last executing test programs: 5.347902071s ago: executing program 0 (id=3567): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="f0000000100013070000000000000000fc010000000000000000000000000001ff010000000000000000000000000001000000000000000f0000002000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000000000000000003a12e5f123e30daf0000000000000008000000000001000000000000000000000000000000001b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009808000000000000000000000000000000000000000000000000000a00010000000000000000006cfdee135b374281176b9fb615dfd8805e4d96"], 0xf0}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x9, 0x8, 0x1}, 0x48) ppoll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x8}, {r1, 0x2721}], 0x2, &(0x7f00000000c0)={0x77359400}, 0x0, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x2, 0x4) sendmsg$SMC_PNETID_GET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c0000001000370400000000ffdbdf2500000000", @ANYRES32=r6, @ANYBLOB="83450500000000002c0012800900010069706970000000001c00028006000f0001000000060010000900000008000100aa"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r7}]}}}]}, 0x3c}}, 0x0) r8 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000140)={{{@in=@dev={0xac, 0x14, 0x14, 0x24}, @in6=@local, 0x4e23, 0x0, 0xffff, 0x8000, 0x2, 0x0, 0x0, 0x21}, {0x0, 0x200000000000001, 0xfffffffffffffffc, 0x1000080000000, 0x2000000000002095, 0xffffdffffffffffa, 0x2}, {0x4, 0x40, 0x3ff, 0x2}, 0x8, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x0, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0xe8) r9 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r9, &(0x7f0000000140)={'some', 0x20, 0x7}, 0x2f) sendmsg$kcm(r9, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20000818) connect$inet6(r8, &(0x7f0000000300)={0xa, 0x4e23, 0xaf, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1a}}, 0x80}, 0x1c) 5.050599877s ago: executing program 0 (id=3574): socket$kcm(0xa, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) close(0x4) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000200), 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x20004010}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0xd8, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2f}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @CTA_NAT_SRC={0x60, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0x44, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}]}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @local}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast2}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @rand_addr=0x64010101}]}, @CTA_NAT_SRC={0x4}]}, 0xd8}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01002cbd700000000040020000000800", @ANYRES32=r10, @ANYBLOB="0c009900d308000079000000080026006c0900000800a08d1d4a2a390800270002"], 0x40}, 0x1, 0x0, 0x0, 0x8001}, 0x4040000) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010400000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400000010000100000000000000000a6c000000ec090b0400000000000000000200000901000000000000000b000100657874680308000740000000170800064000000001050002000000000008000340000000010900010073797a30001bea3e24bc76e720729b08c70000000900020073797a3200000000140000001100010000000000"], 0x94}}, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x2000c094) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="6000000010000108fdfffffffddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="000000042104020008001b000000000038001a8004002d8030000a80050008"], 0x60}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='\a'], 0x10) 3.905728214s ago: executing program 0 (id=3579): bpf$TOKEN_CREATE(0x24, &(0x7f0000000180), 0x8) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @remote}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0xd, &(0x7f0000000180)=0x1f, 0x4) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0xf3a, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100008c0f0089e9ed6429978fa5fd00", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0xf, &(0x7f0000000240)=ANY=[@ANYRESDEC=r2, @ANYRES32=r2, @ANYBLOB="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"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x34, '\x00', 0x0, 0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 3.1604697s ago: executing program 2 (id=3591): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) close(0x3) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='\a'], 0x10) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f0000000200)=0x4, 0x4) bind$inet(r4, 0x0, 0x0) close(0x3) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r1}, 0x20) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f0000000340)={0x2, 0x408, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r5, 0x8) r6 = accept4(r5, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000140)={0x0, 0xffff8001}, 0xc) setsockopt$inet_tcp_int(r0, 0x6, 0xd, &(0x7f0000000080)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r8) getsockname$packet(r8, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)=@o_path={&(0x7f0000000140)='./file0\x00', 0x0, 0x8010, r10}, 0x18) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000400)={r11}, 0x4) sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r10, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a88000000060a010400000000000000000a0000040900010000827a31000000005c000480340001800c0001007061796c6f616400dfafe0eb8b8bbab7954b615a10240002800800014000000009080003400000004f08000440000000390800024000000002240001800a000100726564697200000014000280080001400000000c08000240000000080900020073797a3200000000140000001100010000000000000000000000000a"], 0xb0}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) 3.023027389s ago: executing program 2 (id=3594): r0 = socket(0x1d, 0x2, 0x6) bind$can_raw(r0, &(0x7f0000000400), 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x28, r2, 0x5, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}]]}, 0x28}, 0x1, 0x0, 0x0, 0x200008d5}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x10001, 0x7fff, 0x82, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$l2tp6(0xa, 0x2, 0x73) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000300)=ANY=[@ANYRES32=r4, @ANYBLOB="00000000020000"], 0x50) sendto$inet6(r4, 0x0, 0x0, 0x0, 0x0, 0x0) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') socket(0x2, 0x800, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) getsockopt(0xffffffffffffffff, 0xff, 0x0, 0x0, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r5, 0x29, 0x40, &(0x7f00000001c0)={'security\x00', 0x0, [0x24, 0x3, 0x92, 0x1, 0x3ff]}, &(0x7f0000000240)=0x54) 2.539481935s ago: executing program 3 (id=3599): r0 = socket$netlink(0x10, 0x3, 0x8000000004) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x1c) unshare(0x20000400) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, 0x0, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000012c0)={0x3c, r6, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x80003}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) bind$unix(r4, &(0x7f0000000480)=@abs={0x1, 0x0, 0x4e20}, 0x1c) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000080)="580000001400add4050000000000000001117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ffff0100f5c71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 2.346099971s ago: executing program 3 (id=3601): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_genetlink_get_family_id$nl80211(0xfffffffffffffffc, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x8}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={r1, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e24, @multicast2}]}, &(0x7f0000000440)=0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x5000, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0x0, 0x5}, {0x2, 0xd}}, [@qdisc_kind_options=@q_red={{0x8}, {0x4}}]}, 0x30}}, 0x4008000) r5 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_int(r5, 0x3a, 0x3c, 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) setsockopt(r0, 0x84, 0x80, &(0x7f0000000000)="0000000000000002", 0x8) 2.188616979s ago: executing program 4 (id=3603): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x1f00, 0x18, 0x19, &(0x7f00000007c0)="9f44948721919580684010a40566", 0x0, 0x7ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000380)="8c5911c525f5cf4c4ecf207ad2ec", 0x0, 0x0, 0xffffffff}, 0x23) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xc4}, 0x1, 0x0, 0x0, 0xc010}, 0x0) 2.155202951s ago: executing program 3 (id=3604): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000480), r1) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000480), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRESHEX=r1, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x840) unshare(0x2c020400) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400404"], 0x7) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="40050102"], 0x4) (async) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="40050102"], 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c0000000606010300000000000000000a0000040900020073797a320000000001000080f1285b73797a3200000000"], 0x2c}, 0x1, 0x0, 0x0, 0x5}, 0x40000) (async) sendmsg$IPSET_CMD_SWAP(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c0000000606010300000000000000000a0000040900020073797a320000000001000080f1285b73797a3200000000"], 0x2c}, 0x1, 0x0, 0x0, 0x5}, 0x40000) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r4) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x2}) (async) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x2}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @link_local}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000140)={'wlan0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1}}) ioctl$TUNSETLINK(r5, 0x400454cd, 0xfffe) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r7, &(0x7f0000847fff)='X', 0xfffffffffffffee6, 0x4000, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x15}}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000041ffffff00000000080000009111b4000000000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffeffff9}, 0x94) recvmmsg(r7, &(0x7f0000001d80)=[{{&(0x7f00000004c0)=@caif=@rfm, 0x80, &(0x7f0000001c80)=[{&(0x7f0000000c80)=""/4096, 0x1000}], 0x1, &(0x7f0000001cc0)=""/161, 0xa1}, 0x36d}], 0x1, 0x10102, 0x0) (async) recvmmsg(r7, &(0x7f0000001d80)=[{{&(0x7f00000004c0)=@caif=@rfm, 0x80, &(0x7f0000001c80)=[{&(0x7f0000000c80)=""/4096, 0x1000}], 0x1, &(0x7f0000001cc0)=""/161, 0xa1}, 0x36d}], 0x1, 0x10102, 0x0) shutdown(r7, 0x1) socket$alg(0x26, 0x5, 0x0) (async) socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r8 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) 1.735171044s ago: executing program 2 (id=3606): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$sock_buf(r0, 0x1, 0x1f, &(0x7f0000000040)=""/4096, &(0x7f0000001040)=0x1000) (async) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000080)='./file0\x00'}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x0, 0xc, 0x0, &(0x7f00000001c0)=""/12, 0x6, 0x0, 0x800, 0x80, &(0x7f00000005c0)="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", &(0x7f0000000200)="9d7328d6e0eff2079603250dc610ca6b1e5cbe6e2bab081652abe6ac9d23f9372b3b16643a5ea8b7e9a090e414be582a1b9a472e8a007ce3ecfd035ed6a8091d9adb97d6601215cf7ba1e5d41e2619f7727ad88954b2885d5fe237171b99a062625d3d4216b9b30743ac38d9d1350ad13dda19d2a26a8aec386f02c5755bb3d6", 0x6, 0x0, 0x5}, 0x50) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xa, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000630122000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async, rerun: 32) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) (async) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) (async) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz1\x00', 0x1ff) 1.733729433s ago: executing program 4 (id=3607): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100003020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe4a, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000004bc0)="b90600076008008c989e08f00800bcd28c742ad2267f10c28e2b89458d62f2244af3", 0x0, 0xfffffdfb, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x202040, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)=0x2) pipe(&(0x7f0000000000)={0xffffffffffffffff}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000090000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r3}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r5, &(0x7f00000002c0), 0x0}, 0x20) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r6) sendmsg$L2TP_CMD_TUNNEL_DELETE(r7, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="000027bd7000d2f7ff001d00ea000000bf0ddbee8d41673e92555ebe43d72f0800110001000000e23efbcae7d1b02117faae75be0628000000000000000b000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0) splice(r2, 0x0, r6, 0x0, 0x7, 0x4) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000100)) 1.663233563s ago: executing program 1 (id=3608): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000140), &(0x7f0000000280)=r1}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r2}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000001000000b7050000080000001c00000000000000bf980000000000000d080000000000008500000005000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r3}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x10, &(0x7f00000008c0)=ANY=[@ANYRESOCT=r3, @ANYRES32=r3, @ANYRES8=r3], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.626689592s ago: executing program 2 (id=3609): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e24, 0x7, @local, 0x7fffffff}}}, &(0x7f0000000180)=0x84) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x5, @none, 0x0, 0x2}, 0xe) listen(r1, 0xa1) accept4$bt_l2cap(r1, 0x0, 0x0, 0x800) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000080), 0x4) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'ip6_vti0\x00', &(0x7f0000000200)={'ip6gre0\x00', 0x0, 0x2f, 0x1, 0x6e, 0x5, 0x39, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7800, 0x0, 0x2, 0x3}}) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@getnexthop={0x2c, 0x76, 0xb0d, 0x0, 0x0, {0x3}, [@NHA_MASTER={0x8, 0xa, 0x2}, @NHA_GROUPS={0x4}, @NHA_OIF={0x8, 0x5, r2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4080}, 0x20000000) (async) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@getnexthop={0x2c, 0x76, 0xb0d, 0x0, 0x0, {0x3}, [@NHA_MASTER={0x8, 0xa, 0x2}, @NHA_GROUPS={0x4}, @NHA_OIF={0x8, 0x5, r2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4080}, 0x20000000) 1.558324731s ago: executing program 1 (id=3610): socket$netlink(0x10, 0x3, 0x4) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0xfffffffffffffff5, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2, 0x2001400}, @TCA_FQ_PLIMIT={0x1300, 0x1, 0x5}]}}]}, 0x48}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) setsockopt$RDS_GET_MR(r0, 0x114, 0x2, &(0x7f00000008c0)={{&(0x7f0000000780)=""/248, 0xf8}, &(0x7f0000000880), 0x1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) pipe(&(0x7f0000000080)) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x439, 0x70bd23, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, 0xb881}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLAGS={0x8, 0x8, 0x33}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x24008007}, 0x4040844) sendto$packet(r4, &(0x7f0000000640)="e8b77052a9", 0x28, 0x40, &(0x7f0000000200)={0x11, 0x86dd, r7, 0x1, 0x0, 0x6, @local}, 0x14) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r8 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_BT_DEFER_SETUP(r8, 0x112, 0x7, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000000c0)=0x8, 0x4) socket$kcm(0x2, 0xa, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1f, 0x15, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000fcffffff000000000900000018010000", @ANYRES32, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000ff7f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x94) r9 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000000cc0)=@nat={'nat\x00', 0x1b, 0x5, 0x410, 0x150, 0x150, 0xffffffff, 0x0, 0x0, 0x378, 0x378, 0xffffffff, 0x378, 0x378, 0x5, &(0x7f0000000100), {[{{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x2, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @gre_key=0x7fff, @port=0x4e23}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0x0, 'wlan1\x00', 'vxcan1\x00', {}, {0xff}, 0x29, 0x3, 0x10}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x1, @loopback, @local, @gre_key, @gre_key=0x14ca}}}}, {{@uncond, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@ipvs={{0x48}, {@ipv4=@rand_addr=0x64010100, [0x0, 0xff000000], 0x4e21, 0x33, 0x1, 0x4e20, 0x10, 0x2}}, @common=@addrtype={{0x30}, {0xd33ede5257f350a6, 0x602, 0x1, 0x1}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x2e}, @ipv4=@remote, @icmp_id=0x68, @icmp_id=0x66}}}, {{@ip={@remote, @multicast2, 0xff, 0xffffffff, 'macvlan1\x00', 'bond_slave_0\x00', {}, {}, 0x5c, 0x2}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}, {{0x1, [0x6, 0x3, 0xa, 0x2, 0x7, 0x1], 0x5, 0x1}}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x19, @ipv4=@broadcast, @ipv4=@rand_addr=0x64010101, @gre_key=0x2, @port=0x4e22}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) 811.029991ms ago: executing program 0 (id=3611): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYBLOB="041e97"], 0x14}, 0x1, 0x0, 0x0, 0x4044020}, 0x4000000) recvmmsg(r0, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000001180)=""/4096, 0x1000}, {&(0x7f00000005c0)=""/93, 0x5d}, {&(0x7f0000000640)=""/103, 0x67}], 0x3}, 0xc}], 0x1, 0x40030002, 0x0) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) recvmmsg(r0, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x40, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = socket$packet(0x11, 0x3, 0x300) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000390400000000fbdbdf2500000000", @ANYRES32=r5, @ANYBLOB="010f0000419a04002000128008000100736974001400028008000300ac1414bb050004"], 0x40}}, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x1d7) sendto$packet(r3, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r5, 0x1, 0x4, 0x6, @local}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x6, 0x10, &(0x7f0000000e40)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000300000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000001c00000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYBLOB="041e97"], 0x14}, 0x1, 0x0, 0x0, 0x4044020}, 0x4000000) (async) recvmmsg(r0, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000001180)=""/4096, 0x1000}, {&(0x7f00000005c0)=""/93, 0x5d}, {&(0x7f0000000640)=""/103, 0x67}], 0x3}, 0xc}], 0x1, 0x40030002, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) (async) recvmmsg(r0, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x40, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async) socket$packet(0x11, 0x3, 0x300) (async) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) socket(0x10, 0x803, 0x0) (async) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r4) (async) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) (async) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000390400000000fbdbdf2500000000", @ANYRES32=r5, @ANYBLOB="010f0000419a04002000128008000100736974001400028008000300ac1414bb050004"], 0x40}}, 0x0) (async) write$tun(0xffffffffffffffff, 0x0, 0x1d7) (async) sendto$packet(r3, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r5, 0x1, 0x4, 0x6, @local}, 0x14) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x6, 0x10, &(0x7f0000000e40)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000300000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000001c00000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) (async) 775.691258ms ago: executing program 4 (id=3612): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x3c}}, 0x8175832e37fc3def) openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto={0x0, 0x0, 0x0, 0x2}, @typedef={0x2, 0x0, 0x0, 0x8, 0x2}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}]}, {0x0, [0x0, 0x5f, 0x5f, 0x61]}}, 0x0, 0x52}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f00000002c0)=ANY=[@ANYRES64, @ANYRESHEX], &(0x7f0000000040)='GPL\x00'}, 0x94) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x3c}}, 0x8175832e37fc3def) (async) openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto={0x0, 0x0, 0x0, 0x2}, @typedef={0x2, 0x0, 0x0, 0x8, 0x2}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}]}, {0x0, [0x0, 0x5f, 0x5f, 0x61]}}, 0x0, 0x52}, 0x20) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f00000002c0)=ANY=[@ANYRES64, @ANYRESHEX], &(0x7f0000000040)='GPL\x00'}, 0x94) (async) 696.050078ms ago: executing program 2 (id=3613): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GSUBSCRIP(r0, 0x891c, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1d, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000040000000000000003000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000180000085000000b700000095"], &(0x7f0000000380)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x38, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x94) 657.553105ms ago: executing program 3 (id=3614): r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) (async, rerun: 64) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 64) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x35}}, 0x10) (rerun: 64) sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x130, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x48, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xff}]}, @TIPC_NLA_BEARER={0x8c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x296}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x7f, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x1, @loopback, 0x2}}}}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'eth', 0x3a, 'pimreg\x00'}}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x4002091}, 0x40000) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd70100400000005000000080009000200000008709120560a0000060001000500000008000b0002000000"], 0x34}}, 0x20000034) 655.46347ms ago: executing program 1 (id=3615): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) unshare(0x2c020400) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="09000000050000000800000040"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, r1}, 0x38) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)={0x115c, r3, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_WANTED={0x1008, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "481cc43d212c89376345bf28d75f27a30f017ef666b521bb34656e3b850efba3ea8b453a6c8ce1bbb27435869668b3dcf60339bae58c5eb848f7cf3c74362c94ff5aaefd39368465207ec478297ec63990a224df86674d5ffc55d706f56abc15dbe61e2c0b82c9b55d093650a154149a4f09a3ea2781a7f845a7c2260b59530253315c819a3417826462a66abf42a1e466303048eb9f7db2a7db2806d55c00413ea13a0c1603e2e47d3267495f302af1717a11b8ba05918ca96828c4652b32a1664c04c4fb15c7424a79291d8baa93ce58b633d999aa088aa9fbf00ea25a82945e64ab9936f58129792d97ba9df6458cc172d30127ccdb67c6c0216281fc8166e9c43ee68b2ff0ca86edc416f7a268eed78abe2d712d9d513eb4fc4a6e1ebeccbf9e45ad0ede01df0472238f5312bc035cecd75bfe71998f858d3dd000938244b734deae5393e1bd1ffc7a8e441bc676335a2d519f4c78f8bd93b5291f71c907ac644252bdfeec5ba4b3cb9d90d39b1f650727e6efe15804d69e2c921ba61b50571fc9573c32133caf3ff5b5c82682c128c7d6365e168cf2313ad581b2240a15f55e1534231433afd2dc8c3e37539713ac2d3b3ae30792d683c3014916613083a41470620018e2016055b078d0d085a14d6886eec9aa1e1fe1f9082c1db41c780e0e9fd29e38bd7b4b22c2b169921260a3894052436f2bf60060241867e34111841f9c611b2743379ca05386cb4707127a012a76e3d69648db6b28a963da027747969459dc5b85053fbe426cd7993e3d57350b572fc77c5ab31c67381a842c0203881fea29239818a5406b34afd1964b4f010466fc4e244eb1671d40565e6b0e92f7984e7e2884dc3d7cbc8d894614d8082a5aa808dfb920c013ee50ab8c7785aaab419372d19d0b790b24c2fbcf82115391daafe49beb5c347f7b69ebf5bb811bd6c5106ce27bad70f6b2ffff785d9bb7193e9c9b71743004aae382a9f36973f9ca5a46bcadbdefe0b914a29d2bfc7f8d47ff97e4a81128a8227bbbd123d2d8d3a9e92122e02c82828863c76ebf9982a93e578a721beb65577329980d69d45001de9656562654a92868aa834891d5b28c95d85767adb3ed9fc564b9b1fee96d5f7ec5268bab18e0c20488b453f6a85b2d7b702d04e4e62f0130cde4c7592d9ca202cf424db1f0f5874bd6042e6011ed74d68a47b6058a5ed8c6a2ed3031377f108ee79096ec19ab3c767d14e3bf4c43995125097c1b79c2913ac62aac4713d4764ed8698709bebd92e3a342636890d37282063f050c602299b6dc25567d133946313f2e42c5590a59ae0ec084b16beedb4927645de5da38412620d170c87f0afffa6cfb9b87cc19e3cf4773554513cf7a20b1492815b1938d0c4c3049b97b549f569f3bc9f8e4c0679ed744e253e5faa0a9e04837afd35ebd580915ec79d48fe1bf737a9fa5cbbd42e3b260eba57d807e3d18795ee8fdd76d2ab1c1e5781579c7fcf8d86f4aae14424f3d3489379f37d6e66c8fd0aacaf9d9ca30a6686f6eb76acd4e0e66c2603151c3e23676d9bad126e25413b179a7f156ac633ee86f71950d1037a56efa3c26ff2c4c6e343744b1803b04cb662c35f416651fe0efe53694da2dab01650121b980d3a69ec3ea856a0a82a60730046472dafa1bbdc7906a935c916d30629d25056304ea8cf6ecc9633a4b983c7d66140a7176ee641ef0c0fee67498a68de1c118b5fdb4a91885a188355aa374da54a88d2cd220f300cccabe7abcb4231bc6212a9fb2cf47ffcbcbcfe57a0683d7b5541840e307c33a9dd500d066ba4d2ab35d44556f57098e4a148ca91f5b0eec13d5cf6825655b545419774bd884d5261bd7dd9182cd4fede2f8a2c1c693dc8080725736bd0b0f585c1073e1bf078f70fd2c4c823d929f6602f218f6c158c02a5127b7a57a5befa04a29bcafbc39aa3a0623cf5a0130accfbe22fe2ae5679f5222e7dcec63e6fe6c1ea5a330466190777f0df7f99f1972d7974163104a5bafe64b3122e94db76df7f187276cdac4f3b821f9ecbdb1ff4a1dd87dde69e6d82335edfcfdcc06f11abd2e6bd9f222dc2e2996115080ef8bd2236b345a4f0b7d14c107a352527b2760f12b5917d70dc32a7e99123b70cf14835b909f3d4180fcb9307ce9bae07cd826c41304110125a8484931bfadc64fa38c75a58bb149f8cb173205eb9e6a7541c7d20d541487151bf696b92cb89fb099bba067249398fc22adebd8ae65eaddb21608683798f960025dd46541daf50e02ed633d56b01dc1073f3f435be9a48b537e193a91d3d7693cf765f50f699b57db47951dcba8fac736979237dd90fa0bc21624e538e9fa22bed7e901362a2c29976f350c557b899dd6313a4178e7c22a4682e2464eab315e59c172467d82e6cb832e46b2c2ae0ac1ed766c6013509820efe8ba8f6d8beea18c471e7214fb2a1874265201e0ec15f6ed425a5f8b28b59fcf7bb759000e88fb0de316e3c02325f91aeb4b7695649a7d14f42fe30bed358c8ddc14c523fccfaeb15e5755814cbecb08cf128d763f5d996125ae5d3b3024b5b3c27d35a47225e29f58f8f41da19b1e1f594c7396896e2a8af54b3e46588bbfa399876b259e4f4c203d730c024e17ba25b1e1d3381c1200e4d912297d82bdfdd13c8b383d2717d70e32f29c87b059fc94e1c82dc73af23377280a3bc5788e01b22f9cae9516807e9d5cb26a156e12c75aaff81d88f9af8dff3f575b586de73738efcb457f363b912d462e678efb2454caac84d45e446c891e83139afe23fd42bb2479706e716a436b277c8f2f6d51c8ccbfa6dc8d98715640de69054e005e1017e044f8a41032768764c1685784c8cf12a712f8bd1059e3aaf32f4706a971dd6611dcd29d023e5e71cd1529cfc89f35d7aab491a48de2a8d2e64c53534e52b0e6c5fd7e67686139c78abcc0aebc1fb087d72db190f37da3f661609b46701dc27f1085a68b6d963155098f5e79b7289f43ff2927a8671f4c0650b95cc6e3caf0e0eac4e6e53942bb482e0ad1d744d1618a46e117e98720e2ee4137de3af2269ac366ef1d424e4f0e2a0de137f4642828bc5396c0422d13a22c893461cf004cc5dd63182fb5825ab2ebd3a499364e7bea259b2c22f69cf843d06c8a8a51338678d3e3e715a735aea880847923039a7bd889504244196939a0dafe5f5920297914dff1a5dec688ba2f2d2adfa02f7a29f6804cec9a732ead08a8c1a63a4f19ae0e51f4ed61a4ee6fb3a51d3aaccaec75f50badc49f80a8c32cd4de2d297968e98e1d913a221d932e6eeff058604f7d67c6d738c6dd6a7c5f4f7c22e947e8645cef2c3f312ec018ee8b860c4420bf6c6937adca861a0b25eaab2684ec9a4caf44b57c57c44d237715d0aa5da53ba885afd3bff3783b2542d2a3e1f78b4602fcfa8523077c86890e69bf3be635547fd61145f310d985a6b079da03764c288f7f23ccc144bebc5e927a33e09f9537afe7ba7276be36514cc7823f8bfdfd211cf44c4c26b0d46a4a0e730675c209123baa2f1b5a9b11af4f9a6925d18bc03e9b929b2d0826ffd75b99e7d7fd8c6874c833f0d4c4d70e2dd87616b96e8586380d17b262e64b926cd0afc0db4fd7293535736e79bbd5c94ba610788e36b8b739d0c82f3019851e3310ebeb2f54506d5d96cb31b54ec46ec8ba8ee96f4d59f6a660ae8e7ea71c316bed9df3e6b43e8a41cbb0336f963e38ee3e1afb997eb5544aca3049d0498a9d241d49835c783cadbc63ebe51b5f30e969da061fe7b6f7b1f889fb369598bc71dfa4867c9a2e9db73a0322ad825c51b90d7907b160209b827bc49c99915579b764f23de2cee393d4c6dfb81f66cbeb6b66237ede808499fc5c1b7ad79b5c3ba41c8a8e83ca6d96cfd466ed55d79308c8bdf26af16247aca044056145f38149b853fd9fa89333b2c2b4a2c3ba58809ee741056f3c146032ee387415f8ce37dd07c3af3328018d121fbc878801d7fe136e8908c9f29047d9627a68bcec415ca3ea708154b8f812afdbbbd34ba0b9815bca379c4a8cc52db3aa8e870fe010a6f3a2345074be179a2df925218aa40ecb94b6a59a9ba59ba85a79d95a7abf846484a0dcddaecda0b7b9621e373f25557d0d291ecce176573aa66527244c7a02ad9a5206fc09740fd80f570076f0c20dce5f99dc5c03d6f8bc18e49f9e5f11d9c18d8079256892386c65bc41e82ed3465bdc93c289dde90853d02d2075236d9bbe90388ede394e89de29d5a5e1cb4d978ed476ca5e5d3264c1f9ddd1d1607279de108e51cc5b2a2c487d01201a16a639045bce5f03767aac097fda5234c68f7c9c3f5b46d47fa21db3f66a9d202f876f8c6e2e548b3172b4fe8a343bb0d4d52888d27db8977ccf685350ec9d2598d746dd6e523a0beb7a8984d3ee764e6e79a9df813225d184218a52962873c178e3a4e8b5207bab662e2c9c2066073dd3ed8b5a5d0087545a76f473d18faf4dc8f37b5a2dd046ec563c03596ef232e666703eda9c403a09b810caa8a803fbf25501c8c61b620d95e679c268ceb6b8ae046e6929ffca87794fea8a374759b050d2cfa818fa7cbf93210211edc0af867232fe1dd1f801b10c0d396244008c900c5b3ecdcca7f91394fe2004808f225ea01760e65300b41a51dbf761017833e0f37ee2cfcb971d08587ebb4bc8cbf8c6bcb3a7fcb2bbc0c19de6445e3fde45ba0a532d5b6707a57ec4b20027b6b0528618f8cae3aa318ab9e30efce04bce5f9a2806ab69305090702388de1714f394f1fe6a8c588f95c14fdab47ead3c4687903a08c7fa47c6c337940e9882bc40cf9d88ba461b82ef79d0afd367bb3fbbdced903faaeb9ec8e6095046ebbeced54cf86b390a501e459e519ba54f4fb33529c57e871ff199a4d4dd84967d3e7e53368a0bd265a8bc6950b28153fd13ef62f3d743531239fde0a465231feb92e4b020b42b0f57332cb8d65a6d61c2b9ca50dfe6c598877c2bfa16ce9282657308a928b0dc865dec671eaef61c090df814d88f984f63252f45eddc111e27d4b479e618d2400558a45c4b114370ebb628b0840ce1f490fa03d8467e4a9f86ee982e6dffbbdd78eeebeba09684b8123cde508c553451658f59b821fce9161573bdda289f31fa9b7f8979bea15ccb4db527941614af08a5a490b45ef5c5c65460882d1799bc56ca856339a30d97b7372b4c7827def0cc1029d389b04405012288664673f78dc2666733be1c807e8520af3e0fba7272914280e7be707fa93c152fd322a1ab7734f730ff72cccaa561a520d0d5a7c6f802ef774d5ddde5fb19b0809a33556a31ab30df6c97fe67f9bf9a135f64745f6e7d1f8ab260fdffc3b0a9641b28bc83c54d35d762196c342086a34d0d1c0ba51a05de4e2407c92c43dc96cb76c6ca903e9dbecc4f2e1075566108b10bfbd39769a50fae709ed80aa56473fca4e95f0a7f13f3adcbfcd9f78a57d8e83398bafe0b161c45ba92e5b32b82d817bc6d73ebf64cb14ce3596d3c4dc40d7674360e0893afdd6a4b2197c6fada87987df28ddcd062b0a1564c742093ab0bb2a06673d1a40f8325ec6bdf21d14ab75ee2fccaadf7e897f4d40414692714fd02d334a60e20936dcf97834e8ca3066438c332a4ab71dd1d9b107d7fc05a5ebbc36c1aaa32e680fbf178c536045fb3f927dd11a5444fb2480af93dd7ad94cf806cbf561043fa70551c7e347e07b83faa59e134b06dcba8876fa9f7fe4e9b69fff818505282014c6c277107ed49b8b704e2cb615295b1ed6a870b8e577cad97da"}]}, @ETHTOOL_A_FEATURES_WANTED={0x140, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x135, 0x5, "67b5a0fa7f5bc4c10b23c5874343af5729850f4870c6b928f40e2bc31ee4dc3a1445730ce8d72fc77cea25d80cacb663185e2644897ad7ec8889945ca7eac8a315a2b6a47ed3c92d13e7a26371366923b7d044548b979fd3b33d7082f3c3ce15980ad27247984fb0f04831305f9a6837ee7ac30a4798fac1b080604a12d35c0b07bb2f40a0bbf44bf0920101b9129368658d0f9ba65186c22be13a5c39ab47bd8f6268af7caa26ae19599177778c320bf3ead2c7c9db5bbbf0ad95decaf7e320193850c646ebf8a7da1a900f59a1509202ae09579faf8f02002971e540b6e99ec49f1373c0b0c6c05af0b7de0e2bdba6a9383674d7e7f780ad464accf75e298e1aff775c34d9fd4a665810e43a00000000000000000000766c1181b99e58d318f5148a311a45ff2c3212ce24267e15badd"}]}]}, 0x115c}, 0x1, 0x0, 0x0, 0x818}, 0x20000004) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000002000000000000000002000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300000000000085000000ae000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 535.67662ms ago: executing program 1 (id=3616): r0 = accept4$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000040)=0x10, 0x80800) recvfrom$llc(r0, &(0x7f0000000080)=""/167, 0xa7, 0x40002000, &(0x7f0000000140)={0x1a, 0x201, 0x4, 0x4, 0x3, 0x7c, @random="e83c8d2c7b73"}, 0x10) r1 = epoll_create1(0x0) ioctl$FITHAW(r1, 0xc0045878) r2 = accept(r0, &(0x7f0000000180)=@can={0x1d, 0x0}, &(0x7f0000000200)=0x80) getsockopt$IP6T_SO_GET_REVISION_MATCH(r2, 0x29, 0x44, &(0x7f0000000240)={'icmp6\x00'}, &(0x7f0000000280)=0x1e) r4 = socket(0xf, 0x800, 0x9) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f0000000440)={{r0, &(0x7f00000002c0)='[\x00', 0x480000, &(0x7f0000000300)={@_ha_fsid={[0x8, 0x1]}, {0x7, 0x8001, 0x0, 0x6}}, 0x10, &(0x7f0000000340)={@_ha_fsid}, &(0x7f0000000380)=0xfffffffa}, {[0x7c7, 0x0, 0xfffffffc, 0x2]}, 0x7, 0x42, &(0x7f00000003c0)=""/66}) ioctl$PPPIOCSMRRU(r5, 0x4004743b, &(0x7f00000004c0)=0x45c8) ioctl$sock_inet_SIOCGIFBRDADDR(r4, 0x8919, &(0x7f0000000500)={'veth0_to_batadv\x00', {0x2, 0x0, @remote}}) ioctl$XFS_IOC_START_COMMIT(r4, 0x80585882, &(0x7f0000000540)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f00000005c0)={0x0, 0x8, 0x4, 0x3ff}, &(0x7f0000000600)=0x10) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f0000000640)={r7, 0x2, 0x9}, &(0x7f0000000680)=0x8) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f00000006c0)={'HL\x00'}, &(0x7f0000000700)=0x1e) mmap$xdp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000009, 0x4000010, r6, 0x0) connect$802154_dgram(r4, &(0x7f0000000740)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0002}}}, 0x14) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000007c0)=0x0) sendmsg$nl_generic(r2, &(0x7f00000018c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001880)={&(0x7f0000000800)={0x1048, 0x10, 0x200, 0x70bd26, 0x25dfdbfc, {0x20}, [@typed={0x8, 0x121, 0x0, 0x0, @pid=r8}, @typed={0x14, 0x11f, 0x0, 0x0, @ipv6=@empty}, @nested={0x1008, 0x96, 0x0, 0x1, [@typed={0x4, 0xc5}, @generic="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"]}, @typed={0x8, 0x96, 0x0, 0x0, @ipv4=@multicast1}, @typed={0x8, 0xf9, 0x0, 0x0, @u32}]}, 0x1048}, 0x1, 0x0, 0x0, 0x8000}, 0x4060) sendto$inet(r2, &(0x7f0000001900), 0x0, 0x24004000, 0x0, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000001940)={r7, 0x7}, &(0x7f0000001980)=0x8) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000019c0)={{{@in6=@private1, @in6=@remote}}, {{@in6=@mcast2}, 0x0, @in=@multicast2}}, &(0x7f0000001ac0)=0xe8) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000001b00), r10) r11 = syz_genetlink_get_family_id$gtp(&(0x7f0000001b80), r4) sendmsg$GTP_CMD_GETPDP(r2, &(0x7f0000001c80)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x1200}, 0xc, &(0x7f0000001c40)={&(0x7f0000001bc0)={0x70, r11, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_LINK={0x8, 0x1, r3}, @GTPA_FAMILY={0x5, 0xd, 0x1e}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_MS_ADDR6={0x14, 0xc, @private2={0xfc, 0x2, '\x00', 0x1}}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000040}, 0x800) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001cc0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000001d40), r2) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r6, &(0x7f0000001e40)={&(0x7f0000001d00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001e00)={&(0x7f0000001d80)={0x68, r12, 0x10, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x9, @media='udp\x00'}}}, ["", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x20004800}, 0x80) sendmmsg$inet_sctp(r4, &(0x7f0000002340)=[{&(0x7f0000001e80)=@in={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000001f80)=[{&(0x7f0000001ec0)="be25731bc9f2e6754fbe69a4732aebc503902476e43688b2def029c4cfeeebb8e2ae6f27f6f5c462012a6bf0dc2ff76bc78043b58edc742befe02de8fa57648ec6c4d9815e5ad1329233fea9d5c353dde861025230aa8f980560431fafb4fd4484c66f21b71c37136d059ddef10642ccea8d76821385e5f52a9488de3541d6f37e16e7a3955bde49c2ae549d3d3a7330dc7571de1c9ed3ec23012c13541ce6171e52569c2bc86ffe8c94cb69e07dc0b1ac7655ec9f2e7658", 0xb8}], 0x1, &(0x7f0000001fc0)=[@dstaddrv6={0x20, 0x84, 0x8, @remote}, @sndrcv={0x30, 0x84, 0x1, {0x1, 0x4, 0x0, 0xffffffff, 0x7, 0x7, 0x9, 0xfff, r9}}, @sndinfo={0x20, 0x84, 0x2, {0x0, 0x208, 0x2, 0x9, r7}}, @init={0x18, 0x84, 0x0, {0x7, 0x39, 0x1, 0x252}}], 0x88, 0x20000041}, {&(0x7f0000002080)=@in6={0xa, 0x4e24, 0x9, @loopback, 0x90f}, 0x1c, &(0x7f0000002280)=[{&(0x7f00000020c0)="845a64628610ec9059ae9c01a7f55436", 0x10}, {&(0x7f0000002100)="47a690a684a9389bd8c9a31c7ab6b27084b831d0ed9dcaa04bf42125c128a21d395a243f0c1f9f709afb88a79dd9819aa9bd524bbaa18dae1e784b09372c95f29de34ed5df01ba7b0ba6a04becef45aef2a707cf3abf85", 0x57}, {&(0x7f0000002180)="0da2dc90a16666ba0019e9f60830c109417d4dcd3f5c67b33bf068505b2c59462618b26d3a7e5e97f8677ffe69b8a0ef47cfae1e8b8739a61ad53cbed2fe233d564ae0514d039509d13e2992f3dfc50d76568bc65ce518c277a6284d03f8dde1adc629ef2f94039a9a5f9103d0bae0c8170067935ecfdefa609d49e04c13c407ca9ddf548b3b7497418459e9ae53675e1471466eb643c4b4d6a3c8e5afb60d0013e40cf6f9a923cc2b83177b1eb12d251dda8bbea2fa47706a5f9470611a4a48f099113f19b49befa90e00e40992218ea9b001365391fe67421e9671ad6634737d", 0xe1}], 0x3, &(0x7f00000022c0)=[@sndinfo={0x20, 0x84, 0x2, {0x3, 0x200, 0x8, 0x8, r9}}, @authinfo={0x18, 0x84, 0x6, {0x2}}, @dstaddrv4={0x18, 0x84, 0x7, @private=0xa010102}], 0x50, 0x40800}], 0x2, 0x0) accept4$phonet_pipe(r6, &(0x7f00000023c0), &(0x7f0000002400)=0x10, 0x80800) 535.223864ms ago: executing program 4 (id=3617): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc840) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) (async) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="010000000000ff7f1c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x8000) (async) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000140)={r4, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}}, 0x10) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYRESOCT=r4, @ANYRES32=0x0, @ANYBLOB="0000000000000000a8000000", @ANYRES32=0x0, @ANYBLOB="08001b0000000000"], 0x30}}, 0x0) (async) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r3) r7 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) r8 = socket$netlink(0x10, 0x3, 0x4) (async) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000013000000000000000000000004000000"], 0x14}], 0x1}, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) ioctl$XFS_IOC_AG_GEOMETRY(r8, 0xc080583d, &(0x7f0000000380)={0x400, 0xacc, 0x3, 0x9, 0x2be6400, 0x3, 0x5bd4, 0x180e}) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000340)={'tunl0\x00', 0x0}) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='ipvlan1\x00', 0x10) sendmsg$nl_route_sched(r10, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x44, 0x24, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0x10}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0xffff8000}, @TCA_CAKE_MPU={0x8, 0xe, 0xfd}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000001}, 0x4800) (async) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000140)='syzkaller\x00'}, 0x80) (async) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000280)=@generic={&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r12}, 0x18) 533.978494ms ago: executing program 0 (id=3618): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x600, 0xf, 0x80, 0x0, 0x0, 0xfc, 0x1, 0x80, 0x4, [0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4]}}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000001340)=[{&(0x7f0000001380)="27031600160014000000002f1eafacf706e105000000894f00050003ee0b80558ddbba9b37242d37a518fc9c4ae50eaf07c365059676ef3c5a24351cf7809a6c7a0c1b6ed9644a0828b3191740d91b5edc2785261914ddc993cb0f5e82ce30ce547aceb2fcd7756dfdfd9862364df31e6176d3b62c7295d158248ba52ffe8398445c2c16cfd96811c3384924e5759e511a4124c0a97ca20c400ece1ad7382afa5f30c8d4e1a81b376bb2ea5ae7cd53e59b9f", 0xb2}, {&(0x7f00000002c0)="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", 0xea8}], 0x2}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x27) sendmsg$IPSET_CMD_CREATE(r3, 0x0, 0x24000800) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x38, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}]}], {0x14}}, 0xdc}}, 0x0) close(0x3) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0) (async) socket$netlink(0x10, 0x3, 0x10) (async) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x600, 0xf, 0x80, 0x0, 0x0, 0xfc, 0x1, 0x80, 0x4, [0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4]}}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$kcm(0x11, 0x3, 0x0) (async) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000000), 0x4) (async) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000001340)=[{&(0x7f0000001380)="27031600160014000000002f1eafacf706e105000000894f00050003ee0b80558ddbba9b37242d37a518fc9c4ae50eaf07c365059676ef3c5a24351cf7809a6c7a0c1b6ed9644a0828b3191740d91b5edc2785261914ddc993cb0f5e82ce30ce547aceb2fcd7756dfdfd9862364df31e6176d3b62c7295d158248ba52ffe8398445c2c16cfd96811c3384924e5759e511a4124c0a97ca20c400ece1ad7382afa5f30c8d4e1a81b376bb2ea5ae7cd53e59b9f", 0xb2}, {&(0x7f00000002c0)="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", 0xea8}], 0x2}, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x27) (async) sendmsg$IPSET_CMD_CREATE(r3, 0x0, 0x24000800) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x38, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}]}], {0x14}}, 0xdc}}, 0x0) (async) close(0x3) (async) 509.85256ms ago: executing program 2 (id=3619): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0xd0f, 0xfffffffd, 0xffffffff, {0x60, 0x0, 0x0, 0x0, {0xffe0, 0x2}, {0xfff2, 0x10}, {0x6, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000844}, 0x2000c8d1) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000140), &(0x7f0000000240)=r2}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001a80)={r1, &(0x7f00000018c0), 0x0}, 0x20) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="4001090000000000f9b50004030004ab03"], 0x14) socket(0xa, 0x4, 0x0) 470.197088ms ago: executing program 1 (id=3620): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x309340, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r1, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r1}, 0x8) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r4}, 0xc) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x2, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xf, 0xf, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x583e}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x1b, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2, r5, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000000800000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, r5, 0x0, 0x0, 0x0, 0x0, 0xc641}, 0x94) 331.15378ms ago: executing program 3 (id=3621): openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_merged\x00', 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x6, 0x0, 0x0, 0xffffffff}]}, 0x10) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x20000003, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffff7e}, 0x94) (async) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaa0200aaaa1e08004502"], 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x2e, 0x0, &(0x7f0000000040)="25f2907a45fcfe8c1abd3456cb48eaa116be8bea003d4a5e603b7fae0439b8a4f280588e51f6076e935c0f8a7d5c", 0x0, 0xd01, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f00000005c0)={'wg0\x00', {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}) 330.526665ms ago: executing program 0 (id=3622): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)={0x34, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {0x1b}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000084}, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r2, 0xc038586a, &(0x7f0000000180)={r0, &(0x7f0000000040)='-\x00', 0x608102, &(0x7f0000000080)={@align=0x6, {0x6, 0x3, 0x8, 0x1ff}}, 0x1, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)}) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000001c0), 0x3) 290.144864ms ago: executing program 1 (id=3623): ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x40, &(0x7f0000000040)={@align=0xcce, {0x9, 0x200, 0x3, 0x5}}, 0x1, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)=0x4}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000002c0)={0x0}, &(0x7f0000000300)=0xc) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) setsockopt$sock_int(r3, 0x1, 0x10, &(0x7f0000000040)=0x3, 0x4) sendto(r3, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000004f40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=""/14, 0xe}, 0xdabc}], 0x1, 0x10022, 0x0) unshare(0x22020400) openat$ppp(0xffffffffffffff9c, 0x0, 0x843, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bond0\x00'}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x89b1, &(0x7f0000000000)={'bond0\x00', 0x200}) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001680), 0x4) sendmsg$netlink(r0, &(0x7f00000027c0)={&(0x7f0000000280)=@kern={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002780)=[{&(0x7f0000000340)={0x1340, 0x1e, 0x100, 0x70bd29, 0x25dfdbff, "", [@nested={0x21b, 0xa3, 0x0, 0x1, [@generic="a086dd14550dbc0e98d23f48de901e37ec04546a968e97cc8abbb08c85680cdd386d791bb195bbd9ae6495a81fc4a3c756137a8d4cccf7d7ef074833bd06b91086f818182304e3d5d23ce7285781599616a4e24e36fa8ec93b386cf55c307e0a6417d79333f33987c30aa5", @generic="cd13a0576725bbad97dd2b29c98632f3c141d88b317901abefe21eef5cec79d1f948788bfef2dca754a92f39d71c8cc9b4db385312a41c90a0ba98d7c516220540b273be71ed924ee6", @generic="d6c800ccd3930ae8f14e7cf2d8204c11a7483f37c464a1e6ebe701fd46e23f1e230e85fcde8e62b44ee6708f5d31f6b4797971c31c2d265119c672455f93b43290e8c9db5a6130a0ec29e3a74b65aaec7aa6a6cf4c054980", @generic="5e4a4e4dfc3722cebfcb8bccc28b49389196205d7a1a86a56309da2e96e8b77f96b9bb331bb880b12145a06d57cd397df862b7845401332178eed69a0830b41747ee64955854bb0b82", @nested={0x4, 0xc3}, @generic="9e6f4671874d4a79bb9a3023217a994f8610272137b917b39232b310703c2d5a14355ad8dbb3e67f87bb76195a1861b00f4b0d58205a64bcbd149322b75dd98816c897578df75e5b8bcd4471a20838a9647f77547c1b66d804cc0fc7879c71a7ea9e78b3ddb0d3cdbcad37b023edf790034619ed33a0271afbdfae233cf2384a39a2f6b4b2c96668e29785ad301e549329aed471482b3861d430b089e055df408c1e78df23386014042e74b14ec3c82219305f1d3ec770f2835d0076aa92"]}, @typed={0xc, 0x6a, 0x0, 0x0, @u64=0x1}, @nested={0x38, 0x7b, 0x0, 0x1, [@nested={0x4, 0x135}, @generic="0bde9b05b2c8ccc1f8e8e38f5d771c86c2d3568737", @typed={0x4, 0x42}, @nested={0x4, 0x109}, @generic="416e4bb4ef774b34a4ff5e298bff77", @nested={0x4, 0xae}]}, @typed={0x4, 0xf7}, @nested={0x18, 0xd6, 0x0, 0x1, [@typed={0x14, 0x114, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}]}, @typed={0x8, 0x43, 0x0, 0x0, @pid=r1}, @typed={0x8, 0x98, 0x0, 0x0, @fd=r2}, @nested={0x8b, 0x18, 0x0, 0x1, [@generic="e5069c26f42317a149382ca74158f10bea0c29ae90f60694fd606a106150f4c3bf25b357f481a4e3b6c9b6ada19c37aa64d6249503b47cf8ea0779b26f05eb27daaa87f23e3b2f21a4fbcf214212b48088f2d192ebbc574445f22c6f729145ee2d0faaa066e50d21a3836ef76ff217b586e5accf3ca591818ce9c326d7a710565140dc7ee5c10a"]}, @nested={0x1018, 0x54, 0x0, 0x1, [@typed={0x8, 0xb4, 0x0, 0x0, @u32=0x3}, @generic="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", @typed={0xc, 0x17, 0x0, 0x0, @u64=0x5}]}]}, 0x1340}, {&(0x7f00000016c0)={0x109c, 0x3e, 0x502, 0x70bd2b, 0x25dfdbfc, "", [@nested={0x107c, 0x28, 0x0, 0x1, [@generic="97206c44cb8b715add60b07f5a5d2fee3ee121d89ab9e86c78e6e03d16e601c2202edfac9c240c5fe8ee45ec516ffa746212ee19b91c15f1e23a264a0d48e11b0ccfb1d54e5b58db12031394041555ab47204b9e", @typed={0x8, 0xd0, 0x0, 0x0, @u32=0x10000}, @typed={0x8, 0x13c, 0x0, 0x0, @fd=r6}, @nested={0x4, 0x81}, @generic="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", @typed={0x5, 0x3, 0x0, 0x0, @str='\x00'}, @nested={0x4, 0xe6}, @nested={0x4, 0xe2}]}, @typed={0x6, 0x9c, 0x0, 0x0, @str='\xff\xff'}, @typed={0x8, 0x6a, 0x0, 0x0, @u32=0xc}]}, 0x109c}], 0x2, 0x0, 0x0, 0x20000010}, 0x54) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x64, r7, 0x917, 0x70bd27, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @remote}}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x64}}, 0x0) 76.157556ms ago: executing program 4 (id=3624): r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x7, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000680)=@newtaction={0x44c, 0x31, 0x1, 0x0, 0x0, {}, [{0x438, 0x1, [@m_police={0x434, 0x0, 0x0, 0x0, {{0xb}, {0x408, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa1, 0x0, 0x3ff, 0x0, 0x0, 0xfff, 0x0, 0xffc, 0x0, 0x6, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xfffffffa, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0xb1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400044, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0xfffffffd, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80000000, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, 0x0, 0x8, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, 0x4000, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0xd, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x2, 0x0, 0x80000000, 0x0, 0x5, 0x5, 0x40, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffe, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x1]}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x44c}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0x0, &(0x7f0000000040), &(0x7f0000000080)='GPL\x00', 0x9, 0x11, &(0x7f00000000c0)=""/17, 0x41100, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x3, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, &(0x7f0000000140)=[{0x2, 0x1, 0xe, 0x2}, {0x5, 0x7, 0x2, 0xb}, {0x5, 0x1, 0xf, 0x5}, {0x2, 0x1, 0xb, 0x8}, {0x0, 0x5, 0x5, 0x4}, {0x1, 0x2, 0x9, 0x8}, {0x5, 0x3, 0x4, 0xa}, {0x1, 0x3, 0x1, 0x7}]}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0xb, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000611885000000000095"], &(0x7f0000000000)='GPL\x00', 0xd, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) 7.82193ms ago: executing program 3 (id=3625): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'batadv_slave_0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@delqdisc={0x24, 0x26, 0x1, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0x9}, {0xffe0, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@delqdisc={0x24, 0x26, 0x1, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0x9}, {0xffe0, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) bpf$TOKEN_CREATE(0x24, &(0x7f00000005c0)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1c, 0x8, &(0x7f0000000580)=ANY=[@ANYRES8=r0], 0x0, 0x349, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'macvlan0\x00', @random="bdbd67c12945"}) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'macvlan0\x00', @random="bdbd67c12945"}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], 0x0}, 0x94) r2 = socket(0x2, 0xa, 0x300) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'veth0_to_batadv\x00', 0x0}) sendmsg$can_raw(r3, &(0x7f0000000440)={&(0x7f0000000880)={0x1d, r4}, 0x10, &(0x7f00000005c0)={&(0x7f0000000100)=@can={{0x0, 0x1, 0x0, 0x1}, 0x8, 0x3, 0x0, 0x0, "4c1ea5382b20f15c"}, 0x66}, 0x1, 0x0, 0x0, 0x2004c880}, 0x20000041) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x30, 0x5, 0x1, 0xfffdf034}, {0x6, 0x1, 0x6, 0x6}]}, 0x10) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x520, 0x320, 0x18c, 0x203, 0x0, 0x19030000, 0x450, 0x2e0, 0x2e0, 0x450, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8, 0x2000000}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x4d, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {0x0, 0x10}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x10}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}, @inet=@rpfilter={{0x28}, {0xd}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x5, 0x4}, {0x0, 0x6, 0x2}, {0xffffffffffffffff, 0x1, 0x4}, 0x9, 0x80}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x580) socket$kcm(0x2, 0x3, 0x2) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd"], 0xfdef) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd"], 0xfdef) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) (async) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 0s ago: executing program 4 (id=3626): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r4 = socket$netlink(0x10, 0x3, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c) listen(r6, 0x0) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r5, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a1c000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0xffffffffffffff8e, &(0x7f0000000240)={&(0x7f0000000080)=@delchain={0x54, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x88a8}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40044}, 0x4804) kernel console output (not intermixed with test programs): 00000000002 [ 525.122753][T18110] R13: 00007fa331a16038 R14: 00007fa331a15fa0 R15: 00007ffd38f614b8 [ 525.122787][T18110] [ 525.123492][T18107] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2923'. [ 525.365783][T18111] 8021q: adding VLAN 0 to HW filter on device bond15 [ 525.504179][T18113] bond15: (slave gretap3): making interface the new active one [ 525.512825][T18113] bond15: (slave gretap3): Enslaving as an active interface with an up link [ 525.586299][T18088] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2916'. [ 525.615092][T18088] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2916'. [ 526.269588][T18145] tipc: Enabling of bearer rejected, already enabled [ 526.318669][T18145] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2932'. [ 526.353273][T18150] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 526.372963][T18150] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 526.386724][T18150] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 526.396886][T18150] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 526.405708][T18150] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 526.520737][T18155] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 526.623285][T18155] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 526.695940][T18162] FAULT_INJECTION: forcing a failure. [ 526.695940][T18162] name failslab, interval 1, probability 0, space 0, times 0 [ 526.724106][T18155] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 526.766922][T18162] CPU: 1 UID: 0 PID: 18162 Comm: syz.2.2936 Not tainted syzkaller #0 PREEMPT(full) [ 526.766949][T18162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 526.766961][T18162] Call Trace: [ 526.766967][T18162] [ 526.766976][T18162] dump_stack_lvl+0xe8/0x150 [ 526.767004][T18162] should_fail_ex+0x412/0x560 [ 526.767033][T18162] should_failslab+0xa8/0x100 [ 526.767061][T18162] __kmalloc_cache_noprof+0x88/0x660 [ 526.767087][T18162] ? nft_netdev_hook_alloc+0x220/0x570 [ 526.767109][T18162] ? __kmalloc_cache_noprof+0x15b/0x660 [ 526.767137][T18162] nft_netdev_hook_alloc+0x220/0x570 [ 526.767168][T18162] nf_tables_parse_netdev_hooks+0x152/0xa30 [ 526.767197][T18162] nft_flowtable_parse_hook+0x46a/0x920 [ 526.767239][T18162] ? __pfx_nft_flowtable_parse_hook+0x10/0x10 [ 526.767263][T18162] ? nft_pernet+0x23/0x240 [ 526.767296][T18162] nf_tables_delflowtable+0xa85/0x1b10 [ 526.767332][T18162] ? __pfx_nf_tables_delflowtable+0x10/0x10 [ 526.767359][T18162] ? nfnl_pernet+0x23/0x240 [ 526.767402][T18162] ? __nla_parse+0x40/0x60 [ 526.767431][T18162] nfnetlink_rcv+0x123e/0x27b0 [ 526.767493][T18162] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 526.767572][T18162] ? netlink_deliver_tap+0x2e/0x1b0 [ 526.767602][T18162] ? netlink_deliver_tap+0x2e/0x1b0 [ 526.767620][T18162] ? netlink_deliver_tap+0x2e/0x1b0 [ 526.767645][T18162] netlink_unicast+0x75c/0x8e0 [ 526.767684][T18162] netlink_sendmsg+0x813/0xb40 [ 526.767713][T18162] ? __pfx_netlink_sendmsg+0x10/0x10 [ 526.767737][T18162] ? aa_sock_msg_perm+0xf1/0x1b0 [ 526.767763][T18162] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 526.767788][T18162] ____sys_sendmsg+0x972/0x9f0 [ 526.767806][T18162] ? __might_fault+0xaf/0x130 [ 526.767835][T18162] ? __pfx_____sys_sendmsg+0x10/0x10 [ 526.767862][T18162] ? import_iovec+0x73/0xa0 [ 526.767893][T18162] ___sys_sendmsg+0x2a5/0x360 [ 526.767911][T18162] ? __lock_acquire+0x6b5/0x2cf0 [ 526.767936][T18162] ? __pfx____sys_sendmsg+0x10/0x10 [ 526.767992][T18162] ? __fget_files+0x2a/0x420 [ 526.768013][T18162] ? __fget_files+0x3a0/0x420 [ 526.768046][T18162] __x64_sys_sendmsg+0x1bd/0x2a0 [ 526.768067][T18162] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 526.768096][T18162] ? __pfx_ksys_write+0x10/0x10 [ 526.768131][T18162] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 526.768152][T18162] do_syscall_64+0x15f/0xf80 [ 526.768178][T18162] ? trace_irq_disable+0x3b/0x140 [ 526.768206][T18162] ? clear_bhb_loop+0x40/0x90 [ 526.768237][T18162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 526.768255][T18162] RIP: 0033:0x7ff1acb9ce59 [ 526.768274][T18162] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 526.768289][T18162] RSP: 002b:00007ff1ad986028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 526.768309][T18162] RAX: ffffffffffffffda RBX: 00007ff1ace15fa0 RCX: 00007ff1acb9ce59 [ 526.768324][T18162] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 526.768334][T18162] RBP: 00007ff1ad986090 R08: 0000000000000000 R09: 0000000000000000 [ 526.768346][T18162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 526.768358][T18162] R13: 00007ff1ace16038 R14: 00007ff1ace15fa0 R15: 00007fff8ab21668 [ 526.768389][T18162] [ 526.831244][T18155] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 527.521388][ T7233] lo speed is unknown, defaulting to 1000 [ 527.609555][T18148] lo speed is unknown, defaulting to 1000 [ 527.789678][T18197] tipc: Enabling of bearer rejected, already enabled [ 527.805130][T18203] netlink: 'syz.2.2946': attribute type 16 has an invalid length. [ 527.918962][T18203] lo speed is unknown, defaulting to 1000 [ 527.967630][T18209] FAULT_INJECTION: forcing a failure. [ 527.967630][T18209] name failslab, interval 1, probability 0, space 0, times 0 [ 528.013537][T18209] CPU: 0 UID: 0 PID: 18209 Comm: syz.0.2949 Not tainted syzkaller #0 PREEMPT(full) [ 528.013572][T18209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 528.013582][T18209] Call Trace: [ 528.013590][T18209] [ 528.013598][T18209] dump_stack_lvl+0xe8/0x150 [ 528.013627][T18209] should_fail_ex+0x412/0x560 [ 528.013658][T18209] should_failslab+0xa8/0x100 [ 528.013689][T18209] __kmalloc_cache_noprof+0x88/0x660 [ 528.013716][T18209] ? nft_netdev_hook_alloc+0x220/0x570 [ 528.013733][T18209] ? __kmalloc_cache_noprof+0x15b/0x660 [ 528.013764][T18209] nft_netdev_hook_alloc+0x220/0x570 [ 528.013793][T18209] nf_tables_parse_netdev_hooks+0x152/0xa30 [ 528.013824][T18209] nft_flowtable_parse_hook+0x46a/0x920 [ 528.013857][T18209] ? __pfx_nft_flowtable_parse_hook+0x10/0x10 [ 528.013883][T18209] ? nft_pernet+0x23/0x240 [ 528.013918][T18209] nf_tables_delflowtable+0xa85/0x1b10 [ 528.013955][T18209] ? __pfx_nf_tables_delflowtable+0x10/0x10 [ 528.013981][T18209] ? nfnl_pernet+0x23/0x240 [ 528.014029][T18209] ? __nla_parse+0x40/0x60 [ 528.014059][T18209] nfnetlink_rcv+0x123e/0x27b0 [ 528.014124][T18209] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 528.014210][T18209] ? netlink_deliver_tap+0x2e/0x1b0 [ 528.014240][T18209] ? netlink_deliver_tap+0x2e/0x1b0 [ 528.014257][T18209] ? netlink_deliver_tap+0x2e/0x1b0 [ 528.014281][T18209] netlink_unicast+0x75c/0x8e0 [ 528.014319][T18209] netlink_sendmsg+0x813/0xb40 [ 528.014348][T18209] ? __pfx_netlink_sendmsg+0x10/0x10 [ 528.014370][T18209] ? aa_sock_msg_perm+0xf1/0x1b0 [ 528.014395][T18209] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 528.014424][T18209] ____sys_sendmsg+0x972/0x9f0 [ 528.014442][T18209] ? __might_fault+0xaf/0x130 [ 528.014470][T18209] ? __pfx_____sys_sendmsg+0x10/0x10 [ 528.014498][T18209] ? import_iovec+0x73/0xa0 [ 528.014529][T18209] ___sys_sendmsg+0x2a5/0x360 [ 528.014546][T18209] ? __lock_acquire+0x6b5/0x2cf0 [ 528.014571][T18209] ? __pfx____sys_sendmsg+0x10/0x10 [ 528.014630][T18209] ? __fget_files+0x2a/0x420 [ 528.014651][T18209] ? __fget_files+0x3a0/0x420 [ 528.014685][T18209] __x64_sys_sendmsg+0x1bd/0x2a0 [ 528.014708][T18209] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 528.014738][T18209] ? __pfx_ksys_write+0x10/0x10 [ 528.014775][T18209] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.014811][T18209] do_syscall_64+0x15f/0xf80 [ 528.014837][T18209] ? trace_irq_disable+0x3b/0x140 [ 528.014866][T18209] ? clear_bhb_loop+0x40/0x90 [ 528.014889][T18209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.014907][T18209] RIP: 0033:0x7f3e8579ce59 [ 528.014925][T18209] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 528.014940][T18209] RSP: 002b:00007f3e86589028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 528.014962][T18209] RAX: ffffffffffffffda RBX: 00007f3e85a15fa0 RCX: 00007f3e8579ce59 [ 528.014975][T18209] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 528.014987][T18209] RBP: 00007f3e86589090 R08: 0000000000000000 R09: 0000000000000000 [ 528.014998][T18209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 528.015008][T18209] R13: 00007f3e85a16038 R14: 00007f3e85a15fa0 R15: 00007ffca5037a78 [ 528.015040][T18209] [ 528.403557][T18216] __nla_validate_parse: 7 callbacks suppressed [ 528.403575][T18216] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2951'. [ 528.426809][T18216] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2951'. [ 528.504739][T18150] Bluetooth: hci5: command tx timeout [ 528.771245][T18218] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2948'. [ 529.358131][T18240] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2958'. [ 529.370615][T18242] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2957'. [ 529.396328][T18240] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2958'. [ 529.551028][T18244] tipc: Enabling of bearer rejected, already enabled [ 529.570679][T18244] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2959'. [ 529.627105][T18244] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2959'. [ 529.716915][T18256] FAULT_INJECTION: forcing a failure. [ 529.716915][T18256] name failslab, interval 1, probability 0, space 0, times 0 [ 529.731256][T18256] CPU: 0 UID: 0 PID: 18256 Comm: syz.1.2961 Not tainted syzkaller #0 PREEMPT(full) [ 529.731283][T18256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 529.731295][T18256] Call Trace: [ 529.731303][T18256] [ 529.731311][T18256] dump_stack_lvl+0xe8/0x150 [ 529.731340][T18256] should_fail_ex+0x412/0x560 [ 529.731372][T18256] should_failslab+0xa8/0x100 [ 529.731412][T18256] __kmalloc_cache_noprof+0x88/0x660 [ 529.731440][T18256] ? nft_netdev_hook_alloc+0x220/0x570 [ 529.731457][T18256] ? __kmalloc_cache_noprof+0x15b/0x660 [ 529.731488][T18256] nft_netdev_hook_alloc+0x220/0x570 [ 529.731517][T18256] nf_tables_parse_netdev_hooks+0x152/0xa30 [ 529.731550][T18256] nft_flowtable_parse_hook+0x46a/0x920 [ 529.731584][T18256] ? __pfx_nft_flowtable_parse_hook+0x10/0x10 [ 529.731609][T18256] ? nft_pernet+0x23/0x240 [ 529.731646][T18256] nf_tables_delflowtable+0xa85/0x1b10 [ 529.731687][T18256] ? __pfx_nf_tables_delflowtable+0x10/0x10 [ 529.731715][T18256] ? nfnl_pernet+0x23/0x240 [ 529.731759][T18256] ? __nla_parse+0x40/0x60 [ 529.731791][T18256] nfnetlink_rcv+0x123e/0x27b0 [ 529.731857][T18256] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 529.731904][T18256] ? ref_tracker_free+0x693/0x840 [ 529.731960][T18256] ? __netlink_deliver_tap+0x807/0x850 [ 529.731989][T18256] ? netlink_deliver_tap+0x2e/0x1b0 [ 529.732006][T18256] ? netlink_deliver_tap+0x2e/0x1b0 [ 529.732029][T18256] netlink_unicast+0x75c/0x8e0 [ 529.732065][T18256] netlink_sendmsg+0x813/0xb40 [ 529.732094][T18256] ? __pfx_netlink_sendmsg+0x10/0x10 [ 529.732117][T18256] ? aa_sock_msg_perm+0xf1/0x1b0 [ 529.732142][T18256] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 529.732171][T18256] ____sys_sendmsg+0x972/0x9f0 [ 529.732190][T18256] ? __might_fault+0xaf/0x130 [ 529.732221][T18256] ? __pfx_____sys_sendmsg+0x10/0x10 [ 529.732248][T18256] ? import_iovec+0x73/0xa0 [ 529.732279][T18256] ___sys_sendmsg+0x2a5/0x360 [ 529.732294][T18256] ? __lock_acquire+0x6b5/0x2cf0 [ 529.732317][T18256] ? __pfx____sys_sendmsg+0x10/0x10 [ 529.732372][T18256] ? __fget_files+0x2a/0x420 [ 529.732402][T18256] ? __fget_files+0x3a0/0x420 [ 529.732433][T18256] __x64_sys_sendmsg+0x1bd/0x2a0 [ 529.732455][T18256] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 529.732484][T18256] ? __pfx_ksys_write+0x10/0x10 [ 529.732521][T18256] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.732542][T18256] do_syscall_64+0x15f/0xf80 [ 529.732568][T18256] ? trace_irq_disable+0x3b/0x140 [ 529.732596][T18256] ? clear_bhb_loop+0x40/0x90 [ 529.732620][T18256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.732637][T18256] RIP: 0033:0x7fa33179ce59 [ 529.732657][T18256] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 529.732670][T18256] RSP: 002b:00007fa3325d4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 529.732692][T18256] RAX: ffffffffffffffda RBX: 00007fa331a15fa0 RCX: 00007fa33179ce59 [ 529.732704][T18256] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 529.732715][T18256] RBP: 00007fa3325d4090 R08: 0000000000000000 R09: 0000000000000000 [ 529.732727][T18256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 529.732737][T18256] R13: 00007fa331a16038 R14: 00007fa331a15fa0 R15: 00007ffd38f614b8 [ 529.732771][T18256] [ 530.307606][T18148] bridge0: port 1(bridge_slave_0) entered blocking state [ 530.326407][T18148] bridge0: port 1(bridge_slave_0) entered disabled state [ 530.333751][T18148] bridge_slave_0: entered allmulticast mode [ 530.378285][T18148] bridge_slave_0: entered promiscuous mode [ 530.398067][T18148] bridge0: port 2(bridge_slave_1) entered blocking state [ 530.406084][T18148] bridge0: port 2(bridge_slave_1) entered disabled state [ 530.422128][T18148] bridge_slave_1: entered allmulticast mode [ 530.430807][T18148] bridge_slave_1: entered promiscuous mode [ 530.462678][T18280] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2966'. [ 530.483148][T18275] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2966'. [ 530.496837][T18285] netlink: 'syz.1.2967': attribute type 1 has an invalid length. [ 530.535198][T18282] netlink: 'syz.0.2966': attribute type 1 has an invalid length. [ 530.573844][T18148] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 530.584853][T18150] Bluetooth: hci5: command tx timeout [ 530.590140][T18148] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 530.659368][T18282] bond14: entered promiscuous mode [ 530.671255][T18282] 8021q: adding VLAN 0 to HW filter on device bond14 [ 530.847892][T18280] 8021q: adding VLAN 0 to HW filter on device bond14 [ 530.879666][T18280] bond14: (slave ip6gre3): The slave device specified does not support setting the MAC address [ 530.905154][T18280] bond14: (slave ip6gre3): Setting fail_over_mac to active for active-backup mode [ 530.950085][T18280] bond14: (slave ip6gre3): making interface the new active one [ 530.959010][T18280] ip6gre3: entered promiscuous mode [ 530.967897][T18280] bond14: (slave ip6gre3): Enslaving as an active interface with an up link [ 531.250776][T18305] tipc: Enabling of bearer rejected, already enabled [ 531.263538][T18148] team0: Port device team_slave_0 added [ 531.286857][T18148] team0: Port device team_slave_1 added [ 531.443652][T18148] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 531.466090][T18148] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 531.506695][T18148] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 531.535253][T18148] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 531.542464][T18148] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 531.580779][T18148] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 531.616707][T18325] netlink: 'syz.1.2979': attribute type 21 has an invalid length. [ 531.645094][T18325] netlink: 'syz.1.2979': attribute type 22 has an invalid length. [ 531.696840][T18325] netlink: 'syz.1.2979': attribute type 23 has an invalid length. [ 531.723985][T18325] netlink: 'syz.1.2979': attribute type 25 has an invalid length. [ 531.779194][T18325] netlink: 'syz.1.2979': attribute type 26 has an invalid length. [ 531.891806][T18148] hsr_slave_0: entered promiscuous mode [ 531.917416][T18148] hsr_slave_1: entered promiscuous mode [ 532.110255][T18341] team0: Port device dummy0 removed [ 532.136170][T18341] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 532.240209][T18347] ip6gre3: entered allmulticast mode [ 532.256368][T18347] team0: Device ip6gre3 is of different type [ 532.489102][ T24] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 532.669406][T18150] Bluetooth: hci5: command tx timeout [ 532.849998][T18354] lo speed is unknown, defaulting to 1000 [ 532.910492][ C0] bridge0: port 1(veth1_to_bridge) entered forwarding state [ 532.917882][ C0] bridge0: topology change detected, propagating [ 532.938418][T18361] bond0: option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 533.044398][ T7234] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 533.236332][T18361] lo speed is unknown, defaulting to 1000 [ 533.551203][ T5969] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 533.965078][T18374] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 534.185508][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 534.341126][T18380] bond0: entered promiscuous mode [ 534.360079][T18380] batadv0: entered promiscuous mode [ 534.497754][T18388] __nla_validate_parse: 3 callbacks suppressed [ 534.497777][T18388] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2991'. [ 534.514937][T18388] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2991'. [ 534.643079][T18393] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2991'. [ 534.745628][T18150] Bluetooth: hci5: command tx timeout [ 534.827770][T18395] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 534.913424][T18395] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 534.984835][T18398] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2993'. [ 535.077944][T18399] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2993'. [ 535.170435][T18148] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 535.189131][T18148] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 535.203119][T18148] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 535.216083][T18148] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 535.226550][T18148] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 535.263077][T18148] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 535.282222][T18148] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 535.324496][T18148] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 535.601779][T18148] 8021q: adding VLAN 0 to HW filter on device bond0 [ 535.698491][T18148] 8021q: adding VLAN 0 to HW filter on device team0 [ 535.706766][T18419] FAULT_INJECTION: forcing a failure. [ 535.706766][T18419] name failslab, interval 1, probability 0, space 0, times 0 [ 535.763703][ T5984] bridge0: port 1(bridge_slave_0) entered blocking state [ 535.770942][ T5984] bridge0: port 1(bridge_slave_0) entered forwarding state [ 535.789992][T18419] CPU: 0 UID: 0 PID: 18419 Comm: syz.2.2996 Not tainted syzkaller #0 PREEMPT(full) [ 535.790020][T18419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 535.790031][T18419] Call Trace: [ 535.790040][T18419] [ 535.790048][T18419] dump_stack_lvl+0xe8/0x150 [ 535.790077][T18419] should_fail_ex+0x412/0x560 [ 535.790108][T18419] should_failslab+0xa8/0x100 [ 535.790152][T18419] __kmalloc_cache_noprof+0x88/0x660 [ 535.790179][T18419] ? nft_netdev_hook_alloc+0x220/0x570 [ 535.790197][T18419] ? __kmalloc_cache_noprof+0x15b/0x660 [ 535.790228][T18419] nft_netdev_hook_alloc+0x220/0x570 [ 535.790258][T18419] nf_tables_parse_netdev_hooks+0x152/0xa30 [ 535.790292][T18419] nft_flowtable_parse_hook+0x46a/0x920 [ 535.790326][T18419] ? __pfx_nft_flowtable_parse_hook+0x10/0x10 [ 535.790352][T18419] ? nft_pernet+0x23/0x240 [ 535.790386][T18419] nf_tables_delflowtable+0xa85/0x1b10 [ 535.790428][T18419] ? __pfx_nf_tables_delflowtable+0x10/0x10 [ 535.790457][T18419] ? nfnl_pernet+0x23/0x240 [ 535.790501][T18419] ? __nla_parse+0x40/0x60 [ 535.790533][T18419] nfnetlink_rcv+0x123e/0x27b0 [ 535.790601][T18419] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 535.790689][T18419] ? netlink_deliver_tap+0x2e/0x1b0 [ 535.790721][T18419] ? netlink_deliver_tap+0x2e/0x1b0 [ 535.790740][T18419] ? netlink_deliver_tap+0x2e/0x1b0 [ 535.790765][T18419] netlink_unicast+0x75c/0x8e0 [ 535.790806][T18419] netlink_sendmsg+0x813/0xb40 [ 535.790837][T18419] ? __pfx_netlink_sendmsg+0x10/0x10 [ 535.790869][T18419] ? aa_sock_msg_perm+0xf1/0x1b0 [ 535.790896][T18419] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 535.790925][T18419] ____sys_sendmsg+0x972/0x9f0 [ 535.790946][T18419] ? __might_fault+0xaf/0x130 [ 535.790977][T18419] ? __pfx_____sys_sendmsg+0x10/0x10 [ 535.791007][T18419] ? import_iovec+0x73/0xa0 [ 535.791039][T18419] ___sys_sendmsg+0x2a5/0x360 [ 535.791057][T18419] ? __lock_acquire+0x6b5/0x2cf0 [ 535.791084][T18419] ? __pfx____sys_sendmsg+0x10/0x10 [ 535.791153][T18419] ? __fget_files+0x2a/0x420 [ 535.791175][T18419] ? __fget_files+0x3a0/0x420 [ 535.791210][T18419] __x64_sys_sendmsg+0x1bd/0x2a0 [ 535.791233][T18419] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 535.791264][T18419] ? __pfx_ksys_write+0x10/0x10 [ 535.791302][T18419] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.791323][T18419] do_syscall_64+0x15f/0xf80 [ 535.791350][T18419] ? trace_irq_disable+0x3b/0x140 [ 535.791376][T18419] ? clear_bhb_loop+0x40/0x90 [ 535.791400][T18419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.791418][T18419] RIP: 0033:0x7ff1acb9ce59 [ 535.791438][T18419] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 535.791454][T18419] RSP: 002b:00007ff1ad986028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 535.791476][T18419] RAX: ffffffffffffffda RBX: 00007ff1ace15fa0 RCX: 00007ff1acb9ce59 [ 535.791489][T18419] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 535.791501][T18419] RBP: 00007ff1ad986090 R08: 0000000000000000 R09: 0000000000000000 [ 535.791513][T18419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 535.791524][T18419] R13: 00007ff1ace16038 R14: 00007ff1ace15fa0 R15: 00007fff8ab21668 [ 535.791557][T18419] [ 536.227432][ T5984] bridge0: port 2(bridge_slave_1) entered blocking state [ 536.234628][ T5984] bridge0: port 2(bridge_slave_1) entered forwarding state [ 536.317326][T18148] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 536.328350][T18148] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 536.566918][T18441] FAULT_INJECTION: forcing a failure. [ 536.566918][T18441] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 536.618298][T18441] CPU: 0 UID: 0 PID: 18441 Comm: syz.2.2998 Not tainted syzkaller #0 PREEMPT(full) [ 536.618324][T18441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 536.618335][T18441] Call Trace: [ 536.618342][T18441] [ 536.618351][T18441] dump_stack_lvl+0xe8/0x150 [ 536.618378][T18441] should_fail_ex+0x412/0x560 [ 536.618414][T18441] _copy_from_user+0x2d/0xb0 [ 536.618441][T18441] ___sys_sendmsg+0x1c6/0x360 [ 536.618470][T18441] ? __lock_acquire+0x6b5/0x2cf0 [ 536.618497][T18441] ? __pfx____sys_sendmsg+0x10/0x10 [ 536.618554][T18441] ? __fget_files+0x2a/0x420 [ 536.618576][T18441] ? __fget_files+0x3a0/0x420 [ 536.618608][T18441] __x64_sys_sendmsg+0x1bd/0x2a0 [ 536.618629][T18441] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 536.618658][T18441] ? __pfx_ksys_write+0x10/0x10 [ 536.618693][T18441] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.618715][T18441] do_syscall_64+0x15f/0xf80 [ 536.618741][T18441] ? trace_irq_disable+0x3b/0x140 [ 536.618768][T18441] ? clear_bhb_loop+0x40/0x90 [ 536.618791][T18441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.618810][T18441] RIP: 0033:0x7ff1acb9ce59 [ 536.618828][T18441] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 536.618844][T18441] RSP: 002b:00007ff1aadf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 536.618865][T18441] RAX: ffffffffffffffda RBX: 00007ff1ace16090 RCX: 00007ff1acb9ce59 [ 536.618879][T18441] RDX: 000000002400c000 RSI: 0000200000000400 RDI: 0000000000000004 [ 536.618892][T18441] RBP: 00007ff1aadf6090 R08: 0000000000000000 R09: 0000000000000000 [ 536.618903][T18441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 536.618913][T18441] R13: 00007ff1ace16128 R14: 00007ff1ace16090 R15: 00007fff8ab21668 [ 536.618946][T18441] [ 536.621785][T18441] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2998'. [ 536.824776][T18441] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2998'. [ 536.903284][T18148] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 536.957262][T18148] veth0_vlan: entered promiscuous mode [ 536.968813][T18148] veth1_vlan: entered promiscuous mode [ 537.000198][T18148] veth0_macvtap: entered promiscuous mode [ 537.011239][T18148] veth1_macvtap: entered promiscuous mode [ 537.030992][T18148] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 537.047717][T18148] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 537.062843][ T5991] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.073191][ T5991] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.084559][ T5991] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.093756][ T5991] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.464725][T18409] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 538.475101][T18407] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2995'. [ 538.486220][T18407] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2995'. [ 538.678244][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 538.713871][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 538.869310][T18464] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3004'. [ 539.047882][T18471] netlink: 'syz.4.3003': attribute type 5 has an invalid length. [ 539.106580][ T1167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 539.123684][ T1167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 539.403578][T18484] netlink: 'syz.3.2929': attribute type 13 has an invalid length. [ 539.433614][T18484] netlink: 'syz.3.2929': attribute type 17 has an invalid length. [ 539.474539][T18489] FAULT_INJECTION: forcing a failure. [ 539.474539][T18489] name failslab, interval 1, probability 0, space 0, times 0 [ 539.524529][T18489] CPU: 1 UID: 0 PID: 18489 Comm: syz.1.3011 Not tainted syzkaller #0 PREEMPT(full) [ 539.524558][T18489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 539.524569][T18489] Call Trace: [ 539.524576][T18489] [ 539.524584][T18489] dump_stack_lvl+0xe8/0x150 [ 539.524612][T18489] should_fail_ex+0x412/0x560 [ 539.524642][T18489] should_failslab+0xa8/0x100 [ 539.524672][T18489] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 539.524697][T18489] ? __alloc_skb+0x186/0x7d0 [ 539.524722][T18489] ? __alloc_skb+0x1d0/0x7d0 [ 539.524744][T18489] ? __local_bh_enable_ip+0xd0/0x130 [ 539.524769][T18489] __alloc_skb+0x1d0/0x7d0 [ 539.524800][T18489] netlink_sendmsg+0x5d4/0xb40 [ 539.524828][T18489] ? __pfx_netlink_sendmsg+0x10/0x10 [ 539.524851][T18489] ? aa_sock_msg_perm+0xf1/0x1b0 [ 539.524877][T18489] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 539.524905][T18489] ____sys_sendmsg+0x972/0x9f0 [ 539.524923][T18489] ? __might_fault+0xaf/0x130 [ 539.524953][T18489] ? __pfx_____sys_sendmsg+0x10/0x10 [ 539.524980][T18489] ? import_iovec+0x73/0xa0 [ 539.525010][T18489] ___sys_sendmsg+0x2a5/0x360 [ 539.525026][T18489] ? __lock_acquire+0x6b5/0x2cf0 [ 539.525051][T18489] ? __pfx____sys_sendmsg+0x10/0x10 [ 539.525107][T18489] ? __fget_files+0x2a/0x420 [ 539.525138][T18489] ? __fget_files+0x3a0/0x420 [ 539.525172][T18489] __x64_sys_sendmsg+0x1bd/0x2a0 [ 539.525194][T18489] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 539.525224][T18489] ? __pfx_ksys_write+0x10/0x10 [ 539.525259][T18489] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.525279][T18489] do_syscall_64+0x15f/0xf80 [ 539.525309][T18489] ? clear_bhb_loop+0x40/0x90 [ 539.525332][T18489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.525351][T18489] RIP: 0033:0x7fa33179ce59 [ 539.525370][T18489] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 539.525385][T18489] RSP: 002b:00007fa3325b3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 539.525406][T18489] RAX: ffffffffffffffda RBX: 00007fa331a16090 RCX: 00007fa33179ce59 [ 539.525419][T18489] RDX: 000000002400c000 RSI: 0000200000000400 RDI: 0000000000000004 [ 539.525432][T18489] RBP: 00007fa3325b3090 R08: 0000000000000000 R09: 0000000000000000 [ 539.525443][T18489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 539.525454][T18489] R13: 00007fa331a16128 R14: 00007fa331a16090 R15: 00007ffd38f614b8 [ 539.525486][T18489] [ 539.777353][T18489] __nla_validate_parse: 3 callbacks suppressed [ 539.777372][T18489] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3011'. [ 539.793303][T18489] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3011'. [ 539.867868][T18483] bridge0: port 2(bridge_slave_1) entered disabled state [ 539.870525][ T5635] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 539.875643][T18483] bridge0: port 1(bridge_slave_0) entered disabled state [ 539.900431][ T5635] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 539.910900][ T5635] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 539.925223][ T5635] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 539.933795][ T5635] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 540.258812][T18483] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 540.285329][T18483] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 540.463108][T18487] tipc: Enabling of bearer rejected, already enabled [ 540.572442][T18484] 8021q: adding VLAN 0 to HW filter on device bond0 [ 540.581542][T18484] 8021q: adding VLAN 0 to HW filter on device team0 [ 540.597116][T18484] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 540.639282][T18484] bridge0: port 1(bridge_slave_0) entered blocking state [ 540.646534][T18484] bridge0: port 1(bridge_slave_0) entered forwarding state [ 540.659440][T18484] bridge0: port 2(bridge_slave_1) entered blocking state [ 540.666746][T18484] bridge0: port 2(bridge_slave_1) entered forwarding state [ 540.689576][T18484] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 540.700745][T18484] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 540.729882][T18484] veth1_vlan: left promiscuous mode [ 540.736857][T18484] veth0_vlan: left promiscuous mode [ 540.743262][T18484] veth0_vlan: entered promiscuous mode [ 540.757894][T18484] veth1_vlan: entered promiscuous mode [ 540.769690][T18484] veth1_macvtap: left promiscuous mode [ 540.776833][T18484] veth0_macvtap: left promiscuous mode [ 540.784372][T18484] veth0_macvtap: entered promiscuous mode [ 540.801747][T18484] veth1_macvtap: entered promiscuous mode [ 540.817432][T18484] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 540.831558][T18484] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 540.844447][T18484] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 540.857859][T18484] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 541.191272][T18528] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3018'. [ 541.211409][T18524] tipc: Enabling of bearer rejected, already enabled [ 541.242875][T18528] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3018'. [ 541.739648][T18552] tipc: Enabling of bearer rejected, already enabled [ 541.752297][T18552] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3025'. [ 541.761558][T18552] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3025'. [ 541.815379][T18494] lo speed is unknown, defaulting to 1000 [ 542.036256][T18150] Bluetooth: hci0: command tx timeout [ 542.075456][T18562] bridge0: entered allmulticast mode [ 542.131556][T18565] netlink: 212292 bytes leftover after parsing attributes in process `syz.2.3029'. [ 542.196177][T18565] netlink: 193176 bytes leftover after parsing attributes in process `syz.2.3029'. [ 542.569655][T18578] netlink: zone id is out of range [ 542.596016][T18578] netlink: zone id is out of range [ 542.612645][T18578] netlink: zone id is out of range [ 542.632925][T18578] netlink: zone id is out of range [ 542.768142][T18578] netlink: set zone limit has 4 unknown bytes [ 542.844847][T18591] tipc: Enabling of bearer rejected, already enabled [ 542.853657][T18591] FAULT_INJECTION: forcing a failure. [ 542.853657][T18591] name failslab, interval 1, probability 0, space 0, times 0 [ 542.868288][T18591] CPU: 0 UID: 0 PID: 18591 Comm: syz.1.3037 Not tainted syzkaller #0 PREEMPT(full) [ 542.868315][T18591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 542.868326][T18591] Call Trace: [ 542.868333][T18591] [ 542.868352][T18591] dump_stack_lvl+0xe8/0x150 [ 542.868381][T18591] should_fail_ex+0x412/0x560 [ 542.868410][T18591] should_failslab+0xa8/0x100 [ 542.868438][T18591] ? skb_clone+0x212/0x3a0 [ 542.868457][T18591] kmem_cache_alloc_noprof+0x87/0x650 [ 542.868482][T18591] ? __netlink_lookup+0xc6/0x8b0 [ 542.868509][T18591] skb_clone+0x212/0x3a0 [ 542.868532][T18591] __netlink_deliver_tap+0x404/0x850 [ 542.868564][T18591] ? netlink_deliver_tap+0x2e/0x1b0 [ 542.868586][T18591] netlink_deliver_tap+0x19c/0x1b0 [ 542.868606][T18591] netlink_unicast+0x730/0x8e0 [ 542.868645][T18591] netlink_sendmsg+0x813/0xb40 [ 542.868676][T18591] ? __pfx_netlink_sendmsg+0x10/0x10 [ 542.868696][T18591] ? aa_sock_msg_perm+0xf1/0x1b0 [ 542.868721][T18591] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 542.868750][T18591] ____sys_sendmsg+0x972/0x9f0 [ 542.868768][T18591] ? __might_fault+0xaf/0x130 [ 542.868798][T18591] ? __pfx_____sys_sendmsg+0x10/0x10 [ 542.868824][T18591] ? import_iovec+0x73/0xa0 [ 542.868855][T18591] ___sys_sendmsg+0x2a5/0x360 [ 542.868871][T18591] ? __lock_acquire+0x6b5/0x2cf0 [ 542.868897][T18591] ? __pfx____sys_sendmsg+0x10/0x10 [ 542.868955][T18591] ? __fget_files+0x2a/0x420 [ 542.868977][T18591] ? __fget_files+0x3a0/0x420 [ 542.869010][T18591] __x64_sys_sendmsg+0x1bd/0x2a0 [ 542.869032][T18591] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 542.869062][T18591] ? __pfx_ksys_write+0x10/0x10 [ 542.869094][T18591] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.869115][T18591] do_syscall_64+0x15f/0xf80 [ 542.869140][T18591] ? trace_irq_disable+0x3b/0x140 [ 542.869167][T18591] ? clear_bhb_loop+0x40/0x90 [ 542.869190][T18591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.869209][T18591] RIP: 0033:0x7fa33179ce59 [ 542.869228][T18591] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 542.869243][T18591] RSP: 002b:00007fa3325d4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 542.869265][T18591] RAX: ffffffffffffffda RBX: 00007fa331a15fa0 RCX: 00007fa33179ce59 [ 542.869278][T18591] RDX: 000000002400c000 RSI: 0000200000000400 RDI: 0000000000000004 [ 542.869290][T18591] RBP: 00007fa3325d4090 R08: 0000000000000000 R09: 0000000000000000 [ 542.869302][T18591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 542.869313][T18591] R13: 00007fa331a16038 R14: 00007fa331a15fa0 R15: 00007ffd38f614b8 [ 542.869371][T18591] [ 542.873780][T18591] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3037'. [ 543.171027][T18591] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3037'. [ 543.938173][T18494] bridge0: port 1(bridge_slave_0) entered blocking state [ 543.948240][T18494] bridge0: port 1(bridge_slave_0) entered disabled state [ 543.955992][T18494] bridge_slave_0: entered allmulticast mode [ 543.970209][T18494] bridge_slave_0: entered promiscuous mode [ 543.980415][T18494] bridge0: port 2(bridge_slave_1) entered blocking state [ 543.988240][T18494] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.996088][T18494] bridge_slave_1: entered allmulticast mode [ 544.009111][T18494] bridge_slave_1: entered promiscuous mode [ 544.084543][T18494] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 544.104734][T18150] Bluetooth: hci0: command tx timeout [ 544.116622][T18642] bond0: (slave veth1_to_hsr): Error: Device can not be enslaved while up [ 544.129344][T18494] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 544.246454][T18494] team0: Port device team_slave_0 added [ 544.269346][T18494] team0: Port device team_slave_1 added [ 544.278418][T18644] x_tables: duplicate underflow at hook 2 [ 544.420809][T18644] netlink: 'syz.3.3048': attribute type 4 has an invalid length. [ 544.431165][T18494] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 544.439395][T18494] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 544.485720][T18494] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 544.585743][T18494] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 544.593845][T18494] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 544.627454][T18494] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 544.760163][T18494] hsr_slave_0: entered promiscuous mode [ 544.771221][T18494] hsr_slave_1: entered promiscuous mode [ 544.778211][T18494] debugfs: 'hsr0' already exists in 'hsr' [ 544.787343][T18494] Cannot create hsr debugfs directory [ 544.856527][T18662] rdma_rxe: rxe_newlink: failed to add syzkaller0 [ 544.952582][T18668] __nla_validate_parse: 5 callbacks suppressed [ 544.952602][T18668] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3054'. [ 546.186389][T18150] Bluetooth: hci0: command tx timeout [ 546.298221][T18735] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3072'. [ 546.356820][T18738] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3072'. [ 546.369687][T18737] sctp: [Deprecated]: syz.3.3073 (pid 18737) Use of int in max_burst socket option deprecated. [ 546.369687][T18737] Use struct sctp_assoc_value instead [ 546.703199][T18751] FAULT_INJECTION: forcing a failure. [ 546.703199][T18751] name failslab, interval 1, probability 0, space 0, times 0 [ 546.754071][T18751] CPU: 1 UID: 0 PID: 18751 Comm: syz.1.3076 Not tainted syzkaller #0 PREEMPT(full) [ 546.754099][T18751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 546.754109][T18751] Call Trace: [ 546.754117][T18751] [ 546.754124][T18751] dump_stack_lvl+0xe8/0x150 [ 546.754152][T18751] should_fail_ex+0x412/0x560 [ 546.754181][T18751] should_failslab+0xa8/0x100 [ 546.754212][T18751] __kmalloc_cache_noprof+0x88/0x660 [ 546.754238][T18751] ? nft_netdev_hook_alloc+0x220/0x570 [ 546.754255][T18751] ? __kmalloc_cache_noprof+0x15b/0x660 [ 546.754284][T18751] nft_netdev_hook_alloc+0x220/0x570 [ 546.754313][T18751] nf_tables_parse_netdev_hooks+0x152/0xa30 [ 546.754344][T18751] nft_flowtable_parse_hook+0x46a/0x920 [ 546.754377][T18751] ? __pfx_nft_flowtable_parse_hook+0x10/0x10 [ 546.754401][T18751] ? nft_pernet+0x23/0x240 [ 546.754444][T18751] nf_tables_delflowtable+0xa85/0x1b10 [ 546.754483][T18751] ? __pfx_nf_tables_delflowtable+0x10/0x10 [ 546.754510][T18751] ? nfnl_pernet+0x23/0x240 [ 546.754549][T18751] ? __nla_parse+0x40/0x60 [ 546.754586][T18751] nfnetlink_rcv+0x123e/0x27b0 [ 546.754649][T18751] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 546.754693][T18751] ? ref_tracker_free+0x693/0x840 [ 546.754751][T18751] ? __netlink_deliver_tap+0x807/0x850 [ 546.754781][T18751] ? netlink_deliver_tap+0x2e/0x1b0 [ 546.754799][T18751] ? netlink_deliver_tap+0x2e/0x1b0 [ 546.754825][T18751] netlink_unicast+0x75c/0x8e0 [ 546.754864][T18751] netlink_sendmsg+0x813/0xb40 [ 546.754895][T18751] ? __pfx_netlink_sendmsg+0x10/0x10 [ 546.754918][T18751] ? aa_sock_msg_perm+0xf1/0x1b0 [ 546.754945][T18751] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 546.754973][T18751] ____sys_sendmsg+0x972/0x9f0 [ 546.754992][T18751] ? __might_fault+0xaf/0x130 [ 546.755024][T18751] ? __pfx_____sys_sendmsg+0x10/0x10 [ 546.755053][T18751] ? import_iovec+0x73/0xa0 [ 546.755084][T18751] ___sys_sendmsg+0x2a5/0x360 [ 546.755101][T18751] ? __lock_acquire+0x6b5/0x2cf0 [ 546.755126][T18751] ? __pfx____sys_sendmsg+0x10/0x10 [ 546.755183][T18751] ? __fget_files+0x2a/0x420 [ 546.755205][T18751] ? __fget_files+0x3a0/0x420 [ 546.755237][T18751] __x64_sys_sendmsg+0x1bd/0x2a0 [ 546.755260][T18751] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 546.755288][T18751] ? __pfx_ksys_write+0x10/0x10 [ 546.755322][T18751] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.755343][T18751] do_syscall_64+0x15f/0xf80 [ 546.755368][T18751] ? trace_irq_disable+0x3b/0x140 [ 546.755393][T18751] ? clear_bhb_loop+0x40/0x90 [ 546.755423][T18751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.755441][T18751] RIP: 0033:0x7fa33179ce59 [ 546.755460][T18751] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 546.755474][T18751] RSP: 002b:00007fa3325d4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 546.755495][T18751] RAX: ffffffffffffffda RBX: 00007fa331a15fa0 RCX: 00007fa33179ce59 [ 546.755509][T18751] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 546.755521][T18751] RBP: 00007fa3325d4090 R08: 0000000000000000 R09: 0000000000000000 [ 546.755532][T18751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 546.755543][T18751] R13: 00007fa331a16038 R14: 00007fa331a15fa0 R15: 00007ffd38f614b8 [ 546.755576][T18751] [ 547.156578][T18494] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 547.207135][T18494] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 547.233297][T18494] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 547.267507][T18760] netlink: 'syz.2.3077': attribute type 3 has an invalid length. [ 547.276463][T18760] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3077'. [ 547.297754][T18494] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 547.329179][T18494] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 547.367528][T18494] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 547.408703][T18768] netlink: 'syz.4.3081': attribute type 1 has an invalid length. [ 547.418690][T18494] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 547.459669][T18494] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 547.550944][T18768] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3081'. [ 547.638003][T18773] bond15: (slave vxcan5): The slave device specified does not support setting the MAC address [ 547.659615][T18773] bond15: (slave vxcan5): Error -95 calling set_mac_address [ 547.862262][T18768] bond15: (slave bridge11): Enslaving as an active interface with a down link [ 547.890327][T18784] ip6gretap2: entered promiscuous mode [ 547.896320][T18784] ip6gretap2: entered allmulticast mode [ 547.908183][T18784] bond15: (slave ip6gretap2): making interface the new active one [ 547.917608][T18784] bond15: (slave ip6gretap2): Enslaving as an active interface with an up link [ 548.205825][T18805] FAULT_INJECTION: forcing a failure. [ 548.205825][T18805] name failslab, interval 1, probability 0, space 0, times 0 [ 548.228102][T18805] CPU: 0 UID: 0 PID: 18805 Comm: syz.3.3089 Not tainted syzkaller #0 PREEMPT(full) [ 548.228136][T18805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 548.228146][T18805] Call Trace: [ 548.228155][T18805] [ 548.228163][T18805] dump_stack_lvl+0xe8/0x150 [ 548.228200][T18805] should_fail_ex+0x412/0x560 [ 548.228229][T18805] should_failslab+0xa8/0x100 [ 548.228259][T18805] __kmalloc_cache_noprof+0x88/0x660 [ 548.228285][T18805] ? nft_netdev_hook_alloc+0x220/0x570 [ 548.228302][T18805] ? __kmalloc_cache_noprof+0x15b/0x660 [ 548.228333][T18805] nft_netdev_hook_alloc+0x220/0x570 [ 548.228362][T18805] nf_tables_parse_netdev_hooks+0x152/0xa30 [ 548.228393][T18805] nft_flowtable_parse_hook+0x46a/0x920 [ 548.228428][T18805] ? __pfx_nft_flowtable_parse_hook+0x10/0x10 [ 548.228454][T18805] ? nft_pernet+0x23/0x240 [ 548.228489][T18805] nf_tables_delflowtable+0xa85/0x1b10 [ 548.228531][T18805] ? __pfx_nf_tables_delflowtable+0x10/0x10 [ 548.228558][T18805] ? nfnl_pernet+0x23/0x240 [ 548.228602][T18805] ? __nla_parse+0x40/0x60 [ 548.228634][T18805] nfnetlink_rcv+0x123e/0x27b0 [ 548.228699][T18805] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 548.228746][T18805] ? ref_tracker_free+0x693/0x840 [ 548.228804][T18805] ? __netlink_deliver_tap+0x807/0x850 [ 548.228834][T18805] ? netlink_deliver_tap+0x2e/0x1b0 [ 548.228853][T18805] ? netlink_deliver_tap+0x2e/0x1b0 [ 548.228879][T18805] netlink_unicast+0x75c/0x8e0 [ 548.228920][T18805] netlink_sendmsg+0x813/0xb40 [ 548.228949][T18805] ? __pfx_netlink_sendmsg+0x10/0x10 [ 548.228972][T18805] ? aa_sock_msg_perm+0xf1/0x1b0 [ 548.228999][T18805] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 548.229028][T18805] ____sys_sendmsg+0x972/0x9f0 [ 548.229052][T18805] ? __might_fault+0xaf/0x130 [ 548.229083][T18805] ? __pfx_____sys_sendmsg+0x10/0x10 [ 548.229121][T18805] ? import_iovec+0x73/0xa0 [ 548.229151][T18805] ___sys_sendmsg+0x2a5/0x360 [ 548.229170][T18805] ? __lock_acquire+0x6b5/0x2cf0 [ 548.229196][T18805] ? __pfx____sys_sendmsg+0x10/0x10 [ 548.229254][T18805] ? __fget_files+0x2a/0x420 [ 548.229276][T18805] ? __fget_files+0x3a0/0x420 [ 548.229310][T18805] __x64_sys_sendmsg+0x1bd/0x2a0 [ 548.229333][T18805] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 548.229362][T18805] ? __pfx_ksys_write+0x10/0x10 [ 548.229397][T18805] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.229419][T18805] do_syscall_64+0x15f/0xf80 [ 548.229446][T18805] ? trace_irq_disable+0x3b/0x140 [ 548.229472][T18805] ? clear_bhb_loop+0x40/0x90 [ 548.229496][T18805] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.229512][T18805] RIP: 0033:0x7f0f7279ce59 [ 548.229531][T18805] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 548.229547][T18805] RSP: 002b:00007f0f73582028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 548.229569][T18805] RAX: ffffffffffffffda RBX: 00007f0f72a15fa0 RCX: 00007f0f7279ce59 [ 548.229582][T18805] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 548.229593][T18805] RBP: 00007f0f73582090 R08: 0000000000000000 R09: 0000000000000000 [ 548.229604][T18805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 548.229616][T18805] R13: 00007f0f72a16038 R14: 00007f0f72a15fa0 R15: 00007fff40b68d88 [ 548.229649][T18805] [ 548.291004][T18494] 8021q: adding VLAN 0 to HW filter on device bond0 [ 548.334847][T18150] Bluetooth: hci0: command tx timeout [ 548.350288][T18494] 8021q: adding VLAN 0 to HW filter on device team0 [ 548.723977][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 548.731244][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 548.855621][ T1167] bridge0: port 2(bridge_slave_1) entered blocking state [ 548.862863][ T1167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 549.260382][T18824] syzkaller0: entered promiscuous mode [ 549.285177][T18824] syzkaller0: entered allmulticast mode [ 549.436348][T18833] netlink: del zone limit has 8 unknown bytes [ 550.071826][T18844] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3097'. [ 552.183616][T18838] tipc: Enabled bearer , priority 0 [ 552.193377][T18845] netlink: 324 bytes leftover after parsing attributes in process `syz.2.3097'. [ 552.235564][T18846] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.3097'. [ 552.329220][T18849] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 552.607024][T18870] x_tables: unsorted underflow at hook 4 [ 552.607058][T18868] netlink: 'syz.2.3105': attribute type 1 has an invalid length. [ 552.744924][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 552.841770][T18882] ip6gre3: entered allmulticast mode [ 552.950226][T18893] netlink: 'syz.3.3109': attribute type 1 has an invalid length. [ 553.117866][ T29] audit: type=1800 audit(1779007770.770:11): pid=18899 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3111" name="memory.events" dev="tmpfs" ino=3144 res=0 errno=0 [ 553.139660][T18896] bond1: (slave geneve2): making interface the new active one [ 553.148533][T18896] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 553.164835][ T1167] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 553.201661][ T1167] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 553.247387][ T1167] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 553.267010][ T1167] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 553.310274][T18494] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 553.504157][T18494] veth0_vlan: entered promiscuous mode [ 553.536098][T18494] veth1_vlan: entered promiscuous mode [ 553.608857][T18494] veth0_macvtap: entered promiscuous mode [ 553.622487][T18494] veth1_macvtap: entered promiscuous mode [ 553.693709][T18494] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 553.712364][T18921] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3116'. [ 553.772117][T18494] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 553.816023][T18924] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3118'. [ 553.833638][ T1102] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.846612][ T1102] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.847903][T18924] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3118'. [ 553.869258][T18925] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3118'. [ 553.892837][T18924] IPVS: set_ctl: invalid protocol: 0 100.1.1.1:20002 [ 553.925291][ T1102] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.962815][T18927] : renamed from veth0_to_bond [ 553.965729][T18925] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3118'. [ 553.988464][ T1102] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.179514][ T5969] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 554.203854][ T5969] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 554.288205][T18936] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3120'. [ 554.303669][ T1102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 554.329070][ T1102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 554.640188][T18953] netlink: 'syz.0.3012': attribute type 3 has an invalid length. [ 554.692060][T18953] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3012'. [ 554.997047][T18964] netlink: 'syz.4.3128': attribute type 4 has an invalid length. [ 555.140708][ T5635] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 555.171516][ T5635] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 555.184815][ T5635] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 555.207712][ T5635] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 555.237697][ T5635] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 555.340662][T18981] __nla_validate_parse: 2 callbacks suppressed [ 555.340682][T18981] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3131'. [ 555.524935][T18987] netlink: 'syz.1.3133': attribute type 1 has an invalid length. [ 555.553107][T18987] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3133'. [ 555.569903][T18989] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20001 [ 555.681430][T18992] netlink: 'syz.3.3135': attribute type 58 has an invalid length. [ 555.690237][T18992] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3135'. [ 555.749493][T18987] netlink: 'syz.1.3133': attribute type 66 has an invalid length. [ 555.958242][T18997] netlink: 'syz.1.3136': attribute type 21 has an invalid length. [ 555.982620][T18997] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3136'. [ 555.998075][T18997] netlink: 'syz.1.3136': attribute type 1 has an invalid length. [ 556.017980][T19003] netlink: 'syz.3.3138': attribute type 58 has an invalid length. [ 556.055842][T19003] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3138'. [ 556.305931][T19014] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3142'. [ 556.411918][T19016] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3142'. [ 556.584632][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 556.616377][T19024] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 556.756105][T18972] lo speed is unknown, defaulting to 1000 [ 556.966758][T19038] team0: Port device dummy0 added [ 557.304524][T18150] Bluetooth: hci2: command tx timeout [ 557.372661][T19043] syzkaller0: entered promiscuous mode [ 557.378808][T19043] syzkaller0: entered allmulticast mode [ 557.446216][T19058] lo speed is unknown, defaulting to 1000 [ 557.861137][T19068] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3152'. [ 558.198767][T19081] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3151'. [ 558.220236][T19084] FAULT_INJECTION: forcing a failure. [ 558.220236][T19084] name failslab, interval 1, probability 0, space 0, times 0 [ 558.249061][T19084] CPU: 0 UID: 0 PID: 19084 Comm: syz.1.3154 Not tainted syzkaller #0 PREEMPT(full) [ 558.249089][T19084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 558.249101][T19084] Call Trace: [ 558.249108][T19084] [ 558.249117][T19084] dump_stack_lvl+0xe8/0x150 [ 558.249147][T19084] should_fail_ex+0x412/0x560 [ 558.249178][T19084] should_failslab+0xa8/0x100 [ 558.249209][T19084] __kmalloc_cache_noprof+0x88/0x660 [ 558.249236][T19084] ? nft_netdev_hook_alloc+0x220/0x570 [ 558.249254][T19084] ? __kmalloc_cache_noprof+0x15b/0x660 [ 558.249285][T19084] nft_netdev_hook_alloc+0x220/0x570 [ 558.249315][T19084] nf_tables_parse_netdev_hooks+0x152/0xa30 [ 558.249358][T19084] nft_flowtable_parse_hook+0x46a/0x920 [ 558.249393][T19084] ? __pfx_nft_flowtable_parse_hook+0x10/0x10 [ 558.249418][T19084] ? nft_pernet+0x23/0x240 [ 558.249454][T19084] nf_tables_delflowtable+0xa85/0x1b10 [ 558.249495][T19084] ? __pfx_nf_tables_delflowtable+0x10/0x10 [ 558.249523][T19084] ? nfnl_pernet+0x23/0x240 [ 558.249565][T19084] ? __nla_parse+0x40/0x60 [ 558.249598][T19084] nfnetlink_rcv+0x123e/0x27b0 [ 558.249660][T19084] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 558.249700][T19084] ? ref_tracker_free+0x693/0x840 [ 558.249751][T19084] ? __netlink_deliver_tap+0x807/0x850 [ 558.249781][T19084] ? netlink_deliver_tap+0x2e/0x1b0 [ 558.249799][T19084] ? netlink_deliver_tap+0x2e/0x1b0 [ 558.249822][T19084] netlink_unicast+0x75c/0x8e0 [ 558.249861][T19084] netlink_sendmsg+0x813/0xb40 [ 558.249896][T19084] ? __pfx_netlink_sendmsg+0x10/0x10 [ 558.249917][T19084] ? aa_sock_msg_perm+0xf1/0x1b0 [ 558.249942][T19084] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 558.249970][T19084] ____sys_sendmsg+0x972/0x9f0 [ 558.249989][T19084] ? __might_fault+0xaf/0x130 [ 558.250019][T19084] ? __pfx_____sys_sendmsg+0x10/0x10 [ 558.250048][T19084] ? import_iovec+0x73/0xa0 [ 558.250080][T19084] ___sys_sendmsg+0x2a5/0x360 [ 558.250096][T19084] ? __lock_acquire+0x6b5/0x2cf0 [ 558.250121][T19084] ? __pfx____sys_sendmsg+0x10/0x10 [ 558.250177][T19084] ? __fget_files+0x2a/0x420 [ 558.250197][T19084] ? __fget_files+0x3a0/0x420 [ 558.250230][T19084] __x64_sys_sendmsg+0x1bd/0x2a0 [ 558.250252][T19084] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 558.250282][T19084] ? __pfx_ksys_write+0x10/0x10 [ 558.250330][T19084] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.250351][T19084] do_syscall_64+0x15f/0xf80 [ 558.250381][T19084] ? clear_bhb_loop+0x40/0x90 [ 558.250406][T19084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.250425][T19084] RIP: 0033:0x7fa33179ce59 [ 558.250444][T19084] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 558.250460][T19084] RSP: 002b:00007fa3325d4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 558.250482][T19084] RAX: ffffffffffffffda RBX: 00007fa331a15fa0 RCX: 00007fa33179ce59 [ 558.250496][T19084] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 558.250508][T19084] RBP: 00007fa3325d4090 R08: 0000000000000000 R09: 0000000000000000 [ 558.250520][T19084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 558.250531][T19084] R13: 00007fa331a16038 R14: 00007fa331a15fa0 R15: 00007ffd38f614b8 [ 558.250564][T19084] [ 559.389859][T18150] Bluetooth: hci2: command tx timeout [ 561.425762][ T716] dummy0: left allmulticast mode [ 561.431852][ T716] dummy0: left promiscuous mode [ 561.441069][ T716] bridge7: port 1(dummy0) entered disabled state [ 561.454214][ T716] dvmrp0: left allmulticast mode [ 561.467306][T18150] Bluetooth: hci2: command tx timeout [ 561.814587][ T716] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 561.908958][ T716] bond4 (unregistering): (slave bridge3): Releasing backup interface [ 562.031917][ T716] bond9 (unregistering): (slave bridge6): Releasing backup interface [ 562.040404][ T716] bridge6 (unregistering): left allmulticast mode [ 562.164685][ T716] bond0 (unregistering): left promiscuous mode [ 562.172634][ T716] bond0 (unregistering): Released all slaves [ 562.187585][ T716] bond1 (unregistering): Released all slaves [ 562.202368][ T716] bond2 (unregistering): Released all slaves [ 562.217889][ T716] bond3 (unregistering): Released all slaves [ 562.232938][ T716] bond4 (unregistering): Released all slaves [ 562.258985][ T716] bond5 (unregistering): Released all slaves [ 562.277672][ T716] bond6 (unregistering): Released all slaves [ 562.293799][ T716] bond7 (unregistering): Released all slaves [ 562.308901][ T716] bond8 (unregistering): Released all slaves [ 562.323002][ T716] bond9 (unregistering): Released all slaves [ 562.341058][ T716] bond10 (unregistering): Released all slaves [ 562.359121][ T716] bond11 (unregistering): Released all slaves [ 562.406260][ T5288] 8021q: adding VLAN 0 to HW filter on device eth1 [ 562.863081][T19113] tipc: Resetting bearer [ 562.876725][T19116] validate_nla: 2 callbacks suppressed [ 562.876746][T19116] netlink: 'syz.0.3160': attribute type 12 has an invalid length. [ 562.954933][ T7235] syz1: Port: 1 Link DOWN [ 562.963034][ T5969] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 562.972957][ T5969] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 562.983066][ T5969] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 562.997821][ T716] hma(kX: left promiscuous mode [ 563.071486][ T5969] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 563.082257][ T5969] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 563.093403][ T5969] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 563.102374][ T5969] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 563.112894][ T5969] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 563.122479][ T5969] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 563.148877][ T716] hm3): left promiscuous mode [ 563.311716][ T5969] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 563.345954][ T5969] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 563.360023][ T5969] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 563.372840][T19145] FAULT_INJECTION: forcing a failure. [ 563.372840][T19145] name failslab, interval 1, probability 0, space 0, times 0 [ 563.386328][T19145] CPU: 0 UID: 0 PID: 19145 Comm: syz.4.3165 Not tainted syzkaller #0 PREEMPT(full) [ 563.386353][T19145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 563.386365][T19145] Call Trace: [ 563.386373][T19145] [ 563.386381][T19145] dump_stack_lvl+0xe8/0x150 [ 563.386409][T19145] should_fail_ex+0x412/0x560 [ 563.386433][T19145] should_failslab+0xa8/0x100 [ 563.386451][T19145] __kmalloc_cache_noprof+0x88/0x660 [ 563.386467][T19145] ? nft_netdev_hook_alloc+0x220/0x570 [ 563.386478][T19145] ? __kmalloc_cache_noprof+0x15b/0x660 [ 563.386495][T19145] nft_netdev_hook_alloc+0x220/0x570 [ 563.386512][T19145] nf_tables_parse_netdev_hooks+0x152/0xa30 [ 563.386530][T19145] nft_flowtable_parse_hook+0x46a/0x920 [ 563.386550][T19145] ? __pfx_nft_flowtable_parse_hook+0x10/0x10 [ 563.386564][T19145] ? nft_pernet+0x23/0x240 [ 563.386585][T19145] nf_tables_delflowtable+0xa85/0x1b10 [ 563.386608][T19145] ? __pfx_nf_tables_delflowtable+0x10/0x10 [ 563.386624][T19145] ? nfnl_pernet+0x23/0x240 [ 563.386649][T19145] ? __nla_parse+0x40/0x60 [ 563.386667][T19145] nfnetlink_rcv+0x123e/0x27b0 [ 563.386704][T19145] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 563.386736][T19145] ? ref_tracker_free+0x693/0x840 [ 563.386768][T19145] ? __netlink_deliver_tap+0x807/0x850 [ 563.386786][T19145] ? netlink_deliver_tap+0x2e/0x1b0 [ 563.386796][T19145] ? netlink_deliver_tap+0x2e/0x1b0 [ 563.386810][T19145] netlink_unicast+0x75c/0x8e0 [ 563.386833][T19145] netlink_sendmsg+0x813/0xb40 [ 563.386850][T19145] ? __pfx_netlink_sendmsg+0x10/0x10 [ 563.386863][T19145] ? aa_sock_msg_perm+0xf1/0x1b0 [ 563.386879][T19145] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 563.386896][T19145] ____sys_sendmsg+0x972/0x9f0 [ 563.386908][T19145] ? __might_fault+0xaf/0x130 [ 563.386925][T19145] ? __pfx_____sys_sendmsg+0x10/0x10 [ 563.386942][T19145] ? import_iovec+0x73/0xa0 [ 563.386960][T19145] ___sys_sendmsg+0x2a5/0x360 [ 563.386970][T19145] ? __lock_acquire+0x6b5/0x2cf0 [ 563.386984][T19145] ? __pfx____sys_sendmsg+0x10/0x10 [ 563.387017][T19145] ? __fget_files+0x2a/0x420 [ 563.387030][T19145] ? __fget_files+0x3a0/0x420 [ 563.387049][T19145] __x64_sys_sendmsg+0x1bd/0x2a0 [ 563.387062][T19145] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 563.387078][T19145] ? __pfx_ksys_write+0x10/0x10 [ 563.387099][T19145] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.387111][T19145] do_syscall_64+0x15f/0xf80 [ 563.387127][T19145] ? trace_irq_disable+0x3b/0x140 [ 563.387151][T19145] ? clear_bhb_loop+0x40/0x90 [ 563.387165][T19145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.387176][T19145] RIP: 0033:0x7f90af19ce59 [ 563.387188][T19145] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 563.387197][T19145] RSP: 002b:00007f90b0127028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 563.387211][T19145] RAX: ffffffffffffffda RBX: 00007f90af415fa0 RCX: 00007f90af19ce59 [ 563.387219][T19145] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 563.387226][T19145] RBP: 00007f90b0127090 R08: 0000000000000000 R09: 0000000000000000 [ 563.387232][T19145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 563.387239][T19145] R13: 00007f90af416038 R14: 00007f90af415fa0 R15: 00007ffd02d91ac8 [ 563.387257][T19145] [ 563.718126][T18150] Bluetooth: hci2: command tx timeout [ 563.742118][ T716] tipc: Disabling bearer [ 563.748273][ T716] tipc: Disabling bearer [ 563.755930][ T716] tipc: Left network mode [ 564.083810][T19151] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3167'. [ 564.246264][T19162] netlink: 9 bytes leftover after parsing attributes in process `syz.4.3171'. [ 564.421485][T19170] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3169'. [ 564.704719][T19166] bond1 (unregistering): Released all slaves [ 564.910355][ T5991] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 565.133292][T19201] netlink: 'syz.0.3175': attribute type 1 has an invalid length. [ 565.157758][T19203] FAULT_INJECTION: forcing a failure. [ 565.157758][T19203] name failslab, interval 1, probability 0, space 0, times 0 [ 565.184820][T19203] CPU: 1 UID: 0 PID: 19203 Comm: syz.4.3176 Not tainted syzkaller #0 PREEMPT(full) [ 565.184846][T19203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 565.184858][T19203] Call Trace: [ 565.184866][T19203] [ 565.184874][T19203] dump_stack_lvl+0xe8/0x150 [ 565.184901][T19203] should_fail_ex+0x412/0x560 [ 565.184931][T19203] should_failslab+0xa8/0x100 [ 565.184960][T19203] __kmalloc_cache_noprof+0x88/0x660 [ 565.184986][T19203] ? nft_netdev_hook_alloc+0x220/0x570 [ 565.185002][T19203] ? __kmalloc_cache_noprof+0x15b/0x660 [ 565.185030][T19203] nft_netdev_hook_alloc+0x220/0x570 [ 565.185057][T19203] nf_tables_parse_netdev_hooks+0x152/0xa30 [ 565.185100][T19203] nft_flowtable_parse_hook+0x46a/0x920 [ 565.185132][T19203] ? __pfx_nft_flowtable_parse_hook+0x10/0x10 [ 565.185156][T19203] ? nft_pernet+0x23/0x240 [ 565.185189][T19203] nf_tables_delflowtable+0xa85/0x1b10 [ 565.185227][T19203] ? __pfx_nf_tables_delflowtable+0x10/0x10 [ 565.185257][T19203] ? nfnl_pernet+0x23/0x240 [ 565.185297][T19203] ? __nla_parse+0x40/0x60 [ 565.185327][T19203] nfnetlink_rcv+0x123e/0x27b0 [ 565.185388][T19203] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 565.185434][T19203] ? ref_tracker_free+0x693/0x840 [ 565.185490][T19203] ? __netlink_deliver_tap+0x807/0x850 [ 565.185519][T19203] ? netlink_deliver_tap+0x2e/0x1b0 [ 565.185538][T19203] ? netlink_deliver_tap+0x2e/0x1b0 [ 565.185562][T19203] netlink_unicast+0x75c/0x8e0 [ 565.185599][T19203] netlink_sendmsg+0x813/0xb40 [ 565.185629][T19203] ? __pfx_netlink_sendmsg+0x10/0x10 [ 565.185653][T19203] ? aa_sock_msg_perm+0xf1/0x1b0 [ 565.185681][T19203] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 565.185711][T19203] ____sys_sendmsg+0x972/0x9f0 [ 565.185730][T19203] ? __might_fault+0xaf/0x130 [ 565.185762][T19203] ? __pfx_____sys_sendmsg+0x10/0x10 [ 565.185791][T19203] ? import_iovec+0x73/0xa0 [ 565.185823][T19203] ___sys_sendmsg+0x2a5/0x360 [ 565.185841][T19203] ? __lock_acquire+0x6b5/0x2cf0 [ 565.185867][T19203] ? __pfx____sys_sendmsg+0x10/0x10 [ 565.185924][T19203] ? __fget_files+0x2a/0x420 [ 565.185946][T19203] ? __fget_files+0x3a0/0x420 [ 565.185980][T19203] __x64_sys_sendmsg+0x1bd/0x2a0 [ 565.186001][T19203] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 565.186030][T19203] ? __pfx_ksys_write+0x10/0x10 [ 565.186060][T19203] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.186091][T19203] do_syscall_64+0x15f/0xf80 [ 565.186115][T19203] ? trace_irq_disable+0x3b/0x140 [ 565.186139][T19203] ? clear_bhb_loop+0x40/0x90 [ 565.186163][T19203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.186181][T19203] RIP: 0033:0x7f90af19ce59 [ 565.186198][T19203] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 565.186214][T19203] RSP: 002b:00007f90b0127028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 565.186235][T19203] RAX: ffffffffffffffda RBX: 00007f90af415fa0 RCX: 00007f90af19ce59 [ 565.186248][T19203] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 565.186259][T19203] RBP: 00007f90b0127090 R08: 0000000000000000 R09: 0000000000000000 [ 565.186270][T19203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 565.186282][T19203] R13: 00007f90af416038 R14: 00007f90af415fa0 R15: 00007ffd02d91ac8 [ 565.186315][T19203] [ 566.030135][T19228] IPv6: NLM_F_CREATE should be specified when creating new route [ 566.038793][T19228] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3181'. [ 566.145549][ T5288] 8021q: adding VLAN 0 to HW filter on device eth2 [ 566.172544][T18972] bridge0: port 1(bridge_slave_0) entered blocking state [ 566.209135][T18972] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.235068][T18972] bridge_slave_0: entered allmulticast mode [ 566.248733][T18972] bridge_slave_0: entered promiscuous mode [ 566.298861][T19236] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3182'. [ 566.410016][T18972] bridge0: port 2(bridge_slave_1) entered blocking state [ 566.420788][T18972] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.434988][T18972] bridge_slave_1: entered allmulticast mode [ 566.444042][T18972] bridge_slave_1: entered promiscuous mode [ 566.519104][T19232] lo speed is unknown, defaulting to 1000 [ 566.545546][T19241] netlink: 'syz.0.3183': attribute type 16 has an invalid length. [ 566.590379][T19241] netlink: 'syz.0.3183': attribute type 17 has an invalid length. [ 566.620071][T18972] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 567.248666][T19259] FAULT_INJECTION: forcing a failure. [ 567.248666][T19259] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 567.270227][T18972] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 567.312201][T19259] CPU: 0 UID: 0 PID: 19259 Comm: syz.3.3187 Not tainted syzkaller #0 PREEMPT(full) [ 567.312229][T19259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 567.312241][T19259] Call Trace: [ 567.312250][T19259] [ 567.312259][T19259] dump_stack_lvl+0xe8/0x150 [ 567.312293][T19259] should_fail_ex+0x412/0x560 [ 567.312334][T19259] _copy_from_user+0x2d/0xb0 [ 567.312363][T19259] kstrtouint_from_user+0xd6/0x180 [ 567.312391][T19259] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 567.312434][T19259] proc_fail_nth_write+0x8e/0x210 [ 567.312460][T19259] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 567.312491][T19259] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 567.312517][T19259] vfs_write+0x29a/0xb90 [ 567.312555][T19259] ? __pfx_vfs_write+0x10/0x10 [ 567.312584][T19259] ? __fget_files+0x2a/0x420 [ 567.312612][T19259] ? __fget_files+0x3a0/0x420 [ 567.312634][T19259] ? __fget_files+0x2a/0x420 [ 567.312667][T19259] ksys_write+0x150/0x270 [ 567.312697][T19259] ? __pfx_ksys_write+0x10/0x10 [ 567.312734][T19259] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.312755][T19259] do_syscall_64+0x15f/0xf80 [ 567.312782][T19259] ? trace_irq_disable+0x3b/0x140 [ 567.312810][T19259] ? clear_bhb_loop+0x40/0x90 [ 567.312835][T19259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.312854][T19259] RIP: 0033:0x7f0f7275d68e [ 567.312873][T19259] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 567.312888][T19259] RSP: 002b:00007f0f73581fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 567.312908][T19259] RAX: ffffffffffffffda RBX: 00007f0f735826c0 RCX: 00007f0f7275d68e [ 567.312920][T19259] RDX: 0000000000000001 RSI: 00007f0f735820a0 RDI: 0000000000000005 [ 567.312931][T19259] RBP: 00007f0f73582090 R08: 0000000000000000 R09: 0000000000000000 [ 567.312942][T19259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 567.312952][T19259] R13: 00007f0f72a16038 R14: 00007f0f72a15fa0 R15: 00007fff40b68d88 [ 567.312984][T19259] [ 567.525933][T18972] team0: Port device team_slave_0 added [ 567.535173][T18972] team0: Port device team_slave_1 added [ 567.827827][T18972] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 567.854772][T18972] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 567.935221][T18972] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 568.102973][T18972] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 568.130889][T18972] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 568.206238][T18972] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 568.534195][ T716] batadv0: left promiscuous mode [ 568.556296][ T716] hsr_slave_0: left promiscuous mode [ 568.563014][ T716] hsr_slave_1: left promiscuous mode [ 568.569886][ T716] batman_adv: batadv0: Removing interface: macsec1 [ 568.755651][T19286] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3192'. [ 569.445285][T19307] xt_TPROXY: Can be used only with -p tcp or -p udp [ 569.606433][ T5288] 8021q: adding VLAN 0 to HW filter on device eth3 [ 569.853766][T18972] hsr_slave_0: entered promiscuous mode [ 569.891276][T18972] hsr_slave_1: entered promiscuous mode [ 569.919610][T18972] debugfs: 'hsr0' already exists in 'hsr' [ 569.946181][T18972] Cannot create hsr debugfs directory [ 570.179825][T19318] xt_hashlimit: size too large, truncated to 1048576 [ 570.203375][T19318] xt_hashlimit: invalid interval [ 570.339270][T19318] xt_hashlimit: size too large, truncated to 1048576 [ 570.769745][ T716] IPVS: stop unused estimator thread 0... [ 572.034937][T19356] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 572.042645][T19356] batadv_slave_0: entered allmulticast mode [ 572.051101][T19356] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 572.166727][T19359] syzkaller0: entered promiscuous mode [ 572.182499][T19359] syzkaller0: entered allmulticast mode [ 573.147910][T19330] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 573.176773][T18972] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 573.239708][T18972] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 573.269544][T18972] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 573.355966][T18972] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 573.376195][T18972] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 573.421129][T18972] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 573.453587][T18972] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 573.719253][T18972] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 573.923758][T19419] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3208'. [ 573.993418][T19422] netlink: 'syz.0.3209': attribute type 13 has an invalid length. [ 574.012321][T19422] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3209'. [ 574.051128][T18972] 8021q: adding VLAN 0 to HW filter on device bond0 [ 574.136945][T18972] 8021q: adding VLAN 0 to HW filter on device team0 [ 574.188486][ T5993] bridge0: port 1(bridge_slave_0) entered blocking state [ 574.195714][ T5993] bridge0: port 1(bridge_slave_0) entered forwarding state [ 574.441578][ T716] bridge0: port 2(bridge_slave_1) entered blocking state [ 574.448820][ T716] bridge0: port 2(bridge_slave_1) entered forwarding state [ 574.495610][T19440] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3213'. [ 574.547401][T19438] tipc: Enabling of bearer rejected, already enabled [ 574.558412][T19440] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3213'. [ 574.593234][T18972] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 574.680760][T19442] vlan2: entered promiscuous mode [ 574.688647][T19442] bridge0: entered promiscuous mode [ 575.349900][T19474] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3220'. [ 575.745298][T19486] IPVS: set_ctl: invalid protocol: 103 172.20.20.170:20003 [ 575.943854][T19497] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3221'. [ 578.277384][T19490] tipc: Enabling of bearer rejected, failed to enable media [ 578.381232][T19505] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3225'. [ 578.394624][T19505] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3225'. [ 578.557854][T19511] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3226'. [ 578.582707][T19511] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3226'. [ 579.239126][T18972] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 579.282200][T19544] xt_hl: Unknown Hop Limit match mode: 206 [ 579.353176][T18972] veth0_vlan: entered promiscuous mode [ 579.553849][T18972] veth1_vlan: entered promiscuous mode [ 579.657624][T19553] __nla_validate_parse: 1 callbacks suppressed [ 579.657645][T19553] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3236'. [ 579.709565][T19553] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3236'. [ 579.736079][T18972] veth0_macvtap: entered promiscuous mode [ 579.750730][T19553] netlink: 58 bytes leftover after parsing attributes in process `syz.3.3236'. [ 579.778077][T18972] veth1_macvtap: entered promiscuous mode [ 579.825379][T19561] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3238'. [ 579.862474][T19553] team0 (unregistering): Port device team_slave_0 removed [ 579.897660][T19553] team0 (unregistering): Port device team_slave_1 removed [ 579.927665][T19553] team0 (unregistering): Port device dummy0 removed [ 580.196702][T19569] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3239'. [ 580.292847][T19572] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3241'. [ 580.319939][T18972] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 580.340537][T19572] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3241'. [ 580.348095][T19574] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3240'. [ 580.361546][T19572] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3241'. [ 580.372247][T18972] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 580.411151][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.433304][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.471285][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.494953][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.765495][T19579] IPVS: Scheduler module ip_vs_sip not found [ 580.810948][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 580.848619][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 580.933347][T19592] netlink: 'syz.4.3246': attribute type 2 has an invalid length. [ 580.950182][ T716] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 580.962839][ T716] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 581.032767][T19598] netlink: 'syz.3.3248': attribute type 1 has an invalid length. [ 581.042197][T19598] netlink: 2704 bytes leftover after parsing attributes in process `syz.3.3248'. [ 581.099324][T19598] nbd0: detected capacity change from 63 to 339754496 [ 581.116464][T19582] blk_print_req_error: 138 callbacks suppressed [ 581.116484][T19582] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 581.166444][T19582] buffer_io_error: 138 callbacks suppressed [ 581.166464][T19582] Buffer I/O error on dev nbd0, logical block 0, async page read [ 581.221696][T19582] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 581.260100][T19582] Buffer I/O error on dev nbd0, logical block 0, async page read [ 581.280108][T19582] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 581.289630][T19582] Buffer I/O error on dev nbd0, logical block 0, async page read [ 581.298975][T19601] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 581.315388][T19582] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 581.341661][T19582] Buffer I/O error on dev nbd0, logical block 0, async page read [ 581.360090][T19582] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 581.380128][T19582] Buffer I/O error on dev nbd0, logical block 0, async page read [ 581.407811][T19582] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 581.446051][T19582] Buffer I/O error on dev nbd0, logical block 0, async page read [ 581.472444][T19582] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 581.510780][T19582] Buffer I/O error on dev nbd0, logical block 0, async page read [ 581.538148][T19582] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 581.571100][T19582] Buffer I/O error on dev nbd0, logical block 0, async page read [ 581.601130][T19582] ldm_validate_partition_table(): Disk read failed. [ 581.624773][T19582] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 581.633440][T19618] tipc: Enabling of bearer rejected, already enabled [ 581.660399][T19582] Buffer I/O error on dev nbd0, logical block 0, async page read [ 581.690096][T19582] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 581.736174][T19582] Buffer I/O error on dev nbd0, logical block 0, async page read [ 581.756867][T19582] Dev nbd0: unable to read RDB block 0 [ 581.785021][T19582] nbd0: unable to read partition table [ 581.842580][T19582] ldm_validate_partition_table(): Disk read failed. [ 581.884494][T19582] Dev nbd0: unable to read RDB block 0 [ 581.913574][T18150] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 581.928564][T18150] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 581.937229][T18150] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 581.950879][T18150] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 581.962564][T19582] nbd0: unable to read partition table [ 581.969717][T18150] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 582.043762][T19636] netlink: 'syz.1.3258': attribute type 9 has an invalid length. [ 582.261862][T19646] x_tables: duplicate underflow at hook 3 [ 582.953317][ T1102] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 582.970356][ T1102] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.108521][T19680] bond18: entered promiscuous mode [ 583.127334][T19680] bond18: entered allmulticast mode [ 583.286657][ T1102] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 583.312171][ T1102] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.352674][T19690] netlink: 'syz.0.3272': attribute type 10 has an invalid length. [ 583.375900][T19629] lo speed is unknown, defaulting to 1000 [ 583.399399][T19690] veth0_vlan: left promiscuous mode [ 583.407401][T19690] veth0_vlan: entered promiscuous mode [ 583.441914][T19690] team0: Device veth0_vlan failed to register rx_handler [ 583.977872][ T1102] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 583.999001][ T1102] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.028722][ T5635] Bluetooth: hci1: command tx timeout [ 584.087756][T19720] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 584.206440][ T1102] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 584.226419][ T1102] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.612834][T19746] netlink: 'syz.3.3286': attribute type 11 has an invalid length. [ 584.913736][T19762] __nla_validate_parse: 22 callbacks suppressed [ 584.913758][T19762] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3286'. [ 585.170485][T19770] tipc: Resetting bearer [ 585.483831][ T1102] veth1_to_bridge: left allmulticast mode [ 585.507196][ T1102] veth1_to_bridge: left promiscuous mode [ 585.519980][ T1102] bridge0: port 1(veth1_to_bridge) entered disabled state [ 585.640697][ T1102] dvmrp0: left allmulticast mode [ 586.104754][ T5635] Bluetooth: hci1: command tx timeout [ 586.348988][ T1102] bond15 (unregistering): (slave ip6gretap2): Releasing active interface [ 586.487912][ T1102] bond7 (unregistering): (slave gretap1): Releasing active interface [ 586.739920][ T1102] bond1 (unregistering): (slave geneve2): Releasing active interface [ 586.918838][ T1102] bond5 (unregistering): (slave bridge3): Releasing backup interface [ 587.118742][ T1102] bond12 (unregistering): (slave bridge7): Releasing active interface [ 587.319567][ T1102] bond15 (unregistering): (slave bridge11): Releasing active interface [ 587.373724][ T1102] bond0 (unregistering): left promiscuous mode [ 587.380541][ T1102] bond0 (unregistering): Released all slaves [ 587.399666][ T1102] bond1 (unregistering): Released all slaves [ 587.423210][ T1102] bond2 (unregistering): Released all slaves [ 587.439239][ T1102] bond3 (unregistering): Released all slaves [ 587.454178][ T1102] bond4 (unregistering): Released all slaves [ 587.472822][ T1102] bond5 (unregistering): Released all slaves [ 587.502477][ T1102] bond6 (unregistering): Released all slaves [ 587.518396][ T1102] bond7 (unregistering): Released all slaves [ 587.533639][ T1102] bond8 (unregistering): Released all slaves [ 587.550928][ T1102] bond9 (unregistering): Released all slaves [ 587.567116][ T1102] bond10 (unregistering): (slave veth13): Releasing backup interface [ 587.586748][ T1102] bond10 (unregistering): Released all slaves [ 587.603792][ T1102] team0: Port device macvlan3 removed [ 587.613317][ T1102] bond11 (unregistering): Released all slaves [ 587.630759][ T1102] bond12 (unregistering): Released all slaves [ 587.646851][ T1102] bond13 (unregistering): Released all slaves [ 587.673011][ T1102] bond14 (unregistering): Released all slaves [ 587.688984][ T1102] bond15 (unregistering): Released all slaves [ 587.733486][ T5288] 8021q: adding VLAN 0 to HW filter on device eth1 [ 588.192172][ T5635] Bluetooth: hci1: command tx timeout [ 588.520081][ T1102] hm3): left promiscuous mode [ 588.786645][ T1102] 5: left promiscuous mode [ 588.860911][T19629] bridge0: port 1(bridge_slave_0) entered blocking state [ 588.889057][T19629] bridge0: port 1(bridge_slave_0) entered disabled state [ 588.897274][T19854] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3303'. [ 588.919041][T19629] bridge_slave_0: entered allmulticast mode [ 588.930424][T19854] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3303'. [ 588.968431][T19629] bridge_slave_0: entered promiscuous mode [ 589.036881][ T1102] tipc: Disabling bearer [ 589.053766][ T1102] tipc: Left network mode [ 589.099769][T19629] bridge0: port 2(bridge_slave_1) entered blocking state [ 589.127144][T19629] bridge0: port 2(bridge_slave_1) entered disabled state [ 589.157508][T19629] bridge_slave_1: entered allmulticast mode [ 589.207914][T19629] bridge_slave_1: entered promiscuous mode [ 589.434722][T19629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 589.447536][T19879] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3306'. [ 589.486328][T19879] xt_l2tp: missing protocol rule (udp|l2tpip) [ 589.517611][T19881] openvswitch: netlink: Unexpected mask (mask=20440, allowed=10048) [ 589.533107][T19629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 589.549794][T19884] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3306'. [ 589.594756][T19884] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3306'. [ 589.658983][T19629] team0: Port device team_slave_0 added [ 589.659520][T19881] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3308'. [ 589.677446][T19629] team0: Port device team_slave_1 added [ 589.728712][T19890] openvswitch: netlink: Unexpected mask (mask=20440, allowed=10048) [ 589.805245][ T5288] 8021q: adding VLAN 0 to HW filter on device eth2 [ 589.915884][T19879] syzkaller0: entered promiscuous mode [ 589.922015][T19879] syzkaller0: entered allmulticast mode [ 589.930641][T19629] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 589.938929][T19629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 589.966235][T19629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 589.998877][T19897] tunl0: Caught tx_queue_len zero misconfig [ 590.051711][T19629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 590.071254][T19629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 590.116371][T19629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 590.215580][T19902] IPVS: length: 68 != 1184280 [ 590.232316][T19902] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3313'. [ 590.264039][ T5635] Bluetooth: hci1: command tx timeout [ 590.327224][T19908] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3315'. [ 590.495739][T19629] hsr_slave_0: entered promiscuous mode [ 590.527773][T19629] hsr_slave_1: entered promiscuous mode [ 590.557806][T19629] debugfs: 'hsr0' already exists in 'hsr' [ 590.572339][T19629] Cannot create hsr debugfs directory [ 591.022925][T19942] netlink: 'syz.3.3321': attribute type 1 has an invalid length. [ 591.621032][T19950] lo speed is unknown, defaulting to 1000 [ 591.986297][ T5288] 8021q: adding VLAN 0 to HW filter on device eth3 [ 592.946559][T20022] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3337'. [ 593.002024][T20028] netlink: 196 bytes leftover after parsing attributes in process `syz.1.3338'. [ 593.062698][T20026] netlink: 196 bytes leftover after parsing attributes in process `syz.1.3338'. [ 593.103284][T20028] netlink: 196 bytes leftover after parsing attributes in process `syz.1.3338'. [ 593.117593][T20026] netlink: 196 bytes leftover after parsing attributes in process `syz.1.3338'. [ 593.132548][T20028] netlink: 196 bytes leftover after parsing attributes in process `syz.1.3338'. [ 593.153643][T20029] pim6reg1: entered promiscuous mode [ 593.160328][T20029] pim6reg1: entered allmulticast mode [ 593.205820][T20026] netlink: 196 bytes leftover after parsing attributes in process `syz.1.3338'. [ 593.230072][T20028] netlink: 196 bytes leftover after parsing attributes in process `syz.1.3338'. [ 593.369434][ T1102] batadv0: left promiscuous mode [ 593.463361][ T1102] veth0_macvtap: left promiscuous mode [ 593.481721][ T1102] veth1_vlan: left promiscuous mode [ 593.493222][ T1102] veth0_vlan: left promiscuous mode [ 598.024826][T20043] __nla_validate_parse: 123 callbacks suppressed [ 598.024847][T20043] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3342'. [ 598.626298][T20078] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3344'. [ 599.358973][T20110] Bluetooth: MGMT ver 1.23 [ 599.403742][T20112] netlink: 112 bytes leftover after parsing attributes in process `syz.1.3352'. [ 602.011011][T19629] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 602.024482][T19629] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 602.033320][T19629] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 602.046379][T19629] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 602.061420][T19629] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 602.080266][ T1102] IPVS: stop unused estimator thread 0... [ 602.102515][T19629] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 602.144629][T19629] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 602.167855][T19629] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 602.280544][T20141] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3353'. [ 602.340461][T20147] x_tables: duplicate underflow at hook 1 [ 602.379890][T20141] tipc: Resetting bearer [ 602.395497][T20141] tipc: Resetting bearer [ 602.433388][T20153] netlink: 'syz.1.3353': attribute type 17 has an invalid length. [ 602.520983][T20159] netlink: 'syz.3.3358': attribute type 1 has an invalid length. [ 602.540472][T20153] 8021q: adding VLAN 0 to HW filter on device bond0 [ 602.602632][T20153] bridge_slave_1: left allmulticast mode [ 602.649220][T20153] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 602.665296][T20153] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 602.680691][T20165] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3357'. [ 602.706008][T20153] hsr0: left promiscuous mode [ 602.721326][T20153] veth1_vlan: left promiscuous mode [ 602.746227][T20153] veth0_vlan: left promiscuous mode [ 602.756874][T20153] veth0_vlan: entered promiscuous mode [ 602.781729][T20153] veth1_vlan: entered promiscuous mode [ 602.820621][T20153] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 602.860549][T20159] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 602.922031][ T993] syz0: Port: 1 Link ACTIVE [ 602.988161][ T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.021573][ T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.040916][ T7235] syz1: Port: 1 Link ACTIVE [ 603.054939][ T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.081216][ T716] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.263199][T19629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 603.316665][T20183] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3360'. [ 603.345270][T19629] 8021q: adding VLAN 0 to HW filter on device team0 [ 603.366653][T20183] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3360'. [ 603.397286][ T1102] bridge0: port 1(bridge_slave_0) entered blocking state [ 603.400879][T20186] netlink: 'syz.1.3361': attribute type 1 has an invalid length. [ 603.404531][ T1102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 603.453341][ T1102] bridge0: port 2(bridge_slave_1) entered blocking state [ 603.460595][ T1102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 603.560389][T20186] netlink: 'syz.1.3361': attribute type 2 has an invalid length. [ 603.942654][T20200] mac80211_hwsim hwsim39 wlan0: entered promiscuous mode [ 603.985171][T20200] mac80211_hwsim hwsim39 wlan0: entered allmulticast mode [ 603.999645][T20200] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 604.291478][T20219] netlink: 'syz.1.3370': attribute type 1 has an invalid length. [ 604.326966][T20224] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3369'. [ 604.456473][T20233] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3370'. [ 604.605218][T20233] bond19: (slave bridge8): Enslaving as a backup interface with an up link [ 604.686199][T20219] bond19: (slave bridge9): Enslaving as a backup interface with a down link [ 604.697580][T20246] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3372'. [ 604.708915][ T5969] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 604.734885][T20246] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3372'. [ 604.743010][ T5969] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 604.770522][ T5969] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 604.788115][ T5969] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 604.835727][T20245] syzkaller0: entered promiscuous mode [ 604.863649][T20245] syzkaller0: entered allmulticast mode [ 604.867290][T20242] Bluetooth: MGMT ver 1.23 [ 604.919086][T20242] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3372'. [ 605.691359][T19629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 605.854821][T20303] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3384'. [ 605.931056][T20308] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3386'. [ 605.972107][T20308] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3386'. [ 606.077278][T20314] tipc: Resetting bearer [ 606.552447][T19629] veth0_vlan: entered promiscuous mode [ 606.611424][T20336] IPv6: sit1: Disabled Multicast RS [ 606.702769][T19629] veth1_vlan: entered promiscuous mode [ 606.870543][T20348] xt_hashlimit: size too large, truncated to 1048576 [ 606.898937][T19629] veth0_macvtap: entered promiscuous mode [ 606.927652][T19629] veth1_macvtap: entered promiscuous mode [ 607.006528][T19629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 607.049815][T19629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 607.086409][ T1102] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.114581][ T1102] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.128150][ T1102] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.151987][ T1102] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.251558][T20366] syzkaller0: entered promiscuous mode [ 607.266242][T20366] syzkaller0: entered allmulticast mode [ 607.686998][ T1167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 607.708166][ T1167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 607.747873][T20383] netlink: 'syz.0.3401': attribute type 1 has an invalid length. [ 607.768557][ T1167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 607.799432][ T1167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 607.823635][T20383] syzkaller1: entered promiscuous mode [ 607.844654][T20383] syzkaller1: entered allmulticast mode [ 608.195815][T20406] syzkaller1: entered promiscuous mode [ 608.212643][T20406] syzkaller1: entered allmulticast mode [ 608.219576][T20409] netlink: 'syz.3.3406': attribute type 1 has an invalid length. [ 608.341164][T20417] Cannot find add_set index 0 as target [ 608.363629][T20418] __nla_validate_parse: 2 callbacks suppressed [ 608.363650][T20418] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3408'. [ 608.620084][T18150] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 608.641658][T18150] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 608.653703][T18150] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 608.693514][T18150] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 608.702238][T18150] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 608.715510][T20413] bond2: (slave bridge1): making interface the new active one [ 608.758471][T20413] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 608.859625][T20431] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3410'. [ 608.913319][T20417] bond2: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 608.982794][T20438] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3410'. [ 609.209150][T20448] netlink: 207952 bytes leftover after parsing attributes in process `syz.0.3410'. [ 609.314484][T20431] 8021q: adding VLAN 0 to HW filter on device bond1 [ 609.375728][T20433] 8021q: adding VLAN 0 to HW filter on device bond2 [ 609.391547][T20433] bond1: (slave bond2): Enslaving as an active interface with an up link [ 609.422819][T20438] bond1 (unregistering): (slave bond2): Releasing backup interface [ 609.443121][T20438] bond1 (unregistering): Released all slaves [ 609.503333][T20434] syzkaller0: entered promiscuous mode [ 609.521640][T20434] syzkaller0: entered allmulticast mode [ 609.528107][T20465] netlink: 5896 bytes leftover after parsing attributes in process `syz.3.3412'. [ 609.578717][T20465] openvswitch: netlink: Flow key attr not present in new flow. [ 609.903211][T20477] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3415'. [ 609.919237][T20477] tipc: Can't bind to reserved service type 0 [ 610.108852][T20486] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3417'. [ 610.188580][T20490] netlink: 'syz.4.3418': attribute type 2 has an invalid length. [ 610.214834][T20490] netlink: 'syz.4.3418': attribute type 8 has an invalid length. [ 610.223703][T20423] lo speed is unknown, defaulting to 1000 [ 610.233173][T20490] netlink: 120 bytes leftover after parsing attributes in process `syz.4.3418'. [ 610.673303][T20512] netlink: 'syz.4.3421': attribute type 1 has an invalid length. [ 610.699858][T20512] netlink: 'syz.4.3421': attribute type 1 has an invalid length. [ 610.720222][T20512] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3421'. [ 610.836073][T18150] Bluetooth: hci4: command tx timeout [ 610.851909][T20521] syzkaller0: entered promiscuous mode [ 610.857518][T20521] syzkaller0: entered allmulticast mode [ 610.873605][T20516] x_tables: duplicate underflow at hook 4 [ 611.166940][T20530] lo speed is unknown, defaulting to 1000 [ 611.343433][T20544] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3429'. [ 611.707606][T20548] nbd: device at index 64 is going down [ 612.425013][T20277] udevd[20277]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 612.510825][T20575] netlink: 'syz.0.3432': attribute type 1 has an invalid length. [ 612.620390][T20586] team0 (unregistering): Port device team_slave_0 removed [ 612.636823][T20586] team0 (unregistering): Port device team_slave_1 removed [ 612.788013][T20423] bridge0: port 1(bridge_slave_0) entered blocking state [ 612.807109][T20423] bridge0: port 1(bridge_slave_0) entered disabled state [ 612.826877][T20423] bridge_slave_0: entered allmulticast mode [ 612.886586][T20423] bridge_slave_0: entered promiscuous mode [ 612.904815][T18150] Bluetooth: hci4: command tx timeout [ 612.920850][T20423] bridge0: port 2(bridge_slave_1) entered blocking state [ 612.939713][T20423] bridge0: port 2(bridge_slave_1) entered disabled state [ 612.957174][T20423] bridge_slave_1: entered allmulticast mode [ 612.999121][T20423] bridge_slave_1: entered promiscuous mode [ 613.172110][T20423] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 613.259566][T20423] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 613.349909][T20606] syzkaller0: entered promiscuous mode [ 613.357000][T20606] syzkaller0: entered allmulticast mode [ 613.370173][T20423] team0: Port device team_slave_0 added [ 613.386027][T20423] team0: Port device team_slave_1 added [ 613.569750][T20423] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 613.589729][T20423] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 613.638248][T20423] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 613.652653][T20423] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 613.667282][T20423] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 613.699367][T20423] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 613.851083][T20423] hsr_slave_0: entered promiscuous mode [ 613.873125][T20423] hsr_slave_1: entered promiscuous mode [ 613.889495][T20423] debugfs: 'hsr0' already exists in 'hsr' [ 613.927336][T20423] Cannot create hsr debugfs directory [ 614.021303][T20617] syzkaller1: entered promiscuous mode [ 614.029522][T20617] syzkaller1: entered allmulticast mode [ 614.208024][T20627] syzkaller0: entered promiscuous mode [ 614.213661][T20627] syzkaller0: entered allmulticast mode [ 614.310043][T20641] __nla_validate_parse: 1 callbacks suppressed [ 614.310062][T20641] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3446'. [ 614.393313][T20641] x_tables: duplicate underflow at hook 1 [ 614.403043][T20642] x_tables: duplicate underflow at hook 1 [ 614.471054][T20423] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.599576][T20646] syzkaller0: entered promiscuous mode [ 614.605838][T20646] syzkaller0: entered allmulticast mode [ 614.676184][T20423] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.737389][T20423] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.994273][T18150] Bluetooth: hci4: command tx timeout [ 615.577602][T20658] netlink: 'syz.0.3451': attribute type 1 has an invalid length. [ 615.631124][T20659] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3451'. [ 617.074252][T18150] Bluetooth: hci4: command tx timeout [ 617.434596][T20658] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 617.452670][T20423] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.768692][T20670] pim6reg: entered allmulticast mode [ 618.007984][T20683] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3455'. [ 618.042624][T20683] netlink: 348 bytes leftover after parsing attributes in process `syz.4.3455'. [ 618.078303][T20681] lo speed is unknown, defaulting to 1000 [ 618.089731][T20683] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3455'. [ 618.098674][T20688] syzkaller0: entered promiscuous mode [ 618.106359][T20688] syzkaller0: entered allmulticast mode [ 618.117208][T20695] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3455'. [ 618.135961][T20683] netlink: 348 bytes leftover after parsing attributes in process `syz.4.3455'. [ 618.147603][T20423] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 618.155189][T20695] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3455'. [ 618.165744][T20683] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3455'. [ 618.215993][T20423] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 618.283837][T20423] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 618.303829][T20423] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 618.312266][T20698] veth0: entered promiscuous mode [ 618.321027][T20423] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 618.339059][T20423] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 618.355571][T20699] veth0: left promiscuous mode [ 618.362638][T20423] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 618.401567][T20423] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 618.437102][T20708] netlink: 'syz.3.3461': attribute type 13 has an invalid length. [ 618.607518][T20708] 8021q: adding VLAN 0 to HW filter on device bond1 [ 618.651611][T20708] 8021q: adding VLAN 0 to HW filter on device bond2 [ 618.822614][T20711] bridge0: port 2(bridge_slave_1) entered disabled state [ 618.830070][T20711] bridge0: port 1(bridge_slave_0) entered disabled state [ 618.887631][T20711] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 618.900506][T20711] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 619.015343][T20719] xt_nat: multiple ranges no longer supported [ 619.079161][ T5969] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 619.101125][ T5969] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 619.129837][ T5969] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 619.211272][ T5969] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 619.233360][ T5969] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.270568][T20727] syzkaller1: entered promiscuous mode [ 619.281541][T20727] syzkaller1: entered allmulticast mode [ 619.337077][ T5969] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.426378][ T58] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.436429][ T58] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.481692][T20723] lo speed is unknown, defaulting to 1000 [ 619.737945][T20742] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 619.764241][T20742] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.860236][T20423] 8021q: adding VLAN 0 to HW filter on device bond0 [ 619.965347][T20742] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 619.991795][T20742] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.249974][T20742] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 620.275558][T20742] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.430667][T20423] 8021q: adding VLAN 0 to HW filter on device team0 [ 620.479463][ T5969] bridge0: port 1(bridge_slave_0) entered blocking state [ 620.486746][ T5969] bridge0: port 1(bridge_slave_0) entered forwarding state [ 620.610130][T20742] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 620.620706][T20742] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.633509][T20748] netlink: 7 bytes leftover after parsing attributes in process `syz.3.3469'. [ 620.656193][ T5969] bridge0: port 2(bridge_slave_1) entered blocking state [ 620.663646][ T5969] bridge0: port 2(bridge_slave_1) entered forwarding state [ 620.677696][T20747] netlink: 'syz.3.3469': attribute type 1 has an invalid length. [ 620.771859][T20747] bond3: entered promiscuous mode [ 620.783014][T20747] 8021q: adding VLAN 0 to HW filter on device bond3 [ 620.871011][T20748] bond3: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 620.890073][T20748] bond3: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 620.906783][T20748] bond3: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 621.090553][ T13] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 621.098994][ T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.107898][T20752] netlink: 'syz.3.3470': attribute type 2 has an invalid length. [ 621.125790][T20751] netlink: 'syz.3.3470': attribute type 2 has an invalid length. [ 621.189769][ T13] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 621.210882][ T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.251104][T20755] syzkaller0: entered promiscuous mode [ 621.259493][T20755] syzkaller0: entered allmulticast mode [ 621.371144][ T5969] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 621.387577][ T5969] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.430278][ T5969] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 621.451755][ T5969] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.511897][T20743] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 621.525718][T20743] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.601464][T20775] netlink: 758 bytes leftover after parsing attributes in process `syz.2.3475'. [ 621.639771][T20743] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 621.660474][T20743] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.747193][T20743] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 621.768359][T20743] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.800047][T20784] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3478'. [ 621.856732][T20743] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 621.885923][T20743] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.003005][T20423] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 622.042864][T20790] netlink: 5692 bytes leftover after parsing attributes in process `syz.4.3480'. [ 622.256410][T20423] veth0_vlan: entered promiscuous mode [ 622.309888][T20423] veth1_vlan: entered promiscuous mode [ 622.399060][T20423] veth0_macvtap: entered promiscuous mode [ 622.420404][T20423] veth1_macvtap: entered promiscuous mode [ 622.475996][T20423] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 622.500212][T20423] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 622.570540][T20804] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3484'. [ 622.573973][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.601728][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.620436][T20802] syzkaller0: entered promiscuous mode [ 622.633954][T20802] syzkaller0: entered allmulticast mode [ 622.652507][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.667639][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.096214][ T58] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 625.116150][ T58] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.161250][T20812] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3486'. [ 625.238654][ T5969] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 625.264890][ T5969] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.333827][ T5969] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 625.344410][ T5969] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.392352][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 625.416737][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 625.510506][T20743] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 625.559572][T20743] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.609542][T20837] netlink: 'syz.4.3491': attribute type 1 has an invalid length. [ 625.629928][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 625.640480][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 625.666564][T20743] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 625.677452][T20743] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.698956][T20825] lo speed is unknown, defaulting to 1000 [ 625.758285][T20743] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 625.783085][T20743] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.133413][T20850] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.3494'. [ 626.388821][T20853] syzkaller0: entered promiscuous mode [ 626.394541][T20853] syzkaller0: entered allmulticast mode [ 626.497168][T20855] netlink: 'syz.2.3496': attribute type 1 has an invalid length. [ 626.559230][T20857] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3496'. [ 626.624474][ T29] audit: type=1107 audit(1779007844.280:12): pid=20858 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 626.727341][T20860] veth3: entered promiscuous mode [ 627.201043][T20884] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3502'. [ 627.212974][T20883] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 627.237809][T20883] bond1: (slave lo): Enslaving as an active interface with an up link [ 627.248824][T20883] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 627.515940][T20906] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3508'. [ 627.591696][T20915] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3511'. [ 627.685180][T20914] lo speed is unknown, defaulting to 1000 [ 627.757018][T20919] IPVS: set_ctl: invalid protocol: 60 127.0.0.1:20001 [ 627.813159][T20917] lo speed is unknown, defaulting to 1000 [ 628.306853][T20922] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3512'. [ 629.120263][T20964] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3524'. [ 629.327293][T18150] block nbd1: Receive control failed (result -1) [ 629.763111][T20986] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3527'. [ 630.956679][T21037] netlink: 'syz.0.3535': attribute type 2 has an invalid length. [ 631.140743][T21039] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3534'. [ 631.318212][T21033] syzkaller0: entered promiscuous mode [ 631.331768][T21033] syzkaller0: entered allmulticast mode [ 631.352013][T21060] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3539'. [ 631.504856][T21034] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 632.057215][T21077] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 632.070860][T21077] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 632.077824][T21077] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 632.084806][T21077] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 632.091641][T21077] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 632.098542][T21077] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 632.105501][T21077] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 632.112337][T21077] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 632.119294][T21077] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 632.174926][T21078] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3545'. [ 632.196265][T21078] netlink: 348 bytes leftover after parsing attributes in process `syz.4.3545'. [ 632.211975][T21078] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3545'. [ 632.221594][T21078] netlink: 348 bytes leftover after parsing attributes in process `syz.4.3545'. [ 632.235877][T21078] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3545'. [ 632.257253][T21077] net_ratelimit: 312 callbacks suppressed [ 632.257272][T21077] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 632.269989][T21077] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 632.276898][T21077] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 632.283778][T21077] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 632.290681][T21077] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 632.297653][T21077] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 632.304531][T21077] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 632.311365][T21077] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 632.318265][T21077] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 632.325451][T21077] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 633.998421][T21107] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3549'. [ 635.692552][T21106] netlink: 'syz.3.3549': attribute type 3 has an invalid length. [ 635.753051][T21115] netlink: 'syz.1.3550': attribute type 1 has an invalid length. [ 636.175533][T21139] netlink: 6024 bytes leftover after parsing attributes in process `syz.3.3555'. [ 636.187276][T21140] netlink: 'syz.0.3557': attribute type 3 has an invalid length. [ 636.257868][T21142] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3556'. [ 636.756299][T21160] syzkaller0: entered promiscuous mode [ 636.771785][T21160] syzkaller0: entered allmulticast mode [ 637.080279][T21167] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3566'. [ 637.199699][T21170] ipip0: entered promiscuous mode [ 637.271456][T21170] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ipip0 [ 637.287526][T21170] gretap1: entered promiscuous mode [ 637.320735][T21170] gretap1: entered allmulticast mode [ 637.338366][T21177] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.3569'. [ 637.352397][T21180] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3570'. [ 637.452036][T21180] vlan2: entered promiscuous mode [ 637.461734][T21180] bond_slave_1: entered promiscuous mode [ 637.480432][T21187] syzkaller1: entered promiscuous mode [ 637.495510][T21187] syzkaller1: entered allmulticast mode [ 637.642193][T21192] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3574'. [ 637.669447][T21192] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3574'. [ 637.704497][T21192] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3574'. [ 637.734891][T21192] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3574'. [ 637.752168][T21192] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3574'. [ 637.952209][T21206] xt_CT: You must specify a L4 protocol and not use inversions on it [ 638.017786][T21192] bridge0: port 2(bridge_slave_1) entered disabled state [ 638.025610][T21192] bridge0: port 1(bridge_slave_0) entered disabled state [ 638.549654][T21229] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 638.790636][T21247] net_ratelimit: 2999 callbacks suppressed [ 638.790658][T21247] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 638.905508][T21251] bond2: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3) [ 638.916390][ C1] vcan0: j1939_tp_rxtimer: 0xffff888057484400: rx timeout, send abort [ 638.927724][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888057484400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 638.960318][T21251] bond2 (unregistering): Released all slaves [ 639.090363][T21261] syzkaller0: entered promiscuous mode [ 639.108397][T21261] syzkaller0: entered allmulticast mode [ 639.412390][T21280] bridge1: entered allmulticast mode [ 640.146835][T21316] netlink: 'syz.4.3600': attribute type 1 has an invalid length. [ 640.688392][T21328] mac80211_hwsim hwsim36 wlan0: entered allmulticast mode [ 641.047251][T21356] x_tables: duplicate underflow at hook 1 [ 641.718535][T21358] sit1: entered allmulticast mode [ 642.050016][T21385] netlink: 'syz.4.3617': attribute type 1 has an invalid length. [ 642.239165][T21397] bond1: entered promiscuous mode [ 642.271074][T21387] bond1: (slave dummy0): making interface the new active one [ 642.285293][T21387] dummy0: entered promiscuous mode [ 642.295708][T21387] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 642.342786][T21387] bond1: left promiscuous mode [ 642.355762][T21387] dummy0: left promiscuous mode [ 642.498162][T21416] __nla_validate_parse: 82 callbacks suppressed [ 642.498182][T21416] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3626'. [ 642.657214][ T5991] [ 642.659608][ T5991] ====================================================== [ 642.666736][ T5991] WARNING: possible circular locking dependency detected [ 642.673763][ T5991] syzkaller #0 Not tainted [ 642.678207][ T5991] ------------------------------------------------------ [ 642.685307][ T5991] kworker/u8:19/5991 is trying to acquire lock: [ 642.691543][ T5991] ffffffff8ea85560 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_node_noprof+0x4a/0x690 [ 642.701383][ T5991] [ 642.701383][ T5991] but task is already holding lock: [ 642.708871][ T5991] ffff88807a669d60 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: tcp_close+0x1d/0x110 [ 642.717783][ T5991] [ 642.717783][ T5991] which lock already depends on the new lock. [ 642.717783][ T5991] [ 642.728188][ T5991] [ 642.728188][ T5991] the existing dependency chain (in reverse order) is: [ 642.737204][ T5991] [ 642.737204][ T5991] -> #7 (k-sk_lock-AF_INET6){+.+.}-{0:0}: [ 642.745306][ T5991] lock_sock_nested+0x41/0x100 [ 642.750600][ T5991] __inet6_bind+0x30c/0xf60 [ 642.755629][ T5991] mptcp_bind+0x110/0x1d0 [ 642.760487][ T5991] __sys_bind+0x2e3/0x410 [ 642.765345][ T5991] __x64_sys_bind+0x7a/0x90 [ 642.770465][ T5991] do_syscall_64+0x15f/0xf80 [ 642.775580][ T5991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 642.781997][ T5991] [ 642.781997][ T5991] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 642.789736][ T5991] lock_sock_nested+0x41/0x100 [ 642.795054][ T5991] inet_shutdown+0x6a/0x390 [ 642.800081][ T5991] nbd_mark_nsock_dead+0x2e9/0x560 [ 642.805813][ T5991] recv_work+0x1c2e/0x1d40 [ 642.810838][ T5991] process_scheduled_works+0xb5d/0x1860 [ 642.816910][ T5991] worker_thread+0xa53/0xfc0 [ 642.822111][ T5991] kthread+0x389/0x470 [ 642.826794][ T5991] ret_from_fork+0x514/0xb70 [ 642.831911][ T5991] ret_from_fork_asm+0x1a/0x30 [ 642.837300][ T5991] [ 642.837300][ T5991] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 642.844946][ T5991] __mutex_lock+0x1a3/0x1550 [ 642.850064][ T5991] nbd_queue_rq+0x37b/0x1100 [ 642.855176][ T5991] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 642.861253][ T5991] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 642.868107][ T5991] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 642.874616][ T5991] blk_mq_run_hw_queue+0x348/0x4f0 [ 642.880255][ T5991] blk_mq_dispatch_list+0xd16/0xe10 [ 642.885977][ T5991] blk_mq_flush_plug_list+0x48d/0x570 [ 642.891881][ T5991] __blk_flush_plug+0x3ed/0x4d0 [ 642.897261][ T5991] __submit_bio+0x28d/0x580 [ 642.902283][ T5991] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 642.908439][ T5991] block_read_full_folio+0x599/0x830 [ 642.914252][ T5991] filemap_read_folio+0x137/0x3b0 [ 642.919806][ T5991] do_read_cache_folio+0x358/0x590 [ 642.925444][ T5991] read_part_sector+0xb6/0x2b0 [ 642.930777][ T5991] adfspart_check_ICS+0xb1/0x960 [ 642.936244][ T5991] bdev_disk_changed+0x817/0x1770 [ 642.941881][ T5991] blkdev_get_whole+0x380/0x510 [ 642.947262][ T5991] bdev_open+0x31e/0xd30 [ 642.952031][ T5991] blkdev_open+0x470/0x610 [ 642.956968][ T5991] do_dentry_open+0x785/0x14e0 [ 642.962256][ T5991] vfs_open+0x3b/0x340 [ 642.966846][ T5991] path_openat+0x2e08/0x3860 [ 642.971967][ T5991] do_file_open+0x23e/0x4a0 [ 642.976992][ T5991] do_sys_openat2+0x113/0x200 [ 642.982195][ T5991] __x64_sys_openat+0x138/0x170 [ 642.987576][ T5991] do_syscall_64+0x15f/0xf80 [ 642.992783][ T5991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 642.999395][ T5991] [ 642.999395][ T5991] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 643.006629][ T5991] __mutex_lock+0x1a3/0x1550 [ 643.011841][ T5991] nbd_queue_rq+0xc6/0x1100 [ 643.016866][ T5991] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 643.022943][ T5991] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 643.029800][ T5991] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 643.036338][ T5991] blk_mq_run_hw_queue+0x348/0x4f0 [ 643.041984][ T5991] blk_mq_dispatch_list+0xd16/0xe10 [ 643.047714][ T5991] blk_mq_flush_plug_list+0x48d/0x570 [ 643.053706][ T5991] __blk_flush_plug+0x3ed/0x4d0 [ 643.059080][ T5991] __submit_bio+0x28d/0x580 [ 643.064191][ T5991] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 643.070357][ T5991] block_read_full_folio+0x599/0x830 [ 643.076250][ T5991] filemap_read_folio+0x137/0x3b0 [ 643.081803][ T5991] do_read_cache_folio+0x358/0x590 [ 643.087526][ T5991] read_part_sector+0xb6/0x2b0 [ 643.092904][ T5991] adfspart_check_ICS+0xb1/0x960 [ 643.098456][ T5991] bdev_disk_changed+0x817/0x1770 [ 643.104005][ T5991] blkdev_get_whole+0x380/0x510 [ 643.109397][ T5991] bdev_open+0x31e/0xd30 [ 643.114250][ T5991] blkdev_open+0x470/0x610 [ 643.119192][ T5991] do_dentry_open+0x785/0x14e0 [ 643.124477][ T5991] vfs_open+0x3b/0x340 [ 643.129065][ T5991] path_openat+0x2e08/0x3860 [ 643.134181][ T5991] do_file_open+0x23e/0x4a0 [ 643.139214][ T5991] do_sys_openat2+0x113/0x200 [ 643.144421][ T5991] __x64_sys_openat+0x138/0x170 [ 643.149804][ T5991] do_syscall_64+0x15f/0xf80 [ 643.154920][ T5991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 643.161330][ T5991] [ 643.161330][ T5991] -> #3 (set->srcu){.+.+}-{0:0}: [ 643.168458][ T5991] __synchronize_srcu+0xca/0x300 [ 643.173922][ T5991] elevator_switch+0x1e8/0x7a0 [ 643.179221][ T5991] elevator_change+0x2cc/0x450 [ 643.184507][ T5991] elevator_set_default+0x36c/0x430 [ 643.190226][ T5991] blk_register_queue+0x3e9/0x4e0 [ 643.195774][ T5991] __add_disk+0x677/0xd50 [ 643.200621][ T5991] add_disk_fwnode+0xfb/0x480 [ 643.205815][ T5991] nbd_dev_add+0x72c/0xb50 [ 643.210754][ T5991] nbd_init+0x168/0x1f0 [ 643.215430][ T5991] do_one_initcall+0x250/0x870 [ 643.220719][ T5991] do_initcall_level+0x104/0x190 [ 643.226182][ T5991] do_initcalls+0x59/0xa0 [ 643.231121][ T5991] kernel_init_freeable+0x2a6/0x3e0 [ 643.236897][ T5991] kernel_init+0x1d/0x1d0 [ 643.241874][ T5991] ret_from_fork+0x514/0xb70 [ 643.246988][ T5991] ret_from_fork_asm+0x1a/0x30 [ 643.252273][ T5991] [ 643.252273][ T5991] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 643.260274][ T5991] __mutex_lock+0x1a3/0x1550 [ 643.265386][ T5991] elevator_change+0x1b3/0x450 [ 643.270680][ T5991] elevator_set_none+0xb5/0x140 [ 643.276060][ T5991] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 643.282578][ T5991] nbd_start_device+0x17f/0xb10 [ 643.287972][ T5991] nbd_genl_connect+0x165b/0x1cf0 [ 643.293525][ T5991] genl_family_rcv_msg_doit+0x22a/0x330 [ 643.299599][ T5991] genl_rcv_msg+0x61c/0x7a0 [ 643.304629][ T5991] netlink_rcv_skb+0x232/0x4b0 [ 643.309918][ T5991] genl_rcv+0x28/0x40 [ 643.314424][ T5991] netlink_unicast+0x75c/0x8e0 [ 643.319712][ T5991] netlink_sendmsg+0x813/0xb40 [ 643.324994][ T5991] ____sys_sendmsg+0x972/0x9f0 [ 643.330286][ T5991] ___sys_sendmsg+0x2a5/0x360 [ 643.335492][ T5991] __x64_sys_sendmsg+0x1bd/0x2a0 [ 643.340950][ T5991] do_syscall_64+0x15f/0xf80 [ 643.346072][ T5991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 643.352487][ T5991] [ 643.352487][ T5991] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 643.361185][ T5991] blk_alloc_queue+0x546/0x680 [ 643.366475][ T5991] __blk_mq_alloc_disk+0x197/0x390 [ 643.372106][ T5991] nbd_dev_add+0x499/0xb50 [ 643.377047][ T5991] nbd_init+0x168/0x1f0 [ 643.381720][ T5991] do_one_initcall+0x250/0x870 [ 643.387013][ T5991] do_initcall_level+0x104/0x190 [ 643.392481][ T5991] do_initcalls+0x59/0xa0 [ 643.397332][ T5991] kernel_init_freeable+0x2a6/0x3e0 [ 643.403057][ T5991] kernel_init+0x1d/0x1d0 [ 643.407907][ T5991] ret_from_fork+0x514/0xb70 [ 643.413017][ T5991] ret_from_fork_asm+0x1a/0x30 [ 643.418573][ T5991] [ 643.418573][ T5991] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 643.425792][ T5991] __lock_acquire+0x15a5/0x2cf0 [ 643.431170][ T5991] lock_acquire+0x106/0x350 [ 643.436193][ T5991] fs_reclaim_acquire+0x71/0x100 [ 643.441661][ T5991] kmem_cache_alloc_node_noprof+0x4a/0x690 [ 643.448079][ T5991] __alloc_skb+0x1d0/0x7d0 [ 643.453204][ T5991] tcp_send_active_reset+0x8a/0x550 [ 643.458927][ T5991] __tcp_close+0x4c5/0xfe0 [ 643.463977][ T5991] tcp_close+0x28/0x110 [ 643.468664][ T5991] inet_release+0x143/0x190 [ 643.473689][ T5991] sock_release+0x85/0x150 [ 643.478626][ T5991] rds_tcp_accept_one+0x641/0xd70 [ 643.484175][ T5991] rds_tcp_accept_worker+0x1d/0x70 [ 643.489818][ T5991] process_scheduled_works+0xb5d/0x1860 [ 643.495884][ T5991] worker_thread+0xa53/0xfc0 [ 643.500994][ T5991] kthread+0x389/0x470 [ 643.505591][ T5991] ret_from_fork+0x514/0xb70 [ 643.510706][ T5991] ret_from_fork_asm+0x1a/0x30 [ 643.515994][ T5991] [ 643.515994][ T5991] other info that might help us debug this: [ 643.515994][ T5991] [ 643.526222][ T5991] Chain exists of: [ 643.526222][ T5991] fs_reclaim --> sk_lock-AF_INET6 --> k-sk_lock-AF_INET6 [ 643.526222][ T5991] [ 643.539179][ T5991] Possible unsafe locking scenario: [ 643.539179][ T5991] [ 643.546637][ T5991] CPU0 CPU1 [ 643.552004][ T5991] ---- ---- [ 643.557366][ T5991] lock(k-sk_lock-AF_INET6); [ 643.562054][ T5991] lock(sk_lock-AF_INET6); [ 643.569079][ T5991] lock(k-sk_lock-AF_INET6); [ 643.576279][ T5991] lock(fs_reclaim); [ 643.580266][ T5991] [ 643.580266][ T5991] *** DEADLOCK *** [ 643.580266][ T5991] [ 643.588406][ T5991] 4 locks held by kworker/u8:19/5991: [ 643.593777][ T5991] #0: ffff888032ba5140 ((wq_completion)krdsd){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 643.604832][ T5991] #1: ffffc90005187c40 ((work_completion)(&rtn->rds_tcp_accept_w)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 643.617536][ T5991] #2: ffff88802b15e260 (&rtn->rds_tcp_accept_lock){+.+.}-{4:4}, at: rds_tcp_accept_one+0xa9/0xd70 [ 643.628239][ T5991] #3: ffff88807a669d60 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: tcp_close+0x1d/0x110 [ 643.637550][ T5991] [ 643.637550][ T5991] stack backtrace: [ 643.643438][ T5991] CPU: 0 UID: 0 PID: 5991 Comm: kworker/u8:19 Not tainted syzkaller #0 PREEMPT(full) [ 643.643456][ T5991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 643.643467][ T5991] Workqueue: krdsd rds_tcp_accept_worker [ 643.643486][ T5991] Call Trace: [ 643.643491][ T5991] [ 643.643498][ T5991] dump_stack_lvl+0xe8/0x150 [ 643.643514][ T5991] print_circular_bug+0x2e1/0x300 [ 643.643534][ T5991] check_noncircular+0x12e/0x150 [ 643.643554][ T5991] __lock_acquire+0x15a5/0x2cf0 [ 643.643569][ T5991] ? lockdep_unlock+0x5d/0xd0 [ 643.643581][ T5991] ? __lock_acquire+0x146e/0x2cf0 [ 643.643600][ T5991] ? kmem_cache_alloc_node_noprof+0x4a/0x690 [ 643.643618][ T5991] lock_acquire+0x106/0x350 [ 643.643631][ T5991] ? kmem_cache_alloc_node_noprof+0x4a/0x690 [ 643.643649][ T5991] ? lock_acquire+0x106/0x350 [ 643.643680][ T5991] fs_reclaim_acquire+0x71/0x100 [ 643.643698][ T5991] ? kmem_cache_alloc_node_noprof+0x4a/0x690 [ 643.643715][ T5991] kmem_cache_alloc_node_noprof+0x4a/0x690 [ 643.643733][ T5991] ? __alloc_skb+0x1d0/0x7d0 [ 643.643750][ T5991] ? __local_bh_enable_ip+0xd0/0x130 [ 643.643766][ T5991] __alloc_skb+0x1d0/0x7d0 [ 643.643785][ T5991] tcp_send_active_reset+0x8a/0x550 [ 643.643806][ T5991] __tcp_close+0x4c5/0xfe0 [ 643.643823][ T5991] tcp_close+0x28/0x110 [ 643.643835][ T5991] inet_release+0x143/0x190 [ 643.643853][ T5991] sock_release+0x85/0x150 [ 643.643870][ T5991] rds_tcp_accept_one+0x641/0xd70 [ 643.643891][ T5991] ? process_scheduled_works+0xa70/0x1860 [ 643.643909][ T5991] ? __pfx_rds_tcp_accept_one+0x10/0x10 [ 643.643934][ T5991] rds_tcp_accept_worker+0x1d/0x70 [ 643.643952][ T5991] ? process_scheduled_works+0xa70/0x1860 [ 643.643968][ T5991] process_scheduled_works+0xb5d/0x1860 [ 643.644000][ T5991] ? __pfx_process_scheduled_works+0x10/0x10 [ 643.644020][ T5991] ? assign_work+0x3d5/0x5e0 [ 643.644046][ T5991] worker_thread+0xa53/0xfc0 [ 643.644082][ T5991] kthread+0x389/0x470 [ 643.644103][ T5991] ? __pfx_worker_thread+0x10/0x10 [ 643.644120][ T5991] ? __pfx_kthread+0x10/0x10 [ 643.644141][ T5991] ret_from_fork+0x514/0xb70 [ 643.644161][ T5991] ? __pfx_ret_from_fork+0x10/0x10 [ 643.644178][ T5991] ? __switch_to+0xc79/0x1410 [ 643.644204][ T5991] ? __pfx_kthread+0x10/0x10 [ 643.644226][ T5991] ret_from_fork_asm+0x1a/0x30 [ 643.644253][ T5991] [ 643.875605][T21418] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3626'. [ 643.886200][T21418] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3626'. [ 645.029835][T21382] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 652.116366][T18150] Bluetooth: hci5: command 0x0406 tx timeout