last executing test programs: 4.749847621s ago: executing program 4 (id=5796): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x40, 0x3, "3318000058a8056dd9a87f963d140de6993ac869f3a8609133b07523679abf4579f9cd656422a633a39f030000000000000000000000010000000000"}, @NFTA_TARGET_NAME={0xa, 0x1, 'HMARK\x00'}, @NFTA_TARGET_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xc0}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004002800018007000100637400001c00028008000240000000150500030000000000080001400000000d0900010073797a30000000000900020073797a32"], 0x80}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000002780), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000002a00)={0x0, 0x0, &(0x7f00000029c0)={&(0x7f0000002940)={0x50, r4, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@FOU_ATTR_TYPE={0x5}, @FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @loopback}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @local}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x34}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x23}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 4.364788408s ago: executing program 4 (id=5802): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x84, 0x2c, 0xe3f, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x10, 0xa}, {0x0, 0x9}, {0x10}}, [@filter_kind_options=@f_flower={{0xb}, {0x54, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_IPV6_SRC_MASK={0x14, 0xf, [0x0, 0xff0000ff]}, @TCA_FLOWER_KEY_TCP_SRC={0x6}, @TCA_FLOWER_KEY_CT_ZONE_MASK={0x6, 0x5e, 0x401}, @TCA_FLOWER_KEY_ARP_SIP_MASK={0x8, 0x3a, 0xff000000}, @TCA_FLOWER_KEY_IPV6_DST={0x14, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x30044801}, 0x4080) 4.303764897s ago: executing program 2 (id=5803): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x20000c00) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) r10 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) 3.919216707s ago: executing program 4 (id=5805): mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000140)="a60a"}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000)=0x201, 0x4) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000004a00070702000000000080000a"], 0x1c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040880}, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @loopback}}, 0x0, 0x0, 0x24, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d31dba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd000000000000001d6700"}, 0xd8) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000017c0)=@nat={'nat\x00', 0x1b, 0x5, 0x3e8, 0x0, 0x0, 0xffffffff, 0x258, 0x1c0, 0x350, 0x350, 0xffffffff, 0x350, 0x350, 0x5, &(0x7f0000000080), {[{{@uncond, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@set={{0x40}, {{0xffffffffffffffff, [0x5, 0x1, 0x6, 0x0, 0x0, 0x3], 0x4, 0x2}}}, @common=@inet=@ipcomp={{0x30}, {[0x4d2, 0x4d4], 0x1}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0xc, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @icmp_id=0x64, @gre_key=0x5}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, 0xff000000, 0xff, 'vcan0\x00', 'bridge0\x00', {}, {0xff}, 0x5e, 0x0, 0x44}, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x1, @multicast1, @private=0xa010102, @gre_key=0x401, @gre_key=0xc}}}}, {{@ip={@remote, @rand_addr=0x64010102, 0xff, 0xffffffff, 'dvmrp0\x00', 'veth0_vlan\x00', {}, {0x9feecd4e2b804086}, 0x62, 0x0, 0x48}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x8, 0x0, 0x1ff}}}, {{@uncond, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@inet=@set2={{0x28}, {{0x3, 0x5, 0x4}}}, @common=@ttl={{0x28}, {0x0, 0x5}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x4, @multicast1, @multicast1, @icmp_id=0x67, @port=0x4e20}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(0xffffffffffffffff, 0x8010671f, 0x0) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) read$rfkill(0xffffffffffffffff, &(0x7f0000000000), 0x8) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) 3.834232432s ago: executing program 4 (id=5806): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="080008000600090000001400000045"], 0xfce) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180200000000000000000000000000008500000053000000850000000700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xb}, 0x94) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x34, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000fbffffff850000002a00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bca2000000000008a6020000f8ffffffb703000008000000b7040000575ccf5a4a0e39c734a533fabc00000000850000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) getsockname$packet(0xffffffffffffffff, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x5, [@struct={0xc, 0x3, 0x0, 0x4, 0x0, 0xc000, [{0xe, 0x2, 0x5}, {0x7, 0x1, 0x1f}, {0x10, 0x2, 0x1}]}, @type_tag={0xe, 0x0, 0x0, 0x12, 0x1}]}, {0x0, [0x30, 0x0, 0x5f]}}, &(0x7f0000000640)=""/54, 0x59, 0x36, 0x0, 0x10001}, 0x28) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@bloom_filter={0x1e, 0x0, 0x6, 0x3, 0x45480, 0xffffffffffffffff, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x1, 0x1}, 0x50) ioctl$XFS_IOC_FD_TO_HANDLE(r3, 0xc038586a, &(0x7f0000000d00)={r3, &(0x7f00000007c0)='syzkaller\x00', 0xb0000, &(0x7f0000000800)={@align=0x4, {0x1, 0x1, 0x81, 0x8}}, 0x7, &(0x7f0000000840), &(0x7f0000000cc0)=0x9}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000dc0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000d40), &(0x7f0000000d80)=r3}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x11, 0x13, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@call={0x85, 0x0, 0x0, 0x3b}, @map_val={0x18, 0x4, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x10001}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000500)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x7, '\x00', r6, 0x0, r7, 0x8, &(0x7f00000006c0)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000700)={0x4, 0xe, 0xf, 0x87}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000e00)=[0xffffffffffffffff, r8, r9, r10], &(0x7f0000000e40)=[{0x1, 0x4, 0x5, 0x8}, {0x0, 0x2, 0x10}, {0x4, 0x4, 0xf, 0x3}, {0x4, 0x3, 0xf, 0x7}], 0x10, 0x80000000}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb0100200000000000006bda4d52a67a4c2a55893499ef0cc3f0333acd7498228e02a8cd15dbf77b6c1837986cf88ba9e3bb096a39ecc398f8d64057c6ee34055e25f84c1609e7477bab1f937bb237b75e65e34eca80c78e44a9a7cf36e9e63982f77b0b0030fd0bae7958476825e9119e103c42b717c76ffb93e2a6e2f5825d54255f6cf12c167cde46ed5b56353d50c1db98f753ada806061652a979d30f90fb08db1d0651b30c8175f9ec5a729ebd23df5c525fc6b696ea91f649da72448af1ce6e75141f4d4b7f54eb3090ad2e737a5c50c94761f362ba1555317c18bf73b7fb925e27ac248efa8d5cd7840fff29"], &(0x7f0000001f80)=""/226, 0x26, 0x81, 0x2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000380)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x20, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340)={0x0, 0x7}, 0x10, 0x0, r3}, 0x94) 3.547678131s ago: executing program 4 (id=5808): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x20, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r1, 0x0, 0x2f, &(0x7f0000000700)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e20, @broadcast}}}, 0x108) setsockopt$inet_group_source_req(r1, 0x0, 0x2b, &(0x7f0000000000)={0x2, {{0x2, 0x4e26, @multicast2}}, {{0x2, 0x2, @dev={0xac, 0x14, 0x14, 0x37}}}}, 0x108) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'pim6reg0\x00', 0x2}) ioctl$TUNSETVNETBE(r0, 0x400454de, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002a00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=r7, @ANYBLOB="05"], 0x6c}, 0x1, 0x0, 0x0, 0x10004000}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r5, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x0, 0x0, 0x0, 0x4007f, 0x0, 0x0, 0x41000, 0x4, '\x00', r5, 0x0, r8, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000000}, 0x94) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) ioctl$XFS_IOC_SWAPEXT(r4, 0xc0c0586d, &(0x7f0000000340)={0x0, r2, r2, 0x7, 0x7fffffffffffffff, '\x00', {0xf2, 0x304, 0x52d, 0x0, 0x8, 0xffffffff, 0xa, 0x1e0000000000, {0x10, 0x40000000}, {0xfffffffffffffff8, 0x9}, {0xf8, 0x1}, 0x4, 0x3, 0x5, 0x6c26, 0x100, 0x6, 0x9, 0xa1, 0x865, 0x528, '\x00', 0x3, 0x0, 0x1000, 0x1}}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x120}}, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r10) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r12], 0x1c}}, 0x840) write$nci(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="60060202"], 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x44000) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40482, 0x0) 3.403306318s ago: executing program 0 (id=5809): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400fff800000000fd0020851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000ff6608fffffff3f800180000000000000000000000001000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x1e}, 0x94) 3.402284206s ago: executing program 2 (id=5810): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f00000022c0)=[{{&(0x7f00000000c0)={0x2, 0x4e20, @local}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @broadcast}}}], 0x38}}, {{&(0x7f0000001b80)={0x2, 0x4e22, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000002240)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}], 0x18}}], 0x2, 0x8000004) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000080)=ANY=[], 0x98) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000040)=@fragment={0x12, 0x0, 0x48, 0x0, 0x0, 0x1b, 0x67}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0xe9a, 0x6}, &(0x7f0000000180)=0x8) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r5, @in={{0x2, 0xce23, @broadcast}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000180)={r5, 0x5}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000280)={r6}, &(0x7f00000000c0)=0x8) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) r8 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r8, 0x11b, 0x10, 0x0, &(0x7f00000004c0)) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r9, 0x18000000000002a0, 0x12, 0x0, &(0x7f0000000e00)="b9ff0200000028eeb5845591b318a044ea61", 0x0, 0xe02, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r10, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) getsockopt$IP_VS_SO_GET_INFO(r10, 0x0, 0x481, 0x0, &(0x7f0000000080)) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000001c1027f00000000000000000850000008b00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$IEEE802154_SET_MACPARAMS(r2, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="01002dbd7000fcdbdf252300000005002700ff000000f8db4ce5d92303041d01f6098ca16134cde57da238850af8cbbad15333bad6d92f56ae0cc5ae37d81212a9c6eab152cced34344cbf856da5cdc864058ab2f88f861edcf1bf09ac7f5fc24031e58aa390aab76bf1091c1e801de2eb7a2d725cf0af5dee8ce62f4ffa3f5b868f55d1afe6f18d1f13159971a1092c960ddeadaf909be10d7e97b016631b88b2c58a34e7d96cc3a6e9c5"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) 3.371156055s ago: executing program 3 (id=5812): pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000001040), 0x4) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000), 0x8) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000), 0x8) writev(r0, &(0x7f0000002180)=[{&(0x7f00000001c0)='.', 0x1}], 0x1) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r0, 0x0, 0x78d0) 3.151376126s ago: executing program 0 (id=5813): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000026c0)=ANY=[@ANYBLOB="1800000012000501000000000000000005000600"], 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x20040810) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 3.150885103s ago: executing program 2 (id=5814): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c0200001900010025bd700001000000fe8800000000000000000000000001010000000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000010000000000000000008000000000009000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400020000000000000100010000000000840105"], 0x23c}, 0x1, 0x0, 0x0, 0x11}, 0x4000) 3.111211691s ago: executing program 2 (id=5816): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="4d7e00000000000000002a00000008002f000000000005003600000000000c0005000203aaaaaaaaaaaa050037000000000008000200", @ANYRES32=r3, @ANYBLOB="7600000000054069074be8ed3978115bfc00"], 0x48}, 0x4, 0x700000000000000}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c0000001000010400"/20, @ANYBLOB="5d580000000000001c001a8018000a801400070000000000000000000000000000000001140003006970766c616e310000000000000000001c0012800b0001006970766c61"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x84) sendmsg$NL802154_CMD_SET_TX_POWER(r2, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)={0x60, 0x0, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x10000000}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c4}, 0x4000081) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r5, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x6, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f0000000340)={'ip_vti0\x00', r6, 0x20, 0x40, 0x0, 0xfc48, {{0x7, 0x4, 0x1, 0x8, 0x1c, 0x65, 0x0, 0x3, 0x2f, 0x0, @local, @remote, {[@noop, @timestamp={0x44, 0x4, 0x98, 0x0, 0x7}]}}}}}) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @local}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_CONTEXT(r7, 0x84, 0x11, &(0x7f0000000400)={r8, 0x3a9817ee}, 0x8) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000040)=0x20, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x800, 0x0, 0x2, 0x3, 0x8}, 0x20) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4b, 0x0, 0xad) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getpeername$inet(r10, &(0x7f00000000c0)={0x2, 0x0, @dev}, &(0x7f00000001c0)=0x10) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="54000000020603000000000000000000000000000d000300686173683a6e65740000000005000400000000000900020073797a31000000000c000780080008400000007005000500020300000500010006"], 0x54}}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a31000000000500010007ffe2001c0007800c00018008000140f60000020c00028008000140"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) bind$alg(r4, &(0x7f0000000640)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(anubis)\x00'}, 0x58) socket$nl_sock_diag(0x10, 0x3, 0x4) 3.05166994s ago: executing program 3 (id=5817): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42122, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'pim6reg0\x00', 0x2}) ioctl$TUNSETVNETBE(r0, 0x400454de, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000003c80)=ANY=[@ANYBLOB="b7000000016d0300bfa30000000000000703000000feffff620af0fff8ffffff71a4f0ff000000002704000000ffffffdd0a05000000000014000000016d030063030400000000001d44010000000000620a00fe00ffffffdb03000000010000b500f3ff000000009500000000000000023bc065b70300c6dfa041b63af4a3912435b1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e5f58b7382a8b7e8177168001815548000000000000000275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7f300c095199fe3ff3128e599b0eaebbdbd732c9cc20eec363e4a8f6456e5ccae25ea21714ee18cf5d803e04d83b46e21557c0afc646cb7790b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845b9f75dd08d123deda8ebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987af1714e72ba7616536fd9aa58f2477184b6a89adaf17b0baf587aef370a2d426a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a277c7a775d55dfc28abbe9b5ea62d84f3a10746443d64364f56e24e6d2105bd901128c7e0ec82770c8206b1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee7d26b34381fcb59b854e9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67051d355d84ce97bb0c6b4a595e487efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599ddd71063be9261eee52216d009df5daf87068a608628efc56c752af4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d96c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9610f0000d36f38df9ba60248d9a0d61282dfb15eb6841bb64a1b3045024a982f3c48153baae2c4e7bf37548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c3560811ea6c3560a43364d402ccdd9069bd50b994fd6a34ee18022a579dfc0229cc0dc9881610270928eeeb883418f562ae00003ea96d10f172c0374d6eed82640700dfffffffffff499c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c64a403ade624d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca5f1380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f254a9bf93f04bf072f0bc2d38092909ef3613861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf82807773e534015ea52acb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d2a9441eb315209d199e029e9135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d8516800ef3f9a6a8906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe3907000000466f4ca2195234648e0a1ca50db6f3d9436a7d55a9ad382400000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b45eb6dc5f6a9257d2283c42efc54fa84323a3304f41ff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f928ba7554ba51dd5ab2b7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f80724a5bfc1e8890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f068840a754c02181561542c2571f983e96735600000554f327a353511ccedde99493c31ac05a7b57f03ca91a01ba2c60ca99e8ebc15ec3d59901da21afd6400000000832503969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d40460780000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120968308c31db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98c2c73e1661261173f359e93d2c80000000998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebccbaf1ea4a003fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91cda6b52a373803a9e0600f86909bc90addb7b9aee813df534aac4b32fc7741c7e3f426b9ed20debd883593ff5d691b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa000000000000006acc19808d7cf29bc974b0ea92499a419aa095e203c1fafbb9b9a7c2bca3f0a18ee4952f2d325a56390578f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa84feda91f3edb32231ec75300000000000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579c23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b88b5e7885e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d0f086b3f03b20d546fa66a72e38207c9d20035ab63de71a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db1829f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2744c46570e8f46da1ab990ca053cbfe801000000000000000000000000000000d55d7182af2ea5f8d0ad495e3eb9421963a5a683c3dcb2d300aa3b2cfe946d2348c35f5d67d68ac07c8f84b3679e77c2e629ecec7c12c35d6b6971b8ae13cc0095f5a3bfdcffffffffffffffff61ed2b3ecfb16d19037c8c88c91dda1f904fbbc864e95ad43d6dd6d5eadbcea25682ba4b91e14c3fbfdfd1d480e7f13a65dbaa1af102d97681656bf56ff0cf36518f674237ce097d39008cc3257778de878bcd37467386f993be6d20c93a7791e7f2a155ce379b4cda2500108052aeb9bd03ffbda9ff485d6576a492d436d52edcd420e7deaa4343a0add3941ceb3a805e46beef9dca77a4edcbb42aa0caf0bbd6cec72d85540293cb4849b0610800000000000000000000000000000000f9814d5f6c8673c143ff2f901e71b8818665b56f7a03afe3d900007656659db4cb06aaaf9f02cfab5b9e61cc00e8e194299219a3f4c4c53bddea4cc48737842952ff08aeac15685df194ca89da8cf6d29a2be9779181fd5d105af5786094d9130f5826b18b9667b971a994f3fd06961912052f441e96884fcdc91f4a974242aabfc8adbadc9ca27955b5c90f1ed9a46ed044272383d3768871a9c8cfd7948aea445c55684351002ed4a4af45341de8e5e1f33624bd2ec1591dd00bbe05000000f89a928662e9b9449db34394fc5e946fadaee576e28ac0feab4e3585ed43d206218f524083840a78b723621f3b706bb7f5e42b5376642f8ad4028d4ead407240e7467d1b37a7e20690d7672c7e926fded95cf805516ad836eb730619a05af36fb28329d6feb33219cc9164461a8ba3afd5949b9a6046c53663df30a149414089c1ae8f3476236b05dde8dda4843a62c591f8d2b1a62d0db8dc826219bd87398b33e13e3a7a1511573cb1a8cdce3a8fea40792297d023ef52de2e75b9dbbfb8713178e2409b8d3b981bc2ae74621e536b9d3f09a15dada1561a8192d65cc59d7ed5a6bd610000000000000000000000000000000000000000000000b41248c570c4223a471b755ce6956908e2b0e5dbc5e71ff2373d3ed89c2e2eafac81c21ac2436d2ffacffe2fc0d601a50221c88a47b264c5129004f350963b52702c5a360000000000000000000000000000000b4077dc8a1801a8bf833350d302c5439ea3dd0f3b8eb1dc93af1fbf863d33a38a53a02ec1e5b90cb673d6b0cfe7f35b20e438653e0f73ddfc78e3e1d1cc9798af0eb9b61bb4fc72454a57237b68ea614ad898374e952784a18ffb9dc4447acd7ad28a63f88007ad8cba31a6fdd9982c97a913dffe69654d3a00b98c45ead9b9619f946c82f5789379d0d942020652ccfac45e1ef5e93e72b7d5381a3c61fb0500000000000000075bc7aee3e595f9850b9e96887d53404add0021b198be851d9f797d964fe7501997524d28ce7b1d5f8203d9f756efd5676c5d85052030c27e2a99ee39007d9b3c305b1c7d14899b42149d6c437d863651d30426e36ff66bafa93ce3f76c18b8c91ac65b7ab49f03b7c0d0687e1ee0369e88d674f51fe69423000000000000596444d8a7bf983d6f0342b2987e520100000000000000f37cda7868234eeefbd472c7b396c182f2b9a8bf2f85ad1a7b18681784c8fcf0cf5e34baebc594de0d6c9244a834b82a162739619b5f2e3c24378417f71f855b7958fbae631a8aa30b2120a9e23d8711f529b0cd7ce6ee2b0841a4d9e82e6ef54089b64175338ed7effe440c97c663a1000000000033f9ee8bc74fb6e443647654f9a07461c30b4b65890f2b64e68eb2a265f641e68af046fb8751055c6dba7e49068656dbf01c26b3812cec4204084e4c3f5abb86121a3e8fd10720d3b66a3a8033aab499cf56b7e5b01d37c1d7b4f5968040cd727efc9a1d69fa550313969508472efa833327d1bcae9167e3316f272ba2efdebf91f15b4a2bc27ea303834692d92961d3dcff0e4f55d9e3e7c66e8d3324216c4c77b95c000c5f30d56da969b1ce3a3e1a8ce5a632b3c404e7b455cac15273ce31a57dc7bed120f5396671eb7f8670ddc26ecc7461b1badfc98076c95aa811954827767c023c51e183cf1de0230912617f72169a3f9bda12d14667855757ca543b524491e213929a9d095abb9e57f33ad7e5301e5995e65246bc06f931d983596a4979d403f1b3984123633e9af67a0972612b5874f2000000009a8c3199c30dd0c416da1c22e346958bda493b297fcb98181ac449ca17a08e27ae81320e316e018fc9c77e7434079bc06ca1d315a94d177a888cc189fa5649bf5b9ab787118c29d735cc6dfaa965ea9ebbbaff83a06292aff2e3ed23750786136f113cdb04b881f721d02bd3c99b9dd3fa2713cda74eb3dd3422c736dc5c7bd3d1d008b5af391dac38341744dc38e8620fd4b35974ef1d93a907f37a84e1d630dd93fcde4aaf59e0e1f64ba3eec9da0b3d3b241fa52d9db1b137140b27434e74b783f9b62cc516f99e425ed603c5e65c0c3b08815a4aac7c1db4e47261148fa3a54359a2157b9a0fcecd54abbfaaee20f9a6dcc5380f01f22b8fd02b340118a65cefed97f5ce8d8a602120a3b2bb8ccc199dc36b2110a2200a2d3eaff9bc85ff68cd233fb2c8198682bd1c99fd7d66f3554439db4145028bc69579e516fd32253f641b0bffebc32cd3e90d67c77017ae323d8d31bd9f061d270d89737acea845067d8fd36fcce1ae9cd64beeae55d4c8159262240837b2854e5e08c58551453f1b9e46c6a7aaa972255fe7ad8f653168ce260000000000000000008b816f1b5e51781fa92c8b2c886bd992507715f8554276f56e3498156ca6d639de489096f49f2e1850d7399b1fe3801d3b2c0f65abcb67ac3ded74b099f76fee439abfb20c23864280855f395e3449859040832ea50df150deb14fc420a8e91ec84ccd338ada3c5778cbd52bcc2ac93b00e64959286b99231afa239dbefc90a21180f12a03c370980c8101d8a014f6139e998c938bccc92bfc987af6f02ec667c9597c19cc4193c09d152093013629b93e5104447e54ba7bc95ed2b3532421d6a0424c1e000000000000c1af53b85ab7060d6797a18cac2bf246a16f503e09832de7f7aa523d2325b4e3b651b1883ab9a3012f2b5b91e2782250a650d2dddca42a671f083b4a3739a651feb7c1c6903f50ce2cb6501fa22cf55230792a1e2fc902c9115a3b912dcef392b050c9a2870e7da0ca2ce908ff7bc5c72b591004ec3034b189a580e7f6ef153c04bb5599ab22686c5520a02e14a53f105d7b6a097e86b61500bdd7e6e133a9870ec9c0bb77c90702910cc39a0f3a419f12ba636b5837a5ecb110c89fb8d14da2d04175b18a14b2618d05fb58e9a832a4993472e5d068fe44e92676e484662a656d93a0f368c0cfc70c68459b61f194aac3e178b78c7457536c3c36d0b32a18f48c0a4907d3ef8c88f95aab970c47edab242ba575eb260076afebee270d5e2ac81cf200229bcee6eeffb0620b0c052950f5da7d431304d4e4b148bfc083c1e0d2cfbf8dfd85370e38151cdf855755ca45507e68730c4b69de8005e555e2d8539ee8a77b13c4e38ff80c1ac88eabdb1e3d599e8f6e157159680faf5b5764f52b76094c33a260d7cabc2c1bcea8cd0b7d88669f737da3032c1ddd275a8dc4f18aa79574c56beae0c9ec27f4d85cd269a6797d8260ad393f4663b9923e650f41a591c88ef8ffb5a8e1958c636d647daf6441121d6a8e89ad0395a1cf79396f8507bbd72b1bef09c17149e3c890f99e508470fd6dbc9ada28e5c62d2ce0ed18b23d67cc6e5a6e7c427c7b39b852afc38261d1a54aecabd74bb886d577b4e5211f430a98af771211863da862878d81b5d7b263944111bac17cdc7eb863299b2e069294a90424ecd7f6f5d811a28bdad1b0e9d820dec76ddc329e2dfee67b122821dcee"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000180)=0x79, 0x4) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000200), &(0x7f00000002c0)=0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)={{0x14, 0x10, 0x1, 0x0, 0x2000000}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}], {0x14}}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x0) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond_slave_1\x00'}) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=r8, @ANYBLOB="05"], 0x6c}, 0x1, 0x0, 0x0, 0x10004000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r6, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) 2.933053951s ago: executing program 0 (id=5818): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x76, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x68}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x90) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="c4000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000500000000000000fbffffffffffffff0000000000000000000000000000400000000000000000020000000000000000020000000000000000000000000000000c0015006dc7350002"], 0xc4}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bond0\x00'}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=@updpolicy={0xb8, 0x19, 0x501, 0x0, 0x0, {{@in=@multicast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0xfffffffffffffffc}}}, 0xb8}}, 0x0) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087"], 0xb8}}, 0x2c000010) 2.539479215s ago: executing program 0 (id=5819): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4000000010002bdd55886c7795cd000000000200", @ANYRES32=0x0, @ANYBLOB="0000000000000000140003007465616d30"], 0x40}, 0x1, 0x0, 0x0, 0x400c8e5}, 0x0) sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f00000000c0)={0x29c, 0x1, 0x3, 0x100, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFQA_PAYLOAD={0x7c, 0xa, "857349dd21beb17b83375371b077c39ff03cd5a54601ff3eb2fd1c32413299a0c83a1883e994c43b379e6a9b451cdd0a5fe28cc7a667c4a8e53fc92f7d0f7dbc2fccaa901ce45c29877ad5552ba2f37d413b699efc3c52be070c1eb183308071e6362991f665672a73539d99d4bc9e9193e25412b49ed0d3"}, @NFQA_VLAN={0x4c, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x4}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0xe}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x9a8}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x8}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0xff67}]}, @NFQA_EXP={0xf8, 0xf, 0x0, 0x1, [@CTA_EXPECT_TUPLE={0xa4, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xbc}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_MASK={0x50, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010101}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @empty}}, {0x14, 0x4, @private2}}}]}]}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x3ab}, @NFQA_VLAN={0x14, 0x13, 0x0, 0x1, [@NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x9}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}]}, @NFQA_PAYLOAD={0x9f, 0xa, "d109d3644f2f3474c2633c911dbcafc4013bc3a0a95eec1ee8f09efb5ba678fdc1e40ea4a83c4b21eb556a8dc14d275cf4a0a7f1610ba1b8c2dd30595dccb0648afa09a19fb8dc7c894a31ee0ba659953cbcd4a1214ec9c74d9494aee6f9ffc07e970c2e4866406a6c57416b9e6d4d602d0adbb9d955c03ceff85720df7f1204df94ee0e7c3fbb47a2d9e611b2757843ecbb7bfcca210cb5f29081"}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x4e3}}]}, 0x29c}, 0x1, 0x0, 0x0, 0x8080}, 0x4000001) 2.163898436s ago: executing program 0 (id=5821): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) gettid() sendmsg$unix(0xffffffffffffffff, 0x0, 0x2004c000) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000003c0)={{{@in=@initdev, @in=@remote}}, {{@in=@multicast2}}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r6 = gettid() sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000100)={0x0, 0x600, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r5, 0x1, 0x70bd35, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r6}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) ioctl$sock_SIOCGPGRP(r1, 0x8904, 0x0) getgid() accept(0xffffffffffffffff, &(0x7f00000016c0)=@xdp, &(0x7f0000001740)=0x80) close(0xffffffffffffffff) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000020000001c0012000c000100626f6e6400"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010001fff000000008100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000200012800b00010067656e657665000010000280060005004e24000004000e0008000a00", @ANYRES32=r2], 0x48}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 1.836825205s ago: executing program 3 (id=5822): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x5, 0x4, 0x2, 0x7, 0x0, 0x1, 0xe92}, 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={0xffffffffffffffff, r1}, 0xc) r2 = accept$inet(r0, 0x0, &(0x7f0000000040)) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000003000000850000001300000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @sched_cls=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0xfdef, &(0x7f00000002c0)={@remote, @empty, @val={@val={0x88a8, 0x6, 0x0, 0x2}, {0x8100, 0x6, 0x1}}, {@llc_tr={0x11, {@snap={0x55, 0x1, "d7", 'U-l', 0x15}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0x88, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000340)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @private=0xa010101}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x24, 0x200000b, r6}}], 0x20, 0x2400e044}, 0x0) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_id=r6, 0x4) sendmmsg$inet(r0, &(0x7f0000001800)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000500)="391adf0e4ffc9d2b4e6681c97cb814e1d683fd7065b082e42549b6aac265d8f06fc74d6d2b95f827098a17bbab52d616469f034f5d955822d906343ab344782016e80fd7adb151", 0x47}, {&(0x7f00000005c0)="eb8a7649f11eee0c8a704e458b76ad37e1361c43b4078ae926cbf9f823f27bdb489f6255019cad0e6f95137d3f", 0x2d}, {&(0x7f0000000780)="2fd4cf47433cc832f7b9287f69f290312b728f0301db30fe42e0111c154e4f1cc54bdb7ebc984a090c727b33abe6f725c536d2399324bd7638461683b158b64c52908231fcb154449b4b006264288e06b92515a685f214020f7500bc89ee18805e22a030c25f1a2a9c3705eef0ca40beb97c799a4002269020c7c12e4f93d7dd822eb42ca542bf7cffc36de4e561fb13629158facaf1ede872cb5d242592b763a06cda9da620892350c59b3580054f2cef3416e47adfd7347bbe95903fa8", 0xbe}, {&(0x7f0000000880)="fa8f73530bdc6839cbd7de2c3cfdf1eda862656f65d5d0c4c2844e668b2a9c3003a5b2", 0x23}], 0x4}}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000b80)="5f1308", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000d00)="736ecdd03b3937767fb82186dbda22c1200098cb486edd05ac88cf8c55717a30a2aa0dab40047756fbceec218470121af7f9934da3905f7fc4caad11bbf2db81c6462513a516da69f191e95538089f0d7717c9c182", 0x55}, {&(0x7f0000000d80)="ec008fdc8d2e6f8167e70b7173e4", 0xe}], 0x2}}, {{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001000)="a3e52c39765c8c792d36b1ac778d0c400244d38bd28936afd3dec9954548e60db10ba3bad3eb30dfa68747b776550895f5aff818eb4b6f74182be274e6cb67184e321d6f7e59b2cc3ace646baf9b6cd5c9cedf032a09f7ca1029b7fd0fd92332290a385a8c84f2f438d1c5ca31a21d086dce6913142053acfbdacf70c28d2c44e5d81d92f5e5c9fa53b531ffb1284da81d074eadb09b76a7fff33f9b34cfaffff031d2d75a163f69b708d627e08ff5570e943304faa60966bc9d9b70f5c8138d0d2aa04d47f9f49741bf6bcdd4c68eebf6", 0xd1}, {&(0x7f0000001100)="75619ba9b63af95745741a7167ca1c6679d83b202eefa6dc7a5eec0dfe04ea78263ad3d4272a1d707f17976212eb03d419e2adc073b16437f374d3cd3b6f7718fcf2aeed196dde83e668def7840db0d319c7ccf58bde50fe137d1de465875c8bd2aa2cd9c100dfe6c353b02ff314dbed4b08fd40d65c1364a08ed9ca28ce3bdaa8", 0x81}], 0x2}}], 0x4, 0x4000000) 1.448110673s ago: executing program 1 (id=5825): socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="19020000000000000000000008000000850000530ab6fcd4918ef9b636470db8815067000000a364d810ae0179b58df144b80a806467fcb4e91f4c2b21cc0c8bafeb79d412a6a0963b3a9e70bf0f5c3bf1401d9c5e8b1adbf3a056654e8706e81897202bbfadc7d67be40fcff55293d1f524194bcd82c2bc4d6ab2e5fe1c73e762866468f70ea6d195d20bac7053c4fc976239c2f131810d7db0227dc1d15901cfe2316971ae840200"/181], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000007008500000073"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x64}}, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0101000005000008090001e772797a30000000005c000000030a03000000000000000000050000020000010073797a30000000000900030073797a300000000008000c400000000328000480"], 0xa4}}, 0x0) (async) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r4) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r7, @ANYBLOB="01002cbd7000fddbdf250b00000008000300", @ANYRES32=r8, @ANYBLOB="5000508011000100ec3bd87b59ecb393bce7f9ac6700000009000100c8803781500000000400060007000400478d000005000900020000000c00088004"], 0xa8}, 0x1, 0x0, 0x0, 0x20080000}, 0x40000) (async) sendmsg$NL80211_CMD_LEAVE_OCB(r4, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x14, r7, 0x0, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x4000080) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r9, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r11 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) (async) socket$kcm(0x29, 0x1, 0x0) (async) write$tun(r10, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x5, 0x0, 0x2, 0xe7b6, 0x14, 0x2}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x8, 0x28, 0x68, 0x0, 0x3, 0x6, 0x0, @private=0xa010100, @multicast1}, {{0x4e20, 0x4e28, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x10, 0x7, 0x0, 0x8}}}}, 0x36) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) 1.337442549s ago: executing program 1 (id=5826): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c0200001900010025bd700001000000fe8800000000000000000000000001010000000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000010000000000000000008000000000009000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000500020000000000000100010000000000840105"], 0x23c}, 0x1, 0x0, 0x0, 0x11}, 0x4000) 1.211723468s ago: executing program 1 (id=5827): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {}, {0xa}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r6, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xe, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="05000000040000000c0000000b"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r8], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r9}, 0xc) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r7, 0x8983, &(0x7f0000000080)={0x6, 'geneve1\x00', {0x1}, 0x86e}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r7, 0x8983, &(0x7f00000001c0)={0x0, 'veth0_vlan\x00', {0x4}, 0x1fc}) 989.501536ms ago: executing program 1 (id=5828): r0 = socket$inet(0x2, 0xa, 0xfffff7fd) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) (async) recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x0, 0x0, 0x80000008}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) (async) pipe(&(0x7f0000000200)) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 918.648013ms ago: executing program 1 (id=5829): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) syz_emit_ethernet(0x1ee, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x1b8, 0x3a, 0x0, @remote, @local, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "8bb91d", 0x0, 0x11, 0x0, @local, @empty, [@fragment, @hopopts={0x0, 0x200000000000006c, '\x00', [@ra, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @generic={0x0, 0x9d, "a17e9ab13f6e142b20582c8d220c698a74dbf13dfc0ad1f526dfc43313759300929090dd4792ce67ea9f8769d3246f94412c56e0247939ed4b318e4b6066b72d91d9aff97fcf30977dfd4028dea535a8e9d1682c4794d255d62089716f2f97577f9bef264da3cfd3e5511fb253122f61808a73cc2e760f93ceb68a0db2613cf0956b23235f057c2f980a19266a6bb4a33a17f550a571c5b4211c6fa371"}, @ra, @generic={0x0, 0x8c, "65fd1a52737fa1ec91495f4d25a766a5dd36bcffb376f4b35d4a5bc51b0f8fb9a273282a9c8ef192a4de26c8732765dbeb6ce083e81cebf0612d1cc7956b78fb34ce0e4a867c8b4094bab04b23680ba97ad5c624055e8504a7a121cf38a402a7aa80e05dbe56fecab8b014420231c0e997cbfda9bdc7f29e3a8b13dcfc396cf6ff1fcd8a7f43a107871fdd7e"}, @generic={0x0, 0x32, "8b168e4b48529453d91cea424030c8b200632af95e7c30322241dd567db14507f8b523b418a0edc41397a2f639f9f6c3b379"}, @calipso={0x7, 0x8}]}]}}}}}}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SPLIT(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r3, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0xffffff44, 0x9, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40080b1}, 0x80010) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4ea4, 0x20000, @local, 0x9}, 0x1c) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x9588, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b70500000800000085000000a900000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x1002, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000070a010400000000000000000200000016d5d097de365aa93c48dd2c85ae1ca06e022fd8"], 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x0) setsockopt$inet_int(r5, 0x0, 0x5, 0x0, 0x0) 794.38023ms ago: executing program 3 (id=5830): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x84, 0x2c, 0xe3f, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x10, 0xa}, {0x0, 0x9}, {0x10}}, [@filter_kind_options=@f_flower={{0xb}, {0x54, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_IPV6_SRC_MASK={0x14, 0xf, [0x0, 0xff0000ff]}, @TCA_FLOWER_KEY_TCP_SRC={0x6}, @TCA_FLOWER_KEY_CT_ZONE_MASK={0x6, 0x5e, 0x401}, @TCA_FLOWER_KEY_ARP_SIP_MASK={0x8, 0x3a, 0xff000000}, @TCA_FLOWER_KEY_IPV6_DST={0x14, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x30044801}, 0x4080) 513.94638ms ago: executing program 3 (id=5831): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="b8000000190001000000000000000300e00000020000000000000000000000000000000000000000000000000000003bbcd68600000000000a00200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0800000000000000100000000000000002000000010000000000000000000000ff0f00000000000073b4ffffffffffffffffffffffffffff0000000000000000000000001000000000000000000000200200000000000000fffffffffffffffffe"], 0xb8}}, 0x4004) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x2c000010) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x3000, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) 418.182707ms ago: executing program 3 (id=5832): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="170000001400010028de4ae677dbdf2502"], 0x20}}, 0x40000c0) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000200)=[@in6={0xa, 0x4e21, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x5}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000040)={r3, @in={{0x2, 0x4e20, @local}}, 0x7f7, 0x8}, 0x90) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000600)={r3}, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="11000000040000000400000005"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800009d0000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xe, 0x0, &(0x7f0000000040)="34868893ac1aa87b3776ed8b1a00", 0x0, 0x10000, 0x2a0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r7, 0x112, 0x9, 0x0, &(0x7f0000000040)) close(r6) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xb, 0x7, 0x10001, 0x9, 0x10a0}, 0x50) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$bt_hci(r8, 0x0, 0x14, 0x0, &(0x7f0000000540)=0x3) syz_emit_ethernet(0x1e, &(0x7f0000000000)={@broadcast, @multicast, @void, {@can={0xc, {{0x4, 0x1, 0x0, 0x1}, 0x4, 0x3, 0x0, 0x0, "8435d84cd87796cc"}}}}, 0x0) 332.458359ms ago: executing program 0 (id=5833): r0 = socket$netlink(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) splice(r1, 0x0, r2, &(0x7f00000002c0), 0x6, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000000)=@ethtool_cmd={0x7, 0xff, 0x1, 0x1, 0x8, 0x3, 0x4, 0x6, 0x0, 0x7, 0x80000003, 0x7fffffff, 0xfffb, 0x8, 0x5, 0x6, [0xe, 0xfd]}}) r6 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[], 0x6c}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="180000003a002902008000007adbdf2502", @ANYRES64=r0], 0x1c}, 0x1, 0x0, 0x0, 0x24000800}, 0x20000000) r7 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r7, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0x4, @loopback, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0x1}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="2000000087000000840000000800000020010000a808abcb7f29f552000000002000000000000000840000000800000100000000000000000000ffdf0a010100"], 0x40, 0x4855}, 0x24000052) 235.72811ms ago: executing program 1 (id=5834): socket$inet6(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0xa8442, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x4, r1, 0x1, 0x2, 0x6, @broadcast}, 0x14) r2 = socket$kcm(0x10, 0x2, 0x0) (async, rerun: 64) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="01002abd7000ffdbdf2503000000180001801400020073797a5f74756e0000000000000000000500020004000000"], 0x34}, 0x1, 0x0, 0x0, 0x20009805}, 0x40040c0) (async, rerun: 64) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x2400c054}, 0x404c094) (async, rerun: 64) r6 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r6, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r6, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @private1}, 0x1c) (async) r7 = socket$inet6(0xa, 0x5, 0x0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd27, 0x8000, {0x0, 0x0, 0x0, r8, {0x8, 0x7}, {}, {0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)={0x12c, r5, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x20008815}, 0x0) setsockopt$sock_int(r7, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r7, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) (async, rerun: 32) connect$inet6(r7, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c) (async, rerun: 32) connect$inet6(r6, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @private1, 0x5}, 0x1c) (async) socket(0x2f, 0xf551507102c65a91, 0x8001) (async) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) (async) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x2004c800}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) 91.999405ms ago: executing program 2 (id=5835): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="1808000000040085ff00000000fd0020851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000ff6608fffffff3f800180000000000000000000000001000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x1e}, 0x94) 77.585935ms ago: executing program 4 (id=5836): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=ANY=[@ANYBLOB="48000000090603000000000000000000050000000900020073797a3100000000050001000700000020000780060004404e21000005000700ff0000000c000180080001400a01010107e24eef21b016a3d14b9913d9f1f7601732d31824829f06948e7d32b3a23fd9407100ea6c8648ca351367610b1c63d27804644728158437f2d36dd11712329f7848a9f823c7e3f626d752bc009b8ad23d2a372595b2e7471a1c76551133e122ba1ca530ba10c7ddcef354a35f2f25b7e7e9c211ffba17dae31826e88c3a624883ea6503d4c9377b518f9e5742e98f080c57a82e59b4882a139811f86f9f641d5021189c6a4f7c266f200f"], 0x48}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) (async) r1 = socket$inet6(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000c00)={'batadv0\x00', 0x0}) (async) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r5, 0x84, 0x7d, &(0x7f0000000840)=""/4127, &(0x7f0000000000)=0x101f) (async) sendmsg$ETHTOOL_MSG_WOL_GET(r2, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x34, r3, 0x1, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x2820142b6b7ef621}, 0x40000) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@migrate={0xb4, 0x21, 0x1, 0x4, 0x0, {{@in6=@local, @in6=@dev={0xfe, 0x80, '\x00', 0x2a}, 0x0, 0x0, 0x4000, 0x2, 0xa, 0x0, 0xa0, 0x2e}, 0x6e6bb7}, [@migrate={0x50, 0x11, [{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@multicast1, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@loopback, 0x3c, 0x4, 0x0, 0x0, 0xa, 0x2}]}, @offload={0xc, 0x1c, {0x0, 0x6}}, @XFRMA_IF_ID={0x8, 0x1f, 0x1}]}, 0xb4}, 0x1, 0x0, 0x0, 0x44004}, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, 0x0) (async) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000001c0)={'syz_tun\x00', 0x0}) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x41, '\x00', r8, @fallback, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000a479df"], 0x0, 0x80, 0x0, 0x0, 0x0, 0x2c, '\x00', r8, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r10, r8, 0x25, 0x0, @val=@netkit={@void, @value=r9}}, 0x1c) (async) syz_emit_ethernet(0x2596, &(0x7f0000005100)=ANY=[], 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)=@newnexthop={0xc8, 0x68, 0x200, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x1, 0x0, 0x20}, [@NHA_RES_GROUP={0x3c, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x9}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x64b}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x7}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x6}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x4}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x7}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xffffffff}]}, @NHA_BLACKHOLE={0x4}, @NHA_RES_GROUP={0x2c, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x1}, @NHA_RES_GROUP_BUCKETS={0x6}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x4}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x5d57}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x2}]}, @NHA_GATEWAY={0x14, 0x6, @ip4=@multicast1}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @SEG6_LOCAL_NH4={0x8, 0x4, @loopback}}, @NHA_GROUP={0xc, 0x2, [{0x1}]}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x4}, @NHA_OIF={0x8, 0x5, r4}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x7}]}, 0xc8}, 0x1, 0x0, 0x0, 0x90}, 0x20000800) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) (async) r12 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) (async) r13 = socket$nl_route(0x10, 0x3, 0x0) (async) r14 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x4c, 0x10, 0x403, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20101, 0x1c564}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6, 0x1, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r15}, @IFLA_MASTER={0x8, 0xa, r15}]}, 0x4c}, 0x1, 0xba01, 0x0, 0x40d0}, 0x810) (async) bpf$PROG_LOAD(0x5, &(0x7f00000027c0)={0x4, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="1802000003000000000000000000000085000000a000000095000000000000001f4a4b535644698f12dc939f95a296"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$GTP_CMD_DELPDP(r11, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r12, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_FAMILY={0x5, 0xd, 0x29}]}, 0x40}, 0x1, 0x0, 0x0, 0x4080}, 0x4) 0s ago: executing program 2 (id=5837): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x34, r3, 0x701, 0x0, 0x0, {0xb}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001f80), r1) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r4, 0x1, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x2006) kernel console output (not intermixed with test programs): aller0>, priority 0 [ 826.823405][ T36] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 826.834654][ T36] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 826.852560][T22555] tipc: Disabling bearer [ 827.009619][ T57] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 827.031489][ T57] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 42796 - 0 [ 827.060326][ T57] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 827.141917][T10083] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 827.183064][T10083] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 42796 - 0 [ 827.199756][T22576] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4454'. [ 827.219355][T10083] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 827.363099][T22585] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4456'. [ 827.375599][T22586] netlink: 'syz.0.4453': attribute type 3 has an invalid length. [ 827.413346][ T57] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 827.429511][ T57] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 42796 - 0 [ 827.456882][ T57] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 827.494611][ T36] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 827.509810][ T36] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 42796 - 0 [ 827.524469][ T36] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 828.137225][T20314] udevd[20314]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 828.256754][T22621] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 828.280868][T22621] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 828.421283][T22630] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 828.435116][T22621] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 828.446927][T22621] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 828.469521][T22633] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 828.531940][T22621] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 828.541898][T22621] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 828.583961][T22633] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 828.631757][T22621] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 828.641766][T22621] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 828.659972][T22633] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 828.735565][ T1182] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 828.752889][ T1182] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 828.766648][T22633] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 828.815932][ T1119] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 828.826993][ T1119] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 828.875665][ T1119] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 828.887384][ T1119] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 828.921635][ T1119] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 828.931034][ T1119] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 828.952649][ T1119] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 828.971329][ T1119] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 828.995278][ T1119] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.004677][ T1119] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.233275][T22650] virt_wifi0 speed is unknown, defaulting to 1000 [ 829.268452][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 830.404256][T22708] syzkaller0: entered promiscuous mode [ 830.414139][T22708] syzkaller0: entered allmulticast mode [ 832.674477][T22742] virt_wifi0 speed is unknown, defaulting to 1000 [ 832.925794][T22770] __nla_validate_parse: 11 callbacks suppressed [ 832.925810][T22770] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4505'. [ 833.077653][T22779] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 833.090020][T22779] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4507'. [ 833.130703][T22715] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 833.220491][T22784] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4508'. [ 833.272508][T22784] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4508'. [ 833.366545][T22784] geneve3: entered promiscuous mode [ 833.387407][T22784] geneve3: entered allmulticast mode [ 833.412729][ T1119] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 833.463898][ T1119] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 833.511063][ T1119] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 833.559054][ T1182] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 833.929387][T22816] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 833.963752][T22816] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 833.994206][T22819] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4518'. [ 834.003495][T22816] hsr0: entered promiscuous mode [ 834.003557][T22816] hsr0: entered allmulticast mode [ 834.003574][T22816] hsr_slave_0: entered allmulticast mode [ 834.003591][T22816] hsr_slave_1: entered allmulticast mode [ 834.081838][T22822] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4520'. [ 834.247181][T22830] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4523'. [ 834.275851][T22830] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4523'. [ 834.420899][T22830] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4523'. [ 834.456259][T22830] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4523'. [ 834.679883][T22852] vlan0: entered allmulticast mode [ 834.685191][T22852] bridge3: entered allmulticast mode [ 834.693269][T22852] bridge3: port 1(erspan0) entered blocking state [ 834.702652][T22852] bridge3: port 1(erspan0) entered disabled state [ 834.710604][T22852] erspan0: entered allmulticast mode [ 834.718491][T22852] erspan0: entered promiscuous mode [ 835.807843][T22880] batman_adv: batadv0: Interface deactivated: vlan2 [ 835.953676][T22897] bond6: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3) [ 836.022426][T22897] bond6 (unregistering): Released all slaves [ 836.087724][T22904] tipc: Enabled bearer , priority 0 [ 836.104305][T22895] syzkaller0: entered promiscuous mode [ 836.120534][T22895] syzkaller0: entered allmulticast mode [ 836.173268][ T36] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 836.196321][ T36] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.232590][T22884] tipc: Resetting bearer [ 836.324281][T22884] tipc: Disabling bearer [ 836.370815][ T36] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 836.396260][ T36] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.410309][ T36] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 836.419321][ T36] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.443778][ T36] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 836.468068][ T36] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.865263][T22940] syzkaller0: entered promiscuous mode [ 836.871030][T22940] syzkaller0: entered allmulticast mode [ 838.078388][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 839.261043][T22973] __nla_validate_parse: 11 callbacks suppressed [ 839.261062][T22973] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4562'. [ 839.325291][T22983] IPVS: set_ctl: invalid protocol: 44 172.20.20.170:20001 [ 839.359082][T22988] netlink: 288 bytes leftover after parsing attributes in process `syz.0.4567'. [ 839.392374][T22988] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4567'. [ 839.405843][T22988] netlink: 'syz.0.4567': attribute type 1 has an invalid length. [ 839.449385][T22991] netlink: 'syz.1.4569': attribute type 1 has an invalid length. [ 839.486088][T22988] bond7: entered promiscuous mode [ 839.491721][T22988] 8021q: adding VLAN 0 to HW filter on device bond7 [ 839.523475][T22988] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4567'. [ 839.532808][T22988] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4567'. [ 839.554455][T22991] 8021q: adding VLAN 0 to HW filter on device bond5 [ 839.567503][T22975] syzkaller0: entered promiscuous mode [ 839.576981][T22975] syzkaller0: entered allmulticast mode [ 839.591931][T22989] tipc: Enabled bearer , priority 0 [ 839.601654][T23002] syzkaller0: entered promiscuous mode [ 839.608751][T23002] syzkaller0: entered allmulticast mode [ 839.625060][T22974] tipc: Resetting bearer [ 839.669549][T22974] tipc: Disabling bearer [ 839.676622][T23005] netlink: 272 bytes leftover after parsing attributes in process `syz.1.4571'. [ 839.890028][T23013] netlink: 'syz.2.4573': attribute type 1 has an invalid length. [ 839.913345][T23016] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4574'. [ 839.938750][T23013] dummy0: left allmulticast mode [ 839.944749][T23017] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4574'. [ 839.944820][T23013] dummy0: left promiscuous mode [ 839.964537][T23013] bridge4: port 1(dummy0) entered disabled state [ 839.986231][T23013] bond7: (slave dummy0): making interface the new active one [ 840.011059][T23013] bond7: (slave dummy0): Enslaving as an active interface with an up link [ 840.036812][T23020] bond7: (slave dummy0): Releasing active interface [ 840.074163][T23020] : (slave bond_slave_0): Releasing backup interface [ 840.103903][T23020] : (slave bond_slave_1): Releasing backup interface [ 840.161828][T23020] team0: Port device team_slave_0 removed [ 840.200531][T23020] team0: Port device team_slave_1 removed [ 840.222072][T23020] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 840.694257][T23044] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4581'. [ 840.760339][T23042] xt_hashlimit: size too large, truncated to 1048576 [ 841.122703][T23037] bridge0: port 2(bridge_slave_1) entered blocking state [ 841.130064][T23037] bridge0: port 2(bridge_slave_1) entered forwarding state [ 841.163381][T23037] 8021q: adding VLAN 0 to HW filter on device bond0 [ 841.184354][T23037] 8021q: adding VLAN 0 to HW filter on device team0 [ 841.206492][T23037] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 841.303565][T23037] 8021q: adding VLAN 0 to HW filter on device bond1 [ 841.336180][T23037] 8021q: adding VLAN 0 to HW filter on device bond3 [ 841.362685][T23037] 8021q: adding VLAN 0 to HW filter on device bond4 [ 841.389596][T23037] 8021q: adding VLAN 0 to HW filter on device eth0 [ 841.412538][T23037] 8021q: adding VLAN 0 to HW filter on device eth1 [ 841.440502][T23037] 8021q: adding VLAN 0 to HW filter on device eth2 [ 841.451944][T23037] 8021q: adding VLAN 0 to HW filter on device eth3 [ 841.506470][T10083] bridge0: port 1(bridge_slave_0) entered blocking state [ 841.513830][T10083] bridge0: port 1(bridge_slave_0) entered forwarding state [ 841.681375][T23070] gretap0: entered promiscuous mode [ 841.707641][T23070] vlan2: entered promiscuous mode [ 841.751378][ T1130] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 841.782734][ T1130] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 841.801611][T23071] syzkaller0: entered promiscuous mode [ 841.810381][T23071] syzkaller0: entered allmulticast mode [ 841.827771][T23082] tipc: Enabled bearer , priority 0 [ 841.852644][T23079] syzkaller0: entered promiscuous mode [ 841.867201][T23079] syzkaller0: entered allmulticast mode [ 841.876338][ T1130] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 841.927637][T23055] tipc: Resetting bearer [ 841.963584][T23055] tipc: Disabling bearer [ 842.015044][ T1130] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 842.268084][T23114] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4592'. [ 843.136485][ T1130] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 843.155761][ T1130] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 843.174774][T23170] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 843.225247][T23178] openvswitch: netlink: Missing key (keys=c0, expected=1100) [ 843.256707][T23170] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 843.447580][T23188] veth0: entered promiscuous mode [ 843.526190][T23194] veth0: left promiscuous mode [ 843.742084][T23210] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 844.256747][T23234] xt_CT: No such helper "syz1" [ 844.383793][T23249] __nla_validate_parse: 42 callbacks suppressed [ 844.383813][T23249] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4634'. [ 844.414987][T23245] ip_tables: iptables: counters copy to user failed while replacing table [ 844.439589][T23249] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4634'. [ 844.580754][T23252] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4636'. [ 844.590308][T23252] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4636'. [ 844.757732][T23260] netlink: 27 bytes leftover after parsing attributes in process `syz.2.4638'. [ 844.805132][T23261] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 845.245157][T23281] block nbd1: NBD_DISCONNECT [ 845.275400][T23281] block nbd1: Send disconnect failed -32 [ 845.288316][T23281] block nbd1: Send disconnect failed -32 [ 845.319631][T23281] block nbd1: shutting down sockets [ 845.464633][T23268] syzkaller0: entered promiscuous mode [ 845.479819][T23268] syzkaller0: entered allmulticast mode [ 845.545061][ T1130] pimreg9: left allmulticast mode [ 845.794251][ T1130] bond3 (unregistering): (slave erspan1): Releasing active interface [ 845.819770][ T1130] gretap0 (unregistering): left allmulticast mode [ 845.855656][ T1130] bond1 (unregistering): (slave gretap1): Releasing backup interface [ 846.032733][ T1130] bond8 (unregistering): (slave geneve3): Releasing active interface [ 846.062333][ T1130] bond5 (unregistering): (slave bridge1): Releasing active interface [ 846.102330][ T1130] bond0 (unregistering): Released all slaves [ 846.114212][ T1130] bond1 (unregistering): (slave bond2): Releasing backup interface [ 846.122929][ T1130] bond1 (unregistering): Released all slaves [ 846.143116][ T1130] bond2 (unregistering): Released all slaves [ 846.160138][ T1130] bond3 (unregistering): Released all slaves [ 846.176922][ T1130] bond4 (unregistering): (slave veth3): Releasing active interface [ 846.197271][ T1130] bond4 (unregistering): Released all slaves [ 846.212611][ T1130] bond5 (unregistering): Released all slaves [ 846.229047][ T1130] bond6 (unregistering): (slave batadv1): Releasing backup interface [ 846.238586][ T1130] bond6 (unregistering): Released all slaves [ 846.254867][ T1130] bond7 (unregistering): Released all slaves [ 846.275646][ T1130] bond8 (unregistering): Released all slaves [ 846.299400][ T1130] bond9 (unregistering): Released all slaves [ 846.314539][ T1130] bond10 (unregistering): Released all slaves [ 846.330720][ T1130] bond11 (unregistering): Released all slaves [ 846.345650][ T1130] bond12 (unregistering): Released all slaves [ 846.370301][ T1130] bond13 (unregistering): Released all slaves [ 848.793450][ T1130] : left promiscuous mode [ 848.859663][T23326] x_tables: unsorted entry at hook 1 [ 848.879218][T23326] netlink: 160 bytes leftover after parsing attributes in process `syz.4.4656'. [ 848.906049][ T1130] tipc: Disabling bearer [ 848.927666][T23326] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4656'. [ 848.949918][ T1130] tipc: Left network mode [ 849.147541][T23342] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4661'. [ 849.717798][T23366] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4670'. [ 849.789832][T23363] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 1536 - 0 [ 849.808574][T23372] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4674'. [ 849.817590][T23363] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 849.991360][T23384] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4677'. [ 850.000723][T23384] netlink: 5 bytes leftover after parsing attributes in process `syz.4.4677'. [ 850.010153][T23384] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4677'. [ 850.022650][T23384] netlink: 26 bytes leftover after parsing attributes in process `syz.4.4677'. [ 850.036406][T23384] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4677'. [ 850.063030][T23363] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 1536 - 0 [ 850.074482][T23363] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 850.116947][T23389] netlink: 'syz.1.4675': attribute type 83 has an invalid length. [ 850.129589][T23389] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4675'. [ 850.166740][T23385] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4675'. [ 850.207633][T23363] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 1536 - 0 [ 850.232501][T23363] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 850.317762][T23363] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 1536 - 0 [ 850.328012][T23363] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 850.519863][ T1102] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 1536 - 0 [ 850.532200][ T1102] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 850.543009][T23404] FAULT_INJECTION: forcing a failure. [ 850.543009][T23404] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 850.571131][T23404] CPU: 1 UID: 0 PID: 23404 Comm: syz.3.4682 Not tainted syzkaller #0 PREEMPT(full) [ 850.571159][T23404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 850.571174][T23404] Call Trace: [ 850.571183][T23404] [ 850.571193][T23404] dump_stack_lvl+0xe8/0x150 [ 850.571232][T23404] should_fail_ex+0x40c/0x560 [ 850.571267][T23404] _copy_from_user+0x2d/0xb0 [ 850.571292][T23404] ___sys_sendmsg+0x1c6/0x360 [ 850.571319][T23404] ? __lock_acquire+0x683/0x2cf0 [ 850.571357][T23404] ? __pfx____sys_sendmsg+0x10/0x10 [ 850.571422][T23404] ? __fget_files+0x2a/0x420 [ 850.571454][T23404] ? __fget_files+0x3a2/0x420 [ 850.571496][T23404] __x64_sys_sendmsg+0x1b1/0x290 [ 850.571528][T23404] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 850.571573][T23404] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 850.571600][T23404] do_syscall_64+0x174/0x580 [ 850.571628][T23404] ? trace_irq_disable+0x3b/0x140 [ 850.571659][T23404] ? clear_bhb_loop+0x40/0x90 [ 850.571688][T23404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 850.571711][T23404] RIP: 0033:0x7f13bb39e019 [ 850.571733][T23404] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 850.571754][T23404] RSP: 002b:00007f13bc2c2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 850.571779][T23404] RAX: ffffffffffffffda RBX: 00007f13bb625fa0 RCX: 00007f13bb39e019 [ 850.571808][T23404] RDX: 000000002c000010 RSI: 0000200000000000 RDI: 0000000000000004 [ 850.571823][T23404] RBP: 00007f13bc2c2090 R08: 0000000000000000 R09: 0000000000000000 [ 850.571837][T23404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 850.571851][T23404] R13: 00007f13bb626038 R14: 00007f13bb625fa0 R15: 00007ffd99a9eef8 [ 850.571910][T23404] [ 850.769524][ T36] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 1536 - 0 [ 850.800116][ T36] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 850.998086][ T36] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 1536 - 0 [ 851.013408][ T36] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 851.132321][T10083] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 1536 - 0 [ 851.152792][T10083] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 851.232886][ T1130] hsr_slave_0: left promiscuous mode [ 851.251188][ T1130] hsr_slave_1: left promiscuous mode [ 851.272877][ T1130] veth1_macvtap: left promiscuous mode [ 851.287240][ T1130] veth0_macvtap: left promiscuous mode [ 851.301875][ T1130] veth1_vlan: left promiscuous mode [ 851.304923][T23429] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4689'. [ 851.313357][ T1130] veth0_vlan: left promiscuous mode [ 851.951092][ T36] smbdirect: ib_dev[syz0] removed [ 852.725488][ T1130] IPVS: stop unused estimator thread 0... [ 853.503371][T23508] FAULT_INJECTION: forcing a failure. [ 853.503371][T23508] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 853.516859][T23508] CPU: 1 UID: 0 PID: 23508 Comm: syz.0.4712 Not tainted syzkaller #0 PREEMPT(full) [ 853.516889][T23508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 853.516903][T23508] Call Trace: [ 853.516912][T23508] [ 853.516922][T23508] dump_stack_lvl+0xe8/0x150 [ 853.516962][T23508] should_fail_ex+0x40c/0x560 [ 853.517008][T23508] _copy_from_iter+0x1d3/0x1660 [ 853.517039][T23508] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 853.517074][T23508] ? dev_get_by_index+0x22/0x2d0 [ 853.517106][T23508] ? __pfx__copy_from_iter+0x10/0x10 [ 853.517140][T23508] ? dev_get_by_index+0x22/0x2d0 [ 853.517168][T23508] ? dev_get_by_index+0x22/0x2d0 [ 853.517211][T23508] packet_sendmsg+0x2f1d/0x5040 [ 853.517240][T23508] ? aa_file_perm+0x18b/0x15f0 [ 853.517265][T23508] ? aa_label_sk_perm+0x532/0x6e0 [ 853.517302][T23508] ? __lock_acquire+0x683/0x2cf0 [ 853.517343][T23508] ? __lock_acquire+0x683/0x2cf0 [ 853.517387][T23508] ? __pfx_packet_sendmsg+0x10/0x10 [ 853.517426][T23508] ? __might_fault+0xaf/0x130 [ 853.517451][T23508] ? __pfx_aa_sk_perm+0x10/0x10 [ 853.517476][T23508] ? aa_sock_msg_perm+0xf1/0x1b0 [ 853.517506][T23508] ? __pfx_packet_sendmsg+0x10/0x10 [ 853.517535][T23508] sock_sendmsg_nosec+0x13a/0x180 [ 853.517571][T23508] __sys_sendto+0x408/0x5a0 [ 853.517594][T23508] ? ksys_write+0x1e6/0x270 [ 853.517621][T23508] ? __pfx___sys_sendto+0x10/0x10 [ 853.517642][T23508] ? __mutex_unlock_slowpath+0x731/0x900 [ 853.517701][T23508] ? __pfx_ksys_write+0x10/0x10 [ 853.517728][T23508] __x64_sys_sendto+0xde/0x100 [ 853.517759][T23508] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 853.517802][T23508] do_syscall_64+0x174/0x580 [ 853.517829][T23508] ? trace_irq_disable+0x3b/0x140 [ 853.517860][T23508] ? clear_bhb_loop+0x40/0x90 [ 853.517889][T23508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 853.517913][T23508] RIP: 0033:0x7f4ba619e019 [ 853.517933][T23508] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 853.517954][T23508] RSP: 002b:00007f4ba70b4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 853.517978][T23508] RAX: ffffffffffffffda RBX: 00007f4ba6425fa0 RCX: 00007f4ba619e019 [ 853.517998][T23508] RDX: 000000000000fdef RSI: 00002000000002c0 RDI: 0000000000000006 [ 853.518014][T23508] RBP: 00007f4ba70b4090 R08: 0000200000000140 R09: 0000000000000014 [ 853.518029][T23508] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 853.518044][T23508] R13: 00007f4ba6426038 R14: 00007f4ba6425fa0 R15: 00007ffe877e1f08 [ 853.518080][T23508] [ 853.822175][T23409] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 854.793508][T23562] __nla_validate_parse: 14 callbacks suppressed [ 854.793529][T23562] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4733'. [ 854.897292][T23568] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4735'. [ 854.918375][T23568] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4735'. [ 854.991307][T23568] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4735'. [ 855.002461][T23568] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4735'. [ 855.087216][T23579] openvswitch: netlink: Key 7 has unexpected len 4 expected 12 [ 855.108253][T23568] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4735'. [ 855.118394][T23568] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4735'. [ 855.456032][T23590] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4742'. [ 855.482864][T23591] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4742'. [ 855.702126][T23599] xt_hl: Unknown TTL match mode: 237 [ 855.894877][T23611] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4750'. [ 855.988326][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 856.009712][T23618] netlink: 'syz.2.4752': attribute type 1 has an invalid length. [ 856.086085][T23618] 8021q: adding VLAN 0 to HW filter on device bond9 [ 856.115931][T23625] bond9: entered promiscuous mode [ 856.141565][T23625] bond9: entered allmulticast mode [ 856.155414][T23618] bond9: (slave dummy0): making interface the new active one [ 856.163935][T23618] dummy0: entered promiscuous mode [ 856.175236][T23618] dummy0: entered allmulticast mode [ 856.192344][T23618] bond9: (slave dummy0): Enslaving as an active interface with an up link [ 856.380364][T23641] syzkaller0: entered promiscuous mode [ 856.386862][T23641] syzkaller0: entered allmulticast mode [ 856.556230][T23649] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 856.588236][T23649] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 42796 - 0 [ 856.612905][T23649] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 856.827257][T23649] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 856.854548][T23649] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 42796 - 0 [ 856.879476][T23649] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 857.000571][T23649] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 857.017987][T23649] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 42796 - 0 [ 857.028604][T23649] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 857.102296][T23649] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 857.115287][T23649] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 42796 - 0 [ 857.133044][T23649] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 857.311580][ T1111] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 857.330316][ T1111] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 42796 - 0 [ 857.342669][ T1111] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 857.416231][ T36] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 857.443326][ T36] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 42796 - 0 [ 857.462481][ T36] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 857.907658][ T1111] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 857.922473][ T1111] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 42796 - 0 [ 857.933694][ T1111] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 858.056783][T23698] FAULT_INJECTION: forcing a failure. [ 858.056783][T23698] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 858.077538][ T1130] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 858.100704][ T1130] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 42796 - 0 [ 858.111497][T23698] CPU: 1 UID: 0 PID: 23698 Comm: syz.4.4775 Not tainted syzkaller #0 PREEMPT(full) [ 858.111523][T23698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 858.111535][T23698] Call Trace: [ 858.111543][T23698] [ 858.111551][T23698] dump_stack_lvl+0xe8/0x150 [ 858.111584][T23698] should_fail_ex+0x40c/0x560 [ 858.111614][T23698] _copy_to_user+0x31/0xb0 [ 858.111636][T23698] simple_read_from_buffer+0xe1/0x170 [ 858.111669][T23698] proc_fail_nth_read+0x1bb/0x230 [ 858.111701][T23698] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 858.111731][T23698] ? rw_verify_area+0x24a/0x4c0 [ 858.111760][T23698] ? tun_chr_write_iter+0x18a/0x200 [ 858.111791][T23698] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 858.111827][T23698] vfs_read+0x213/0xa80 [ 858.111852][T23698] ? __pfx___mutex_lock+0x10/0x10 [ 858.111879][T23698] ? __pfx_vfs_read+0x10/0x10 [ 858.111902][T23698] ? __fget_files+0x2a/0x420 [ 858.111933][T23698] ? __fget_files+0x3a2/0x420 [ 858.111959][T23698] ? __fget_files+0x2a/0x420 [ 858.111994][T23698] ksys_read+0x150/0x270 [ 858.112035][T23698] ? __pfx_ksys_read+0x10/0x10 [ 858.112064][T23698] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 858.112087][T23698] do_syscall_64+0x174/0x580 [ 858.112112][T23698] ? trace_irq_disable+0x3b/0x140 [ 858.112139][T23698] ? clear_bhb_loop+0x40/0x90 [ 858.112165][T23698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 858.112187][T23698] RIP: 0033:0x7fd32ab5e84e [ 858.112207][T23698] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 858.112225][T23698] RSP: 002b:00007fd32bb01fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 858.112247][T23698] RAX: ffffffffffffffda RBX: 00007fd32bb026c0 RCX: 00007fd32ab5e84e [ 858.112263][T23698] RDX: 000000000000000f RSI: 00007fd32bb020a0 RDI: 0000000000000006 [ 858.112277][T23698] RBP: 00007fd32bb02090 R08: 0000000000000000 R09: 0000000000000000 [ 858.112290][T23698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 858.112303][T23698] R13: 00007fd32ae26038 R14: 00007fd32ae25fa0 R15: 00007ffe50149528 [ 858.112337][T23698] [ 858.168674][ T1130] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 858.635310][T23721] FAULT_INJECTION: forcing a failure. [ 858.635310][T23721] name failslab, interval 1, probability 0, space 0, times 0 [ 858.659992][T23721] CPU: 0 UID: 0 PID: 23721 Comm: syz.2.4783 Not tainted syzkaller #0 PREEMPT(full) [ 858.660019][T23721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 858.660032][T23721] Call Trace: [ 858.660041][T23721] [ 858.660050][T23721] dump_stack_lvl+0xe8/0x150 [ 858.660086][T23721] should_fail_ex+0x40c/0x560 [ 858.660119][T23721] should_failslab+0xa8/0x100 [ 858.660152][T23721] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 858.660180][T23721] ? local_lock_release+0x9c/0x160 [ 858.660204][T23721] ? __alloc_skb+0x1d7/0x7a0 [ 858.660224][T23721] ? __alloc_skb+0x1d7/0x7a0 [ 858.660252][T23721] __alloc_skb+0x1d7/0x7a0 [ 858.660278][T23721] xfrm_alloc_compat+0x1a6/0x1740 [ 858.660417][T23721] ? __pfx_xfrm_alloc_compat+0x10/0x10 [ 858.660446][T23721] xfrm_nlmsg_multicast+0xda/0x1f0 [ 858.660472][T23721] xfrm_send_policy_notify+0xed2/0x1c00 [ 858.660505][T23721] ? __pfx_xfrm_send_policy_notify+0x10/0x10 [ 858.660527][T23721] ? km_policy_notify+0x28/0x200 [ 858.660572][T23721] ? km_policy_notify+0x28/0x200 [ 858.660596][T23721] ? __local_bh_enable_ip+0xd0/0x130 [ 858.660623][T23721] ? lockdep_hardirqs_on+0x7a/0x110 [ 858.660649][T23721] ? __local_bh_enable_ip+0xd0/0x130 [ 858.660674][T23721] ? km_policy_notify+0x28/0x200 [ 858.660697][T23721] ? __pfx_xfrm_send_policy_notify+0x10/0x10 [ 858.660720][T23721] km_policy_notify+0x121/0x200 [ 858.660752][T23721] ? km_policy_notify+0x28/0x200 [ 858.660779][T23721] xfrm_add_policy+0x4a1/0x690 [ 858.660809][T23721] ? __pfx_xfrm_add_policy+0x10/0x10 [ 858.660831][T23721] ? apparmor_capable+0x126/0x170 [ 858.660865][T23721] ? __nla_parse+0x40/0x60 [ 858.660899][T23721] xfrm_user_rcv_msg+0x7a8/0xf30 [ 858.660929][T23721] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 858.660986][T23721] ? __mutex_trylock_common+0x15f/0x270 [ 858.661013][T23721] ? __pfx___mutex_trylock_common+0x10/0x10 [ 858.661039][T23721] ? rcu_is_watching+0x15/0xb0 [ 858.661060][T23721] ? trace_contention_end+0x3d/0x140 [ 858.661091][T23721] netlink_rcv_skb+0x226/0x4a0 [ 858.661120][T23721] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 858.661146][T23721] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 858.661188][T23721] ? netlink_deliver_tap+0x2e/0x1b0 [ 858.661213][T23721] ? netlink_deliver_tap+0x2e/0x1b0 [ 858.661241][T23721] xfrm_netlink_rcv+0x79/0x90 [ 858.661351][T23721] netlink_unicast+0x7bb/0x940 [ 858.661391][T23721] netlink_sendmsg+0x813/0xb40 [ 858.661427][T23721] ? __pfx_netlink_sendmsg+0x10/0x10 [ 858.661457][T23721] ? aa_sock_msg_perm+0xf1/0x1b0 [ 858.661487][T23721] ? __pfx_netlink_sendmsg+0x10/0x10 [ 858.661512][T23721] sock_sendmsg_nosec+0x13a/0x180 [ 858.661545][T23721] ____sys_sendmsg+0x54e/0x850 [ 858.661577][T23721] ? __pfx_____sys_sendmsg+0x10/0x10 [ 858.661611][T23721] ? import_iovec+0x73/0xa0 [ 858.661648][T23721] ___sys_sendmsg+0x2a5/0x360 [ 858.661671][T23721] ? __lock_acquire+0x683/0x2cf0 [ 858.661705][T23721] ? __pfx____sys_sendmsg+0x10/0x10 [ 858.661764][T23721] ? __fget_files+0x2a/0x420 [ 858.661792][T23721] ? __fget_files+0x3a2/0x420 [ 858.661831][T23721] __x64_sys_sendmsg+0x1b1/0x290 [ 858.661860][T23721] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 858.661903][T23721] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 858.661927][T23721] do_syscall_64+0x174/0x580 [ 858.661953][T23721] ? trace_irq_disable+0x3b/0x140 [ 858.661981][T23721] ? clear_bhb_loop+0x40/0x90 [ 858.662007][T23721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 858.662028][T23721] RIP: 0033:0x7f0bd879e019 [ 858.662048][T23721] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 858.662067][T23721] RSP: 002b:00007f0bd9754028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 858.662090][T23721] RAX: ffffffffffffffda RBX: 00007f0bd8a25fa0 RCX: 00007f0bd879e019 [ 858.662106][T23721] RDX: 000000002c000010 RSI: 0000200000000000 RDI: 0000000000000004 [ 858.662120][T23721] RBP: 00007f0bd9754090 R08: 0000000000000000 R09: 0000000000000000 [ 858.662134][T23721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 858.662147][T23721] R13: 00007f0bd8a26038 R14: 00007f0bd8a25fa0 R15: 00007ffeecd59af8 [ 858.662180][T23721] [ 859.432142][T23742] IPv6: NLM_F_CREATE should be specified when creating new route [ 859.633920][T23751] bond10: option lacp_rate: invalid value (3) [ 859.642753][T23751] bond10 (unregistering): Released all slaves [ 859.837547][T23762] IPVS: set_ctl: invalid protocol: 51 100.1.1.1:20001 [ 859.855218][T23762] __nla_validate_parse: 18 callbacks suppressed [ 859.855241][T23762] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4793'. [ 859.940087][T23764] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4794'. [ 859.953431][T23764] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4794'. [ 860.023181][T23675] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 860.324739][T23774] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4799'. [ 860.420249][T23782] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4801'. [ 860.464885][T23775] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4798'. [ 860.490297][T23775] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4798'. [ 860.673677][T23795] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 860.705954][T23795] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4805'. [ 860.726907][T23795] netlink: 88 bytes leftover after parsing attributes in process `syz.4.4805'. [ 860.874828][T23806] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 861.094054][T23816] xfrm0: entered promiscuous mode [ 861.100012][T23816] xfrm0: entered allmulticast mode [ 861.220859][T23823] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4814'. [ 861.380171][T23832] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 861.627870][T23848] netlink: 'syz.0.4823': attribute type 1 has an invalid length. [ 861.685139][T23848] 8021q: adding VLAN 0 to HW filter on device bond8 [ 861.939731][T23864] openvswitch: netlink: Message has 4 unknown bytes. [ 862.580965][T23902] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 862.605373][T23896] netlink: 'syz.3.4839': attribute type 4 has an invalid length. [ 862.634719][T23896] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 862.743575][T23907] netlink: 'syz.4.4842': attribute type 11 has an invalid length. [ 862.875883][T23910] syzkaller0: entered promiscuous mode [ 862.896884][T23910] syzkaller0: entered allmulticast mode [ 864.426797][T23951] netlink: 'syz.1.4853': attribute type 2 has an invalid length. [ 864.443330][T23951] D†'|o: entered promiscuous mode [ 864.689893][ T9482] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 864.699173][ T1111] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 864.778637][ T9482] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 865.189824][T23977] syz_tun: entered promiscuous mode [ 865.195799][T23977] __nla_validate_parse: 14 callbacks suppressed [ 865.195812][T23977] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4862'. [ 865.211175][T23977] syz_tun: left promiscuous mode [ 865.576238][T23905] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 865.749710][ T36] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 865.774149][ T36] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 866.095275][T24003] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4872'. [ 866.120845][T24003] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4872'. [ 866.178360][ T9482] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 866.206075][T24014] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 866.264014][T24003] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4872'. [ 866.274985][T24003] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4872'. [ 866.357270][T24016] team0: left allmulticast mode [ 866.368252][T24016] team_slave_0: left allmulticast mode [ 866.384065][T24016] team_slave_1: left allmulticast mode [ 866.392908][T24021] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4875'. [ 866.426471][T24016] team0: left promiscuous mode [ 866.449729][T24003] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4872'. [ 866.460359][T24003] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4872'. [ 866.474956][T24016] team_slave_0: left promiscuous mode [ 866.481855][T24016] team_slave_1: left promiscuous mode [ 866.493758][T24016] bridge0: port 3(team0) entered disabled state [ 866.534648][T24016] bridge_slave_0: left allmulticast mode [ 866.551094][T24016] bridge_slave_0: left promiscuous mode [ 866.570028][T24016] bridge0: port 1(bridge_slave_0) entered disabled state [ 866.590867][T24016] bridge_slave_1: left allmulticast mode [ 866.600948][T24016] bridge_slave_1: left promiscuous mode [ 866.612670][T24016] bridge0: port 2(bridge_slave_1) entered disabled state [ 866.646060][T24016] bond0: (slave bond_slave_0): Releasing backup interface [ 866.679851][T24016] bond0: (slave bond_slave_1): Releasing backup interface [ 866.712043][T24016] team0: Port device team_slave_0 removed [ 866.726583][T24032] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4879'. [ 866.760102][T24016] team0: Port device team_slave_1 removed [ 866.767093][T24016] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 866.785437][T24016] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 866.832670][T24016] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 866.843930][T24016] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 866.854367][T24016] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 867.717379][T24095] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4899'. [ 868.416476][T24132] syzkaller0: entered promiscuous mode [ 868.431856][T24132] syzkaller0: entered allmulticast mode [ 868.767711][T24157] FAULT_INJECTION: forcing a failure. [ 868.767711][T24157] name failslab, interval 1, probability 0, space 0, times 0 [ 868.785870][T24157] CPU: 0 UID: 0 PID: 24157 Comm: syz.0.4923 Not tainted syzkaller #0 PREEMPT(full) [ 868.785897][T24157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 868.785910][T24157] Call Trace: [ 868.785919][T24157] [ 868.785929][T24157] dump_stack_lvl+0xe8/0x150 [ 868.785967][T24157] should_fail_ex+0x40c/0x560 [ 868.785999][T24157] should_failslab+0xa8/0x100 [ 868.786052][T24157] __kmalloc_noprof+0xfe/0x720 [ 868.786083][T24157] ? sock_kmalloc+0xd6/0x160 [ 868.786110][T24157] ? sock_kmalloc+0xd6/0x160 [ 868.786142][T24157] sock_kmalloc+0xd6/0x160 [ 868.786174][T24157] __tcp_md5_do_add+0x179/0x4a0 [ 868.786324][T24157] tcp_md5_do_add+0xfa/0x390 [ 868.786363][T24157] tcp_v4_parse_md5_keys+0x47f/0x650 [ 868.786410][T24157] ? __pfx_tcp_v4_parse_md5_keys+0x10/0x10 [ 868.786462][T24157] ? do_tcp_setsockopt+0x8f1/0x1f80 [ 868.786549][T24157] ? __local_bh_enable_ip+0xd0/0x130 [ 868.786584][T24157] do_tcp_setsockopt+0x1250/0x1f80 [ 868.786624][T24157] ? __pfx_do_tcp_setsockopt+0x10/0x10 [ 868.786657][T24157] ? __pfx___mutex_lock+0x10/0x10 [ 868.786700][T24157] ? aa_sk_perm+0x6d5/0x900 [ 868.786724][T24157] ? sock_common_setsockopt+0x36/0xc0 [ 868.786756][T24157] ? tcp_setsockopt+0x3d/0xe0 [ 868.786788][T24157] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 868.786825][T24157] smc_setsockopt+0x232/0xb00 [ 868.786887][T24157] ? __pfx_smc_setsockopt+0x10/0x10 [ 868.786913][T24157] ? aa_sock_opt_perm+0xff/0x1a0 [ 868.786943][T24157] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 868.786969][T24157] ? __pfx_smc_setsockopt+0x10/0x10 [ 868.786998][T24157] do_sock_setsockopt+0x17c/0x1b0 [ 868.787031][T24157] __x64_sys_setsockopt+0x13d/0x1b0 [ 868.787060][T24157] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 868.787086][T24157] do_syscall_64+0x174/0x580 [ 868.787113][T24157] ? trace_irq_disable+0x3b/0x140 [ 868.787144][T24157] ? clear_bhb_loop+0x40/0x90 [ 868.787176][T24157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 868.787201][T24157] RIP: 0033:0x7f4ba619e019 [ 868.787223][T24157] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 868.787244][T24157] RSP: 002b:00007f4ba70b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 868.787270][T24157] RAX: ffffffffffffffda RBX: 00007f4ba6425fa0 RCX: 00007f4ba619e019 [ 868.787287][T24157] RDX: 000000000000000e RSI: 0000000000000006 RDI: 0000000000000003 [ 868.787302][T24157] RBP: 00007f4ba70b4090 R08: 00000000000000d8 R09: 0000000000000000 [ 868.787317][T24157] R10: 00002000000003c0 R11: 0000000000000246 R12: 0000000000000001 [ 868.787333][T24157] R13: 00007f4ba6426038 R14: 00007f4ba6425fa0 R15: 00007ffe877e1f08 [ 868.787371][T24157] [ 869.828346][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 873.505467][T24176] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 873.526486][T24176] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 873.555943][T24176] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 873.664019][T24185] __nla_validate_parse: 3 callbacks suppressed [ 873.664041][T24185] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4932'. [ 873.755770][T24191] FAULT_INJECTION: forcing a failure. [ 873.755770][T24191] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 873.806779][T24190] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4933'. [ 873.828510][T24191] CPU: 0 UID: 0 PID: 24191 Comm: syz.1.4934 Not tainted syzkaller #0 PREEMPT(full) [ 873.828540][T24191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 873.828554][T24191] Call Trace: [ 873.828563][T24191] [ 873.828573][T24191] dump_stack_lvl+0xe8/0x150 [ 873.828618][T24191] should_fail_ex+0x40c/0x560 [ 873.828654][T24191] _copy_from_user+0x2d/0xb0 [ 873.828679][T24191] smc_setsockopt+0x3c0/0xb00 [ 873.828725][T24191] ? __pfx_smc_setsockopt+0x10/0x10 [ 873.828748][T24191] ? aa_sock_opt_perm+0xff/0x1a0 [ 873.828774][T24191] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 873.828799][T24191] ? __pfx_smc_setsockopt+0x10/0x10 [ 873.828830][T24191] do_sock_setsockopt+0x17c/0x1b0 [ 873.828864][T24191] __x64_sys_setsockopt+0x13d/0x1b0 [ 873.828890][T24191] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 873.828913][T24191] do_syscall_64+0x174/0x580 [ 873.828939][T24191] ? trace_irq_disable+0x3b/0x140 [ 873.828966][T24191] ? clear_bhb_loop+0x40/0x90 [ 873.828992][T24191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 873.829013][T24191] RIP: 0033:0x7fa70679e019 [ 873.829033][T24191] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 873.829051][T24191] RSP: 002b:00007fa7076e4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 873.829074][T24191] RAX: ffffffffffffffda RBX: 00007fa706a25fa0 RCX: 00007fa70679e019 [ 873.829098][T24191] RDX: 000000000000000e RSI: 0000000000000006 RDI: 0000000000000003 [ 873.829111][T24191] RBP: 00007fa7076e4090 R08: 00000000000000d8 R09: 0000000000000000 [ 873.829126][T24191] R10: 00002000000003c0 R11: 0000000000000246 R12: 0000000000000001 [ 873.829140][T24191] R13: 00007fa706a26038 R14: 00007fa706a25fa0 R15: 00007ffe86e2df68 [ 873.829172][T24191] [ 874.741271][T24239] FAULT_INJECTION: forcing a failure. [ 874.741271][T24239] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 874.798594][T24239] CPU: 1 UID: 0 PID: 24239 Comm: syz.0.4947 Not tainted syzkaller #0 PREEMPT(full) [ 874.798622][T24239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 874.798635][T24239] Call Trace: [ 874.798644][T24239] [ 874.798654][T24239] dump_stack_lvl+0xe8/0x150 [ 874.798691][T24239] should_fail_ex+0x40c/0x560 [ 874.798723][T24239] _copy_to_user+0x31/0xb0 [ 874.798746][T24239] simple_read_from_buffer+0xe1/0x170 [ 874.798782][T24239] proc_fail_nth_read+0x1bb/0x230 [ 874.798815][T24239] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 874.798847][T24239] ? rw_verify_area+0x24a/0x4c0 [ 874.798882][T24239] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 874.798911][T24239] vfs_read+0x213/0xa80 [ 874.798937][T24239] ? __pfx___mutex_lock+0x10/0x10 [ 874.798964][T24239] ? __pfx_vfs_read+0x10/0x10 [ 874.798986][T24239] ? __fget_files+0x2a/0x420 [ 874.799028][T24239] ? __fget_files+0x3a2/0x420 [ 874.799055][T24239] ? __fget_files+0x2a/0x420 [ 874.799091][T24239] ksys_read+0x150/0x270 [ 874.799115][T24239] ? __pfx_ksys_read+0x10/0x10 [ 874.799144][T24239] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 874.799167][T24239] do_syscall_64+0x174/0x580 [ 874.799193][T24239] ? trace_irq_disable+0x3b/0x140 [ 874.799221][T24239] ? clear_bhb_loop+0x40/0x90 [ 874.799247][T24239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 874.799268][T24239] RIP: 0033:0x7f4ba615e84e [ 874.799287][T24239] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 874.799305][T24239] RSP: 002b:00007f4ba70b3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 874.799328][T24239] RAX: ffffffffffffffda RBX: 00007f4ba70b46c0 RCX: 00007f4ba615e84e [ 874.799344][T24239] RDX: 000000000000000f RSI: 00007f4ba70b40a0 RDI: 0000000000000004 [ 874.799358][T24239] RBP: 00007f4ba70b4090 R08: 0000000000000000 R09: 0000000000000000 [ 874.799372][T24239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 874.799385][T24239] R13: 00007f4ba6426038 R14: 00007f4ba6425fa0 R15: 00007ffe877e1f08 [ 874.799419][T24239] [ 875.037331][T24243] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4949'. [ 875.107927][T24245] netlink: 'syz.2.4948': attribute type 1 has an invalid length. [ 875.115997][T24245] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4948'. [ 875.192668][T24253] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 875.396184][T24257] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4952'. [ 876.339350][T24309] netlink: 'syz.0.4966': attribute type 1 has an invalid length. [ 876.386123][T24314] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4965'. [ 876.403865][T24314] xt_bpf: check failed: parse error [ 876.900116][T24347] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4976'. [ 877.007916][T24357] 8021q: VLANs not supported on vcan0 [ 877.022832][T24347] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 877.075142][T24356] geneve4: entered promiscuous mode [ 877.095172][ T57] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 877.124333][ T57] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 877.136598][ T57] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 877.144901][ T57] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 877.222710][T24368] netlink: 'syz.4.4980': attribute type 46 has an invalid length. [ 877.450701][T24378] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4985'. [ 877.761581][T24398] 8021q: VLANs not supported on wg0 [ 877.857328][T24401] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4990'. [ 877.908589][T24406] IPVS: set_ctl: invalid protocol: 115 127.0.0.1:20002 [ 878.155305][T24423] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4998'. [ 878.388301][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 878.397073][ T5633] Bluetooth: hci0: command 0x0c20 tx timeout [ 878.415328][T24431] syzkaller1: entered promiscuous mode [ 878.418459][ T5645] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 878.446516][T24431] syzkaller1: entered allmulticast mode [ 878.555233][T24436] netlink: 'syz.1.5003': attribute type 10 has an invalid length. [ 878.655455][T24436] syz_tun: entered promiscuous mode [ 878.656786][T24440] netlink: 'syz.3.5004': attribute type 18 has an invalid length. [ 878.673376][T24436] netlink: 'syz.1.5003': attribute type 10 has an invalid length. [ 878.673547][ T57] bond0: (slave bond_slave_0): interface is now down [ 878.707286][ T57] bond0: (slave bond_slave_1): interface is now down [ 878.730190][T24442] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 878.737312][T24436] netlink: 'syz.1.5003': attribute type 10 has an invalid length. [ 878.739319][ T57] bond0: (slave bond_slave_0): interface is now down [ 878.754447][ T57] bond0: (slave bond_slave_1): interface is now down [ 878.768595][T24442] syzkaller1: linktype set to 786 [ 878.778208][ T1182] bond0: (slave bond_slave_0): interface is now down [ 878.798734][ T1182] bond0: (slave bond_slave_1): interface is now down [ 878.865153][T24436] netlink: 'syz.1.5003': attribute type 10 has an invalid length. [ 878.881068][ T1130] bond0: (slave bond_slave_0): interface is now down [ 878.890234][ T1130] bond0: (slave bond_slave_1): interface is now down [ 878.911097][ T1182] bond0: (slave bond_slave_0): interface is now down [ 878.930457][ T1182] bond0: (slave bond_slave_1): interface is now down [ 878.978335][ T1182] bond0: (slave bond_slave_0): interface is now down [ 878.989470][ T1182] bond0: (slave bond_slave_1): interface is now down [ 879.060451][T10083] bond0: (slave bond_slave_0): interface is now down [ 879.088342][T10083] bond0: (slave bond_slave_1): interface is now down [ 879.101664][T10083] bond0: now running without any active interface! [ 879.127339][T24436] netlink: 'syz.1.5003': attribute type 10 has an invalid length. [ 879.175504][T24436] netlink: 'syz.1.5003': attribute type 10 has an invalid length. [ 879.309345][ T1182] bond0: (slave syz_tun): interface is now down [ 879.435441][T24459] A link change request failed with some changes committed already. Interface 26±ÿ†Ý'É|d< may have been left with an inconsistent configuration, please check. [ 879.502797][T24461] __nla_validate_parse: 2 callbacks suppressed [ 879.502814][T24461] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5012'. [ 879.537276][T24461] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5012'. [ 879.741706][T24470] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5016'. [ 879.855107][T24476] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 880.041919][T24484] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5019'. [ 880.096221][T24484] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5019'. [ 880.250547][T24494] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5027'. [ 880.286499][T24494] bond0: (slave bond_slave_1): Releasing backup interface [ 880.470234][ T5645] Bluetooth: hci0: command 0x0c20 tx timeout [ 880.625105][T24502] xt_CT: No such helper "snmp_trap" [ 880.897880][T24521] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5035'. [ 881.015804][T24526] syzkaller1: entered promiscuous mode [ 881.022078][T24526] syzkaller1: entered allmulticast mode [ 881.079062][T24527] syzkaller0: entered promiscuous mode [ 881.095700][T24527] syzkaller0: entered allmulticast mode [ 881.106631][T24531] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5040'. [ 881.163454][T24531] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5040'. [ 881.177953][T24531] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5040'. [ 881.212550][T24531] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 881.246591][T24534] validate_nla: 4 callbacks suppressed [ 881.246674][T24534] netlink: 'syz.2.5041': attribute type 2 has an invalid length. [ 882.086449][T24572] netlink: 'syz.2.5055': attribute type 17 has an invalid length. [ 882.139076][T24572] 8021q: adding VLAN 0 to HW filter on device  [ 882.147546][T24572] 8021q: adding VLAN 0 to HW filter on device team0 [ 882.158970][T24576] netlink: 'syz.0.5054': attribute type 46 has an invalid length. [ 882.213796][T24572] hsr0: left promiscuous mode [ 882.218803][T24572] hsr0: left allmulticast mode [ 882.223592][T24572] hsr_slave_0: left allmulticast mode [ 882.232978][T24572] hsr_slave_1: left allmulticast mode [ 882.245372][T24572] veth0_vlan: left promiscuous mode [ 882.254319][T24572] veth0_vlan: entered promiscuous mode [ 882.269020][T24572] veth1_macvtap: left promiscuous mode [ 882.275937][T24572] veth0_macvtap: left promiscuous mode [ 882.282983][T24572] veth0_macvtap: entered promiscuous mode [ 882.290370][T24572] veth1_macvtap: entered promiscuous mode [ 882.309728][T24572] 8021q: adding VLAN 0 to HW filter on device bond1 [ 882.321106][T24572] 8021q: adding VLAN 0 to HW filter on device bond0 [ 882.330520][T24572] 8021q: adding VLAN 0 to HW filter on device bond2 [ 882.350396][ T1102] bond2: (slave bridge1): link status up again after 0 ms [ 882.350789][T24572] 8021q: adding VLAN 0 to HW filter on device bond3 [ 882.365644][T24572] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 882.389388][T24572] bond4: left promiscuous mode [ 882.404464][T24572] 8021q: adding VLAN 0 to HW filter on device bond5 [ 882.416254][T24572] 8021q: adding VLAN 0 to HW filter on device bond6 [ 882.422986][ T36] bond2: (slave bridge1): link status up again after 0 ms [ 882.432992][T24572] geneve3: left promiscuous mode [ 882.438004][T24572] geneve3: left allmulticast mode [ 882.447308][T24572] 8021q: adding VLAN 0 to HW filter on device bond7 [ 882.449996][ T1102] bond2: (slave bridge1): link status up again after 0 ms [ 882.466729][T24572] 8021q: adding VLAN 0 to HW filter on device bond8 [ 882.478949][T24572] 8021q: adding VLAN 0 to HW filter on device eth0 [ 882.488790][T24572] 8021q: adding VLAN 0 to HW filter on device eth1 [ 882.497816][T24572] 8021q: adding VLAN 0 to HW filter on device eth2 [ 882.507255][T24572] 8021q: adding VLAN 0 to HW filter on device eth3 [ 882.515624][T24572] bond9: left promiscuous mode [ 882.520501][T24572] dummy0: left promiscuous mode [ 882.525608][T24572] bond9: left allmulticast mode [ 882.530707][T24572] dummy0: left allmulticast mode [ 882.536830][T24572] 8021q: adding VLAN 0 to HW filter on device bond9 [ 882.552278][ T1102] bond2: (slave bridge1): failed to get link speed/duplex [ 882.734010][ T1111] netdevsim netdevsim2 eth0: set [0, 1] type 1 family 0 port 8472 - 0 [ 882.756365][ T1111] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20154 - 0 [ 882.784142][ T1111] netdevsim netdevsim2 eth1: set [0, 1] type 1 family 0 port 8472 - 0 [ 882.800876][ T1111] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20154 - 0 [ 882.990959][ T1111] netdevsim netdevsim2 eth2: set [0, 1] type 1 family 0 port 8472 - 0 [ 883.044631][ T1111] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20154 - 0 [ 883.075204][ T1111] netdevsim netdevsim2 eth3: set [0, 1] type 1 family 0 port 8472 - 0 [ 883.093897][ T1111] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20154 - 0 [ 883.160558][ T1119] bond2: (slave bridge1): failed to get link speed/duplex [ 883.359311][ T1182] bond2: (slave bridge1): failed to get link speed/duplex [ 883.710025][ T1182] bond2: (slave bridge1): failed to get link speed/duplex [ 884.354985][T24665] mac80211_hwsim hwsim51 syzkaller0: entered promiscuous mode [ 884.414975][T24665] mac80211_hwsim hwsim51 syzkaller0: entered allmulticast mode [ 884.448293][ T1182] net_ratelimit: 4 callbacks suppressed [ 884.448310][ T1182] bond2: (slave bridge1): failed to get link speed/duplex [ 884.501659][T24677] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_rx_wq": -EINTR [ 884.576474][ T1130] bond2: (slave bridge1): failed to get link speed/duplex [ 884.715670][T24687] netlink: 'syz.4.5087': attribute type 1 has an invalid length. [ 884.785529][T24687] netlink: 'syz.4.5087': attribute type 2 has an invalid length. [ 884.823695][T24687] __nla_validate_parse: 31 callbacks suppressed [ 884.823713][T24687] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5087'. [ 885.247656][T24715] syzkaller1: entered promiscuous mode [ 885.253364][T24715] syzkaller1: entered allmulticast mode [ 885.578329][ T1130] bond2: (slave bridge1): failed to get link speed/duplex [ 885.606144][T24735] smc: net device lo applied user defined pnetid SYZ2 [ 885.674207][T24735] smc: net device lo erased user defined pnetid SYZ2 [ 885.713429][ T1119] bond2: (slave bridge1): failed to get link speed/duplex [ 885.858308][ T1130] bond2: (slave bridge1): failed to get link speed/duplex [ 885.961038][T24746] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5103'. [ 885.988719][ T57] bond2: (slave bridge1): failed to get link speed/duplex [ 886.139463][ T1119] bond2: (slave bridge1): failed to get link speed/duplex [ 886.298287][T10083] bond2: (slave bridge1): failed to get link speed/duplex [ 886.307120][T24763] FAULT_INJECTION: forcing a failure. [ 886.307120][T24763] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 886.330983][T24763] CPU: 0 UID: 0 PID: 24763 Comm: syz.3.5106 Not tainted syzkaller #0 PREEMPT(full) [ 886.331009][T24763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 886.331021][T24763] Call Trace: [ 886.331030][T24763] [ 886.331038][T24763] dump_stack_lvl+0xe8/0x150 [ 886.331071][T24763] should_fail_ex+0x40c/0x560 [ 886.331107][T24763] _copy_to_user+0x31/0xb0 [ 886.331129][T24763] simple_read_from_buffer+0xe1/0x170 [ 886.331172][T24763] proc_fail_nth_read+0x1bb/0x230 [ 886.331202][T24763] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 886.331234][T24763] ? rw_verify_area+0x24a/0x4c0 [ 886.331263][T24763] ? tun_chr_write_iter+0xe0/0x200 [ 886.331292][T24763] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 886.331319][T24763] vfs_read+0x213/0xa80 [ 886.331343][T24763] ? __pfx___mutex_lock+0x10/0x10 [ 886.331369][T24763] ? __pfx_vfs_read+0x10/0x10 [ 886.331391][T24763] ? __fget_files+0x2a/0x420 [ 886.331422][T24763] ? __fget_files+0x3a2/0x420 [ 886.331448][T24763] ? __fget_files+0x2a/0x420 [ 886.331483][T24763] ksys_read+0x150/0x270 [ 886.331504][T24763] ? __pfx_ksys_read+0x10/0x10 [ 886.331532][T24763] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 886.331553][T24763] do_syscall_64+0x174/0x580 [ 886.331580][T24763] ? clear_bhb_loop+0x40/0x90 [ 886.331604][T24763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 886.331624][T24763] RIP: 0033:0x7f13bb35e84e [ 886.331641][T24763] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 886.331659][T24763] RSP: 002b:00007f13bc2c1fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 886.331680][T24763] RAX: ffffffffffffffda RBX: 00007f13bc2c26c0 RCX: 00007f13bb35e84e [ 886.331695][T24763] RDX: 000000000000000f RSI: 00007f13bc2c20a0 RDI: 0000000000000005 [ 886.331709][T24763] RBP: 00007f13bc2c2090 R08: 0000000000000000 R09: 0000000000000000 [ 886.331721][T24763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 886.331733][T24763] R13: 00007f13bb626038 R14: 00007f13bb625fa0 R15: 00007ffd99a9eef8 [ 886.331764][T24763] [ 886.543352][ T1119] bond2: (slave bridge1): failed to get link speed/duplex [ 886.745108][ T1119] bond2: (slave bridge1): failed to get link speed/duplex [ 886.949333][T24785] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5111'. [ 886.999820][T24785] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5111'. [ 887.048362][T24793] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5115'. [ 887.265325][T24789] macvlan0: entered promiscuous mode [ 887.327150][T24804] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 887.458044][T24804] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5118'. [ 887.664292][T24823] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5122'. [ 887.795770][T24829] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5123'. [ 887.947310][T24825] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 888.007768][T24825] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 888.130202][T24825] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 888.145360][T24825] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 888.275561][T24848] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5129'. [ 888.523491][T24861] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5133'. [ 888.662465][T24825] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 888.672582][T24825] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 888.723320][T24852] mac80211_hwsim hwsim51 syzkaller0: left promiscuous mode [ 888.730923][T24852] mac80211_hwsim hwsim51 syzkaller0: left allmulticast mode [ 888.787685][T24825] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 888.810225][T24825] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 889.027621][ T1111] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 889.065665][ T1111] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 889.117687][ T1111] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 889.132341][ T1111] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 889.192177][ T1111] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 889.210840][T24888] netlink: 'syz.3.5141': attribute type 1 has an invalid length. [ 889.234526][T24893] sctp: [Deprecated]: syz.2.5143 (pid 24893) Use of int in maxseg socket option. [ 889.234526][T24893] Use struct sctp_assoc_value instead [ 889.282676][ T1111] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 889.385688][ T1130] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 889.415915][ T1130] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 889.486056][T24896] bond7: (slave bridge4): Enslaving as a backup interface with an up link [ 889.553683][T24889] bond7: (slave bridge5): Enslaving as a backup interface with a down link [ 889.619145][ T1182] net_ratelimit: 7 callbacks suppressed [ 889.619165][ T1182] bond2: (slave bridge1): failed to get link speed/duplex [ 889.754656][T24900] 8021q: adding VLAN 0 to HW filter on device bond11 [ 889.766355][T24900] bond10: (slave bond11): Enslaving as an active interface with an up link [ 889.778946][T24899] 8021q: adding VLAN 0 to HW filter on device bond10 [ 889.817351][ T1119] bond2: (slave bridge1): failed to get link speed/duplex [ 889.867166][T24910] syzkaller0: entered promiscuous mode [ 889.873029][T24910] syzkaller0: entered allmulticast mode [ 889.948236][ T1119] bond2: (slave bridge1): failed to get link speed/duplex [ 890.093628][T24933] __nla_validate_parse: 2 callbacks suppressed [ 890.093649][T24933] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5152'. [ 890.131873][T24936] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5152'. [ 890.218638][ T1182] bond2: (slave bridge1): failed to get link speed/duplex [ 890.348292][ T1182] bond2: (slave bridge1): failed to get link speed/duplex [ 890.468289][ T1130] bond2: (slave bridge1): failed to get link speed/duplex [ 890.484026][T24948] mac80211_hwsim hwsim51 syzkaller0: entered promiscuous mode [ 890.505393][T24948] mac80211_hwsim hwsim51 syzkaller0: entered allmulticast mode [ 890.521798][T24950] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 890.550139][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 890.561621][T24950] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5157'. [ 890.580022][T24948] mac80211_hwsim hwsim51 syzkaller0: left promiscuous mode [ 890.597603][T24948] mac80211_hwsim hwsim51 syzkaller0: left allmulticast mode [ 890.608491][ T1130] bond2: (slave bridge1): failed to get link speed/duplex [ 890.728562][ T1182] bond2: (slave bridge1): failed to get link speed/duplex [ 890.848799][ T1119] bond2: (slave bridge1): failed to get link speed/duplex [ 891.203321][T24978] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5169'. [ 891.255325][T24976] erspan0: left allmulticast mode [ 891.283018][T24976] erspan0: left promiscuous mode [ 891.305052][T24976] bridge3: port 1(erspan0) entered disabled state [ 891.360328][T24976] bridge_slave_0: left allmulticast mode [ 891.371037][T24976] bridge_slave_0: left promiscuous mode [ 891.377044][T24976] bridge0: port 1(bridge_slave_0) entered disabled state [ 891.432629][T24976] bridge_slave_1: left allmulticast mode [ 891.454041][T24976] bridge_slave_1: left promiscuous mode [ 891.464389][T24976] bridge0: port 2(bridge_slave_1) entered disabled state [ 891.493638][T24976] bond0: (slave bond_slave_0): Releasing backup interface [ 891.514389][T24976] team0: Port device team_slave_0 removed [ 891.540107][T24976] team0: Port device team_slave_1 removed [ 891.565730][T24976] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 891.587782][T24976] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 891.677273][T25001] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5174'. [ 891.720418][T25003] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5176'. [ 891.963735][T25015] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5180'. [ 892.333024][T25026] netlink: 'syz.0.5182': attribute type 14 has an invalid length. [ 892.345759][T25028] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5183'. [ 892.359070][T25026] netlink: 'syz.0.5182': attribute type 11 has an invalid length. [ 892.367061][T25026] netlink: 'syz.0.5182': attribute type 4 has an invalid length. [ 892.375260][T25026] netlink: 220 bytes leftover after parsing attributes in process `syz.0.5182'. [ 892.508860][T25036] netlink: 'syz.4.5183': attribute type 9 has an invalid length. [ 892.550408][T25036] netlink: 'syz.4.5183': attribute type 9 has an invalid length. [ 892.939940][T25057] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5188'. [ 893.180163][T25056] bond9: (slave dummy0): Releasing active interface [ 893.496978][T25084] syzkaller0: entered promiscuous mode [ 893.502873][T25084] syzkaller0: entered allmulticast mode [ 893.683420][T25092] netlink: 'syz.2.5200': attribute type 11 has an invalid length. [ 893.767429][T25096] veth1_vlan: left promiscuous mode [ 893.827637][T25096] netlink: 'syz.3.5198': attribute type 2 has an invalid length. [ 894.303819][T25129] netlink: 'syz.3.5209': attribute type 32 has an invalid length. [ 894.389385][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 894.772843][ T1111] net_ratelimit: 21 callbacks suppressed [ 894.772865][ T1111] bond2: (slave bridge1): failed to get link speed/duplex [ 894.948325][ T1130] bond2: (slave bridge1): failed to get link speed/duplex [ 895.072283][ T1130] bond2: (slave bridge1): failed to get link speed/duplex [ 895.218337][ T1119] bond2: (slave bridge1): failed to get link speed/duplex [ 895.281245][T25166] __nla_validate_parse: 5 callbacks suppressed [ 895.281262][T25166] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5221'. [ 895.338257][ T1119] bond2: (slave bridge1): failed to get link speed/duplex [ 895.498720][ T1119] bond2: (slave bridge1): failed to get link speed/duplex [ 895.618333][ T1130] bond2: (slave bridge1): failed to get link speed/duplex [ 895.637159][T25185] syz_tun: entered allmulticast mode [ 895.649053][T25180] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5223'. [ 895.665025][T25185] syz_tun: left allmulticast mode [ 895.758384][ T1119] bond2: (slave bridge1): failed to get link speed/duplex [ 895.918712][ T1119] bond2: (slave bridge1): failed to get link speed/duplex [ 896.052054][T25195] FAULT_INJECTION: forcing a failure. [ 896.052054][T25195] name failslab, interval 1, probability 0, space 0, times 0 [ 896.065359][ T57] bond2: (slave bridge1): failed to get link speed/duplex [ 896.074998][T25195] CPU: 0 UID: 0 PID: 25195 Comm: syz.2.5228 Not tainted syzkaller #0 PREEMPT(full) [ 896.075027][T25195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 896.075040][T25195] Call Trace: [ 896.075049][T25195] [ 896.075059][T25195] dump_stack_lvl+0xe8/0x150 [ 896.075097][T25195] should_fail_ex+0x40c/0x560 [ 896.075129][T25195] should_failslab+0xa8/0x100 [ 896.075166][T25195] __kmalloc_noprof+0xfe/0x720 [ 896.075195][T25195] ? rcu_is_watching+0x15/0xb0 [ 896.075217][T25195] ? tomoyo_realpath_from_path+0xef/0x640 [ 896.075244][T25195] ? tomoyo_realpath_from_path+0xef/0x640 [ 896.075278][T25195] tomoyo_realpath_from_path+0xef/0x640 [ 896.075315][T25195] ? tomoyo_path_number_perm+0x219/0x5f0 [ 896.075349][T25195] tomoyo_path_number_perm+0x246/0x5f0 [ 896.075383][T25195] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 896.075410][T25195] ? __lock_acquire+0x683/0x2cf0 [ 896.075444][T25195] ? hook_file_ioctl+0x1f0/0x5f0 [ 896.075475][T25195] ? __fget_files+0x2a/0x420 [ 896.075522][T25195] ? __fget_files+0x2a/0x420 [ 896.075554][T25195] ? __fget_files+0x3a2/0x420 [ 896.075575][T25195] ? __fget_files+0x2a/0x420 [ 896.075600][T25195] security_file_ioctl+0xc3/0x2a0 [ 896.075626][T25195] __se_sys_ioctl+0x47/0x170 [ 896.075643][T25195] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 896.075660][T25195] do_syscall_64+0x174/0x580 [ 896.075680][T25195] ? trace_irq_disable+0x3b/0x140 [ 896.075702][T25195] ? clear_bhb_loop+0x40/0x90 [ 896.075721][T25195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 896.075737][T25195] RIP: 0033:0x7f0bd879e019 [ 896.075753][T25195] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 896.075766][T25195] RSP: 002b:00007f0bd9754028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 896.075784][T25195] RAX: ffffffffffffffda RBX: 00007f0bd8a25fa0 RCX: 00007f0bd879e019 [ 896.075796][T25195] RDX: 0000200000000080 RSI: 0000000000008916 RDI: 0000000000000007 [ 896.075807][T25195] RBP: 00007f0bd9754090 R08: 0000000000000000 R09: 0000000000000000 [ 896.075817][T25195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 896.075827][T25195] R13: 00007f0bd8a26038 R14: 00007f0bd8a25fa0 R15: 00007ffeecd59af8 [ 896.075852][T25195] [ 896.075859][T25195] ERROR: Out of memory at tomoyo_realpath_from_path. [ 896.406127][T25206] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5231'. [ 896.581011][T25213] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5234'. [ 896.820906][T25225] netlink: 'syz.2.5239': attribute type 4 has an invalid length. [ 896.831122][T25225] netlink: 17 bytes leftover after parsing attributes in process `syz.2.5239'. [ 897.227863][T25245] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5241'. [ 897.297492][T25247] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 897.534524][T25267] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5248'. [ 897.585118][T25270] netlink: 'syz.3.5249': attribute type 15 has an invalid length. [ 897.723926][T25279] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5252'. [ 897.910962][T25291] bridge0: entered allmulticast mode [ 897.984900][T25292] pim6reg: entered allmulticast mode [ 898.091860][T25301] netlink: 256 bytes leftover after parsing attributes in process `syz.0.5260'. [ 898.239713][T25306] ipvlan0: left promiscuous mode [ 898.434639][T25315] xt_hashlimit: max too large, truncated to 1048576 [ 898.600142][T25328] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5271'. [ 898.806437][T25336] gretap0: entered promiscuous mode [ 898.828725][T25336] 0ªî{X¹¦: renamed from gretap0 [ 898.842130][T25336] 0ªî{X¹¦: left promiscuous mode [ 898.847279][T25336] 0ªî{X¹¦: entered allmulticast mode [ 899.542262][T25375] netlink: 'syz.0.5288': attribute type 2 has an invalid length. [ 899.610566][T25375] xt_connbytes: Forcing CT accounting to be enabled [ 899.620099][T25379] netlink: 'syz.4.5290': attribute type 4 has an invalid length. [ 899.653403][T25379] mac80211_hwsim hwsim44 wlan0: entered promiscuous mode [ 899.682965][T25379] mac80211_hwsim hwsim44 wlan0: entered allmulticast mode [ 899.858564][ T1182] net_ratelimit: 28 callbacks suppressed [ 899.858584][ T1182] bond2: (slave bridge1): failed to get link speed/duplex [ 900.283708][T25398] veth6: entered allmulticast mode [ 900.363712][ T1130] bond2: (slave bridge1): failed to get link speed/duplex [ 900.478621][ T1182] bond2: (slave bridge1): failed to get link speed/duplex [ 900.662517][T25407] ipip0: entered promiscuous mode [ 900.678398][ T1130] bond2: (slave bridge1): failed to get link speed/duplex [ 900.798295][ T1182] bond2: (slave bridge1): failed to get link speed/duplex [ 900.978587][ T1130] bond2: (slave bridge1): failed to get link speed/duplex [ 901.130567][ T1182] bond2: (slave bridge1): failed to get link speed/duplex [ 901.287122][ T1182] bond2: (slave bridge1): failed to get link speed/duplex [ 901.425307][T25448] __nla_validate_parse: 6 callbacks suppressed [ 901.425326][T25448] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5316'. [ 901.445924][T25451] netlink: 'syz.0.5312': attribute type 21 has an invalid length. [ 901.458260][ T1111] bond2: (slave bridge1): failed to get link speed/duplex [ 901.486876][T25451] netlink: 'syz.0.5312': attribute type 22 has an invalid length. [ 901.498776][T25451] netlink: 'syz.0.5312': attribute type 23 has an invalid length. [ 901.533191][T25451] netlink: 'syz.0.5312': attribute type 25 has an invalid length. [ 901.548647][T25451] netlink: 96 bytes leftover after parsing attributes in process `syz.0.5312'. [ 901.626261][T25458] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5317'. [ 901.778283][ T1111] bond2: (slave bridge1): failed to get link speed/duplex [ 901.785878][T25466] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5319'. [ 901.795791][T25458] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5317'. [ 901.826250][T25466] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5319'. [ 901.852057][T25466] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5319'. [ 901.919633][T25473] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5323'. [ 901.930687][T25473] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5323'. [ 901.944486][T25473] bridge0: entered allmulticast mode [ 901.959146][T25473] pim6reg: entered allmulticast mode [ 902.049979][T25480] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5325'. [ 902.355826][T25496] tipc: Enabling of bearer rejected, failed to enable media [ 902.458322][ T1182] IPVS: starting estimator thread 0... [ 902.459701][T25498] IPVS: set_ctl: invalid protocol: 4 224.0.0.2:20002 [ 902.551379][T25503] žÿ: renamed from team_slave_1 (while UP) [ 902.569297][T25501] IPVS: using max 28 ests per chain, 67200 per kthread [ 903.195277][T25550] xt_hashlimit: size too large, truncated to 1048576 [ 903.371505][T25550] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 903.794705][T25581] bridge0: entered promiscuous mode [ 903.904793][T25589] tipc: Enabling of bearer rejected, already enabled [ 904.635491][T25624] lo: entered promiscuous mode [ 904.663976][T25624] lo: entered allmulticast mode [ 904.874147][T25642] net_ratelimit: 26 callbacks suppressed [ 904.874169][T25642] openvswitch: netlink: Port 856954028 exceeds max allowable 65535 [ 904.946690][T25647] bridge0: entered allmulticast mode [ 904.988296][ T1182] bond2: (slave bridge1): failed to get link speed/duplex [ 905.028962][T25644] xt_CT: No such helper "netbios-ns" [ 905.248288][ T1182] bond2: (slave bridge1): failed to get link speed/duplex [ 905.410283][ T1102] bond2: (slave bridge1): failed to get link speed/duplex [ 905.507908][T25674] syz_tun: entered allmulticast mode [ 905.541161][T25672] syz_tun: left allmulticast mode [ 905.571322][ T1111] bond2: (slave bridge1): failed to get link speed/duplex [ 905.688361][ T1102] bond2: (slave bridge1): failed to get link speed/duplex [ 905.848321][ T1119] bond2: (slave bridge1): failed to get link speed/duplex [ 905.968349][ T57] bond2: (slave bridge1): failed to get link speed/duplex [ 906.149081][ T57] bond2: (slave bridge1): failed to get link speed/duplex [ 906.294403][ T156] bond2: (slave bridge1): failed to get link speed/duplex [ 906.616525][T25745] __nla_validate_parse: 29 callbacks suppressed [ 906.616546][T25745] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5405'. [ 907.204549][T25767] lo: left promiscuous mode [ 907.231223][T25767] tunl0: left promiscuous mode [ 907.237296][T25767] gre0: left promiscuous mode [ 907.245648][T25767] gretap0: left promiscuous mode [ 907.253188][T25767] erspan0: left promiscuous mode [ 907.273515][T25767] ip_vti0: left promiscuous mode [ 907.296080][T25767] ip6_vti0: left promiscuous mode [ 907.308743][T25767] sit0: left promiscuous mode [ 907.319516][T25767] ip6tnl0: left promiscuous mode [ 907.329962][T25767] ip6gre0: left promiscuous mode [ 907.343722][T25767] syz_tun: left promiscuous mode [ 907.357832][T25767] ip6gretap0: left promiscuous mode [ 907.366387][T25767] vcan0: left promiscuous mode [ 907.386975][T25767] bond0: left promiscuous mode [ 907.412815][T25767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 907.469578][T25767] team0: left promiscuous mode [ 907.500730][T25767] 8021q: adding VLAN 0 to HW filter on device team0 [ 907.520859][T25767] dummy0: left promiscuous mode [ 907.529768][T25767] nlmon0: left promiscuous mode [ 907.536124][T25767] batadv0: left promiscuous mode [ 907.542821][T25767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 907.551739][T25767] vxcan0: left promiscuous mode [ 907.566825][T25767] vxcan1: left promiscuous mode [ 907.580846][T25767] veth0: left promiscuous mode [ 907.597494][T25767] veth1: left promiscuous mode [ 907.630189][T25767] wg0: left promiscuous mode [ 907.660574][T25767] wg2: left promiscuous mode [ 907.675851][T25767] veth1_to_bridge: left promiscuous mode [ 907.700355][T25767] bridge_slave_1: left promiscuous mode [ 907.715625][T25767] veth0_to_bond: left promiscuous mode [ 907.742124][T25767] bond_slave_0: left promiscuous mode [ 907.760023][T25767] veth1_to_bond: left promiscuous mode [ 907.780417][T25767] bond_slave_1: left promiscuous mode [ 907.789263][T25767] veth0_to_team: left promiscuous mode [ 907.796546][T25767] team_slave_0: left promiscuous mode [ 907.803231][T25767] veth1_to_team: left promiscuous mode [ 907.823171][T25767] team_slave_1: left promiscuous mode [ 907.842287][T25767] veth0_to_batadv: left promiscuous mode [ 907.857945][T25767] batadv_slave_0: left promiscuous mode [ 907.871928][T25767] veth1_to_batadv: left promiscuous mode [ 907.880797][T25767] batadv_slave_1: left promiscuous mode [ 907.907289][T25767] xfrm0: left promiscuous mode [ 907.919206][T25767] veth0_to_hsr: left promiscuous mode [ 907.928595][T25767] veth1_to_hsr: left promiscuous mode [ 907.937071][T25767] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 907.947849][T25767] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 907.961188][T25767] hsr0: left promiscuous mode [ 907.967576][T25767] veth1_virt_wifi: left promiscuous mode [ 907.975153][T25767] veth0_virt_wifi: left promiscuous mode [ 907.982604][T25767] virt_wifi0: left promiscuous mode [ 907.992186][T25767] veth1_vlan: left promiscuous mode [ 908.001069][T25767] vlan0: left promiscuous mode [ 908.009925][T25767] vlan1: left promiscuous mode [ 908.016313][T25767] veth1_vlan: entered promiscuous mode [ 908.022394][T25767] macvlan0: left promiscuous mode [ 908.029356][T25767] macvlan1: left promiscuous mode [ 908.036975][T25767] ipvlan1: left promiscuous mode [ 908.043807][T25767] veth1_macvtap: left promiscuous mode [ 908.051364][T25767] veth0_macvtap: left promiscuous mode [ 908.058322][T25767] veth0_macvtap: entered promiscuous mode [ 908.064461][T25767] macvtap0: left promiscuous mode [ 908.072295][T25767] veth1_macvtap: entered promiscuous mode [ 908.078819][T25767] macsec0: left promiscuous mode [ 908.085455][T25767] geneve0: left promiscuous mode [ 908.092905][T25767] geneve1: left promiscuous mode [ 908.100904][T25767] mac80211_hwsim hwsim39 wlan0: left promiscuous mode [ 908.112734][T25767] bond1: left promiscuous mode [ 908.119214][T25767] 8021q: adding VLAN 0 to HW filter on device bond1 [ 908.126811][T25767] gre1: left promiscuous mode [ 908.133349][T25767] bridge1: left promiscuous mode [ 908.141292][T25767] bond2: left promiscuous mode [ 908.146841][T25767] 8021q: adding VLAN 0 to HW filter on device bond2 [ 908.159637][T25767] veth2: left promiscuous mode [ 908.166302][T25767] veth3: left promiscuous mode [ 908.179284][T25767] bridge2: left promiscuous mode [ 908.190603][T25767] bond3: left promiscuous mode [ 908.202907][T25767] 8021q: adding VLAN 0 to HW filter on device bond3 [ 908.212324][T25767] geneve2: left promiscuous mode [ 908.221491][T25767] vlan2: left promiscuous mode [ 908.226321][T25767] mac80211_hwsim hwsim40 wlan1: left promiscuous mode [ 908.234637][T25767] batman_adv: batadv0: Interface activated: vlan2 [ 908.242706][T25767] vxlan0: left promiscuous mode [ 908.251679][T25767] bond4: left promiscuous mode [ 908.256826][T25767] 8021q: adding VLAN 0 to HW filter on device bond4 [ 908.264881][T25767] veth0_to_team: entered promiscuous mode [ 908.271126][T25767] macvlan2: left promiscuous mode [ 908.277720][T25767] macvlan3: left promiscuous mode [ 908.303589][T25767] bond5: left promiscuous mode [ 908.319875][T25767] xfrm1: left promiscuous mode [ 908.329490][T25767] 8021q: adding VLAN 0 to HW filter on device bond5 [ 908.344998][T25767] 8021q: adding VLAN 0 to HW filter on device bond6 [ 908.357302][T25767] 8021q: adding VLAN 0 to HW filter on device eth0 [ 908.367541][T25767] 8021q: adding VLAN 0 to HW filter on device eth1 [ 908.376777][T25767] 8021q: adding VLAN 0 to HW filter on device eth2 [ 908.386504][T25767] 8021q: adding VLAN 0 to HW filter on device eth3 [ 908.396800][T25767] bond7: left promiscuous mode [ 908.406671][T25767] geneve4: left promiscuous mode [ 908.492168][ T1119] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 908.500829][ T1119] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 908.509526][ T1119] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 908.517943][ T1119] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 908.581459][ T1119] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 908.592068][ T1119] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 908.602264][ T1119] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 908.613631][ T1119] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 908.834413][T25820] netlink: 'syz.2.5426': attribute type 15 has an invalid length. [ 908.849589][T25820] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5426'. [ 908.952166][T25825] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5428'. [ 909.043334][T25828] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5427'. [ 909.316308][T25846] netlink: 220 bytes leftover after parsing attributes in process `syz.2.5433'. [ 909.586595][T25858] syzkaller0: entered promiscuous mode [ 909.622916][T25858] syzkaller0: entered allmulticast mode [ 909.671947][T25859] tipc: Enabled bearer , priority 0 [ 909.713030][T25857] tipc: Resetting bearer [ 909.794112][T25857] tipc: Disabling bearer [ 909.911170][ T36] net_ratelimit: 13 callbacks suppressed [ 909.911190][ T36] bond2: (slave bridge1): failed to get link speed/duplex [ 910.138552][ T36] bond2: (slave bridge1): failed to get link speed/duplex [ 910.181774][T25548] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 910.200959][T25548] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 910.210588][T25548] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 910.246198][T25548] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 910.256043][T25548] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 910.260815][ T1119] bond2: (slave bridge1): failed to get link speed/duplex [ 910.386990][T25885] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5443'. [ 910.439127][ T36] bond2: (slave bridge1): failed to get link speed/duplex [ 910.495566][T25894] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5444'. [ 910.582816][ T1111] bond2: (slave bridge1): failed to get link speed/duplex [ 910.611576][T25901] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5447'. [ 910.702354][T25894] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5444'. [ 910.837096][ T156] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 1536 - 0 [ 910.859159][ T156] netdevsim netdevsim2 eth3 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 910.880310][ T156] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 910.890579][ T156] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20154 - 0 [ 910.975728][T25910] bridge4: entered promiscuous mode [ 911.010674][T25910] bridge4: entered allmulticast mode [ 911.038032][T25910] team0: Port device bridge4 added [ 911.068693][ T1111] bond2: (slave bridge1): failed to get link speed/duplex [ 911.095516][T25912] bridge0: port 1(team0) entered blocking state [ 911.112864][T25912] bridge0: port 1(team0) entered disabled state [ 911.129085][T25912] team0: entered allmulticast mode [ 911.154162][T25912] team0: entered promiscuous mode [ 911.177396][T25913] syzkaller0: entered promiscuous mode [ 911.194577][T25913] syzkaller0: entered allmulticast mode [ 911.291432][ T156] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 1536 - 0 [ 911.331725][ T156] netdevsim netdevsim2 eth2 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 911.373453][ T156] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 911.418610][ T156] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20154 - 0 [ 911.512890][T25911] tipc: Enabled bearer , priority 0 [ 911.530434][T25909] tipc: Resetting bearer [ 911.593741][T25909] tipc: Disabling bearer [ 911.625141][T25939] : renamed from veth0_to_bond [ 911.742629][ T156] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 1536 - 0 [ 911.754093][ T156] netdevsim netdevsim2 eth1 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 911.766171][ T156] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 911.791336][ T156] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20154 - 0 [ 911.808062][T25946] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5457'. [ 911.854731][T25948] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5458'. [ 911.947586][T20314] block nbd64: NBD_DISCONNECT [ 912.153758][ T156] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 1536 - 0 [ 912.212826][ T156] netdevsim netdevsim2 eth0 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 912.225209][ T156] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 912.240217][ T156] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20154 - 0 [ 912.253477][T25968] netlink: 27 bytes leftover after parsing attributes in process `syz.3.5463'. [ 912.297675][T20314] udevd[20314]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 912.317284][T25969] netlink: 'syz.4.5462': attribute type 3 has an invalid length. [ 912.333784][T25966] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5462'. [ 912.361640][T25966] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5462'. [ 912.388565][ T5645] Bluetooth: hci3: command tx timeout [ 912.456542][T25967] bridge6: entered promiscuous mode [ 912.467578][T25967] bridge6: entered allmulticast mode [ 912.500542][T25968] bridge7: entered promiscuous mode [ 912.517671][T25968] bridge7: entered allmulticast mode [ 912.565870][T25968] bridge8: entered promiscuous mode [ 912.573968][T25968] bridge8: entered allmulticast mode [ 912.589237][ T1182] bond2: (slave bridge1): failed to get link speed/duplex [ 912.628915][T25968] bridge9: entered promiscuous mode [ 912.658530][T25968] bridge9: entered allmulticast mode [ 912.682883][T25968] bridge10: entered promiscuous mode [ 912.710254][T25968] bridge10: entered allmulticast mode [ 912.752496][T25968] bridge11: entered promiscuous mode [ 912.763465][T25968] bridge11: entered allmulticast mode [ 912.780894][T25968] bridge12: entered promiscuous mode [ 912.786386][T25968] bridge12: entered allmulticast mode [ 912.801858][T25968] bridge13: entered promiscuous mode [ 912.807241][T25968] bridge13: entered allmulticast mode [ 912.882423][T25968] bridge14: entered promiscuous mode [ 912.899257][T25968] bridge14: entered allmulticast mode [ 912.976716][T25968] bridge15: entered promiscuous mode [ 912.983038][T25968] bridge15: entered allmulticast mode [ 912.996180][T25968] bridge16: entered promiscuous mode [ 913.002114][T25968] bridge16: entered allmulticast mode [ 913.032278][T25968] bridge17: entered promiscuous mode [ 913.037657][T25968] bridge17: entered allmulticast mode [ 913.050727][T25968] bridge18: entered promiscuous mode [ 913.056064][T25968] bridge18: entered allmulticast mode [ 913.188524][ T156] pim6reg: left allmulticast mode [ 913.601546][ T156] bond2 (unregistering): (slave bridge1): Releasing backup interface [ 913.617629][ T156] bond2 (unregistering): (slave bridge1): the permanent HWaddr of slave - da:0b:48:4c:4f:e3 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 913.642143][ T156] bond2 (unregistering): (slave bridge2): Releasing backup interface [ 913.675413][ T156]  (unregistering): Released all slaves [ 913.686091][ T156] bond1 (unregistering): Released all slaves [ 913.724149][ T156] bond0 (unregistering): Released all slaves [ 913.739726][ T156] bond2 (unregistering): Released all slaves [ 913.761237][ T156] bond3 (unregistering): Released all slaves [ 913.808838][ T156] bond4 (unregistering): Released all slaves [ 913.834146][ T156] bond5 (unregistering): Released all slaves [ 913.852772][ T156] bond6 (unregistering): Released all slaves [ 913.869744][ T156] bond7 (unregistering): Released all slaves [ 913.896080][ T156] bond8 (unregistering): Released all slaves [ 913.911449][ T156] bond9 (unregistering): Released all slaves [ 913.927929][ T156] bond10 (unregistering): (slave bond11): Releasing backup interface [ 913.936848][ T156] bond10 (unregistering): Released all slaves [ 913.959960][ T156] bond11 (unregistering): Released all slaves [ 914.119695][ T156] tipc: Left network mode [ 914.280444][T25882] bridge0: port 1(bridge_slave_0) entered blocking state [ 914.288453][T25882] bridge0: port 1(bridge_slave_0) entered disabled state [ 914.295689][T25882] bridge_slave_0: entered allmulticast mode [ 914.304054][T25882] bridge_slave_0: entered promiscuous mode [ 914.323971][T25882] bridge0: port 2(bridge_slave_1) entered blocking state [ 914.338204][T25882] bridge0: port 2(bridge_slave_1) entered disabled state [ 914.346751][T25882] bridge_slave_1: entered allmulticast mode [ 914.360160][T25882] bridge_slave_1: entered promiscuous mode [ 914.436571][T25882] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 914.448073][T25882] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 914.468822][ T5645] Bluetooth: hci3: command tx timeout [ 914.491013][T25882] team0: Port device team_slave_0 added [ 914.500148][T25882] team0: Port device team_slave_1 added [ 914.533229][T25882] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 914.540248][T25882] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 914.566729][T25882] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 914.579012][T25882] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 914.585959][T25882] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 914.612207][T25882] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 914.672533][T25882] hsr_slave_0: entered promiscuous mode [ 914.678935][T25882] hsr_slave_1: entered promiscuous mode [ 914.812793][ T156] hsr_slave_0: left promiscuous mode [ 914.819388][ T156] hsr_slave_1: left promiscuous mode [ 914.830880][ T156] veth1_macvtap: left promiscuous mode [ 914.836375][ T156] veth0_macvtap: left promiscuous mode [ 914.842185][ T156] veth1_vlan: left promiscuous mode [ 914.847580][ T156] veth0_vlan: left promiscuous mode [ 915.479092][T25973] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 915.726620][T26028] syzkaller1: entered promiscuous mode [ 915.749660][T26028] syzkaller1: entered allmulticast mode [ 915.863884][ T156] IPVS: stop unused estimator thread 0... [ 916.146521][T26042] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5480'. [ 916.217982][T25882] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 916.255388][T25882] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 916.276269][T25882] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 916.313220][T25882] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 916.332253][T25882] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 916.374494][T25882] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 916.390595][T25882] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 916.420449][T25882] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 916.548300][ T5645] Bluetooth: hci3: command tx timeout [ 916.636028][T25882] 8021q: adding VLAN 0 to HW filter on device bond0 [ 916.684378][T25882] 8021q: adding VLAN 0 to HW filter on device team0 [ 916.717664][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 916.724936][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 916.751769][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 916.759034][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 916.919512][T26080] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5488'. [ 917.497889][T26107] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5493'. [ 917.985759][T25882] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 917.993234][T26125] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5498'. [ 918.148056][ T30] audit: type=1804 audit(1785459071.638:8): pid=26127 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.5499" name="/newroot/485/cgroup.controllers" dev="tmpfs" ino=2498 res=1 errno=0 [ 918.208189][ T30] audit: type=1800 audit(1785459071.648:9): pid=26127 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.5499" name="cgroup.controllers" dev="tmpfs" ino=2498 res=0 errno=0 [ 918.296257][T25882] veth0_vlan: entered promiscuous mode [ 918.317532][T25882] veth1_vlan: entered promiscuous mode [ 918.368975][T25882] veth0_macvtap: entered promiscuous mode [ 918.380590][T25882] veth1_macvtap: entered promiscuous mode [ 918.405320][T25882] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 918.444015][T25882] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 918.480385][ T1119] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 918.509676][ T1119] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 918.534480][ T1119] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 918.554911][ T1119] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 918.628754][ T5645] Bluetooth: hci3: command tx timeout [ 918.730460][T26137] netlink: 27 bytes leftover after parsing attributes in process `syz.3.5502'. [ 918.764513][ T1102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 918.772711][T26134] syzkaller0: entered promiscuous mode [ 918.795284][T26134] syzkaller0: entered allmulticast mode [ 918.803880][ T1102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 918.841709][T26134] netlink: 'syz.1.5500': attribute type 1 has an invalid length. [ 918.871409][T26134] netlink: 'syz.1.5500': attribute type 12 has an invalid length. [ 918.894589][T26134] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5500'. [ 919.120828][ T1111] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 919.147782][ T1111] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 919.190490][T26151] IPVS: dh: TCP 172.20.20.170:0 - no destination available [ 919.235487][T26149] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5504'. [ 919.408268][T26158] syzkaller0: entered promiscuous mode [ 919.783397][T26175] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5512'. [ 920.229337][ C1] IPVS: dh: TCP 172.20.20.170:0 - no destination available [ 921.269571][ C1] IPVS: dh: TCP 172.20.20.170:0 - no destination available [ 921.867996][T26186] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5513'. [ 921.920766][T26192] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5516'. [ 922.301407][T26210] block nbd0: server does not support multiple connections per device. [ 922.311647][T26210] block nbd0: shutting down sockets [ 922.376957][T26215] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5523'. [ 922.435766][T26217] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5524'. [ 922.813664][T26241] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 922.857282][T26241] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 42796 - 0 [ 922.870170][T26244] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5530'. [ 922.878037][T26241] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 922.933689][T26237] netlink: 'syz.1.5532': attribute type 139 has an invalid length. [ 922.951726][T26249] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5530'. [ 923.005364][T26241] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 923.076249][T26241] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 42796 - 0 [ 923.103206][T26241] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 923.394471][T26241] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 923.411416][T26241] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 42796 - 0 [ 923.424737][T26241] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 923.462975][T26271] IPVS: set_ctl: invalid protocol: 103 127.0.0.1:24097 [ 923.560740][T26241] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 923.616409][T26241] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 42796 - 0 [ 923.634905][T26241] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 923.782601][T26289] tls_set_device_offload: netdev not found [ 923.944439][T26299] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5551'. [ 923.996180][T26301] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5551'. [ 924.014691][T26293] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 924.140004][ T1119] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 924.186011][ T1119] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 42796 - 0 [ 924.194992][ T1119] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 924.274308][T26293] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 924.324375][ T57] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 924.339484][ T57] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 42796 - 0 [ 924.347881][ T57] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 924.381720][T26308] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 924.407192][T26312] team0: Device xfrm0 failed to enter team mode [ 924.431806][T26312] team0: Device xfrm0 failed to enter team mode [ 924.456675][ T57] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 924.489269][ T57] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 42796 - 0 [ 924.518644][ T57] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 924.581333][T26293] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 924.635774][ T57] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 924.647233][ T57] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 42796 - 0 [ 924.656239][ T57] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 924.688447][T26293] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 924.823291][ T57] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 924.874548][ T1119] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 924.929180][ T1119] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 925.064212][ T1119] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 925.107547][T26337] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5562'. [ 925.167143][T26344] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 925.200130][T26348] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5565'. [ 925.216478][T26347] tc_dump_action: action bad kind [ 925.233202][T26348] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5565'. [ 925.280797][T26344] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 925.357277][T26344] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 925.556571][T26344] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 925.748522][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 925.936149][T26386] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5575'. [ 926.545420][T26413] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 926.611082][T26420] netlink: 'syz.1.5586': attribute type 1 has an invalid length. [ 926.731267][T26429] netlink: 'syz.4.5590': attribute type 8 has an invalid length. [ 926.764590][T26429] netlink: 'syz.4.5590': attribute type 3 has an invalid length. [ 927.780742][T26484] __nla_validate_parse: 6 callbacks suppressed [ 927.780763][T26484] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5602'. [ 928.137273][T26487] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5603'. [ 928.149303][T26487] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5603'. [ 928.261875][T26490] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5604'. [ 928.614613][T26501] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5608'. [ 928.775394][T26508] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 929.017637][ T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 929.057532][ T1182] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 929.124478][ T57] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 929.217535][ T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 929.693584][T26541] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5620'. [ 929.729712][T26548] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5618'. [ 929.739943][T26544] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5619'. [ 929.930353][T26518] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5612'. [ 929.950504][T26518] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 930.417673][T26580] netlink: 'syz.3.5628': attribute type 1 has an invalid length. [ 930.677688][T26590] vlan1: entered promiscuous mode [ 930.683129][T26590] bridge0: entered promiscuous mode [ 930.911385][T26600] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5634'. [ 930.958204][T26596] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 930.975047][T26596] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 931.223213][T26596] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 931.282096][T26596] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 931.460477][T26596] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 931.482297][T26596] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 931.580018][T26624] hsr_slave_1 (unregistering): left promiscuous mode [ 931.596818][T26596] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 931.607025][T26596] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 931.777410][ T156] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 931.791570][ T156] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 931.835771][ T57] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 931.855113][ T57] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 931.876960][ T57] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 931.885708][ T57] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 931.894479][T26637] syzkaller1: entered promiscuous mode [ 931.903704][T26637] syzkaller1: entered allmulticast mode [ 931.919038][T26641] mac80211_hwsim hwsim39 syzkaller0: entered promiscuous mode [ 931.929657][T26641] mac80211_hwsim hwsim39 syzkaller0: entered allmulticast mode [ 931.942810][ T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 931.951436][ T13] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 931.975618][T26639] lo: entered allmulticast mode [ 931.992200][T26639] netlink: 'syz.3.5648': attribute type 9 has an invalid length. [ 932.008649][T26639] netlink: 'syz.3.5648': attribute type 6 has an invalid length. [ 932.039691][T26638] lo: left allmulticast mode [ 932.145889][T26648] netlink: 'syz.0.5651': attribute type 1 has an invalid length. [ 932.276749][T26648] 8021q: adding VLAN 0 to HW filter on device bond9 [ 932.397780][T26661] bond9 (unregistering): Released all slaves [ 932.489271][T26648] tipc: Enabled bearer , priority 0 [ 932.499196][T26660] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 932.623196][T26678] netlink: 'syz.1.5658': attribute type 15 has an invalid length. [ 932.713086][T26687] netlink: 'syz.1.5658': attribute type 15 has an invalid length. [ 932.893885][T26700] team0 (unregistering): Port device team_slave_0 removed [ 932.907321][T26700] team0 (unregistering): Port device team_slave_1 removed [ 932.971610][T26700] x_tables: duplicate underflow at hook 1 [ 933.160313][T26709] geneve3: entered promiscuous mode [ 933.181635][ T1182] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 933.187344][T26709] netlink: 'syz.4.5665': attribute type 61 has an invalid length. [ 933.224255][ T1182] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 933.236010][ T1182] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 933.271891][T26725] __nla_validate_parse: 39 callbacks suppressed [ 933.271906][T26725] netlink: 180 bytes leftover after parsing attributes in process `syz.1.5668'. [ 933.300781][ T1182] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 933.397802][T26714] veth5: entered promiscuous mode [ 933.408541][T26714] veth5: entered allmulticast mode [ 933.504052][T26731] team0: left allmulticast mode [ 933.511234][T26731] team0: left promiscuous mode [ 933.516491][T26731] bridge0: port 1(team0) entered disabled state [ 933.526977][T26730] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5671'. [ 933.547588][T26731] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 933.567642][T26744] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5672'. [ 934.441486][T26785] netlink: 144 bytes leftover after parsing attributes in process `syz.3.5678'. [ 935.863366][T26798] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5681'. [ 935.872605][T26798] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5681'. [ 935.905300][T26798] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5681'. [ 935.915219][T26798] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5681'. [ 935.977586][T26798] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5681'. [ 935.988777][T26798] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5681'. [ 936.336364][T26735] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 936.952928][T26839] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 937.283466][T26863] bridge0: port 3(dummy0) entered blocking state [ 937.290255][T26863] bridge0: port 3(dummy0) entered disabled state [ 937.296802][T26863] dummy0: entered allmulticast mode [ 937.305336][ T1119] IPVS: starting estimator thread 0... [ 937.311135][T26863] dummy0: entered promiscuous mode [ 937.311138][T26866] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 937.323381][T26867] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 937.323419][T26867] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 937.337134][T26863] bridge0: port 3(dummy0) entered blocking state [ 937.343609][T26863] bridge0: port 3(dummy0) entered forwarding state [ 937.352767][T26861] dummy0: left allmulticast mode [ 937.360224][T26861] dummy0: left promiscuous mode [ 937.365644][T26861] bridge0: port 3(dummy0) entered disabled state [ 937.468632][T26869] IPVS: using max 26 ests per chain, 62400 per kthread [ 938.487689][T26925] atomic_op ffff888026ff5998 conn xmit_atomic 0000000000000000 [ 938.818739][T26936] __nla_validate_parse: 3 callbacks suppressed [ 938.818756][T26936] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5716'. [ 938.841596][T26937] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5716'. [ 938.851029][T26938] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5716'. [ 939.075871][T26945] veth1_to_bridge: entered promiscuous mode [ 939.093025][T26945] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5717'. [ 939.714013][T26979] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5725'. [ 939.730469][T26981] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5722'. [ 939.786079][T26986] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 939.848605][T26986] netlink: 'syz.3.5726': attribute type 1 has an invalid length. [ 940.147375][T26967] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 940.172153][T26967] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 940.263187][T26967] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 940.278213][T26967] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 940.311461][T26967] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 940.328639][T26967] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 940.378933][T26967] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 940.403082][T26967] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 941.237649][T27046] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32) [ 941.314942][T27051] syzkaller1: entered promiscuous mode [ 941.324785][T27051] syzkaller1: entered allmulticast mode [ 941.489494][T27053] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5748'. [ 941.531980][T27053] openvswitch: netlink: Missing key (keys=40, expected=100) [ 941.675220][T27067] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5754'. [ 941.692678][T27067] netlink: 'syz.2.5754': attribute type 5 has an invalid length. [ 941.704788][T27067] netlink: 'syz.2.5754': attribute type 4 has an invalid length. [ 941.713565][T27067] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5754'. [ 941.796745][T27069] netlink: 179624 bytes leftover after parsing attributes in process `syz.3.5753'. [ 941.952685][T27084] syzkaller1: entered promiscuous mode [ 941.958426][T27084] syzkaller1: entered allmulticast mode [ 942.328523][T27105] nbd0: detected capacity change from 0 to 63 [ 942.422010][T27114] wg0: entered allmulticast mode [ 942.455411][T27116] tipc: Enabled bearer , priority 0 [ 942.477200][T27116] mac80211_hwsim hwsim51 syzkaller0: entered promiscuous mode [ 942.493649][T27116] mac80211_hwsim hwsim51 syzkaller0: entered allmulticast mode [ 942.791399][T27129] netlink: 'syz.3.5771': attribute type 1 has an invalid length. [ 942.851375][T27129] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 943.135869][T25548] block nbd0: Receive control failed (result -104) [ 943.558754][T27143] smc: net device wg2 applied user defined pnetid SYZ0 [ 943.577439][T19391] tipc: Node number set to 2984739733 [ 944.049241][T27173] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 944.169865][T27171] netlink: 'syz.3.5784': attribute type 16 has an invalid length. [ 944.198224][T27171] netlink: 'syz.3.5784': attribute type 17 has an invalid length. [ 944.357905][T27171] xfrm0: left promiscuous mode [ 944.378310][T27171] xfrm0: left allmulticast mode [ 944.414472][T27171] veth1_vlan: entered promiscuous mode [ 944.475375][T27171] geneve2: left promiscuous mode [ 944.480833][T27171] geneve2: left allmulticast mode [ 944.490533][T27171] bridge3: left promiscuous mode [ 944.496668][T27171] bridge3: left allmulticast mode [ 944.506894][T27171] 8021q: adding VLAN 0 to HW filter on device bond4 [ 944.516125][T27171] ip6tnl1: left allmulticast mode [ 944.524234][T27171] 8021q: adding VLAN 0 to HW filter on device bond5 [ 944.537713][T27171] 8021q: adding VLAN 0 to HW filter on device bond6 [ 944.547445][T27171] A link change request failed with some changes committed already. Interface vxlan2 may have been left with an inconsistent configuration, please check. [ 944.588071][T27185] __nla_validate_parse: 8 callbacks suppressed [ 944.594821][T27185] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5786'. [ 944.605837][ T1111] netdevsim netdevsim3 eth0: set [1, 2] type 2 family 0 port 20004 - 0 [ 944.629423][ T1111] netdevsim netdevsim3 eth1: set [1, 2] type 2 family 0 port 20004 - 0 [ 944.659589][ T1111] netdevsim netdevsim3 eth2: set [1, 2] type 2 family 0 port 20004 - 0 [ 944.696837][ T1111] netdevsim netdevsim3 eth3: set [1, 2] type 2 family 0 port 20004 - 0 [ 944.813726][T27193] netlink: 'syz.4.5791': attribute type 1 has an invalid length. [ 944.829136][T27195] netlink: 'syz.3.5792': attribute type 1 has an invalid length. [ 944.845508][T27193] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 944.864332][T27195] netlink: 200 bytes leftover after parsing attributes in process `syz.3.5792'. [ 944.888809][T27195] netlink: 'syz.3.5792': attribute type 1 has an invalid length. [ 944.911571][T27195] netlink: 29 bytes leftover after parsing attributes in process `syz.3.5792'. [ 944.968545][T27201] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 944.979841][T27204] netlink: 165 bytes leftover after parsing attributes in process `syz.4.5795'. [ 944.984038][T27201] bond1 (unregistering): Released all slaves [ 945.196292][T27213] netlink: 'syz.2.5799': attribute type 1 has an invalid length. [ 945.231906][T27213] bond1: entered promiscuous mode [ 945.238761][T27213] 8021q: adding VLAN 0 to HW filter on device bond1 [ 945.285406][T27213] vlan2: entered allmulticast mode [ 945.290721][T27213] bond1: entered allmulticast mode [ 945.315300][T27213] bond1: (slave bridge1): making interface the new active one [ 945.323736][T27213] bridge1: entered promiscuous mode [ 945.329963][T27213] bridge1: entered allmulticast mode [ 945.351754][T27213] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 945.419859][T27216] nbd2: detected capacity change from 0 to 63 [ 945.429196][T25548] block nbd2: Receive control failed (result -32) [ 945.521149][ T1662] block nbd2: Dead connection, failed to find a fallback [ 945.530956][ T1662] block nbd2: shutting down sockets [ 945.537878][ T1662] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 945.549701][ T1662] Buffer I/O error on dev nbd2, logical block 0, async page read [ 945.550702][T27225] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5801'. [ 945.563228][ T1662] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 945.575960][ T1662] Buffer I/O error on dev nbd2, logical block 1, async page read [ 945.584484][ T1662] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 945.594934][ T1662] Buffer I/O error on dev nbd2, logical block 2, async page read [ 945.603005][ T1662] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 945.612838][ T1662] Buffer I/O error on dev nbd2, logical block 3, async page read [ 945.621747][ T1662] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 945.631392][ T1662] Buffer I/O error on dev nbd2, logical block 0, async page read [ 945.639395][ T1662] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 945.648977][ T1662] Buffer I/O error on dev nbd2, logical block 1, async page read [ 945.661303][ T1662] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 2 prio class 2 [ 945.671135][ T1662] Buffer I/O error on dev nbd2, logical block 2, async page read [ 945.679005][ T1662] Buffer I/O error on dev nbd2, logical block 3, async page read [ 945.690552][ T1662] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 945.700193][ T1662] Buffer I/O error on dev nbd2, logical block 0, async page read [ 945.708037][ T1662] Buffer I/O error on dev nbd2, logical block 1, async page read [ 945.716251][ T1662] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 945.728403][ T1662] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 945.746369][T20382] ldm_validate_partition_table(): Disk read failed. [ 945.755174][T20382] Dev nbd2: unable to read RDB block 0 [ 945.762709][T20382] nbd2: unable to read partition table [ 945.780396][T20382] ldm_validate_partition_table(): Disk read failed. [ 945.790658][T20382] Dev nbd2: unable to read RDB block 0 [ 945.810785][T20382] nbd2: unable to read partition table [ 945.903620][T27235] x_tables: duplicate underflow at hook 1 [ 945.955081][T27220] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5801'. [ 946.006428][T27220] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5801'. [ 946.193704][T27215] block nbd0: Unsupported socket: should be TCP or UNIX. [ 946.690903][T27270] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5816'. [ 946.802240][T27251] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5808'. [ 946.812785][T27251] netlink: 76 bytes leftover after parsing attributes in process `syz.4.5808'. [ 948.965581][T27327] xt_hashlimit: size too large, truncated to 1048576 [ 949.310441][T27248] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 949.630522][T27270] Set syz1 is full, maxelem 65536 reached [ 949.657456][T27341] __nla_validate_parse: 10 callbacks suppressed [ 949.657476][T27341] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5833'. [ 949.792894][T27341] [ 949.795318][T27341] ====================================================== [ 949.802430][T27341] WARNING: possible circular locking dependency detected [ 949.809553][T27341] syzkaller #0 Not tainted [ 949.813993][T27341] ------------------------------------------------------ [ 949.821076][T27341] syz.0.5833/27341 is trying to acquire lock: [ 949.827150][T27341] ffff88805201b398 (set->srcu){.+.+}-{0:0}, at: __synchronize_srcu+0xb5/0x2f0 [ 949.836151][T27341] [ 949.836151][T27341] but task is already holding lock: [ 949.843520][T27341] ffff8880256cd008 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1af/0x480 [ 949.852985][T27341] [ 949.852985][T27341] which lock already depends on the new lock. [ 949.852985][T27341] [ 949.863400][T27341] [ 949.863400][T27341] the existing dependency chain (in reverse order) is: [ 949.872425][T27341] [ 949.872425][T27341] -> #6 (&q->elevator_lock){+.+.}-{4:4}: [ 949.880381][T27341] __mutex_lock+0x19d/0x1550 [ 949.885519][T27341] elevator_change+0x1af/0x480 [ 949.890826][T27341] elevator_set_none+0xb5/0x140 [ 949.896230][T27341] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 949.902640][T27341] nbd_start_device+0x189/0xb30 [ 949.908086][T27341] nbd_genl_connect+0x1597/0x1c10 [ 949.913642][T27341] genl_family_rcv_msg_doit+0x233/0x340 [ 949.919723][T27341] genl_rcv_msg+0x614/0x7a0 [ 949.924774][T27341] netlink_rcv_skb+0x226/0x4a0 [ 949.930076][T27341] genl_rcv+0x28/0x40 [ 949.934593][T27341] netlink_unicast+0x7bb/0x940 [ 949.939891][T27341] netlink_sendmsg+0x813/0xb40 [ 949.945183][T27341] sock_sendmsg_nosec+0x13a/0x180 [ 949.950745][T27341] ____sys_sendmsg+0x54e/0x850 [ 949.956043][T27341] ___sys_sendmsg+0x2a5/0x360 [ 949.961248][T27341] __x64_sys_sendmsg+0x1b1/0x290 [ 949.966717][T27341] do_syscall_64+0x174/0x580 [ 949.971848][T27341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 949.978295][T27341] [ 949.978295][T27341] -> #5 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 949.986937][T27341] blk_alloc_queue+0x544/0x690 [ 949.992285][T27341] __blk_mq_alloc_disk+0x194/0x390 [ 949.997920][T27341] nbd_dev_add+0x494/0xb60 [ 950.002857][T27341] nbd_init+0x15f/0x1e0 [ 950.007626][T27341] do_one_initcall+0x250/0x870 [ 950.012922][T27341] do_initcall_level+0x10a/0x1a0 [ 950.018433][T27341] do_initcalls+0x59/0xa0 [ 950.023314][T27341] kernel_init_freeable+0x29d/0x3e0 [ 950.029050][T27341] kernel_init+0x1d/0x1d0 [ 950.033924][T27341] ret_from_fork+0x514/0xb70 [ 950.039056][T27341] ret_from_fork_asm+0x1a/0x30 [ 950.044347][T27341] [ 950.044347][T27341] -> #4 (fs_reclaim){+.+.}-{0:0}: [ 950.051573][T27341] fs_reclaim_acquire+0x71/0x100 [ 950.057059][T27341] __kmalloc_cache_node_noprof+0x66/0x630 [ 950.063333][T27341] create_worker+0x112/0x7b0 [ 950.068468][T27341] workqueue_prepare_cpu+0xe4/0x170 [ 950.074205][T27341] cpuhp_invoke_callback+0x434/0x810 [ 950.080038][T27341] _cpu_up+0x2ce/0x5b0 [ 950.084639][T27341] cpu_up+0x1d2/0x220 [ 950.089160][T27341] cpuhp_bringup_mask+0xb2/0x1a0 [ 950.094734][T27341] cpuhp_bringup_cpus_parallel+0x109/0x120 [ 950.101088][T27341] bringup_nonboot_cpus+0x17/0x30 [ 950.106661][T27341] smp_init+0x32/0x110 [ 950.111325][T27341] kernel_init_freeable+0x27f/0x3e0 [ 950.117063][T27341] kernel_init+0x1d/0x1d0 [ 950.121934][T27341] ret_from_fork+0x514/0xb70 [ 950.127075][T27341] ret_from_fork_asm+0x1a/0x30 [ 950.132368][T27341] [ 950.132368][T27341] -> #3 (cpu_hotplug_lock){++++}-{0:0}: [ 950.140116][T27341] cpus_read_lock+0x42/0x160 [ 950.145239][T27341] static_key_slow_inc+0x12/0x30 [ 950.150776][T27341] nbd_genl_reconfigure+0x1301/0x1e80 [ 950.156697][T27341] genl_family_rcv_msg_doit+0x233/0x340 [ 950.162780][T27341] genl_rcv_msg+0x614/0x7a0 [ 950.167813][T27341] netlink_rcv_skb+0x226/0x4a0 [ 950.173115][T27341] genl_rcv+0x28/0x40 [ 950.177635][T27341] netlink_unicast+0x7bb/0x940 [ 950.182935][T27341] netlink_sendmsg+0x813/0xb40 [ 950.188237][T27341] sock_sendmsg_nosec+0x13a/0x180 [ 950.193809][T27341] ____sys_sendmsg+0x54e/0x850 [ 950.199131][T27341] ___sys_sendmsg+0x2a5/0x360 [ 950.204342][T27341] __x64_sys_sendmsg+0x1b1/0x290 [ 950.209815][T27341] do_syscall_64+0x174/0x580 [ 950.214942][T27341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 950.221371][T27341] [ 950.221371][T27341] -> #2 (&nsock->tx_lock){+.+.}-{4:4}: [ 950.229030][T27341] __mutex_lock+0x19d/0x1550 [ 950.234161][T27341] nbd_queue_rq+0x373/0x1150 [ 950.239281][T27341] blk_mq_dispatch_rq_list+0x499/0x1990 [ 950.245422][T27341] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 950.252303][T27341] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 950.258827][T27341] blk_mq_run_work_fn+0x16c/0x300 [ 950.264383][T27341] process_scheduled_works+0xa8e/0x14e0 [ 950.270470][T27341] worker_thread+0xa47/0xfb0 [ 950.275587][T27341] kthread+0x388/0x470 [ 950.280194][T27341] ret_from_fork+0x514/0xb70 [ 950.285321][T27341] ret_from_fork_asm+0x1a/0x30 [ 950.290615][T27341] [ 950.290615][T27341] -> #1 (&cmd->lock){+.+.}-{4:4}: [ 950.297849][T27341] __mutex_lock+0x19d/0x1550 [ 950.302999][T27341] nbd_queue_rq+0xc1/0x1150 [ 950.308064][T27341] blk_mq_dispatch_rq_list+0x499/0x1990 [ 950.314160][T27341] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 950.321047][T27341] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 950.327568][T27341] blk_mq_run_work_fn+0x16c/0x300 [ 950.333151][T27341] process_scheduled_works+0xa8e/0x14e0 [ 950.339239][T27341] worker_thread+0xa47/0xfb0 [ 950.344453][T27341] kthread+0x388/0x470 [ 950.349062][T27341] ret_from_fork+0x514/0xb70 [ 950.354188][T27341] ret_from_fork_asm+0x1a/0x30 [ 950.359486][T27341] [ 950.359486][T27341] -> #0 (set->srcu){.+.+}-{0:0}: [ 950.366622][T27341] __lock_acquire+0x1520/0x2cf0 [ 950.372005][T27341] lock_sync+0x9d/0x120 [ 950.376688][T27341] __synchronize_srcu+0xc9/0x2f0 [ 950.382158][T27341] elevator_switch+0x1e8/0x7b0 [ 950.387540][T27341] elevator_change+0x2fa/0x480 [ 950.392844][T27341] elevator_set_default+0x375/0x440 [ 950.398578][T27341] blk_register_queue+0x3f3/0x4e0 [ 950.404134][T27341] __add_disk+0x6cb/0xe30 [ 950.409070][T27341] add_disk_fwnode+0x100/0x3a0 [ 950.414374][T27341] nbd_dev_add+0x733/0xb60 [ 950.419321][T27341] nbd_genl_connect+0x992/0x1c10 [ 950.424788][T27341] genl_family_rcv_msg_doit+0x233/0x340 [ 950.430886][T27341] genl_rcv_msg+0x614/0x7a0 [ 950.435934][T27341] netlink_rcv_skb+0x226/0x4a0 [ 950.441231][T27341] genl_rcv+0x28/0x40 [ 950.445752][T27341] netlink_unicast+0x7bb/0x940 [ 950.451073][T27341] netlink_sendmsg+0x813/0xb40 [ 950.456385][T27341] sock_sendmsg_nosec+0x13a/0x180 [ 950.461947][T27341] ____sys_sendmsg+0x54e/0x850 [ 950.467240][T27341] ___sys_sendmsg+0x2a5/0x360 [ 950.472452][T27341] __x64_sys_sendmsg+0x1b1/0x290 [ 950.477915][T27341] do_syscall_64+0x174/0x580 [ 950.483034][T27341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 950.489453][T27341] [ 950.489453][T27341] other info that might help us debug this: [ 950.489453][T27341] [ 950.499683][T27341] Chain exists of: [ 950.499683][T27341] set->srcu --> &q->q_usage_counter(io)#50 --> &q->elevator_lock [ 950.499683][T27341] [ 950.513353][T27341] Possible unsafe locking scenario: [ 950.513353][T27341] [ 950.520873][T27341] CPU0 CPU1 [ 950.526278][T27341] ---- ---- [ 950.531648][T27341] lock(&q->elevator_lock); [ 950.536259][T27341] lock(&q->q_usage_counter(io)#50); [ 950.544175][T27341] lock(&q->elevator_lock); [ 950.551322][T27341] sync(set->srcu); [ 950.555233][T27341] [ 950.555233][T27341] *** DEADLOCK *** [ 950.555233][T27341] [ 950.563375][T27341] 6 locks held by syz.0.5833/27341: [ 950.568573][T27341] #0: ffffffff9009daa8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 950.576878][T27341] #1: ffffffff9009d8e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 950.585870][T27341] #2: ffff888065eaa1c0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: add_disk_fwnode+0xea/0x3a0 [ 950.596256][T27341] #3: ffff8880256cd090 (&q->sysfs_lock){+.+.}-{4:4}, at: blk_register_queue+0x10d/0x4e0 [ 950.606099][T27341] #4: ffff8880256ccb18 (&q->q_usage_counter(queue)#52){+.+.}-{0:0}, at: elevator_change+0x194/0x480 [ 950.616997][T27341] #5: ffff8880256cd008 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1af/0x480 [ 950.626851][T27341] [ 950.626851][T27341] stack backtrace: [ 950.632761][T27341] CPU: 0 UID: 0 PID: 27341 Comm: syz.0.5833 Not tainted syzkaller #0 PREEMPT(full) [ 950.632784][T27341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 950.632796][T27341] Call Trace: [ 950.632805][T27341] [ 950.632815][T27341] dump_stack_lvl+0xe8/0x150 [ 950.632843][T27341] print_circular_bug+0x2e1/0x300 [ 950.632864][T27341] check_noncircular+0x12e/0x150 [ 950.632884][T27341] __lock_acquire+0x1520/0x2cf0 [ 950.632909][T27341] ? check_noncircular+0xda/0x150 [ 950.632928][T27341] ? lockdep_unlock+0x5d/0xd0 [ 950.632949][T27341] ? __lock_acquire+0x13e8/0x2cf0 [ 950.632973][T27341] ? __lock_acquire+0x13e8/0x2cf0 [ 950.632998][T27341] ? __synchronize_srcu+0xb5/0x2f0 [ 950.633020][T27341] lock_sync+0x9d/0x120 [ 950.633043][T27341] ? __synchronize_srcu+0xb5/0x2f0 [ 950.633068][T27341] __synchronize_srcu+0xc9/0x2f0 [ 950.633092][T27341] ? __pfx___synchronize_srcu+0x10/0x10 [ 950.633115][T27341] ? do_raw_spin_lock+0x12b/0x2f0 [ 950.633137][T27341] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 950.633157][T27341] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 950.633180][T27341] ? synchronize_srcu+0x20a/0x260 [ 950.633203][T27341] elevator_switch+0x1e8/0x7b0 [ 950.633227][T27341] ? blk_mq_cancel_work_sync+0xa5/0xe0 [ 950.633245][T27341] elevator_change+0x2fa/0x480 [ 950.633269][T27341] ? do_raw_spin_unlock+0xf5/0x210 [ 950.633299][T27341] elevator_set_default+0x375/0x440 [ 950.633323][T27341] ? __pfx_elevator_set_default+0x10/0x10 [ 950.633348][T27341] ? disk_register_independent_access_ranges+0x2d8/0x380 [ 950.633422][T27341] ? blk_crypto_sysfs_register+0x11c/0x170 [ 950.633479][T27341] blk_register_queue+0x3f3/0x4e0 [ 950.633497][T27341] __add_disk+0x6cb/0xe30 [ 950.633517][T27341] add_disk_fwnode+0x100/0x3a0 [ 950.633536][T27341] nbd_dev_add+0x733/0xb60 [ 950.633554][T27341] ? __pfx_nbd_dev_add+0x10/0x10 [ 950.633576][T27341] ? bpf_lsm_capable+0x9/0x20 [ 950.633598][T27341] ? security_capable+0x7e/0x2c0 [ 950.633615][T27341] ? radix_tree_lookup+0x25c/0x290 [ 950.633670][T27341] nbd_genl_connect+0x992/0x1c10 [ 950.633689][T27341] ? __pfx_nbd_genl_connect+0x10/0x10 [ 950.633705][T27341] ? rcu_is_watching+0x15/0xb0 [ 950.633720][T27341] ? trace_kmalloc+0x2a/0xf0 [ 950.633746][T27341] ? __kmalloc_noprof+0x396/0x720 [ 950.633768][T27341] ? __nla_parse+0x40/0x60 [ 950.633791][T27341] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 950.633820][T27341] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 950.633866][T27341] genl_family_rcv_msg_doit+0x233/0x340 [ 950.633897][T27341] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 950.633931][T27341] ? __lock_acquire+0x683/0x2cf0 [ 950.633960][T27341] genl_rcv_msg+0x614/0x7a0 [ 950.633991][T27341] ? __pfx_genl_rcv_msg+0x10/0x10 [ 950.634017][T27341] ? __pfx_nbd_genl_connect+0x10/0x10 [ 950.634041][T27341] netlink_rcv_skb+0x226/0x4a0 [ 950.634063][T27341] ? __pfx_genl_rcv_msg+0x10/0x10 [ 950.634091][T27341] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 950.634120][T27341] ? down_read+0x2be/0x330 [ 950.634146][T27341] genl_rcv+0x28/0x40 [ 950.634171][T27341] netlink_unicast+0x7bb/0x940 [ 950.634196][T27341] netlink_sendmsg+0x813/0xb40 [ 950.634224][T27341] ? __pfx_netlink_sendmsg+0x10/0x10 [ 950.634249][T27341] ? aa_sock_msg_perm+0xf1/0x1b0 [ 950.634272][T27341] ? __pfx_netlink_sendmsg+0x10/0x10 [ 950.634294][T27341] sock_sendmsg_nosec+0x13a/0x180 [ 950.634323][T27341] ____sys_sendmsg+0x54e/0x850 [ 950.634347][T27341] ? __pfx_____sys_sendmsg+0x10/0x10 [ 950.634372][T27341] ? import_iovec+0x73/0xa0 [ 950.634402][T27341] ___sys_sendmsg+0x2a5/0x360 [ 950.634423][T27341] ? __lock_acquire+0x683/0x2cf0 [ 950.634450][T27341] ? __pfx____sys_sendmsg+0x10/0x10 [ 950.634473][T27341] ? futex_wake+0x51b/0x5f0 [ 950.634517][T27341] ? __fget_files+0x2a/0x420 [ 950.634543][T27341] ? __fget_files+0x3a2/0x420 [ 950.634572][T27341] __x64_sys_sendmsg+0x1b1/0x290 [ 950.634595][T27341] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 950.634625][T27341] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 950.634645][T27341] do_syscall_64+0x174/0x580 [ 950.634668][T27341] ? trace_irq_disable+0x3b/0x140 [ 950.634693][T27341] ? clear_bhb_loop+0x40/0x90 [ 950.634715][T27341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 950.634740][T27341] RIP: 0033:0x7f4ba619e019 [ 950.634759][T27341] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 950.634776][T27341] RSP: 002b:00007f4ba70b4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 950.634796][T27341] RAX: ffffffffffffffda RBX: 00007f4ba6425fa0 RCX: 00007f4ba619e019 [ 950.634811][T27341] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000009 [ 950.634823][T27341] RBP: 00007f4ba623500c R08: 0000000000000000 R09: 0000000000000000 [ 950.634836][T27341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 950.634847][T27341] R13: 00007f4ba6426038 R14: 00007f4ba6425fa0 R15: 00007ffe877e1f08 [ 950.634869][T27341] [ 951.173157][T27348] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5833'. [ 951.217318][T27348] nbd: device at index 64 is going down [ 951.327544][T22336] udevd[22336]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 951.349751][T20382] udevd[20382]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 951.428810][ T1731] block nbd0: Possible stuck request ffff888027b4e000: control (read@0,1024B). Runtime 9 seconds [ 951.440435][ T1731] block nbd0: Possible stuck request ffff888027b4e1c0: control (read@1024,1024B). Runtime 9 seconds [ 951.451491][ T1731] block nbd0: Possible stuck request ffff888027b4e380: control (read@2048,1024B). Runtime 9 seconds [ 951.462629][ T1731] block nbd0: Possible stuck request ffff888027b4e540: control (read@3072,1024B). Runtime 9 seconds