an up link [ 550.468802][T22091] tipc: Resetting bearer [ 550.542834][T22091] tipc: Disabling bearer [ 550.614877][T22112] macvlan2: entered promiscuous mode [ 550.637677][T22112] macvlan2: entered allmulticast mode [ 550.661000][T22112] bond7: entered promiscuous mode [ 550.677541][T22112] gretap1: entered promiscuous mode [ 550.694347][T22112] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 550.710013][T22112] bond7: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 550.744296][T22112] bond7: left promiscuous mode [ 550.754863][T22112] gretap1: left promiscuous mode [ 550.764794][T22124] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3931'. [ 551.054941][T22135] syzkaller0: entered promiscuous mode [ 551.073624][T22135] syzkaller0: entered allmulticast mode [ 551.106613][T22135] tipc: Enabled bearer , priority 0 [ 551.120577][T22135] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3935'. [ 551.163489][T22134] tipc: Resetting bearer [ 551.214621][ T1737] block nbd6: Possible stuck request ffff888026ce7000: control (read@0,2048B). Runtime 270 seconds [ 551.314900][T22134] tipc: Disabling bearer [ 551.628737][T22152] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3941'. [ 552.107678][T22166] bond0: (slave wlan0): Enslaving as an active interface with an up link [ 552.391363][T22169] bond2: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 552.508148][ T1737] block nbd7: Possible stuck request ffff888026d55080: control (read@0,2048B). Runtime 270 seconds [ 552.551432][T22169] bond2 (unregistering): Released all slaves [ 552.944271][T22164] lo speed is unknown, defaulting to 1000 [ 553.071398][T22184] syzkaller0: entered promiscuous mode [ 553.098999][T22184] syzkaller0: entered allmulticast mode [ 553.849284][T22204] netlink: 'syz.2.3951': attribute type 9 has an invalid length. [ 553.860517][T22204] netlink: 'syz.2.3951': attribute type 6 has an invalid length. [ 553.870252][T22204] netlink: 'syz.2.3951': attribute type 7 has an invalid length. [ 553.878987][T22204] netlink: 'syz.2.3951': attribute type 8 has an invalid length. [ 554.986568][T22211] __nla_validate_parse: 2 callbacks suppressed [ 554.986601][T22211] netlink: 672 bytes leftover after parsing attributes in process `syz.2.3953'. [ 556.622992][T22224] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3957'. [ 556.633183][T22222] syzkaller0: entered promiscuous mode [ 556.658894][T22222] syzkaller0: MTU too low for tipc bearer [ 556.680991][T22222] tipc: Enabling of bearer rejected, failed to enable media [ 556.686743][T22224] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3957'. [ 556.731043][T22227] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 556.880640][T22233] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3959'. [ 556.933035][T22233] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3959'. [ 556.997630][T22240] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3959'. [ 557.052530][T22233] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3959'. [ 557.657930][ T5767] IPVS: starting estimator thread 0... [ 557.763118][T22270] IPVS: using max 28 ests per chain, 67200 per kthread [ 558.004392][T22281] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3971'. [ 558.236175][T22290] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3975'. [ 558.323180][T22292] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3976'. [ 558.653051][T19138] Bluetooth: hci0: command 0x0401 tx timeout [ 558.821491][T22311] Cannot find set identified by id 0 to match [ 558.932445][T22316] netlink: 'syz.3.3982': attribute type 1 has an invalid length. [ 559.063647][T22316] bond8: (slave dummy0): making interface the new active one [ 559.073901][T22316] bond8: (slave dummy0): Enslaving as an active interface with an up link [ 559.082676][T22322] bond8: entered promiscuous mode [ 559.088077][T22322] dummy0: entered promiscuous mode [ 559.391399][T22316] bridge0: port 2(bridge_slave_1) entered disabled state [ 559.524968][T22342] netlink: 'syz.1.3989': attribute type 3 has an invalid length. [ 559.534975][ T10] block nbd3: Possible stuck request ffff888026ba5080: control (read@0,4096B). Runtime 330 seconds [ 559.564103][T22343] netlink: 'syz.1.3989': attribute type 3 has an invalid length. [ 559.693210][ T50] Bluetooth: hci1: command 0x0406 tx timeout [ 559.798700][T22316] bond8: (slave dummy0): Releasing active interface [ 559.833850][T22316] dummy0: left promiscuous mode [ 559.986451][T22316] bridge_slave_1: left allmulticast mode [ 559.993128][T22316] bridge_slave_1: left promiscuous mode [ 559.999074][T22316] bridge0: port 2(bridge_slave_1) entered disabled state [ 560.014756][T22316] bridge1: port 2(veth0_to_bond) entered disabled state [ 560.024077][T22316] veth0_to_bond: left allmulticast mode [ 560.031347][T22316] veth0_to_bond: left promiscuous mode [ 560.037922][T22316] bridge1: port 2(veth0_to_bond) entered disabled state [ 560.059467][T22316] bond0: (slave bond_slave_0): Releasing backup interface [ 560.095975][T22316] bond0: (slave bond_slave_1): Releasing backup interface [ 560.175001][T22316] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 560.201162][T22316] batman_adv: batadv0: Removing interface: syzkaller0 [ 560.244029][T22316] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 560.274832][T22336] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 560.294395][T22315] bond8: left promiscuous mode [ 560.484575][T22359] __nla_validate_parse: 5 callbacks suppressed [ 560.484592][T22359] netlink: 396 bytes leftover after parsing attributes in process `syz.2.3992'. [ 560.733619][T17139] Bluetooth: hci3: command 0x0405 tx timeout [ 560.838323][T22397] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4002'. [ 561.102579][T22404] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3998'. [ 562.629161][T22452] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4015'. [ 562.714929][T22454] virt_wifi0: entered allmulticast mode [ 562.738177][ T1316] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 562.747481][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.791362][T22431] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4009'. [ 562.824993][T22459] nbd4: detected capacity change from 0 to 6 [ 562.850117][ T1737] block nbd4: Dead connection, failed to find a fallback [ 562.863934][ T1737] block nbd4: shutting down sockets [ 562.870464][ T1737] blk_print_req_error: 69 callbacks suppressed [ 562.870499][ T1737] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 562.888250][ T1737] buffer_io_error: 138 callbacks suppressed [ 562.888280][ T1737] Buffer I/O error on dev nbd4, logical block 0, async page read [ 562.908007][ T1737] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 2 prio class 2 [ 562.918293][ T1737] Buffer I/O error on dev nbd4, logical block 1, async page read [ 562.927366][ T1737] Buffer I/O error on dev nbd4, logical block 2, async page read [ 562.936454][ T1737] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 562.946770][ T1737] Buffer I/O error on dev nbd4, logical block 0, async page read [ 562.956346][ T1737] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 2 prio class 2 [ 562.966507][ T1737] Buffer I/O error on dev nbd4, logical block 1, async page read [ 562.975418][ T1737] Buffer I/O error on dev nbd4, logical block 2, async page read [ 562.985056][ T1737] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 562.995376][ T1737] Buffer I/O error on dev nbd4, logical block 0, async page read [ 563.016826][ T10] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 563.027308][ T10] Buffer I/O error on dev nbd4, logical block 1, async page read [ 563.044401][ T10] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 563.054282][ T10] Buffer I/O error on dev nbd4, logical block 2, async page read [ 563.069972][ T10] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 563.083039][ T10] Buffer I/O error on dev nbd4, logical block 0, async page read [ 563.091434][ T10] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 563.102198][ T5642] ldm_validate_partition_table(): Disk read failed. [ 563.114714][ T10] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 563.125928][ T5642] Dev nbd4: unable to read RDB block 0 [ 563.140423][ T5642] nbd4: unable to read partition table [ 563.149525][ T5642] nbd4: partition table beyond EOD, truncated [ 563.166927][ T5642] ldm_validate_partition_table(): Disk read failed. [ 563.175862][ T5642] Dev nbd4: unable to read RDB block 0 [ 563.182722][ T5642] nbd4: unable to read partition table [ 563.188768][ T5642] nbd4: partition table beyond EOD, truncated [ 563.385904][T22472] netlink: 'syz.2.4020': attribute type 1 has an invalid length. [ 563.441362][T22478] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 563.443971][T22472] 8021q: adding VLAN 0 to HW filter on device bond2 [ 563.470186][T22477] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 563.507648][T22477] bond2: (slave batadv0): Enslaving as a backup interface with an up link [ 563.556016][ T814] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 563.747341][ T814] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 563.942627][T22497] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20000 [ 563.967645][T22498] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4024'. [ 564.280983][T22512] netlink: 'syz.2.4026': attribute type 13 has an invalid length. [ 564.312552][T22512] netlink: 'syz.2.4026': attribute type 17 has an invalid length. [ 565.075203][T22506] bridge0: port 2(bridge_slave_1) entered disabled state [ 565.082939][T22506] bridge0: port 1(bridge_slave_0) entered disabled state [ 565.233304][T22548] netlink: 204 bytes leftover after parsing attributes in process `syz.4.4032'. [ 566.144699][T22506] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 566.201315][T22506] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 566.321833][T22562] netlink: 'syz.3.4035': attribute type 9 has an invalid length. [ 566.857782][T22512] gretap0: left promiscuous mode [ 566.952771][T22512] 8021q: adding VLAN 0 to HW filter on device bond0 [ 566.981820][T22512] 8021q: adding VLAN 0 to HW filter on device team0 [ 566.996418][T22512] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 567.025743][T22512] bridge0: port 1(bridge_slave_0) entered blocking state [ 567.032980][T22512] bridge0: port 1(bridge_slave_0) entered forwarding state [ 567.045446][T22512] bridge0: port 2(bridge_slave_1) entered blocking state [ 567.052607][T22512] bridge0: port 2(bridge_slave_1) entered forwarding state [ 567.078556][T22512] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 567.089634][T22512] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 567.121102][T22512] virt_wifi0: left allmulticast mode [ 567.136122][T22512] veth1_vlan: left promiscuous mode [ 567.143382][T22512] veth0_vlan: left promiscuous mode [ 567.151306][T22512] veth0_vlan: entered promiscuous mode [ 567.161742][T22512] veth1_vlan: entered promiscuous mode [ 567.175437][T22512] veth1_macvtap: left promiscuous mode [ 567.182397][T22512] veth0_macvtap: left promiscuous mode [ 567.190239][T22512] veth0_macvtap: entered promiscuous mode [ 567.207184][T22512] veth1_macvtap: entered promiscuous mode [ 567.223913][T22512] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 567.231445][T22512] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 567.246255][T22512] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 567.260725][T22512] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 567.274657][T22512] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 567.295503][T22512] 8021q: adding VLAN 0 to HW filter on device bond1 [ 567.303905][T22512] gretap0: entered promiscuous mode [ 567.324665][T22512] bridge2: left promiscuous mode [ 567.329646][T22512] bridge2: left allmulticast mode [ 567.336804][ T5868] bond2: (slave batadv0): link status up again after 0 ms [ 567.337906][T22512] 8021q: adding VLAN 0 to HW filter on device bond2 [ 567.364054][ T5868] bond2: (slave batadv0): link status up again after 0 ms [ 567.404429][ T5868] bond2: (slave batadv0): link status up again after 0 ms [ 567.443593][ T5861] bond2: (slave batadv0): link status up again after 0 ms [ 567.483337][ T5861] bond2: (slave batadv0): link status up again after 0 ms [ 567.513003][ T5861] bond2: (slave batadv0): link status up again after 0 ms [ 567.533137][ T5861] bond2: (slave batadv0): link status up again after 0 ms [ 567.553849][ T7732] bond2: (slave batadv0): link status up again after 0 ms [ 567.563721][T22579] netlink: 424 bytes leftover after parsing attributes in process `syz.0.4038'. [ 567.573168][ T5861] bond2: (slave batadv0): link status up again after 0 ms [ 567.581643][T22579] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4038'. [ 567.593004][ T7732] bond2: (slave batadv0): link status up again after 0 ms [ 567.625407][T22542] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4032'. [ 568.144435][T22581] lo speed is unknown, defaulting to 1000 [ 568.343233][T22590] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4041'. [ 568.391903][T22599] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4045'. [ 568.539923][T22602] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4045'. [ 568.609302][T22601] pim6reg1: entered promiscuous mode [ 568.624823][T22601] pim6reg1: entered allmulticast mode [ 569.048000][T22616] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 569.056093][T22616] IPv6: NLM_F_CREATE should be set when creating new route [ 569.066017][T22616] IPv6: NLM_F_CREATE should be set when creating new route [ 569.113230][T22623] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 569.128454][T22621] syzkaller0: entered promiscuous mode [ 569.179763][T22621] syzkaller0: entered allmulticast mode [ 569.852230][T22639] lo speed is unknown, defaulting to 1000 [ 570.329171][T22667] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4061'. [ 570.557244][T22671] 8021q: adding VLAN 0 to HW filter on device team0 [ 570.590503][T22671] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 570.766599][T22671] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 570.810733][T22671] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 570.866326][T22671] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 570.926158][T22671] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 571.001251][T22671] veth1_vlan: left promiscuous mode [ 571.049471][T22671] veth0_vlan: left promiscuous mode [ 571.079839][T22671] veth0_vlan: entered promiscuous mode [ 571.116964][T22671] tipc: Resetting bearer [ 571.135871][T22674] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5 [ 571.222079][T22671] veth1_vlan: entered promiscuous mode [ 571.329342][T22671] veth1_macvtap: left promiscuous mode [ 571.353559][T22671] veth0_macvtap: left promiscuous mode [ 571.367255][T22671] veth0_macvtap: entered promiscuous mode [ 571.389604][T22671] veth1_macvtap: entered promiscuous mode [ 571.420348][T22671] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 571.440237][T22671] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 571.467361][T22671] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 571.492475][T22671] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 571.540446][T22671] 8021q: adding VLAN 0 to HW filter on device bond1 [ 571.555511][T22671] 8021q: adding VLAN 0 to HW filter on device bond2 [ 571.644214][T22671] 8021q: adding VLAN 0 to HW filter on device bond3 [ 571.655815][T22671] 8021q: adding VLAN 0 to HW filter on device bond4 [ 571.668374][T22671] team1: left promiscuous mode [ 571.677928][T22671] 8021q: adding VLAN 0 to HW filter on device bond5 [ 571.690626][T22671] 8021q: adding VLAN 0 to HW filter on device bond6 [ 571.717263][T22671] 8021q: adding VLAN 0 to HW filter on device bond7 [ 571.736221][ T3334] bridge0: port 1(bridge_slave_0) entered blocking state [ 571.743460][ T3334] bridge0: port 1(bridge_slave_0) entered listening state [ 571.755381][ T3334] bridge0: port 2(bridge_slave_1) entered blocking state [ 571.762573][ T3334] bridge0: port 2(bridge_slave_1) entered listening state [ 571.896263][ T7730] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 571.927626][ T7730] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0 [ 571.950480][ T7730] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 571.970150][ T7730] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.989443][T22683] netlink: 'syz.4.4065': attribute type 12 has an invalid length. [ 572.072679][ T7730] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 572.094979][ T7730] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.217089][ T7730] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 572.244344][ T7730] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.404481][ T814] net_ratelimit: 37 callbacks suppressed [ 572.404509][ T814] bond2: (slave batadv0): failed to get link speed/duplex [ 572.525998][T22707] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 572.573284][ T7730] bond2: (slave batadv0): failed to get link speed/duplex [ 572.616356][T22709] netlink: 'syz.2.4072': attribute type 1 has an invalid length. [ 572.689604][T22716] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4072'. [ 572.763977][T22709] bond3: entered promiscuous mode [ 572.770759][T22709] 8021q: adding VLAN 0 to HW filter on device bond3 [ 572.782354][T22716] bond3: entered allmulticast mode [ 572.793262][ T7730] bond2: (slave batadv0): failed to get link speed/duplex [ 572.878376][T22709] bond3: (slave bridge3): making interface the new active one [ 572.887333][T22709] bridge3: entered promiscuous mode [ 572.892813][T22709] bridge3: entered allmulticast mode [ 572.916703][T22709] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 572.953929][ T814] bond2: (slave batadv0): failed to get link speed/duplex [ 573.065380][ T7730] bond2: (slave batadv0): failed to get link speed/duplex [ 573.183044][ T814] bond2: (slave batadv0): failed to get link speed/duplex [ 573.293467][ T5861] bond2: (slave batadv0): failed to get link speed/duplex [ 573.316462][T22707] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 573.413610][ T5861] bond2: (slave batadv0): failed to get link speed/duplex [ 573.544023][ T814] bond2: (slave batadv0): failed to get link speed/duplex [ 573.595995][T22739] Cannot find del_set index 0 as target [ 574.189147][T22753] syzkaller0: entered promiscuous mode [ 574.215773][T22753] syzkaller0: entered allmulticast mode [ 575.072145][T19138] Bluetooth: hci4: command 0x0406 tx timeout [ 577.507567][T22763] bridge0: entered allmulticast mode [ 577.577336][T22749] lo speed is unknown, defaulting to 1000 [ 577.611255][T22797] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4094'. [ 577.698755][ T3334] net_ratelimit: 4 callbacks suppressed [ 577.698775][ T3334] bond2: (slave batadv0): failed to get link speed/duplex [ 577.843204][ T3334] bond2: (slave batadv0): failed to get link speed/duplex [ 577.882090][T22807] netlink: 'syz.1.4099': attribute type 1 has an invalid length. [ 578.100563][T22808] bond9: (slave bridge3): making interface the new active one [ 578.140357][T22808] bond9: (slave bridge3): Enslaving as an active interface with an up link [ 578.162593][T22819] FAULT_INJECTION: forcing a failure. [ 578.162593][T22819] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 578.214888][T22821] sctp: [Deprecated]: syz.4.4103 (pid 22821) Use of int in maxseg socket option. [ 578.214888][T22821] Use struct sctp_assoc_value instead [ 578.237170][T22810] bond9: (slave bridge4): Enslaving as an active interface with a down link [ 578.255139][T22819] CPU: 0 UID: 0 PID: 22819 Comm: syz.0.4102 Not tainted syzkaller #0 PREEMPT(full) [ 578.255163][T22819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 578.255173][T22819] Call Trace: [ 578.255180][T22819] [ 578.255188][T22819] dump_stack_lvl+0xe8/0x150 [ 578.255214][T22819] should_fail_ex+0x40c/0x560 [ 578.255245][T22819] _copy_from_user+0x2d/0xb0 [ 578.255266][T22819] ___sys_recvmsg+0x173/0x5a0 [ 578.255294][T22819] ? __pfx____sys_recvmsg+0x10/0x10 [ 578.255317][T22819] ? __fget_files+0x2a/0x420 [ 578.255364][T22819] do_recvmmsg+0x31a/0x7f0 [ 578.255393][T22819] ? __pfx_do_recvmmsg+0x10/0x10 [ 578.255426][T22819] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 578.255456][T22819] ? __fget_files+0x3a2/0x420 [ 578.255484][T22819] __x64_sys_recvmmsg+0x198/0x250 [ 578.255507][T22819] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 578.255536][T22819] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.255556][T22819] do_syscall_64+0x174/0x580 [ 578.255571][T22819] ? trace_irq_disable+0x3b/0x140 [ 578.255589][T22819] ? clear_bhb_loop+0x40/0x90 [ 578.255612][T22819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.255629][T22819] RIP: 0033:0x7f82edb9ce59 [ 578.255647][T22819] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 578.255663][T22819] RSP: 002b:00007f82ebdf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 578.255681][T22819] RAX: ffffffffffffffda RBX: 00007f82ede16090 RCX: 00007f82edb9ce59 [ 578.255695][T22819] RDX: 0000000000003aa0 RSI: 00002000000047c0 RDI: 0000000000000005 [ 578.255710][T22819] RBP: 00007f82ebdf6090 R08: 0000000000000000 R09: 0000000000000000 [ 578.255722][T22819] R10: 0000000060002000 R11: 0000000000000246 R12: 0000000000000001 [ 578.255733][T22819] R13: 00007f82ede16128 R14: 00007f82ede16090 R15: 00007ffd2c1ab178 [ 578.255763][T22819] [ 578.449680][ T7730] bond2: (slave batadv0): failed to get link speed/duplex [ 578.644587][T22817] lo speed is unknown, defaulting to 1000 [ 578.724397][ T7730] bond2: (slave batadv0): failed to get link speed/duplex [ 578.953077][ T7822] bond2: (slave batadv0): failed to get link speed/duplex [ 579.009586][T22831] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4108'. [ 579.043081][T22831] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 579.073020][ T7822] bond2: (slave batadv0): failed to get link speed/duplex [ 579.205991][ T7822] bond2: (slave batadv0): failed to get link speed/duplex [ 579.443328][ T7822] bond2: (slave batadv0): failed to get link speed/duplex [ 579.574612][T22855] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 579.636668][T22859] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4116'. [ 579.850785][T22866] netlink: 'syz.3.4118': attribute type 4 has an invalid length. [ 580.622572][T22890] syzkaller0: entered promiscuous mode [ 580.638362][T22890] syzkaller0: entered allmulticast mode [ 580.980952][T22906] sctp: [Deprecated]: syz.1.4128 (pid 22906) Use of int in max_burst socket option. [ 580.980952][T22906] Use struct sctp_assoc_value instead [ 581.242341][T22919] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4132'. [ 581.300429][ T1737] block nbd6: Possible stuck request ffff888026ce7000: control (read@0,2048B). Runtime 300 seconds [ 581.428725][T22917] lo speed is unknown, defaulting to 1000 [ 581.745326][T22939] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4136'. [ 582.168951][T22951] FAULT_INJECTION: forcing a failure. [ 582.168951][T22951] name failslab, interval 1, probability 0, space 0, times 0 [ 582.210144][T22951] CPU: 0 UID: 0 PID: 22951 Comm: syz.4.4138 Not tainted syzkaller #0 PREEMPT(full) [ 582.210172][T22951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 582.210182][T22951] Call Trace: [ 582.210190][T22951] [ 582.210198][T22951] dump_stack_lvl+0xe8/0x150 [ 582.210226][T22951] should_fail_ex+0x40c/0x560 [ 582.210258][T22951] should_failslab+0xa8/0x100 [ 582.210282][T22951] __kmalloc_noprof+0xfe/0x720 [ 582.210311][T22951] ? sock_kmalloc+0xd6/0x160 [ 582.210331][T22951] ? sock_kmalloc+0xd6/0x160 [ 582.210358][T22951] sock_kmalloc+0xd6/0x160 [ 582.210382][T22951] hash_recvmsg+0x1d0/0x860 [ 582.210414][T22951] ? __pfx_hash_recvmsg+0x10/0x10 [ 582.210442][T22951] sock_recvmsg_nosec+0x130/0x170 [ 582.210471][T22951] ____sys_recvmsg+0x3e3/0x4a0 [ 582.210510][T22951] ? __pfx_____sys_recvmsg+0x10/0x10 [ 582.210548][T22951] ? import_iovec+0x73/0xa0 [ 582.210572][T22951] ___sys_recvmsg+0x213/0x5a0 [ 582.210600][T22951] ? __pfx____sys_recvmsg+0x10/0x10 [ 582.210627][T22951] ? __fget_files+0x2a/0x420 [ 582.210683][T22951] do_recvmmsg+0x31a/0x7f0 [ 582.210714][T22951] ? __pfx_do_recvmmsg+0x10/0x10 [ 582.210748][T22951] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 582.210779][T22951] ? __fget_files+0x3a2/0x420 [ 582.210809][T22951] __x64_sys_recvmmsg+0x198/0x250 [ 582.210835][T22951] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 582.210866][T22951] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 582.210887][T22951] do_syscall_64+0x174/0x580 [ 582.210904][T22951] ? trace_irq_disable+0x3b/0x140 [ 582.210926][T22951] ? clear_bhb_loop+0x40/0x90 [ 582.210948][T22951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 582.210966][T22951] RIP: 0033:0x7fb5bf39ce59 [ 582.210984][T22951] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 582.211001][T22951] RSP: 002b:00007fb5c0311028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 582.211021][T22951] RAX: ffffffffffffffda RBX: 00007fb5bf616090 RCX: 00007fb5bf39ce59 [ 582.211039][T22951] RDX: 0000000000003aa0 RSI: 00002000000047c0 RDI: 0000000000000005 [ 582.211052][T22951] RBP: 00007fb5c0311090 R08: 0000000000000000 R09: 0000000000000000 [ 582.211063][T22951] R10: 0000000060002000 R11: 0000000000000246 R12: 0000000000000002 [ 582.211075][T22951] R13: 00007fb5bf616128 R14: 00007fb5bf616090 R15: 00007ffe8b123ba8 [ 582.211107][T22951] [ 582.528863][T22946] netlink: 136 bytes leftover after parsing attributes in process `syz.1.4137'. [ 582.567695][ T5289] veth0_vlan: left promiscuous mode [ 582.575100][ T1737] block nbd7: Possible stuck request ffff888026d55080: control (read@0,2048B). Runtime 300 seconds [ 582.743964][ T8408] veth0_vlan: entered promiscuous mode [ 582.945080][ T5861] net_ratelimit: 22 callbacks suppressed [ 582.945098][ T5861] bond2: (slave batadv0): failed to get link speed/duplex [ 583.093111][ T814] bond2: (slave batadv0): failed to get link speed/duplex [ 583.238006][T22948] lo speed is unknown, defaulting to 1000 [ 583.595626][ T7822] bond2: (slave batadv0): failed to get link speed/duplex [ 583.974412][ T5861] bond2: (slave batadv0): failed to get link speed/duplex [ 584.116157][ T7822] bond2: (slave batadv0): failed to get link speed/duplex [ 584.128393][T22986] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4147'. [ 584.148161][T22988] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4148'. [ 584.296849][T22997] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4149'. [ 584.394457][T22988] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4148'. [ 584.644382][ T7822] bond2: (slave batadv0): failed to get link speed/duplex [ 584.775166][ T7822] bond2: (slave batadv0): failed to get link speed/duplex [ 584.818957][T23004] xt_hashlimit: size too large, truncated to 1048576 [ 584.919005][ T814] bond2: (slave batadv0): failed to get link speed/duplex [ 585.303693][ T814] bond2: (slave batadv0): failed to get link speed/duplex [ 585.513362][T23017] bond5 (unregistering): Released all slaves [ 585.693406][ T7822] bond2: (slave batadv0): failed to get link speed/duplex [ 586.069184][T23038] netlink: 'syz.3.4158': attribute type 1 has an invalid length. [ 586.161380][T23042] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4158'. [ 586.191619][T23045] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 1, id = 0 [ 586.272437][T23049] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4160'. [ 586.571146][T23065] FAULT_INJECTION: forcing a failure. [ 586.571146][T23065] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 586.589916][T23066] IPVS: set_ctl: invalid protocol: 43 172.30.1.4:20004 [ 586.603634][T23065] CPU: 1 UID: 0 PID: 23065 Comm: syz.2.4164 Not tainted syzkaller #0 PREEMPT(full) [ 586.603660][T23065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 586.603669][T23065] Call Trace: [ 586.603676][T23065] [ 586.603683][T23065] dump_stack_lvl+0xe8/0x150 [ 586.603709][T23065] should_fail_ex+0x40c/0x560 [ 586.603737][T23065] _copy_from_user+0x2d/0xb0 [ 586.603756][T23065] ___sys_recvmsg+0x173/0x5a0 [ 586.603790][T23065] ? __pfx____sys_recvmsg+0x10/0x10 [ 586.603815][T23065] ? __fget_files+0x2a/0x420 [ 586.603858][T23065] do_recvmmsg+0x31a/0x7f0 [ 586.603887][T23065] ? __pfx_do_recvmmsg+0x10/0x10 [ 586.603918][T23065] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 586.603948][T23065] ? __fget_files+0x3a2/0x420 [ 586.603974][T23065] __x64_sys_recvmmsg+0x198/0x250 [ 586.603998][T23065] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 586.604025][T23065] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.604044][T23065] do_syscall_64+0x174/0x580 [ 586.604060][T23065] ? trace_irq_disable+0x3b/0x140 [ 586.604078][T23065] ? clear_bhb_loop+0x40/0x90 [ 586.604100][T23065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.604118][T23065] RIP: 0033:0x7f6a3bb9ce59 [ 586.604137][T23065] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 586.604152][T23065] RSP: 002b:00007f6a3caf9028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 586.604173][T23065] RAX: ffffffffffffffda RBX: 00007f6a3be16090 RCX: 00007f6a3bb9ce59 [ 586.604187][T23065] RDX: 0000000000003aa0 RSI: 00002000000047c0 RDI: 0000000000000005 [ 586.604199][T23065] RBP: 00007f6a3caf9090 R08: 0000000000000000 R09: 0000000000000000 [ 586.604210][T23065] R10: 0000000060002000 R11: 0000000000000246 R12: 0000000000000002 [ 586.604222][T23065] R13: 00007f6a3be16128 R14: 00007f6a3be16090 R15: 00007ffdf094e8d8 [ 586.604253][T23065] [ 586.701262][T23062] lo speed is unknown, defaulting to 1000 [ 586.867146][T23072] netlink: 'syz.4.4163': attribute type 1 has an invalid length. [ 586.932611][T23072] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4163'. [ 587.060742][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 587.069730][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 587.645976][T23051] lo speed is unknown, defaulting to 1000 [ 588.133402][ T7822] net_ratelimit: 11 callbacks suppressed [ 588.133422][ T7822] bond2: (slave batadv0): failed to get link speed/duplex [ 588.162266][T23102] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 588.182121][T23099] netlink: 3 bytes leftover after parsing attributes in process `syz.3.4171'. [ 588.213329][T23099] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4171'. [ 588.251001][T23099] netlink: 3 bytes leftover after parsing attributes in process `syz.3.4171'. [ 588.266003][ T7730] bond2: (slave batadv0): failed to get link speed/duplex [ 588.340613][T23067] lo speed is unknown, defaulting to 1000 [ 588.422962][ T7730] bond2: (slave batadv0): failed to get link speed/duplex [ 588.545043][ T7730] bond2: (slave batadv0): failed to get link speed/duplex [ 588.768093][T23128] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 588.998922][T23144] FAULT_INJECTION: forcing a failure. [ 588.998922][T23144] name failslab, interval 1, probability 0, space 0, times 0 [ 589.047215][T23144] CPU: 0 UID: 0 PID: 23144 Comm: syz.0.4182 Not tainted syzkaller #0 PREEMPT(full) [ 589.047241][T23144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 589.047252][T23144] Call Trace: [ 589.047259][T23144] [ 589.047267][T23144] dump_stack_lvl+0xe8/0x150 [ 589.047298][T23144] should_fail_ex+0x40c/0x560 [ 589.047328][T23144] should_failslab+0xa8/0x100 [ 589.047352][T23144] __kmalloc_noprof+0xfe/0x720 [ 589.047381][T23144] ? sock_kmalloc+0xd6/0x160 [ 589.047401][T23144] ? sock_kmalloc+0xd6/0x160 [ 589.047428][T23144] sock_kmalloc+0xd6/0x160 [ 589.047452][T23144] hash_recvmsg+0x1d0/0x860 [ 589.047483][T23144] ? __pfx_hash_recvmsg+0x10/0x10 [ 589.047509][T23144] sock_recvmsg_nosec+0x130/0x170 [ 589.047537][T23144] ____sys_recvmsg+0x3e3/0x4a0 [ 589.047568][T23144] ? __pfx_____sys_recvmsg+0x10/0x10 [ 589.047604][T23144] ? import_iovec+0x73/0xa0 [ 589.047628][T23144] ___sys_recvmsg+0x213/0x5a0 [ 589.047654][T23144] ? __pfx____sys_recvmsg+0x10/0x10 [ 589.047681][T23144] ? __fget_files+0x2a/0x420 [ 589.047730][T23144] do_recvmmsg+0x31a/0x7f0 [ 589.047760][T23144] ? __pfx_do_recvmmsg+0x10/0x10 [ 589.047793][T23144] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 589.047824][T23144] ? __fget_files+0x3a2/0x420 [ 589.047853][T23144] __x64_sys_recvmmsg+0x198/0x250 [ 589.047877][T23144] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 589.047908][T23144] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.047928][T23144] do_syscall_64+0x174/0x580 [ 589.047945][T23144] ? trace_irq_disable+0x3b/0x140 [ 589.047963][T23144] ? clear_bhb_loop+0x40/0x90 [ 589.047986][T23144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.048004][T23144] RIP: 0033:0x7f82edb9ce59 [ 589.048029][T23144] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 589.048045][T23144] RSP: 002b:00007f82ee981028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 589.048065][T23144] RAX: ffffffffffffffda RBX: 00007f82ede15fa0 RCX: 00007f82edb9ce59 [ 589.048079][T23144] RDX: 0000000000003aa0 RSI: 00002000000047c0 RDI: 0000000000000004 [ 589.048091][T23144] RBP: 00007f82ee981090 R08: 0000000000000000 R09: 0000000000000000 [ 589.048103][T23144] R10: 0000000060002000 R11: 0000000000000246 R12: 0000000000000002 [ 589.048115][T23144] R13: 00007f82ede16038 R14: 00007f82ede15fa0 R15: 00007ffd2c1ab178 [ 589.048146][T23144] [ 589.514610][ T7822] bond2: (slave batadv0): failed to get link speed/duplex [ 589.534068][T23150] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 589.541426][ T8405] team_slave_0: entered promiscuous mode [ 589.547809][ T8405] team_slave_1: entered promiscuous mode [ 589.609777][T23144] lo speed is unknown, defaulting to 1000 [ 589.629984][ T10] block nbd3: Possible stuck request ffff888026ba5080: control (read@0,4096B). Runtime 360 seconds [ 589.806959][ T5868] bond2: (slave batadv0): failed to get link speed/duplex [ 589.923071][ T7822] bond2: (slave batadv0): failed to get link speed/duplex [ 590.075428][ T3334] bond2: (slave batadv0): failed to get link speed/duplex [ 590.172481][T23174] __nla_validate_parse: 3 callbacks suppressed [ 590.172499][T23174] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4189'. [ 590.178727][T23164] lo speed is unknown, defaulting to 1000 [ 590.293013][ T7730] bond2: (slave batadv0): failed to get link speed/duplex [ 590.413977][ T7822] bond2: (slave batadv0): failed to get link speed/duplex [ 590.539887][T23181] FAULT_INJECTION: forcing a failure. [ 590.539887][T23181] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 590.593070][T23182] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4191'. [ 590.604614][T23181] CPU: 0 UID: 0 PID: 23181 Comm: syz.1.4192 Not tainted syzkaller #0 PREEMPT(full) [ 590.604640][T23181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 590.604651][T23181] Call Trace: [ 590.604658][T23181] [ 590.604665][T23181] dump_stack_lvl+0xe8/0x150 [ 590.604695][T23181] should_fail_ex+0x40c/0x560 [ 590.604726][T23181] _copy_to_user+0x31/0xb0 [ 590.604749][T23181] simple_read_from_buffer+0xe1/0x170 [ 590.604775][T23181] proc_fail_nth_read+0x1bb/0x230 [ 590.604798][T23181] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 590.604833][T23181] ? rw_verify_area+0x24a/0x4c0 [ 590.604856][T23181] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 590.604875][T23181] vfs_read+0x213/0xa80 [ 590.604903][T23181] ? __pfx___mutex_lock+0x10/0x10 [ 590.604923][T23181] ? __pfx_vfs_read+0x10/0x10 [ 590.604946][T23181] ? __fget_files+0x2a/0x420 [ 590.604970][T23181] ? __fget_files+0x3a2/0x420 [ 590.604987][T23181] ? __fget_files+0x2a/0x420 [ 590.605014][T23181] ksys_read+0x150/0x270 [ 590.605039][T23181] ? __pfx_ksys_read+0x10/0x10 [ 590.605070][T23181] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 590.605090][T23181] do_syscall_64+0x174/0x580 [ 590.605107][T23181] ? trace_irq_disable+0x3b/0x140 [ 590.605125][T23181] ? clear_bhb_loop+0x40/0x90 [ 590.605148][T23181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 590.605168][T23181] RIP: 0033:0x7fa49eb5d68e [ 590.605185][T23181] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 590.605201][T23181] RSP: 002b:00007fa49fb05fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 590.605221][T23181] RAX: ffffffffffffffda RBX: 00007fa49fb066c0 RCX: 00007fa49eb5d68e [ 590.605235][T23181] RDX: 000000000000000f RSI: 00007fa49fb060a0 RDI: 0000000000000004 [ 590.605247][T23181] RBP: 00007fa49fb06090 R08: 0000000000000000 R09: 0000000000000000 [ 590.605258][T23181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 590.605270][T23181] R13: 00007fa49ee16038 R14: 00007fa49ee15fa0 R15: 00007ffdc9119b58 [ 590.605301][T23181] [ 590.924496][T23183] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4191'. [ 591.378342][T23197] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4196'. [ 592.268416][ T29] audit: type=1804 audit(1782491553.479:9): pid=23205 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.4198" name="/newroot/181/cgroup.controllers" dev="tmpfs" ino=951 res=1 errno=0 [ 592.310520][ T29] audit: type=1800 audit(1782491553.479:10): pid=23205 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4198" name="cgroup.controllers" dev="tmpfs" ino=951 res=0 errno=0 [ 592.398732][T23210] block nbd4: reconnected socket [ 592.785018][T23223] 8021q: VLANs not supported on ipvlan1 [ 592.938883][T23231] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4206'. [ 593.111495][T23234] x_tables: unsorted entry at hook 3 [ 593.188198][T17139] block nbd4: Receive control failed (result -32) [ 593.265411][T23228] lo speed is unknown, defaulting to 1000 [ 593.296641][ T5868] net_ratelimit: 14 callbacks suppressed [ 593.296660][ T5868] bond2: (slave batadv0): failed to get link speed/duplex [ 593.371234][T23242] FAULT_INJECTION: forcing a failure. [ 593.371234][T23242] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 593.403615][T23242] CPU: 1 UID: 0 PID: 23242 Comm: syz.4.4208 Not tainted syzkaller #0 PREEMPT(full) [ 593.403643][T23242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 593.403653][T23242] Call Trace: [ 593.403659][T23242] [ 593.403666][T23242] dump_stack_lvl+0xe8/0x150 [ 593.403692][T23242] should_fail_ex+0x40c/0x560 [ 593.403719][T23242] _copy_from_user+0x2d/0xb0 [ 593.403739][T23242] ___sys_recvmsg+0x173/0x5a0 [ 593.403764][T23242] ? __pfx____sys_recvmsg+0x10/0x10 [ 593.403787][T23242] ? __fget_files+0x2a/0x420 [ 593.403830][T23242] do_recvmmsg+0x31a/0x7f0 [ 593.403856][T23242] ? __pfx_do_recvmmsg+0x10/0x10 [ 593.403886][T23242] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 593.403913][T23242] ? __fget_files+0x3a2/0x420 [ 593.403938][T23242] __x64_sys_recvmmsg+0x198/0x250 [ 593.403960][T23242] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 593.403997][T23242] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 593.404016][T23242] do_syscall_64+0x174/0x580 [ 593.404032][T23242] ? trace_irq_disable+0x3b/0x140 [ 593.404049][T23242] ? clear_bhb_loop+0x40/0x90 [ 593.404070][T23242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 593.404087][T23242] RIP: 0033:0x7fb5bf39ce59 [ 593.404103][T23242] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 593.404118][T23242] RSP: 002b:00007fb5c0311028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 593.404135][T23242] RAX: ffffffffffffffda RBX: 00007fb5bf616090 RCX: 00007fb5bf39ce59 [ 593.404148][T23242] RDX: 0000000000003aa0 RSI: 00002000000047c0 RDI: 0000000000000005 [ 593.404158][T23242] RBP: 00007fb5c0311090 R08: 0000000000000000 R09: 0000000000000000 [ 593.404169][T23242] R10: 0000000060002000 R11: 0000000000000246 R12: 0000000000000002 [ 593.404179][T23242] R13: 00007fb5bf616128 R14: 00007fb5bf616090 R15: 00007ffe8b123ba8 [ 593.404206][T23242] [ 593.719155][T23242] lo speed is unknown, defaulting to 1000 [ 593.727748][ T7822] bond2: (slave batadv0): failed to get link speed/duplex [ 594.133777][T23248] syz.0.4210 (23248) used obsolete PPPIOCDETACH ioctl [ 594.488940][ T7730] bond2: (slave batadv0): failed to get link speed/duplex [ 594.504951][T23255] tap0: tun_chr_ioctl cmd 1074025678 [ 594.510280][T23255] tap0: group set to 0 [ 595.265017][ T7730] bond2: (slave batadv0): failed to get link speed/duplex [ 595.391533][T23270] sit0: entered allmulticast mode [ 595.403104][ T7730] bond2: (slave batadv0): failed to get link speed/duplex [ 595.576876][T23277] sctp: [Deprecated]: syz.0.4222 (pid 23277) Use of struct sctp_assoc_value in delayed_ack socket option. [ 595.576876][T23277] Use struct sctp_sack_info instead [ 595.686816][T23275] netlink: 'syz.3.4221': attribute type 11 has an invalid length. [ 595.701496][T23275] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4221'. [ 595.724930][ T7732] bond2: (slave batadv0): failed to get link speed/duplex [ 595.813949][T23274] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 595.840772][ T7730] bond2: (slave batadv0): failed to get link speed/duplex [ 595.877992][T23284] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4225'. [ 596.058778][ T7730] bond2: (slave batadv0): failed to get link speed/duplex [ 596.227621][T23307] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4231'. [ 596.279544][ T3334] bond2: (slave batadv0): failed to get link speed/duplex [ 596.313586][T23307] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4231'. [ 596.349481][T23312] netlink: 'syz.0.4232': attribute type 4 has an invalid length. [ 596.362816][T23312] netlink: 'syz.0.4232': attribute type 4 has an invalid length. [ 596.499203][ T7730] bond2: (slave batadv0): failed to get link speed/duplex [ 596.528575][T23327] netlink: 6 bytes leftover after parsing attributes in process `syz.4.4235'. [ 596.835570][T23346] netlink: 'syz.1.4238': attribute type 1 has an invalid length. [ 596.940872][T23346] 8021q: adding VLAN 0 to HW filter on device bond11 [ 596.981430][T23343] lo speed is unknown, defaulting to 1000 [ 597.684439][T23370] 8021q: VLANs not supported on ipvlan0 [ 597.690110][T23370] 8021q: VLANs not supported on ipvlan0 [ 597.974042][T23389] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4251'. [ 598.370967][ T7822] net_ratelimit: 5 callbacks suppressed [ 598.370986][ T7822] bond2: (slave batadv0): failed to get link speed/duplex [ 598.386532][T23407] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4255'. [ 598.414018][T23407] 8021q: VLANs not supported on vcan0 [ 598.506783][ T3334] bond2: (slave batadv0): failed to get link speed/duplex [ 598.571466][T23425] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4258'. [ 598.742280][ T7822] bond2: (slave batadv0): failed to get link speed/duplex [ 598.927826][ T7730] bond2: (slave batadv0): failed to get link speed/duplex [ 599.049828][ T7732] bond2: (slave batadv0): failed to get link speed/duplex [ 599.183024][ T7730] bond2: (slave batadv0): failed to get link speed/duplex [ 599.303031][ T7732] bond2: (slave batadv0): failed to get link speed/duplex [ 599.428232][ T5868] bond2: (slave batadv0): failed to get link speed/duplex [ 599.456720][T23457] netlink: 'syz.2.4267': attribute type 4 has an invalid length. [ 599.546076][T21487] IPVS: starting estimator thread 0... [ 599.569330][ T5868] bond2: (slave batadv0): failed to get link speed/duplex [ 599.655778][T23462] xt_TCPMSS: Only works on TCP SYN packets [ 599.675141][T23460] IPVS: using max 30 ests per chain, 72000 per kthread [ 599.697189][ T7730] bond2: (slave batadv0): failed to get link speed/duplex [ 599.856295][T23469] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 599.949993][T23486] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4274'. [ 600.128794][T23494] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4275'. [ 600.155494][T23494] netlink: 'syz.0.4275': attribute type 1 has an invalid length. [ 600.937763][T23526] __nla_validate_parse: 3 callbacks suppressed [ 600.937782][T23526] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4285'. [ 601.146866][T23531] netlink: 'syz.4.4287': attribute type 4 has an invalid length. [ 601.162214][T23531] netlink: 'syz.4.4287': attribute type 4 has an invalid length. [ 602.413236][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 602.420528][ C0] bridge0: topology change detected, propagating [ 602.427336][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 602.434583][ C0] bridge0: topology change detected, propagating [ 602.746024][T23469] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 602.838795][T23534] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4288'. [ 603.359029][T23564] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4296'. [ 603.375498][ T7730] net_ratelimit: 30 callbacks suppressed [ 603.375515][ T7730] bond2: (slave batadv0): failed to get link speed/duplex [ 603.415931][T23567] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4297'. [ 603.513280][ T5868] bond2: (slave batadv0): failed to get link speed/duplex [ 603.632963][ T7730] bond2: (slave batadv0): failed to get link speed/duplex [ 603.653201][T23577] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4301'. [ 603.743000][ T5868] bond2: (slave batadv0): failed to get link speed/duplex [ 603.903073][ T7730] bond2: (slave batadv0): failed to get link speed/duplex [ 604.043088][ T76] bond2: (slave batadv0): failed to get link speed/duplex [ 604.182981][ T7732] bond2: (slave batadv0): failed to get link speed/duplex [ 604.354100][ T7822] bond2: (slave batadv0): failed to get link speed/duplex [ 604.393984][T23603] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4307'. [ 604.450100][T23606] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6 [ 604.596935][T23616] netlink: 112 bytes leftover after parsing attributes in process `syz.1.4310'. [ 604.703694][ T814] bond2: (slave batadv0): failed to get link speed/duplex [ 604.897257][ T814] bond2: (slave batadv0): failed to get link speed/duplex [ 604.916215][T23639] netlink: 'syz.3.4316': attribute type 30 has an invalid length. [ 605.031002][T23647] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4319'. [ 605.257429][T23647] bridge0: entered promiscuous mode [ 605.269164][T23647] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 605.699935][T23680] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4325'. [ 606.134913][T23692] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4329'. [ 606.361100][T23707] =v: renamed from veth0_to_bond (while UP) [ 606.479511][T23712] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4336'. [ 606.516046][T23708] netlink: 'syz.1.4334': attribute type 1 has an invalid length. [ 606.568780][T23720] netlink: 'syz.0.4337': attribute type 1 has an invalid length. [ 606.580488][T23708] bond12: entered promiscuous mode [ 606.587759][T23708] 8021q: adding VLAN 0 to HW filter on device bond12 [ 606.888736][T23731] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4341'. [ 606.903174][T23731] hsr_slave_0: left promiscuous mode [ 606.910273][T23731] hsr_slave_1: left promiscuous mode [ 607.025005][T23728] lo speed is unknown, defaulting to 1000 [ 607.314796][T23738] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4342'. [ 607.538020][T23742] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4345'. [ 608.374688][T23751] lo speed is unknown, defaulting to 1000 [ 608.400236][T23753] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4349'. [ 608.417559][T23753] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4349'. [ 608.450193][T23755] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4348'. [ 608.463002][ T3391] net_ratelimit: 23 callbacks suppressed [ 608.463022][ T3391] bond2: (slave batadv0): failed to get link speed/duplex [ 608.593032][ T3391] bond2: (slave batadv0): failed to get link speed/duplex [ 608.713938][ T3391] bond2: (slave batadv0): failed to get link speed/duplex [ 608.833004][ T3391] bond2: (slave batadv0): failed to get link speed/duplex [ 608.943044][ T3275] bond2: (slave batadv0): failed to get link speed/duplex [ 609.245734][T23766] netlink: 220 bytes leftover after parsing attributes in process `syz.2.4347'. [ 609.314569][ T7732] bond2: (slave batadv0): failed to get link speed/duplex [ 609.333269][T23766] netlink: 120 bytes leftover after parsing attributes in process `syz.2.4347'. [ 609.496541][T23778] bond13: option lacp_rate: invalid value (3) [ 609.504947][T23778] bond13 (unregistering): Released all slaves [ 609.688880][ T7730] bond2: (slave batadv0): failed to get link speed/duplex [ 609.792287][T23791] openvswitch: netlink: Missing key (keys=40, expected=100) [ 610.004069][ T3391] bond2: (slave batadv0): failed to get link speed/duplex [ 610.352974][ T3275] bond2: (slave batadv0): failed to get link speed/duplex [ 610.493266][T23816] [ 610.495631][T23816] ====================================================== [ 610.502654][T23816] WARNING: possible circular locking dependency detected [ 610.509686][T23816] syzkaller #0 Not tainted [ 610.514105][T23816] ------------------------------------------------------ [ 610.521118][T23816] syz.4.4369/23816 is trying to acquire lock: [ 610.527182][T23816] ffff888025a23b18 (set->srcu){.+.+}-{0:0}, at: __synchronize_srcu+0xb5/0x2f0 [ 610.536072][T23816] [ 610.536072][T23816] but task is already holding lock: [ 610.543422][T23816] ffff888026a5d008 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1af/0x480 [ 610.552852][T23816] [ 610.552852][T23816] which lock already depends on the new lock. [ 610.552852][T23816] [ 610.563254][T23816] [ 610.563254][T23816] the existing dependency chain (in reverse order) is: [ 610.572255][T23816] [ 610.572255][T23816] -> #6 (&q->elevator_lock){+.+.}-{4:4}: [ 610.580066][T23816] __mutex_lock+0x19d/0x1550 [ 610.585171][T23816] elevator_change+0x1af/0x480 [ 610.590451][T23816] elevator_set_none+0xb5/0x140 [ 610.595816][T23816] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 610.602151][T23816] nbd_start_device+0x189/0xb30 [ 610.607516][T23816] nbd_genl_connect+0x1597/0x1c10 [ 610.613051][T23816] genl_family_rcv_msg_doit+0x233/0x340 [ 610.619117][T23816] genl_rcv_msg+0x614/0x7a0 [ 610.624137][T23816] netlink_rcv_skb+0x226/0x4a0 [ 610.629410][T23816] genl_rcv+0x28/0x40 [ 610.633905][T23816] netlink_unicast+0x7bb/0x940 [ 610.639172][T23816] netlink_sendmsg+0x813/0xb40 [ 610.644442][T23816] sock_sendmsg_nosec+0x13a/0x180 [ 610.649977][T23816] ____sys_sendmsg+0x54e/0x850 [ 610.655253][T23816] ___sys_sendmsg+0x2a5/0x360 [ 610.660438][T23816] __x64_sys_sendmsg+0x1b1/0x290 [ 610.665889][T23816] do_syscall_64+0x174/0x580 [ 610.670985][T23816] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.677383][T23816] [ 610.677383][T23816] -> #5 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 610.685979][T23816] blk_alloc_queue+0x544/0x690 [ 610.691259][T23816] __blk_mq_alloc_disk+0x194/0x390 [ 610.696881][T23816] nbd_dev_add+0x494/0xb60 [ 610.701802][T23816] nbd_init+0x15f/0x1e0 [ 610.706472][T23816] do_one_initcall+0x250/0x870 [ 610.711751][T23816] do_initcall_level+0x10a/0x1a0 [ 610.717212][T23816] do_initcalls+0x59/0xa0 [ 610.722051][T23816] kernel_init_freeable+0x29d/0x3e0 [ 610.727762][T23816] kernel_init+0x1d/0x1d0 [ 610.732602][T23816] ret_from_fork+0x514/0xb70 [ 610.737707][T23816] ret_from_fork_asm+0x1a/0x30 [ 610.742981][T23816] [ 610.742981][T23816] -> #4 (fs_reclaim){+.+.}-{0:0}: [ 610.750178][T23816] fs_reclaim_acquire+0x71/0x100 [ 610.755621][T23816] __kmalloc_cache_node_noprof+0x66/0x630 [ 610.761858][T23816] create_worker+0x112/0x7b0 [ 610.766958][T23816] workqueue_prepare_cpu+0xe4/0x170 [ 610.772665][T23816] cpuhp_invoke_callback+0x434/0x810 [ 610.778467][T23816] _cpu_up+0x2ce/0x5b0 [ 610.783049][T23816] cpu_up+0x1d2/0x220 [ 610.787555][T23816] cpuhp_bringup_mask+0xb2/0x1a0 [ 610.793019][T23816] cpuhp_bringup_cpus_parallel+0x109/0x120 [ 610.799353][T23816] bringup_nonboot_cpus+0x17/0x30 [ 610.804898][T23816] smp_init+0x32/0x110 [ 610.809488][T23816] kernel_init_freeable+0x27f/0x3e0 [ 610.815201][T23816] kernel_init+0x1d/0x1d0 [ 610.820053][T23816] ret_from_fork+0x514/0xb70 [ 610.825333][T23816] ret_from_fork_asm+0x1a/0x30 [ 610.830607][T23816] [ 610.830607][T23816] -> #3 (cpu_hotplug_lock){++++}-{0:0}: [ 610.838323][T23816] cpus_read_lock+0x42/0x160 [ 610.843427][T23816] static_key_slow_inc+0x12/0x30 [ 610.848872][T23816] nbd_genl_reconfigure+0x1301/0x1e80 [ 610.854748][T23816] genl_family_rcv_msg_doit+0x233/0x340 [ 610.860805][T23816] genl_rcv_msg+0x614/0x7a0 [ 610.865815][T23816] netlink_rcv_skb+0x226/0x4a0 [ 610.871086][T23816] genl_rcv+0x28/0x40 [ 610.875576][T23816] netlink_unicast+0x7bb/0x940 [ 610.880851][T23816] netlink_sendmsg+0x813/0xb40 [ 610.886120][T23816] sock_sendmsg_nosec+0x13a/0x180 [ 610.891653][T23816] ____sys_sendmsg+0x54e/0x850 [ 610.896919][T23816] ___sys_sendmsg+0x2a5/0x360 [ 610.902104][T23816] __x64_sys_sendmsg+0x1b1/0x290 [ 610.907550][T23816] do_syscall_64+0x174/0x580 [ 610.912641][T23816] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.919082][T23816] [ 610.919082][T23816] -> #2 (&nsock->tx_lock){+.+.}-{4:4}: [ 610.926726][T23816] __mutex_lock+0x19d/0x1550 [ 610.931835][T23816] nbd_queue_rq+0x373/0x1150 [ 610.936938][T23816] blk_mq_dispatch_rq_list+0x499/0x1990 [ 610.943002][T23816] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 610.949847][T23816] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 610.956365][T23816] blk_mq_run_work_fn+0x16c/0x300 [ 610.961901][T23816] process_scheduled_works+0xa8e/0x14e0 [ 610.967959][T23816] worker_thread+0xa47/0xfb0 [ 610.973063][T23816] kthread+0x388/0x470 [ 610.977642][T23816] ret_from_fork+0x514/0xb70 [ 610.982757][T23816] ret_from_fork_asm+0x1a/0x30 [ 610.988033][T23816] [ 610.988033][T23816] -> #1 (&cmd->lock){+.+.}-{4:4}: [ 610.995228][T23816] __mutex_lock+0x19d/0x1550 [ 611.000323][T23816] nbd_queue_rq+0xc1/0x1150 [ 611.005342][T23816] blk_mq_dispatch_rq_list+0x499/0x1990 [ 611.011402][T23816] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 611.018235][T23816] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 611.024722][T23816] blk_mq_run_work_fn+0x16c/0x300 [ 611.030253][T23816] process_scheduled_works+0xa8e/0x14e0 [ 611.036311][T23816] worker_thread+0xa47/0xfb0 [ 611.041417][T23816] kthread+0x388/0x470 [ 611.045990][T23816] ret_from_fork+0x514/0xb70 [ 611.051085][T23816] ret_from_fork_asm+0x1a/0x30 [ 611.056357][T23816] [ 611.056357][T23816] -> #0 (set->srcu){.+.+}-{0:0}: [ 611.063469][T23816] __lock_acquire+0x1520/0x2cf0 [ 611.068827][T23816] lock_sync+0x9d/0x120 [ 611.073486][T23816] __synchronize_srcu+0xc9/0x2f0 [ 611.078929][T23816] elevator_switch+0x1e8/0x7b0 [ 611.084202][T23816] elevator_change+0x2fa/0x480 [ 611.089477][T23816] elevator_set_default+0x375/0x440 [ 611.095211][T23816] blk_register_queue+0x3f3/0x4e0 [ 611.100807][T23816] __add_disk+0x6cb/0xe30 [ 611.105649][T23816] add_disk_fwnode+0xfb/0x4b0 [ 611.110834][T23816] nbd_dev_add+0x733/0xb60 [ 611.115757][T23816] nbd_genl_connect+0x992/0x1c10 [ 611.121203][T23816] genl_family_rcv_msg_doit+0x233/0x340 [ 611.127258][T23816] genl_rcv_msg+0x614/0x7a0 [ 611.132275][T23816] netlink_rcv_skb+0x226/0x4a0 [ 611.137589][T23816] genl_rcv+0x28/0x40 [ 611.142190][T23816] netlink_unicast+0x7bb/0x940 [ 611.147460][T23816] netlink_sendmsg+0x813/0xb40 [ 611.152732][T23816] sock_sendmsg_nosec+0x13a/0x180 [ 611.158264][T23816] ____sys_sendmsg+0x54e/0x850 [ 611.163530][T23816] ___sys_sendmsg+0x2a5/0x360 [ 611.168710][T23816] __x64_sys_sendmsg+0x1b1/0x290 [ 611.174173][T23816] do_syscall_64+0x174/0x580 [ 611.179336][T23816] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.185732][T23816] [ 611.185732][T23816] other info that might help us debug this: [ 611.185732][T23816] [ 611.195942][T23816] Chain exists of: [ 611.195942][T23816] set->srcu --> &q->q_usage_counter(io)#50 --> &q->elevator_lock [ 611.195942][T23816] [ 611.209573][T23816] Possible unsafe locking scenario: [ 611.209573][T23816] [ 611.217031][T23816] CPU0 CPU1 [ 611.222474][T23816] ---- ---- [ 611.227944][T23816] lock(&q->elevator_lock); [ 611.232526][T23816] lock(&q->q_usage_counter(io)#50); [ 611.240406][T23816] lock(&q->elevator_lock); [ 611.247500][T23816] sync(set->srcu); [ 611.251381][T23816] [ 611.251381][T23816] *** DEADLOCK *** [ 611.251381][T23816] [ 611.259500][T23816] 6 locks held by syz.4.4369/23816: [ 611.264680][T23816] #0: ffffffff8fe5b2e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 611.272858][T23816] #1: ffffffff8fe5b120 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 611.281814][T23816] #2: ffff888056a469c0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: add_disk_fwnode+0xe7/0x4b0 [ 611.292155][T23816] #3: ffff888026a5d090 (&q->sysfs_lock){+.+.}-{4:4}, at: blk_register_queue+0x10d/0x4e0 [ 611.301975][T23816] #4: ffff888026a5cb18 (&q->q_usage_counter(queue)#52){+.+.}-{0:0}, at: elevator_change+0x194/0x480 [ 611.312847][T23816] #5: ffff888026a5d008 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1af/0x480 [ 611.322677][T23816] [ 611.322677][T23816] stack backtrace: [ 611.328551][T23816] CPU: 1 UID: 0 PID: 23816 Comm: syz.4.4369 Not tainted syzkaller #0 PREEMPT(full) [ 611.328569][T23816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 611.328578][T23816] Call Trace: [ 611.328586][T23816] [ 611.328594][T23816] dump_stack_lvl+0xe8/0x150 [ 611.328613][T23816] print_circular_bug+0x2e1/0x300 [ 611.328639][T23816] check_noncircular+0x12e/0x150 [ 611.328660][T23816] __lock_acquire+0x1520/0x2cf0 [ 611.328676][T23816] ? check_noncircular+0xda/0x150 [ 611.328696][T23816] ? lockdep_unlock+0x5d/0xd0 [ 611.328708][T23816] ? __lock_acquire+0x13e8/0x2cf0 [ 611.328724][T23816] ? __lock_acquire+0x13e8/0x2cf0 [ 611.328739][T23816] ? __synchronize_srcu+0xb5/0x2f0 [ 611.328753][T23816] lock_sync+0x9d/0x120 [ 611.328768][T23816] ? __synchronize_srcu+0xb5/0x2f0 [ 611.328784][T23816] __synchronize_srcu+0xc9/0x2f0 [ 611.328800][T23816] ? __pfx___synchronize_srcu+0x10/0x10 [ 611.328814][T23816] ? do_raw_spin_lock+0x12b/0x2f0 [ 611.328838][T23816] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 611.328857][T23816] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 611.328880][T23816] ? synchronize_srcu+0x20a/0x260 [ 611.328895][T23816] elevator_switch+0x1e8/0x7b0 [ 611.328917][T23816] ? blk_mq_cancel_work_sync+0xa5/0xe0 [ 611.328935][T23816] elevator_change+0x2fa/0x480 [ 611.328956][T23816] ? do_raw_spin_unlock+0xf5/0x210 [ 611.328977][T23816] elevator_set_default+0x375/0x440 [ 611.329000][T23816] ? __pfx_elevator_set_default+0x10/0x10 [ 611.329026][T23816] ? disk_register_independent_access_ranges+0x2d8/0x380 [ 611.329047][T23816] ? blk_crypto_sysfs_register+0x11c/0x170 [ 611.329071][T23816] blk_register_queue+0x3f3/0x4e0 [ 611.329090][T23816] __add_disk+0x6cb/0xe30 [ 611.329111][T23816] add_disk_fwnode+0xfb/0x4b0 [ 611.329129][T23816] nbd_dev_add+0x733/0xb60 [ 611.329148][T23816] ? __pfx_nbd_dev_add+0x10/0x10 [ 611.329171][T23816] ? bpf_lsm_capable+0x9/0x20 [ 611.329185][T23816] ? security_capable+0x7e/0x2c0 [ 611.329204][T23816] nbd_genl_connect+0x992/0x1c10 [ 611.329223][T23816] ? __pfx_nbd_genl_connect+0x10/0x10 [ 611.329239][T23816] ? rcu_is_watching+0x15/0xb0 [ 611.329256][T23816] ? trace_kmalloc+0x2a/0xf0 [ 611.329279][T23816] ? __kmalloc_noprof+0x396/0x720 [ 611.329329][T23816] ? __nla_parse+0x40/0x60 [ 611.329352][T23816] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 611.329375][T23816] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 611.329399][T23816] genl_family_rcv_msg_doit+0x233/0x340 [ 611.329422][T23816] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 611.329447][T23816] ? __lock_acquire+0x683/0x2cf0 [ 611.329465][T23816] genl_rcv_msg+0x614/0x7a0 [ 611.329486][T23816] ? __pfx_genl_rcv_msg+0x10/0x10 [ 611.329505][T23816] ? __pfx_nbd_genl_connect+0x10/0x10 [ 611.329526][T23816] netlink_rcv_skb+0x226/0x4a0 [ 611.329542][T23816] ? __pfx_genl_rcv_msg+0x10/0x10 [ 611.329562][T23816] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 611.329583][T23816] ? down_read+0x2be/0x330 [ 611.329599][T23816] genl_rcv+0x28/0x40 [ 611.329617][T23816] netlink_unicast+0x7bb/0x940 [ 611.329635][T23816] netlink_sendmsg+0x813/0xb40 [ 611.329655][T23816] ? __pfx_netlink_sendmsg+0x10/0x10 [ 611.329673][T23816] ? aa_sock_msg_perm+0xf1/0x1b0 [ 611.329692][T23816] ? __pfx_netlink_sendmsg+0x10/0x10 [ 611.329708][T23816] sock_sendmsg_nosec+0x13a/0x180 [ 611.329729][T23816] ____sys_sendmsg+0x54e/0x850 [ 611.329746][T23816] ? __pfx_____sys_sendmsg+0x10/0x10 [ 611.329765][T23816] ? import_iovec+0x73/0xa0 [ 611.329781][T23816] ___sys_sendmsg+0x2a5/0x360 [ 611.329796][T23816] ? __lock_acquire+0x683/0x2cf0 [ 611.329813][T23816] ? __pfx____sys_sendmsg+0x10/0x10 [ 611.329830][T23816] ? futex_wait+0x2a2/0x390 [ 611.329861][T23816] ? __fget_files+0x2a/0x420 [ 611.329875][T23816] ? __fget_files+0x3a2/0x420 [ 611.329892][T23816] __x64_sys_sendmsg+0x1b1/0x290 [ 611.329909][T23816] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 611.329931][T23816] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.329947][T23816] do_syscall_64+0x174/0x580 [ 611.329960][T23816] ? trace_irq_disable+0x3b/0x140 [ 611.329974][T23816] ? clear_bhb_loop+0x40/0x90 [ 611.329991][T23816] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.330006][T23816] RIP: 0033:0x7fb5bf39ce59 [ 611.330021][T23816] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 611.330035][T23816] RSP: 002b:00007fb5c0332028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 611.330051][T23816] RAX: ffffffffffffffda RBX: 00007fb5bf615fa0 RCX: 00007fb5bf39ce59 [ 611.330062][T23816] RDX: 0000000004000004 RSI: 0000200000001ac0 RDI: 000000000000000a [ 611.330072][T23816] RBP: 00007fb5bf432e6f R08: 0000000000000000 R09: 0000000000000000 [ 611.330081][T23816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 611.330091][T23816] R13: 00007fb5bf616038 R14: 00007fb5bf615fa0 R15: 00007ffe8b123ba8 [ 611.330108][T23816] [ 611.969243][ T1737] block nbd6: Possible stuck request ffff888026ce7000: control (read@0,2048B). Runtime 330 seconds [ 612.020106][T17139] block nbd0: Receive control failed (result -32) [ 612.666234][ T1737] block nbd7: Possible stuck request ffff888026d55080: control (read@0,2048B). Runtime 330 seconds [ 613.553074][ T3275] net_ratelimit: 15 callbacks suppressed [ 613.553150][ T3275] bond2: (slave batadv0): failed to get link speed/duplex [ 613.672958][ T814] bond2: (slave batadv0): failed to get link speed/duplex [ 613.783160][ T3275] bond2: (slave batadv0): failed to get link speed/duplex [ 613.892948][ T814] bond2: (slave batadv0): failed to get link speed/duplex [ 614.002978][ T814] bond2: (slave batadv0): failed to get link speed/duplex [ 614.113096][ T3275] bond2: (slave batadv0): failed to get link speed/duplex [ 614.223021][ T814] bond2: (slave batadv0): failed to get link speed/duplex [ 614.332946][ T5868] bond2: (slave batadv0): failed to get link speed/duplex [ 614.443161][ T814] bond2: (slave batadv0): failed to get link speed/duplex [ 614.552941][ T814] bond2: (slave batadv0): failed to get link speed/duplex [ 618.623013][ T814] net_ratelimit: 36 callbacks suppressed [ 618.623035][ T814] bond2: (slave batadv0): failed to get link speed/duplex [ 618.743040][ T814] bond2: (slave batadv0): failed to get link speed/duplex [ 618.853001][ T3391] bond2: (slave batadv0): failed to get link speed/duplex [ 618.962932][ T7730] bond2: (slave batadv0): failed to get link speed/duplex [ 619.072940][ T3391] bond2: (slave batadv0): failed to get link speed/duplex [ 619.182951][ T814] bond2: (slave batadv0): failed to get link speed/duplex [ 619.293112][ T3391] bond2: (slave batadv0): failed to get link speed/duplex [ 619.402963][ T7730] bond2: (slave batadv0): failed to get link speed/duplex [ 619.513002][ T814] bond2: (slave batadv0): failed to get link speed/duplex [ 619.622983][ T7730] bond2: (slave batadv0): failed to get link speed/duplex [ 619.693537][ T10] block nbd3: Possible stuck request ffff888026ba5080: control (read@0,4096B). Runtime 390 seconds