last executing test programs: 14.483700078s ago: executing program 4 (id=3822): ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f00000014c0)={{0xffffffffffffffff, &(0x7f0000000000)='@+\x00', 0x600, &(0x7f0000000040)={@_ha_fsid={[0x5, 0x4]}, {0x1ff, 0x9, 0x1, 0x400}}, 0x3ff, &(0x7f0000000080), &(0x7f00000000c0)=0xfffffff7}, {[0x9, 0x2, 0x2, 0x4]}, 0x7, 0x1000, &(0x7f00000004c0)=""/4096}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r0, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x11, 0x31, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xffffffff}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @call={0x85, 0x0, 0x0, 0x68}, @exit, @exit, @exit, @call={0x85, 0x0, 0x0, 0xb6}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @ldst={0x0, 0x0, 0x3, 0x3, 0x7, 0xc, 0xffffffffffffffff}, @map_val={0x18, 0x8, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f00000014c0)={{0xffffffffffffffff, &(0x7f0000000000)='@+\x00', 0x600, &(0x7f0000000040)={@_ha_fsid={[0x5, 0x4]}, {0x1ff, 0x9, 0x1, 0x400}}, 0x3ff, &(0x7f0000000080), &(0x7f00000000c0)=0xfffffff7}, {[0x9, 0x2, 0x2, 0x4]}, 0x7, 0x1000, &(0x7f00000004c0)=""/4096}) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r0}, 0x4) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x11, 0x31, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xffffffff}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @call={0x85, 0x0, 0x0, 0x68}, @exit, @exit, @exit, @call={0x85, 0x0, 0x0, 0xb6}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @ldst={0x0, 0x0, 0x3, 0x3, 0x7, 0xc, 0xffffffffffffffff}, @map_val={0x18, 0x8, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94) (async) 14.178190373s ago: executing program 4 (id=3824): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)=0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001ec0), r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1e, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x5}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1, 0x8}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, 0x24}, 0x94) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000000)={0x28, r3, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x40000) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000008400), 0x0, 0x81) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001280)={0x38, r5, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_VALUE={0x4}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x44851}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000002c0)={'erspan0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x700, 0x20, 0x7fffffff, 0xffe00000, {{0x17, 0x4, 0x1, 0x32, 0x5c, 0x66, 0x0, 0x3, 0x29, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@cipso={0x86, 0x29, 0x3, [{0x2, 0xd, "a0280554755a78339301bc"}, {0x5, 0xe, "437230fddc3980ef0bc97051"}, {0x5, 0x3, '`'}, {0x3, 0x5, 'Z&9'}]}, @lsrr={0x83, 0xf, 0x98, [@loopback, @rand_addr=0x64010102, @rand_addr=0x64010102]}, @noop, @end, @timestamp_prespec={0x44, 0xc, 0xd2, 0x3, 0x0, [{@rand_addr=0x64010100, 0xfffffff4}]}]}}}}}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000001180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001140)={&(0x7f0000000640)={0xaec, r5, 0x10, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_WANTED={0x2e8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x5c, 0x3, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, ']--\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, 'memory.events\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, 'memory.events\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}]}, @ETHTOOL_A_BITSET_BITS={0x5c, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '$^(@{##\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, 'memory.events\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'syzkaller\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '.]([)+\x00'}]}]}, @ETHTOOL_A_BITSET_VALUE={0xb9, 0x4, "a94a8fd8cf1d6abe059c199c08b032508a5423bf221e1e1c5e6b31171f034c2b4915b8985beeddc7ddb734c81ca52d2a09765494a4a1a92172cc688224fcc74276d94fe2ebef137f2f2608a7f01812d29fd3556e846acf4b525b2e1180b6457e4a335897b56318a5a98d0982644c5ce15e23d70df9d59b263cfb0c208fa57d8d77bd71c4aa2cf0b4d92003706b4a7d8a798d62914e1a736292818efafb2051a86303fe0e8df21b86b475c4b63a7894a2ea7fb2661d"}, @ETHTOOL_A_BITSET_VALUE={0x1c, 0x4, "be77e44679cf9a2a15719128c562f28128216b4eecb5b3fe"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x28, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '},{+&\'}\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_BITS={0x48, 0x3, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, 'memory.events\x00'}]}]}, @ETHTOOL_A_BITSET_BITS={0xd8, 0x3, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '%:)\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\xac:^\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '/\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6c4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '@++.\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fffffff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb9e0}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xfffffffe}]}, @ETHTOOL_A_FEATURES_HEADER={0x94, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_FEATURES_WANTED={0x14c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x67f3}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xced0}, @ETHTOOL_A_BITSET_BITS={0xd8, 0x3, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x18, 0x2, '^,\'{-/+&{}\xb9-{],.[[@\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc33}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1ff}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '}\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '*-\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '%+\xe4&[).}\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'syzkaller\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xcc\\*]}\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, 'memory.events\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'R\\\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x17, 0x5, "5435f0dd138f2558feab9026eed79e6fefbf12"}, @ETHTOOL_A_BITSET_BITS={0x40, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, 'memory.events\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3fa}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'l2tp\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fff}]}]}]}, @ETHTOOL_A_FEATURES_WANTED={0x248, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x8a, 0x5, "891a81cfb4cabad0746c106960384888441f17e60e85474b7880249813392d9bfa2e964e8c90e54177802fd8b95a4ad5f0e03fb5c6ef07f0d12d49913bc153b1890c61f8d026b1f3683f2c0d4e64cabe416ea667ad1ece3c034490cd6b207969f05d348181d8b2d02e8e9e6dcc29d408246428f0061da40ab6e3412dbb557def60a73767279a"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xc5, 0x5, "cc1e186c3e810ab5247efe0f29cbefe7b44e905a81317d4561f8ba81f06ba71f37f84b4ba38f8c968aa1e938958cdfa61b40da0f67332ce51e21bc3368577218266f8808b3865c3eb3114e917b161d6ef28d9576d3bbc2404bf7702e3af3d4720d8537b4b52cecab9d50644049d3efc21ffd64b6b52335914a46389dc653fbbdb6b35485a7a56bd7388a93f989469b35846b9e3c04aa8d5004ce7810473939a1fd8d62e8b95998d1aa62b49046fcfa3920bf5384e21b31eac37be574d5d1dc2fc3"}, @ETHTOOL_A_BITSET_BITS={0x20, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_BITS={0x3c, 0x3, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x400}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}]}, @ETHTOOL_A_BITSET_VALUE={0x43, 0x4, "cadb3a7dd501582365370aa02585da5647db76db59fc17631161fa7b0d10fc7c499277412619dd40c49699f2069d68b5bf5a04fe3d3aee8a88bff285551e5c"}, @ETHTOOL_A_BITSET_BITS={0x48, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '}@\x8c@-\x00'}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_WANTED={0x6c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x692}, @ETHTOOL_A_BITSET_VALUE={0x55, 0x4, "c41631a3257870aba51fd11dfc63d2fc22c41fd69785e56a5bebd496f75d9e7a136a55655bbccd4dd932e45504f507ad6574c41d4e764df3e15bcf3afb6e9a31331f6e17fe3f778377f3241200e4593446"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}]}, @ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0xc, 0x3, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_FEATURES_WANTED={0x348, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xc6, 0x5, "579623a1bc501be2724488ecb7a550a2cdc6851529a92a1be1fe027e54f52d1028098919f5bd6d6ea25c70ae5246a79e7800058864ce1ffdd578ac84c8659853a635a38c3c203d9708c8a8bbcdc614561e9a28e520d059bd3da28870f7af1b5747736fd7937f704fbff9ad085f3812dd6d4d2ca98c416387d5a757c700e9e79374ceb0bfa4fe03aec7aa2790f95b3a7d70c974d0db253bec1ccc571c23268004e050c05b00cbdf30bcb1c5bad896e8fccbedb38d71d314dc5d93922b3d8577450a01"}, @ETHTOOL_A_BITSET_MASK={0x3d, 0x5, "58eda6bc4c70ea56160ecf4f9bc164b4b0d31e0cfe2d82f0a2035403180fe38b5d66ae3109696406f299e0c354c9bc59c1a4fd2ab99db4bbd7"}, @ETHTOOL_A_BITSET_BITS={0x84, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '!{\xba@\x00'}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '-\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ',\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7ed}, @ETHTOOL_A_BITSET_BITS={0x194, 0x3, 0x0, 0x1, [{0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3ff}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7f}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '[\xd6@^)#\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x459b}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffa}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ')$\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'l2tp\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '[}\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4864}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '&\'-\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'syzkaller\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\'[\x00'}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7ff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '/]\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, 'memory.events\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}]}]}, 0xaec}, 0x1, 0x0, 0x0, 0x41}, 0xc800) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000000)={'dummy0\x00', &(0x7f0000000400)=@ethtool_gstrings={0x1b, 0x9}}) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x8044) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000300000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8000) 13.393352832s ago: executing program 4 (id=3826): unshare(0x68040200) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x98}) syz_emit_ethernet(0x4a, &(0x7f0000000400)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0xa, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa210104, @local, {[@timestamp_addr={0x44, 0x4, 0xcb}, @generic={0x7, 0xd, "064d291a00000000d05c49"}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0x2000}}}}}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25d7dbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_AUTORATE={0x8, 0x9, 0x1}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x240408a0}, 0x4890) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) mmap(&(0x7f000039f000/0x1000)=nil, 0x1000, 0x300000e, 0x11, r0, 0x9cc21000) syz_emit_ethernet(0x3e, &(0x7f0000000700)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @broadcast}, @time_exceeded={0x21, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @rand_addr=0xe0000000}}}}}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfdffa000) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$l2tp(0x2, 0x2, 0x73) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r8, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) close(0x3) unshare(0x200) ioctl$sock_inet_SIOCDELRT(r7, 0x890c, &(0x7f0000006f40)={0x0, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x27}}, {0x2, 0x4e22, @multicast1}, {0x2, 0x4e22, @private=0xa010100}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x8, 0x8001}) 5.589614164s ago: executing program 2 (id=3838): r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x50, 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001a00)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x20, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x2, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100980000001500030000000000b7020000000000007b9af8ff00000000b509000000000000dbaaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007090000f0ffffffc70200000800000018290000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r3) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, 0x0) sendmsg$inet(r0, &(0x7f00000010c0)={&(0x7f0000000ec0)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10, 0x0, 0x0, &(0x7f0000000840)=[@ip_retopts={{0x18, 0x0, 0x7, {[@cipso={0x86, 0x8, 0x2, [{0x2, 0x2}]}]}}}], 0x18}, 0xd0) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000000)=@generic={0x3, 0x4f, 0x6}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) 5.532202335s ago: executing program 3 (id=3839): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00070010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800800010067726500080002800400120008000a00", @ANYRES32=r2, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) unshare(0xc040480) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9}, 0x48) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}}, 0x0) 5.290899223s ago: executing program 0 (id=3842): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000060a0b04000000000000000002000000200004801c0001800a00010071756575650000000c00028008000440000000000900010073797a30000700000900020073797a3200000000140000001100010000000000000000000000000a"], 0x74}}, 0x4048010) 5.27303224s ago: executing program 0 (id=3843): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80000001}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x45}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x0, 0xe, 0x0, &(0x7f00000000c0)="93a73a0fdbf7ff0700004ff0361e", 0x0, 0xffffff05, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x78}, 0x1, 0x0, 0x0, 0x840}, 0x0) 4.72230378s ago: executing program 2 (id=3844): syz_emit_ethernet(0xfc1, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) (async, rerun: 32) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) setsockopt$sock_int(r2, 0x1, 0x10, &(0x7f0000000000)=0x573b, 0x4) (async) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000002700)=0x0) (async, rerun: 64) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000002740)={{{@in=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in6=@private2}}, &(0x7f0000002840)=0xe8) (async, rerun: 64) r6 = gettid() ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000002880)=0x0) (async, rerun: 64) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000028c0)={0x0, 0x0, 0x0}, &(0x7f0000002900)=0xc) (rerun: 64) r11 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000002e40), &(0x7f0000002ec0)=0x60, 0x180000) (async) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)={0x40, r13, 0x1, 0x70bd25, 0x0, {{0x2}, {@val={0x8, 0x3, r14}, @val={0xc, 0x99, {0x0, 0x52}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9b4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}]]}, 0x40}, 0x1, 0x0, 0x0, 0x4c854}, 0x4040000) r15 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000002f00), 0x2, 0x0) (async, rerun: 64) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000002f40)={0x0, 0x0, 0x0}, &(0x7f0000002f80)=0xc) (async, rerun: 64) r18 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r18, 0x6, 0x1, &(0x7f00000000c0)={0x4, 0x747, 0x3, 0x4, 0xfb, 0x8, 0x101}, 0xc) (async) connect$bt_l2cap(r18, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) (async, rerun: 64) r19 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r19, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)=ANY=[@ANYBLOB="900000001000030400ddff00fbdbdf2500000000", @ANYBLOB="0011000000000000540034801400350064766d727030000000000000000000001400350073797a6b616c6c657231000000000000140035006261746164765f736c6176655f310000140035007369743000000000000000000000000008001c00", @ANYBLOB="04001400"], 0x90}, 0x1, 0xba01}, 0x810) (async, rerun: 32) sendmmsg(r18, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000001c80)=[{&(0x7f0000000180)="fbecb183a9cffc0ee5d1d434a494db587414a63ef7fed2175c894997b4760cede524e40ae9a937434e1756f7b60d81a7da87fa2614c509b671a7bf8557275e807e7af1c65c1860dcd7b32c", 0x4b}, {&(0x7f0000000340)="36da21ba0be270a73a76b0b2c1b08b0aa7b634bde7b42b05fff77a1bd375fa61812e0a3df2dc7fea643e6cf5ef23233fe2b752a206d9be7865e37ef0b528cde3720d51a67f20caab530191c4", 0x4c}, {&(0x7f00000006c0)="8b3e97e66c34520fa8e2a370f6233f47fa505952ceaf6714d4030cf71b06d9c227e92f4a323b6ebf087032d4498fdc03e86e62f25a610270568c2c7147975019b3fa481fe21ab4ed149068e364b45ddd86efa6b28b42f1977be3937c8b1edf121d5defd4180ca936d2169e6734570a3e713fb30c4e18c13d66b17b808cad9e8c9af357cb504fbec0bf4cb07af24b4d49049ad0b80472ce7e307a5b4892afbe4edb5ec566ae52aac0ea58afb19188f9161d0a12fba2e42b9cdbeec498cebe3698e1bdd29ebfbe8237fc0e", 0xca}, {&(0x7f00000007c0)="259c1e0da026f141b18e0c546887d455a791e379a60024c5ad2fbb3662f2ee18c44653c3c3e3b7f6056f06544e49d92544e11e70", 0x34}, {&(0x7f0000000800)="f1f90ee8d3a476eafbc79faa69937cde26a691e03e6ceed21bf980b72b9f21463b3821266ad276f81429b7f50c09b18445106c2a77a8787e813e50cb0fdc2d4b67f07fed507e5fc76d", 0x49}, {&(0x7f0000000c00)="7f25cd96a5e8de01c3720eadae70abcf606a39a66c714306f2be45b395680cf663327f5b1f590a4b9273770c61e75a67b9211a387cd0646ff53d9b880502b50a83ee5ac90fe95bcd39f716f625b634d40ac1ab36169915060ba4fac920e64086d634feeec74c4568caa325b7bf381dff6805ffad258dfb99ead4956d0363cb743a31e744fdb58109136bb61ecdd9122bfa854bd64b9b374498b79f2b4c5d9f642180871eecc1f4c4edd399ae9d1b6db243415da8bd6188673025fc05818f2e544ae9", 0xc2}], 0x6}}], 0x1, 0x20000000) (async, rerun: 32) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001080)) (async) getuid() getsockopt$sock_cred(r18, 0x1, 0x11, &(0x7f00000010c0)={0x0, 0x0, 0x0}, &(0x7f0000001100)=0xc) getpid() getuid() bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000400000000000000fcffff0185000000bc0000001801000020646c2400000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000f000000850000000600000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) sendmmsg$unix(r2, &(0x7f0000003400)=[{{&(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000002680)=[{&(0x7f0000000200)="375578a20179da289317a4de2286dd5dab4cd774c58c4de97b6d803c425b04df1cc346a4d94cf10da361dfcfc0238c90d607e13622a9b107c4569605aca1ceff312f3e238e98744dd9a538aa9e9fbe14cb8cd6c161987e9c8b0229b33bf9f7718c6ff2bddd09f575beb05b94420de8b5d0be8369d6236037a878b2c6dbdc9517bc9f34b209d52df4132ac9553ff3ddbb08951a601195f626b3dd8c928e4275b17b22fb18e52a48f2ae454ee35c97ac226d3275b76a06b7c9a73d60d2cb0f18b5fce69b60a99a7c4aefd8fdb169f24d4cb806", 0xd2}, {&(0x7f0000000300)="4d1ed8cc7203fad58d2e36e196c94bcd2554ab07f276a132fa2bbe34f0d2c28c42d50f0e76197e1103f4742dabbf57", 0x2f}, {&(0x7f0000000340)="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", 0x1000}, {&(0x7f00000023c0)="723f6f2bafd7761affd5a4a7109d4b1a2f67b4518c07cd4dac2e0e42c7663cc1eca2e79e2a86187d78e2ad4025a2bd43e70f13496488dedecbf289af1880c2a3a338bb106b6183d91005c9d924fbfc9c57c0d89d67ae94a289c6ff7423e5d2f10f1c6e9ae913c91997292ab6801a848c0af0950366191736600ba9390ec592c871affb6d5f8975609b509cdbd5df3fa5350e9c1523f9a0fe49725563618db849a6bd3d9135ed5117739ea57707ea35a7b402699c169c0c2c1db55cc7feea50082aa97fa5bf1e75b4ec0e00b1df4f5b576acb10122fd8d0bce03dec09e28ef722", 0xe0}, {&(0x7f00000024c0)="25ca9dc1789217418d51ed0d2e962085abf577f298d00fc4783465c46fcad0f7f8cccff2df6552ae2b1569dec47acd7b79e78960a765bd84a5305c49c28f817c1795b063eff0a121793d8a4ae041acda739f8b33de4e8e060b75a24f9910b2599686dde399573209144b36fbb5ccaabdefd165a409a7fe57a0fd53288cf9583100e7d7111365e687d0013026098c05a33d14d4ef926a95345141b00105e1348338df1b", 0xa3}, {&(0x7f0000002580)="f4b70e8d1047d5b4af9f6470ee47a3f71fdd0b8d6cbf16644fc7de7835e58c9ca2b94f8433e880ad3a29524535b6f6aa97b3135261bf9e5d9f610f6338d3054155c68a6154cee3cb93037789f102f8fc05cbcbd1bc018b0a014926866924469b88baa2ab74e6244c282544733cc10feb5c8d66dcb55280db999fbd16468978a6f24ee3e9f6a3df3b416d34fc0d28bec41f82e4a5565bf23a3cecd7634dd7ad95335a8fcf632df1d1ec0df29fd562828bb92511a00ad73e22f6e985bc1329c2ff4f8c1c3d49348acd293dd25be603960733a9a16b9f176df53cd56cc74880a3df4ca5683e486d58f3ae", 0xe9}], 0x6, &(0x7f0000002940)=[@cred={{0x1c, 0x1, 0x2, {r4, r5}}}, @cred={{0x1c, 0x1, 0x2, {r6, r7, r10}}}], 0x40, 0x20000040}}, {{&(0x7f0000002980)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002dc0)=[{&(0x7f0000002a00)="c8297b6f3411eb8ed450f31d3f93c7016201fe519e4898e1a0ab1161369aa7176d1f27686eb8f1eb1b2f64be8ce289b95b32c55335ad90d39550125d06824536b6592272a72e03ba4dcd39ffce89bae62c5272c214ccc4d1613301aec5bd4b4e1caf3409b7ea813c3d1dc685f0a97512d790604ef599cd4677fead386d5fa7a2dffdafabfad1c3c7c18101b8ff5ac4210aa24ec669e8b55ebe0a4963913a70b5bdf527", 0xa3}, {&(0x7f0000002ac0)="63f1d5c4880bfdd96fc63f6f6aa5155e63ed66da811e33bf87e74359f80ba0f67a244bfc4399059b6f8b05c5a45651d47c87ef068a058094ca5f916f69fd6f550061f6552e150270093cd4069e1f3d54da6c170d5c61b1fd4059eae754a0b9e354", 0x61}, {&(0x7f0000002b40)="2eddcffe122a82e3fffc5828c9f91ce597c9d1ef322b715148a148bd26a46e0c6a28c68562868fa204b304107241704f18e46cc70bdcfe90e8bbfecc61a426f610b0baa6e45499ee2d28b4fcf48d1ba29c1dca628d31701e546bbe1a9890a21e358db9c60771d586d47aa53fa524e8b204ebd218cfba8514527039512733232d512d1307fe64b826872851ec20a7b1b825e1f440c7f91d17ca0c8a886b9a0315653b9ece2747190acdd58518bcf3c138f179ddeae7626515d2ec30cf84748d71b2c0402aa90ca45782ba0aef8397619531ce662ed842e7ebc93a5e857d1df28e1df7fbbc6a", 0xe5}, {&(0x7f0000002c40)="f00ddcbcfa689f3fc28609b01ac8438a2b5b61b07d29a355fe700d25a20e1e1739bc15d1baae1b8ed917f3c47df9eb40dea06fcbcc99896d9982d641af3df066199f4a09b628aaf81582ff99aa027290139c7a7206a0274e76c8741081879d1e410ddf36dbd31996d1fde4da3fad49ac7e145e623a9f8bc9dd0fbfdbb09163f0326f6ff2b457fc383bb47f6b2760de7490fcee4233962bc0534c7091cd5cd22aec4b67871eca25bc84368a57b0583db5beda992e5655a76e75eab7f46bae27f44b90dadfd94f5acdcd05c32af9e91c43f74d1484c00755f911", 0xd9}, {&(0x7f0000002d40)="fcbef2c663c786fe16fc733ba91f1fe8cc890a54037d8cceb74419634e30282b4fe3e435b1332313e33b283cf2af326b72282c4ecad56e40aecf2d274ac06079765a37ae2f40bac49ee3042573322f940de6", 0x52}], 0x5, &(0x7f0000002fc0)=[@cred={{0x1c, 0x1, 0x2, {r8, r5, r10}}}, @rights={{0x14, 0x1, 0x1, [r1]}}, @rights={{0x24, 0x1, 0x1, [r2, r11, r1, r3, r12]}}, @rights={{0x28, 0x1, 0x1, [r1, r3, r2, r0, r11, r15]}}, @cred={{0x1c, 0x1, 0x2, {r4, r9, r17}}}, @cred={{0x1c, 0x1, 0x2, {r8, r7, r10}}}, @rights={{0x14, 0x1, 0x1, [r1]}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0xf8}}, {{&(0x7f00000030c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000001340)=[{&(0x7f0000003140)="0ccd6d43caf57c30600aff3725119eece48735c46951a2d9da21d3b53e69c4c53e2487faca2865e2a6de02511451c86ed7bf863cf98e13a5547017b64a39ec02bb302da93ced2552ac94335c6be2f739a56b9fa57b31e53aca8ddf90309c71f6c0df0f84a5da1bc7d41f12958b2d06c5d544bdc8261fac864d363dba180c96950494aaf9bf4e0dbb117e9af9476884364f1e72ef9f538b213222624b26f7d8596fdb06b2350dc894194f8237f538655338f04cb251c9d64aa1", 0xb9}, {&(0x7f0000003200)="3717a1d1e5ca6ef6e4ac848641012765b0535a3a8b74fe1cee7017e73a54d73f2521d2a9a63dfb", 0x27}, {&(0x7f0000003240)="16444e93065f8be34ca8b38cb9f6a1b36012cd1d11c9b6f3eeeb99aa454acbc8feaf18506abe018cf21c5cf0b0b303d80ea5afde51d57dd5a0e3ca39ab1dd1cd9cc5e5a384ec4e47fb01399ed51ab17a53dfcd2c4abe33780965553dc25a4f69a199639267c8b82156ee0bc8a377d4eb0c46e425da8246278d158c96d0fcba01db8409e0f2530b619d828a68f6cadc07da26e34d3675ac6c8c27a107214955657493323b9a8ed868f7e4", 0xaa}], 0x3, &(0x7f0000003340)=[@cred={{0x1c, 0x1, 0x2, {r6, r7, r20}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r16, r17}}}, @rights={{0x28, 0x1, 0x1, [r15, r15, r11, r0, r11, r0]}}, @cred={{0x1c, 0x1, 0x2, {r4, r5, r17}}}], 0x88, 0x8000}}], 0x3, 0x0) (rerun: 32) 4.470665227s ago: executing program 3 (id=3845): sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003600)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32], 0x38, 0x40044}}], 0x1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071003600000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x4, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x200002}}}}]}, 0x4c}}, 0x20) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xfff7, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_CONFIG(r6, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010028bd7000fddb0f230c00000008000600e9994dade8"], 0x24}, 0x1, 0x0, 0x0, 0x2000040}, 0x4004004) sendmsg$nl_xfrm(r4, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@flushpolicy={0x1c, 0x1d, 0x1d710709e02aef65, 0x70bd2a, 0x25dfdbff, "", [@mark={0xc, 0x15, {0x350759}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0x44050) sendto$packet(r3, 0x0, 0x0, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r2, 0x1, 0xd8, 0x6, @multicast}, 0x14) r7 = socket(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000440)={0xffffffffffffffff}) write$cgroup_devices(r10, &(0x7f00000004c0)={'a', ' *:* ', 'rm\x00'}, 0x9) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x6}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xffc, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}, @TCA_U32_LINK={0x8, 0x3, 0x10000000}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004884}, 0x24040084) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0) r11 = socket(0x10, 0x3, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@mpls_delroute={0x1c, 0x18, 0x9, 0x70bd2d, 0xfffffffe, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1, 0x2000}}, 0x1c}}, 0x4800) setsockopt$netlink_NETLINK_TX_RING(r11, 0x10e, 0xc, &(0x7f0000000340)={0xfffbfffc, 0x2000000, 0x5, 0x6}, 0x10) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="24000000120001fbffffff000200000007"], 0x24}, 0x1, 0x0, 0x0, 0x40014}, 0x4000004) r13 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000840)=@newqdisc={0x14c, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r14, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x9, 0x4, 0x3, 0x14, 0x15, 0x4, 0x6}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x14c}}, 0x0) 4.338728842s ago: executing program 2 (id=3847): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, 0x0, 0x0) (async) syz_emit_ethernet(0xae, &(0x7f0000000680)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xa0, 0x0, 0x0, 0xfd, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x21, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x36}, {[@cipso={0x86, 0x6f, 0x0, [{0x0, 0xc, "e256b28c04000000fb52"}, {0x0, 0x9, "789607675ca638"}, {0x4, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x6, 0x7, "cfa11cab1a"}, {0x5, 0x10, "c600"/14}, {0x0, 0xa, "65807fe97612fe86"}, {0x0, 0x12, "73bc2300ad9d19a30000000000000000"}, {0x6, 0xa, "c8f46976e79e56c7"}]}]}}}}}}}, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x7, 0x3, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x20004000) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYRES8=r1], 0x24}}, 0x10) (async) r2 = accept$inet6(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000140)=0x1c) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000008c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x658, 0x0, 0x210, 0x118, 0x0, 0x0, 0x588, 0x588, 0x588, 0x588, 0x588, 0x6, &(0x7f0000000180), {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @mcast1, [0xffffff00, 0xff000000, 0xffffffff, 0xffffffff], [0xffffff00, 0xffffff00, 0xffffffff, 0xffffff00], 'wlan1\x00', 'virt_wifi0\x00', {}, {0xff}, 0x33, 0x2, 0x1, 0x20}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@mh={{0x28}, {"4ac0", 0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@broadcast, @ipv4=@private=0xa010101, 0x1b, 0x26, 0xfff8}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xffffffff, 0xffffff00, 0xff, 0xffffff00], [0xffffff00, 0xffffff00, 0xffffff00, 0xff], 'ip6_vti0\x00', 'vlan0\x00', {0xff}, {}, 0x88, 0x1, 0x3, 0x74}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x5}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0xfd, 0x9}}}, {{@ipv6={@mcast1, @mcast2, [0xffffff00, 0xffffff00, 0xff000000, 0xffffff00], [0xff, 0xff000000, 0xffff7f, 0xff000000], 'veth0_virt_wifi\x00', 'ipvlan0\x00', {0xff}, {0xff}, 0x2c, 0x3, 0x3, 0x17}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x3}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x66, 0x9}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xa}}, @common=@inet=@socket1={{0x28}, 0x1}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@rand_addr=0x64010100, @ipv4=@empty, 0x1, 0x1, 0x3}}}, {{@ipv6={@rand_addr=' \x01\x00', @mcast2, [0xff, 0x0, 0xffffff00, 0xff], [0xffffffff, 0x0, 0xff000000, 0xff], 'wg1\x00', 'dvmrp0\x00', {0xff}, {0xff}, 0x2c, 0x3, 0x1, 0x4}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@dst={{0x48}, {0x88, 0x2, 0x0, [0x8000, 0x0, 0x0, 0x5, 0x200, 0x100, 0x1, 0x40, 0x7, 0x200, 0x3, 0x0, 0x8, 0x2, 0x0, 0x1], 0x6}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6b8) (async) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000300)={0x20, 0x1, 0x4, 0x5, 0x0, 0x0, {0x2}, [@NFULA_CFG_MODE={0xa, 0x2, {0x8, 0x1}}]}, 0x20}}, 0x0) 4.08170106s ago: executing program 2 (id=3849): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20008000) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000004240)=0x4000000a, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff0000000000000000000018000000", @ANYRES32, @ANYBLOB="00000000000000006608fdff000000001800"], 0x0, 0xf, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0xc, @mcast1}, 0x1c) 3.852935402s ago: executing program 3 (id=3850): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c000000", 0x18) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) close(0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan1\x00'}) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000240)={'syzkaller0\x00', @broadcast}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20000c40) r6 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newtfilter={0x88, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xc, 0xfff3}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x48000, 0x9, 0x6, 0x4, 0xffff}, 0x8d23}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8080) r7 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000140)=@xdp={0x2c, 0x8, r5, 0x3c}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000540)='\'', 0x5dc}], 0x1}, 0x4011) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000001580)={0x21}, 0x8) r8 = accept4(r0, 0x0, 0x0, 0x80800) setsockopt$sock_int(r8, 0x1, 0x20, &(0x7f0000000940)=0x1000008, 0x4) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r8) close(0x4) socket$nl_generic(0x10, 0x3, 0x10) 3.790912425s ago: executing program 0 (id=3851): ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0}) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000005c0)='cpu.stat\x00', 0x275a, 0x0) preadv(r2, &(0x7f00000004c0)=[{&(0x7f0000000280)=""/96, 0x60}], 0x1, 0xa, 0x6c8) syz_genetlink_get_family_id$team(&(0x7f00000000c0), r0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000100)={{0x3a, @private=0xa010100, 0x4e24, 0x4, 'lc\x00', 0x8, 0x1ff, 0x2}, {@local, 0x4e23, 0x4, 0x934, 0x5aa, 0x8}}, 0x44) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000005200010000000000000000000200"], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 3.727407722s ago: executing program 0 (id=3853): syz_emit_ethernet(0x5a, &(0x7f0000000200)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @broadcast, @val={@void, {0x8100, 0x2, 0x0, 0x2}}, {@ipv6={0x86dd, @tcp={0x9, 0x6, '\x00', 0x20, 0x6, 0xff, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x8, 0x10, 0x7, 0x0, 0x3, {[@sack={0x5, 0xa, [0xfffffffe, 0x9]}]}}}}}}}}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000100), &(0x7f0000000180)) socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000480)=@filter={'filter\x00', 0x42, 0x4, 0x450, 0xffffffff, 0x3b8, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x3b8, 0x3b8, 0x3b8, 0xffffffff, 0x4, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {0xff}, 0x84, 0x2, 0x2}, 0x0, 0x1f0, 0x218, 0x0, {0x100000000000000}, [@common=@inet=@hashlimit2={{0x150}, {'\x00', {0x7ff, 0x298e, 0x1, 0x9, 0x3, 0x81, 0x0, 0x80, 0x20}, {0x6}}}, @common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}, {{@ip={@loopback, @rand_addr=0x64010101, 0xffffff00, 0xff000000, 'geneve0\x00', 'macvlan0\x00', {0xff}, {}, 0x2, 0x0, 0x4}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x3, 0x4, 0x3, 0x1, 0x4], 0x0, 0x2}, {0x2, [0x6, 0x4, 0x5, 0x2, 0x4, 0x4], 0x3, 0x3}}}}, {{@ip={@private=0xa010101, @loopback, 0xff, 0xffffff00, 'bond0\x00', 'dvmrp0\x00', {}, {}, 0x2f, 0x2, 0x21}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 0xd, 0x8, [0x8, 0x27, 0x2a, 0xa, 0x13, 0xe, 0x2d, 0x21, 0x2d, 0x32, 0x3f, 0x20, 0x28, 0x18, 0x22, 0x1e], 0x0, 0x0, 0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x404a3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010028bd7000010000000f00000008000300", @ANYRES32=r6, @ANYBLOB="05003300eb00000008003400", @ANYRESDEC=r6], 0x2c}}, 0x80) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x6}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r10, {0x0, 0xd}, {0x1, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r11) sendmsg$TIPC_CMD_ENABLE_BEARER(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r13 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r14 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000640), 0xc, &(0x7f00000005c0)={&(0x7f0000000480)={0x80, r14, 0x300, 0x70bd26, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_DOMAIN={0x7, 0x1, 'G\\\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @empty}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x4044) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)={0x34, r13, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 3.135825852s ago: executing program 2 (id=3855): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x2, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000020000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000480)={r3, 0x0, 0x0}, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x64}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c400000000328000480"], 0xa4}}, 0x0) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r5) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r8, @ANYBLOB="01002cbd7000fddbdf250b00000008000300", @ANYRES32=r9, @ANYBLOB="5000508011000100ec3bd87b59ecb393bce7f9ac6700000009000100c8803781500000000400060007000400478d000005000900020000000c00088004"], 0xa8}, 0x1, 0x0, 0x0, 0x20080000}, 0x40000) sendmsg$NL80211_CMD_LEAVE_OCB(r5, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)={0x1c, r8, 0x0, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x4000080) r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r10, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r12 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) socket$kcm(0x29, 0x1, 0x0) write$tun(r11, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x5, 0x0, 0x2, 0xe7b6, 0x14, 0x2}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x8, 0x28, 0x68, 0x0, 0x3, 0x6, 0x0, @private=0xa010100, @multicast1}, {{0x4e20, 0x4e28, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x10, 0x7, 0x0, 0x8}}}}, 0x36) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c000000180001002cbd7000000000000a100000fc02ff000000000008000400", @ANYRES32=r13, @ANYBLOB="0600150008000000100016800c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="4000000010003b1500000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="41040000015001001800128008000100677470000c00028008000100", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x40}}, 0x0) close(0x4) 2.979405332s ago: executing program 1 (id=3856): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000"], 0x7c}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a48000000060a010400000000000000000a0000040900010073797a31000000000900020073797a32000000001c000480180001800d00010073796e70726f78790000000004000280140000001100010000"], 0x70}, 0x1, 0x0, 0x0, 0x4000851}, 0x0) socket$kcm(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="b7020000b96871dfbfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe0000004f850000001a000000b7000000000000009500000000000000455781a5feee5e1ce784909b849d5550adf200000000000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d62de53a9a53608c10556e5734eb84049761451ce2e2d9f8004e26f7fcc059c06220002595f6dba87b81d1106fb026cce67a66afd9ac3d09e29a9d542ca9d85a5c9c88474895c679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd6fee53f5b2e7b91c61ced1ebad000000000000e8122a793c080a882add4e1179bd4a44f2fcb6d753a78845d8363e0401861abebe428ba953df4aece69311687f4122073a236c3ad198e3f3a532efa04137d452ff47d2638da3261c8362bb7c7824be6195a66d2e17e122040e11e3bd4a69fc6e8d9f7043e09b9e10dc7777bfae5884e4ba1e9cc4a2bbe99e30810400000000000000d63d716c0975e1ce4a655362e7062ff6ab3934555c01840219829472adefa06d3482c7b2711b98eabdca89b77efd13e6dba4a431ce47911834118093b6cabaa17a57727474e1785ee234835088445aa4a9b677d3d342640e328504aea02a2d727e62b7f097a02dbf8fe1d704765de7482040b2fc3000000000000000008947baeaaf954aff687deaa2f804924600273ee26d8115cbca081a14cba24788779291745083fccdddc90d7af35c048d46362ea0d8d79c79ddca066da478c197d4a550470557bc99cca336bd88cd28a5ee651627e3a6fbf6ea53b95ddb64c69c7d8d2f4baddc239828760459564124bad68209d2a1d16ad085886c017679cfcda8b10700ac1e2bcc5ede5b5687aa418abfa29acd7339e73b2cd185c9eb5fb34fccd20ffa155b16c0c309ed6f6663677df37de0ec0d0f548b273940be5d1fe0bae14d1a76bf741330dacd9cc19c0163bcc93059e8d2d120ea257bba458ecd989cb3581a3f270ad48255ac0dad4923e3e357e4e90583ce8d43ec65ed491d87a51d7c13f665dcf772e3ead71112008b16b0ea821f70aee1ccbd71c5a1c21e87d5b7b73d356337dbcf3456ff6cd0d6b98a258e3509a7d15b9dcae4d0d750ffa07909c955e718585b2456308beda2fa03bb9bcf03cdff31ee4b1665b987829c0f0872c006c6e4ed666fe23b343aae943923eedbdb0e7abee90e3da7b98b7d07d2d4816201ad1737798635b0a3ebd3aed120e4500c16e6c9dc729f009db49c6b8b19613e4d792cb4ff5106419291d4222980b49ddb9527ce785822d8f4e2bc30a96767f500b9e26e3b12854da63083320d8bfe49d85e0842803dc59d6375bce2b8a93caf39c0ba767880bbb9bf9407e6a6c0f9a43d1ab51dabf9423b482e848fbe1653ff0c6161fa43543546ce17a42e6cddadaf0767d84407478ffe2d0b567d81201efc81e800d4c0874235ff5cd7f5f0ee71cc2b0193bfc9290627ceaeb0b02931a817688f3a51fa2861e70cbab50a5d434ed8d8841694dba46f3d5a95ae86e4d471684ccf427b2ba53a157b2a7cf7a4c10051bb77822190a14c2ab1f271a7cf9c240b99"], &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xfffffffe, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x1}, 0x10}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c"], 0x7c}}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b'], 0x50) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'aead\x00', 0x11, 0x0, 'aegis256-generic\x00'}, 0x58) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000b40)={0x0, 0x128, "7bf8ca97f07f7cd244ec152fa16d39e4553d9607191c01003f4f261459314625abafbae0dd3d3a415cb19b2f3f5bd1d92f8a3b28f86ac6911e26622113c1d519b46c2b1bb9b76cf8008d37a06e88b31100ae16fcb20ca3c5e2ce78d0014278c1e4c7fb4ab35e2c3ae32abc7bf205fd325765be5684ece2933f3325ec9cb8b4725605bf2722d1de33a9624b08228b5177a7a39d6555c8c0b062ce567561e0aed155ead34cc36f72ad791a664127f3079fdc7c2836a587d190403acfef281e40ef6508fe9a7105a4f984e24e10001000009e839a724d6965d08875d7a789847773f79c516ef6bceb11f3efc595c205013c01f6f53c3546da17b90b64572051e2abe8c1a47eeaea02c081346b186c4d2d91a20245d3f1c47c0d85c0ac0f395d68030ec718bd9f3fff04"}, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000100)="480000001400195a8563e43c12f461560a2972063700000000000000590000a2bc5603ca00000f7f89000004200000000101ff000000032fdc0e2d9d9b7373ed", 0x40}], 0x1) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}}, 0x40040) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ac0)=ANY=[@ANYRES8=r3, @ANYRES16, @ANYBLOB="00000000000000000000000000000004626f6e6400000000340002802466acb504000000050016000000000008001c000000000005000c00000000000a001a47de438eab74a149e10461f9e792543edb4ecc2cd820186a470c8d07ae20f5edbb53b7c220e9a966bd3577276a7bca"], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x4008005}, 0x80) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000580), 0x4924924924924cf, 0x24040014) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="7912b8000000000061138c0000000000bf2000000000000015000000080063033d030100000000009500003a000000006916000000000000bf6700000000000066060500fcff03006706000002000000760300000ee60060bf050000000000003c6500bf000000006507f9ff01000000070700004cdfffff1e75040000000000bf54000000000000070400000400f9ffad43010000000000d5000000000000000500000000000000950000000000000032410000000000000054bb12dc8c27df8ecfc7bdd2d17f2f1754558f22dd399703d6c4f6f3be0b369289aa6812b8e007e733a9a4f16d0a3e1282ee45a010fb94fe9de56c9d8a814261bdb94a05000000c6c60bf7a13ba1fcf1111ce4fc0d742a81762bab8395fa64810b5b40d893ea8fe0ffffff7f1b546cad3f1d5af65706fd4f68795cce6cf16ab689b555202da2e0ec2871a51445dc8da39e5b0ab71ca9b901627b562ed84b026002d4519af619e3cca4d69e0dee080006774a8f3e691700ec88158f02001b0000c81c8b297dff0445a13d0045fb3cda32a673a6bb55d8c80800dce431e56723888fb126a1403d2b63f16fb2ad9bc117aba7cbebe174aba210d739a018f9bbec63222d20cedbc4d03723f1c932b3a6aa57f1ad2e99e0e67a993716d20000009f0f53acbb40b401e3738270b3156268784f2af9e4bcf8b07a10d6735154be1602f9dd1d7d4301e00000000000460bcc5989ec85e3cbcb6bcfaf0000000000000000bc00f674629709e7e78f4ddc211bc3ebf0bd9d42ca019dd5d0861cd64722cf74686ebfbe2562671cd47840f81d2a8f8f9be3bcd19dc6840aa7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7eab049b1bd47287cd31cc43ea0ffb567b40407d000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) syz_emit_ethernet(0x7a, &(0x7f00000009c0)=ANY=[@ANYBLOB="856b1200ff00aaaaaaaaaaaa86dd60381f3400102f00fc000000000000000000000000000000ff020000000018000000000000000001042088a88dff000000000800000086dd080088be00000000100000000100000000000000080022eb00000000200000000200000000000000000000000800655800000000"], 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001540)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000140)="781020fc386fe096dfc27e675fc1b52c60b83348e0e511", 0x17}], 0x1, 0x0, 0x0, 0x24000010}], 0x1, 0x40001) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007300000085000000070000009500000000000000e49b39c1e936057e283325420229bfdb85ffe36e9aca2febd20d8deb56a9bcae0468284da684644021170920ccd13856a77526e2fde96414900c876b481b7e72b11f1c5ff6375a756097919d59c49d4e29699214e4e894ee34792b0051e7db48897a87a9afea44c01076e358737cbfa5fcb55b0b107c7ffafb029ec43d25c0c4e3ac8f73af546a042142bf129053b9634379f1de014bf6e4b5c356788c80dc5f7cd42cfa8a"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.625043662s ago: executing program 3 (id=3857): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) shutdown(r0, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$inet6(0xa, 0x2, 0x3a) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0xfffffffc, @empty, 0xa}, 0x1c) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4a004}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180800ec0c0000000000000000000000180100002020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x340, 0x130, 0x111, 0x4b4, 0x130, 0xd4feffff, 0x270, 0x20a, 0x278, 0x270, 0x278, 0x3, 0x0, {[{{@ipv6={@private2, @remote, [0xffffffff, 0xff000000], [0x0, 0x0, 0x0, 0xffffff00], 'dvmrp0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0x108, 0x130, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[0x4e20, 0x4e20], [0x4e20, 0x4e22], 0x3, 0x8, 0x80, 0x7}}, @common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0xc2}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@ipv6header={{0x28}, {0x0, 0x14}}, @common=@ipv6header={{0x28}, {0x4, 0x11, 0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x8ba4, 0x0, 0x80000001, '\x00', {0x10000}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) r5 = socket$igmp6(0xa, 0x3, 0x2) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}, 0x2}) write$tun(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x2, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x22, 0x5, 0x80000000) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000740)={r7, 0xffffffffffffffff, 0x39, 0x0, @val=@uprobe_multi={&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)=[0x3], 0x0, 0x7fff, 0x1, 0x1}}, 0x40) getsockopt$sock_buf(r1, 0x1, 0x1f, 0x0, &(0x7f00000000c0)) 1.519395294s ago: executing program 1 (id=3858): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.swap.current\x00', 0x275a, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f0000000640)={0x1, &(0x7f00000000c0)=[{0x6, 0x81, 0xca}]}, 0x10) listen(r1, 0xb) close(0x3) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendfile(r2, r0, 0x0, 0xb) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080), &(0x7f0000000100)=0x4) 1.280575069s ago: executing program 1 (id=3859): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000bd7000000000000200000008000300", @ANYRES32=r1, @ANYBLOB="0c0099000200000025000000080026006c0900000800a0006c090000080027"], 0x40}, 0x1, 0x0, 0x0, 0x8001}, 0x4040000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x9d, 0x9, 0x22, @private2, @empty, 0x7, 0x10, 0xd, 0x2}}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10) r4 = socket(0x1e, 0x4, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, 0x0) r6 = socket$igmp6(0xa, 0x3, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r4) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="2b0436d23321"}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r6, 0x8983, &(0x7f0000000480)={0x0, 'veth0_to_hsr\x00', {0x2}, 0x51}) write$tun(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaabb0180c200000e88a800008100007eab91b32dd80cffd20adf8cf828782802010045fc006953d778f6c9a77f00"], 0x32) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r9, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x38, r10, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r11}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r10, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x4000810) recvmmsg$unix(r3, &(0x7f0000001bc0)=[{{0x0, 0x0, &(0x7f0000000080)}}], 0x1, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x600, 0x0, 0x48815, 0x40103}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) 1.247907598s ago: executing program 3 (id=3860): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000001440), 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x38, 0x3, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}, [@CTA_FILTER={0x14, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x880}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x148}]}, @CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x8000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000000)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4000004) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="420002"], 0x5) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, 0x0, 0x3) 1.00408726s ago: executing program 0 (id=3861): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x28, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00'], 0x20}, 0x1, 0x0, 0x0, 0x4c896}, 0x4000) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000000)=@ethtool_rxnfc={0x0, 0x2, 0x6, {0x3, @usr_ip6_spec={@empty, @dev={0xfe, 0x80, '\x00', 0x24}, 0xfffffff8, 0x3d, 0xe}, {0x0, @remote, 0xe, 0x4, [0x7, 0x6]}, @ah_ip4_spec={@multicast1, @private=0xa010101, 0x0, 0x5}, {0x0, @empty, 0x6, 0x5, [0x6, 0x9]}, 0xff, 0x3}}}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, &(0x7f0000000000)=0x1, 0x4) sendmsg$inet6(r0, &(0x7f0000000500)={&(0x7f0000000080)={0xa, 0x4e23, 0x81, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, 0x1c, &(0x7f0000000240)=[{&(0x7f00000000c0)="06", 0x1}], 0x1}, 0x80001) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000180)={0x0, @aes128}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}], 0x1c) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000000)={0x0, 'veth0_vlan\x00', {0x1}, 0x7}) r5 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r5, 0x29, 0x10, &(0x7f00000001c0)=0x6, 0x4) sendmmsg(r5, &(0x7f0000001a00)=[{{&(0x7f00000002c0)=@l2tp6={0xa, 0x500, 0x100c0000, @remote, 0x0, 0x5}, 0x80, 0x0}, 0x5b4}], 0x1, 0x48340) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000100)={r7, 0x6}, 0x8) setsockopt(r0, 0x84, 0x81, &(0x7f0000000300)="9cd9be4b5275fa6623a96ad40465f6a7ad25cf0a01cff8bf2af056951485f52c8cab4038a6fddce3e12afdfa285c53d2bf35482d484a9e727d6cd247bfaaf8d0689e5556e8a37903bdacdcb7969d2ab9ded6177e1b58305d3ea32104888a96e1f41f0fdb4de69a0041dcb95ea82ad3028169c9ce3b3314910ca74ba25e332e50e31c379ed057abac7f749d", 0x8b) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000001000004ff000016000000000300000000000000000000000000000d0000001a000000000000000a"], 0x0, 0x4a, 0x0, 0x1, 0x7}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000073119c00000000008510000002000000850000000200000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=@newqdisc={0xa4, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x74, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_RATE64={0xc, 0x8, 0x68254c5b3a533ac5}, @TCA_NETEM_RATE={0x14, 0x6, {0x5, 0x7, 0x8, 0x9}}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x2}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x2, 0x3, 0x6, 0x8, 0x4, 0x62}}]}}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r10 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x410204, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r10, 0x5201) 1.003636877s ago: executing program 2 (id=3862): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000003c0), 0x0, 0x200080c0, &(0x7f0000000400)={0xa, 0x2, 0x3ff, @loopback, 0xffffff1e}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='lp', 0x2) sendto$inet6(r0, &(0x7f0000000180)='9', 0xfffffffffffffd46, 0x4820, 0x0, 0xffffffffffffff3e) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f00000000c0)=0x8, &(0x7f0000000140)=0x2) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000100)=""/12, 0xc, 0x720, 0x0, 0x0) ioctl$NILFS_IOCTL_CHANGE_CPMODE(r1, 0x40106e80, &(0x7f0000000000)={0x40}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r3, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000040)) shutdown(r1, 0x0) 930.853802ms ago: executing program 4 (id=3863): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x401, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x5}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=@base={0x2, 0x4, 0x6, 0xb, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000083850000000400000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r3, &(0x7f0000000280)="07a55e9ee366", &(0x7f0000000300)=@udp6=r4}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xf, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000480), 0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400001d000000850000001500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x1}, 0x50) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000005c0)=@generic={&(0x7f0000000580)='./file0\x00', 0x0, 0x10}, 0x18) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000640), &(0x7f0000000680)}, 0x20) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000800)={0xffffffffffffffff, &(0x7f0000000700)='syzkaller\x00', 0x101280, &(0x7f0000000740)={@align=0xfffffffffffffffd, {0x8, 0x9, 0x7fff, 0x5}}, 0x5, &(0x7f0000000780)={@_ha_fsid}, &(0x7f00000007c0)=0x5}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000840)={0x1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x2a, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xd126, 0x0, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xa4b66c922ac73b51}}, @map_val={0x18, 0x7, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, @map_fd={0x18, 0x1, 0x1, 0x0, r3}, @call={0x85, 0x0, 0x0, 0x34}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7f}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000440)='GPL\x00', 0x735, 0x0, 0x0, 0x41100, 0x33, '\x00', 0x0, 0x25, r6, 0x8, &(0x7f00000004c0)={0x8, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000880)=[r7, 0x1, r8, r9, r10, 0x1, r11, r12, r13, r14], &(0x7f00000008c0)=[{0x0, 0x2, 0x5, 0xa}, {0x0, 0x5, 0x2, 0xd}, {0x5, 0x5, 0xa, 0x4}, {0x5, 0x4, 0x0, 0x8}, {0x2, 0x1, 0x4, 0x8}], 0x10, 0xfffffff7}, 0x94) 634.169186ms ago: executing program 4 (id=3864): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@private2={0xfc, 0x2, '\x00', 0xff}, @in6=@private2, 0x4e22, 0x2000, 0x2, 0xd1e4, 0xa, 0xa0, 0x0, 0x4}, {0xfffffffffffffffe, 0x0, 0x5, 0x400000, 0x0, 0x7, 0x4, 0x3}, {0x3, 0xfffffffffffffffc, 0x0, 0xffffffffffff3829}, 0x0, 0x6e6bba, 0x1, 0x0, 0x0, 0x3}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x23}, 0xfffffff5, 0x33}, 0x14, @in=@rand_addr=0x64010102, 0xfffffffd, 0x7, 0x0, 0x0, 0x80, 0x7, 0xfffffffe}}, 0xe8) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000600)={r6}, 0x8) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_int(r3, 0x0, 0xd, &(0x7f0000000140)=0xffffffff, 0x4) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r3, 0x0, 0x12, &(0x7f0000000180)=0x7, 0x4) recvmmsg(r3, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000200)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x30, 0x2c, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, {[@dstopts={0x29, 0x3, '\x00', [@calipso={0x7, 0x18, {0xf5ff, 0x4, 0x5, 0x2, [0x9, 0x3068]}}]}], @echo_reply}}}}}, 0x0) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000080)={0x1, 0x8, 0x7, 0x8, @vifc_lcl_ifindex=r2, @multicast2}, 0x10) 433.722655ms ago: executing program 3 (id=3865): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRESOCT=r0], 0x24}}, 0x800) socket$nl_netfilter(0x10, 0x3, 0xc) socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffdfd}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) socket$kcm(0xa, 0x3, 0x3a) socket(0x2a, 0x2, 0x0) socket$kcm(0x23, 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0, r2) socket$packet(0x11, 0x2, 0x300) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) socket(0x1e, 0x4, 0x0) epoll_create1(0x80000) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 212.726642ms ago: executing program 1 (id=3866): r0 = socket$netlink(0x10, 0x3, 0x0) unshare(0x2a020400) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600}}, 0x20) bpf$LINK_DETACH(0x22, &(0x7f00000000c0)=r2, 0x4) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4000c}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @multicast1}]}}}]}, 0x3c}}, 0x4040) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$NFT_BATCH(r0, &(0x7f0000000b00)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000ac0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a98000000140a010300000000000000000200000608000340000000084b00080092e7fef3f233cfec450c6d56b791b73f2a59ef60b523c43f2a4afc208ddddcc979e4d0a4f5138bd64c8de9ecd358f407e04775ef2529fb01810e2d63a6e00f658da4b2cbec4362000900020073797a30000000000c00064000000000000000030c00064000000000000000050900020073797a320000000024000000030a0101000000000000000003000002100008800c00014000000000000009a81c000000120a030000000000000000000a000007080003400000000384000000000a000000000000000000000a00000257000600c64edd1c3d04cca3f7ff250e87989c0d65ca89d1b2fa26cb3622a5d1c54e085232e10a94d116ca5f57b5a619226b0bab0595a047bbaf4f07889a82ccbc2b3bd5c431d66df7c43e9c2c70b0416ea65a22edc68b000c00044000000000000000020c000440000000000000000430000000140a010200000000000000000200000a0900020073797a300000000008000340000000080800034000000006ec000000060a00030000000000000000050000080c000640000000000000000408000940000000000c0006400000000000000005b5000740b7a598092e2cd7cc2dea849dfb68b03dcf2e136cd6021f524afad45ec7eae3d8c2b766fd61a75666c13ea315d13519c505723c8b8201ac0c5b0a902d862b5a5373e0285935d0369b61fed1aecd70c587ebcb2f62febe7fe3111c90c64ebdbb40fe99f25e206f014e8b158b3edbabf42f76c443a6b265eec312b95bfd3e7b307d93701f469a0bd11dd2d892d2de4f5cca44def9951462a2e1c081eb93acd94140bb1c027671a000231d004968807f0ef28b00000048010000050a010800000000000000000000000808000a4000000000ba000c0078440546feaa875e4d2a99a3c282e2f2568e0b7aa990afc7a462ae91a6d11c4dd157d67b18786935c3a26432fcfdc3919ab375835c5da20adfef4b7904aee7c6d2fcaf0f3b3d59d29c508a3ecaa4e79b192d7f35b43d2280401506d1083e205caa18e8d8c32a63f417d107810e0bcba6259919a2271ab753b985bbf5584cb72fd9e80d1569779781ed6e5dbb70a62a5d2e78e8597b483ff02eedf77a0db591cc80ab2a69b11b28bdb39b532d8e772e4ae223b06a7ac200004c0008800c00024000000000559b707f0c00024000000000000000000c00014000000000000000000c00014000000000000000020c000140000000000000000e0c00014000000000000000090900010073797a30000000000c00024000000000000000030b00070066696c7465720000140000001100010000000000000000000300000a"], 0x3e8}}, 0x6004011) 128.368998ms ago: executing program 1 (id=3867): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x21031, 0xffffffffffffffff, 0x21d63000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0600000004000000001000008900000000000000b44f804284058b9d64fbdf466355ee983cf9d643cdb10bd2007e84d87397988caf990e9e439f4b3d37a25842743185db185f3df3d1568c2fcc6f6607dcd461c1ea0bfda0901e853bdd837be7b3b374ccd04af325a4a7d2ccd6ee99941ea7088ddc503aa35d05da2184d281aa1fea1d81affd4d578b070f3d2b6dce654f4d0c7c59143b29b5c8", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, &(0x7f0000000980)=""/103, &(0x7f0000000000)="a756089048513f3a0a86b0cc89d214249fadfd02000000608d42514c562508d400000000b0e44b2d1543b1d0", &(0x7f0000000040)="72d89f93eef5de3dbf776ef04e4b34d4628ff21b297576a2f4ed5b2e608f1e1dc0b10d58efb400747b176d97e37054b616e3aeaecfdb871674b24f32eb3cd577aa123eb5897e5968a945d15b01030453329916f9b28cf4e7eeca88531fc7294674310fd2", 0x80, r1, 0x0, 0x7}, 0x38) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 95.722342ms ago: executing program 0 (id=3868): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'bond0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000ffc000/0x1000)=nil, 0xfffffffffffff002, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x40, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_vlan\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x24002805}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4c, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x1]}}) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x3c, r9, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x2}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4044851}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x11, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}}, 0x20040084) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="300000001800090000000000000000001c140000fe000001000000000a00120002"], 0x30}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b00)=@newqdisc={0x2c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x6, 0x5}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40888}, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000002c0), r8) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x180}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f00000000c0)={r11, 0xfd8f, 0x20, 0x0, 0xb03}, &(0x7f0000000100)=0x18) socket$nl_generic(0x10, 0x3, 0x10) 7.282766ms ago: executing program 4 (id=3869): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x2, 0xd, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x18, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}]}, 0x38}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef) socket$alg(0x26, 0x5, 0x0) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000004e00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x40}], 0x30, 0x88010}], 0x1, 0x20000010) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="20002cbd7000fedbdf25700000000c00990000320a104066e16f"], 0x63}, 0x1, 0x0, 0x0, 0x20000045}, 0x40046) (async) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="20002cbd7000fedbdf25700000000c00990000320a104066e16f"], 0x63}, 0x1, 0x0, 0x0, 0x20000045}, 0x40046) recvmsg$unix(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000004c0)=""/85, 0x55}, {&(0x7f0000000540)=""/120, 0x78}], 0x2}, 0x2001) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20008090) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20008090) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000002dc0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f00000006c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {}, {0x8, 0x2, 0x6}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4880}, 0x20008000) (async) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f00000006c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {}, {0x8, 0x2, 0x6}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4880}, 0x20008000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2, 0x31}, 0x48) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, r7, 0x400, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3, 0x28}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000080}, 0x8000000) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x25dfdbfe, {{@in6=@remote, @in=@local, 0xfffc, 0x0, 0x0, 0x0, 0xa}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x9ff, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20000c90}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'bond0\x00'}) syz_genetlink_get_family_id$l2tp(&(0x7f0000001ec0), 0xffffffffffffffff) 0s ago: executing program 1 (id=3870): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001c00357428bd7000fed3df2502000000", @ANYRES32=r1, @ANYBLOB="1000a204080001000000000008000f0004"], 0x2c}, 0x1, 0x0, 0x0, 0x20040001}, 0x200080c0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001500), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000000000)={0x30, r3, 0x6a4104b68300861d, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040050}, 0x408b4) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0xfffffffe, 0x100, 0x100, 0x0, 0x40}, 0x1c) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x2}, @union={0x0, 0x0, 0x0, 0x5, 0x0, 0xdfa}]}}, &(0x7f0000000f40)=""/4089, 0x32, 0xff9, 0xa, 0x1}, 0x28) kernel console output (not intermixed with test programs): type 2 family 0 port 6081 - 0 [ 623.288905][T12561] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.361605][T18342] veth0: entered promiscuous mode [ 623.403185][T12561] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.513768][T18342] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3015'. [ 623.740068][ C1] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 624.085250][T18347] syzkaller1: entered promiscuous mode [ 624.100713][T18347] syzkaller1: entered allmulticast mode [ 624.220673][ T5626] Bluetooth: hci0: command tx timeout [ 624.290623][T18358] syzkaller1: entered promiscuous mode [ 624.296473][T18358] syzkaller1: entered allmulticast mode [ 624.411163][ T7205] net_ratelimit: 12 callbacks suppressed [ 624.411182][ T7205] bond18: (slave bridge15): failed to get link speed/duplex [ 624.773246][T12561] dvmrp0: left allmulticast mode [ 624.827836][T18367] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3022'. [ 625.279677][T12561] team0: Port device xfrm0 removed [ 625.524653][T12561] bond14 (unregistering): (slave gretap0): Removing an active aggregator [ 625.557576][T18380] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3023'. [ 625.572536][T12561] bond14 (unregistering): (slave gretap0): Releasing backup interface [ 625.942071][T12561] bond7 (unregistering): (slave geneve2): Releasing active interface [ 625.990779][T12561] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 626.169346][T12561] bond3 (unregistering): (slave bridge4): Removing an active aggregator [ 626.189389][T12561] bond3 (unregistering): (slave bridge4): Releasing backup interface [ 626.199436][T12561] bond3 (unregistering): (slave bridge4): the permanent HWaddr of slave - ee:7c:01:f9:55:03 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 626.233615][T12561] bridge4 (unregistering): left promiscuous mode [ 626.251288][T12561] bond3 (unregistering): (slave bridge5): Releasing backup interface [ 626.261112][T12561] bridge5 (unregistering): left promiscuous mode [ 626.300230][ C1] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 626.308720][ T5626] Bluetooth: hci0: command tx timeout [ 626.321136][T12561] bond0 (unregistering): Released all slaves [ 626.335501][T12561] bond1 (unregistering): Released all slaves [ 626.362004][T12561] bond2 (unregistering): Released all slaves [ 626.393460][T12561] bond3 (unregistering): Released all slaves [ 626.417969][T12561] bond4 (unregistering): (slave veth3): Releasing active interface [ 626.429301][T12561] bond4 (unregistering): (slave veth5): Releasing active interface [ 626.445018][T12561] bond4 (unregistering): Released all slaves [ 626.465502][T12561] bond5 (unregistering): Released all slaves [ 626.485810][T12561] bond6 (unregistering): Released all slaves [ 626.525430][T12561] bond7 (unregistering): Released all slaves [ 626.551144][T12561] bond8 (unregistering): Released all slaves [ 626.588543][T12561] bond9 (unregistering): Released all slaves [ 626.608763][T12561] bond10 (unregistering): Released all slaves [ 626.636026][T12561] bond11 (unregistering): (slave veth7): Releasing backup interface [ 626.648789][T12561] veth7: left promiscuous mode [ 626.655514][T12561] bond11 (unregistering): Released all slaves [ 626.676022][T12561] bond12 (unregistering): Released all slaves [ 626.696565][T12561] bond13 (unregistering): Released all slaves [ 626.731859][T12561] bond14 (unregistering): Released all slaves [ 626.753074][T12561] bond15 (unregistering): Released all slaves [ 626.774644][T12561] bond16 (unregistering): Released all slaves [ 626.805016][T12561] bond17 (unregistering): Released all slaves [ 626.825337][T18339] veth0: left promiscuous mode [ 626.857023][T18380] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 626.903307][ T5286] 8021q: adding VLAN 0 to HW filter on device eth1 [ 627.195849][T18393] tipc: Failed to remove unknown binding: 66,1,1/1746595499:2540100044/2540100046 [ 627.247342][T18393] tipc: Failed to remove unknown binding: 66,1,1/1746595499:2540100044/2540100046 [ 627.261076][ T1102] bond18: (slave bridge15): failed to get link speed/duplex [ 627.306375][T18393] tipc: Failed to remove unknown binding: 66,1,1/1746595499:2540100044/2540100046 [ 627.471709][T12561] : left promiscuous mode [ 627.690489][ T1102] bond18: (slave bridge15): failed to get link speed/duplex [ 627.730367][T18393] syzkaller0: entered promiscuous mode [ 627.736238][T18393] syzkaller0: entered allmulticast mode [ 627.757852][T18414] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3030'. [ 627.811633][T18414] netlink: 'syz.1.3030': attribute type 4 has an invalid length. [ 627.957342][T12561] tipc: Left network mode [ 628.088659][T18424] sctp: [Deprecated]: syz.1.3034 (pid 18424) Use of int in max_burst socket option. [ 628.088659][T18424] Use struct sctp_assoc_value instead [ 628.120530][T18428] netlink: 'syz.2.3033': attribute type 1 has an invalid length. [ 628.168420][T18424] netlink: 188 bytes leftover after parsing attributes in process `syz.1.3034'. [ 628.200907][T18419] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3032'. [ 628.382596][ T5626] Bluetooth: hci0: command tx timeout [ 628.498780][T18421] gretap1: entered promiscuous mode [ 628.534143][T18451] nbd: must specify at least one socket [ 628.770515][ T1102] bond18: (slave bridge15): failed to get link speed/duplex [ 628.827011][T18318] bridge0: port 1(bridge_slave_0) entered blocking state [ 628.847541][T18318] bridge0: port 1(bridge_slave_0) entered disabled state [ 628.868516][T18318] bridge_slave_0: entered allmulticast mode [ 628.886700][T18318] bridge_slave_0: entered promiscuous mode [ 628.951101][ T1102] bond18: (slave bridge15): failed to get link speed/duplex [ 629.006347][T18459] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 629.026315][T18459] syzkaller1: linktype set to 0 [ 629.134136][T18318] bridge0: port 2(bridge_slave_1) entered blocking state [ 629.167296][T18318] bridge0: port 2(bridge_slave_1) entered disabled state [ 629.195469][T18318] bridge_slave_1: entered allmulticast mode [ 629.226964][T18318] bridge_slave_1: entered promiscuous mode [ 629.273379][T18469] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 629.448361][T18318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 629.450485][T18476] netlink: 'syz.0.3042': attribute type 1 has an invalid length. [ 629.594357][T18482] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3042'. [ 630.193035][T18318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 630.259632][T18476] bond10: entered promiscuous mode [ 630.265862][T18476] 8021q: adding VLAN 0 to HW filter on device bond10 [ 630.282095][T18473] 8021q: adding VLAN 0 to HW filter on device bond10 [ 630.289662][T18473] bond10: (slave gre2): The slave device specified does not support setting the MAC address [ 630.300723][T18473] bond10: (slave gre2): Setting fail_over_mac to active for active-backup mode [ 630.314255][T18473] bond10: (slave gre2): making interface the new active one [ 630.322066][T18473] gre2: entered promiscuous mode [ 630.328587][T18473] bond10: (slave gre2): Enslaving as an active interface with an up link [ 630.338840][ T5286] 8021q: adding VLAN 0 to HW filter on device eth2 [ 630.352973][ T1102] bond18: (slave bridge15): failed to get link speed/duplex [ 630.368728][T18482] bond10 (unregistering): (slave gre2): Releasing backup interface [ 630.391328][T18482] gre2: left promiscuous mode [ 630.399684][T18482] bond10 (unregistering): Released all slaves [ 630.460766][ T5626] Bluetooth: hci0: command tx timeout [ 630.557943][T18318] team0: Port device team_slave_0 added [ 630.669564][T18318] team0: Port device team_slave_1 added [ 630.902811][T18521] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3048'. [ 630.971965][T18318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 630.995261][T18318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 631.074390][T18318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 631.168311][T18534] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3049'. [ 631.217747][T18318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 631.235409][T18318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 631.287015][T18318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 631.393802][ T7211] bond18: (slave bridge15): failed to get link speed/duplex [ 631.566199][ T57] bond18: (slave bridge15): failed to get link speed/duplex [ 631.675979][T18318] hsr_slave_0: entered promiscuous mode [ 631.709150][T18318] hsr_slave_1: entered promiscuous mode [ 631.733223][T18547] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3051'. [ 631.756575][T18318] debugfs: 'hsr0' already exists in 'hsr' [ 631.790456][T18318] Cannot create hsr debugfs directory [ 631.904927][T12561] hsr_slave_0: left promiscuous mode [ 631.927647][T12561] hsr_slave_1: left promiscuous mode [ 632.081894][T18549] IPVS: Scheduler module ip_vs_ not found [ 632.367760][T18569] netlink: 'syz.0.3058': attribute type 11 has an invalid length. [ 632.540389][ T5626] Bluetooth: hci0: command tx timeout [ 632.714238][ T5286] 8021q: adding VLAN 0 to HW filter on device eth3 [ 633.171394][ T47] bond18: (slave bridge15): failed to get link speed/duplex [ 633.244962][T18591] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3064'. [ 633.322223][T12576] bond18: (slave bridge15): failed to get link speed/duplex [ 633.473075][T12576] bond18: (slave bridge15): failed to get link speed/duplex [ 633.714038][T18603] x_tables: ip6_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING [ 633.754903][T18613] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3069'. [ 633.757752][T18603] netlink: 'syz.4.3068': attribute type 1 has an invalid length. [ 633.993633][T18609] netlink: 'syz.0.3069': attribute type 1 has an invalid length. [ 634.017536][T18603] 8021q: adding VLAN 0 to HW filter on device bond23 [ 634.037351][T18609] netlink: 'syz.0.3069': attribute type 4 has an invalid length. [ 634.072710][T12561] IPVS: stop unused estimator thread 0... [ 634.081971][T18609] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.3069'. [ 634.155111][T18613] Bluetooth: MGMT ver 1.23 [ 634.343645][T18630] netlink: 'syz.4.3072': attribute type 1 has an invalid length. [ 634.511400][ T7211] bond18: (slave bridge15): failed to get link speed/duplex [ 634.529547][T18633] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3073'. [ 634.631669][T18639] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3072'. [ 634.632533][T18630] 8021q: adding VLAN 0 to HW filter on device bond25 [ 634.657880][T18630] bond24: (slave bond25): making interface the new active one [ 634.669630][T18630] bond24: (slave bond25): Enslaving as an active interface with an up link [ 634.853477][T18658] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3074'. [ 634.960973][ T1102] bond18: (slave bridge15): failed to get link speed/duplex [ 635.058524][T18665] SET target dimension over the limit! [ 635.261425][T12561] bond18: (slave bridge15): failed to get link speed/duplex [ 635.391087][ T47] bond18: (slave bridge15): failed to get link speed/duplex [ 635.581256][T18685] macsec1: entered promiscuous mode [ 635.596657][T18685] erspan0: entered promiscuous mode [ 635.622480][T18685] erspan0: left promiscuous mode [ 635.681912][T18691] netlink: 'syz.2.3081': attribute type 30 has an invalid length. [ 635.724867][T18694] netlink: 'syz.2.3081': attribute type 30 has an invalid length. [ 636.170161][T12576] bond18: (slave bridge15): failed to get link speed/duplex [ 636.419480][T18706] syzkaller0: entered promiscuous mode [ 636.427597][T18706] syzkaller0: entered allmulticast mode [ 636.455460][T18718] C: renamed from veth1_to_team [ 636.474407][T18718] netlink: 'syz.4.3085': attribute type 2 has an invalid length. [ 636.500634][T18718] netlink: 116 bytes leftover after parsing attributes in process `syz.4.3085'. [ 636.545235][T18718] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 636.669936][ T7211] bond18: (slave bridge15): failed to get link speed/duplex [ 636.869172][T18318] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 636.892350][T18318] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 636.920690][ T57] bond18: (slave bridge15): failed to get link speed/duplex [ 636.934229][T18318] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 636.981016][T18318] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 637.007542][T18318] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 637.088216][T18318] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 637.110334][T12576] bond18: (slave bridge15): failed to get link speed/duplex [ 637.129281][T18318] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 637.175082][T18318] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 637.252872][T18741] xt_hashlimit: size too large, truncated to 1048576 [ 637.280668][T12567] bond18: (slave bridge15): failed to get link speed/duplex [ 637.377966][T18753] netlink: 'syz.0.3088': attribute type 1 has an invalid length. [ 637.427530][T18747] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 637.628187][T18762] netlink: 336 bytes leftover after parsing attributes in process `syz.4.3091'. [ 637.677572][T18762] netlink: 336 bytes leftover after parsing attributes in process `syz.4.3091'. [ 637.731776][T18747] macvtap0: entered allmulticast mode [ 637.840080][T18758] macvtap2: entered allmulticast mode [ 637.881498][T18774] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3093'. [ 637.934130][T18753] bond10: (slave bridge7): making interface the new active one [ 637.962498][T18753] bond10: (slave bridge7): Enslaving as an active interface with an up link [ 638.132134][T12576] bond18: (slave bridge15): failed to get link speed/duplex [ 638.160540][T18784] netlink: 'syz.2.3095': attribute type 1 has an invalid length. [ 638.380246][T12567] bond18: (slave bridge15): failed to get link speed/duplex [ 638.417537][T18318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 638.621762][T18318] 8021q: adding VLAN 0 to HW filter on device team0 [ 638.677167][ T47] bond18: (slave bridge15): failed to get link speed/duplex [ 638.809260][T18796] tipc: Enabled bearer , priority 30 [ 638.888279][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 638.895553][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 638.956675][T12567] bridge0: port 2(bridge_slave_1) entered blocking state [ 638.963915][T12567] bridge0: port 2(bridge_slave_1) entered forwarding state [ 639.739997][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 639.766357][ T7673] tipc: Node number set to 54594558 [ 640.261297][T18844] netlink: 84 bytes leftover after parsing attributes in process `syz.4.3107'. [ 640.530081][T12561] net_ratelimit: 10 callbacks suppressed [ 640.530101][T12561] bond18: (slave bridge15): failed to get link speed/duplex [ 640.679948][T12561] bond18: (slave bridge15): failed to get link speed/duplex [ 640.883029][T18318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 641.040493][T12576] bond18: (slave bridge15): failed to get link speed/duplex [ 641.168582][T12567] bond18: (slave bridge15): failed to get link speed/duplex [ 641.313264][T18318] veth0_vlan: entered promiscuous mode [ 641.359914][ T7211] bond18: (slave bridge15): failed to get link speed/duplex [ 641.377696][T18318] veth1_vlan: entered promiscuous mode [ 641.504542][T12576] bond18: (slave bridge15): failed to get link speed/duplex [ 641.553693][T18318] veth0_macvtap: entered promiscuous mode [ 641.613044][T18318] veth1_macvtap: entered promiscuous mode [ 641.679721][T18318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 641.712468][ T1102] bond18: (slave bridge15): failed to get link speed/duplex [ 641.725698][T18880] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3114'. [ 641.815857][T18318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 641.919356][T18891] syzkaller0: entered promiscuous mode [ 641.944551][T18891] syzkaller0: entered allmulticast mode [ 641.979553][T12567] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.999537][T12567] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 642.084509][T12576] bond18: (slave bridge15): failed to get link speed/duplex [ 642.117274][T12567] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 642.160626][T12567] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 642.454004][ T1102] bond18: (slave bridge15): failed to get link speed/duplex [ 642.620514][ T1102] bond18: (slave bridge15): failed to get link speed/duplex [ 642.660690][ T7211] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 642.697638][ T7211] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 642.833051][T12561] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 642.871474][T18921] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3123'. [ 642.884076][T12561] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 643.280996][T18953] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 643.312906][T18953] syzkaller1: linktype set to 825 [ 643.539545][T18963] syz_tun: entered promiscuous mode [ 643.603405][T18963] vlan2: entered promiscuous mode [ 644.017884][ T5622] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 644.035714][ T5622] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 644.046844][ T5622] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 644.068313][ T5622] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 644.114676][ T5622] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 644.573742][T18995] netlink: 'syz.2.3138': attribute type 1 has an invalid length. [ 644.624717][T19003] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3138'. [ 644.657996][T18995] bond1: entered promiscuous mode [ 644.663721][T18995] 8021q: adding VLAN 0 to HW filter on device bond1 [ 645.207801][T19024] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 645.269143][T19024] xt_connbytes: Forcing CT accounting to be enabled [ 645.322105][T19030] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3144'. [ 645.591219][T19038] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3147'. [ 645.621029][ T1102] net_ratelimit: 17 callbacks suppressed [ 645.621050][ T1102] bond18: (slave bridge15): failed to get link speed/duplex [ 645.727821][T19038] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 645.728600][T19043] netlink: 'syz.2.3148': attribute type 12 has an invalid length. [ 645.905880][ T57] bond18: (slave bridge15): failed to get link speed/duplex [ 645.985849][T19043] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3148'. [ 646.010558][T19062] macsec0: entered promiscuous mode [ 646.191166][ T47] bond18: (slave bridge15): failed to get link speed/duplex [ 646.220035][ T5622] Bluetooth: hci3: command tx timeout [ 646.273278][T19072] netlink: 'syz.3.3152': attribute type 2 has an invalid length. [ 646.317239][T19072] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3152'. [ 646.458203][T19042] macsec0: left promiscuous mode [ 646.568833][T19089] netlink: 'syz.3.3153': attribute type 1 has an invalid length. [ 646.597691][T19089] netlink: 'syz.3.3153': attribute type 2 has an invalid length. [ 646.611151][ T7205] bond18: (slave bridge15): failed to get link speed/duplex [ 646.658421][T19092] geneve0: entered promiscuous mode [ 646.679067][T19092] macvlan2: entered promiscuous mode [ 646.896185][T19099] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3155'. [ 646.931380][T19099] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3155'. [ 646.958321][T19099] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3155'. [ 647.004426][T19099] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3155'. [ 647.027141][T19099] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3155'. [ 647.052734][T19099] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3155'. [ 647.173215][T19099] bond1: left promiscuous mode [ 647.241778][ T47] bond18: (slave bridge15): failed to get link speed/duplex [ 647.511691][T19121] bond2 (unregistering): Released all slaves [ 647.579057][T18978] bridge0: port 1(bridge_slave_0) entered blocking state [ 647.602623][T18978] bridge0: port 1(bridge_slave_0) entered disabled state [ 647.619077][T18978] bridge_slave_0: entered allmulticast mode [ 647.642830][T18978] bridge_slave_0: entered promiscuous mode [ 647.702146][T19124] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 647.764193][T19124] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 647.794668][T19138] Bluetooth: MGMT ver 1.23 [ 647.837186][T18978] bridge0: port 2(bridge_slave_1) entered blocking state [ 647.870995][T18978] bridge0: port 2(bridge_slave_1) entered disabled state [ 647.897264][T18978] bridge_slave_1: entered allmulticast mode [ 647.922383][T18978] bridge_slave_1: entered promiscuous mode [ 648.273019][T18978] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 648.300325][ T5626] Bluetooth: hci3: command tx timeout [ 648.322691][T18978] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 648.418557][T18978] team0: Port device team_slave_0 added [ 648.431194][ T1102] bond18: (slave bridge15): failed to get link speed/duplex [ 648.462180][T18978] team0: Port device team_slave_1 added [ 649.090978][ T7205] bond18: (slave bridge15): failed to get link speed/duplex [ 649.110226][T18978] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 649.117378][T18978] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 649.146602][T18978] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 649.204630][T18978] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 649.224657][T18978] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 649.292481][T18978] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 649.390930][ T57] bond18: (slave bridge15): failed to get link speed/duplex [ 649.534630][T18978] hsr_slave_0: entered promiscuous mode [ 649.560281][T18978] hsr_slave_1: entered promiscuous mode [ 649.590544][T18978] debugfs: 'hsr0' already exists in 'hsr' [ 649.607214][T18978] Cannot create hsr debugfs directory [ 649.980208][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 650.308166][ T57] bond18: (slave bridge15): failed to get link speed/duplex [ 650.353224][T19225] batadv_slave_0: entered promiscuous mode [ 650.379435][T19221] syzkaller1: entered promiscuous mode [ 650.385549][ T5626] Bluetooth: hci3: command tx timeout [ 650.408486][T19221] syzkaller1: entered allmulticast mode [ 650.447422][T19223] batadv_slave_0: left promiscuous mode [ 651.222824][T19240] tipc: Invalid UDP bearer configuration [ 651.222881][T19240] tipc: Enabling of bearer rejected, failed to enable media [ 651.453824][ T57] net_ratelimit: 1 callbacks suppressed [ 651.453842][ T57] bond18: (slave bridge15): failed to get link speed/duplex [ 651.851752][T19252] IPVS: set_ctl: invalid protocol: 60 172.30.0.3:20003 [ 651.997057][ T7211] bond18: (slave bridge15): failed to get link speed/duplex [ 652.133641][ T57] bond18: (slave bridge15): failed to get link speed/duplex [ 652.285321][ T57] bond18: (slave bridge15): failed to get link speed/duplex [ 652.462011][ T5626] Bluetooth: hci3: command tx timeout [ 652.545055][T19279] __nla_validate_parse: 67 callbacks suppressed [ 652.545077][T19279] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3195'. [ 652.808060][T18978] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 653.080542][T18978] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 653.087856][T19288] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3195'. [ 653.142324][T18978] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 653.292557][T18978] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 653.311232][T18978] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 653.329107][T18978] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 653.395721][T18978] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 653.419058][T18978] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 653.469474][T19301] netlink: 'syz.1.3198': attribute type 4 has an invalid length. [ 653.523944][T19301] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3198'. [ 653.560066][ T14] bond18: (slave bridge15): failed to get link speed/duplex [ 653.778244][T19316] netlink: 'syz.3.3201': attribute type 11 has an invalid length. [ 653.826270][T19316] netlink: 'syz.3.3201': attribute type 4 has an invalid length. [ 653.873091][T19316] netlink: 220 bytes leftover after parsing attributes in process `syz.3.3201'. [ 653.930228][T18978] 8021q: adding VLAN 0 to HW filter on device bond0 [ 654.019684][T18978] 8021q: adding VLAN 0 to HW filter on device team0 [ 654.041140][ T7211] bond18: (slave bridge15): failed to get link speed/duplex [ 654.061998][T19317] IPVS: Scheduler module ip_vs_ not found [ 654.074170][T12567] bridge0: port 1(bridge_slave_0) entered blocking state [ 654.081423][T12567] bridge0: port 1(bridge_slave_0) entered forwarding state [ 654.136053][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 654.143345][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 654.250976][T12567] bond18: (slave bridge15): failed to get link speed/duplex [ 654.370454][ T57] bond18: (slave bridge15): failed to get link speed/duplex [ 654.460870][ C1] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 654.490402][T12567] bond18: (slave bridge15): failed to get link speed/duplex [ 654.540465][ T5626] Bluetooth: hci3: command tx timeout [ 654.671353][ T7205] bond18: (slave bridge15): failed to get link speed/duplex [ 654.791914][T19349] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3208'. [ 654.969523][T19355] bond2: option arp_all_targets: invalid value (3) [ 654.985736][T19355] bond2 (unregistering): Released all slaves [ 655.374385][T18106] udevd[18106]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 655.509490][T19377] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3213'. [ 655.527864][T19378] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3214'. [ 655.818683][T19378] 8021q: adding VLAN 0 to HW filter on device bond2 [ 655.949120][T19385] bond1: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 656.184525][T19385] bond1 (unregistering): Released all slaves [ 656.310688][T18978] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 656.461017][ T7211] net_ratelimit: 5 callbacks suppressed [ 656.461039][ T7211] bond18: (slave bridge15): failed to get link speed/duplex [ 656.610959][ T7211] bond18: (slave bridge15): failed to get link speed/duplex [ 656.750000][ T14] bond18: (slave bridge15): failed to get link speed/duplex [ 656.924605][T19423] x_tables: duplicate underflow at hook 2 [ 656.942150][T12567] bond18: (slave bridge15): failed to get link speed/duplex [ 657.088900][T19427] xt_hashlimit: size too large, truncated to 1048576 [ 657.105721][ T57] bond18: (slave bridge15): failed to get link speed/duplex [ 657.258877][T18978] veth0_vlan: entered promiscuous mode [ 657.334563][T19434] bridge_slave_0: left allmulticast mode [ 657.351112][T19434] bridge_slave_0: left promiscuous mode [ 657.361203][T19434] bridge0: port 1(bridge_slave_0) entered disabled state [ 657.409661][T19434] bridge_slave_1: left allmulticast mode [ 657.445319][T19434] bridge_slave_1: left promiscuous mode [ 657.473958][T19434] bridge0: port 2(bridge_slave_1) entered disabled state [ 657.511729][T19434] bond0: (slave bond_slave_0): Releasing backup interface [ 657.555077][T19434] bond0: (slave bond_slave_1): Releasing backup interface [ 657.578982][T19434] team0: Port device team_slave_0 removed [ 657.612809][T19434] team0: Port device team_slave_1 removed [ 657.628363][T19434] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 657.647550][T19454] netlink: 'syz.1.3231': attribute type 2 has an invalid length. [ 657.651288][T19434] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 657.657041][T19454] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3231'. [ 657.685536][T19434] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 657.703142][T19434] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 657.719701][T19434] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 657.751070][T12561] bond18: (slave bridge15): failed to get link speed/duplex [ 657.786632][T19456] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3232'. [ 657.831593][T19449] bridge0: port 2(bridge_slave_1) entered disabled state [ 657.839221][T19449] bridge0: port 1(bridge_slave_0) entered disabled state [ 657.921659][T19449] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 657.934287][T19449] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 658.009227][T19449] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 659.783622][T19459] xfrm0: entered allmulticast mode [ 659.789081][T19459] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 659.808810][ T47] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 659.831400][ T47] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 659.853728][ T47] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 659.959110][T18978] veth1_vlan: entered promiscuous mode [ 659.983114][ T47] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 660.087938][T19492] bridge0: port 3(veth0_virt_wifi) entered blocking state [ 660.107312][T19492] bridge0: port 3(veth0_virt_wifi) entered disabled state [ 660.129375][T19492] veth0_virt_wifi: entered allmulticast mode [ 660.141410][T19492] veth0_virt_wifi: entered promiscuous mode [ 660.195111][T18978] veth0_macvtap: entered promiscuous mode [ 660.229549][T18978] veth1_macvtap: entered promiscuous mode [ 660.260235][T12561] bond18: (slave bridge15): failed to get link speed/duplex [ 660.284427][T18978] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 660.324685][T18978] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 660.378592][T12561] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.409188][T12561] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.435178][T12561] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.477827][T12561] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.781575][T12561] bond18: (slave bridge15): failed to get link speed/duplex [ 660.916672][T19526] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3247'. [ 660.918593][T19528] xfrm0: entered allmulticast mode [ 661.064702][T12561] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 661.097266][T12561] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 661.267201][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 661.287200][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 661.331631][T19542] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3254'. [ 661.371570][T19542] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3254'. [ 661.382561][T19545] bond0: entered promiscuous mode [ 661.416287][T19545] bond_slave_0: entered promiscuous mode [ 661.448515][T19545] bond_slave_1: entered promiscuous mode [ 661.502549][T19545] batadv0: entered promiscuous mode [ 661.531838][T19557] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3255'. [ 661.546102][T19545] debugfs: 'hsr1' already exists in 'hsr' [ 661.552057][T19545] Cannot create hsr debugfs directory [ 661.567484][T19545] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 661.584337][T19545] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 661.619518][T19545] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 661.649190][T19559] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3253'. [ 661.662229][T19545] bond0: left promiscuous mode [ 661.667079][T19545] bond_slave_0: left promiscuous mode [ 661.675519][T19545] bond_slave_1: left promiscuous mode [ 661.698149][T19545] batadv0: left promiscuous mode [ 661.934792][ T1102] net_ratelimit: 3 callbacks suppressed [ 661.934810][ T1102] bond18: (slave bridge15): failed to get link speed/duplex [ 661.996564][ T5622] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 662.016939][ T5622] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 662.031932][ T5622] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 662.045063][ T5622] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 662.053337][ T5622] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 662.057615][T19570] xt_hashlimit: size too large, truncated to 1048576 [ 662.130500][ T1102] bond18: (slave bridge15): failed to get link speed/duplex [ 662.140049][ C1] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 662.250190][ T1102] bond18: (slave bridge15): failed to get link speed/duplex [ 662.390520][T12576] bond18: (slave bridge15): failed to get link speed/duplex [ 662.689370][ T5624] syz_tun (unregistering): left allmulticast mode [ 662.730802][T12561] bond18: (slave bridge15): failed to get link speed/duplex [ 662.851010][T12576] bond18: (slave bridge15): failed to get link speed/duplex [ 662.993493][T12561] bond18: (slave bridge15): failed to get link speed/duplex [ 663.121011][ T47] bond18: (slave bridge15): failed to get link speed/duplex [ 663.259343][ T14] bond18: (slave bridge15): failed to get link speed/duplex [ 663.411162][ T47] bond18: (slave bridge15): failed to get link speed/duplex [ 664.142976][ T5626] Bluetooth: hci2: command tx timeout [ 664.480524][T19659] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3277'. [ 664.792760][T19669] FAULT_INJECTION: forcing a failure. [ 664.792760][T19669] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 664.822813][T19669] CPU: 1 UID: 0 PID: 19669 Comm: syz.3.3281 Not tainted syzkaller #0 PREEMPT(full) [ 664.822839][T19669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 664.822850][T19669] Call Trace: [ 664.822858][T19669] [ 664.822865][T19669] dump_stack_lvl+0xe8/0x150 [ 664.822898][T19669] should_fail_ex+0x40c/0x560 [ 664.822929][T19669] _copy_from_user+0x2d/0xb0 [ 664.822950][T19669] ___sys_recvmsg+0x173/0x5a0 [ 664.823073][T19669] ? __pfx____sys_recvmsg+0x10/0x10 [ 664.823099][T19669] ? __fget_files+0x2a/0x420 [ 664.823146][T19669] do_recvmmsg+0x31a/0x7f0 [ 664.823176][T19669] ? __pfx_do_recvmmsg+0x10/0x10 [ 664.823207][T19669] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 664.823278][T19669] ? __fget_files+0x3a2/0x420 [ 664.823303][T19669] __x64_sys_recvmmsg+0x198/0x250 [ 664.823328][T19669] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 664.823355][T19669] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 664.823374][T19669] do_syscall_64+0x174/0x580 [ 664.823389][T19669] ? trace_irq_disable+0x3b/0x140 [ 664.823407][T19669] ? clear_bhb_loop+0x40/0x90 [ 664.823429][T19669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 664.823448][T19669] RIP: 0033:0x7f300379de59 [ 664.823472][T19669] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 664.823487][T19669] RSP: 002b:00007f3004633028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 664.823505][T19669] RAX: ffffffffffffffda RBX: 00007f3003a25fa0 RCX: 00007f300379de59 [ 664.823517][T19669] RDX: 0400000000000284 RSI: 0000200000000040 RDI: 0000000000000003 [ 664.823529][T19669] RBP: 00007f3004633090 R08: 0000000000000000 R09: 0000000000000000 [ 664.823539][T19669] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 664.823549][T19669] R13: 00007f3003a26038 R14: 00007f3003a25fa0 R15: 00007ffe438f0488 [ 664.823579][T19669] [ 665.471136][T19690] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3288'. [ 665.697484][T19694] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3287'. [ 665.763312][T19695] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3287'. [ 665.835888][T19692] vlan2: entered promiscuous mode [ 665.856287][T19692] hsr0: entered promiscuous mode [ 665.866304][T19692] vlan2: entered allmulticast mode [ 665.873559][T19692] hsr0: entered allmulticast mode [ 665.886084][T19692] hsr_slave_0: entered allmulticast mode [ 665.893234][T19692] hsr_slave_1: entered allmulticast mode [ 665.903877][T19700] netlink: 'syz.3.3290': attribute type 2 has an invalid length. [ 666.059688][T19695] hsr_slave_0: left promiscuous mode [ 666.083693][T19695] hsr_slave_1: left promiscuous mode [ 666.220208][ T5626] Bluetooth: hci2: command tx timeout [ 666.441173][T19715] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3291'. [ 666.490364][T19566] bridge0: port 1(bridge_slave_0) entered blocking state [ 666.497657][T19566] bridge0: port 1(bridge_slave_0) entered disabled state [ 666.505340][T19566] bridge_slave_0: entered allmulticast mode [ 666.513302][T19566] bridge_slave_0: entered promiscuous mode [ 666.559484][T19566] bridge0: port 2(bridge_slave_1) entered blocking state [ 666.585157][T19566] bridge0: port 2(bridge_slave_1) entered disabled state [ 666.619006][T19566] bridge_slave_1: entered allmulticast mode [ 666.654600][T19566] bridge_slave_1: entered promiscuous mode [ 666.837512][T19566] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 666.958469][T19745] FAULT_INJECTION: forcing a failure. [ 666.958469][T19745] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 667.000875][T19745] CPU: 1 UID: 0 PID: 19745 Comm: syz.3.3298 Not tainted syzkaller #0 PREEMPT(full) [ 667.000902][T19745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 667.000912][T19745] Call Trace: [ 667.000920][T19745] [ 667.000929][T19745] dump_stack_lvl+0xe8/0x150 [ 667.000957][T19745] should_fail_ex+0x40c/0x560 [ 667.000986][T19745] _copy_from_iter+0x1d3/0x1660 [ 667.001129][T19745] ? kmem_cache_alloc_node_noprof+0x1b1/0x610 [ 667.001160][T19745] ? rcu_is_watching+0x15/0xb0 [ 667.001198][T19745] ? trace_kmem_cache_alloc+0x29/0xe0 [ 667.001227][T19745] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 667.001254][T19745] ? __pfx__copy_from_iter+0x10/0x10 [ 667.001280][T19745] ? __alloc_skb+0x276/0x7a0 [ 667.001332][T19745] ? __alloc_skb+0x276/0x7a0 [ 667.001353][T19745] ? netlink_sendmsg+0x650/0xb40 [ 667.001431][T19745] ? skb_put+0x112/0x210 [ 667.001451][T19745] netlink_sendmsg+0x6c0/0xb40 [ 667.001481][T19745] ? __pfx_netlink_sendmsg+0x10/0x10 [ 667.001505][T19745] ? aa_sock_msg_perm+0xf1/0x1b0 [ 667.001534][T19745] ? __pfx_netlink_sendmsg+0x10/0x10 [ 667.001553][T19745] sock_sendmsg_nosec+0x13a/0x180 [ 667.001577][T19745] ____sys_sendmsg+0x54e/0x850 [ 667.001598][T19745] ? __pfx_____sys_sendmsg+0x10/0x10 [ 667.001622][T19745] ? import_iovec+0x73/0xa0 [ 667.001643][T19745] ___sys_sendmsg+0x2a5/0x360 [ 667.001663][T19745] ? __lock_acquire+0x683/0x2cf0 [ 667.001686][T19745] ? __pfx____sys_sendmsg+0x10/0x10 [ 667.001733][T19745] ? __fget_files+0x2a/0x420 [ 667.001749][T19745] ? __fget_files+0x3a2/0x420 [ 667.001773][T19745] __x64_sys_sendmsg+0x1b1/0x290 [ 667.001792][T19745] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 667.001826][T19745] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 667.001844][T19745] do_syscall_64+0x174/0x580 [ 667.001862][T19745] ? trace_irq_disable+0x3b/0x140 [ 667.001879][T19745] ? clear_bhb_loop+0x40/0x90 [ 667.001901][T19745] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 667.001918][T19745] RIP: 0033:0x7f300379de59 [ 667.001934][T19745] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 667.001950][T19745] RSP: 002b:00007f3004633028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 667.001970][T19745] RAX: ffffffffffffffda RBX: 00007f3003a25fa0 RCX: 00007f300379de59 [ 667.001984][T19745] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 667.002007][T19745] RBP: 00007f3004633090 R08: 0000000000000000 R09: 0000000000000000 [ 667.002019][T19745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 667.002030][T19745] R13: 00007f3003a26038 R14: 00007f3003a25fa0 R15: 00007ffe438f0488 [ 667.002059][T19745] [ 667.405656][T19566] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 667.472195][T19566] team0: Port device team_slave_0 added [ 667.494290][ T1102] net_ratelimit: 15 callbacks suppressed [ 667.494313][ T1102] bond18: (slave bridge15): failed to get link speed/duplex [ 667.552011][T19566] team0: Port device team_slave_1 added [ 667.805179][T19566] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 667.845819][T19566] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 667.964980][T19566] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 668.043679][T19775] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 668.087634][T19566] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 668.116196][T19566] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 668.167745][T19566] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 668.300153][ T5626] Bluetooth: hci2: command tx timeout [ 668.443216][T19566] hsr_slave_0: entered promiscuous mode [ 668.471558][T19566] hsr_slave_1: entered promiscuous mode [ 668.492598][T19566] debugfs: 'hsr0' already exists in 'hsr' [ 668.504314][T19566] Cannot create hsr debugfs directory [ 668.521635][T12576] bond18: (slave bridge15): failed to get link speed/duplex [ 668.564816][T19794] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3308'. [ 668.887866][T19780] openvswitch: netlink: Key 32 has unexpected len 0 expected 2 [ 668.928249][T19802] FAULT_INJECTION: forcing a failure. [ 668.928249][T19802] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 669.005869][T19802] CPU: 0 UID: 0 PID: 19802 Comm: syz.4.3309 Not tainted syzkaller #0 PREEMPT(full) [ 669.005896][T19802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 669.005908][T19802] Call Trace: [ 669.005915][T19802] [ 669.005923][T19802] dump_stack_lvl+0xe8/0x150 [ 669.005951][T19802] should_fail_ex+0x40c/0x560 [ 669.005986][T19802] _copy_from_iter+0x1d3/0x1660 [ 669.006012][T19802] ? kmem_cache_alloc_node_noprof+0x1b1/0x610 [ 669.006042][T19802] ? rcu_is_watching+0x15/0xb0 [ 669.006065][T19802] ? trace_kmem_cache_alloc+0x29/0xe0 [ 669.006093][T19802] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 669.006120][T19802] ? __pfx__copy_from_iter+0x10/0x10 [ 669.006147][T19802] ? __alloc_skb+0x276/0x7a0 [ 669.006164][T19802] ? __alloc_skb+0x276/0x7a0 [ 669.006186][T19802] ? netlink_sendmsg+0x650/0xb40 [ 669.006207][T19802] ? skb_put+0x112/0x210 [ 669.006228][T19802] netlink_sendmsg+0x6c0/0xb40 [ 669.006259][T19802] ? __pfx_netlink_sendmsg+0x10/0x10 [ 669.006284][T19802] ? aa_sock_msg_perm+0xf1/0x1b0 [ 669.006317][T19802] ? __pfx_netlink_sendmsg+0x10/0x10 [ 669.006337][T19802] sock_sendmsg_nosec+0x13a/0x180 [ 669.006363][T19802] ____sys_sendmsg+0x54e/0x850 [ 669.006386][T19802] ? __pfx_____sys_sendmsg+0x10/0x10 [ 669.006414][T19802] ? import_iovec+0x73/0xa0 [ 669.006437][T19802] ___sys_sendmsg+0x2a5/0x360 [ 669.006457][T19802] ? __lock_acquire+0x683/0x2cf0 [ 669.006480][T19802] ? __pfx____sys_sendmsg+0x10/0x10 [ 669.006535][T19802] ? __fget_files+0x2a/0x420 [ 669.006553][T19802] ? __fget_files+0x3a2/0x420 [ 669.006581][T19802] __x64_sys_sendmsg+0x1b1/0x290 [ 669.006604][T19802] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 669.006640][T19802] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.006661][T19802] do_syscall_64+0x174/0x580 [ 669.006678][T19802] ? trace_irq_disable+0x3b/0x140 [ 669.006696][T19802] ? clear_bhb_loop+0x40/0x90 [ 669.006717][T19802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.006734][T19802] RIP: 0033:0x7fa47159de59 [ 669.006751][T19802] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 669.006766][T19802] RSP: 002b:00007fa4724f1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 669.006786][T19802] RAX: ffffffffffffffda RBX: 00007fa471825fa0 RCX: 00007fa47159de59 [ 669.006800][T19802] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 669.006812][T19802] RBP: 00007fa4724f1090 R08: 0000000000000000 R09: 0000000000000000 [ 669.006824][T19802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 669.006837][T19802] R13: 00007fa471826038 R14: 00007fa471825fa0 R15: 00007ffd2fa08328 [ 669.006864][T19802] [ 669.504006][T19806] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3312'. [ 669.561972][T19566] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 669.577871][T19566] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 669.589421][T19566] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 669.621763][ T14] bond18: (slave bridge15): failed to get link speed/duplex [ 669.639284][T19815] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3313'. [ 669.924271][T19566] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 669.939159][T19566] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 669.961581][T19566] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 670.011189][T19830] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3318'. [ 670.042901][T19830] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3318'. [ 670.101222][ T14] bond18: (slave bridge15): failed to get link speed/duplex [ 670.179009][T19566] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 670.189848][T19566] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 670.200668][T19566] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 670.312928][T19836] syzkaller1: entered promiscuous mode [ 670.318637][T19836] syzkaller1: entered allmulticast mode [ 670.379940][ T5626] Bluetooth: hci2: command tx timeout [ 670.393391][T19566] netdevsim netdevsim0 €Â (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 670.403927][T19566] netdevsim netdevsim0 €Â (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 670.416358][T19566] netdevsim netdevsim0 €Â (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 670.446980][T19846] FAULT_INJECTION: forcing a failure. [ 670.446980][T19846] name failslab, interval 1, probability 0, space 0, times 0 [ 670.468388][T19846] CPU: 1 UID: 0 PID: 19846 Comm: syz.4.3322 Not tainted syzkaller #0 PREEMPT(full) [ 670.468415][T19846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 670.468426][T19846] Call Trace: [ 670.468433][T19846] [ 670.468441][T19846] dump_stack_lvl+0xe8/0x150 [ 670.468472][T19846] should_fail_ex+0x40c/0x560 [ 670.468504][T19846] should_failslab+0xa8/0x100 [ 670.468528][T19846] __kmalloc_noprof+0xfe/0x720 [ 670.468558][T19846] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 670.468587][T19846] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 670.468622][T19846] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 670.468656][T19846] genl_family_rcv_msg_doit+0xda/0x340 [ 670.468690][T19846] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 670.468725][T19846] ? apparmor_capable+0x126/0x170 [ 670.468848][T19846] ? bpf_lsm_capable+0x9/0x20 [ 670.468867][T19846] ? security_capable+0x7e/0x2c0 [ 670.468943][T19846] genl_rcv_msg+0x614/0x7a0 [ 670.468976][T19846] ? __pfx_genl_rcv_msg+0x10/0x10 [ 670.469000][T19846] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 670.469091][T19846] ? __pfx_nl80211_set_wiphy+0x10/0x10 [ 670.469114][T19846] ? __pfx_nl80211_post_doit+0x10/0x10 [ 670.469137][T19846] ? __pfx_ref_tracker_free+0x10/0x10 [ 670.469175][T19846] netlink_rcv_skb+0x226/0x4a0 [ 670.469198][T19846] ? __pfx_genl_rcv_msg+0x10/0x10 [ 670.469226][T19846] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 670.469270][T19846] ? down_read+0x2be/0x330 [ 670.469294][T19846] genl_rcv+0x28/0x40 [ 670.469318][T19846] netlink_unicast+0x7bb/0x940 [ 670.469349][T19846] netlink_sendmsg+0x813/0xb40 [ 670.469380][T19846] ? __pfx_netlink_sendmsg+0x10/0x10 [ 670.469406][T19846] ? aa_sock_msg_perm+0xf1/0x1b0 [ 670.469435][T19846] ? __pfx_netlink_sendmsg+0x10/0x10 [ 670.469455][T19846] sock_sendmsg_nosec+0x13a/0x180 [ 670.469484][T19846] ____sys_sendmsg+0x54e/0x850 [ 670.469509][T19846] ? __pfx_____sys_sendmsg+0x10/0x10 [ 670.469537][T19846] ? import_iovec+0x73/0xa0 [ 670.469559][T19846] ___sys_sendmsg+0x2a5/0x360 [ 670.469578][T19846] ? __lock_acquire+0x683/0x2cf0 [ 670.469603][T19846] ? __pfx____sys_sendmsg+0x10/0x10 [ 670.469658][T19846] ? __fget_files+0x2a/0x420 [ 670.469676][T19846] ? __fget_files+0x3a2/0x420 [ 670.469705][T19846] __x64_sys_sendmsg+0x1b1/0x290 [ 670.469730][T19846] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 670.469765][T19846] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.469785][T19846] do_syscall_64+0x174/0x580 [ 670.469801][T19846] ? trace_irq_disable+0x3b/0x140 [ 670.469818][T19846] ? clear_bhb_loop+0x40/0x90 [ 670.469840][T19846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.469859][T19846] RIP: 0033:0x7fa47159de59 [ 670.469877][T19846] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 670.469893][T19846] RSP: 002b:00007fa4724f1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 670.469914][T19846] RAX: ffffffffffffffda RBX: 00007fa471825fa0 RCX: 00007fa47159de59 [ 670.469927][T19846] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 670.469939][T19846] RBP: 00007fa4724f1090 R08: 0000000000000000 R09: 0000000000000000 [ 670.469951][T19846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 670.469962][T19846] R13: 00007fa471826038 R14: 00007fa471825fa0 R15: 00007ffd2fa08328 [ 670.469993][T19846] [ 670.805283][T19830] syzkaller1: left promiscuous mode [ 670.877667][T19830] syzkaller1: left allmulticast mode [ 670.942936][T19848] bridge0: port 1(bridge_slave_0) entered disabled state [ 671.014284][ T1126] bond18: (slave bridge15): failed to get link speed/duplex [ 671.176845][T19566] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 671.197566][T19566] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 671.214944][T19566] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 671.272836][T19566] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 671.290767][T12576] bond18: (slave bridge15): failed to get link speed/duplex [ 671.299146][T19566] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 671.364768][T19566] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 671.382643][T19566] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 671.399309][T19566] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 671.642685][T19872] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3329'. [ 671.700456][T12576] bond18: (slave bridge15): failed to get link speed/duplex [ 671.861322][ T7205] bond18: (slave bridge15): failed to get link speed/duplex [ 671.886525][T19882] FAULT_INJECTION: forcing a failure. [ 671.886525][T19882] name failslab, interval 1, probability 0, space 0, times 0 [ 671.920236][T19566] 8021q: adding VLAN 0 to HW filter on device bond0 [ 671.943158][T19882] CPU: 1 UID: 0 PID: 19882 Comm: syz.1.3332 Not tainted syzkaller #0 PREEMPT(full) [ 671.943186][T19882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 671.943197][T19882] Call Trace: [ 671.943205][T19882] [ 671.943213][T19882] dump_stack_lvl+0xe8/0x150 [ 671.943242][T19882] should_fail_ex+0x40c/0x560 [ 671.943273][T19882] should_failslab+0xa8/0x100 [ 671.943298][T19882] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 671.943324][T19882] ? local_lock_release+0x9c/0x160 [ 671.943355][T19882] ? __alloc_skb+0x1d7/0x7a0 [ 671.943369][T19882] ? __alloc_skb+0x1d7/0x7a0 [ 671.943393][T19882] __alloc_skb+0x1d7/0x7a0 [ 671.943414][T19882] netlink_ack+0x136/0xb30 [ 671.943434][T19882] ? __pfx_genl_rcv_msg+0x10/0x10 [ 671.943460][T19882] ? __pfx_nl80211_post_doit+0x10/0x10 [ 671.943498][T19882] netlink_rcv_skb+0x2a4/0x4a0 [ 671.943520][T19882] ? __pfx_genl_rcv_msg+0x10/0x10 [ 671.943549][T19882] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 671.943584][T19882] ? down_read+0x2be/0x330 [ 671.943608][T19882] genl_rcv+0x28/0x40 [ 671.943631][T19882] netlink_unicast+0x7bb/0x940 [ 671.943669][T19882] netlink_sendmsg+0x813/0xb40 [ 671.943701][T19882] ? __pfx_netlink_sendmsg+0x10/0x10 [ 671.943727][T19882] ? aa_sock_msg_perm+0xf1/0x1b0 [ 671.943755][T19882] ? __pfx_netlink_sendmsg+0x10/0x10 [ 671.943776][T19882] sock_sendmsg_nosec+0x13a/0x180 [ 671.943805][T19882] ____sys_sendmsg+0x54e/0x850 [ 671.943831][T19882] ? __pfx_____sys_sendmsg+0x10/0x10 [ 671.943861][T19882] ? import_iovec+0x73/0xa0 [ 671.943885][T19882] ___sys_sendmsg+0x2a5/0x360 [ 671.943905][T19882] ? __lock_acquire+0x683/0x2cf0 [ 671.943929][T19882] ? __pfx____sys_sendmsg+0x10/0x10 [ 671.943986][T19882] ? __fget_files+0x2a/0x420 [ 671.944003][T19882] ? __fget_files+0x3a2/0x420 [ 671.944032][T19882] __x64_sys_sendmsg+0x1b1/0x290 [ 671.944051][T19882] ? sched_clock+0x3f/0x60 [ 671.944115][T19882] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 671.944154][T19882] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 671.944174][T19882] do_syscall_64+0x174/0x580 [ 671.944194][T19882] ? clear_bhb_loop+0x40/0x90 [ 671.944217][T19882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 671.944236][T19882] RIP: 0033:0x7febdc19de59 [ 671.944254][T19882] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 671.944270][T19882] RSP: 002b:00007febdcff5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 671.944291][T19882] RAX: ffffffffffffffda RBX: 00007febdc425fa0 RCX: 00007febdc19de59 [ 671.944305][T19882] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 671.944318][T19882] RBP: 00007febdcff5090 R08: 0000000000000000 R09: 0000000000000000 [ 671.944329][T19882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 671.944341][T19882] R13: 00007febdc426038 R14: 00007febdc425fa0 R15: 00007ffffc6e7e28 [ 671.944372][T19882] [ 671.976508][T19566] 8021q: adding VLAN 0 to HW filter on device team0 [ 672.278914][T19873] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3330'. [ 672.350657][T19887] syzkaller1: entered promiscuous mode [ 672.500529][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 672.507822][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 672.550458][T12561] bond18: (slave bridge15): failed to get link speed/duplex [ 672.581122][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 672.588305][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 672.671695][ T47] bond18: (slave bridge15): failed to get link speed/duplex [ 672.853600][ T47] bond18: (slave bridge15): failed to get link speed/duplex [ 672.923420][ T1126] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 672.986588][T12576] bond18: (slave bridge15): failed to get link speed/duplex [ 673.121409][T12576] bond18: (slave bridge15): failed to get link speed/duplex [ 673.364150][ T1102] bond18: (slave bridge15): failed to get link speed/duplex [ 673.491050][T12576] bond18: (slave bridge15): failed to get link speed/duplex [ 673.537247][T19947] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3343'. [ 673.618914][T19566] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 673.656351][T19950] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3344'. [ 673.710478][T19566] veth0_vlan: entered promiscuous mode [ 673.720828][T12576] bond18: (slave bridge15): failed to get link speed/duplex [ 673.737965][T19566] veth1_vlan: entered promiscuous mode [ 673.744581][T19953] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3344'. [ 673.766824][T19953] unsupported nla_type 28861 [ 673.814960][T19566] veth0_macvtap: entered promiscuous mode [ 673.842925][T19566] veth1_macvtap: entered promiscuous mode [ 673.877028][T19566] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 673.907088][T19566] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 673.937919][ T1102] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.948037][ T1102] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.958965][ T1102] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.970865][T12576] bond18: (slave bridge15): failed to get link speed/duplex [ 673.978664][ T47] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.081351][ T47] bond18: (slave bridge15): failed to get link speed/duplex [ 675.716768][T19919] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 675.882383][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 675.895590][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 675.991328][T19967] netlink: 'syz.1.3350': attribute type 83 has an invalid length. [ 676.005466][ T7205] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 676.024306][ T7205] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 676.208236][T19985] netlink: 'syz.4.3354': attribute type 1 has an invalid length. [ 676.697962][T20014] netlink: 'syz.4.3354': attribute type 13 has an invalid length. [ 676.721437][T20014] netlink: 'syz.4.3354': attribute type 17 has an invalid length. [ 676.743584][T20014] netlink: 'syz.4.3354': attribute type 27 has an invalid length. [ 677.025925][T20021] netlink: 'syz.3.3359': attribute type 3 has an invalid length. [ 677.037364][T20007] syzkaller0: entered promiscuous mode [ 677.057634][T20007] syzkaller0: entered allmulticast mode [ 677.093327][T20025] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3359'. [ 677.175169][T20014] bridge0: port 1(bridge_slave_0) entered blocking state [ 677.182536][T20014] bridge0: port 1(bridge_slave_0) entered forwarding state [ 677.388305][T20014] syzkaller0: left promiscuous mode [ 677.398031][T20014] syzkaller0: left allmulticast mode [ 678.941440][ T7211] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.950743][ T7211] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.961927][ T7211] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.390177][ T7211] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.421063][T12561] net_ratelimit: 18 callbacks suppressed [ 686.421085][T12561] bond18: (slave bridge15): failed to get link speed/duplex [ 686.641399][T12567] bond18: (slave bridge15): failed to get link speed/duplex [ 686.792073][T12567] bond18: (slave bridge15): failed to get link speed/duplex [ 686.931747][ T7211] bond18: (slave bridge15): failed to get link speed/duplex [ 687.060102][T12567] bond18: (slave bridge15): failed to get link speed/duplex [ 687.075891][T20073] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3371'. [ 687.149561][T20073] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3371'. [ 687.313939][ T1102] bond18: (slave bridge15): failed to get link speed/duplex [ 687.459935][T12576] bond18: (slave bridge15): failed to get link speed/duplex [ 687.589858][ T7205] bond18: (slave bridge15): failed to get link speed/duplex [ 687.686634][T20089] bond2: option ad_select: invalid value (34) [ 687.726911][T20089] bond2 (unregistering): Released all slaves [ 687.915378][T20100] netlink: 'syz.4.3380': attribute type 1 has an invalid length. [ 687.976945][T20098] netlink: 'syz.3.3379': attribute type 1 has an invalid length. [ 688.081202][T12567] bond18: (slave bridge15): failed to get link speed/duplex [ 688.243852][ T1102] bond18: (slave bridge15): failed to get link speed/duplex [ 688.405343][T20120] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3383'. [ 688.489683][T20120] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3383'. [ 688.600727][T20120] gretap0: entered promiscuous mode [ 688.694568][T20127] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3384'. [ 688.818103][T20120] gretap0: left promiscuous mode [ 689.385393][T20147] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3389'. [ 690.062129][T20171] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3396'. [ 690.085541][T20171] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3396'. [ 690.455801][T20179] sch_tbf: burst 0 is lower than device tunl0 mtu (1280) ! [ 690.745269][T20194] netlink: 'syz.4.3402': attribute type 1 has an invalid length. [ 691.327044][T20214] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3407'. [ 691.414444][T20214] xfrm1: entered promiscuous mode [ 691.435822][T20214] xfrm1: entered allmulticast mode [ 691.452518][T20215] net_ratelimit: 15 callbacks suppressed [ 691.452538][T20215] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 691.537353][T20214] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 691.641281][T12561] bond18: (slave bridge15): failed to get link speed/duplex [ 691.675186][T20223] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3410'. [ 691.782233][T12561] bond18: (slave bridge15): failed to get link speed/duplex [ 691.902420][ T7211] bond18: (slave bridge15): failed to get link speed/duplex [ 691.942822][ T7211] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 691.983351][ T7211] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 692.111848][T19900] IPVS: starting estimator thread 0... [ 692.130230][ T7211] bond18: (slave bridge15): failed to get link speed/duplex [ 692.165331][T20241] __nla_validate_parse: 2 callbacks suppressed [ 692.165350][T20241] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3411'. [ 692.212952][T20240] IPVS: using max 34 ests per chain, 81600 per kthread [ 692.250012][ T1102] bond18: (slave bridge15): failed to get link speed/duplex [ 692.369968][T12561] bond18: (slave bridge15): failed to get link speed/duplex [ 692.374465][T20241] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 692.814643][T20255] 8021q: adding VLAN 0 to HW filter on device bond0 [ 692.823568][T20255] 8021q: adding VLAN 0 to HW filter on device team0 [ 692.875604][T20255] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 692.948090][T20255] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 692.969010][T20255] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 692.996679][T20255] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 693.050960][T12576] bond18: (slave bridge15): failed to get link speed/duplex [ 693.225796][ T1102] bridge0: port 1(bridge_slave_0) entered blocking state [ 693.233266][ T1102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 693.291856][ T1102] bridge0: port 2(bridge_slave_1) entered blocking state [ 693.299092][ T1102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 693.470843][ T1102] bond18: (slave bridge15): failed to get link speed/duplex [ 693.638877][T20271] netlink: 'syz.2.3421': attribute type 13 has an invalid length. [ 693.721592][T20271] netlink: 'syz.2.3421': attribute type 17 has an invalid length. [ 693.811718][T20274] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3421'. [ 694.247534][ T5626] block nbd4: Receive control failed (result -32) [ 694.733395][T20271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 694.775069][T20271] 8021q: adding VLAN 0 to HW filter on device team0 [ 694.826640][T20271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 694.948345][ T1102] wlan1: Trigger new scan to find an IBSS to join [ 695.052524][T20271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 695.075770][T20271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 695.129101][T20271] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 695.150698][T20271] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 695.180669][T20271] veth1_vlan: left promiscuous mode [ 695.197691][T20271] veth0_vlan: left promiscuous mode [ 695.213625][T20271] veth0_vlan: entered promiscuous mode [ 695.234103][T20271] veth1_vlan: entered promiscuous mode [ 695.255874][T20271] veth1_macvtap: left promiscuous mode [ 695.301624][T20271] veth0_macvtap: left promiscuous mode [ 695.327197][T20271] veth0_macvtap: entered promiscuous mode [ 695.364326][T20271] veth1_macvtap: entered promiscuous mode [ 695.398528][T20271] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 695.441008][T20271] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 695.456054][T20271] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 695.470778][T20271] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 695.487943][T20271] 8021q: adding VLAN 0 to HW filter on device bond1 [ 695.508673][T20271] xfrm1: left promiscuous mode [ 695.529110][T20271] xfrm1: left allmulticast mode [ 695.548660][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 695.555910][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 695.583357][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 695.591170][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 695.777985][T12561] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.787919][T20295] netlink: 136 bytes leftover after parsing attributes in process `syz.2.3426'. [ 695.797076][T12561] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.797118][T12561] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.797187][T12561] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 696.075245][T20303] netlink: 'syz.0.3427': attribute type 1 has an invalid length. [ 696.089513][T20304] netlink: 180 bytes leftover after parsing attributes in process `syz.3.3429'. [ 696.117982][T20303] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3427'. [ 696.137943][T20303] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3427'. [ 696.411542][T20314] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3431'. [ 696.455323][T20314] nbd: couldn't find a device at index 65546 [ 696.467498][ T7211] net_ratelimit: 8 callbacks suppressed [ 696.467519][ T7211] bond18: (slave bridge15): failed to get link speed/duplex [ 696.473348][T20317] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3432'. [ 696.696369][T12567] bond18: (slave bridge15): failed to get link speed/duplex [ 697.024443][T20328] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3434'. [ 697.121019][ T7205] bond18: (slave bridge15): failed to get link speed/duplex [ 697.592120][ T14] bond18: (slave bridge15): failed to get link speed/duplex [ 697.760971][ T47] bond18: (slave bridge15): failed to get link speed/duplex [ 697.825313][T20341] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 697.905864][ T7211] bond18: (slave bridge15): failed to get link speed/duplex [ 698.043672][T12567] bond18: (slave bridge15): failed to get link speed/duplex [ 698.200019][ T7211] bond18: (slave bridge15): failed to get link speed/duplex [ 698.407274][ T14] bond18: (slave bridge15): failed to get link speed/duplex [ 698.592508][T20366] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3447'. [ 698.606724][T20363] bond1: option lacp_active: invalid value (5) [ 698.673582][T20363] bond1 (unregistering): Released all slaves [ 699.174227][T20365] netlink: 'syz.3.3445': attribute type 4 has an invalid length. [ 699.914629][ T7205] wlan1: Trigger new scan to find an IBSS to join [ 700.851907][T12567] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 701.115980][T20354] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 701.705854][T20383] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3448'. [ 701.742534][ T7211] net_ratelimit: 15 callbacks suppressed [ 701.742552][ T7211] bond18: (slave bridge15): failed to get link speed/duplex [ 701.822382][T20389] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3450'. [ 701.841540][T20388] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3451'. [ 702.423225][T20388] bond2: entered promiscuous mode [ 702.454151][T20388] 8021q: adding VLAN 0 to HW filter on device bond2 [ 702.570581][T20410] xt_hashlimit: size too large, truncated to 1048576 [ 702.601503][T20392] ipvlan2: entered allmulticast mode [ 702.612368][T20392] bond2: entered allmulticast mode [ 702.651693][T20408] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3455'. [ 702.674507][ T14] bond18: (slave bridge15): failed to get link speed/duplex [ 702.826519][T12561] bond18: (slave bridge15): failed to get link speed/duplex [ 702.847820][T20419] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3457'. [ 702.893374][T20421] netlink: 'syz.2.3458': attribute type 11 has an invalid length. [ 702.910406][T20421] netlink: 'syz.2.3458': attribute type 11 has an invalid length. [ 702.926098][T20421] netlink: 228 bytes leftover after parsing attributes in process `syz.2.3458'. [ 703.004890][ T47] bond18: (slave bridge15): failed to get link speed/duplex [ 703.032557][T20421] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 703.132824][T12561] bond18: (slave bridge15): failed to get link speed/duplex [ 703.177720][T20426] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3459'. [ 703.281055][ T7205] bond18: (slave bridge15): failed to get link speed/duplex [ 703.411193][T12576] bond18: (slave bridge15): failed to get link speed/duplex [ 703.550428][ T47] bond18: (slave bridge15): failed to get link speed/duplex [ 703.651090][T20447] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3463'. [ 703.665310][T20447] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3463'. [ 703.675549][T20447] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 703.736991][T20450] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3462'. [ 703.951248][T20455] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3466'. [ 704.330123][T20442] bridge0: port 2(bridge_slave_1) entered disabled state [ 704.337558][T20442] bridge0: port 1(bridge_slave_0) entered disabled state [ 705.047177][T20442] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 705.110195][T20442] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 706.300071][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 706.334966][T20453] ip6tnl2: entered allmulticast mode [ 706.418170][ T14] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 706.468831][ T14] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 706.573876][T20469] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3468'. [ 706.642847][ T14] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 706.687206][ T14] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 706.753726][ T14] net_ratelimit: 3 callbacks suppressed [ 706.753748][ T14] bond18: (slave bridge15): failed to get link speed/duplex [ 706.856249][T20472] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 706.921689][T12561] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 706.962424][T12561] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 706.970960][T19900] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 707.020717][T12567] bond18: (slave bridge15): failed to get link speed/duplex [ 707.155135][T12576] bond18: (slave bridge15): failed to get link speed/duplex [ 707.243242][T20490] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3476'. [ 707.290597][ T7211] bond18: (slave bridge15): failed to get link speed/duplex [ 707.410008][T19900] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 707.427930][T20498] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3478'. [ 707.454102][T20499] netlink: 'syz.4.3479': attribute type 10 has an invalid length. [ 707.477329][ T5746] IPVS: starting estimator thread 0... [ 707.492441][T20499] sctp: [Deprecated]: syz.4.3479 (pid 20499) Use of int in maxseg socket option. [ 707.492441][T20499] Use struct sctp_assoc_value instead [ 707.498759][T20498] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3478'. [ 707.517938][ T14] bond18: (slave bridge15): failed to get link speed/duplex [ 707.620495][T20500] IPVS: using max 27 ests per chain, 64800 per kthread [ 707.679865][T12567] bond18: (slave bridge15): failed to get link speed/duplex [ 707.797441][T20513] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3483'. [ 707.880143][ T14] bond18: (slave bridge15): failed to get link speed/duplex [ 707.980660][ T7673] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 708.039884][T12567] bond18: (slave bridge15): failed to get link speed/duplex [ 708.117010][T20518] tipc: Started in network mode [ 708.147702][T20518] tipc: Node identity , cluster identity 4711 [ 708.177247][T20518] tipc: Failed to obtain node identity [ 708.203325][T20518] tipc: Enabling of bearer rejected, failed to enable media [ 708.260867][ T7211] bond18: (slave bridge15): failed to get link speed/duplex [ 708.390413][ T14] bond18: (slave bridge15): failed to get link speed/duplex [ 708.460851][T20536] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3490'. [ 709.008106][T20555] netlink: 'syz.4.3495': attribute type 13 has an invalid length. [ 709.694767][T20573] bridge0: port 2(bridge_slave_1) entered disabled state [ 709.702572][T20573] bridge0: port 1(bridge_slave_0) entered disabled state [ 710.082763][T20573] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 710.127413][T20573] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 710.158115][T20591] __nla_validate_parse: 1 callbacks suppressed [ 710.158133][T20591] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3504'. [ 710.562813][T20575] macvtap1: entered promiscuous mode [ 710.574718][T20575] vlan0: entered promiscuous mode [ 710.586996][T20575] vlan0: left promiscuous mode [ 710.689189][T12576] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.735546][T12576] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.777229][T12576] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.929903][T12576] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.133182][T20616] bond3: option tlb_dynamic_lb: mode dependency failed, not supported in mode active-backup(1) [ 711.175334][T20616] bond3 (unregistering): Released all slaves [ 711.222701][T20619] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3510'. [ 711.264767][T20621] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3512'. [ 711.428778][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 711.594786][T20628] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3514'. [ 711.731868][T20631] IPVS: persistence engine module ip_vs_pe_À not found [ 711.770948][ T14] net_ratelimit: 10 callbacks suppressed [ 711.770969][ T14] bond18: (slave bridge15): failed to get link speed/duplex [ 711.929975][T12576] bond18: (slave bridge15): failed to get link speed/duplex [ 712.055066][ T47] bond18: (slave bridge15): failed to get link speed/duplex [ 712.230887][ T57] bond18: (slave bridge15): failed to get link speed/duplex [ 712.248886][T20645] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3517'. [ 712.289480][T20645] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3517'. [ 712.358172][T20654] ipvlan0: Caught tx_queue_len zero misconfig [ 712.751153][ T7211] bond18: (slave bridge15): failed to get link speed/duplex [ 712.881907][T12567] bond18: (slave bridge15): failed to get link speed/duplex [ 713.034611][ T47] bond18: (slave bridge15): failed to get link speed/duplex [ 713.201124][ T47] bond18: (slave bridge15): failed to get link speed/duplex [ 713.370752][T12576] bond18: (slave bridge15): failed to get link speed/duplex [ 713.500075][ T5626] Bluetooth: hci5: command 0x0406 tx timeout [ 713.677790][T20681] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3525'. [ 713.705713][T20681] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3525'. [ 713.727489][T20679] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3525'. [ 713.737706][ T7211] bond18: (slave bridge15): failed to get link speed/duplex [ 716.065981][T20740] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3535'. [ 716.128685][T20701] netlink: 'syz.4.3528': attribute type 32 has an invalid length. [ 716.183392][T20696] tipc: Started in network mode [ 716.236968][T20696] tipc: Node identity , cluster identity 4711 [ 716.286253][T20696] tipc: Failed to obtain node identity [ 716.335201][T20696] tipc: Enabling of bearer rejected, failed to enable media [ 716.540519][ C1] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 716.830438][ T9037] net_ratelimit: 15 callbacks suppressed [ 716.830459][ T9037] bond18: (slave bridge15): failed to get link speed/duplex [ 716.909251][T20759] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3539'. [ 716.948503][T20759] nbd: socks must be embedded in a SOCK_ITEM attr [ 717.025118][T20759] netlink: 'syz.1.3539': attribute type 1 has an invalid length. [ 717.032030][ T7205] bond18: (slave bridge15): failed to get link speed/duplex [ 717.060095][T20759] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3539'. [ 717.171375][ T7205] bond18: (slave bridge15): failed to get link speed/duplex [ 717.311336][T12561] bond18: (slave bridge15): failed to get link speed/duplex [ 717.440764][ T47] bond18: (slave bridge15): failed to get link speed/duplex [ 717.590879][ T7211] bond18: (slave bridge15): failed to get link speed/duplex [ 717.743070][ T7211] bond18: (slave bridge15): failed to get link speed/duplex [ 717.898886][T20787] netlink: 'syz.3.3544': attribute type 1 has an invalid length. [ 718.321083][T20787] 8021q: adding VLAN 0 to HW filter on device bond1 [ 718.421157][T20791] vti0: entered promiscuous mode [ 718.525754][T20792] bond1: entered promiscuous mode [ 718.563502][T20792] bond1: entered allmulticast mode [ 718.933156][ T47] bond18: (slave bridge15): failed to get link speed/duplex [ 719.091478][ T47] bond18: (slave bridge15): failed to get link speed/duplex [ 719.123327][T20816] netlink: 'syz.3.3551': attribute type 32 has an invalid length. [ 719.261520][ T9037] bond18: (slave bridge15): failed to get link speed/duplex [ 719.504538][T20827] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3553'. [ 719.956026][T20834] netlink: 204 bytes leftover after parsing attributes in process `syz.1.3555'. [ 720.141874][T19900] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 720.410317][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 720.632365][ T5821] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 720.768554][T20847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 720.781220][T20847] 8021q: adding VLAN 0 to HW filter on device team0 [ 720.851371][T20847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 721.106178][T20847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 721.242537][T20859] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3561'. [ 721.259198][T20860] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3560'. [ 721.283731][T20859] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3561'. [ 721.301179][T20847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 721.331155][T20847] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 721.366414][T20862] xt_TPROXY: Can be used only with -p tcp or -p udp [ 721.378364][T20863] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3561'. [ 721.424737][T20847] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 721.441357][T20847] veth1_vlan: left promiscuous mode [ 721.448183][T20847] veth0_vlan: left promiscuous mode [ 721.479840][T20847] veth0_vlan: entered promiscuous mode [ 721.488939][T20847] veth1_vlan: entered promiscuous mode [ 721.500785][T20847] veth1_macvtap: left promiscuous mode [ 721.507781][T20847] veth0_macvtap: left promiscuous mode [ 721.514689][T20847] veth0_macvtap: entered promiscuous mode [ 721.521833][T20847] veth1_macvtap: entered promiscuous mode [ 721.534845][T20847] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 721.544036][T20847] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 721.553068][T20847] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 721.561628][T20847] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 721.882111][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 721.890337][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 721.940500][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 721.950685][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 722.281908][T20858] ip6tnl1: entered allmulticast mode [ 722.294411][T12561] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 722.333378][T12561] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 722.435300][T12561] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 722.444072][T12561] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 722.485168][ T7205] net_ratelimit: 2 callbacks suppressed [ 722.485187][ T7205] bond18: (slave bridge15): failed to get link speed/duplex [ 722.606274][ T57] bond18: (slave bridge15): failed to get link speed/duplex [ 723.017260][T20883] syzkaller0: entered promiscuous mode [ 723.030368][T20883] syzkaller0: entered allmulticast mode [ 723.040985][ T7205] bond18: (slave bridge15): failed to get link speed/duplex [ 723.073535][T20894] xt_limit: Overflow, try lower: 324382443/0 [ 731.698159][ T14] bond18: (slave bridge15): failed to get link speed/duplex [ 732.146434][ T57] bond18: (slave bridge15): failed to get link speed/duplex [ 732.495831][T20930] netlink: 'syz.1.3576': attribute type 13 has an invalid length. [ 732.535463][T20930] netlink: 'syz.1.3576': attribute type 17 has an invalid length. [ 732.920469][T20927] bridge0: port 2(bridge_slave_1) entered disabled state [ 732.928755][T20927] bridge0: port 1(bridge_slave_0) entered disabled state [ 733.347092][T20927] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 733.397910][T20927] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 733.493215][T20927] geneve0: left promiscuous mode [ 733.846817][T20930] 8021q: adding VLAN 0 to HW filter on device bond0 [ 733.917706][T20930] 8021q: adding VLAN 0 to HW filter on device team0 [ 734.015548][T20930] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 734.062663][T20958] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3580'. [ 734.204170][T20962] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3580'. [ 734.221407][T20930] bridge0: port 1(bridge_slave_0) entered blocking state [ 734.229558][T20930] bridge0: port 1(bridge_slave_0) entered forwarding state [ 734.257356][T20930] bridge0: port 2(bridge_slave_1) entered blocking state [ 734.264656][T20930] bridge0: port 2(bridge_slave_1) entered forwarding state [ 734.285521][T20930] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 734.377989][T20930] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 734.385719][T20930] xfrm0: left allmulticast mode [ 734.446184][T20930] veth1_vlan: left promiscuous mode [ 734.453325][T20930] veth0_vlan: left promiscuous mode [ 734.497255][T20930] veth0_vlan: entered promiscuous mode [ 734.505416][T20930] veth1_vlan: entered promiscuous mode [ 734.515842][T20930] veth1_macvtap: left promiscuous mode [ 734.522703][T20930] veth0_macvtap: left promiscuous mode [ 734.529606][T20930] veth0_macvtap: entered promiscuous mode [ 734.536767][T20930] veth1_macvtap: entered promiscuous mode [ 734.748812][T20930] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 734.774967][T20930] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 734.783561][T20930] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 734.834752][T20930] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 734.936617][T20930] 8021q: adding VLAN 0 to HW filter on device bond1 [ 734.955297][T20930] geneve0: entered promiscuous mode [ 734.960876][T20930] macvlan2: left promiscuous mode [ 734.975071][T20930] 8021q: adding VLAN 0 to HW filter on device bond2 [ 735.367780][T20930] ip6tnl1: left allmulticast mode [ 735.400724][ T7211] bridge0: port 3(veth0_virt_wifi) entered blocking state [ 735.407991][ T7211] bridge0: port 3(veth0_virt_wifi) entered forwarding state [ 735.478815][ T9037] bond18: (slave bridge15): failed to get link speed/duplex [ 735.608252][T20960] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 735.657402][T20981] netlink: 'syz.0.3584': attribute type 5 has an invalid length. [ 735.673286][T20981] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3584'. [ 735.728093][T20965] tipc: Enabling of bearer rejected, failed to enable media [ 735.741602][ T1126] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.756821][ T1126] bond18: (slave bridge15): failed to get link speed/duplex [ 735.843569][ T1102] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.879256][ T1102] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.920680][ T14] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 736.054479][T12561] bond18: (slave bridge15): failed to get link speed/duplex [ 736.139603][ T47] bond18: (slave bridge15): failed to get link speed/duplex [ 736.210544][T20992] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3587'. [ 736.463131][ T47] bond18: (slave bridge15): failed to get link speed/duplex [ 736.635924][ T14] bond18: (slave bridge15): failed to get link speed/duplex [ 736.708993][T21008] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3592'. [ 736.715041][T21007] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3591'. [ 736.757065][T21007] netlink: 'syz.0.3591': attribute type 1 has an invalid length. [ 737.130862][ C1] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 737.227725][T21015] xt_l2tp: wrong L2TP version: 0 [ 737.239398][ T1102] bond18: (slave bridge15): failed to get link speed/duplex [ 737.463132][ T14] bond18: (slave bridge15): failed to get link speed/duplex [ 737.699904][T21020] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3595'. [ 737.746471][T21025] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3596'. [ 737.813199][ T47] bond18: (slave bridge15): failed to get link speed/duplex [ 737.864523][T21020] x_tables: duplicate underflow at hook 1 [ 737.937867][ T1126] bond18: (slave bridge15): failed to get link speed/duplex [ 738.018278][ T1102] bond18: (slave bridge15): failed to get link speed/duplex [ 738.053206][T21031] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3598'. [ 738.154480][ T14] bond18: (slave bridge15): failed to get link speed/duplex [ 738.262970][ T1126] bond18: (slave bridge15): failed to get link speed/duplex [ 738.340231][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 738.516657][ T9037] bond18: (slave bridge15): failed to get link speed/duplex [ 738.720937][ T1126] bond18: (slave bridge15): failed to get link speed/duplex [ 738.803411][T21051] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3606'. [ 740.689117][T21096] netlink: 'syz.2.3612': attribute type 3 has an invalid length. [ 740.896794][ T7205] bond18: (slave bridge15): failed to get link speed/duplex [ 741.014855][T21099] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3613'. [ 741.049270][T21099] erspan0: entered promiscuous mode [ 741.142843][T21099] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3613'. [ 741.236923][T21104] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3614'. [ 741.526269][T21110] veth0: entered promiscuous mode [ 741.661082][T21110] vlan2: entered promiscuous mode [ 742.119676][T21123] bond0: Caught tx_queue_len zero misconfig [ 742.380318][T12561] net_ratelimit: 9 callbacks suppressed [ 742.380354][T12561] bond18: (slave bridge15): failed to get link speed/duplex [ 742.608290][T21142] Cannot find del_set index 1 as target [ 742.775377][ T7205] bond18: (slave bridge15): failed to get link speed/duplex [ 742.860366][T21146] netlink: 'syz.4.3627': attribute type 1 has an invalid length. [ 742.880253][ T7205] bond18: (slave bridge15): failed to get link speed/duplex [ 742.993093][ T9035] bond18: (slave bridge15): failed to get link speed/duplex [ 743.153716][T21146] 8021q: adding VLAN 0 to HW filter on device bond1 [ 743.247699][ T9035] bond18: (slave bridge15): failed to get link speed/duplex [ 743.467275][ T9035] bond18: (slave bridge15): failed to get link speed/duplex [ 743.713094][ T47] bond18: (slave bridge15): failed to get link speed/duplex [ 743.824965][ T9035] bond18: (slave bridge15): failed to get link speed/duplex [ 743.994100][ T47] bond18: (slave bridge15): failed to get link speed/duplex [ 744.361146][ T9037] bond18: (slave bridge15): failed to get link speed/duplex [ 745.006197][T21210] ip6erspan0: entered allmulticast mode [ 745.224272][T21221] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3638'. [ 745.250916][ T7211] nci: nci_ntf_packet: unsupported ntf opcode 0xf00 [ 745.698935][T21216] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 746.110582][T21233] syz.2.3643: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 746.181345][T21233] CPU: 0 UID: 0 PID: 21233 Comm: syz.2.3643 Not tainted syzkaller #0 PREEMPT(full) [ 746.181374][T21233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 746.181385][T21233] Call Trace: [ 746.181392][T21233] [ 746.181400][T21233] dump_stack_lvl+0xe8/0x150 [ 746.181431][T21233] warn_alloc+0x24c/0x270 [ 746.181462][T21233] ? stack_depot_save_flags+0x33/0x800 [ 746.181494][T21233] ? __pfx_warn_alloc+0x10/0x10 [ 746.181523][T21233] ? kasan_save_track+0x3e/0x80 [ 746.181540][T21233] ? __kasan_kmalloc+0x93/0xb0 [ 746.181559][T21233] ? xsk_setsockopt+0x52a/0x960 [ 746.181586][T21233] ? do_sock_setsockopt+0x17c/0x1b0 [ 746.181603][T21233] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 746.181621][T21233] ? do_syscall_64+0x174/0x580 [ 746.181638][T21233] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 746.181666][T21233] __vmalloc_node_range_noprof+0x12c/0x1730 [ 746.181723][T21233] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 746.181755][T21233] ? __kasan_kmalloc+0x93/0xb0 [ 746.181775][T21233] ? __kmalloc_cache_noprof+0x32d/0x660 [ 746.181803][T21233] ? __kmalloc_cache_noprof+0x150/0x660 [ 746.181835][T21233] vmalloc_user_noprof+0xad/0xe0 [ 746.181862][T21233] ? xskq_create+0xbf/0x170 [ 746.181889][T21233] xskq_create+0xbf/0x170 [ 746.181925][T21233] xsk_init_queue+0x8a/0xe0 [ 746.181954][T21233] xsk_setsockopt+0x52a/0x960 [ 746.181979][T21233] ? __pfx_xsk_setsockopt+0x10/0x10 [ 746.182004][T21233] ? __pfx_aa_sk_perm+0x10/0x10 [ 746.182031][T21233] ? aa_sock_opt_perm+0xff/0x1a0 [ 746.182057][T21233] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 746.182082][T21233] ? __pfx_xsk_setsockopt+0x10/0x10 [ 746.182106][T21233] do_sock_setsockopt+0x17c/0x1b0 [ 746.182130][T21233] __x64_sys_setsockopt+0x13d/0x1b0 [ 746.182152][T21233] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 746.182173][T21233] do_syscall_64+0x174/0x580 [ 746.182191][T21233] ? clear_bhb_loop+0x40/0x90 [ 746.182215][T21233] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 746.182233][T21233] RIP: 0033:0x7fc1a9b9de59 [ 746.182251][T21233] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 746.182267][T21233] RSP: 002b:00007fc1aaa82028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 746.182287][T21233] RAX: ffffffffffffffda RBX: 00007fc1a9e25fa0 RCX: 00007fc1a9b9de59 [ 746.182300][T21233] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 746.182311][T21233] RBP: 00007fc1a9c33e6f R08: 0000000000000004 R09: 0000000000000000 [ 746.182323][T21233] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 746.182335][T21233] R13: 00007fc1a9e26038 R14: 00007fc1a9e25fa0 R15: 00007fff5cc70798 [ 746.182366][T21233] [ 746.182503][T21233] Mem-Info: [ 746.271416][T21223] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3640'. [ 746.516124][T21233] active_anon:10572 inactive_anon:2075 isolated_anon:0 [ 746.516124][T21233] active_file:493 inactive_file:30851 isolated_file:0 [ 746.516124][T21233] unevictable:3929 dirty:223 writeback:0 [ 746.516124][T21233] slab_reclaimable:8994 slab_unreclaimable:275089 [ 746.516124][T21233] mapped:33860 shmem:5883 pagetables:1571 [ 746.516124][T21233] sec_pagetables:0 bounce:0 [ 746.516124][T21233] kernel_misc_reclaimable:0 [ 746.516124][T21233] free:544301 free_pcp:30583 free_cma:0 [ 746.737712][T21233] Node 0 active_anon:39948kB inactive_anon:8300kB active_file:1972kB inactive_file:123132kB unevictable:15380kB isolated(anon):0kB isolated(file):0kB mapped:136840kB dirty:892kB writeback:0kB shmem:23380kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14712kB pagetables:5444kB sec_pagetables:0kB all_unreclaimable? no Balloon:614668kB gpu_active:0kB gpu_reclaim:0kB [ 746.941829][T21246] syzkaller1: entered promiscuous mode [ 746.947352][T21246] syzkaller1: entered allmulticast mode [ 746.963060][T21233] Node 1 active_anon:2640kB inactive_anon:0kB active_file:0kB inactive_file:272kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1552kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:320kB pagetables:640kB sec_pagetables:0kB all_unreclaimable? no Balloon:1668180kB gpu_active:0kB gpu_reclaim:0kB [ 747.039783][T21233] Node 0 DMA free:10152kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:124kB local_pcp:0kB free_cma:0kB [ 747.167175][T21233] lowmem_reserve[]: 0 2491 2492 2492 2492 [ 747.199519][T21233] Node 0 DMA32 free:173472kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB free_highatomic:0KB active_anon:46208kB inactive_anon:8300kB active_file:1972kB inactive_file:123132kB unevictable:8368kB writepending:892kB zspages:0kB present:3129332kB managed:2551444kB mlocked:6956kB bounce:0kB free_pcp:19184kB local_pcp:11640kB free_cma:0kB [ 747.327320][T21233] lowmem_reserve[]: 0 0 0 0 0 [ 747.339541][T21233] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:624kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 747.373564][T21233] lowmem_reserve[]: 0 0 0 0 0 [ 747.378942][T21233] Node 1 Normal free:2031264kB boost:0kB min:55708kB low:69632kB high:83556kB reserved_highatomic:0KB free_highatomic:0KB active_anon:2640kB inactive_anon:0kB active_file:0kB inactive_file:272kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:108324kB local_pcp:30200kB free_cma:0kB [ 747.415564][T21233] lowmem_reserve[]: 0 0 0 0 0 [ 747.421542][T21233] Node 0 DMA: 0*4kB 1*8kB (U) 0*16kB 1*32kB (U) 0*64kB 1*128kB (U) 1*256kB (U) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 10152kB [ 747.438943][T21233] Node 0 DMA32: 81*4kB (UE) 28*8kB (ME) 64*16kB (UE) 67*32kB (UME) 77*64kB (UME) 53*128kB (UME) 14*256kB (UME) 9*512kB (M) 0*1024kB 2*2048kB (M) 35*4096kB (UM) = 171076kB [ 747.472274][T12567] net_ratelimit: 17 callbacks suppressed [ 747.472295][T12567] bond18: (slave bridge15): failed to get link speed/duplex [ 747.518264][T21233] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 747.555700][T21233] Node 1 Normal: 1452*4kB (UME) 568*8kB (UME) 275*16kB (UM) 394*32kB (UME) 317*64kB (UM) 266*128kB (UM) 235*256kB (UME) 170*512kB (UME) 114*1024kB (UM) 71*2048kB (UME) 380*4096kB (UM) = 2047520kB [ 747.604171][ T9035] bond18: (slave bridge15): failed to get link speed/duplex [ 747.639551][T21233] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 747.642943][T21251] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3647'. [ 747.668411][T21233] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 747.690923][T12576] bond18: (slave bridge15): failed to get link speed/duplex [ 747.768292][T21233] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 747.793820][T21233] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 747.803926][T21233] 35701 total pagecache pages [ 747.808632][T21233] 0 pages in swap cache [ 747.841520][T21233] Free swap = 124996kB [ 747.880036][T21233] Total swap = 124996kB [ 747.884635][T21233] 2097051 pages RAM [ 747.888461][T21233] 0 pages HighMem/MovableOnly [ 747.905209][T12560] bond18: (slave bridge15): failed to get link speed/duplex [ 747.972865][T21233] 427419 pages reserved [ 748.001407][T21233] 0 pages cma reserved [ 748.040252][T12576] bond18: (slave bridge15): failed to get link speed/duplex [ 748.048135][T21243] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3645'. [ 748.128656][ T9035] bond18: (slave bridge15): failed to get link speed/duplex [ 748.240664][T12561] bond18: (slave bridge15): failed to get link speed/duplex [ 748.295366][T21261] syzkaller0: entered promiscuous mode [ 748.309269][T21261] syzkaller0: entered allmulticast mode [ 748.334343][T21261] tipc: Started in network mode [ 748.382007][T21261] tipc: Node identity 4af44492ddd9, cluster identity 4711 [ 748.391588][T21261] tipc: Enabled bearer , priority 0 [ 748.423508][T12560] bond18: (slave bridge15): failed to get link speed/duplex [ 748.622667][T21259] tipc: Resetting bearer [ 748.766030][T21259] tipc: Disabling bearer [ 748.802261][T12561] bond18: (slave bridge15): failed to get link speed/duplex [ 749.022994][ T7211] bond18: (slave bridge15): failed to get link speed/duplex [ 749.138076][T21288] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3657'. [ 749.356211][ T5626] Bluetooth: hci4: command 0x0406 tx timeout [ 750.200182][T21300] netlink: 320 bytes leftover after parsing attributes in process `syz.1.3659'. [ 750.322937][T21303] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3660'. [ 751.181705][T21323] netlink: 4668 bytes leftover after parsing attributes in process `syz.2.3665'. [ 751.224433][T21320] netlink: 4668 bytes leftover after parsing attributes in process `syz.2.3665'. [ 752.688370][ T9035] net_ratelimit: 17 callbacks suppressed [ 752.688392][ T9035] bond18: (slave bridge15): failed to get link speed/duplex [ 752.925721][ T9035] bond18: (slave bridge15): failed to get link speed/duplex [ 752.953823][T21363] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3679'. [ 752.992812][T21371] netlink: 'syz.3.3681': attribute type 4 has an invalid length. [ 753.015267][T21371] netlink: 'syz.3.3681': attribute type 4 has an invalid length. [ 753.050599][T12561] bond18: (slave bridge15): failed to get link speed/duplex [ 753.222293][T12567] bond18: (slave bridge15): failed to get link speed/duplex [ 753.371500][T12561] bond18: (slave bridge15): failed to get link speed/duplex [ 753.382679][T21379] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 753.443953][ T9035] bond18: (slave bridge15): failed to get link speed/duplex [ 753.504045][T21385] macsec1: entered promiscuous mode [ 753.509375][T21385] bridge0: entered promiscuous mode [ 753.570230][T12561] bond18: (slave bridge15): failed to get link speed/duplex [ 753.778619][ T9035] bond18: (slave bridge15): failed to get link speed/duplex [ 753.911036][ T9035] bond18: (slave bridge15): failed to get link speed/duplex [ 754.198915][T21393] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3688'. [ 755.354091][T21346] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 756.275532][T12567] nci: nci_rx_work: unknown MT 0x7 [ 756.287736][T21423] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 756.661862][T21434] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3698'. [ 757.058409][T21441] xt_ipcomp: unknown flags 1D [ 757.193254][T21445] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3703'. [ 757.234565][T21446] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3703'. [ 757.345225][T21455] netlink: 6024 bytes leftover after parsing attributes in process `syz.1.3704'. [ 757.391638][T21459] netlink: 'syz.4.3706': attribute type 4 has an invalid length. [ 757.401133][T21459] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.3706'. [ 757.691584][ T9037] net_ratelimit: 27 callbacks suppressed [ 757.691604][ T9037] bond18: (slave bridge15): failed to get link speed/duplex [ 757.903973][T21461] bridge_slave_0: left allmulticast mode [ 757.973641][T21461] bridge_slave_0: left promiscuous mode [ 758.070564][T21461] bridge0: port 1(bridge_slave_0) entered disabled state [ 758.198611][T21461] bridge_slave_1: left allmulticast mode [ 758.204323][T21461] bridge_slave_1: left promiscuous mode [ 758.210183][T21461] bridge0: port 2(bridge_slave_1) entered disabled state [ 758.451676][T21461] bond0: (slave bond_slave_0): Releasing backup interface [ 758.586558][T21461] bond0: (slave bond_slave_1): Releasing backup interface [ 758.668753][T21485] netlink: 'syz.3.3714': attribute type 1 has an invalid length. [ 758.676623][T21485] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3714'. [ 758.742033][T21461] team0: Port device team_slave_0 removed [ 758.773618][T21461] team0: Port device team_slave_1 removed [ 758.780973][T21461] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 758.788394][T21461] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 758.879887][T21461] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 758.887310][T21461] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 758.982209][T21481] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3713'. [ 759.080654][T21462] team0: Port device xfrm0 added [ 759.126292][T21483] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3713'. [ 759.135289][T21483] netlink: 19 bytes leftover after parsing attributes in process `syz.2.3713'. [ 759.144257][T21483] netlink: 19 bytes leftover after parsing attributes in process `syz.2.3713'. [ 759.186609][ T7211] bond18: (slave bridge15): failed to get link speed/duplex [ 759.457784][T12560] bond18: (slave bridge15): failed to get link speed/duplex [ 759.566838][T12567] bond18: (slave bridge15): failed to get link speed/duplex [ 759.687852][T12561] bond18: (slave bridge15): failed to get link speed/duplex [ 759.877624][ T14] bond18: (slave bridge15): failed to get link speed/duplex [ 759.961906][ T9037] bond18: (slave bridge15): failed to get link speed/duplex [ 759.991429][T21513] netlink: 204 bytes leftover after parsing attributes in process `syz.1.3721'. [ 760.067060][ T9037] bond18: (slave bridge15): failed to get link speed/duplex [ 760.090834][T21513] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3721'. [ 760.173842][T12567] bond18: (slave bridge15): failed to get link speed/duplex [ 760.340675][ T7211] bond18: (slave bridge15): failed to get link speed/duplex [ 760.629258][ T5746] hid-generic 0005:0C45:1010.0001: unknown main item tag 0x0 [ 760.637576][ T5746] hid-generic 0005:0C45:1010.0001: unknown main item tag 0x0 [ 760.707158][ T5746] hid-generic 0005:0C45:1010.0001: hidraw0: BLUETOOTH HID vc3.36 Device [syz0] on aa:aa:aa:aa:aa:aa [ 760.777981][T21532] sit0: entered promiscuous mode [ 760.845935][T21532] netlink: 'syz.4.3726': attribute type 1 has an invalid length. [ 760.853715][T21532] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3726'. [ 760.979347][T21529] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3726'. [ 762.784690][T21504] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 763.546630][T21559] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3731'. [ 763.777411][T21550] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3731'. [ 763.829326][T12576] net_ratelimit: 11 callbacks suppressed [ 763.829347][T12576] bond18: (slave bridge15): failed to get link speed/duplex [ 763.857598][T21550] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 763.874196][T21554] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 763.880395][T21554] syzkaller1: linktype set to 823 [ 763.907900][T21554] syzkaller1: tun_chr_ioctl cmd 35108 [ 763.965029][T12561] bond18: (slave bridge15): failed to get link speed/duplex [ 764.095311][T12561] bond18: (slave bridge15): failed to get link speed/duplex [ 764.344465][T12567] bond18: (slave bridge15): failed to get link speed/duplex [ 764.574803][ T7211] bond18: (slave bridge15): failed to get link speed/duplex [ 764.735387][ T7211] bond18: (slave bridge15): failed to get link speed/duplex [ 764.862117][ T7211] bond18: (slave bridge15): failed to get link speed/duplex [ 764.947731][ T7211] bond18: (slave bridge15): failed to get link speed/duplex [ 764.964407][T21585] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3738'. [ 765.179470][T21591] netlink: 'syz.4.3738': attribute type 7 has an invalid length. [ 765.530919][ T7211] bond18: (slave bridge15): failed to get link speed/duplex [ 765.759835][ T14] bond18: (slave bridge15): failed to get link speed/duplex [ 766.057253][T21616] netlink: 'syz.2.3744': attribute type 13 has an invalid length. [ 766.068966][T21616] netlink: 'syz.2.3744': attribute type 17 has an invalid length. [ 766.235621][T21616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 766.337550][T21616] 8021q: adding VLAN 0 to HW filter on device team0 [ 766.350086][T21616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 766.859073][T21616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 766.877425][T21616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 766.895956][T21616] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 766.911743][T21616] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 766.940781][T21616] veth1_vlan: left promiscuous mode [ 766.950758][T21616] veth0_vlan: left promiscuous mode [ 766.985996][T21616] veth0_vlan: entered promiscuous mode [ 766.992614][T21640] netlink: 'syz.1.3750': attribute type 11 has an invalid length. [ 767.022969][T21640] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3750'. [ 767.035735][T21616] veth1_vlan: entered promiscuous mode [ 767.075848][T21616] veth0_macvtap: left promiscuous mode [ 767.086192][T21616] veth0_macvtap: entered promiscuous mode [ 767.117667][T21616] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 767.135387][T21616] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 767.152203][T21616] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 767.163598][T21616] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 767.202433][T21616] 8021q: adding VLAN 0 to HW filter on device bond1 [ 767.403725][T21616] bond2: left promiscuous mode [ 767.413371][T21651] ipt_REJECT: ECHOREPLY no longer supported. [ 767.444444][T21616] 8021q: adding VLAN 0 to HW filter on device bond2 [ 767.474204][T21616] ipvlan2: left allmulticast mode [ 767.479293][T21616] bond2: left allmulticast mode [ 767.484651][T21616] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 767.509596][T21616] ip6tnl2: left allmulticast mode [ 767.536200][T21616] ip6erspan0: left allmulticast mode [ 767.591491][T12576] bridge0: port 1(bridge_slave_0) entered blocking state [ 767.599353][T12576] bridge0: port 1(bridge_slave_0) entered forwarding state [ 767.660643][T12576] bridge0: port 2(bridge_slave_1) entered blocking state [ 767.668802][T12576] bridge0: port 2(bridge_slave_1) entered forwarding state [ 767.769354][T21621] tunl0: Caught tx_queue_len zero misconfig [ 767.817072][ T7205] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 767.927033][ T7205] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 767.995521][ T7205] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 768.078251][ T7205] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 768.126199][T12567] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 768.253421][T21659] team0 (unregistering): Port device xfrm0 removed [ 768.408087][T12567] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 768.903508][T19897] net_ratelimit: 4 callbacks suppressed [ 768.903540][T19897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 768.923276][ T14] bond18: (slave bridge15): failed to get link speed/duplex [ 769.023053][T12567] bond18: (slave bridge15): failed to get link speed/duplex [ 769.129527][ T9035] bond18: (slave bridge15): failed to get link speed/duplex [ 769.249070][ T14] bond18: (slave bridge15): failed to get link speed/duplex [ 769.348202][ T7205] bond18: (slave bridge15): failed to get link speed/duplex [ 769.462611][ T9035] bond18: (slave bridge15): failed to get link speed/duplex [ 769.600805][ T14] bond18: (slave bridge15): failed to get link speed/duplex [ 769.714464][ T7205] bond18: (slave bridge15): failed to get link speed/duplex [ 769.814695][T12567] bond18: (slave bridge15): failed to get link speed/duplex [ 770.105476][T21686] netlink: 'syz.3.3760': attribute type 5 has an invalid length. [ 770.125689][T21644] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 771.635449][T21711] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3766'. [ 772.175340][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 772.263603][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 773.718152][T21748] netlink: 'syz.3.3775': attribute type 3 has an invalid length. [ 773.755152][T21748] netlink: 'syz.3.3775': attribute type 1 has an invalid length. [ 773.764911][T21748] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3775'. [ 773.777926][T21748] NCSI netlink: No device for ifindex 65542 [ 773.827277][T21756] lo: Caught tx_queue_len zero misconfig [ 773.934539][T21758] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3777'. [ 773.953114][ T14] net_ratelimit: 27 callbacks suppressed [ 773.953164][ T14] bond18: (slave bridge15): failed to get link speed/duplex [ 774.108676][T21769] netlink: zone id is out of range [ 774.168462][T21769] netlink: zone id is out of range [ 774.233543][T21769] netlink: zone id is out of range [ 774.242795][T21770] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3778'. [ 774.255998][ T14] bond18: (slave bridge15): failed to get link speed/duplex [ 774.295765][T21769] netlink: zone id is out of range [ 774.312229][T21769] netlink: zone id is out of range [ 774.319110][T21769] netlink: zone id is out of range [ 774.326213][T21769] netlink: zone id is out of range [ 774.333193][T21769] netlink: zone id is out of range [ 774.910001][T21784] bond2: entered promiscuous mode [ 774.915857][T21784] bond2: entered allmulticast mode [ 774.923422][T21784] 8021q: adding VLAN 0 to HW filter on device bond2 [ 774.950526][ T5626] Bluetooth: hci3: command 0x0406 tx timeout [ 774.993232][T21786] tipc: Enabled bearer , priority 0 [ 775.056585][T21786] syzkaller0: entered promiscuous mode [ 775.063230][T21786] syzkaller0: entered allmulticast mode [ 775.263242][T19897] IPVS: starting estimator thread 0... [ 775.450818][T21801] IPVS: using max 29 ests per chain, 69600 per kthread [ 775.512949][T21785] tipc: Resetting bearer [ 775.687912][T21809] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3788'. [ 775.792777][T21818] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3790'. [ 775.852487][T21814] xt_hashlimit: size too large, truncated to 1048576 [ 775.864424][T21785] tipc: Disabling bearer [ 776.500093][T21832] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3793'. [ 776.711630][T21832] vlan2: entered promiscuous mode [ 776.716714][T21832] ip6gretap0: entered promiscuous mode [ 777.642138][T21853] ip6tnl0: Caught tx_queue_len zero misconfig [ 778.455725][T21871] netlink: 'syz.4.3805': attribute type 83 has an invalid length. [ 778.571675][T21871] netlink: 'syz.4.3805': attribute type 10 has an invalid length. [ 778.702857][T21881] netlink: 'syz.4.3805': attribute type 10 has an invalid length. [ 778.823150][T21881] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 779.023232][T12560] net_ratelimit: 73 callbacks suppressed [ 779.023253][T12560] bond18: (slave bridge15): failed to get link speed/duplex [ 779.110544][T19900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 779.121044][T12576] bond18: (slave bridge15): failed to get link speed/duplex [ 779.237427][T12561] bond18: (slave bridge15): failed to get link speed/duplex [ 779.335700][ T7211] bond18: (slave bridge15): failed to get link speed/duplex [ 779.448722][ T9035] bond18: (slave bridge15): failed to get link speed/duplex [ 779.989891][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 780.149406][T21913] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3813'. [ 780.151845][T19897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 780.236840][T12561] bond18: (slave bridge15): failed to get link speed/duplex [ 780.282898][T21915] netlink: 15 bytes leftover after parsing attributes in process `syz.1.3814'. [ 780.541934][T12560] bond18: (slave bridge15): failed to get link speed/duplex [ 780.689733][ T14] bond18: (slave bridge15): failed to get link speed/duplex [ 781.200561][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 781.250690][T21944] IPVS: set_ctl: invalid protocol: 12 100.1.1.5:20002 [ 781.816771][T21963] netlink: 'syz.4.3824': attribute type 10 has an invalid length. [ 782.002667][T21968] netlink: 'syz.4.3824': attribute type 10 has an invalid length. [ 782.197317][T21963] bond0: (slave dummy0): Releasing backup interface [ 782.214176][T21968] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 782.676596][T21982] syzkaller0: entered promiscuous mode [ 782.682122][T21982] syzkaller0: entered allmulticast mode [ 782.766056][T21982] tipc: Enabled bearer , priority 0 [ 783.137375][T22001] netlink: 'syz.3.3830': attribute type 1 has an invalid length. [ 783.207533][T21999] syzkaller0: entered promiscuous mode [ 783.213718][T21999] syzkaller0: entered allmulticast mode [ 783.286428][T21999] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3830'. [ 783.921330][T22002] tipc: Started in network mode [ 783.926475][T22002] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 783.935301][T22002] tipc: Enabling of bearer rejected, failed to enable media [ 784.092758][T22003] bond3: (slave geneve2): making interface the new active one [ 784.119586][T22003] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 784.132472][T21999] 8021q: adding VLAN 0 to HW filter on device bond3 [ 784.318662][T22013] bond3: option min_links: invalid value (18446744073709551612) [ 784.328745][T22013] bond3: option min_links: allowed values 0 - 2147483647 [ 784.356996][T22028] netlink: 'syz.0.3835': attribute type 1 has an invalid length. [ 784.364783][T22028] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3835'. [ 784.382130][T22013] bond3 (unregistering): Released all slaves [ 784.401871][T19901] net_ratelimit: 14 callbacks suppressed [ 784.401913][T19901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 784.476997][T21978] tipc: Resetting bearer [ 784.548113][T21978] tipc: Disabling bearer [ 784.986923][ T5622] Bluetooth: hci2: link tx timeout [ 784.994475][ T5622] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 785.446213][T19901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 786.460886][ T7673] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 787.100341][ T5626] Bluetooth: hci2: command 0x0406 tx timeout [ 787.538133][ T7673] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 788.590808][ T7673] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 788.897338][T12567] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 789.595075][T12561] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 789.708854][ T7673] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 789.964426][T19897] tipc: Node number set to 2536326290 [ 789.972137][ T9035] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 789.985391][ T9035] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 790.009747][ T9035] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 790.033505][ T9035] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 790.076236][T22032] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 790.205386][T22043] netlink: 5 bytes leftover after parsing attributes in process `syz.1.3837'. [ 790.360114][ T9037] bond18: (slave bridge15): failed to get link speed/duplex [ 790.407394][T22049] netlink: 'syz.3.3839': attribute type 1 has an invalid length. [ 790.696252][T22049] 8021q: adding VLAN 0 to HW filter on device bond4 [ 790.723326][T22054] gretap1: entered promiscuous mode [ 790.738027][T22054] bond4: (slave gretap1): making interface the new active one [ 790.752104][T19900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 790.762183][T22054] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 790.781355][T22058] macvlan2: entered promiscuous mode [ 790.788860][T22058] macvlan2: entered allmulticast mode [ 790.818410][T22058] bond4: entered promiscuous mode [ 790.837136][T22058] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 790.845864][T22058] bond4: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 790.893239][T22058] bond4: left promiscuous mode [ 791.042127][ T1102] bond18: (slave bridge15): failed to get link speed/duplex [ 791.197014][ T7211] bond18: (slave bridge15): failed to get link speed/duplex [ 791.348915][T22077] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3845'. [ 791.366877][T12560] bond18: (slave bridge15): failed to get link speed/duplex [ 791.815216][ T14] bond18: (slave bridge15): failed to get link speed/duplex [ 791.868599][T19897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 791.920421][T12560] bond18: (slave bridge15): failed to get link speed/duplex [ 791.980006][T22094] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3851'. [ 792.541384][T22101] bridge0: port 2(bridge_slave_1) entered disabled state [ 792.549122][T22101] bridge0: port 1(bridge_slave_0) entered disabled state [ 792.785864][T22112] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3855'. [ 792.863982][T22112] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3855'. [ 793.138690][T22125] IPv6: NLM_F_CREATE should be specified when creating new route [ 793.438858][T22101] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 793.532043][T22101] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 794.173080][T22121] tipc: Enabled bearer , priority 0 [ 794.199467][ T7211] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.329421][ T7211] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.340083][ T7211] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.365356][ T7211] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.379529][T22126] tipc: Disabling bearer [ 794.588485][T22150] nbd: nbd1 already in use [ 794.663084][ T7211] net_ratelimit: 6 callbacks suppressed [ 794.663126][ T7211] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 794.674522][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 794.705939][ T9037] bond18: (slave bridge15): failed to get link speed/duplex [ 794.732238][T22150] block nbd1: NBD_DISCONNECT [ 794.808291][T22150] block nbd1: Send disconnect failed -104 [ 794.814082][T22150] block nbd1: shutting down sockets [ 794.878150][T22156] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 794.927181][T22156] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 794.937865][T22156] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 794.956526][T22156] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 794.964946][T22156] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 794.975023][T22156] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 794.985373][T22156] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 795.013493][ T7211] bond18: (slave bridge15): failed to get link speed/duplex [ 795.489591][T22170] syz_tun: entered allmulticast mode [ 795.509331][T22169] tipc: Started in network mode [ 795.514315][T22169] tipc: Node identity b2a6fbf0c5f7, cluster identity 4711 [ 795.523118][T22169] tipc: Enabled bearer , priority 0 [ 795.537470][T22168] tipc: Disabling bearer [ 795.712731][T22156] [ 795.715116][T22156] ====================================================== [ 795.722151][T22156] WARNING: possible circular locking dependency detected [ 795.729183][T22156] syzkaller #0 Not tainted [ 795.733608][T22156] ------------------------------------------------------ [ 795.740638][T22156] syz.2.3862/22156 is trying to acquire lock: [ 795.746714][T22156] ffffffff8ea84680 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_node_noprof+0x6a/0x610 [ 795.756624][T22156] [ 795.756624][T22156] but task is already holding lock: [ 795.764005][T22156] ffff8880356fb860 (sk_lock-AF_INET6){+.+.}-{0:0}, at: tcp_close+0x1d/0x110 [ 795.772893][T22156] [ 795.772893][T22156] which lock already depends on the new lock. [ 795.772893][T22156] [ 795.783413][T22156] [ 795.783413][T22156] the existing dependency chain (in reverse order) is: [ 795.792521][T22156] [ 795.792521][T22156] -> #7 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 795.800252][T22156] lock_sock_nested+0x41/0x100 [ 795.805564][T22156] tls_sw_sendmsg+0x161/0x2860 [ 795.810948][T22156] sock_sendmsg_nosec+0x90/0x180 [ 795.816418][T22156] __sys_sendto+0x408/0x5a0 [ 795.821430][T22156] __x64_sys_sendto+0xde/0x100 [ 795.826704][T22156] do_syscall_64+0x174/0x580 [ 795.831831][T22156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 795.838268][T22156] [ 795.838268][T22156] -> #6 (&ctx->tx_lock){+.+.}-{4:4}: [ 795.845838][T22156] __mutex_lock+0x19d/0x1550 [ 795.851027][T22156] tls_sw_sendmsg+0x13c/0x2860 [ 795.856314][T22156] sock_sendmsg_nosec+0x90/0x180 [ 795.861771][T22156] sock_sendmsg+0x1ca/0x2d0 [ 795.866805][T22156] __sock_xmit+0x245/0x4f0 [ 795.871853][T22156] nbd_disconnect+0x3ad/0x560 [ 795.877067][T22156] nbd_disconnect_and_put+0x32/0x280 [ 795.882867][T22156] nbd_genl_disconnect+0x4af/0x590 [ 795.888504][T22156] genl_family_rcv_msg_doit+0x233/0x340 [ 795.894597][T22156] genl_rcv_msg+0x614/0x7a0 [ 795.899616][T22156] netlink_rcv_skb+0x226/0x4a0 [ 795.904894][T22156] genl_rcv+0x28/0x40 [ 795.909388][T22156] netlink_unicast+0x7bb/0x940 [ 795.914660][T22156] netlink_sendmsg+0x813/0xb40 [ 795.919933][T22156] sock_sendmsg_nosec+0x13a/0x180 [ 795.925474][T22156] ____sys_sendmsg+0x54e/0x850 [ 795.930751][T22156] ___sys_sendmsg+0x2a5/0x360 [ 795.935936][T22156] __x64_sys_sendmsg+0x1b1/0x290 [ 795.941384][T22156] do_syscall_64+0x174/0x580 [ 795.946484][T22156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 795.952888][T22156] [ 795.952888][T22156] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 795.960532][T22156] __mutex_lock+0x19d/0x1550 [ 795.965641][T22156] nbd_queue_rq+0x373/0x1150 [ 795.970746][T22156] blk_mq_dispatch_rq_list+0x499/0x1990 [ 795.976932][T22156] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 795.983818][T22156] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 795.990311][T22156] blk_mq_run_work_fn+0x16c/0x300 [ 795.995864][T22156] process_scheduled_works+0xa8e/0x14e0 [ 796.001969][T22156] worker_thread+0xa47/0xfb0 [ 796.007162][T22156] kthread+0x388/0x470 [ 796.011747][T22156] ret_from_fork+0x514/0xb70 [ 796.016868][T22156] ret_from_fork_asm+0x1a/0x30 [ 796.022151][T22156] [ 796.022151][T22156] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 796.029387][T22156] __mutex_lock+0x19d/0x1550 [ 796.034508][T22156] nbd_queue_rq+0xc1/0x1150 [ 796.039526][T22156] blk_mq_dispatch_rq_list+0x499/0x1990 [ 796.045600][T22156] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 796.052441][T22156] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 796.058935][T22156] blk_mq_run_work_fn+0x16c/0x300 [ 796.064475][T22156] process_scheduled_works+0xa8e/0x14e0 [ 796.070538][T22156] worker_thread+0xa47/0xfb0 [ 796.075641][T22156] kthread+0x388/0x470 [ 796.080221][T22156] ret_from_fork+0x514/0xb70 [ 796.085322][T22156] ret_from_fork_asm+0x1a/0x30 [ 796.090604][T22156] [ 796.090604][T22156] -> #3 (set->srcu){.+.+}-{0:0}: [ 796.097739][T22156] __synchronize_srcu+0xc9/0x2f0 [ 796.103232][T22156] elevator_switch+0x1e8/0x7b0 [ 796.108669][T22156] elevator_change+0x2fa/0x480 [ 796.113965][T22156] elevator_set_default+0x375/0x440 [ 796.119704][T22156] blk_register_queue+0x3f3/0x4e0 [ 796.125327][T22156] __add_disk+0x6cb/0xe30 [ 796.130193][T22156] add_disk_fwnode+0xfb/0x4b0 [ 796.135394][T22156] nbd_dev_add+0x733/0xb60 [ 796.140338][T22156] nbd_init+0x15f/0x1e0 [ 796.145167][T22156] do_one_initcall+0x250/0x870 [ 796.150458][T22156] do_initcall_level+0x10a/0x1a0 [ 796.156003][T22156] do_initcalls+0x59/0xa0 [ 796.160945][T22156] kernel_init_freeable+0x29d/0x3e0 [ 796.166696][T22156] kernel_init+0x1d/0x1d0 [ 796.171542][T22156] ret_from_fork+0x514/0xb70 [ 796.176715][T22156] ret_from_fork_asm+0x1a/0x30 [ 796.182002][T22156] [ 796.182002][T22156] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 796.189839][T22156] __mutex_lock+0x19d/0x1550 [ 796.194963][T22156] elevator_change+0x1af/0x480 [ 796.200262][T22156] elevator_set_none+0xb5/0x140 [ 796.205642][T22156] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 796.211976][T22156] nbd_start_device+0x189/0xb30 [ 796.217360][T22156] nbd_genl_connect+0x1597/0x1c10 [ 796.222902][T22156] genl_family_rcv_msg_doit+0x233/0x340 [ 796.228977][T22156] genl_rcv_msg+0x614/0x7a0 [ 796.234015][T22156] netlink_rcv_skb+0x226/0x4a0 [ 796.239315][T22156] genl_rcv+0x28/0x40 [ 796.243819][T22156] netlink_unicast+0x7bb/0x940 [ 796.249105][T22156] netlink_sendmsg+0x813/0xb40 [ 796.254387][T22156] sock_sendmsg_nosec+0x13a/0x180 [ 796.259938][T22156] ____sys_sendmsg+0x54e/0x850 [ 796.265231][T22156] ___sys_sendmsg+0x2a5/0x360 [ 796.270432][T22156] __x64_sys_sendmsg+0x1b1/0x290 [ 796.275897][T22156] do_syscall_64+0x174/0x580 [ 796.281017][T22156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 796.287434][T22156] [ 796.287434][T22156] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 796.296048][T22156] blk_alloc_queue+0x544/0x690 [ 796.301349][T22156] __blk_mq_alloc_disk+0x194/0x390 [ 796.307001][T22156] nbd_dev_add+0x494/0xb60 [ 796.311950][T22156] nbd_init+0x15f/0x1e0 [ 796.316641][T22156] do_one_initcall+0x250/0x870 [ 796.321924][T22156] do_initcall_level+0x10a/0x1a0 [ 796.327379][T22156] do_initcalls+0x59/0xa0 [ 796.332227][T22156] kernel_init_freeable+0x29d/0x3e0 [ 796.337948][T22156] kernel_init+0x1d/0x1d0 [ 796.342805][T22156] ret_from_fork+0x514/0xb70 [ 796.347916][T22156] ret_from_fork_asm+0x1a/0x30 [ 796.353569][T22156] [ 796.353569][T22156] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 796.360778][T22156] __lock_acquire+0x1520/0x2cf0 [ 796.366159][T22156] lock_acquire+0x106/0x350 [ 796.371179][T22156] fs_reclaim_acquire+0x71/0x100 [ 796.376630][T22156] kmem_cache_alloc_node_noprof+0x6a/0x610 [ 796.382959][T22156] __alloc_skb+0x1d7/0x7a0 [ 796.387898][T22156] tcp_send_active_reset+0x8a/0x550 [ 796.393722][T22156] __tcp_close+0x462/0xec0 [ 796.398661][T22156] tcp_close+0x28/0x110 [ 796.403365][T22156] inet_release+0x143/0x190 [ 796.408522][T22156] sock_close+0xad/0x220 [ 796.413288][T22156] __fput+0x418/0xa50 [ 796.417803][T22156] task_work_run+0x1d9/0x270 [ 796.422914][T22156] get_signal+0x1181/0x12c0 [ 796.427965][T22156] arch_do_signal_or_restart+0xbb/0x860 [ 796.434042][T22156] exit_to_user_mode_loop+0x104/0x730 [ 796.439938][T22156] do_syscall_64+0x353/0x580 [ 796.445062][T22156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 796.451475][T22156] [ 796.451475][T22156] other info that might help us debug this: [ 796.451475][T22156] [ 796.461703][T22156] Chain exists of: [ 796.461703][T22156] fs_reclaim --> &ctx->tx_lock --> sk_lock-AF_INET6 [ 796.461703][T22156] [ 796.474322][T22156] Possible unsafe locking scenario: [ 796.474322][T22156] [ 796.481947][T22156] CPU0 CPU1 [ 796.487310][T22156] ---- ---- [ 796.492667][T22156] lock(sk_lock-AF_INET6); [ 796.497173][T22156] lock(&ctx->tx_lock); [ 796.503929][T22156] lock(sk_lock-AF_INET6); [ 796.510952][T22156] lock(fs_reclaim); [ 796.514937][T22156] [ 796.514937][T22156] *** DEADLOCK *** [ 796.514937][T22156] [ 796.523071][T22156] 2 locks held by syz.2.3862/22156: [ 796.528272][T22156] #0: ffff8880772b52c0 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: sock_close+0x82/0x220 [ 796.538470][T22156] #1: ffff8880356fb860 (sk_lock-AF_INET6){+.+.}-{0:0}, at: tcp_close+0x1d/0x110 [ 796.547634][T22156] [ 796.547634][T22156] stack backtrace: [ 796.553529][T22156] CPU: 0 UID: 0 PID: 22156 Comm: syz.2.3862 Not tainted syzkaller #0 PREEMPT(full) [ 796.553552][T22156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 796.553563][T22156] Call Trace: [ 796.553571][T22156] [ 796.553579][T22156] dump_stack_lvl+0xe8/0x150 [ 796.553606][T22156] print_circular_bug+0x2e1/0x300 [ 796.553631][T22156] check_noncircular+0x12e/0x150 [ 796.553651][T22156] __lock_acquire+0x1520/0x2cf0 [ 796.553670][T22156] ? is_bpf_text_address+0x292/0x2b0 [ 796.553716][T22156] ? __lock_acquire+0x683/0x2cf0 [ 796.553734][T22156] ? __kernel_text_address+0xd/0x30 [ 796.553756][T22156] ? kmem_cache_alloc_node_noprof+0x6a/0x610 [ 796.553780][T22156] lock_acquire+0x106/0x350 [ 796.553797][T22156] ? kmem_cache_alloc_node_noprof+0x6a/0x610 [ 796.553821][T22156] ? napi_skb_cache_get+0x151/0x7d0 [ 796.553838][T22156] ? lock_acquire+0x106/0x350 [ 796.553855][T22156] fs_reclaim_acquire+0x71/0x100 [ 796.553871][T22156] ? kmem_cache_alloc_node_noprof+0x6a/0x610 [ 796.553895][T22156] kmem_cache_alloc_node_noprof+0x6a/0x610 [ 796.553916][T22156] ? local_lock_release+0x9c/0x160 [ 796.553940][T22156] ? __alloc_skb+0x189/0x7a0 [ 796.553954][T22156] ? __alloc_skb+0x1d7/0x7a0 [ 796.553967][T22156] ? __alloc_skb+0x1d7/0x7a0 [ 796.553992][T22156] __alloc_skb+0x1d7/0x7a0 [ 796.554007][T22156] tcp_send_active_reset+0x8a/0x550 [ 796.554035][T22156] __tcp_close+0x462/0xec0 [ 796.554058][T22156] tcp_close+0x28/0x110 [ 796.554074][T22156] inet_release+0x143/0x190 [ 796.554099][T22156] sock_close+0xad/0x220 [ 796.554119][T22156] ? __pfx_sock_close+0x10/0x10 [ 796.554137][T22156] __fput+0x418/0xa50 [ 796.554156][T22156] task_work_run+0x1d9/0x270 [ 796.554174][T22156] ? __pfx_task_work_run+0x10/0x10 [ 796.554193][T22156] ? __fput_deferred+0x216/0x380 [ 796.554207][T22156] ? __pfx___fput_deferred+0x10/0x10 [ 796.554225][T22156] get_signal+0x1181/0x12c0 [ 796.554247][T22156] ? __sys_sendto+0x4d0/0x5a0 [ 796.554264][T22156] ? __pfx___sys_sendto+0x10/0x10 [ 796.554281][T22156] arch_do_signal_or_restart+0xbb/0x860 [ 796.554308][T22156] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 796.554339][T22156] exit_to_user_mode_loop+0x104/0x730 [ 796.554357][T22156] ? rcu_is_watching+0x15/0xb0 [ 796.554375][T22156] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 796.554393][T22156] do_syscall_64+0x353/0x580 [ 796.554409][T22156] ? trace_irq_disable+0x3b/0x140 [ 796.554424][T22156] ? clear_bhb_loop+0x40/0x90 [ 796.554441][T22156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 796.554458][T22156] RIP: 0033:0x7fc1a9b9de59 [ 796.554474][T22156] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 796.554490][T22156] RSP: 002b:00007fc1aaa82028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 796.554508][T22156] RAX: 0000000000290000 RBX: 00007fc1a9e25fa0 RCX: 00007fc1a9b9de59 [ 796.554521][T22156] RDX: fffffffffffffd46 RSI: 0000200000000180 RDI: 0000000000000003 [ 796.554531][T22156] RBP: 00007fc1a9c33e6f R08: 0000000000000000 R09: ffffffffffffff3e [ 796.554543][T22156] R10: 0000000000004820 R11: 0000000000000246 R12: 0000000000000000 [ 796.554554][T22156] R13: 00007fc1a9e26038 R14: 00007fc1a9e25fa0 R15: 00007fff5cc70798 [ 796.554571][T22156] [ 797.005566][T22176] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3868'. [ 798.462668][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 799.681184][ T151] net_ratelimit: 52 callbacks suppressed [ 799.681218][ T151] bond18: (slave bridge15): failed to get link speed/duplex [ 799.801479][T12560] bond18: (slave bridge15): failed to get link speed/duplex [ 799.911163][ T14] bond18: (slave bridge15): failed to get link speed/duplex [ 800.021487][T12576] bond18: (slave bridge15): failed to get link speed/duplex [ 800.061431][ T7673] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 800.130643][ T151] bond18: (slave bridge15): failed to get link speed/duplex [ 800.241368][ T14] bond18: (slave bridge15): failed to get link speed/duplex [ 800.350525][ T151] bond18: (slave bridge15): failed to get link speed/duplex [ 800.382426][ T151] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 800.462321][ T151] bond18: (slave bridge15): failed to get link speed/duplex [ 804.751403][ T7211] net_ratelimit: 42 callbacks suppressed [ 804.751449][ T7211] bond18: (slave bridge15): failed to get link speed/duplex [ 804.871321][T12576] bond18: (slave bridge15): failed to get link speed/duplex [ 804.981314][ T7211] bond18: (slave bridge15): failed to get link speed/duplex [ 805.090711][ T151] bond18: (slave bridge15): failed to get link speed/duplex [ 805.201345][ T151] bond18: (slave bridge15): failed to get link speed/duplex [ 805.263538][ T5821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 805.311480][ T14] bond18: (slave bridge15): failed to get link speed/duplex [ 805.421390][ T14] bond18: (slave bridge15): failed to get link speed/duplex [ 805.500656][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 805.530648][ T151] bond18: (slave bridge15): failed to get link speed/duplex