last executing test programs: 18.374088548s ago: executing program 2 (id=14909): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000700)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000006c0)={0x0}, 0x1, 0x0, 0x0, 0x44}, 0x840) ioctl$sock_SIOCETHTOOL(r1, 0x89ff, &(0x7f0000001440)={'geneve0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000a80)={0x0, 0x10, &(0x7f0000000a40)=[@in={0x2, 0x4e24, @rand_addr=0x64010101}]}, &(0x7f0000000ac0)=0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r6, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x95) r7 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r6) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="24000000210001000000000000000000020000000000000000000000050019"], 0x24}}, 0x48850) syz_genetlink_get_family_id$wireguard(&(0x7f0000002840), r2) getsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000000)=0x4, &(0x7f0000000040)=0x4) 5.97593685s ago: executing program 2 (id=14917): r0 = socket(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r0, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4) connect$pppl2tp(r0, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x1, 0x4, 0x1, 0x1, {0xa, 0x4e22, 0xf, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffff8}}}, 0x32) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59", 0xd}], 0x1}, 0x4) socket$kcm(0x10, 0x400000002, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) write(r0, &(0x7f0000000000)='\"', 0x1) recvmmsg(r0, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x1d) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000f000000050030000000000005002f000000000008000300", @ANYRES32=r4], 0x2c}}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x8, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {}, {0xfff2, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = socket(0x2a, 0x2, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x86dd}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x3a}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0x24000000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x403, 0x70bd25, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x4540}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x27b2}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000881}, 0x48004) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0xf, @loopback, 0x6}]}, &(0x7f0000000180)=0x10) 3.723104443s ago: executing program 4 (id=15018): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x4001, 0x3, 0x2d8, 0x0, 0x700001b, 0x148, 0x160, 0x148, 0x240, 0x206, 0x240, 0x240, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @rand_addr, 0x0, 0x0, 'veth1_macvtap\x00', 'bond_slave_1\x00', {0xff}, {}, 0x0, 0x1}, 0x1ea, 0x118, 0x160, 0x0, {0x390, 0x8f00}, [@common=@unspec=@physdev={{0x68}, {'veth0_macvtap\x00', {0xff}, 'pimreg0\x00', {0xff}, 0x2, 0x4}}, @common=@set={{0x40}, {{0x0, [0x5, 0x4, 0x7, 0x0, 0x1], 0x1, 0x6}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0xc, 0x8, 0x7, '\x00', {0x3}}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@icmp={{0x28}, {0x0, "190b"}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0xd4, 'syz1\x00', {0x9e2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x338) (async) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x4001, 0x3, 0x2d8, 0x0, 0x700001b, 0x148, 0x160, 0x148, 0x240, 0x206, 0x240, 0x240, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @rand_addr, 0x0, 0x0, 'veth1_macvtap\x00', 'bond_slave_1\x00', {0xff}, {}, 0x0, 0x1}, 0x1ea, 0x118, 0x160, 0x0, {0x390, 0x8f00}, [@common=@unspec=@physdev={{0x68}, {'veth0_macvtap\x00', {0xff}, 'pimreg0\x00', {0xff}, 0x2, 0x4}}, @common=@set={{0x40}, {{0x0, [0x5, 0x4, 0x7, 0x0, 0x1], 0x1, 0x6}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0xc, 0x8, 0x7, '\x00', {0x3}}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@icmp={{0x28}, {0x0, "190b"}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0xd4, 'syz1\x00', {0x9e2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x338) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000500)=@base={0xa, 0x200016, 0x800, 0x7f, 0x14050, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @value=r1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000140)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r2, @ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x35}, 0xfffffc9a) 3.550883538s ago: executing program 4 (id=15021): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r1, 0x0, 0x7, &(0x7f0000000080)=0xcd, 0x4) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e20, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r1, 0x0, 0x14, &(0x7f0000000380)=0x3, 0x4) recvmmsg(r1, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0}, 0x400040}], 0x1, 0x45833af92e4b39ff, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, 0x0, 0x20000) read$alg(r0, &(0x7f0000000300)=""/74, 0x4a) r3 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bind$alg(0xffffffffffffffff, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtaction={0x68, 0x30, 0xb, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x9, 0x2, {{0x6, 0xff, 0x4, 0x6, 0x6}, 0x3}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x200ce8c4) accept$alg(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r5, 0x1, 0x8, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180)=r6, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'veth1_macvtap\x00'}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) 3.11987151s ago: executing program 3 (id=15022): r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffa}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x8800) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x20, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x90}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d8, 0x118, 0x1170, 0x1170, 0x118, 0x1170, 0x208, 0x1398, 0x1398, 0x208, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @private2={0xfc, 0x2, '\x00', 0x11}, [0xffffffff, 0xff000000], [0x0, 0x0, 0xffffff00, 0xffffff00], 'veth0_vlan\x00', 'veth0_to_bond\x00', {}, {}, 0x2e, 0x7, 0x0, 0x46}, 0x0, 0xf8, 0x118, 0x0, {}, [@common=@inet=@socket2={{0x28}, 0x1}, @common=@ipv6header={{0x28}, {0x180, 0x90, 0x1}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, [0xffffff00, 0x0, 0xff, 0xff], [0xff000000, 0xffffffff, 0xffffffff, 0xff000000], 'ip6gre0\x00', 'bridge_slave_0\x00', {0xff}, {0xff}, 0x1d, 0xe4, 0x3, 0x40}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x338) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000080)={'syztnl0\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x2b, 0x0, 0x1, 0xaac, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, 0x740, 0x700, 0x100, 0x8}}) 2.660080039s ago: executing program 3 (id=15025): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = accept4(r0, &(0x7f0000000000)=@alg, &(0x7f00000000c0)=0x80, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$smc(&(0x7f00000033c0), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7000fddbd725020000000900010073797a3200000000140002"], 0x34}, 0x1, 0x0, 0x0, 0x24040000}, 0x800) sendmsg$SMC_PNETID_FLUSH(r2, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="010028bd70fefbdbdf2504"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x800) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x60, r3, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'hsr0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x90}, 0x6080) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000080), 0x4) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r2) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0x1, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)={0x64, r4, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7f}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x401}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x4001}, 0x8000) 2.394127103s ago: executing program 3 (id=15028): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000018c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="7d1068a421f05f384340d34be65ac0bbe7", 0x11) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x1b071, r0, 0xffffe000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020b07500feff0000820095"], &(0x7f0000000040)='syzkaller\x00', 0x6, 0xfa, &(0x7f0000000f40)=""/250, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa}, 0x94) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000)=0x7d, 0x4) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r3, 0x2, {}, 0xfd}, 0x18) connect$can_j1939(r2, &(0x7f0000000000)={0x1d, r3, 0xfffffffffffffffc, {0x0, 0xff, 0x2}, 0xfe}, 0x18) write(r2, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_LIST(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x90, r5, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}, @NLBL_UNLABEL_A_SECCTX={0x22, 0x7, 'system_u:object_r:device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xc0}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1}, @NLBL_UNLABEL_A_SECCTX={0x22, 0x7, 'system_u:object_r:cgroup_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 2.387594159s ago: executing program 4 (id=15029): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, 0x0, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa1557ff04fff000dd604dda00001c0600fc01000000000012fe8000000000000000000000000000aa7ba34001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="700200009078000022020403a8000000"], 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000300)={'ip6_vti0\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x2f, 0x4, 0x9, 0x3, 0x1, @empty, @loopback, 0xd80e02415354385b, 0x8, 0x3, 0x9}}) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000380)={r2, @remote, @dev={0xac, 0x14, 0x14, 0x22}}, 0xc) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x4, 0x10000, 0xbffffffffffffff8}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000180)={0x0, 0x2, 0x4000, 0xd8e0}) r4 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r4, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc) r5 = socket$qrtr(0x2a, 0x2, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffd}, [@call={0x85, 0x0, 0x0, 0x17}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000000)='syzkaller\x00', 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) connect$qrtr(r5, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) r7 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r7, &(0x7f0000000380)={&(0x7f00000000c0)=@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000240)="af", 0x1}], 0x1, &(0x7f00000006c0)=[@init={0x18, 0x84, 0x0, {0xffff, 0x7, 0x7, 0x4}}], 0x18, 0x20000001}, 0x20008000) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r7, 0x84, 0x15, 0x0, &(0x7f0000000280)) writev(r5, &(0x7f0000000340)=[{&(0x7f0000000080)="fb", 0x1}], 0x1) ioctl$sock_qrtr_TIOCINQ(r4, 0x541b, &(0x7f0000000100)) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(r8, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x9814f4af882d1ed}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0b0326bd7000fedbdf250300000008000400ac1e01010500010001000000"], 0x24}, 0x1, 0x0, 0x0, 0x8045}, 0x4010) 2.187669747s ago: executing program 0 (id=15031): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRES64], 0x50) unshare(0x20000400) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r0, 0x58}, 0x55) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e23, 0x4, @mcast1, 0x8}}, 0xfffd, 0x7ffe}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r0}, &(0x7f0000000040), &(0x7f0000000080)='%pS \x00'}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000400000000000000000000030000000003000000020000000000000000000000000000010500000008000000020000000000000c0000000000002e"], 0x0, 0x50}, 0x28) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f00000003c0)=0xfffffffffffffffe, 0x12) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1500000006400000", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="9e18bcd294fad8e5310c64a6e2e59c97860547c240aff7075391769b70b39367b8839ff2db6cf2860e5182d9dcc84a2e7e3de9f7a06c8032569d5863aaa78f76ec30385349b4fb9916e03f63fa58b6940eb287348bb53abb995c416cd0", @ANYRES64=0x0], 0x20) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r4, 0x1, 0x3b, &(0x7f00000014c0)=""/145, &(0x7f0000000000)=0x91) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000008c0), 0x0, 0x408c0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, 0x0}, 0x10) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000b40)=ANY=[@ANYBLOB="5800000002060102000000000000000007000002050005000200000005000400000000000c000780080012400010000014000300686173683a69702c706f72742c69700005000100070000000900020073797a30000000008fdb6bccea3e3e21074715d9e15d5d4b9e9793b17906308ae9a3edbe10771250fadba58c86c1d306bdbeb7fb9ede185d", @ANYRES8, @ANYRES8=r3], 0x58}}, 0x8000) ioctl$FS_IOC_GETFSLABEL(r5, 0x400452c9, &(0x7f0000000100)) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4c, &(0x7f0000000000), 0x4) recvmsg$unix(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$F2FS_IOC_RESIZE_FS(0xffffffffffffffff, 0x4008f510, &(0x7f0000000200)=0x1) sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000040601020000000000000000010000090500212f2c515a0f"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="180000000001010400000072000000000000000404000280"], 0x18}, 0x1, 0x0, 0x0, 0xdf505db1a3d84e25}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r2}, 0x4) 2.079722633s ago: executing program 2 (id=15032): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000000000000731143007a7944c4ff10000002"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x94) r0 = socket(0x2, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x30, 0x5, 0x1, 0xfffff034}, {0x6, 0x1, 0x6, 0x6}]}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780c206050086dd"], 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) (fail_nth: 3) 1.994786683s ago: executing program 1 (id=15033): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="000400"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) (async) r1 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000040)='bond_slave_0\x00') (async) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x1000001, 0x11, r0, 0xffffffffffffc000) r2 = socket$kcm(0x21, 0x2, 0x2) (async) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r3, @ANYBLOB="0000000002000000b70500000800000085000000aa00000095"], &(0x7f0000000300)='GPL\x00', 0x8, 0x1010, &(0x7f0000002500)=""/4112, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) (async) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) 1.662262608s ago: executing program 2 (id=15034): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) setsockopt$sock_int(r4, 0x1, 0x21, &(0x7f0000000080), 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="680000001000ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1720000021200000400012800c0001006d6163766c616e0030000280080003000300000008000100100000001c0005800a000400aaaaaaaaaa2d00000a0004003426f7b68ed1000008000500", @ANYRES32=r6], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r7, 0x29, 0xb, &(0x7f0000000080)=0x4a3d, 0x4) setsockopt$inet6_int(r7, 0x29, 0x8, &(0x7f0000001a00)=0x72b, 0x4) getsockopt$inet6_buf(r7, 0x29, 0x6, 0xfffffffffffffffd, &(0x7f00000001c0)) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0xfc) r8 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r8, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="74010000130001002bbd7000f8dbdf2580c3468e5593544908c31f79a5bb5fd06774618636fddf8eb3adb872df592eed088ebf9019c3b2cd2b52acb7e231e1e17f12c18c2cb8925c92caf6db556fd183"], 0x174}], 0x1, 0x0, 0x0, 0x20008020}, 0x8880) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002480)=@newtfilter={0x89c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x868, 0x2, [@TCA_U32_POLICE={0x850, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x80000, 0x3, 0xf, 0xfdb, 0x1, 0x80, 0x7, 0x7, 0x40000000, 0xaa04, 0x80000001, 0x99, 0x8000, 0x1000, 0x3, 0x0, 0x7fffffff, 0x80, 0x1, 0x7, 0x0, 0x9, 0x4, 0x5, 0x80000001, 0x2, 0xe0, 0x9, 0x1, 0x80000000, 0x1, 0xffff8001, 0x9, 0x10001, 0x7, 0x10000, 0x30, 0x807, 0x1000, 0xfff, 0x7, 0x2, 0x5, 0x48a, 0x9, 0x1000, 0x7, 0x7198, 0x8, 0x80000001, 0x1, 0x101, 0x3, 0x7, 0x2, 0x8, 0x10000, 0x2, 0x1, 0x2, 0x6, 0x9, 0x13, 0x2, 0xffff, 0x80, 0xbf77, 0x8, 0xc52, 0x6, 0x9, 0x7, 0x9, 0x5, 0x8, 0x3, 0x8, 0x5, 0x8, 0x1, 0x3, 0x7fffffff, 0x8, 0x2845, 0x2, 0xe9, 0x2a, 0x3, 0x891, 0x8, 0x1, 0x12, 0x6, 0xfff, 0xffffc9b5, 0x80000000, 0x2, 0x6, 0x6, 0xaa, 0x0, 0x8, 0x0, 0x0, 0x5, 0x1, 0x2, 0x40, 0x4, 0x7, 0x8, 0x8000, 0x4, 0xffffff2d, 0x0, 0xffff7fff, 0x2, 0x3, 0x6, 0x2f1e, 0x8, 0xfcb, 0x8, 0x1, 0x9, 0x6fe68a84, 0x200, 0x1, 0xfffffff9, 0xb, 0x1, 0xab, 0x9, 0x7, 0x0, 0xe, 0x10001, 0x8, 0xa, 0x6, 0x6, 0x9f, 0x7, 0xffff519d, 0x9, 0x4, 0x2, 0x3, 0x1, 0x2, 0x9, 0x4ae, 0x8, 0x1e9, 0x9, 0x105, 0x200, 0x4, 0x4, 0x1, 0x5, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80, 0x2, 0x2, 0x1, 0x5, 0x101, 0x7, 0x4, 0x9, 0x7e32, 0x8800, 0x4, 0xf85f, 0x10000, 0x800, 0xffffffff, 0x7, 0x4af, 0x7e21, 0x1, 0x5027, 0x8, 0x10000, 0x4, 0x3, 0x7, 0x680, 0xc1, 0x2, 0x7, 0x8, 0x401, 0x74dc, 0x400000, 0x401, 0x92c, 0xffff32d2, 0x4, 0xafcf, 0x7f, 0x5, 0xffff0000, 0x0, 0x8, 0x200, 0x4a, 0x4000, 0x0, 0x9, 0x10000, 0x4d4fbb35, 0xb2, 0x4, 0x5, 0x0, 0x100, 0x8001, 0x6, 0xfffffff8, 0x9, 0x2, 0x81, 0x2, 0xc, 0xa, 0x94, 0x3b0, 0x401, 0x118966c9, 0xe56, 0x8, 0x4, 0x1800000, 0x6a, 0x9d6, 0x200, 0x2, 0x40, 0x7, 0x8000, 0x7e, 0x6, 0x5, 0x7, 0x4, 0x3, 0xff, 0xe, 0x4, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x1, 0x5, 0x53e5, 0x7f, 0x4, 0x3000000, 0x0, 0xf0000000, 0x3, 0xfff, 0xe, 0x7, 0xf8, 0x1ff, 0x3, 0x800001, 0xfffffffb, 0x8001, 0xff, 0x0, 0xfff, 0x80, 0x1, 0x5, 0xffff, 0x6, 0x1, 0x7, 0x9, 0x10000, 0x0, 0x5, 0xe184, 0x4, 0x1, 0xadd, 0x1, 0x16, 0x4, 0xa35c, 0xc, 0x80, 0xff, 0x6, 0x2, 0xd, 0x4, 0x3, 0x5, 0x4, 0x401, 0x4, 0x4, 0x1, 0x3, 0x8, 0xfffffffc, 0x3, 0xc1, 0x2, 0xffff, 0x80, 0xfffffff1, 0x7ff, 0x9, 0xfffffffe, 0x2, 0x6, 0x80, 0x200, 0x1000, 0xb11a, 0x0, 0x5, 0x8, 0xf49d, 0x5, 0x3361, 0x435, 0x7fffffff, 0x2, 0x6, 0xc4, 0x9, 0x0, 0xee2, 0x4, 0x401, 0xfffffffa, 0x8000, 0x2, 0x0, 0x5, 0x5dd3c81c, 0xffffffff, 0x7, 0x3, 0x81, 0x9, 0x5, 0xfffffffc, 0x2, 0x1, 0x8, 0x6, 0x0, 0x6, 0xc, 0x8, 0x6, 0x100, 0x1, 0xb5a, 0x7, 0x4, 0x18, 0x8, 0x31, 0x1ff, 0x4, 0x9, 0x400, 0x2, 0x6, 0x7, 0x9, 0x91e7, 0x5, 0x7, 0x81eb, 0x400, 0xffff, 0x9, 0x9, 0x6, 0x7, 0x6, 0xea, 0x3, 0x9, 0x4, 0x3, 0x7, 0x0, 0x8, 0x1, 0xbf0, 0x7, 0x7, 0x66, 0x7, 0x6, 0x3, 0x9, 0x0, 0x9c4, 0x7fff, 0x7, 0x800, 0x5, 0x9, 0x10001, 0x4, 0x2a64aeea, 0x0, 0x21, 0x2, 0x1, 0xf, 0x1ff, 0x400, 0x3, 0x3ff, 0xb, 0x39, 0x0, 0x8, 0xffffffff, 0x0, 0x8, 0x6, 0x9, 0x2, 0xffffffff, 0x401, 0x9, 0x800, 0x9, 0xeb, 0x8, 0x6ed, 0x5, 0x2004, 0x4c3e, 0x1bd, 0x381, 0x4282, 0x4, 0x7, 0x1, 0x4, 0xfffffff7, 0x5, 0x7, 0x0, 0x46, 0x9, 0x3, 0x3, 0x6, 0x9, 0x4, 0x1, 0x4, 0xfffeffff, 0xe, 0x3ff, 0x80000000, 0x7, 0x80, 0x7, 0x10042b, 0x7, 0x7, 0xfff, 0x5, 0x8, 0xffffffff, 0xffff671f, 0x7, 0x4, 0x80, 0x6, 0x4, 0xd, 0x1, 0xff, 0x2, 0x5be228d5, 0x2, 0x0, 0x8, 0xaff0, 0x8001, 0x3, 0x1, 0x7, 0x0, 0x51e, 0x2, 0x6, 0x4, 0xfffffffc, 0xd97, 0xa8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4, 0x4, 0x6, 0x0, {0x7, 0x2, 0x3, 0x10, 0x4, 0x8}, {0x6, 0x0, 0x9, 0xe23, 0x100, 0x5}, 0x7, 0x99, 0xef2}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xadd1}]}, @TCA_U32_SEL={0x14, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f}}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xe}}]}, 0x89c}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040084) socket$kcm(0xa, 0x5, 0x0) r9 = socket$inet6(0xa, 0x2, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x5, 0x8, 0x9}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r10, &(0x7f0000000240), &(0x7f00000000c0)=@udp6=r9}, 0x20) close(0x4) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xc0, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff}}, [@XFRMA_IF_ID={0x8, 0x1f, 0x4}]}, 0xc0}, 0x1, 0x0, 0x0, 0xc001004}, 0x40800) 1.646008443s ago: executing program 0 (id=15035): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6, 0x18, 0x3}, @IFLA_BOND_MODE={0x5, 0x1, 0x3}]}}}]}, 0x44}}, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r2, &(0x7f0000000180)="918e", 0x2, 0x240044d5, &(0x7f00000001c0)={0xa, 0x2, 0x10002, @loopback, 0x8d8}, 0x1c) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r3, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2}) writev(r2, &(0x7f0000000140)=[{&(0x7f00000000c0)="e1", 0x1}], 0x1) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newsa={0x104, 0x10, 0x281, 0x0, 0x0, {{@in=@remote, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@private, 0x4cf, 0x3c}, @in=@broadcast, {}, {}, {0x0, 0x5}, 0x0, 0x0, 0x2}, [@coaddr={0x14, 0xe, @in=@multicast1}]}, 0x104}}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x208}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x208}, 0x0) recvmmsg(r6, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/188, 0xbc, 0xdf0e}}], 0x1800, 0x2002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x90ff}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.502689649s ago: executing program 2 (id=15036): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r4, 0x0, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, 0x0, 0x4000054) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (rerun: 64) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) (async, rerun: 64) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20040040) (async, rerun: 64) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001100010028bd7000ffdbdf250000000035c1e14f50284c8b45e8ea83b37b08f1779d5b4ee33940ed5293f9f716b92962812d2e2564e3869ba881a69d2165f913e09ae3d6d8167ef74997268b2d9b9deead36ae2b64e57ce3424182bcaa", @ANYRES32=0x0, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async) r6 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000007c0)={0x150, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xe}, {0x6, 0x16, 0x9}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x8000}, {0x8, 0xb, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x80000000}, {0x6, 0x16, 0x6}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x9}, {0x8, 0xb, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x1}, {0x6, 0x16, 0x8}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x5}, {0x8, 0xb, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xff}, {0x6, 0x16, 0x9}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x2}, {0x8, 0xb, 0xffffff01}}]}, 0x150}, 0x1, 0x0, 0x0, 0x20000000}, 0x4084) recvmmsg(r6, &(0x7f0000002180)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)=""/254, 0xfe}, {&(0x7f00000000c0)=""/50, 0x32}], 0x2}, 0x3f}], 0x1, 0x60, 0x0) (async) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) socket$kcm(0x10, 0x2, 0x10) 1.380130783s ago: executing program 2 (id=15037): unshare(0x6a040000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) getsockopt$rose(0xffffffffffffffff, 0x104, 0x7, 0x0, 0x0) bind$rds(r0, &(0x7f0000000300)={0x2, 0x4e20, @local}, 0xffffffffffffff9b) sendmsg$rds(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x6c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x2}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x4}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x5c}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYRES16, @ANYRESDEC=0x0], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x5, 0x0, 0xe}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0xffffffc1) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x50000, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001580)=ANY=[@ANYBLOB="02fa"], 0x10}}, 0x810) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r6, 0x0, 0xfdef) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000100)=@ethtool_coalesce={0xe, 0x0, 0x1000, 0x6, 0x400000, 0x7ff, 0x4, 0xc0000000, 0x402, 0x6, 0x5, 0x5, 0x3, 0x4006, 0x80, 0xfffffffc, 0x0, 0x37e9, 0x80000004, 0x1, 0x6, 0x424f, 0x3}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="080bf4e404000000050000000000008073100000", @ANYRES32, @ANYBLOB="0000000600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000010000000500"/28], 0x50) mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r0, 0x0) syz_emit_ethernet(0x3a, &(0x7f00000001c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @remote, {[@timestamp={0x44, 0x4, 0xe2}]}}, @timestamp={0xd, 0x0, 0x0, 0x9, 0x2, 0x672d, 0x1, 0x9}}}}}, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xba0c29e690d41d4b, 0x20000000ec071, 0xffffffffffffffff, 0x0) 1.37730586s ago: executing program 3 (id=15038): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = socket$l2tp6(0xa, 0x2, 0x73) listen(r2, 0x564) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x2, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0xffffffffffffffcd, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r4, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11000000040000000400000022"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r5, &(0x7f0000000540)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1d, 0xc, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8923, &(0x7f00000000c0)={'bond_slave_0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1007fffffff, 0xfffffffffffffffc}, 0x0, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000100)=0x5) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2, 0x0, 0xa}, 0x10) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) connect$netrom(r1, &(0x7f0000000080)={{0x6, @default}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) shutdown(r0, 0x1) 1.166454974s ago: executing program 4 (id=15039): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f00000003c0)={0xffffffffffffffff}) sendto$netrom(r1, &(0x7f0000000440)="f0af1f22b1385d6b0be742fdb5b9b4d44120f393437f3d9608caa951b5f632871017115c73e57d6f675cbc59cc647f13454556749b917a9a9caf1194421f1efe8d01e74cc48af53ed1b1d3f3e906cffee1de189f33257223c72e80776c42d52855931379697f531d3768b73152ad1a0c07ef73eacf83865a6e88b93e1311e5fb943cfaa06723d473a2c01780303833cc4d0a8ab9f2c638462dd4b74f4957217ca8f782064b2266500d9d9acbfefc5a193ffc0d9c71bf5a7147f25755e942d4e0107ed39127968fa9d3b46cc9aab9f0639443532cf9d19d5588dcd50895a9405a7dd0e0bb9faf", 0xe6, 0x800, &(0x7f0000000640)={{0x3, @default, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) r4 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000380)={0x1d, r5, 0x1, {0x0, 0x0, 0x1}, 0xfd}, 0x18) sendto$netrom(r4, 0x0, 0x6c20, 0x881, 0x0, 0x0) r6 = syz_init_net_socket$ax25(0x3, 0x3, 0x1) syz_emit_ethernet(0x7e, &(0x7f0000000280)={@local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f81fcb", 0x48, 0x3a, 0x0, @private0, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "4aa1d3", 0x0, 0x0, 0x0, @private1, @ipv4={'\x00', '\xff\xff', @loopback}, [@routing={0x3c}, @srh={0x2f}, @dstopts]}}}}}}}, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r7, &(0x7f0000003640)=[{{&(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="3400000000000000000000000700000094040020070f6e0a0101010a010102ac14141988040c08440c9eb00000000000000003000000000018000000000000000000000002"], 0x50}}], 0x1, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r8, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007500000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000140)=r9, 0x4) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) ioctl$sock_ax25_SIOCDELRT(r6, 0x890c, &(0x7f0000000180)={@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x2, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbff, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x9a}}, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) 887.466776ms ago: executing program 1 (id=15040): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="09000000040000000c0000000b"], 0x50) close(0x3) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xb, 0x8}, 0x50) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r1}, 0xc) (async) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0xbe42, 0x5, 0x9}) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, r2}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r2, &(0x7f0000000100)="61de5013bb29f5484d6ef270a8d73c7f0a21c9d443db8b00b2d82485ca5157c87913765a9298030d272f537796e37124dc4584e98cfaf31fe62872c2b5b672783e5c38830ec9841434c1f3ce08d24b7771c3", &(0x7f0000000680)=""/4096}, 0x20) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x66, 0x0, 0x0, 0x0, 0xce}, [@call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ffffc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r4}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001680)={0x11, 0xf, &(0x7f0000000440)=ANY=[@ANYBLOB="180087288b000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000b5000000bf0900000000000055090100000000009500000000000000bf91000000000000b702000000000000850000002a000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0xa, 0x1001, &(0x7f0000001cc0)=""/4097, 0x41100, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000}, 0x94) 740.18103ms ago: executing program 1 (id=15041): r0 = socket$inet(0x2, 0x3, 0x2) r1 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x0, 0x101, @remote}, {0xa, 0x4e1f, 0x0, @dev}, 0x0, {[0x0, 0x0, 0x0, 0x897, 0x0, 0x2, 0x80000000]}}, 0x5c) r2 = epoll_create1(0x80000) epoll_wait(r2, &(0x7f000000affb)=[{}], 0x1, 0x7fff) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f0000000d80)=ANY=[@ANYRESOCT], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000980)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa1"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x120c000, 0x1000, 0x0, 0x7}, 0x20) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10805}, 0x44049) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)={0x2000001c}) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SIOCGSTAMP(r5, 0x8906, &(0x7f0000000300)) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r8, 0x89f0, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000100)={'erspan0\x00', 0x0, 0x8, 0x20, 0x0, 0x1, {{0x5, 0x4, 0x1, 0x7, 0x14, 0x66, 0x0, 0x0, 0x4, 0x0, @loopback, @local}}}}) 730.947144ms ago: executing program 4 (id=15042): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001a003df5f880c1e796822a2c81"], 0x14}}, 0x0) accept$inet(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10) 697.162129ms ago: executing program 0 (id=15043): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtfilter={0x50, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @ipv4={'\x00', '\xff\xff', @multicast1}}, @TCA_FLOWER_KEY_ENC_IP_TOS={0x5, 0x50, 0x9}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0x1, 0x58, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newlink={0x54, 0x10, 0x401, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x9}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x20, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_SUPERVISION_ADDR={0xa, 0x4, @random="6147d8e269c5"}, @IFLA_HSR_SLAVE1={0x8, 0x1, r4}]}}}, @IFLA_TXQLEN={0x8, 0xd, 0x20000006}]}, 0x54}}, 0x0) 528.152025ms ago: executing program 1 (id=15044): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x6c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x28, 0x12, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0xf}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x7, 0x84}}}, 0xb4}, 0x1, 0x0, 0x0, 0x40000}, 0x20040084) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x200000, 0x2, 0x0, 0x2, 0x8007, 0xff}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r2, 0x8b32, &(0x7f0000000040)) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r1, &(0x7f00000003c0)={0x0, 0xfffffffffffffd90, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="01072b00"/14], 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)=ANY=[@ANYBLOB="020100000e000000000000000000000005000600000000000a0000000000000000000000000000000000000000000000000000000000000005000500000000000a000000000000000000000000000000000000000000000000000000000000000200130002"], 0x70}}, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000005d00)={0x114, 0x2e, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x103, 0xf2, 0x0, 0x1, [@typed={0xc, 0xda, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000001100), r1) 476.263378ms ago: executing program 0 (id=15045): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000000680)={0x50, 0x7, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x8}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x10}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x4}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x800) r2 = socket(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000380)={0x0, 0x80, "0e577e79e96f6369099828c441a6ca34f8ce777143396408bda9a0d2384ccc14c94ecdaafe9cd009470a391966aa14c8901f8a0a89937993f4ae58e57e3aaaab2cc9284f0e26a7b58a68664d2f2778bc74c47bb1b08a19e0f235725455486fe21e8484d46d6cf835d898a2c4a5c86bf8a4f4eb7063b1e9451d78893f960d69c2"}, &(0x7f0000000080)=0x88) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)="5c00000013006bec9e3be35c6e17aa31076b876c1d0000007ea60864160af3653c000cc004000202080003000300000007000200eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000200ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000580)={r3, 0xec, "0f5efaacd0d12878f2659e749babba7d41e443975068a8178cd07aa09a9753f5e4a3c56672587b74e32d5b5fbf6ba2722bec7bcf22286464f872f2ee202284493c4021100739ac60f91da2345778cd1bdbe2d988b6e6ae1a67b0ff2197fda56d55b50a198331561220b7805108684e433e54bb839adce44669b37fc583eca8acf610c7cdd57666ac3c01f2a6a62dfb50e8a6785b6a57e3614fd9904e21c0c26a0027bebe458001fb746fa5b07eeff2cf7a914dab742e5b31f8e6a2c4ce7595fd420f2e53b802a1fd96ba89fc8d56e42d1266c3c0609f878c889dd7fcde33b07909908730606100f79630269a"}, &(0x7f0000000180)=0xf4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05400000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a300000000014000480080002400000000008000140000000000900010073797a30000000004c000000060a01040000000000000000010000002400048020000180080001006f736600140002800500020000000000080001400000001408000b40000000000900010073797a300000000014000000110001"], 0xd4}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000980)=@gettaction={0x20, 0x32, 0x600, 0x70bd26, 0x25dfdbfb, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x0) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x4e22, 0x800, @empty}, 0x0, {[0x0, 0x8000, 0x0, 0xfffffffc]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, {0xa, 0x0, 0x4, @empty}, 0x0, {[0x3, 0x0, 0x0, 0x1, 0x89f, 0x8, 0x1]}}, 0x5c) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000340)=0x6, 0x4) r7 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r7, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r7, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000780)=ANY=[@ANYBLOB="01800000", @ANYRES16=0x0, @ANYBLOB="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"], 0x150}, 0x1, 0x0, 0x0, 0x44001}, 0x0) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x4e5b, 0x80000000, @ipv4={'\x00', '\xff\xff', @empty}, 0x5}, 0x1c) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r8, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x9, &(0x7f0000000140)=0xfb78, 0x4) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="2e00000011008188040f46ecdb4cb9cca7480e122a128701b429021627e305dd2b7a146efb4400bfbb87505bcf9a51a735d5eaa7aade35aa58809ab09cb3110838f5727dd473f7faea2184bb5bf0e261b95ebf9a8232f4e15e9bfca31e11b808998bce250e60d08d0c8d2df40b1ad10cd78280d7e4e3dbc9caa1b4b7189a7adcd7e312d16a0e60cba115c5f364315c216ecad3858aa2f6304e604c92f9e5584b591d7fa68eb133e19fec9dfe53bf204cc3a446551984408ef94a2ed36df294dae33cedc82946f90237e027241edeca65544a9f07ec475c9178c8566ae438d5dd7fd488", 0xe3}], 0x1}, 0x24000000) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000700)=0x4, 0x4) 360.611326ms ago: executing program 1 (id=15046): r0 = socket$kcm(0x10, 0x100000000002, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54}, 0x42) (async, rerun: 64) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, 0x0, 0x0) (rerun: 64) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{0x1, 0xffffffffffffffff}, &(0x7f0000000200), 0x0}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=r1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'], 0x50) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'aead\x00', 0x11, 0x0, 'aegis256-generic\x00'}, 0x58) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000240)={0x0, 0x77, "7bf8ec152fa16d39e4553d9607191c01203f4f261459314625abafbae0dd3d3a415cb19b2f3f5bd1d92f8a3b28f86ac6911e2662216e88b31100ae16fcb20ca3c5e2bc78d0014278c1e4c7fb4ab35e2c3ae32abc7bf205fd325765be5684ece2933f3325ec9cb8b4725605bf2722d1ded87089430c8a35"}, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000100)="480000001400195a8563e43c12f461560a2972063700000000000000590000a2bc5603ca00000f7f89000004200000000101ff000000032fdc0e2d9d9b7373ed", 0x40}], 0x1) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r2, &(0x7f0000000800)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000540)=0x2) (async) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}}, 0x40040) (async, rerun: 64) r3 = socket$alg(0x26, 0x5, 0x0) (rerun: 64) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x99, 0x7, 0x0, 0x1, 0x5392, 0xc, 0x9, {0x0, @in6={{0xa, 0x4e20, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10}}, 0x81, 0x3, 0xc, 0x4b, 0x9}}, 0x0) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) (async, rerun: 64) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYRES8, @ANYBLOB="010026bd7000fddbdf2506000000140002002001000000000000000000000000000114000300fe88000000000000000000000000010108000400ac1414bb2b00070073797374656d5f753a6f626a6563745f723a7373685f"], 0x70}, 0x1, 0x0, 0x0, 0x4}, 0xc8a0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) syz_init_net_socket$ax25(0x3, 0x5, 0xcd) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) 349.212278ms ago: executing program 3 (id=15047): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r0) write$cgroup_devices(r0, 0x0, 0xfffffeff) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, [@generic={0x63, 0x1, 0x1, 0x98}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x8, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x5}, 0x50) r2 = socket$igmp(0x2, 0x3, 0x2) r3 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r5}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r6, r4, 0x25, 0x0, @val=@netkit={@void, @value=r6}}, 0x1c) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x101, 0x2, 0xc, 0x43080, r1, 0x6, '\x00', r4, r0, 0x5, 0x1, 0x2, 0x9}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x3, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) splice(r7, &(0x7f0000000080)=0x8, r7, &(0x7f00000000c0)=0x4, 0x4, 0x4) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) connect$tipc(r8, &(0x7f0000000100)=@id={0x1e, 0x3, 0x0, {0x4e23, 0x3}}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@map, 0x5, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 236.037269ms ago: executing program 4 (id=15048): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) socket$inet6(0xa, 0x2, 0x0) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000001300)={'broute\x00', 0x0, 0x0, 0x0, [0x8000000000000001, 0x0, 0xa, 0x8000000000000000, 0x4], 0x5, &(0x7f0000001140)=[{}, {}, {}, {}, {}], 0x0, [{}, {}, {}, {}, {}]}, 0xc8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001f80)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xa, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x4, 0xa}, {}, {0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x1, 0xb}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) sendmsg$nl_route_sched(r1, 0x0, 0x0) r9 = socket$kcm(0xa, 0x2, 0x0) r10 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r10, 0x29, 0x4, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000040)=ANY=[@ANYRESHEX], 0x0) r11 = socket(0x2, 0x80805, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r11, 0x0, 0x487, &(0x7f0000000000)={{0x84, @multicast2, 0x4f29, 0x3, 'nq\x00', 0x5, 0xd35, 0x2b}, {@loopback, 0x4e23, 0x0, 0x1, 0x1}}, 0x44) sendmsg$sock(r9, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) socket$packet(0x11, 0x3, 0x300) 170.54186ms ago: executing program 0 (id=15049): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00007a9000/0x4000)=nil, 0x4000, 0xc, 0x12, r0, 0xffffa000) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5421, &(0x7f00000000c0)=0x7) write$cgroup_int(r1, &(0x7f0000000140), 0xfffffdef) write$nci(r1, 0x0, 0x4) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f00000001c0)={'bridge0\x00', &(0x7f0000000400)=@ethtool_ringparam={0x5, 0x0, 0x5, 0x2, 0x0, 0x0, 0x10000, 0xffffffff}}) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) unshare(0x600) socket$inet_smc(0x2b, 0x1, 0x0) socket$unix(0x1, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1000000004000000080000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00d6e2ab066c3d2a1b00"/28], 0x50) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000009c0)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000d0a0000000000000001000005d8"], &(0x7f0000000f40)=""/4089, 0x3e, 0xff9, 0xa, 0xfffffffa}, 0x28) r3 = openat$cgroup_ro(r1, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r4, 0x0) mmap(&(0x7f0000707000/0x2000)=nil, 0x2000, 0x3, 0x12, r3, 0xc3ceb000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000240)="f2435f010008babe000000850800", 0x36, 0x1, &(0x7f0000000200)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, 0x14) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, 0x2010, r0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r5, 0x1000) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) ioctl$FS_IOC_RESVSP(r6, 0x40305829, &(0x7f0000000000)={0x1100, 0x3, 0x55, 0x11000}) 134.102103ms ago: executing program 3 (id=15050): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r1, 0x0, 0x7, &(0x7f0000000080)=0xcd, 0x4) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e20, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r1, 0x0, 0x14, &(0x7f0000000380)=0x3, 0x4) recvmmsg(r1, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0}, 0x400040}], 0x1, 0x45833af92e4b39ff, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, 0x0, 0x20000) read$alg(r0, &(0x7f0000000300)=""/74, 0x4a) r3 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bind$alg(0xffffffffffffffff, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtaction={0x68, 0x30, 0xb, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x9, 0x2, {{0x6, 0xff, 0x4, 0x6, 0x6}, 0x3}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x200ce8c4) accept$alg(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r5, 0x1, 0x8, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180)=r6, 0x4) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$inet(r7, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) 80.727033ms ago: executing program 1 (id=15051): socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x10) (async) r1 = socket$netlink(0x10, 0x3, 0x10) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) (async) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) (async) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) (async) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r3, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) close(r3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r5, 0x0, 0x0, 0x0) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={0xffffffffffffffff, r4, 0x10, 0x0, @val=@kprobe_multi=@addrs={0x0, 0x1, 0x0, &(0x7f0000000040)=[0x2], 0x9}}, 0x30) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000140)) (async) unshare(0x2000000) (async) pwritev(r6, &(0x7f0000000040)=[{&(0x7f0000000300)="80fd", 0x2}], 0x1, 0x0, 0x0) (async) bind$alg(0xffffffffffffffff, &(0x7f0000000340)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x7, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x24048860}, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') (async) unshare(0x6a040000) socket$kcm(0x21, 0x2, 0xa) (async) socket$kcm(0x10, 0x3, 0x10) 0s ago: executing program 0 (id=15052): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x283}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x4}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0xe2e65498fc03141c}]}}}]}, 0x44}}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000540)={0xb0000010}) kernel console output (not intermixed with test programs): pgpgin 536341 [ 1463.617602][T24629] pgpgout 536330 [ 1463.621145][T24629] pgfault 937271 [ 1463.635480][T24629] pgmajfault 5 [ 1463.638884][T24629] inactive_anon 0 [ 1463.642509][T24629] active_anon 45056 [ 1463.653863][ T4966] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1463.661318][T24629] inactive_file 0 [ 1463.665288][T24629] active_file 0 [ 1463.669071][T24629] unevictable 0 [ 1463.672522][T24629] hierarchical_memory_limit 314572800 [ 1463.683864][T24629] hierarchical_memsw_limit 9223372036854771712 [ 1463.690032][T24629] total_cache 0 [ 1463.693850][T24629] total_rss 0 [ 1463.697140][T24629] total_rss_huge 0 [ 1463.700850][T24629] total_shmem 0 [ 1463.721757][T24629] total_mapped_file 0 [ 1463.726376][T24629] total_dirty 0 [ 1463.729845][T24629] total_writeback 0 [ 1463.743911][T24629] total_workingset_refault_anon 8 [ 1463.748958][T24629] total_workingset_refault_file 0 [ 1463.763588][ T4966] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1463.771065][T24629] total_swap 102400 [ 1463.775268][T24629] total_swapcached 147456 [ 1463.779605][T24629] total_pgpgin 536345 [ 1463.794215][T24629] total_pgpgout 536334 [ 1463.798303][T24629] total_pgfault 937295 [ 1463.802361][T24629] total_pgmajfault 5 [ 1463.816950][T24629] total_inactive_anon 0 [ 1463.821125][T24629] total_active_anon 45056 [ 1463.825789][T24629] total_inactive_file 0 [ 1463.829950][T24629] total_active_file 0 [ 1463.835036][T24629] total_unevictable 0 [ 1463.839025][T24629] anon_cost 0 [ 1463.842303][T24629] file_cost 0 [ 1463.845902][T24629] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.14023,pid=24629,uid=0 [ 1463.863195][T24629] Memory cgroup out of memory: Killed process 24629 (syz.2.14023) total-vm:98580kB, anon-rss:1244kB, file-rss:21720kB, shmem-rss:0kB, UID:0 pgtables:120kB oom_score_adj:1000 [ 1463.916065][ T4966] tunl0: left allmulticast mode [ 1463.923908][ T4966] lo: left allmulticast mode [ 1464.098743][ T4966] batman_adv: batadv0: Removing interface: gretap1 [ 1464.556377][ T4966] bond6 (unregistering): (slave bridge8): Releasing backup interface [ 1464.564800][ T4966] bridge8 (unregistering): left promiscuous mode [ 1464.598051][ T4966] bond0 (unregistering): left promiscuous mode [ 1464.604667][ T4966] bond_slave_0: left promiscuous mode [ 1464.610146][ T4966] bond_slave_1: left promiscuous mode [ 1464.615707][ T4966] mac80211_hwsim hwsim90 wlan1: left promiscuous mode [ 1464.624768][ T4966] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1464.636206][ T4966] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1464.646166][ T4966] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 1464.655120][ T4966] bond0 (unregistering): Released all slaves [ 1464.665478][ T4966] bond1 (unregistering): Released all slaves [ 1464.677426][ T4966] bond2 (unregistering): Released all slaves [ 1464.689526][ T4966] bond3 (unregistering): Released all slaves [ 1464.702012][ T4966] bond4 (unregistering): (slave veth3): Releasing active interface [ 1464.715088][ T4966] bond4 (unregistering): Released all slaves [ 1464.727934][ T4966] bond5 (unregistering): (slave veth5): Releasing active interface [ 1464.737676][ T4966] bond5 (unregistering): Released all slaves [ 1464.750082][ T4966] bond6 (unregistering): Released all slaves [ 1464.765194][ T4966] bond7 (unregistering): Released all slaves [ 1464.793635][ T4965] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1464.853304][ T4966] tipc: Left network mode [ 1464.934583][ T4973] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1465.281807][ T4966] batadv0: left promiscuous mode [ 1465.299256][ T4966] hsr_slave_0: left promiscuous mode [ 1465.307251][ T4966] hsr_slave_1: left promiscuous mode [ 1465.313002][ T4966] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1465.320833][ T4966] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1467.873667][ T4984] net_ratelimit: 24 callbacks suppressed [ 1467.873689][ T4984] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1467.993626][ T4965] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1468.104135][ T4966] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1468.213623][ T4984] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1468.323792][ T4965] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1468.434331][ T4984] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1468.543719][ T4965] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1468.653756][ T4965] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1468.763859][ T4983] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1468.883952][ T4984] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1472.973750][ T4984] net_ratelimit: 36 callbacks suppressed [ 1472.973769][ T4984] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1473.093756][ T4983] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1473.203607][ T4965] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1473.313875][ T4983] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1473.423660][ T4965] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1473.533801][ T4984] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1473.643910][ T4965] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1473.754021][ T4984] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1473.863795][ T4983] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1473.973901][ T4984] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1478.073661][ T4984] net_ratelimit: 36 callbacks suppressed [ 1478.073683][ T4984] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1478.193834][ T4966] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1478.303709][ T4966] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1478.414076][ T4983] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1478.523660][ T4966] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1478.643848][ T4965] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1478.753609][ T4965] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1478.863984][ T4966] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1478.973784][ T4983] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1479.083895][ T4983] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1483.083607][ T4984] net_ratelimit: 35 callbacks suppressed [ 1483.083628][ T4984] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1483.203768][ T4963] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1483.313936][ T4965] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1483.423968][ T4965] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1483.533613][ T4965] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1483.643949][ T4965] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1483.753658][ T4965] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1483.864187][ T4965] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1483.973824][ T4984] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1484.083893][ T4963] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1484.350300][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 1484.364394][ T4984] dvmrp1: left allmulticast mode [ 1484.478888][ T4984] batman_adv: batadv0: Removing interface: gretap1 [ 1484.578565][ T4984] bond3 (unregistering): (slave bridge2): Releasing backup interface [ 1484.796664][ T4984] bond1 (unregistering): Released all slaves [ 1484.809000][ T4984] bond2 (unregistering): Released all slaves [ 1484.820849][ T4984] bond3 (unregistering): Released all slaves [ 1484.836982][ T4984] bond4 (unregistering): (slave veth7): Releasing active interface [ 1484.845669][ T4984] bond4 (unregistering): Released all slaves [ 1484.871064][ T4984] bond0 (unregistering): Released all slaves [ 1484.883305][ T4984] bond5 (unregistering): Released all slaves [ 1484.895974][ T4984] bond6 (unregistering): Released all slaves [ 1485.017283][ T4984] tipc: Left network mode [ 1485.429228][ T4984] hsr_slave_0: left promiscuous mode [ 1485.435135][ T4984] hsr_slave_1: left promiscuous mode [ 1485.440885][ T4984] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1485.581353][ T4984] team0 (unregistering): Port device team_slave_1 removed [ 1485.594427][ T4984] team0 (unregistering): Port device team_slave_0 removed [ 1486.010684][ T4984] IPVS: stop unused estimator thread 0... [ 1488.124092][ T4963] net_ratelimit: 30 callbacks suppressed [ 1488.124114][ T4963] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1488.203812][ T5157] block nbd0: Possible stuck request ffff8880418f2800: control (read@0,1024B). Runtime 120 seconds [ 1488.214679][ T5157] block nbd0: Possible stuck request ffff8880418f2a00: control (read@1024,1024B). Runtime 120 seconds [ 1488.225896][ T5157] block nbd0: Possible stuck request ffff8880418f2c00: control (read@2048,1024B). Runtime 120 seconds [ 1488.237006][ T5157] block nbd0: Possible stuck request ffff8880418f2e00: control (read@3072,1024B). Runtime 120 seconds [ 1488.248214][ T4963] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1488.363765][ T4983] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1488.473605][ T4983] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1488.583907][ T4963] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1488.693618][ T4983] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1488.803777][ T4984] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1488.913736][ T4963] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1489.023711][ T4963] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1489.133618][ T4963] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1489.703568][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5350 ms [ 1489.711585][ C0] lec:lec_tx_timeout: lec0 [ 1493.214068][ T4963] net_ratelimit: 36 callbacks suppressed [ 1493.214089][ T4963] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1493.333753][ T4963] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1493.443599][ T4984] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1493.553664][ T4965] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1493.663692][ T4965] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1493.784256][ T4984] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1493.893643][ T4984] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1494.003741][ T4973] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1494.113991][ T4984] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1494.223862][ T4984] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1495.401701][T24652] netlink: 32 bytes leftover after parsing attributes in process `syz.0.14028'. [ 1495.420108][T24660] netlink: 36 bytes leftover after parsing attributes in process `syz.3.14031'. [ 1495.529147][T24662] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14031'. [ 1495.582997][T24670] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14033'. [ 1495.625457][T24675] erspan0: entered promiscuous mode [ 1495.702229][T24675] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1495.715738][T24675] 8021q: adding VLAN 0 to HW filter on device team0 [ 1495.726873][T24680] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14035'. [ 1495.789376][T24680] team3: entered promiscuous mode [ 1495.800405][T24673] netlink: 296 bytes leftover after parsing attributes in process `syz.0.14035'. [ 1495.810300][T24680] team3: entered allmulticast mode [ 1495.818452][T24680] 8021q: adding VLAN 0 to HW filter on device team3 [ 1496.074417][T24704] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 1496.125368][T24711] netlink: 'syz.4.14046': attribute type 1 has an invalid length. [ 1496.127270][T24702] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14044'. [ 1496.274475][T24723] netlink: 20 bytes leftover after parsing attributes in process `syz.4.14046'. [ 1496.452501][T24728] netlink: 28 bytes leftover after parsing attributes in process `syz.1.14049'. [ 1496.494865][T24728] netlink: 28 bytes leftover after parsing attributes in process `syz.1.14049'. [ 1496.845082][T24749] bond5 (unregistering): Released all slaves [ 1497.221291][T24765] syzkaller0: entered promiscuous mode [ 1497.249849][T24765] syzkaller0: entered allmulticast mode [ 1497.465666][T24787] lo speed is unknown, defaulting to 1000 [ 1497.488710][T24787] gre0 speed is unknown, defaulting to 1000 [ 1497.526227][T24794] netlink: 'syz.2.14060': attribute type 2 has an invalid length. [ 1497.652650][T24798] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1497.850003][T24806] "syz.2.14066" (24806) uses obsolete ecb(arc4) skcipher [ 1498.069893][T24811] lo speed is unknown, defaulting to 1000 [ 1498.243535][ T4969] net_ratelimit: 33 callbacks suppressed [ 1498.243557][ T4969] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1498.383651][ T4969] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1498.514071][ T4973] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1498.536457][T24811] gre0 speed is unknown, defaulting to 1000 [ 1498.573289][T24787] wlan1 speed is unknown, defaulting to 1000 [ 1498.614672][T24833] netlink: 'syz.0.14070': attribute type 39 has an invalid length. [ 1498.883629][ T4965] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1499.013637][ T4965] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1499.173567][ T4973] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1499.283578][ T4965] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1499.326421][T24811] wlan1 speed is unknown, defaulting to 1000 [ 1499.378039][T24868] netlink: 'syz.4.14080': attribute type 21 has an invalid length. [ 1499.433770][T24861] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1499.452537][T24868] netlink: 'syz.4.14080': attribute type 22 has an invalid length. [ 1499.485864][T24868] netlink: 'syz.4.14080': attribute type 23 has an invalid length. [ 1499.541388][T24868] netlink: 'syz.4.14080': attribute type 25 has an invalid length. [ 1499.584486][T24868] netlink: 'syz.4.14080': attribute type 26 has an invalid length. [ 1499.663826][ T4984] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1499.873838][ T4963] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1500.472106][T24917] lo speed is unknown, defaulting to 1000 [ 1500.491533][T24917] gre0 speed is unknown, defaulting to 1000 [ 1500.822821][T24917] wlan1 speed is unknown, defaulting to 1000 [ 1500.854212][T24925] __nla_validate_parse: 9 callbacks suppressed [ 1500.854232][T24925] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14097'. [ 1500.957151][T24927] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14096'. [ 1500.969072][T24925] netlink: 28 bytes leftover after parsing attributes in process `syz.4.14097'. [ 1500.978914][T24927] netlink: 348 bytes leftover after parsing attributes in process `syz.2.14096'. [ 1501.005865][T24927] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14096'. [ 1501.048039][T24927] netlink: 348 bytes leftover after parsing attributes in process `syz.2.14096'. [ 1501.121769][T24927] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14096'. [ 1501.526187][T24950] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14106'. [ 1501.663024][T24950] netlink: 20 bytes leftover after parsing attributes in process `syz.1.14106'. [ 1501.821366][T24959] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14106'. [ 1502.248013][T24985] syzkaller0: entered promiscuous mode [ 1502.273679][T24985] syzkaller0: entered allmulticast mode [ 1502.327316][T24990] netlink: 'syz.2.14114': attribute type 1 has an invalid length. [ 1502.346213][T24985] tipc: Enabled bearer , priority 0 [ 1502.355928][T24980] tipc: Resetting bearer [ 1502.417458][T24980] tipc: Disabling bearer [ 1502.563389][T24996] syzkaller0: entered promiscuous mode [ 1502.591325][T24996] syzkaller0: entered allmulticast mode [ 1502.767392][T24996] gretap1: left promiscuous mode [ 1502.785310][T24996] bond1: left promiscuous mode [ 1502.857690][T24996] bond3: left promiscuous mode [ 1502.875783][T24996] geneve1: left allmulticast mode [ 1502.884524][T24996] geneve1: left promiscuous mode [ 1502.895862][T24996] macsec1: left promiscuous mode [ 1502.900918][T24996] macsec1: left allmulticast mode [ 1502.911808][T25021] netlink: 'syz.4.14120': attribute type 1 has an invalid length. [ 1502.915930][T24996] ip6erspan0: left allmulticast mode [ 1502.940707][T25023] netlink: 'syz.4.14120': attribute type 1 has an invalid length. [ 1502.953009][T24996] bond6: left allmulticast mode [ 1503.019567][T24996] syzkaller0: left promiscuous mode [ 1503.025246][T24996] syzkaller0: left allmulticast mode [ 1503.044709][ T4965] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1503.054091][ T4965] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1505.074322][ T4965] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1505.082832][ T4965] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1505.124566][ T4984] net_ratelimit: 19 callbacks suppressed [ 1505.124588][ T4984] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1505.263851][ T4984] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1505.407145][ T4965] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1505.533588][ T4984] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1505.582149][T25083] syzkaller1: entered promiscuous mode [ 1505.587829][T25083] syzkaller1: entered allmulticast mode [ 1505.643655][ T4984] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1505.708621][T25099] netlink: 'syz.2.14142': attribute type 10 has an invalid length. [ 1505.724932][T25097] netlink: 'syz.2.14142': attribute type 10 has an invalid length. [ 1505.755942][T25097] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1505.772666][T25097] team0: Port device bond0 added [ 1505.785970][T25105] netlink: 'syz.0.14143': attribute type 1 has an invalid length. [ 1505.834546][ T4973] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1505.945082][ T4973] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1505.986337][T25121] netlink: 'syz.3.14151': attribute type 1 has an invalid length. [ 1506.047238][T25121] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1506.060469][T25121] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 1506.111349][T25127] bond7: (slave bridge4): Enslaving as an active interface with a down link [ 1506.144097][ T4973] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1506.267504][T25137] __nla_validate_parse: 10 callbacks suppressed [ 1506.267523][T25137] netlink: 220 bytes leftover after parsing attributes in process `syz.3.14156'. [ 1506.287598][ T4969] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1506.331564][T25137] netlink: 84 bytes leftover after parsing attributes in process `syz.3.14156'. [ 1506.341033][T25137] netlink: 175 bytes leftover after parsing attributes in process `syz.3.14156'. [ 1506.360285][T25140] batman_adv: batadv0: Adding interface: ipvlan0 [ 1506.369409][T25140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1506.381016][T25140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1506.391325][T25137] netlink: 120 bytes leftover after parsing attributes in process `syz.3.14156'. [ 1506.401200][T25137] netlink: 60 bytes leftover after parsing attributes in process `syz.3.14156'. [ 1506.411248][T25140] batman_adv: batadv0: Not using interface ipvlan0 (retrying later): interface not active [ 1506.421794][T25138] netlink: 120 bytes leftover after parsing attributes in process `syz.3.14156'. [ 1506.432137][T25138] netlink: 60 bytes leftover after parsing attributes in process `syz.3.14156'. [ 1506.442923][ T4973] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1506.508224][T25144] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14157'. [ 1506.521710][T25144] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14157'. [ 1506.688251][T25150] xt_ecn: cannot match TCP bits for non-tcp packets [ 1506.757782][T25153] tipc: Enabled bearer , priority 0 [ 1506.776701][T25153] syzkaller0: entered promiscuous mode [ 1506.783501][T25153] syzkaller0: entered allmulticast mode [ 1506.804151][T25153] tipc: Resetting bearer [ 1506.850126][T25161] tipc: Resetting bearer [ 1506.868294][T25161] tipc: Disabling bearer [ 1506.894311][T25157] lo speed is unknown, defaulting to 1000 [ 1506.901633][T25157] gre0 speed is unknown, defaulting to 1000 [ 1507.122575][T25179] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14167'. [ 1507.248346][T25157] wlan1 speed is unknown, defaulting to 1000 [ 1507.274646][T25183] syzkaller0: entered promiscuous mode [ 1507.280126][T25183] syzkaller0: entered allmulticast mode [ 1507.562877][T25190] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1507.581599][T25188] netlink: 'syz.0.14170': attribute type 18 has an invalid length. [ 1507.979690][T25200] bond6: entered promiscuous mode [ 1508.326276][T25195] delete_channel: no stack [ 1508.550102][T25227] tipc: Started in network mode [ 1508.555417][T25227] tipc: Node identity ac14140f, cluster identity 4711 [ 1508.571714][T25227] tipc: New replicast peer: 255.255.255.255 [ 1508.580944][T25227] tipc: Enabled bearer , priority 10 [ 1509.323016][T25284] lo speed is unknown, defaulting to 1000 [ 1509.342962][T25284] gre0 speed is unknown, defaulting to 1000 [ 1509.695629][T22077] tipc: Node number set to 2886997007 [ 1509.772077][T25284] wlan1 speed is unknown, defaulting to 1000 [ 1510.024750][T25314] netlink: 'syz.3.14212': attribute type 1 has an invalid length. [ 1510.126470][T25335] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1510.133739][T25335] IPv6: NLM_F_CREATE should be set when creating new route [ 1510.140969][T25335] IPv6: NLM_F_CREATE should be set when creating new route [ 1510.273993][ T4973] net_ratelimit: 32 callbacks suppressed [ 1510.274013][ T4973] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1510.416970][ T4984] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1510.535466][ T4984] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1510.668981][ T4984] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1510.693876][T25359] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 1510.794242][ T4969] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1510.930299][ T4984] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1511.055283][T25400] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1511.093619][ T4969] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1511.304905][ T4969] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1511.364496][T25418] __nla_validate_parse: 29 callbacks suppressed [ 1511.364513][T25418] netlink: 244 bytes leftover after parsing attributes in process `syz.3.14245'. [ 1511.423998][ T4984] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1511.577214][T25429] netlink: 16 bytes leftover after parsing attributes in process `syz.3.14247'. [ 1511.593713][T25429] netlink: 96 bytes leftover after parsing attributes in process `syz.3.14247'. [ 1511.711347][T25436] erspan1: entered promiscuous mode [ 1511.716728][T25436] erspan1: entered allmulticast mode [ 1512.596765][T25474] sit0: left promiscuous mode [ 1512.735403][T25483] netlink: 40 bytes leftover after parsing attributes in process `syz.3.14263'. [ 1512.737274][T25474] batadv0: left promiscuous mode [ 1512.783820][T25485] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14262'. [ 1512.802168][T25474] veth1: left promiscuous mode [ 1512.809363][T25474] veth1: left allmulticast mode [ 1513.031447][T25474] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1513.087307][T25474] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1513.175171][T25474] hsr0: left promiscuous mode [ 1513.390134][T25474] gre1: left allmulticast mode [ 1513.404694][T25474] gretap1: left promiscuous mode [ 1513.409761][T25474] bond0: left allmulticast mode [ 1513.418594][T25474] bridge2: left promiscuous mode [ 1513.423669][T25474] bridge2: left allmulticast mode [ 1513.449291][T25474] bond2: left promiscuous mode [ 1513.457890][T25474] bridge4: left promiscuous mode [ 1513.472268][T25474] macvtap1: left allmulticast mode [ 1513.479407][T25474] net veth1_virt_wifi virt_wifi0: left promiscuous mode [ 1513.486736][T25474] macsec2: left promiscuous mode [ 1513.497862][T25474] ip6gre2: left promiscuous mode [ 1513.504589][T25474] ip6gre2: left allmulticast mode [ 1513.523527][T25474] bond6: left allmulticast mode [ 1513.528635][T25474] bridge5: left allmulticast mode [ 1513.587031][ T4983] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1513.596345][ T4983] netdevsim netdevsim4 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1513.606076][ T4983] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1513.631161][ T4983] netdevsim netdevsim4 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1513.688793][ T4983] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1513.700522][ T4983] netdevsim netdevsim4 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1513.714361][T25507] netlink: 48 bytes leftover after parsing attributes in process `syz.3.14269'. [ 1513.741959][ T4983] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1513.768781][ T4983] netdevsim netdevsim4 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1513.830631][T25512] pim6reg: entered allmulticast mode [ 1513.853256][T25512] pim6reg: left allmulticast mode [ 1513.897690][T25516] syzkaller1: entered promiscuous mode [ 1513.903388][T25516] syzkaller1: entered allmulticast mode [ 1513.921428][T25520] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14271'. [ 1514.225725][T25534] netlink: 36 bytes leftover after parsing attributes in process `syz.2.14277'. [ 1514.289648][T25518] netlink: 32 bytes leftover after parsing attributes in process `syz.1.14274'. [ 1514.331023][T25540] netlink: 56 bytes leftover after parsing attributes in process `syz.0.14279'. [ 1514.671723][T25566] tap0: tun_chr_ioctl cmd 35111 [ 1515.008619][T25592] netlink: 'syz.2.14295': attribute type 21 has an invalid length. [ 1515.354080][ T4965] net_ratelimit: 24 callbacks suppressed [ 1515.355388][ T4965] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1515.466126][T25615] netlink: 'syz.2.14303': attribute type 10 has an invalid length. [ 1515.487681][T25618] netlink: 'syz.3.14304': attribute type 2 has an invalid length. [ 1515.514054][ T4973] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1515.616571][T25624] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1515.634340][ T4984] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1515.754379][ T4965] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1515.873896][ T4965] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1515.943132][T25637] netlink: 'syz.2.14308': attribute type 8 has an invalid length. [ 1515.960912][T25637] bond0: entered promiscuous mode [ 1515.967245][T25637] bond0: left promiscuous mode [ 1515.993551][ T4973] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1516.104453][ T4965] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1516.185248][T25648] bond0: entered promiscuous mode [ 1516.190713][T25648] bond0: left promiscuous mode [ 1516.224026][ T4984] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1516.309590][T25653] netlink: 'syz.2.14312': attribute type 3 has an invalid length. [ 1516.324312][T25653] tipc: Enabled bearer , priority 0 [ 1516.339099][T25653] syzkaller0: entered allmulticast mode [ 1516.363676][ T4984] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1516.388857][T25653] tipc: Resetting bearer [ 1516.395860][T25659] netlink: 'syz.1.14313': attribute type 9 has an invalid length. [ 1516.406035][T25652] tipc: Resetting bearer [ 1516.427944][T25652] tipc: Disabling bearer [ 1516.631053][T25675] __nla_validate_parse: 15 callbacks suppressed [ 1516.631074][T25675] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14318'. [ 1516.701814][T25679] netlink: 16 bytes leftover after parsing attributes in process `syz.3.14322'. [ 1516.757791][T25680] netlink: 'syz.0.14320': attribute type 21 has an invalid length. [ 1516.784618][T25680] netlink: 128 bytes leftover after parsing attributes in process `syz.0.14320'. [ 1516.915734][T25688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1516.944004][T25688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1516.968405][T25688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan0 [ 1517.000550][T25688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1517.087660][T25688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1517.099981][T25688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1517.110639][T25680] netlink: 3 bytes leftover after parsing attributes in process `syz.0.14320'. [ 1517.119976][T25685] lo speed is unknown, defaulting to 1000 [ 1517.120233][T25704] tipc: Enabling of bearer rejected, failed to enable media [ 1517.149958][T25685] gre0 speed is unknown, defaulting to 1000 [ 1517.153789][T25696] netlink: 60 bytes leftover after parsing attributes in process `syz.2.14326'. [ 1517.165115][T25696] netlink: 35 bytes leftover after parsing attributes in process `syz.2.14326'. [ 1517.189696][ T3554] lec:lec_start_xmit: lec0:No lecd attached [ 1517.297973][T25713] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14329'. [ 1517.333869][T25713] : renamed from bond_slave_0 [ 1517.401376][T25720] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14330'. [ 1517.463563][T25722] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14332'. [ 1517.472979][T25725] netlink: 16 bytes leftover after parsing attributes in process `syz.3.14330'. [ 1517.483725][T25725] tipc: Invalid UDP bearer configuration [ 1517.483768][T25725] tipc: Enabling of bearer rejected, failed to enable media [ 1517.581743][T25727] netlink: 'syz.0.14333': attribute type 11 has an invalid length. [ 1517.634200][T25685] wlan1 speed is unknown, defaulting to 1000 [ 1517.733002][T25735] delete_channel: no stack [ 1517.793923][ T30] audit: type=1800 audit(1773752084.808:24): pid=25723 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.14331" name="memory.events" dev="tmpfs" ino=2478 res=0 errno=0 [ 1518.228353][T25751] tipc: Enabled bearer , priority 0 [ 1518.241467][T25751] syzkaller0: entered promiscuous mode [ 1518.248651][T25751] syzkaller0: entered allmulticast mode [ 1518.278837][ T5157] block nbd0: Possible stuck request ffff8880418f2800: control (read@0,1024B). Runtime 150 seconds [ 1518.290028][ T5157] block nbd0: Possible stuck request ffff8880418f2a00: control (read@1024,1024B). Runtime 150 seconds [ 1518.303300][ T5157] block nbd0: Possible stuck request ffff8880418f2c00: control (read@2048,1024B). Runtime 150 seconds [ 1518.307705][T25751] tipc: Resetting bearer [ 1518.315378][ T5157] block nbd0: Possible stuck request ffff8880418f2e00: control (read@3072,1024B). Runtime 150 seconds [ 1518.382142][T25750] tipc: Resetting bearer [ 1518.430279][T25750] tipc: Disabling bearer [ 1519.717973][T25842] xt_hashlimit: size too large, truncated to 1048576 [ 1519.836756][T25849] ÿ: renamed from bond_slave_0 [ 1520.136617][T25855] lo speed is unknown, defaulting to 1000 [ 1520.154117][T25855] gre0 speed is unknown, defaulting to 1000 [ 1520.463631][ T4965] net_ratelimit: 26 callbacks suppressed [ 1520.463651][ T4965] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1520.495917][T25855] wlan1 speed is unknown, defaulting to 1000 [ 1520.604415][ T4965] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1520.755352][T25880] openvswitch: netlink: Flow actions attr not present in new flow. [ 1520.783734][ T4966] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1520.973531][ T4969] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1521.098985][ T4969] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1521.239101][ T4965] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1521.413634][ T4969] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1521.525850][ T4969] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1521.643834][ T4965] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1521.769129][T25920] ipvlan1: entered promiscuous mode [ 1521.968744][T25927] bond5: option lp_interval: invalid value (0) [ 1521.992664][T25927] bond5: option lp_interval: allowed values 1 - 2147483647 [ 1522.034295][T25927] bond5 (unregistering): Released all slaves [ 1522.148995][T25946] __nla_validate_parse: 16 callbacks suppressed [ 1522.149012][T25946] netlink: 24 bytes leftover after parsing attributes in process `syz.4.14394'. [ 1522.178593][T25945] netlink: 76 bytes leftover after parsing attributes in process `syz.4.14394'. [ 1522.499717][T25961] netlink: 32 bytes leftover after parsing attributes in process `syz.2.14397'. [ 1522.636376][T25965] netlink: 72 bytes leftover after parsing attributes in process `syz.0.14399'. [ 1522.692289][T25968] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14400'. [ 1522.743693][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5550 ms [ 1522.751765][ C0] lec:lec_tx_timeout: lec0 [ 1522.799751][T25973] macsec0: entered allmulticast mode [ 1522.847939][T25973] veth1_macvtap: entered allmulticast mode [ 1522.873618][T25973] macsec0: left allmulticast mode [ 1522.892269][T25973] veth1_macvtap: left allmulticast mode [ 1522.914086][T25973] netlink: 'syz.2.14402': attribute type 1 has an invalid length. [ 1522.932229][T25973] netlink: 'syz.2.14402': attribute type 1 has an invalid length. [ 1522.948341][T25973] netlink: 9172 bytes leftover after parsing attributes in process `syz.2.14402'. [ 1523.449020][T26005] netlink: 20 bytes leftover after parsing attributes in process `syz.2.14408'. [ 1523.608048][T26020] netlink: 32 bytes leftover after parsing attributes in process `syz.1.14410'. [ 1523.782663][T26027] netlink: 'syz.4.14414': attribute type 12 has an invalid length. [ 1523.905110][T26036] netlink: 'syz.3.14416': attribute type 11 has an invalid length. [ 1524.081423][T26053] hsr0: entered promiscuous mode [ 1524.094890][T26052] hsr0: left promiscuous mode [ 1524.195565][T26060] netlink: 'syz.3.14423': attribute type 1 has an invalid length. [ 1524.252810][T26065] FAULT_INJECTION: forcing a failure. [ 1524.252810][T26065] name failslab, interval 1, probability 0, space 0, times 0 [ 1524.302724][T26065] CPU: 0 UID: 0 PID: 26065 Comm: syz.0.14425 Not tainted syzkaller #0 PREEMPT(full) [ 1524.302752][T26065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1524.302764][T26065] Call Trace: [ 1524.302772][T26065] [ 1524.302781][T26065] dump_stack_lvl+0xe8/0x150 [ 1524.302814][T26065] should_fail_ex+0x412/0x560 [ 1524.302843][T26065] should_failslab+0xa8/0x100 [ 1524.302869][T26065] __kmalloc_cache_noprof+0x88/0x660 [ 1524.302891][T26065] ? rtnl_newlink+0x136/0x1be0 [ 1524.302923][T26065] rtnl_newlink+0x136/0x1be0 [ 1524.302947][T26065] ? unwind_next_frame+0xa5/0x23c0 [ 1524.302982][T26065] ? __pfx_rtnl_newlink+0x10/0x10 [ 1524.303035][T26065] ? __lock_acquire+0x6b5/0x2cf0 [ 1524.303067][T26065] ? __lock_acquire+0x6b5/0x2cf0 [ 1524.303091][T26065] ? __lock_acquire+0x6b5/0x2cf0 [ 1524.303123][T26065] ? unwind_next_frame+0xa5/0x23c0 [ 1524.303168][T26065] ? __lock_acquire+0x6b5/0x2cf0 [ 1524.303192][T26065] ? is_bpf_text_address+0x26/0x2b0 [ 1524.303215][T26065] ? kernel_text_address+0xa5/0xe0 [ 1524.303260][T26065] ? __pfx_rtnl_newlink+0x10/0x10 [ 1524.303283][T26065] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1524.303311][T26065] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1524.303334][T26065] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1524.303360][T26065] ? __lock_acquire+0x6b5/0x2cf0 [ 1524.303389][T26065] netlink_rcv_skb+0x232/0x4b0 [ 1524.303416][T26065] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1524.303438][T26065] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1524.303468][T26065] ? netlink_deliver_tap+0x2e/0x1b0 [ 1524.303497][T26065] netlink_unicast+0x80f/0x9b0 [ 1524.303524][T26065] ? __pfx_netlink_unicast+0x10/0x10 [ 1524.303546][T26065] ? netlink_sendmsg+0x650/0xb40 [ 1524.303568][T26065] ? skb_put+0x11b/0x210 [ 1524.303601][T26065] netlink_sendmsg+0x813/0xb40 [ 1524.303633][T26065] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1524.303660][T26065] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1524.303684][T26065] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1524.303708][T26065] ____sys_sendmsg+0x972/0x9f0 [ 1524.303735][T26065] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1524.303762][T26065] ? import_iovec+0x73/0xa0 [ 1524.303793][T26065] ___sys_sendmsg+0x2a5/0x360 [ 1524.303817][T26065] ? __pfx____sys_sendmsg+0x10/0x10 [ 1524.303869][T26065] ? __fget_files+0x2a/0x420 [ 1524.303893][T26065] ? __fget_files+0x3a0/0x420 [ 1524.303927][T26065] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1524.303949][T26065] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1524.303976][T26065] ? __pfx_ksys_write+0x10/0x10 [ 1524.304007][T26065] do_syscall_64+0x14d/0xf80 [ 1524.304031][T26065] ? trace_irq_disable+0x3b/0x150 [ 1524.304055][T26065] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1524.304074][T26065] ? clear_bhb_loop+0x40/0x90 [ 1524.304095][T26065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1524.304113][T26065] RIP: 0033:0x7fb26ff9c799 [ 1524.304131][T26065] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1524.304146][T26065] RSP: 002b:00007fb270e0f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1524.304165][T26065] RAX: ffffffffffffffda RBX: 00007fb270215fa0 RCX: 00007fb26ff9c799 [ 1524.304178][T26065] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 1524.304189][T26065] RBP: 00007fb270e0f090 R08: 0000000000000000 R09: 0000000000000000 [ 1524.304200][T26065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1524.304211][T26065] R13: 00007fb270216038 R14: 00007fb270215fa0 R15: 00007fff48b00528 [ 1524.304241][T26065] [ 1525.057565][T26075] team0: Port device macvlan1 removed [ 1525.093069][T26082] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 1525.135085][T26087] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 1525.171275][T26096] syzkaller1: left promiscuous mode [ 1525.180613][T26096] syzkaller1: left allmulticast mode [ 1525.196164][T26084] netlink: 'syz.3.14429': attribute type 4 has an invalid length. [ 1525.389975][T26107] lo speed is unknown, defaulting to 1000 [ 1525.401334][T26107] gre0 speed is unknown, defaulting to 1000 [ 1525.501478][T26119] FAULT_INJECTION: forcing a failure. [ 1525.501478][T26119] name failslab, interval 1, probability 0, space 0, times 0 [ 1525.515353][T26119] CPU: 1 UID: 0 PID: 26119 Comm: syz.0.14437 Not tainted syzkaller #0 PREEMPT(full) [ 1525.515378][T26119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1525.515389][T26119] Call Trace: [ 1525.515397][T26119] [ 1525.515405][T26119] dump_stack_lvl+0xe8/0x150 [ 1525.515435][T26119] should_fail_ex+0x412/0x560 [ 1525.515461][T26119] ? __d_alloc+0x37/0x6f0 [ 1525.515479][T26119] should_failslab+0xa8/0x100 [ 1525.515503][T26119] kmem_cache_alloc_lru_noprof+0x87/0x640 [ 1525.515530][T26119] __d_alloc+0x37/0x6f0 [ 1525.515554][T26119] d_alloc+0x4b/0x190 [ 1525.515569][T26119] ? lookup_one_qstr_excl+0xc8/0x360 [ 1525.515597][T26119] lookup_one_qstr_excl+0xdc/0x360 [ 1525.515621][T26119] ? lookup_noperm_common+0x245/0x430 [ 1525.515650][T26119] start_dirop+0x5c/0x90 [ 1525.515675][T26119] simple_start_creating+0xcc/0x110 [ 1525.515701][T26119] ? __pfx_simple_start_creating+0x10/0x10 [ 1525.515728][T26119] ? do_raw_spin_unlock+0xf5/0x210 [ 1525.515747][T26119] ? mntput+0x65/0xc0 [ 1525.515773][T26119] debugfs_start_creating+0xdb/0x1a0 [ 1525.515908][T26119] __debugfs_create_file+0x6f/0x400 [ 1525.515944][T26119] debugfs_create_file_full+0x3f/0x60 [ 1525.515973][T26119] ref_tracker_dir_debugfs+0x197/0x360 [ 1525.515998][T26119] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 1525.516050][T26119] ? __kvmalloc_node_noprof+0x545/0x8a0 [ 1525.516071][T26119] ? alloc_netdev_mqs+0xa6/0x11b0 [ 1525.516096][T26119] ? __raw_spin_lock_init+0x45/0x100 [ 1525.516117][T26119] alloc_netdev_mqs+0x272/0x11b0 [ 1525.516137][T26119] ? __pfx_vti_tunnel_setup+0x10/0x10 [ 1525.516193][T26119] rtnl_create_link+0x31f/0xd70 [ 1525.516221][T26119] rtnl_newlink_create+0x277/0xb70 [ 1525.516247][T26119] ? __pfx___nla_validate_parse+0x10/0x10 [ 1525.516283][T26119] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 1525.516313][T26119] ? __pfx___mutex_lock+0x10/0x10 [ 1525.516350][T26119] ? ns_capable+0x89/0xe0 [ 1525.516377][T26119] rtnl_newlink+0x1666/0x1be0 [ 1525.516416][T26119] ? __pfx_rtnl_newlink+0x10/0x10 [ 1525.516450][T26119] ? __lock_acquire+0x6b5/0x2cf0 [ 1525.516480][T26119] ? __lock_acquire+0x6b5/0x2cf0 [ 1525.516504][T26119] ? __lock_acquire+0x6b5/0x2cf0 [ 1525.516537][T26119] ? unwind_next_frame+0xa5/0x23c0 [ 1525.516583][T26119] ? __lock_acquire+0x6b5/0x2cf0 [ 1525.516608][T26119] ? is_bpf_text_address+0x26/0x2b0 [ 1525.516630][T26119] ? kernel_text_address+0xa5/0xe0 [ 1525.516677][T26119] ? __pfx_rtnl_newlink+0x10/0x10 [ 1525.516701][T26119] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1525.516728][T26119] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1525.516750][T26119] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1525.516778][T26119] ? __lock_acquire+0x6b5/0x2cf0 [ 1525.516810][T26119] netlink_rcv_skb+0x232/0x4b0 [ 1525.516835][T26119] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1525.516861][T26119] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1525.516897][T26119] ? netlink_deliver_tap+0x2e/0x1b0 [ 1525.516935][T26119] netlink_unicast+0x80f/0x9b0 [ 1525.516966][T26119] ? __pfx_netlink_unicast+0x10/0x10 [ 1525.516990][T26119] ? netlink_sendmsg+0x650/0xb40 [ 1525.517012][T26119] ? skb_put+0x11b/0x210 [ 1525.517039][T26119] netlink_sendmsg+0x813/0xb40 [ 1525.517072][T26119] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1525.517099][T26119] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1525.517124][T26119] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1525.517147][T26119] ____sys_sendmsg+0x972/0x9f0 [ 1525.517175][T26119] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1525.517203][T26119] ? import_iovec+0x73/0xa0 [ 1525.517233][T26119] ___sys_sendmsg+0x2a5/0x360 [ 1525.517258][T26119] ? __pfx____sys_sendmsg+0x10/0x10 [ 1525.517313][T26119] ? __fget_files+0x2a/0x420 [ 1525.517336][T26119] ? __fget_files+0x3a0/0x420 [ 1525.517371][T26119] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1525.517393][T26119] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1525.517421][T26119] ? __pfx_ksys_write+0x10/0x10 [ 1525.517453][T26119] do_syscall_64+0x14d/0xf80 [ 1525.517477][T26119] ? trace_irq_disable+0x3b/0x150 [ 1525.517500][T26119] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1525.517519][T26119] ? clear_bhb_loop+0x40/0x90 [ 1525.517542][T26119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1525.517559][T26119] RIP: 0033:0x7fb26ff9c799 [ 1525.517577][T26119] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1525.517593][T26119] RSP: 002b:00007fb270e0f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1525.517612][T26119] RAX: ffffffffffffffda RBX: 00007fb270215fa0 RCX: 00007fb26ff9c799 [ 1525.517625][T26119] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 1525.517637][T26119] RBP: 00007fb270e0f090 R08: 0000000000000000 R09: 0000000000000000 [ 1525.517648][T26119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1525.517658][T26119] R13: 00007fb270216038 R14: 00007fb270215fa0 R15: 00007fff48b00528 [ 1525.517687][T26119] [ 1526.028315][T26107] wlan1 speed is unknown, defaulting to 1000 [ 1526.050724][ T4969] net_ratelimit: 28 callbacks suppressed [ 1526.050744][ T4969] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1526.157199][T26132] xt_TCPMSS: Only works on TCP SYN packets [ 1526.213979][ T4964] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1526.446705][ T4983] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1526.485151][T26150] netlink: 20 bytes leftover after parsing attributes in process `syz.1.14445'. [ 1526.579857][ T4969] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1526.704840][ T4969] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1526.742961][T26163] netlink: 16 bytes leftover after parsing attributes in process `syz.0.14449'. [ 1526.835368][ T4966] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1527.036079][T26186] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 1527.177355][T26178] FAULT_INJECTION: forcing a failure. [ 1527.177355][T26178] name failslab, interval 1, probability 0, space 0, times 0 [ 1527.192047][T26178] CPU: 1 UID: 0 PID: 26178 Comm: syz.3.14452 Not tainted syzkaller #0 PREEMPT(full) [ 1527.192072][T26178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1527.192083][T26178] Call Trace: [ 1527.192090][T26178] [ 1527.192098][T26178] dump_stack_lvl+0xe8/0x150 [ 1527.192127][T26178] should_fail_ex+0x412/0x560 [ 1527.192152][T26178] ? alloc_inode+0x6a/0x1b0 [ 1527.192177][T26178] should_failslab+0xa8/0x100 [ 1527.192201][T26178] kmem_cache_alloc_lru_noprof+0x87/0x640 [ 1527.192228][T26178] ? simple_start_creating+0xcc/0x110 [ 1527.192260][T26178] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 1527.192287][T26178] alloc_inode+0x6a/0x1b0 [ 1527.192311][T26178] new_inode+0x22/0x170 [ 1527.192340][T26178] __debugfs_create_file+0xb8/0x400 [ 1527.192369][T26178] debugfs_create_file_full+0x3f/0x60 [ 1527.192398][T26178] ref_tracker_dir_debugfs+0x197/0x360 [ 1527.192423][T26178] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 1527.192475][T26178] ? __kvmalloc_node_noprof+0x545/0x8a0 [ 1527.192496][T26178] ? alloc_netdev_mqs+0xa6/0x11b0 [ 1527.192521][T26178] ? __raw_spin_lock_init+0x45/0x100 [ 1527.192543][T26178] alloc_netdev_mqs+0x272/0x11b0 [ 1527.192562][T26178] ? __pfx_vti_tunnel_setup+0x10/0x10 [ 1527.192588][T26178] rtnl_create_link+0x31f/0xd70 [ 1527.192616][T26178] rtnl_newlink_create+0x277/0xb70 [ 1527.192647][T26178] ? __mutex_lock+0x5ac/0x1300 [ 1527.192680][T26178] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 1527.192710][T26178] ? __pfx___mutex_lock+0x10/0x10 [ 1527.192746][T26178] ? ns_capable+0x89/0xe0 [ 1527.192772][T26178] rtnl_newlink+0x1666/0x1be0 [ 1527.192812][T26178] ? __pfx_rtnl_newlink+0x10/0x10 [ 1527.192846][T26178] ? __lock_acquire+0x6b5/0x2cf0 [ 1527.192876][T26178] ? __lock_acquire+0x6b5/0x2cf0 [ 1527.192900][T26178] ? __lock_acquire+0x6b5/0x2cf0 [ 1527.192934][T26178] ? unwind_next_frame+0xa5/0x23c0 [ 1527.192983][T26178] ? __lock_acquire+0x6b5/0x2cf0 [ 1527.193008][T26178] ? is_bpf_text_address+0x26/0x2b0 [ 1527.193032][T26178] ? kernel_text_address+0xa5/0xe0 [ 1527.193080][T26178] ? __pfx_rtnl_newlink+0x10/0x10 [ 1527.193103][T26178] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1527.193131][T26178] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1527.193154][T26178] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1527.193182][T26178] ? __lock_acquire+0x6b5/0x2cf0 [ 1527.193214][T26178] netlink_rcv_skb+0x232/0x4b0 [ 1527.193245][T26178] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1527.193271][T26178] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1527.193307][T26178] ? netlink_deliver_tap+0x2e/0x1b0 [ 1527.193339][T26178] netlink_unicast+0x80f/0x9b0 [ 1527.193371][T26178] ? __pfx_netlink_unicast+0x10/0x10 [ 1527.193395][T26178] ? netlink_sendmsg+0x650/0xb40 [ 1527.193420][T26178] ? skb_put+0x11b/0x210 [ 1527.193446][T26178] netlink_sendmsg+0x813/0xb40 [ 1527.193475][T26178] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1527.193500][T26178] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1527.193524][T26178] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1527.193545][T26178] ____sys_sendmsg+0x972/0x9f0 [ 1527.193572][T26178] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1527.193597][T26178] ? import_iovec+0x73/0xa0 [ 1527.193626][T26178] ___sys_sendmsg+0x2a5/0x360 [ 1527.193647][T26178] ? __pfx____sys_sendmsg+0x10/0x10 [ 1527.193688][T26178] ? __fget_files+0x2a/0x420 [ 1527.193710][T26178] ? __fget_files+0x3a0/0x420 [ 1527.193744][T26178] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1527.193766][T26178] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1527.193795][T26178] ? __pfx_ksys_write+0x10/0x10 [ 1527.193828][T26178] do_syscall_64+0x14d/0xf80 [ 1527.193852][T26178] ? trace_irq_disable+0x3b/0x150 [ 1527.193877][T26178] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1527.193895][T26178] ? clear_bhb_loop+0x40/0x90 [ 1527.193918][T26178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1527.193936][T26178] RIP: 0033:0x7fad0139c799 [ 1527.193954][T26178] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1527.193969][T26178] RSP: 002b:00007fad02254028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1527.193989][T26178] RAX: ffffffffffffffda RBX: 00007fad01615fa0 RCX: 00007fad0139c799 [ 1527.194003][T26178] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 1527.194015][T26178] RBP: 00007fad02254090 R08: 0000000000000000 R09: 0000000000000000 [ 1527.194026][T26178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1527.194037][T26178] R13: 00007fad01616038 R14: 00007fad01615fa0 R15: 00007ffe3e10fc28 [ 1527.194069][T26178] [ 1527.642243][T26178] debugfs: out of free dentries, can not create file 'netdev@ffff88808d020620' [ 1527.693990][ T4983] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1527.813842][ T4969] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1527.953792][ T4964] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1528.118854][ T4969] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1528.178122][T26213] lo speed is unknown, defaulting to 1000 [ 1528.214099][T26213] gre0 speed is unknown, defaulting to 1000 [ 1528.235126][T26217] lo speed is unknown, defaulting to 1000 [ 1528.485420][T26237] __nla_validate_parse: 3 callbacks suppressed [ 1528.485443][T26237] netlink: 32 bytes leftover after parsing attributes in process `syz.4.14463'. [ 1528.560431][T26217] gre0 speed is unknown, defaulting to 1000 [ 1528.561839][T26213] wlan1 speed is unknown, defaulting to 1000 [ 1528.717186][T26246] syzkaller0: entered promiscuous mode [ 1528.732961][T26246] syzkaller0: entered allmulticast mode [ 1528.742510][T26246] tc action pedit offset must be on 32 bit boundaries [ 1528.915846][T26253] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14468'. [ 1528.933670][T26249] netlink: 'syz.1.14467': attribute type 13 has an invalid length. [ 1528.978200][T26249] gre0: left promiscuous mode [ 1528.982924][T26249] gre0: left allmulticast mode [ 1529.117455][T26217] wlan1 speed is unknown, defaulting to 1000 [ 1529.596765][T26285] netlink: 148 bytes leftover after parsing attributes in process `syz.3.14475'. [ 1529.818902][T26290] lo speed is unknown, defaulting to 1000 [ 1529.858732][T26290] gre0 speed is unknown, defaulting to 1000 [ 1530.096901][T26306] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14481'. [ 1530.117186][T26306] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14481'. [ 1530.323338][T26290] wlan1 speed is unknown, defaulting to 1000 [ 1530.387455][T26320] netlink: 'syz.0.14484': attribute type 10 has an invalid length. [ 1530.451513][T26328] netlink: 28 bytes leftover after parsing attributes in process `syz.2.14487'. [ 1530.496243][T26320] netlink: 'syz.0.14484': attribute type 9 has an invalid length. [ 1530.519059][T26320] netlink: 'syz.0.14484': attribute type 11 has an invalid length. [ 1530.521187][T26327] vlan0: entered allmulticast mode [ 1530.530947][T26320] netlink: 171104 bytes leftover after parsing attributes in process `syz.0.14484'. [ 1530.758826][T26357] netlink: 104 bytes leftover after parsing attributes in process `syz.2.14493'. [ 1530.771118][T26355] netlink: 'syz.4.14491': attribute type 1 has an invalid length. [ 1530.772579][T26354] netlink: 'syz.0.14492': attribute type 39 has an invalid length. [ 1530.779191][T26352] netlink: 'syz.4.14491': attribute type 1 has an invalid length. [ 1530.812543][T26355] netlink: 280 bytes leftover after parsing attributes in process `syz.4.14491'. [ 1530.823134][T26352] netlink: 280 bytes leftover after parsing attributes in process `syz.4.14491'. [ 1531.133612][ T4969] net_ratelimit: 22 callbacks suppressed [ 1531.133630][ T4969] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1531.286927][ T4973] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1531.364402][T26382] 0ªX¹¦À: renamed from caif0 [ 1531.394144][T26382] 0ªX¹¦À: entered allmulticast mode [ 1531.399374][T26382] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 1531.606196][T26399] netlink: 'syz.3.14506': attribute type 1 has an invalid length. [ 1531.682482][ T4964] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1531.793629][ T4969] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1531.913864][ T4964] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1532.023896][ T4968] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1532.143977][ T4968] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1532.295540][T26436] netlink: 'syz.3.14515': attribute type 1 has an invalid length. [ 1532.296333][ T4964] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1532.310971][T26436] netlink: 'syz.3.14515': attribute type 2 has an invalid length. [ 1532.466207][T26450] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1532.491536][ T4964] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1532.547350][T26457] .`: (slave dummy0): Enslaving as an active interface with an up link [ 1532.887004][T26475] lo speed is unknown, defaulting to 1000 [ 1532.894563][T26475] gre0 speed is unknown, defaulting to 1000 [ 1533.117010][T26475] wlan1 speed is unknown, defaulting to 1000 [ 1534.484357][T26542] __nla_validate_parse: 43 callbacks suppressed [ 1534.484376][T26542] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14548'. [ 1534.488275][T26538] netlink: 28 bytes leftover after parsing attributes in process `syz.0.14546'. [ 1534.919451][T26558] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1500) ! [ 1534.951311][T26565] xt_connbytes: Forcing CT accounting to be enabled [ 1535.007557][T26558] syzkaller0: entered promiscuous mode [ 1535.018849][T26558] syzkaller0: entered allmulticast mode [ 1535.164812][T26568] lo speed is unknown, defaulting to 1000 [ 1535.176959][T26568] gre0 speed is unknown, defaulting to 1000 [ 1535.787216][T26586] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 1535.952981][T26598] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 1536.018226][T26602] validate_nla: 4 callbacks suppressed [ 1536.018245][T26602] netlink: 'syz.3.14562': attribute type 4 has an invalid length. [ 1536.034077][T26602] netlink: 'syz.3.14562': attribute type 4 has an invalid length. [ 1536.118868][T26568] wlan1 speed is unknown, defaulting to 1000 [ 1536.142114][T26605] netlink: 'syz.0.14563': attribute type 1 has an invalid length. [ 1536.162089][T26607] netlink: 20 bytes leftover after parsing attributes in process `syz.1.14564'. [ 1536.188226][T26605] bond6: entered promiscuous mode [ 1536.194891][T26605] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1536.224061][T26607] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14564'. [ 1536.257418][T26605] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1536.281275][T26605] bond6: (slave bond7): making interface the new active one [ 1536.299408][T26605] bond7: entered promiscuous mode [ 1536.325245][T26605] bond6: (slave bond7): Enslaving as an active interface with an up link [ 1536.426320][ T4973] net_ratelimit: 31 callbacks suppressed [ 1536.426340][ T4973] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1536.573823][ T4973] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1536.684291][ T4973] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1536.799344][T26624] vlan0: entered promiscuous mode [ 1536.805247][T26624] vlan0: entered allmulticast mode [ 1536.810540][T26624] hsr_slave_1: entered allmulticast mode [ 1536.823723][ T4964] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1536.850231][T26624] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14572'. [ 1536.859469][T26624] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14572'. [ 1536.870522][T26624] netlink: 'syz.1.14572': attribute type 11 has an invalid length. [ 1536.905424][T26624] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14572'. [ 1536.931947][T26624] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14572'. [ 1536.944914][T26624] netlink: 'syz.1.14572': attribute type 11 has an invalid length. [ 1536.998327][ T4964] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1537.194599][T26648] netlink: 24 bytes leftover after parsing attributes in process `syz.1.14575'. [ 1537.211646][T26649] netlink: 16 bytes leftover after parsing attributes in process `syz.2.14576'. [ 1537.687801][T26648] bond7: entered promiscuous mode [ 1537.693350][T26648] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1537.707733][T26648] bond7 (unregistering): Released all slaves [ 1537.741530][T26653] FAULT_INJECTION: forcing a failure. [ 1537.741530][T26653] name failslab, interval 1, probability 0, space 0, times 0 [ 1537.756416][T26653] CPU: 0 UID: 0 PID: 26653 Comm: syz.4.14577 Not tainted syzkaller #0 PREEMPT(full) [ 1537.756439][T26653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1537.756449][T26653] Call Trace: [ 1537.756457][T26653] [ 1537.756465][T26653] dump_stack_lvl+0xe8/0x150 [ 1537.756496][T26653] should_fail_ex+0x412/0x560 [ 1537.756523][T26653] should_failslab+0xa8/0x100 [ 1537.756547][T26653] __kvmalloc_node_noprof+0x178/0x8a0 [ 1537.756573][T26653] ? alloc_netdev_mqs+0x8a6/0x11b0 [ 1537.756602][T26653] alloc_netdev_mqs+0x8a6/0x11b0 [ 1537.756628][T26653] rtnl_create_link+0x31f/0xd70 [ 1537.756654][T26653] rtnl_newlink_create+0x277/0xb70 [ 1537.756677][T26653] ? __pfx___nla_validate_parse+0x10/0x10 [ 1537.756708][T26653] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 1537.756736][T26653] ? __pfx___mutex_lock+0x10/0x10 [ 1537.756778][T26653] ? ns_capable+0x89/0xe0 [ 1537.756804][T26653] rtnl_newlink+0x1666/0x1be0 [ 1537.756842][T26653] ? __pfx_rtnl_newlink+0x10/0x10 [ 1537.756874][T26653] ? __lock_acquire+0x6b5/0x2cf0 [ 1537.756902][T26653] ? __lock_acquire+0x6b5/0x2cf0 [ 1537.756925][T26653] ? __lock_acquire+0x6b5/0x2cf0 [ 1537.756956][T26653] ? unwind_next_frame+0xa5/0x23c0 [ 1537.757002][T26653] ? __lock_acquire+0x6b5/0x2cf0 [ 1537.757024][T26653] ? is_bpf_text_address+0x26/0x2b0 [ 1537.757044][T26653] ? kernel_text_address+0xa5/0xe0 [ 1537.757081][T26653] ? __pfx_rtnl_newlink+0x10/0x10 [ 1537.757100][T26653] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1537.757122][T26653] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1537.757141][T26653] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1537.757162][T26653] ? __lock_acquire+0x6b5/0x2cf0 [ 1537.757187][T26653] netlink_rcv_skb+0x232/0x4b0 [ 1537.757208][T26653] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1537.757229][T26653] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1537.757257][T26653] ? netlink_deliver_tap+0x2e/0x1b0 [ 1537.757282][T26653] netlink_unicast+0x80f/0x9b0 [ 1537.757305][T26653] ? __pfx_netlink_unicast+0x10/0x10 [ 1537.757324][T26653] ? netlink_sendmsg+0x650/0xb40 [ 1537.757341][T26653] ? skb_put+0x11b/0x210 [ 1537.757364][T26653] netlink_sendmsg+0x813/0xb40 [ 1537.757390][T26653] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1537.757412][T26653] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1537.757431][T26653] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1537.757450][T26653] ____sys_sendmsg+0x972/0x9f0 [ 1537.757471][T26653] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1537.757492][T26653] ? import_iovec+0x73/0xa0 [ 1537.757516][T26653] ___sys_sendmsg+0x2a5/0x360 [ 1537.757535][T26653] ? __pfx____sys_sendmsg+0x10/0x10 [ 1537.757576][T26653] ? __fget_files+0x2a/0x420 [ 1537.757595][T26653] ? __fget_files+0x3a0/0x420 [ 1537.757622][T26653] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1537.757638][T26653] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1537.757660][T26653] ? __pfx_ksys_write+0x10/0x10 [ 1537.757684][T26653] do_syscall_64+0x14d/0xf80 [ 1537.757703][T26653] ? trace_irq_disable+0x3b/0x150 [ 1537.757722][T26653] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1537.757737][T26653] ? clear_bhb_loop+0x40/0x90 [ 1537.757760][T26653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1537.757774][T26653] RIP: 0033:0x7f4c2af9c799 [ 1537.757788][T26653] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1537.757801][T26653] RSP: 002b:00007f4c2beef028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1537.757816][T26653] RAX: ffffffffffffffda RBX: 00007f4c2b215fa0 RCX: 00007f4c2af9c799 [ 1537.757827][T26653] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 1537.757837][T26653] RBP: 00007f4c2beef090 R08: 0000000000000000 R09: 0000000000000000 [ 1537.757845][T26653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1537.757854][T26653] R13: 00007f4c2b216038 R14: 00007f4c2b215fa0 R15: 00007ffe88c1e828 [ 1537.757878][T26653] [ 1537.769638][ T4973] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1538.175714][T26662] tipc: Enabling of bearer rejected, failed to enable media [ 1538.284028][ T4964] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1538.394299][ T4964] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1538.491486][T26679] lo speed is unknown, defaulting to 1000 [ 1538.565296][T26689] lo speed is unknown, defaulting to 1000 [ 1538.575710][T26679] gre0 speed is unknown, defaulting to 1000 [ 1538.576417][ T4973] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1538.713585][T26704] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1539.790713][T26689] gre0 speed is unknown, defaulting to 1000 [ 1539.806466][T26679] wlan1 speed is unknown, defaulting to 1000 [ 1539.812919][T26735] __nla_validate_parse: 5 callbacks suppressed [ 1539.812935][T26735] netlink: 76 bytes leftover after parsing attributes in process `syz.0.14601'. [ 1540.128171][T26754] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14605'. [ 1540.296954][T26758] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1540.342379][T26755] lo speed is unknown, defaulting to 1000 [ 1540.371037][T26750] lo speed is unknown, defaulting to 1000 [ 1540.380198][T26760] netlink: 28 bytes leftover after parsing attributes in process `syz.4.14605'. [ 1540.420478][T26755] gre0 speed is unknown, defaulting to 1000 [ 1540.421843][T26689] wlan1 speed is unknown, defaulting to 1000 [ 1540.916468][T26750] gre0 speed is unknown, defaulting to 1000 [ 1540.968092][T26770] netlink: 'syz.3.14609': attribute type 1 has an invalid length. [ 1540.996373][T26770] netlink: 1008 bytes leftover after parsing attributes in process `syz.3.14609'. [ 1541.227971][T26755] wlan1 speed is unknown, defaulting to 1000 [ 1541.289871][T26750] wlan1 speed is unknown, defaulting to 1000 [ 1541.609862][T26783] netlink: 'syz.4.14613': attribute type 2 has an invalid length. [ 1541.724076][ T4969] net_ratelimit: 18 callbacks suppressed [ 1541.724094][ T4969] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1541.869064][ T4983] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1542.006866][ T4969] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1542.135621][ T4968] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1542.160508][T26795] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14619'. [ 1542.168487][T26802] ip6tnl6: entered allmulticast mode [ 1542.246330][ T4983] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1542.516552][ T4983] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1542.606170][T26816] block nbd4: NBD_DISCONNECT [ 1542.632353][T26820] syzkaller0: entered promiscuous mode [ 1542.638823][T26820] syzkaller0: entered allmulticast mode [ 1542.693135][T26811] 8021q: adding VLAN 0 to HW filter on device team0 [ 1542.708422][T26811] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1542.725196][T26821] bridge0: port 1(veth0_to_bridge) entered blocking state [ 1542.747694][T26821] bridge0: port 1(veth0_to_bridge) entered disabled state [ 1542.761159][T26821] veth0_to_bridge: entered allmulticast mode [ 1542.768731][T26821] veth0_to_bridge: entered promiscuous mode [ 1542.783554][ T4966] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1542.857995][T26828] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1542.893928][ T4968] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1542.949265][T26833] netlink: 24 bytes leftover after parsing attributes in process `syz.1.14631'. [ 1543.015048][ T4968] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1543.094704][T26840] netlink: 224 bytes leftover after parsing attributes in process `syz.4.14633'. [ 1543.229793][T26849] netlink: 36 bytes leftover after parsing attributes in process `syz.3.14635'. [ 1543.272487][T26849] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14635'. [ 1543.606250][T26864] netlink: 104 bytes leftover after parsing attributes in process `syz.1.14640'. [ 1543.630362][T26861] lo speed is unknown, defaulting to 1000 [ 1543.645715][T26861] gre0 speed is unknown, defaulting to 1000 [ 1543.736249][T26873] nbd: socks must be embedded in a SOCK_ITEM attr [ 1543.743259][T26873] block nbd4: shutting down sockets [ 1544.080899][T26861] wlan1 speed is unknown, defaulting to 1000 [ 1544.595980][T26910] netlink: 'syz.0.14651': attribute type 1 has an invalid length. [ 1544.712625][T26910] lo speed is unknown, defaulting to 1000 [ 1544.734976][T26910] gre0 speed is unknown, defaulting to 1000 [ 1545.005914][T26920] __nla_validate_parse: 7 callbacks suppressed [ 1545.005934][T26920] netlink: 52 bytes leftover after parsing attributes in process `syz.4.14654'. [ 1545.031645][T26921] syzkaller0: entered promiscuous mode [ 1545.037298][T26921] syzkaller0: entered allmulticast mode [ 1545.139009][T26924] netlink: 'syz.4.14657': attribute type 2 has an invalid length. [ 1545.170901][T26924] netlink: 'syz.4.14657': attribute type 9 has an invalid length. [ 1545.186698][T26910] wlan1 speed is unknown, defaulting to 1000 [ 1545.202879][T26924] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.14657'. [ 1545.289857][T26932] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14660'. [ 1545.331734][T26939] netlink: 'syz.3.14661': attribute type 10 has an invalid length. [ 1545.343280][T26937] netlink: 'syz.3.14661': attribute type 10 has an invalid length. [ 1545.348995][T26939] bond0: (slave þ): Enslaving as an active interface with an up link [ 1545.385865][T26938] netlink: 24 bytes leftover after parsing attributes in process `syz.4.14662'. [ 1545.797668][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 1546.250942][T26985] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14671'. [ 1546.390203][T27003] netlink: 'syz.2.14677': attribute type 21 has an invalid length. [ 1546.399817][T27003] netlink: 128 bytes leftover after parsing attributes in process `syz.2.14677'. [ 1546.412955][T27003] netlink: 'syz.2.14677': attribute type 3 has an invalid length. [ 1546.423647][T27003] netlink: 3 bytes leftover after parsing attributes in process `syz.2.14677'. [ 1546.467993][T27005] netlink: 28 bytes leftover after parsing attributes in process `syz.0.14678'. [ 1546.495175][T27005] netlink: 'syz.0.14678': attribute type 10 has an invalid length. [ 1546.497356][T27008] netlink: 'syz.2.14677': attribute type 11 has an invalid length. [ 1546.569403][T27005] .`: (slave wlan1): Error -22 calling dev_set_mtu [ 1546.674272][T27015] lo: Caught tx_queue_len zero misconfig [ 1546.745084][T27020] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14683'. [ 1546.795712][ T4969] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1546.841657][ T4969] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1546.868447][ T4969] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1546.923841][ T4969] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1546.956227][ T4969] net_ratelimit: 32 callbacks suppressed [ 1546.956245][ T4969] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1547.067216][T27044] delete_channel: no stack [ 1547.083580][ T4968] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1547.107921][T27047] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14692'. [ 1547.194606][ T4968] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1547.206758][T27058] xt_bpf: check failed: parse error [ 1547.218052][T27057] IPVS: set_ctl: invalid protocol: 98 224.0.0.1:20004 [ 1547.309538][T27064] syzkaller1: entered promiscuous mode [ 1547.315351][T27064] syzkaller1: entered allmulticast mode [ 1547.322985][T27064] netlink: 'syz.4.14699': attribute type 10 has an invalid length. [ 1547.333536][ T4983] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1547.444564][ T4968] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1547.584077][ T4969] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1547.693668][ T4968] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1547.712122][T27084] netlink: 'syz.2.14706': attribute type 1 has an invalid length. [ 1547.768627][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1547.779413][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1547.792642][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1547.802054][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1547.810342][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1547.817990][T27084] bond7: (slave geneve3): making interface the new active one [ 1547.872725][T27084] bond7: (slave geneve3): Enslaving as an active interface with an up link [ 1547.908624][ T5831] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1547.918158][ T5831] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1547.925554][ T4983] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1547.936610][ T5831] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1547.959813][ T4983] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1547.976407][ T5831] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1547.985018][ T5831] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1548.006758][ T4983] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1548.029762][ T4983] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1548.053589][ T4983] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1548.171864][T27088] lo speed is unknown, defaulting to 1000 [ 1548.184836][ T4964] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1548.209838][T27088] gre0 speed is unknown, defaulting to 1000 [ 1548.348146][ T5157] block nbd0: Possible stuck request ffff8880418f2800: control (read@0,1024B). Runtime 180 seconds [ 1548.359987][ T5157] block nbd0: Possible stuck request ffff8880418f2a00: control (read@1024,1024B). Runtime 180 seconds [ 1548.374101][ T5157] block nbd0: Possible stuck request ffff8880418f2c00: control (read@2048,1024B). Runtime 180 seconds [ 1548.385422][ T5157] block nbd0: Possible stuck request ffff8880418f2e00: control (read@3072,1024B). Runtime 180 seconds [ 1548.449839][ T4983] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1548.501167][ T4968] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1548.586719][T27088] wlan1 speed is unknown, defaulting to 1000 [ 1548.772074][ T4968] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1549.174703][ T4968] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1549.232682][T27130] syzkaller0: entered promiscuous mode [ 1549.240768][T27130] syzkaller0: entered allmulticast mode [ 1549.389506][ T4968] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1549.458554][T27144] netlink: 'syz.4.14722': attribute type 30 has an invalid length. [ 1549.591543][T27151] netlink: 'syz.0.14724': attribute type 6 has an invalid length. [ 1549.634368][T27151] netlink: 'syz.0.14724': attribute type 62 has an invalid length. [ 1549.648004][ T4964] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 1549.717668][ T4964] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 1549.758836][ T4964] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 1549.883029][ T4964] netdevsim netdevsim1 eth4: set [1, 0] type 2 family 0 port 20000 - 0 [ 1549.914236][ T4968] veth0_to_bridge: left allmulticast mode [ 1549.922912][ T4968] veth0_to_bridge: left promiscuous mode [ 1549.928989][ T4968] bridge0: port 1(veth0_to_bridge) entered disabled state [ 1550.032526][ T51] Bluetooth: hci5: command tx timeout [ 1550.041437][T27182] __nla_validate_parse: 3 callbacks suppressed [ 1550.041454][T27182] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.14731'. [ 1550.146090][T27190] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14734'. [ 1550.155417][T27190] netlink: 20 bytes leftover after parsing attributes in process `syz.3.14734'. [ 1550.201169][ T4968] batman_adv: batadv0: Removing interface: gretap1 [ 1550.408544][ T4968] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1550.418690][ T4968] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1550.428576][ T4968] bond0 (unregistering): Released all slaves [ 1550.438569][ T4968] bond1 (unregistering): Released all slaves [ 1550.450910][ T4968] bond2 (unregistering): Released all slaves [ 1550.466031][ T4968] bond3 (unregistering): (slave veth3): Releasing active interface [ 1550.479505][ T4968] bond3 (unregistering): Released all slaves [ 1550.491902][ T4968] bond4 (unregistering): Released all slaves [ 1550.505554][ T4968] bond5 (unregistering): Released all slaves [ 1550.518125][ T4968] bond6 (unregistering): Released all slaves [ 1550.536343][T27190] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14734'. [ 1550.552534][T27088] chnl_net:caif_netlink_parms(): no params data found [ 1550.564699][T27190] netlink: 20 bytes leftover after parsing attributes in process `syz.3.14734'. [ 1550.683641][T27178] lo speed is unknown, defaulting to 1000 [ 1550.739224][T27194] netlink: 60 bytes leftover after parsing attributes in process `syz.3.14736'. [ 1550.753837][T27194] netlink: 35 bytes leftover after parsing attributes in process `syz.3.14736'. [ 1550.772287][T27178] gre0 speed is unknown, defaulting to 1000 [ 1550.778325][ T4968] tipc: Disabling bearer [ 1550.789851][ T4968] tipc: Left network mode [ 1550.816444][T27194] netlink: 'syz.3.14736': attribute type 1 has an invalid length. [ 1550.818833][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1550.832375][ C0] lec:lec_tx_timeout: lec0 [ 1550.943758][T27207] netlink: 28 bytes leftover after parsing attributes in process `syz.3.14736'. [ 1550.981623][T27208] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14738'. [ 1551.220209][T27088] bridge0: port 1(bridge_slave_0) entered blocking state [ 1551.259593][T27088] bridge0: port 1(bridge_slave_0) entered disabled state [ 1551.277500][T27088] bridge_slave_0: entered allmulticast mode [ 1551.306345][T27088] bridge_slave_0: entered promiscuous mode [ 1551.382643][T27088] bridge0: port 2(bridge_slave_1) entered blocking state [ 1551.395349][T27088] bridge0: port 2(bridge_slave_1) entered disabled state [ 1551.402740][T27088] bridge_slave_1: entered allmulticast mode [ 1551.430921][T27088] bridge_slave_1: entered promiscuous mode [ 1551.577499][T27088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1551.599921][T27178] wlan1 speed is unknown, defaulting to 1000 [ 1551.611591][T27088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1551.747319][T27088] team0: Port device team_slave_0 added [ 1551.879933][T27088] team0: Port device team_slave_1 added [ 1552.063877][ T4969] net_ratelimit: 9 callbacks suppressed [ 1552.063895][ T4969] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1552.091514][T27088] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1552.112167][ T51] Bluetooth: hci5: command tx timeout [ 1552.123309][T27088] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1552.165862][T27088] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1552.184322][T27088] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1552.191558][T27088] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1552.218667][T27088] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1552.306876][T27251] netlink: 52 bytes leftover after parsing attributes in process `syz.3.14748'. [ 1552.380834][T27253] netlink: 'syz.0.14749': attribute type 1 has an invalid length. [ 1552.613302][T27258] bond8: (slave gretap2): making interface the new active one [ 1552.648620][T27258] bond8: (slave gretap2): Enslaving as an active interface with an up link [ 1554.194057][ T51] Bluetooth: hci5: command tx timeout [ 1554.269656][T27088] hsr_slave_0: entered promiscuous mode [ 1554.280571][T27088] hsr_slave_1: entered promiscuous mode [ 1554.291446][T27088] debugfs: 'hsr0' already exists in 'hsr' [ 1554.297522][T27088] Cannot create hsr debugfs directory [ 1554.310327][ T4968] hsr_slave_0: left promiscuous mode [ 1554.319440][ T4968] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1554.336577][ T4968] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1554.348230][ T4968] batman_adv: batadv0: Removing interface: ipvlan0 [ 1554.503020][ T4968] team0 (unregistering): Port device team_slave_1 removed [ 1554.526096][ T4968] team0 (unregistering): Port device team_slave_0 removed [ 1554.614145][ T4983] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1554.712231][T27280] lo speed is unknown, defaulting to 1000 [ 1554.772041][T27280] gre0 speed is unknown, defaulting to 1000 [ 1554.915045][ T4966] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1555.153994][T27298] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1555.156779][ T4968] IPVS: stop unused estimator thread 0... [ 1555.171327][ T4966] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1555.230554][T27088] netdevsim netdevsim1 eth4 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1555.304370][ T4983] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1555.369944][T27088] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1555.423960][ T4983] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1555.483617][T27088] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1555.508721][T27280] wlan1 speed is unknown, defaulting to 1000 [ 1555.606924][T27088] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1555.654103][T27310] nbd4: detected capacity change from 0 to 63 [ 1555.665151][ T51] block nbd4: Receive control failed (result -32) [ 1555.673484][ T5713] block nbd4: Receive control failed (result -32) [ 1555.692935][ T5831] block nbd4: Receive control failed (result -32) [ 1555.711741][T27094] block nbd4: Dead connection, failed to find a fallback [ 1555.733465][T27094] block nbd4: shutting down sockets [ 1555.740617][T27094] blk_print_req_error: 138 callbacks suppressed [ 1555.740635][T27094] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1555.758589][T27094] buffer_io_error: 138 callbacks suppressed [ 1555.758603][T27094] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1555.773696][T27094] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1555.773873][ T4973] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1555.783235][T27094] Buffer I/O error on dev nbd4, logical block 1, async page read [ 1555.798868][T27094] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1555.808838][T27094] Buffer I/O error on dev nbd4, logical block 2, async page read [ 1555.817474][T27094] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1555.844201][T27094] Buffer I/O error on dev nbd4, logical block 3, async page read [ 1555.872969][T27327] macvtap0: entered promiscuous mode [ 1555.883806][T27094] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1555.887818][T27327] __nla_validate_parse: 2 callbacks suppressed [ 1555.887833][T27327] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14762'. [ 1555.911705][T27094] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1555.958028][T27094] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1555.982865][T27094] Buffer I/O error on dev nbd4, logical block 1, async page read [ 1556.014160][T27094] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1556.055205][T27094] Buffer I/O error on dev nbd4, logical block 2, async page read [ 1556.080984][T27094] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1556.113867][T27094] Buffer I/O error on dev nbd4, logical block 3, async page read [ 1556.121688][T27094] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1556.134065][T27327] macvtap0 (unregistering): left promiscuous mode [ 1556.152837][T27094] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1556.161121][T27094] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1556.179084][T27094] Buffer I/O error on dev nbd4, logical block 1, async page read [ 1556.195733][T27094] ldm_validate_partition_table(): Disk read failed. [ 1556.229668][T27094] Dev nbd4: unable to read RDB block 0 [ 1556.236716][ T4983] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1556.270891][ T51] Bluetooth: hci5: command tx timeout [ 1556.279821][T27094] nbd4: unable to read partition table [ 1556.293004][T27094] ldm_validate_partition_table(): Disk read failed. [ 1556.314951][T27094] Dev nbd4: unable to read RDB block 0 [ 1556.321195][T27094] nbd4: unable to read partition table [ 1556.412948][T27349] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14766'. [ 1556.448869][T27349] bond8: entered promiscuous mode [ 1556.456730][T27349] bond8: entered allmulticast mode [ 1556.462270][T27349] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1556.534628][ T4973] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1556.565632][T27088] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1556.613917][T27088] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1556.656799][T27088] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1556.718763][T27088] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1556.789184][T27366] pim6reg1: entered promiscuous mode [ 1556.819024][T27366] pim6reg1: entered allmulticast mode [ 1557.044491][ T4983] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1557.074453][T27088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1557.258620][ T4968] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1557.375516][ T4969] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1557.477382][T27088] 8021q: adding VLAN 0 to HW filter on device team0 [ 1557.492942][ T4973] bridge0: port 1(bridge_slave_0) entered blocking state [ 1557.500131][ T4973] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1557.536745][ T4969] bridge0: port 2(bridge_slave_1) entered blocking state [ 1557.543923][ T4969] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1557.723725][ T4969] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1557.844767][ T4969] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1557.954147][ T4984] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1558.064517][ T4973] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1558.176048][ T4973] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1558.210207][T27419] netlink: 20 bytes leftover after parsing attributes in process `syz.4.14779'. [ 1558.236499][T27419] netlink: 20 bytes leftover after parsing attributes in process `syz.4.14779'. [ 1558.273641][T27419] netlink: 7 bytes leftover after parsing attributes in process `syz.4.14779'. [ 1558.303561][ T4984] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1558.376833][T27088] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1558.443924][ T4969] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1558.500969][T27088] veth0_vlan: entered promiscuous mode [ 1558.544027][T27088] veth1_vlan: entered promiscuous mode [ 1558.613751][ T4968] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1558.660537][T27088] veth0_macvtap: entered promiscuous mode [ 1558.687388][T27088] veth1_macvtap: entered promiscuous mode [ 1558.755286][T27088] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1558.776836][T27088] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1558.868182][ T4969] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1558.888398][ T4969] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1558.915491][ T4969] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1558.977447][ T4969] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1558.998779][T27451] bridge0: entered allmulticast mode [ 1559.123115][T27458] bond4: (slave bridge0): Releasing active interface [ 1559.296494][ T4968] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1559.330163][ T4968] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1559.447368][ T4984] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1559.466376][ T4984] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1559.581585][T27473] netlink: 'syz.0.14793': attribute type 21 has an invalid length. [ 1559.824373][T27479] netlink: 24 bytes leftover after parsing attributes in process `syz.1.14705'. [ 1560.145193][T27507] netlink: 32 bytes leftover after parsing attributes in process `syz.4.14801'. [ 1560.225132][T27505] netlink: 256 bytes leftover after parsing attributes in process `syz.4.14801'. [ 1560.251755][T27513] x_tables: duplicate underflow at hook 2 [ 1560.258296][T27513] netlink: 'syz.0.14802': attribute type 10 has an invalid length. [ 1560.472870][T27528] netlink: 68 bytes leftover after parsing attributes in process `syz.4.14806'. [ 1560.529977][T27528] netlink: 64 bytes leftover after parsing attributes in process `syz.4.14806'. [ 1560.682655][T27542] tc action pedit offset must be on 32 bit boundaries [ 1560.699472][T27542] netlink: 'syz.4.14809': attribute type 13 has an invalid length. [ 1561.520712][T27573] tipc: Enabled bearer , priority 0 [ 1562.124524][T27561] tipc: Disabling bearer [ 1562.177193][T27577] netlink: 'syz.3.14815': attribute type 10 has an invalid length. [ 1562.237414][T27579] @0Ù: renamed from bond_slave_1 [ 1562.267386][T27579] netlink: 16 bytes leftover after parsing attributes in process `syz.0.14816'. [ 1562.276690][ T4969] net_ratelimit: 20 callbacks suppressed [ 1562.276708][ T4969] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1562.411946][T27584] batadv_slave_1: entered promiscuous mode [ 1562.420885][T27583] batadv_slave_1: left promiscuous mode [ 1562.435221][ T4969] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1562.573803][ T4969] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1562.605722][T27604] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14824'. [ 1562.684118][ T4969] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1562.803850][ T4983] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1562.834898][T27622] gretap3: entered promiscuous mode [ 1562.841010][T27622] batman_adv: batadv0: Adding interface: gretap3 [ 1562.851320][T27622] batman_adv: batadv0: The MTU of interface gretap3 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1562.926322][T27622] batman_adv: batadv0: Not using interface gretap3 (retrying later): interface not active [ 1562.937526][T27626] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14830'. [ 1562.954172][ T4983] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1562.979395][T27628] sit1: entered allmulticast mode [ 1562.994638][T27625] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1563.027839][T27628] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14831'. [ 1563.124868][ T4973] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1563.239214][ T4968] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1563.354970][ T4973] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1563.467803][ T4969] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1563.509501][T27653] netlink: 36 bytes leftover after parsing attributes in process `syz.4.14837'. [ 1563.523340][T27652] netlink: 36 bytes leftover after parsing attributes in process `syz.4.14837'. [ 1563.556852][T27654] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14838'. [ 1563.584173][T27653] bridge0: entered promiscuous mode [ 1563.589755][T27653] bridge0: entered allmulticast mode [ 1563.598010][T27653] team0: Port device bridge0 added [ 1563.608652][T27655] lo speed is unknown, defaulting to 1000 [ 1563.667711][T27655] gre0 speed is unknown, defaulting to 1000 [ 1563.751033][T27664] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14840'. [ 1563.895915][T27655] wlan1 speed is unknown, defaulting to 1000 [ 1564.036045][T27679] netlink: 72 bytes leftover after parsing attributes in process `syz.3.14843'. [ 1564.073524][T27679] netlink: 72 bytes leftover after parsing attributes in process `syz.3.14843'. [ 1564.243290][T27686] netlink: 'syz.3.14845': attribute type 13 has an invalid length. [ 1564.251786][T27686] netlink: 'syz.3.14845': attribute type 17 has an invalid length. [ 1564.632730][T27686] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1564.658099][T27686] 8021q: adding VLAN 0 to HW filter on device team0 [ 1564.751318][T27701] netlink: 'syz.1.14849': attribute type 1 has an invalid length. [ 1564.835764][T27701] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1564.862934][ T5831] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1564.899602][ T5831] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1564.908577][ T5831] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1564.919056][ T5831] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1564.931755][ T5831] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1564.958094][T27692] lo speed is unknown, defaulting to 1000 [ 1564.978806][T27692] gre0 speed is unknown, defaulting to 1000 [ 1565.034433][T27712] bridge6: entered allmulticast mode [ 1565.446961][T27692] wlan1 speed is unknown, defaulting to 1000 [ 1565.447399][T27709] lo speed is unknown, defaulting to 1000 [ 1565.533542][T27709] gre0 speed is unknown, defaulting to 1000 [ 1565.579946][T27723] bridge7: entered promiscuous mode [ 1566.088763][T27709] wlan1 speed is unknown, defaulting to 1000 [ 1566.217522][T27742] netlink: 'syz.1.14862': attribute type 11 has an invalid length. [ 1566.644560][T27757] batadv0: entered promiscuous mode [ 1566.660300][T27757] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 1566.693070][T27757] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 1566.718924][T27757] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 1566.747358][T27757] batadv0: left promiscuous mode [ 1566.858405][T27709] chnl_net:caif_netlink_parms(): no params data found [ 1566.983625][ T51] Bluetooth: hci0: command tx timeout [ 1567.036928][T27709] bridge0: port 1(bridge_slave_0) entered blocking state [ 1567.044637][T27709] bridge0: port 1(bridge_slave_0) entered disabled state [ 1567.051940][T27709] bridge_slave_0: entered allmulticast mode [ 1567.068352][T27709] bridge_slave_0: entered promiscuous mode [ 1567.124333][T27709] bridge0: port 2(bridge_slave_1) entered blocking state [ 1567.131538][T27709] bridge0: port 2(bridge_slave_1) entered disabled state [ 1567.141308][T27709] bridge_slave_1: entered allmulticast mode [ 1567.152174][T27709] bridge_slave_1: entered promiscuous mode [ 1567.182892][ T4984] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 1567.277456][ T4983] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 1567.373898][T27804] net_ratelimit: 20 callbacks suppressed [ 1567.373916][T27804] openvswitch: netlink: IP tunnel dst address not specified [ 1567.383300][T27709] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1567.402050][ T4964] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 1567.433123][T27709] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1567.469438][T27798] netlink: 'syz.1.14880': attribute type 1 has an invalid length. [ 1567.498803][T27798] __nla_validate_parse: 4 callbacks suppressed [ 1567.498820][T27798] netlink: 244 bytes leftover after parsing attributes in process `syz.1.14880'. [ 1567.512342][ T4968] netdevsim netdevsim4 eth4: set [1, 0] type 2 family 0 port 20000 - 0 [ 1567.547657][T27798] NCSI netlink: No device for ifindex 0 [ 1567.611327][ T4973] veth5: left allmulticast mode [ 1567.632476][ T4973] veth5: left promiscuous mode [ 1567.645540][ T4973] bridge6: port 3(veth5) entered disabled state [ 1567.663314][ T4973] veth0_to_bond: left allmulticast mode [ 1567.673670][ T4973] veth0_to_bond: left promiscuous mode [ 1567.686262][ T4973] bridge6: port 2(veth0_to_bond) entered disabled state [ 1567.699535][ T4973] veth3: left allmulticast mode [ 1567.705649][ T4973] veth3: left promiscuous mode [ 1567.710651][ T4973] bridge6: port 1(veth3) entered disabled state [ 1567.727717][ T4973] pimreg: left allmulticast mode [ 1567.972464][ T4973] batman_adv: batadv0: Removing interface: gretap1 [ 1568.012424][ T4973] bond1 (unregistering): (slave geneve2): Releasing active interface [ 1568.166964][ T4973] bond2 (unregistering): (slave bridge4): Releasing backup interface [ 1568.398057][ T4973] team0: Port device bridge0 removed [ 1568.457500][ T4973] bond0 (unregistering): Released all slaves [ 1568.475269][ T4973] bond1 (unregistering): Released all slaves [ 1568.499389][ T4973] bond2 (unregistering): Released all slaves [ 1568.519873][ T4973] bond3 (unregistering): Released all slaves [ 1568.532527][ T4973] bond4 (unregistering): Released all slaves [ 1568.547889][ T4973] bond5 (unregistering): Released all slaves [ 1568.560571][ T4973] bond6 (unregistering): Released all slaves [ 1568.572904][ T4973] bond7 (unregistering): Released all slaves [ 1568.586101][ T4973] bond8 (unregistering): Released all slaves [ 1568.608489][T27709] team0: Port device team_slave_0 added [ 1568.614432][T27806] lo speed is unknown, defaulting to 1000 [ 1568.617174][T27709] team0: Port device team_slave_1 added [ 1568.670085][T27806] gre0 speed is unknown, defaulting to 1000 [ 1568.702677][ T4964] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1568.775785][ T4973] !: left promiscuous mode [ 1568.814143][T27709] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1568.840090][T27709] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1568.870359][T27709] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1568.918583][T27709] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1568.930910][T27709] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1568.975287][T27709] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1568.987563][ T4973] : left promiscuous mode [ 1569.008112][T27842] netlink: 20 bytes leftover after parsing attributes in process `syz.0.14884'. [ 1569.039156][T27842] netlink: 32 bytes leftover after parsing attributes in process `syz.0.14884'. [ 1569.048900][ T4973] tipc: Left network mode [ 1569.092322][T27709] hsr_slave_0: entered promiscuous mode [ 1569.099243][T27709] hsr_slave_1: entered promiscuous mode [ 1569.106724][T27709] debugfs: 'hsr0' already exists in 'hsr' [ 1569.112583][T27709] Cannot create hsr debugfs directory [ 1569.118819][T27806] wlan1 speed is unknown, defaulting to 1000 [ 1569.461886][T27709] netdevsim netdevsim4 eth4 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1569.495585][ T4966] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1569.560829][T27709] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1569.627552][ T4983] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1569.642419][T27709] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1569.644859][T27848] delete_channel: no stack [ 1569.727096][T27709] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1569.765353][ T4983] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1569.899588][ T4966] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1569.996346][ T4973] hsr_slave_0: left promiscuous mode [ 1570.002178][ T4973] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1570.023805][ T4973] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1570.124350][ T4973] team0 (unregistering): Port device team_slave_1 removed [ 1570.141286][ T4973] team0 (unregistering): Port device C removed [ 1570.255358][ T4966] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1570.373781][ T4983] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1570.483649][ T4964] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1570.500719][ T4973] IPVS: stop unused estimator thread 0... [ 1570.593860][ T4964] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1570.628051][T27818] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1570.668383][T27709] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1570.737413][T27709] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1570.813036][T27709] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1570.848235][T27858] žÿ: renamed from team_slave_1 [ 1570.863331][T27855] netlink: 'syz.3.14889': attribute type 9 has an invalid length. [ 1570.873909][T27709] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1571.100540][T27709] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1571.149661][T27709] 8021q: adding VLAN 0 to HW filter on device team0 [ 1571.181019][ T4964] bridge0: port 1(bridge_slave_0) entered blocking state [ 1571.188136][ T4964] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1571.225659][ T4964] bridge0: port 2(bridge_slave_1) entered blocking state [ 1571.232813][ T4964] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1571.360857][T27858] xt_hashlimit: size too large, truncated to 1048576 [ 1571.458955][T27896] lo speed is unknown, defaulting to 1000 [ 1571.495880][T27896] gre0 speed is unknown, defaulting to 1000 [ 1571.551095][T27905] netlink: 488 bytes leftover after parsing attributes in process `syz.0.14897'. [ 1571.573937][T27905] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.14897'. [ 1571.596347][T27907] netlink: 'syz.3.14898': attribute type 2 has an invalid length. [ 1571.684365][T27910] netlink: 52 bytes leftover after parsing attributes in process `syz.3.14898'. [ 1571.954654][T27896] wlan1 speed is unknown, defaulting to 1000 [ 1571.983949][T27709] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1572.178265][T27929] sctp: [Deprecated]: syz.0.14901 (pid 27929) Use of int in max_burst socket option deprecated. [ 1572.178265][T27929] Use struct sctp_assoc_value instead [ 1572.423930][ T4983] net_ratelimit: 9 callbacks suppressed [ 1572.423949][ T4983] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1572.489352][T27947] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14903'. [ 1572.692194][T27709] veth0_vlan: entered promiscuous mode [ 1572.720168][T27709] veth1_vlan: entered promiscuous mode [ 1572.744486][ T4966] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1572.859380][ T4966] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1572.887840][T27709] veth0_macvtap: entered promiscuous mode [ 1572.927354][T27709] veth1_macvtap: entered promiscuous mode [ 1572.998763][T27709] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1573.026676][T27709] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1573.090881][ T4966] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1573.102022][ T4966] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1573.135005][ T4973] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1573.177390][T27967] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14906'. [ 1573.178152][ T4966] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1573.208302][ T4966] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1573.338871][T27973] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14908'. [ 1573.478537][ T4964] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1573.503681][ T4964] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1573.533973][ T4969] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1573.618212][ T4983] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1573.627108][T27991] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14908'. [ 1573.643565][ T4973] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1573.651556][ T4983] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1573.746086][T27997] netlink: 144 bytes leftover after parsing attributes in process `syz.3.14911'. [ 1573.780449][T27997] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.14911'. [ 1573.797045][ T4964] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1573.881376][T27997] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 1573.922475][T28007] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.14850'. [ 1573.980153][T28009] syzkaller0: entered promiscuous mode [ 1573.992505][T28009] syzkaller0: entered allmulticast mode [ 1574.083934][ T4973] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1574.224149][ T4969] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1574.242084][T28020] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14914'. [ 1574.269057][T28023] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14914'. [ 1574.397348][T28029] netlink: 20 bytes leftover after parsing attributes in process `syz.3.14916'. [ 1574.490626][T28033] netlink: 20 bytes leftover after parsing attributes in process `syz.3.14916'. [ 1574.531938][T28033] nbd: device at index 64 is going down [ 1574.755892][ T5831] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1574.767331][ T5831] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1574.783879][ T5831] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1574.813724][ T5831] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1574.821854][ T5831] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1574.872934][T27094] udevd[27094]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1575.040515][T28041] lo speed is unknown, defaulting to 1000 [ 1575.328023][T28041] gre0 speed is unknown, defaulting to 1000 [ 1575.875615][T28089] tipc: New replicast peer: 255.255.255.255 [ 1575.882072][T28089] tipc: Enabled bearer , priority 10 [ 1576.392412][T28041] wlan1 speed is unknown, defaulting to 1000 [ 1576.627992][T28117] netlink: 'syz.1.14940': attribute type 5 has an invalid length. [ 1576.653226][T28117] IPVS: length: 221 != 24 [ 1576.672499][T28119] lo speed is unknown, defaulting to 1000 [ 1576.777069][T28119] gre0 speed is unknown, defaulting to 1000 [ 1576.783896][T28041] chnl_net:caif_netlink_parms(): no params data found [ 1576.830905][T28114] lo speed is unknown, defaulting to 1000 [ 1576.898346][T28126] netlink: 'syz.4.14942': attribute type 1 has an invalid length. [ 1576.906705][T28126] netlink: 'syz.4.14942': attribute type 3 has an invalid length. [ 1576.925397][ T5831] Bluetooth: hci3: command tx timeout [ 1576.961140][T28133] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1576.973948][ T5831] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1576.988724][T28133] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1577.097422][T28041] bridge0: port 1(bridge_slave_0) entered blocking state [ 1577.125118][T28041] bridge0: port 1(bridge_slave_0) entered disabled state [ 1577.135372][T28041] bridge_slave_0: entered allmulticast mode [ 1577.142789][T28041] bridge_slave_0: entered promiscuous mode [ 1577.180580][T28135] lo speed is unknown, defaulting to 1000 [ 1577.186829][T28041] bridge0: port 2(bridge_slave_1) entered blocking state [ 1577.194484][T28041] bridge0: port 2(bridge_slave_1) entered disabled state [ 1577.201727][T28041] bridge_slave_1: entered allmulticast mode [ 1577.210696][T28041] bridge_slave_1: entered promiscuous mode [ 1577.253057][T28041] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1577.266497][T28041] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1577.304530][T28041] team0: Port device team_slave_0 added [ 1577.312936][T28041] team0: Port device team_slave_1 added [ 1577.351060][T28140] netlink: 'syz.4.14945': attribute type 49 has an invalid length. [ 1577.362272][T28114] gre0 speed is unknown, defaulting to 1000 [ 1577.364667][T28041] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1577.376770][T28041] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1577.423908][T28041] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1577.443967][ T4966] net_ratelimit: 15 callbacks suppressed [ 1577.443985][ T4966] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1577.488394][T28041] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1577.495792][T28041] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1577.561444][T28041] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1577.574049][ T4964] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1577.581470][T28119] wlan1 speed is unknown, defaulting to 1000 [ 1577.688134][T28155] netlink: 'syz.4.14949': attribute type 6 has an invalid length. [ 1577.702213][T28041] hsr_slave_0: entered promiscuous mode [ 1577.722272][T28041] hsr_slave_1: entered promiscuous mode [ 1577.737145][T28041] debugfs: 'hsr0' already exists in 'hsr' [ 1577.753361][T28041] Cannot create hsr debugfs directory [ 1577.763632][ T4984] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1577.816372][T28135] gre0 speed is unknown, defaulting to 1000 [ 1577.875618][T28114] wlan1 speed is unknown, defaulting to 1000 [ 1578.129365][T28135] wlan1 speed is unknown, defaulting to 1000 [ 1578.265514][T28041] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1578.286513][T28041] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1578.304028][T28041] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1578.420077][T28041] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1578.431407][ T5157] block nbd0: Possible stuck request ffff8880418f2800: control (read@0,1024B). Runtime 210 seconds [ 1578.445007][ T5157] block nbd0: Possible stuck request ffff8880418f2a00: control (read@1024,1024B). Runtime 210 seconds [ 1578.456031][ T5157] block nbd0: Possible stuck request ffff8880418f2c00: control (read@2048,1024B). Runtime 210 seconds [ 1578.471600][ T5157] block nbd0: Possible stuck request ffff8880418f2e00: control (read@3072,1024B). Runtime 210 seconds [ 1578.483838][T28041] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1578.494740][T28041] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1578.567582][T28041] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1578.577972][T28041] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1578.590362][T28041] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1578.613496][ T4969] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1578.686895][T28041] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1578.698545][T28041] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1578.711564][T28041] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1578.763642][ T4969] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1578.887868][ T4964] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1578.899258][T28175] x_tables: duplicate underflow at hook 1 [ 1578.984074][ T5831] Bluetooth: hci3: command tx timeout [ 1579.013598][ T4984] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1579.104681][T28182] lo speed is unknown, defaulting to 1000 [ 1579.112190][T28182] gre0 speed is unknown, defaulting to 1000 [ 1579.125169][ T4984] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1579.273725][ T4969] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1579.401872][ T4973] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1579.609499][T28182] wlan1 speed is unknown, defaulting to 1000 [ 1580.497939][ T3554] lec:lec_start_xmit: lec0:No lecd attached [ 1580.892003][T28163] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1580.924933][T28041] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1580.994339][T28041] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1581.054983][T28041] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1581.064530][ T5831] Bluetooth: hci3: command tx timeout [ 1581.095080][T28041] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1581.219426][T28041] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1581.266244][T28041] 8021q: adding VLAN 0 to HW filter on device team0 [ 1581.290582][ T4984] bridge0: port 1(bridge_slave_0) entered blocking state [ 1581.297793][ T4984] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1581.361257][ T4984] bridge0: port 2(bridge_slave_1) entered blocking state [ 1581.368473][ T4984] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1581.399803][T28238] __nla_validate_parse: 8 callbacks suppressed [ 1581.399823][T28238] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14970'. [ 1581.512085][T28236] syzkaller0: entered promiscuous mode [ 1581.547294][T28236] syzkaller0: entered allmulticast mode [ 1581.588992][T28251] Bluetooth: MGMT ver 1.23 [ 1583.153687][ T5831] Bluetooth: hci3: command tx timeout [ 1583.936776][ T5192] udevd[5192]: worker [22673] /devices/virtual/block/nbd0 timeout; kill it [ 1583.945981][ T5192] udevd[5192]: seq 73129 '/devices/virtual/block/nbd0' killed [ 1584.018340][T28257] macsec1: entered promiscuous mode [ 1584.035652][T28258] macsec1: entered promiscuous mode [ 1584.064972][T28261] netlink: 'syz.0.14975': attribute type 10 has an invalid length. [ 1584.088464][T28263] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14976'. [ 1584.405960][T28298] netlink: 'syz.3.14982': attribute type 1 has an invalid length. [ 1584.513050][T28304] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14982'. [ 1584.562125][T28304] bond10 (unregistering): Released all slaves [ 1584.597046][T28298] netlink: 'syz.3.14982': attribute type 1 has an invalid length. [ 1584.657087][T28293] netlink: 20 bytes leftover after parsing attributes in process `syz.1.14984'. [ 1584.674486][T28307] netlink: 28 bytes leftover after parsing attributes in process `syz.0.14986'. [ 1584.695026][T28307] netlink: 28 bytes leftover after parsing attributes in process `syz.0.14986'. [ 1584.725955][T28307] gretap0: entered promiscuous mode [ 1584.745866][T28307] hsr1: Slave A (ip6gretap0) is not up; please bring it up to get a fully working HSR network [ 1584.765861][T28307] hsr1: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network [ 1584.810627][T28041] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1584.873271][T28041] veth0_vlan: entered promiscuous mode [ 1584.905723][T28041] veth1_vlan: entered promiscuous mode [ 1584.967485][T28318] netlink: 'syz.0.14990': attribute type 1 has an invalid length. [ 1584.976079][T28041] veth0_macvtap: entered promiscuous mode [ 1584.991346][T28041] veth1_macvtap: entered promiscuous mode [ 1584.998804][T28318] nbd: couldn't find device at index -427251215 [ 1585.028460][T28041] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1585.048838][T28320] lo speed is unknown, defaulting to 1000 [ 1585.059698][T28324] IPVS: set_ctl: invalid protocol: 51 172.20.20.187:20003 [ 1585.063101][T28041] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1585.085422][T28320] gre0 speed is unknown, defaulting to 1000 [ 1585.107444][ T4966] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1585.125972][ T4966] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1585.154801][ T4966] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1585.175791][T28328] netlink: 40 bytes leftover after parsing attributes in process `syz.4.14994'. [ 1585.201458][ T4966] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1585.459869][ T4965] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1585.468977][T28339] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14998'. [ 1585.480812][ T4965] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1585.500246][T28339] veth10: entered allmulticast mode [ 1585.568026][T28320] wlan1 speed is unknown, defaulting to 1000 [ 1585.609006][T28345] geneve2: entered promiscuous mode [ 1585.620971][ T4984] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1585.639356][ T4984] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1585.703868][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5200 ms [ 1585.711930][ C0] lec:lec_tx_timeout: lec0 [ 1585.720646][T28353] block nbd0: reconnected socket [ 1585.721123][T28351] syzkaller1: entered promiscuous mode [ 1585.732853][T28351] syzkaller1: entered allmulticast mode [ 1585.750810][T28349] syzkaller1: entered promiscuous mode [ 1585.756625][T28349] syzkaller1: entered allmulticast mode [ 1585.798799][T28357] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15002'. [ 1585.804610][T28352] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15002'. [ 1585.962897][T28351] lo speed is unknown, defaulting to 1000 [ 1586.025509][T28351] gre0 speed is unknown, defaulting to 1000 [ 1586.089632][T28366] gretap1: entered promiscuous mode [ 1586.107072][T28366] batman_adv: batadv0: Adding interface: gretap1 [ 1586.119800][T28366] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1586.173486][T28366] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 1586.448135][T28351] wlan1 speed is unknown, defaulting to 1000 [ 1586.476947][T28375] siw: device registration error -23 [ 1586.688977][T28383] Bluetooth: MGMT ver 1.23 [ 1586.710830][T28383] Bluetooth: hci1: too big key_count value 29096 [ 1586.718405][T28386] netlink: 104 bytes leftover after parsing attributes in process `syz.3.15009'. [ 1586.776407][T28386] siw: device registration error -23 [ 1587.265232][T28398] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15011'. [ 1587.275704][T28398] net_ratelimit: 17 callbacks suppressed [ 1587.275721][T28398] openvswitch: netlink: Missing key (keys=40, expected=80) [ 1587.298358][T28398] syzkaller1: entered promiscuous mode [ 1587.305032][T28398] syzkaller1: entered allmulticast mode [ 1587.318414][T28398] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15011'. [ 1587.329925][T28398] openvswitch: netlink: Missing key (keys=40, expected=80) [ 1587.516218][T28408] netlink: 36 bytes leftover after parsing attributes in process `syz.1.15013'. [ 1587.749364][T28415] syzkaller0: entered promiscuous mode [ 1587.758629][T28415] syzkaller0: entered allmulticast mode [ 1587.915087][T28425] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15017'. [ 1588.023035][T28430] Cannot find set identified by id 0 to match [ 1588.031675][T28431] Cannot find set identified by id 0 to match [ 1588.032138][T28429] FAULT_INJECTION: forcing a failure. [ 1588.032138][T28429] name failslab, interval 1, probability 0, space 0, times 0 [ 1588.063577][T28429] CPU: 0 UID: 0 PID: 28429 Comm: syz.3.15019 Not tainted syzkaller #0 PREEMPT(full) [ 1588.063603][T28429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1588.063614][T28429] Call Trace: [ 1588.063621][T28429] [ 1588.063630][T28429] dump_stack_lvl+0xe8/0x150 [ 1588.063660][T28429] should_fail_ex+0x412/0x560 [ 1588.063687][T28429] should_failslab+0xa8/0x100 [ 1588.063711][T28429] __kmalloc_noprof+0xe8/0x760 [ 1588.063731][T28429] ? bpf_test_init+0x9f/0x150 [ 1588.063823][T28429] ? kstrtouint+0x6e/0xe0 [ 1588.063848][T28429] bpf_test_init+0x9f/0x150 [ 1588.063874][T28429] bpf_prog_test_run_xdp+0x529/0x1160 [ 1588.063912][T28429] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1588.063940][T28429] ? __fget_files+0x2a/0x420 [ 1588.063969][T28429] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1588.063992][T28429] bpf_prog_test_run+0x2c7/0x340 [ 1588.064014][T28429] __sys_bpf+0x643/0x950 [ 1588.064041][T28429] ? __pfx___sys_bpf+0x10/0x10 [ 1588.064086][T28429] ? ksys_write+0x242/0x270 [ 1588.064107][T28429] ? __pfx_ksys_write+0x10/0x10 [ 1588.064132][T28429] __x64_sys_bpf+0x7c/0x90 [ 1588.064156][T28429] do_syscall_64+0x14d/0xf80 [ 1588.064182][T28429] ? trace_irq_disable+0x3b/0x150 [ 1588.064206][T28429] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1588.064224][T28429] ? clear_bhb_loop+0x40/0x90 [ 1588.064244][T28429] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1588.064261][T28429] RIP: 0033:0x7fad0139c799 [ 1588.064278][T28429] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1588.064294][T28429] RSP: 002b:00007fad02254028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1588.064312][T28429] RAX: ffffffffffffffda RBX: 00007fad01615fa0 RCX: 00007fad0139c799 [ 1588.064326][T28429] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 1588.064336][T28429] RBP: 00007fad02254090 R08: 0000000000000000 R09: 0000000000000000 [ 1588.064347][T28429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1588.064357][T28429] R13: 00007fad01616038 R14: 00007fad01615fa0 R15: 00007ffe3e10fc28 [ 1588.064396][T28429] [ 1588.291812][T28436] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15020'. [ 1588.543738][ T5831] block nbd0: Receive control failed (result -32) [ 1588.610800][T28441] netlink: 'syz.0.15023': attribute type 1 has an invalid length. [ 1588.686430][T28441] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1588.790384][T28445] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1588.837607][T28448] netlink: 'syz.0.15024': attribute type 8 has an invalid length. [ 1589.088256][T28454] Cannot find add_set index 3 as target [ 1589.136453][T28453] delete_channel: no stack [ 1589.226339][T28457] smc: net device applied user defined pnetid SYZ2 [ 1589.254048][T28457] smc: net device erased user defined pnetid SYZ2 [ 1589.639408][T28472] FAULT_INJECTION: forcing a failure. [ 1589.639408][T28472] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1589.671909][T28472] CPU: 0 UID: 0 PID: 28472 Comm: syz.2.15032 Not tainted syzkaller #0 PREEMPT(full) [ 1589.671936][T28472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1589.671948][T28472] Call Trace: [ 1589.671955][T28472] [ 1589.671964][T28472] dump_stack_lvl+0xe8/0x150 [ 1589.671994][T28472] should_fail_ex+0x412/0x560 [ 1589.672022][T28472] _copy_from_user+0x2d/0xb0 [ 1589.672048][T28472] bpf_test_init+0xd8/0x150 [ 1589.672076][T28472] bpf_prog_test_run_xdp+0x529/0x1160 [ 1589.672115][T28472] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1589.672145][T28472] ? __fget_files+0x2a/0x420 [ 1589.672175][T28472] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1589.672200][T28472] bpf_prog_test_run+0x2c7/0x340 [ 1589.672223][T28472] __sys_bpf+0x643/0x950 [ 1589.672251][T28472] ? __pfx___sys_bpf+0x10/0x10 [ 1589.672292][T28472] ? ksys_write+0x242/0x270 [ 1589.672314][T28472] ? __pfx_ksys_write+0x10/0x10 [ 1589.672341][T28472] __x64_sys_bpf+0x7c/0x90 [ 1589.672365][T28472] do_syscall_64+0x14d/0xf80 [ 1589.672390][T28472] ? trace_irq_disable+0x3b/0x150 [ 1589.672413][T28472] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1589.672432][T28472] ? clear_bhb_loop+0x40/0x90 [ 1589.672459][T28472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1589.672477][T28472] RIP: 0033:0x7fdd5179c799 [ 1589.672495][T28472] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1589.672510][T28472] RSP: 002b:00007fdd52594028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1589.672529][T28472] RAX: ffffffffffffffda RBX: 00007fdd51a15fa0 RCX: 00007fdd5179c799 [ 1589.672543][T28472] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 1589.672555][T28472] RBP: 00007fdd52594090 R08: 0000000000000000 R09: 0000000000000000 [ 1589.672566][T28472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1589.672577][T28472] R13: 00007fdd51a16038 R14: 00007fdd51a15fa0 R15: 00007ffd6230e1b8 [ 1589.672607][T28472] [ 1589.999878][T28482] team_slave_0: entered promiscuous mode [ 1590.005635][T28482] team_slave_1: entered promiscuous mode [ 1590.029923][T28482] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1590.059374][T28482] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1590.070259][T28482] netlink: 148 bytes leftover after parsing attributes in process `syz.2.15034'. [ 1590.097621][T28485] bond10: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3) [ 1590.109975][T28485] bond10 (unregistering): Released all slaves [ 1590.300169][T28497] lo speed is unknown, defaulting to 1000 [ 1590.307686][T28497] gre0 speed is unknown, defaulting to 1000 [ 1590.597470][T28502] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15038'. [ 1590.621512][T28509] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.15039'. [ 1590.632045][T28507] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.15039'. [ 1590.690023][T28497] wlan1 speed is unknown, defaulting to 1000 [ 1590.706787][T28509] rdma_rxe: rxe_newlink: failed to add bond0 [ 1590.724571][T28507] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1590.739195][T28507] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1590.750972][T28507] bond0 (unregistering): Released all slaves [ 1591.167780][T28528] netlink: 'syz.1.15044': attribute type 11 has an invalid length. [ 1591.373977][T28531] netlink: 'syz.0.15045': attribute type 2 has an invalid length. [ 1591.602965][T28540] syzkaller0: entered promiscuous mode [ 1591.646087][T28540] syzkaller0: entered allmulticast mode [ 1591.770207][T28549] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1591.793188][T28549] [ 1591.795541][T28549] ====================================================== [ 1591.802551][T28549] WARNING: possible circular locking dependency detected [ 1591.809570][T28549] syzkaller #0 Not tainted [ 1591.813976][T28549] ------------------------------------------------------ [ 1591.820990][T28549] syz.1.15051/28549 is trying to acquire lock: [ 1591.827137][T28549] ffff88801b6dda20 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_unlink_sibling+0x71/0x180 [ 1591.837673][T28549] [ 1591.837673][T28549] but task is already holding lock: [ 1591.845030][T28549] ffff88801b6dd988 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3d/0x130 [ 1591.855311][T28549] [ 1591.855311][T28549] which lock already depends on the new lock. [ 1591.855311][T28549] [ 1591.865709][T28549] [ 1591.865709][T28549] the existing dependency chain (in reverse order) is: [ 1591.874725][T28549] [ 1591.874725][T28549] -> #9 (&root->kernfs_rwsem){++++}-{4:4}: [ 1591.882707][T28549] down_write+0x96/0x200 [ 1591.887459][T28549] kernfs_add_one+0x41/0x5c0 [ 1591.892558][T28549] kernfs_create_dir_ns+0xde/0x130 [ 1591.898171][T28549] internal_create_group+0x425/0x1180 [ 1591.904057][T28549] cpuhp_invoke_callback+0x445/0x860 [ 1591.909878][T28549] cpuhp_issue_call+0x430/0x7a0 [ 1591.915239][T28549] __cpuhp_setup_state_cpuslocked+0x3d9/0x6b0 [ 1591.921829][T28549] __cpuhp_setup_state+0x3f/0x60 [ 1591.927282][T28549] do_one_initcall+0x250/0x8d0 [ 1591.932560][T28549] do_initcall_level+0x104/0x190 [ 1591.938003][T28549] do_initcalls+0x59/0xa0 [ 1591.942831][T28549] kernel_init_freeable+0x2a6/0x3e0 [ 1591.948532][T28549] kernel_init+0x1d/0x1d0 [ 1591.953368][T28549] ret_from_fork+0x51e/0xb90 [ 1591.958493][T28549] ret_from_fork_asm+0x1a/0x30 [ 1591.963769][T28549] [ 1591.963769][T28549] -> #8 (cpuhp_state_mutex){+.+.}-{4:4}: [ 1591.971574][T28549] [ 1591.971574][T28549] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 1591.979289][T28549] cpus_read_lock+0x42/0x160 [ 1591.984388][T28549] static_key_slow_inc+0x12/0x30 [ 1591.989832][T28549] nbd_genl_reconfigure+0x132f/0x1ea0 [ 1591.995814][T28549] genl_family_rcv_msg_doit+0x22a/0x330 [ 1592.001864][T28549] genl_rcv_msg+0x61c/0x7a0 [ 1592.006872][T28549] netlink_rcv_skb+0x232/0x4b0 [ 1592.012143][T28549] genl_rcv+0x28/0x40 [ 1592.016624][T28549] netlink_unicast+0x80f/0x9b0 [ 1592.021915][T28549] netlink_sendmsg+0x813/0xb40 [ 1592.027188][T28549] ____sys_sendmsg+0x972/0x9f0 [ 1592.032452][T28549] ___sys_sendmsg+0x2a5/0x360 [ 1592.037626][T28549] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1592.043066][T28549] do_syscall_64+0x14d/0xf80 [ 1592.048168][T28549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1592.054586][T28549] [ 1592.054586][T28549] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 1592.062214][T28549] __mutex_lock+0x19f/0x1300 [ 1592.067315][T28549] nbd_queue_rq+0x37b/0x1100 [ 1592.072410][T28549] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 1592.078571][T28549] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 1592.085451][T28549] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1592.091932][T28549] blk_mq_run_hw_queue+0x348/0x4f0 [ 1592.097592][T28549] blk_mq_dispatch_list+0xd16/0xe10 [ 1592.103299][T28549] blk_mq_flush_plug_list+0x48d/0x570 [ 1592.109173][T28549] __blk_flush_plug+0x3ed/0x4d0 [ 1592.114586][T28549] __submit_bio+0x28d/0x580 [ 1592.119594][T28549] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 1592.125727][T28549] block_read_full_folio+0x599/0x830 [ 1592.131538][T28549] filemap_read_folio+0x137/0x3b0 [ 1592.137069][T28549] do_read_cache_folio+0x358/0x590 [ 1592.142685][T28549] read_part_sector+0xb6/0x2b0 [ 1592.147997][T28549] adfspart_check_ICS+0xa5/0xa40 [ 1592.153437][T28549] bdev_disk_changed+0x7ba/0x1550 [ 1592.158961][T28549] blkdev_get_whole+0x380/0x510 [ 1592.164357][T28549] bdev_open+0x31e/0xd30 [ 1592.169099][T28549] blkdev_open+0x470/0x610 [ 1592.174028][T28549] do_dentry_open+0x785/0x14e0 [ 1592.179298][T28549] vfs_open+0x3b/0x340 [ 1592.183871][T28549] path_openat+0x2e08/0x3860 [ 1592.188963][T28549] do_file_open+0x23e/0x4a0 [ 1592.193970][T28549] do_sys_openat2+0x113/0x200 [ 1592.199152][T28549] __x64_sys_openat+0x138/0x170 [ 1592.204506][T28549] do_syscall_64+0x14d/0xf80 [ 1592.209605][T28549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1592.216000][T28549] [ 1592.216000][T28549] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 1592.223191][T28549] __mutex_lock+0x19f/0x1300 [ 1592.228290][T28549] nbd_queue_rq+0xc6/0x1100 [ 1592.233299][T28549] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 1592.239351][T28549] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 1592.246181][T28549] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1592.252665][T28549] blk_mq_run_hw_queue+0x348/0x4f0 [ 1592.258283][T28549] blk_mq_dispatch_list+0xd16/0xe10 [ 1592.263980][T28549] blk_mq_flush_plug_list+0x48d/0x570 [ 1592.269855][T28549] __blk_flush_plug+0x3ed/0x4d0 [ 1592.275204][T28549] __submit_bio+0x28d/0x580 [ 1592.280205][T28549] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 1592.286336][T28549] block_read_full_folio+0x599/0x830 [ 1592.292133][T28549] filemap_read_folio+0x137/0x3b0 [ 1592.297662][T28549] do_read_cache_folio+0x358/0x590 [ 1592.303278][T28549] read_part_sector+0xb6/0x2b0 [ 1592.308540][T28549] adfspart_check_ICS+0xa5/0xa40 [ 1592.313981][T28549] bdev_disk_changed+0x7ba/0x1550 [ 1592.319508][T28549] blkdev_get_whole+0x380/0x510 [ 1592.324860][T28549] bdev_open+0x31e/0xd30 [ 1592.329601][T28549] blkdev_open+0x470/0x610 [ 1592.334521][T28549] do_dentry_open+0x785/0x14e0 [ 1592.339789][T28549] vfs_open+0x3b/0x340 [ 1592.344363][T28549] path_openat+0x2e08/0x3860 [ 1592.349459][T28549] do_file_open+0x23e/0x4a0 [ 1592.354464][T28549] do_sys_openat2+0x113/0x200 [ 1592.359647][T28549] __x64_sys_openat+0x138/0x170 [ 1592.365001][T28549] do_syscall_64+0x14d/0xf80 [ 1592.370097][T28549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1592.376490][T28549] [ 1592.376490][T28549] -> #4 (set->srcu){.+.+}-{0:0}: [ 1592.383596][T28549] __synchronize_srcu+0xca/0x3e0 [ 1592.389038][T28549] elevator_switch+0x1e8/0x7a0 [ 1592.394304][T28549] elevator_change+0x2cc/0x450 [ 1592.399567][T28549] elevator_set_default+0x36c/0x430 [ 1592.405264][T28549] blk_register_queue+0x366/0x430 [ 1592.410790][T28549] __add_disk+0x677/0xd50 [ 1592.415621][T28549] add_disk_fwnode+0xfb/0x480 [ 1592.420802][T28549] nbd_dev_add+0x72c/0xb50 [ 1592.425725][T28549] nbd_init+0x168/0x1f0 [ 1592.430487][T28549] do_one_initcall+0x250/0x8d0 [ 1592.435758][T28549] do_initcall_level+0x104/0x190 [ 1592.441197][T28549] do_initcalls+0x59/0xa0 [ 1592.446031][T28549] kernel_init_freeable+0x2a6/0x3e0 [ 1592.451730][T28549] kernel_init+0x1d/0x1d0 [ 1592.456564][T28549] ret_from_fork+0x51e/0xb90 [ 1592.461659][T28549] ret_from_fork_asm+0x1a/0x30 [ 1592.466930][T28549] [ 1592.466930][T28549] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 1592.474733][T28549] __mutex_lock+0x19f/0x1300 [ 1592.479830][T28549] elevator_change+0x1b3/0x450 [ 1592.485091][T28549] elevator_set_none+0xb5/0x140 [ 1592.490438][T28549] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 1592.496745][T28549] nbd_start_device+0x17f/0xb10 [ 1592.502102][T28549] nbd_genl_connect+0x165b/0x1cf0 [ 1592.507632][T28549] genl_family_rcv_msg_doit+0x22a/0x330 [ 1592.513683][T28549] genl_rcv_msg+0x61c/0x7a0 [ 1592.518690][T28549] netlink_rcv_skb+0x232/0x4b0 [ 1592.523966][T28549] genl_rcv+0x28/0x40 [ 1592.528450][T28549] netlink_unicast+0x80f/0x9b0 [ 1592.533726][T28549] netlink_sendmsg+0x813/0xb40 [ 1592.538995][T28549] ____sys_sendmsg+0x972/0x9f0 [ 1592.544262][T28549] ___sys_sendmsg+0x2a5/0x360 [ 1592.549441][T28549] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1592.554889][T28549] do_syscall_64+0x14d/0xf80 [ 1592.560004][T28549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1592.566416][T28549] [ 1592.566416][T28549] -> #2 (&q->q_usage_counter(io)#73){++++}-{0:0}: [ 1592.575007][T28549] blk_alloc_queue+0x546/0x680 [ 1592.580286][T28549] __blk_mq_alloc_disk+0x197/0x390 [ 1592.585900][T28549] nbd_dev_add+0x499/0xb50 [ 1592.590826][T28549] nbd_genl_connect+0x962/0x1cf0 [ 1592.596275][T28549] genl_family_rcv_msg_doit+0x22a/0x330 [ 1592.602330][T28549] genl_rcv_msg+0x61c/0x7a0 [ 1592.607334][T28549] netlink_rcv_skb+0x232/0x4b0 [ 1592.612604][T28549] genl_rcv+0x28/0x40 [ 1592.617087][T28549] netlink_unicast+0x80f/0x9b0 [ 1592.622354][T28549] netlink_sendmsg+0x813/0xb40 [ 1592.627623][T28549] ____sys_sendmsg+0x972/0x9f0 [ 1592.632889][T28549] ___sys_sendmsg+0x2a5/0x360 [ 1592.638065][T28549] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1592.643504][T28549] do_syscall_64+0x14d/0xf80 [ 1592.648611][T28549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1592.655006][T28549] [ 1592.655006][T28549] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 1592.662196][T28549] fs_reclaim_acquire+0x71/0x100 [ 1592.667643][T28549] kmem_cache_alloc_noprof+0x40/0x650 [ 1592.673520][T28549] __kernfs_iattrs+0xdf/0x340 [ 1592.678708][T28549] kernfs_iop_setattr+0xea/0x3f0 [ 1592.684149][T28549] notify_change+0xc1a/0xf40 [ 1592.689242][T28549] do_truncate+0x1c2/0x250 [ 1592.694173][T28549] path_openat+0x2f89/0x3860 [ 1592.699278][T28549] do_file_open+0x23e/0x4a0 [ 1592.704283][T28549] do_sys_openat2+0x113/0x200 [ 1592.709467][T28549] __x64_sys_openat+0x138/0x170 [ 1592.714820][T28549] do_syscall_64+0x14d/0xf80 [ 1592.719921][T28549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1592.726315][T28549] [ 1592.726315][T28549] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 1592.734813][T28549] __lock_acquire+0x15a5/0x2cf0 [ 1592.740170][T28549] lock_acquire+0xf0/0x2e0 [ 1592.745093][T28549] down_write+0x96/0x200 [ 1592.749838][T28549] kernfs_unlink_sibling+0x71/0x180 [ 1592.755538][T28549] __kernfs_remove+0x3e7/0x660 [ 1592.760803][T28549] kernfs_remove_by_name_ns+0xaf/0x130 [ 1592.766762][T28549] sysfs_remove_group+0xfc/0x2e0 [ 1592.772206][T28549] sysfs_remove_groups+0x54/0xb0 [ 1592.777645][T28549] net_rx_queue_update_kobjects+0x68d/0x740 [ 1592.784123][T28549] netdev_unregister_kobject+0x113/0x450 [ 1592.790255][T28549] unregister_netdevice_many_notify+0x1e0e/0x2370 [ 1592.797176][T28549] unregister_netdevice_queue+0x31f/0x360 [ 1592.803411][T28549] nsim_destroy+0x1e5/0x680 [ 1592.808530][T28549] __nsim_dev_port_del+0x14d/0x1b0 [ 1592.814142][T28549] nsim_dev_reload_destroy+0x288/0x490 [ 1592.820106][T28549] nsim_dev_reload_down+0x8a/0xc0 [ 1592.825630][T28549] devlink_reload+0x1eb/0x8c0 [ 1592.830886][T28549] devlink_nl_reload_doit+0xaaa/0xc80 [ 1592.836766][T28549] genl_family_rcv_msg_doit+0x22a/0x330 [ 1592.842822][T28549] genl_rcv_msg+0x61c/0x7a0 [ 1592.847830][T28549] netlink_rcv_skb+0x232/0x4b0 [ 1592.853102][T28549] genl_rcv+0x28/0x40 [ 1592.857583][T28549] netlink_unicast+0x80f/0x9b0 [ 1592.862849][T28549] netlink_sendmsg+0x813/0xb40 [ 1592.868119][T28549] ____sys_sendmsg+0x972/0x9f0 [ 1592.873382][T28549] ___sys_sendmsg+0x2a5/0x360 [ 1592.878571][T28549] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1592.884023][T28549] do_syscall_64+0x14d/0xf80 [ 1592.889125][T28549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1592.895529][T28549] [ 1592.895529][T28549] other info that might help us debug this: [ 1592.895529][T28549] [ 1592.905739][T28549] Chain exists of: [ 1592.905739][T28549] &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem [ 1592.905739][T28549] [ 1592.920155][T28549] Possible unsafe locking scenario: [ 1592.920155][T28549] [ 1592.927581][T28549] CPU0 CPU1 [ 1592.932933][T28549] ---- ---- [ 1592.938279][T28549] lock(&root->kernfs_rwsem); [ 1592.943028][T28549] lock(cpuhp_state_mutex); [ 1592.950119][T28549] lock(&root->kernfs_rwsem); [ 1592.957384][T28549] lock(&root->kernfs_iattr_rwsem); [ 1592.962653][T28549] [ 1592.962653][T28549] *** DEADLOCK *** [ 1592.962653][T28549] [ 1592.970781][T28549] 5 locks held by syz.1.15051/28549: [ 1592.976042][T28549] #0: ffffffff8fc35450 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1592.984206][T28549] #1: ffff88807848f0e8 (&dev->mutex){....}-{4:4}, at: devlink_get_from_attrs_lock+0x347/0x480 [ 1592.994542][T28549] #2: ffff88807848e260 (&devlink->lock_key#26){+.+.}-{4:4}, at: devlink_get_from_attrs_lock+0x35d/0x480 [ 1593.005776][T28549] #3: ffffffff8fbc6fc8 (rtnl_mutex){+.+.}-{4:4}, at: nsim_destroy+0xed/0x680 [ 1593.014641][T28549] #4: ffff88801b6dd988 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3d/0x130 [ 1593.025323][T28549] [ 1593.025323][T28549] stack backtrace: [ 1593.031189][T28549] CPU: 1 UID: 0 PID: 28549 Comm: syz.1.15051 Not tainted syzkaller #0 PREEMPT(full) [ 1593.031205][T28549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1593.031214][T28549] Call Trace: [ 1593.031220][T28549] [ 1593.031226][T28549] dump_stack_lvl+0xe8/0x150 [ 1593.031246][T28549] print_circular_bug+0x2e1/0x300 [ 1593.031268][T28549] check_noncircular+0x12e/0x150 [ 1593.031289][T28549] __lock_acquire+0x15a5/0x2cf0 [ 1593.031308][T28549] ? __lock_acquire+0x6b5/0x2cf0 [ 1593.031329][T28549] lock_acquire+0xf0/0x2e0 [ 1593.031344][T28549] ? kernfs_unlink_sibling+0x71/0x180 [ 1593.031362][T28549] down_write+0x96/0x200 [ 1593.031375][T28549] ? kernfs_unlink_sibling+0x71/0x180 [ 1593.031389][T28549] ? __pfx_down_write+0x10/0x10 [ 1593.031401][T28549] ? kernfs_root+0x1c/0x230 [ 1593.031419][T28549] ? kernfs_root+0x1c/0x230 [ 1593.031436][T28549] ? kernfs_root+0x1c/0x230 [ 1593.031453][T28549] ? kernfs_root+0x1ea/0x230 [ 1593.031471][T28549] kernfs_unlink_sibling+0x71/0x180 [ 1593.031486][T28549] __kernfs_remove+0x3e7/0x660 [ 1593.031500][T28549] kernfs_remove_by_name_ns+0xaf/0x130 [ 1593.031515][T28549] sysfs_remove_group+0xfc/0x2e0 [ 1593.031535][T28549] sysfs_remove_groups+0x54/0xb0 [ 1593.031554][T28549] net_rx_queue_update_kobjects+0x68d/0x740 [ 1593.031575][T28549] netdev_unregister_kobject+0x113/0x450 [ 1593.031592][T28549] unregister_netdevice_many_notify+0x1e0e/0x2370 [ 1593.031615][T28549] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1593.031631][T28549] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1593.031663][T28549] unregister_netdevice_queue+0x31f/0x360 [ 1593.031679][T28549] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 1593.031698][T28549] nsim_destroy+0x1e5/0x680 [ 1593.031720][T28549] __nsim_dev_port_del+0x14d/0x1b0 [ 1593.031735][T28549] nsim_dev_reload_destroy+0x288/0x490 [ 1593.031751][T28549] nsim_dev_reload_down+0x8a/0xc0 [ 1593.031766][T28549] devlink_reload+0x1eb/0x8c0 [ 1593.031788][T28549] ? __pfx_devlink_reload+0x10/0x10 [ 1593.031806][T28549] ? devlink_resources_validate+0xa7/0xd0 [ 1593.031895][T28549] ? devlink_resources_validate+0xa7/0xd0 [ 1593.031914][T28549] devlink_nl_reload_doit+0xaaa/0xc80 [ 1593.031935][T28549] ? __pfx_devlink_nl_reload_doit+0x10/0x10 [ 1593.031954][T28549] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 1593.031970][T28549] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 1593.031987][T28549] genl_family_rcv_msg_doit+0x22a/0x330 [ 1593.032002][T28549] ? __asan_memcpy+0x40/0x70 [ 1593.032015][T28549] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1593.032034][T28549] ? bpf_lsm_capable+0x9/0x20 [ 1593.032053][T28549] ? security_capable+0x7e/0x2c0 [ 1593.032072][T28549] genl_rcv_msg+0x61c/0x7a0 [ 1593.032088][T28549] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1593.032100][T28549] ? __pfx_devlink_nl_pre_doit_dev_lock+0x10/0x10 [ 1593.032122][T28549] ? __pfx_devlink_nl_reload_doit+0x10/0x10 [ 1593.032140][T28549] ? __pfx_devlink_nl_post_doit_dev_lock+0x10/0x10 [ 1593.032157][T28549] ? __lock_acquire+0x6b5/0x2cf0 [ 1593.032177][T28549] netlink_rcv_skb+0x232/0x4b0 [ 1593.032196][T28549] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1593.032210][T28549] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1593.032233][T28549] ? down_read+0x272/0x2e0 [ 1593.032244][T28549] ? genl_rcv+0xd/0x40 [ 1593.032257][T28549] genl_rcv+0x28/0x40 [ 1593.032269][T28549] netlink_unicast+0x80f/0x9b0 [ 1593.032289][T28549] ? __pfx_netlink_unicast+0x10/0x10 [ 1593.032305][T28549] ? netlink_sendmsg+0x650/0xb40 [ 1593.032322][T28549] ? skb_put+0x11b/0x210 [ 1593.032342][T28549] netlink_sendmsg+0x813/0xb40 [ 1593.032363][T28549] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1593.032382][T28549] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1593.032400][T28549] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1593.032415][T28549] ____sys_sendmsg+0x972/0x9f0 [ 1593.032432][T28549] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1593.032448][T28549] ? import_iovec+0x73/0xa0 [ 1593.032469][T28549] ___sys_sendmsg+0x2a5/0x360 [ 1593.032484][T28549] ? __pfx____sys_sendmsg+0x10/0x10 [ 1593.032499][T28549] ? futex_wake+0x4ac/0x580 [ 1593.032526][T28549] ? __fget_files+0x2a/0x420 [ 1593.032545][T28549] ? __fget_files+0x3a0/0x420 [ 1593.032567][T28549] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1593.032582][T28549] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1593.032598][T28549] ? rcu_is_watching+0x15/0xb0 [ 1593.032620][T28549] do_syscall_64+0x14d/0xf80 [ 1593.032645][T28549] ? trace_irq_disable+0x3b/0x150 [ 1593.032663][T28549] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1593.032677][T28549] ? clear_bhb_loop+0x40/0x90 [ 1593.032692][T28549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1593.032706][T28549] RIP: 0033:0x7f2890f9c799 [ 1593.032719][T28549] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1593.032732][T28549] RSP: 002b:00007f2891e88028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1593.032747][T28549] RAX: ffffffffffffffda RBX: 00007f2891215fa0 RCX: 00007f2890f9c799 [ 1593.032757][T28549] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 1593.032766][T28549] RBP: 00007f2891032c99 R08: 0000000000000000 R09: 0000000000000000 [ 1593.032775][T28549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1593.032783][T28549] R13: 00007f2891216038 R14: 00007f2891215fa0 R15: 00007ffea34d8868 [ 1593.032799][T28549] [ 1593.775672][T28549] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1593.807842][T28563] lo speed is unknown, defaulting to 1000 [ 1593.834354][T28563] gre0 speed is unknown, defaulting to 1000 [ 1593.897886][T28549] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1593.957516][T28563] wlan1 speed is unknown, defaulting to 1000 [ 1594.027559][T28549] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1594.091912][ T4964] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1594.118898][ T4964] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1594.133495][ T4964] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1594.146331][ T4964] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0