last executing test programs: 4.063081067s ago: executing program 3 (id=3714): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000240)={@val={0x1c, 0xf5}, @val, @mpls}, 0xe) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000100)={0x0, 0x9, 0xc5, 0x8000000, 0x9}, 0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000014c0)={'syz_tun\x00', 0x0}) bind$packet(r4, &(0x7f0000000040)={0x11, 0x4, r5}, 0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) getuid() ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00'}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000cc0)=@getqdisc={0x30, 0x26, 0x2, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x8, 0xa}, {0xb, 0x5}, {0xfff3, 0xffe0}}, [{0x4}, {0x4}, {0x4}]}, 0x30}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv4_getrule={0x1c, 0x22, 0x800, 0x70bd27, 0x25dfdbff, {0x2, 0x10, 0x10, 0xf7, 0x6, 0x0, 0x0, 0x4, 0xd6d83d34b38d0aaa}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0xc010) 3.893416146s ago: executing program 0 (id=3718): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@generic={0x8, 0x5, 0x7, 0x4, 0xffffffff}]}, &(0x7f00000000c0)='syzkaller\x00', 0x7}, 0x94) r0 = socket(0x10, 0x803, 0x4000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r1, &(0x7f00000038c0)={0x0, 0x0, &(0x7f0000003880)={&(0x7f0000003800)={0x30, 0x0, 0xb, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_COMPAT_NAME={0x9, 0x1, 'MARK\x00'}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x30}}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'dummy0\x00', &(0x7f0000000280)=@ethtool_channels={0x2c, 0x0, 0x0, 0x0, 0x3, 0x7fffffff, 0x1, 0x2, 0xfffffffe}}) accept$nfc_llcp(r0, &(0x7f0000000140), &(0x7f00000001c0)=0x60) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000002e00090027bd700000000000040000001400180008ac0f0006ac0f0009ac0f0006ac0f00"], 0x28}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 3.777956882s ago: executing program 4 (id=3720): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x2, [{0xfffffffe}]}, @struct={0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffe}]}}, &(0x7f0000000140)=""/217, 0x3a, 0xd9, 0x1}, 0x28) (async) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x2, &(0x7f0000000000)=@raw=[@alu={0x3, 0x0, 0xd, 0x1, 0x6, 0x10, 0x50}, @exit], &(0x7f0000000040)='syzkaller\x00', 0xd, 0x0, 0x0, 0x40f00, 0x68, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x829}, 0x94) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0xa96) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) setsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, &(0x7f00000000c0)=0x2, 0x2) splice(r0, 0x0, r1, 0x0, 0xf3a, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="750a000000000000612fa40000000000180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80) 3.67747739s ago: executing program 3 (id=3721): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x87c, 0x2c, 0xd3f, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r5, {0xf000, 0xffff}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x84c, 0x2, [@TCA_ROUTE4_POLICE={0x848, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x3ff, 0x800, 0x28, 0x0, 0xb, 0x3e, 0xeef6, 0x2, 0x6, 0x9, 0x5, 0x401, 0x4fa0, 0x0, 0x7ff, 0x7, 0x2, 0x1ff, 0x2, 0x92e4, 0x6, 0x561, 0x0, 0x5, 0x8, 0x8, 0xa00, 0x2, 0x8, 0xfffffff8, 0x9, 0x3, 0x8000, 0x80c6, 0x3, 0x6, 0x2, 0x6, 0x9, 0x2, 0x2, 0x8a0b, 0x100, 0x10001, 0x3, 0x4, 0xf3a, 0x6, 0xf, 0x5c72, 0x9, 0x4, 0x7fff, 0x6, 0x2, 0xec89, 0x2, 0xa, 0x3, 0x80000000, 0x7fffffff, 0x5, 0x1, 0x9, 0x6, 0x293, 0x16214, 0x9, 0x1, 0x1, 0x5, 0x8, 0x5, 0x7, 0x4, 0xfffffffe, 0x437, 0x10000, 0x8001, 0x3, 0x54, 0x2, 0x2, 0x9, 0x2, 0x7, 0xe, 0x5, 0x0, 0x1, 0x0, 0x5, 0x7615154, 0xfe000000, 0x0, 0x5, 0x7, 0x7, 0xa0, 0x7, 0x3, 0x8000, 0x3, 0x3, 0x6, 0xcc8, 0x6, 0x1400000, 0x9, 0xffffffff, 0x3, 0x7, 0x0, 0x8, 0x6, 0x7ff, 0x101, 0x8001, 0x1, 0x1, 0x405, 0x7, 0x0, 0xfffffbff, 0xffff0000, 0x9, 0x7fff, 0x1, 0x0, 0x9, 0x7, 0x7ff, 0x1000, 0x6, 0x3, 0xf42e, 0xba, 0x3, 0xd24, 0x40, 0x6, 0xfffffffe, 0x9, 0x9, 0x8, 0x4, 0x1, 0xffffaa35, 0x5, 0x6104df6a, 0x6, 0x5, 0x0, 0x6, 0x8, 0x1, 0x9, 0x8001, 0x8bb, 0x6, 0x4, 0x4, 0x2, 0x7, 0x0, 0x5, 0x4, 0x2, 0x7, 0x101, 0xc7, 0x7, 0x1, 0x6, 0x3, 0x4, 0x13d1, 0x2, 0x9d0, 0x3ff, 0x2, 0x6, 0x5, 0x726, 0x9522, 0x9, 0x9, 0x0, 0x401, 0x5, 0x7f, 0x2, 0xe2, 0xff, 0x19, 0x1, 0x189, 0x34, 0xc, 0xff, 0xdef, 0x3, 0x401, 0x6, 0x185e, 0xb, 0x8, 0xfff, 0x0, 0x5, 0x4, 0x4, 0x10, 0x2, 0x2, 0x7, 0x1, 0x4cbc, 0x7, 0x80000000, 0x40, 0xeb5, 0x7f, 0xdfb, 0x7ff, 0x8, 0x5, 0x4, 0x9, 0xffffffff, 0x7, 0x2, 0xc1d, 0x6, 0x96cc0000, 0x4, 0x3, 0x0, 0x1, 0x5, 0x0, 0x7f, 0x6, 0xd, 0x0, 0x9fd2, 0x6, 0xa0, 0x2ad, 0x8, 0x3ff, 0xbb, 0x2, 0xf9, 0x400, 0x2]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6e, 0x1, 0x1, 0x7, 0x0, {0x6, 0x1, 0x1, 0xeaeb, 0x5, 0x7}, {0x9, 0x3, 0x1, 0xf2, 0x1, 0x1}, 0x9, 0x4, 0xa}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1000, 0xc2d, 0x4, 0x80000001, 0x8, 0x0, 0x1, 0x0, 0x93, 0x3, 0x8, 0x9, 0x615d37e8, 0xe, 0x6, 0x7, 0x8, 0x0, 0x5, 0x9, 0x2, 0x568000, 0x9, 0x8, 0x5, 0x6, 0x5a, 0xc, 0x9, 0x84fe, 0xb7, 0x10001, 0x6, 0x3, 0x2000000, 0x83, 0x3, 0x4, 0xbd1, 0xffffffff, 0x9, 0x4, 0x401, 0x414b, 0x4ac5, 0xc, 0x5, 0x37, 0x2, 0x7, 0x9ee4, 0x0, 0x2, 0x81, 0x403, 0x2, 0x9, 0x9, 0x8, 0x9531, 0x1, 0x29, 0xffff0001, 0x3, 0x8000, 0xadc3, 0x10000, 0x3cf, 0x1, 0x3, 0xe, 0x7, 0x3, 0x400, 0xaa7, 0x6950, 0xfff, 0x3, 0x7, 0x6, 0x7, 0x1, 0xc0a, 0x1, 0x3, 0x70a482f2, 0xe00, 0x6, 0x1, 0x6, 0x5, 0x8, 0x7, 0x1, 0xe, 0x45, 0x10, 0x93d1, 0x10001, 0x3, 0x6, 0x3, 0x57, 0x7fff, 0x3, 0xfffffe01, 0x7b56, 0xe542, 0x7, 0x9, 0x10000, 0x4, 0x8, 0x7, 0x3, 0x685, 0x5160, 0x7, 0x3, 0xfbb, 0x8, 0xfffffff7, 0x1, 0xffffffff, 0x9, 0x80000001, 0x31, 0xc7, 0x4c, 0x400, 0x4, 0x5, 0x9, 0x1ff, 0x291, 0x4, 0xfffffff9, 0x1ff, 0x50, 0x1, 0x0, 0xfffffffb, 0x100, 0x6, 0x205, 0x7fff, 0x8, 0x9, 0xc, 0x8d3, 0x6, 0xfffffff7, 0x2, 0x9, 0x10000, 0x7a, 0x4, 0x400, 0x1, 0x6, 0x1ff, 0x200, 0xa2680000, 0xa0, 0xe6, 0x8, 0x5, 0xfffffffa, 0x2, 0x10001, 0x9, 0x66, 0x5, 0x80000001, 0xac4, 0x6, 0x6, 0x8, 0x4, 0x7f, 0x2, 0x5, 0x4, 0x9, 0x7f, 0x9, 0x3, 0x4, 0x3, 0x8, 0xf, 0x8, 0x5, 0x5, 0x6, 0x5, 0x3, 0x8, 0x8, 0x1, 0x10000, 0x800, 0x2, 0x9, 0x7, 0x2, 0x1, 0x9, 0x4, 0x9, 0x4, 0x3, 0x4, 0xd3, 0x3, 0x80, 0x8, 0x9, 0xa, 0x2, 0xab, 0x5, 0x7, 0x0, 0x9, 0x2, 0x9, 0x4, 0xb, 0x7, 0x0, 0x2, 0x3ff, 0x5, 0x5, 0x2, 0x5f8, 0x3, 0xff, 0x4bf, 0x1, 0xff, 0x4, 0x4f4, 0x6, 0x2, 0x4, 0x81, 0x9, 0x9, 0x0, 0x7fffffff, 0x8001, 0x6, 0x3, 0xfffffff8]}]}]}}]}, 0x87c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x17, &(0x7f0000000240)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffffffff}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, @exit, @printk={@lx, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa, 0x0, 0xfffd, 0xfeefffff}}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0xc}, 0x94) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000002c0), 0x4) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r8, 0x0, 0xf3c, 0x6) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0x5}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newtfilter={0x60, 0x2c, 0xd3f, 0x70b526, 0x25dfdbfa, {0x0, 0x0, 0x0, r10, {0xe, 0xffe0}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_flow={{0x9}, {0x30, 0x2, [@TCA_FLOW_EMATCHES={0x2c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x5, 0x2, 0x4}, {0x4}}}, @TCF_EM_META={0xc, 0x2, 0x0, 0x0, {{0x4, 0x4, 0x4}}}]}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008848}, 0xc884) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r11, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYRES32=r0], 0x20}}, 0x0) 3.578402484s ago: executing program 0 (id=3723): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x40000102) sendto$inet6(r1, 0x0, 0x0, 0x200400c0, &(0x7f0000000240)={0xa, 0x4e22, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffffc}, 0x1c) close(r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000001d56ed292654000000cd5ab72450"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x70) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='vegas', 0x5) splice(r0, &(0x7f0000000040)=0x100000001, r3, &(0x7f00000000c0)=0x7fffffffffffffff, 0x8, 0xa) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@newlink={0x74, 0x10, 0x439, 0x70bd27, 0x3, {0x0, 0x0, 0x0, 0x0, 0x4919}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x44, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0xa}, @IFLA_BR_MCAST_SNOOPING={0x5, 0x17, 0x1}, @IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0x14}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x80}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}, @IFLA_BR_MCAST_QUERY_USE_IFADDR={0x5, 0x18, 0x1}, @IFLA_BR_MCAST_HASH_MAX={0x8, 0x1b, 0xe}, @IFLA_BR_MCAST_SNOOPING={0x5}]}}}]}, 0x74}, 0x1, 0x0, 0x0, 0x4040000}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r7, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000100)={0x38, r4, 0x8, 0xf000000, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x200c4011}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000000306010200000000000000000700000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 3.578073376s ago: executing program 4 (id=3724): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x1bc, 0x19, 0x1, 0xffffffff, 0x0, {{@in=@multicast1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x4}, {}, 0x0, 0x0, 0x1, 0x0, 0x5ee76b3ce2b5fd35}, [@tmpl={0x104, 0x5, [{{@in6=@mcast1, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0xd1f}, {{@in=@loopback, 0x0, 0x32}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0xff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, {{@in6=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x3502, 0x1}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x2b}, 0x2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x5}]}]}, 0x1bc}}, 0x40800) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_buf(r1, 0x0, 0x30, 0x0, &(0x7f0000000180)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) close(0x3) r4 = socket$inet(0x2b, 0x801, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) connect$l2tp(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) bind$inet(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x800000) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x2000000) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000380)={0x2c, 0x0, 0x607, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x5}]}, 0x2c}}, 0x20048840) socket$inet6_sctp(0xa, 0x1, 0x84) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000ac0)={'ip6gre0\x00', &(0x7f0000000a40)={'ip6tnl0\x00', 0x0, 0x29, 0x0, 0x3, 0x800000, 0x48, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x0, 0x8, 0x4, 0x4}}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x1032, 0xffffffffffffffff, 0x21d67000) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x4, 0x0, &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x18000}, 0x94) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xb619, '.\x00'}}) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x1000) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x845}, 0x24008004) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 3.356951131s ago: executing program 3 (id=3727): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x200000002300, 0x0, 0x0, 0x2000000024be, 0x2000000024ee], 0x20, 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000050000006b0000000016636169663000000000000000e3ff00007665746831000000000000000000000073797a5f74756e0039da0000f8ff0000000076657468310000000000000000001000aaaaaaaaaa3d000000ff00000180c2000003ff00ffffff00ae000000560100008e0100006f776e6572000000000000000000000000000000001800"/198, @ANYRES32, @ANYRES32, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB="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"]}, 0x296) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)={0xa4, 0x0, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_TUPLE_ORIG={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x16}}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @CTA_ZONE={0x6}, @CTA_NAT_SRC={0x58, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}, @CTA_NAT_V4_MINIP={0x8, 0x1, @local}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @mcast2}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}]}]}]}, 0xa4}}, 0x12) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) socket$inet(0x2, 0x2, 0x1) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f0000000c00)=ANY=[@ANYBLOB="020000000000000002004e1fe00000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000001"], 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@enum64={0x4, 0x0, 0x0, 0x13, 0x0, 0x4}]}, {0x0, [0x61, 0x2e, 0x3e, 0x61]}}, 0x0, 0x2a, 0x0, 0x8, 0x1}, 0x28) r7 = epoll_create1(0x0) epoll_wait(r7, &(0x7f00000001c0)=[{}, {}, {}, {}], 0x4, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021a40300001e0a05010000000000000000070000070900020073797a31000000000900010073797a300000000078030380740300800800034000000002680301802c00"], 0x428}}, 0x40088) pipe(&(0x7f0000000140)) 3.278075827s ago: executing program 2 (id=3728): r0 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, 0x0, {0xfff4, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) accept4$inet(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x80800) 3.157442076s ago: executing program 2 (id=3731): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/65, 0x41}], 0x1) close(0x3) write$cgroup_int(r0, &(0x7f0000000140)=0xfffffffffffffffd, 0x0) sendmsg$IPSET_CMD_HEADER(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x16, 0xc, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40008d4}, 0x20000044) setsockopt$MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000200)={{0xa, 0x4e21, 0x100, @dev={0xfe, 0x80, '\x00', 0xa}, 0x2d94}, {0xa, 0x4e21, 0xfffffffa, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}, 0x0, {[0x10, 0x7, 0x2, 0xd, 0x4, 0x4d751825, 0xd0d, 0x8]}}, 0x5c) 3.003770864s ago: executing program 3 (id=3733): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="18020000010000000000000000000000850000002f00000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffa7ffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000380)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000a40)={'bridge_slave_1\x00'}) 2.960727042s ago: executing program 3 (id=3734): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffb}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, 0x0, &(0x7f0000000280)) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="38010000100033060000000000002000ac1414aa0000000000000000000000000014ffff3ffc5e21800502002000000000000000000000000000000000006f4e", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="20010000000000000000000000000001000004d53c000000fe8000000000000000000000000000bb2303000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000200000000000feffff7e00000000000000000000000000000000000000000400000000000000001000000000000007000000000000000200000021bd700000350000020002010000000000000000480002006374722863617374362900"/240], 0x138}}, 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000000c0)={0x1, 0x0}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7020000000df100bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000be000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340)={0x0, 0x0, 0x2000}, 0x10, r2}, 0x94) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000080)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x0, 0xe, 0x0, &(0x7f0000000200)="1d5fe8317ca952a2ba4bfee0f003", 0x0, 0x2100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6}, 0x50) 2.766014403s ago: executing program 1 (id=3736): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRESOCT], 0x60}, 0x1, 0x0, 0x0, 0x8805}, 0x810) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a09000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340000000021c00028018000280080001"], 0xec}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x1, 0x9, 0x101, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFCTH_STATUS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) 2.749729255s ago: executing program 1 (id=3737): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x9, 0x6, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x30, 0x3, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1fd}}, &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) socketpair(0x18, 0x0, 0x0, &(0x7f0000000000)) (async) socketpair(0x18, 0x0, 0x0, &(0x7f0000000000)) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x54, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x9, 0xa, '^^@-['}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xfffffffffffffea1, 0x1, 0x0, 0x1, {0x8}}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x40040}, 0x8c0) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x54, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x9, 0xa, '^^@-['}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xfffffffffffffea1, 0x1, 0x0, 0x1, {0x8}}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x40040}, 0x8c0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r6, 0x800, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) 2.638634216s ago: executing program 0 (id=3738): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000280)={0x1f, 0xfffe}, 0xe) r1 = socket$inet6(0xa, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newnexthop={0x28, 0x68, 0x1, 0x2, 0x7ffffffc, {0x0, 0x0, 0x6}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x5}]}, @NHA_FDB={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@empty, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x68, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r2, &(0x7f0000000940)=[{{0x0, 0xffffff07, &(0x7f0000000540), 0x2}, 0x3b61}], 0x4000048, 0x0, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000080)=0x3, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@random="c3ad7f0ceb48", @random="f8794fda5bd6", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e21, 0x4e20, 0x8}}}}}, 0x0) listen(r0, 0x0) ioctl$sock_TIOCOUTQ(r0, 0x5411, 0x0) socket(0x9, 0x2, 0x2) 2.502389596s ago: executing program 4 (id=3739): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x10, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000021bf0000000000000500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b70300000000001f8500000083000000bf090000000000005c090100000000009500000000000000dba00200f1000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0xa}, 0x94) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x18050}, 0x44014) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b405000000000000711081000000000006020100000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xd1, &(0x7f00000003c0)=""/209, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffb}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, 0x0, 0x0) recvmmsg(r0, &(0x7f0000004480), 0x40000c2, 0x12, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) 2.479013823s ago: executing program 1 (id=3740): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x2a, &(0x7f0000000140)=ANY=[@ANYRESHEX=r0], 0x190) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000000000002000000e001"], 0x190) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000080)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$packet(0x11, 0x3, 0x300) socket$inet6(0xa, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007008500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002980)=@bpf_tracing={0x1a, 0xc, &(0x7f0000000900)=ANY=[@ANYBLOB="18430000fdffffff0000000000000000851000000400000018280000", @ANYRES32=r2, @ANYBLOB="00f000000000008018110000347e5d451fe50ad898b73225c9b126", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000000000008500000086000000186200000a0000000000000009000000850000004a000000"], &(0x7f0000000300)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000001900)=""/4096, 0x41100, 0x10, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x25a05, r3, 0x1, &(0x7f0000002900)=[r3], &(0x7f0000002940)=[{0x5, 0x1, 0x2, 0x1}], 0x10, 0x2}, 0x94) ioctl$F2FS_IOC_SEC_TRIM_FILE(r8, 0x4018f514, &(0x7f0000002a40)={0x800000000000, 0x8000000000000000, 0x3}) writev(r6, &(0x7f0000003a80)=[{&(0x7f0000000080)="2e9b5b0007e03dd65193dfb6c575b43f86dd6067", 0x14}, {&(0x7f00000001c0)="0100"/13, 0xd}, {&(0x7f0000000280)="3780a6c482b23cba92ffffff3f7b42590e180c07f3c193b532f3080000008c19", 0x20}, {&(0x7f00000005c0)="d422b8440c607d46a140ebfce60a67610dd2493961afc1684af41b1820085a974c353f2ff3843617008d627082460020ee4bcac2e32f815419b5d5ddc3cb756fd9", 0x41}, {&(0x7f0000000a00)="621204e439b92b256eb42724d93fc3a51911244f0904373dc9ff86e4a8c70c0c3aa2d3b931426d63b7540e0cfeee7def77728eb238a9ceeadc002a79f3df92675d5fd91addf580336950cd4cefa59987cd930f5f91ca7cac5062aeade47f80f55a39dcecc02760832e11dacac1f37266899e7b564f8f2d89b6b0a974d94ca7dd3e6060c59845d3b22117e253f314208e74a33af8c42b74177064ff0f9727059db1d3a32aba00e5a3df197e8a4f344ad6d77d749d3995275703197320c9c3ac7ae1e9aaa469198e77b48b37602c8992aa044af16aaa1549e8328e6cb9b191719915", 0xe1}, {&(0x7f0000002a80)="4122cd4053168764da9d34bcef619dfc8e5087b97516084db13ff0a503282f6dfa5525868cb6202110a6cd80146fdda4f80e3f2a5acff78ade7fdb136667614396682c71f7aa935b072a3938510b4aef4e926954464b06ed997bc44da9b6f2058c7eb34abf859b01c2240fbab2d8f079314fef95a8cfed690a31ff3e82e26604968e3db0a071a978027129b78654d00f3703b2b19b615dbcda05819aef413a6083db078e2d470fb3d92aec6d9f9e9878e781b26ed6ca1588100fcd2b4c82b78368ad9629cfe9da881d11557c4f5d534e9ec7f8a77d3e2d6ecc1be504b03a1d9df587f00ff0c9fc399eef2ebc09c6a2263a838a5b36b7e7f3cfceceaa9960f7b2948929150d39c752f93f057b3091c88e6f7af9ffb0aeb98e13a458ea0b3ddf7a24a93f61db68e8c6a7294348430b31b862c37f48545595b688e8d48622b8d2b047bc0d6d9387a2d5d1061beec88535ae5df6a7eeb744ff13ff7da6986ffb427e6dabd8883951239fa5cca08dffcf89b6b377bef302673b46916d0572cdb6bc2a325c755e4ad0f3c7a9cdd6184fa6316f09cecc06af265552400f7d635a5a0d0251a5676a05a96d5bab58f4f80c7df3730952c6e38f58c103936b914acd78b9766e67b41cbfa317052eaa969abe5ce2484ee559e68c7e96bf089e06afb62b4a1375ff4b26b95709ef613f816fa22c916d2d2311a7bf9a3dd58646cc6c1d698b3a6c0d35ab73180ada07ef5c434dd458bbdd08a0997a0c485e7affdcb74ed4bc828e551ed8192f3809c25e7a2f6780db19104c01427a4f89b18a54a32531eeaf9ad1f13a34d48bb5c23f1b92d9d113237dc691a540fb00405466429f30083fa176d02b36fb043ea9d9b1343a95f90df7d0cff4644d9f429ed4df9672a4b52e3c840cd9fd4aa923884bed5eed1ae2aa5bb5397187cf2e425bd24684e13d7fb1e9c8d8353fc4b043815d7c7a48ce6fa4495c94bbf9adb50c9707d76fa59eaeff837ff1bc9c85682a5a8328a2264422bef2eac55efd5debad0d21362de8197d246179d78b95f95836f7993031558d04873b821728b0e6871713e4f5e3d970b0dc8c154934b23eeecf4d170073b46c0bb5e272bb1f7c0b7589a01bead51aa9c60458c0697432708354956670cf7c2b14a2225a4a87fd9b17469d0524a8622b6a851ed1a1005bf20b778928a0b811adebd314ea1d5c4d70ebbb7f85900ec52c39c9c5b707efa6b27ac3523a936cbdd0c2d0cd11f0ca2ae7a9bdcdbd7d091e45d2d9881c7a0e5640b6870846fe22deb5afe7e69f488c2152a03fd91134c1e40fd2b45ba37247de1a57d0172cd86273aac2b56046be8024f609b05681da2213b7cab123b7076c4333fed8ac3cd378fda56d38b536f7b0b09feca471ebf12d14f4fadfe924463bbc472ddf74b6ef0d4638bfae946a47a3924520ae8838a8ad95b0e811898d277e92b690f473bf3ce9dbe5eda44f95670f184196afd3e08392bd81e5c42b50da703b3caf8d8ecfc58070d905a84da6a5c35abeef1a139d04767f32575eb5985a95adb6f22036ff44a6170558fbf24bf4b2a81b8c494d106e6d252e16760e80f75308c088f6968775ec5112009184a3c0a88921bfc222cd3a6f230ca47e535c670ea24316e2c68f1bf83886c5aef298687b50d18f3f38929ba24810a35f81b89182c0f5dd5501192cc79bb622f63121341787da1a98257e6f78927ce9632b3172f47b2835b28907b514b70cc4c282f2ab6bbae2759dad8bd2461cb3d3aabdc210f5fb5ac375f05e49de47f79e55942296cd0bea8a89b1bb3bd14ac5eaa8776ca087674288a20b04b3f17c0455326d1d48202c48c227fb4a2ee1878ae4712441520494816cf033fb83aad6e03fd7aff1aed8cd27e9bdafc4fcae9aedfd672124323bbdb2f4e7b443cf5a0483b992e0cdc00a7b34cd06042be31d16c8e1e4103b80a6f096ead9604e8322d930e4f9e9ca9f745f7e492911805c8f9517165852ed17f2180d755529929cb69b37aec7d99de364aaba8ab4e8eb377e24a20be47f9399c46d5c491967d84bac4f33e4b8499e14def3abb15ddb9127f1f3d47fe7ad3910dbca019d6dd2b8ea2d48554cb7751cfb9ddb25e5026f0711d35a8ae64ddefc0002ab70697ee4abaeb1fccc9aba4a054e32479b999c8624202eed1aabfaf8076975e862bba1b68a1daf7c0c7b4aef35edc47d70f3df23e626c6a847b678e9758a8b542b216f64cfc22c86f5c29aa71bf202a38125dddc2428989ed0c029fbf52d6b20fb065e739ed143e6599c92d269c7c481dd607c1f5df1640bed95421f084b53c00c2841c54015be03046c317a784a98e88746beb9e3e041a3bef50f49c43adab10e0bd7f9d701cc699bc063fff8b171b1082789f32e091ce9f296645f3332901b9cdac1b42d914f837c9efe2f734541dffaa59629d54570da66aaf23841f11c9e7ca247e4507e7903f366038b6de19afc89c4bf3a0c280d3aedd39f13dc2b9de1f208ac928a00495a2038d9e5477851d33bb0a1117f4ef6c19f2b1b72db880e2825f19ab5b2ebbbe41010dd1b2d1ef15002fae01f2502b02b6670a67b622a69edb3237ce7d8fbded36d09386b95e0446dc9c9cefa3715dfdf5aa0805cb810ed5d67f6153c2502708f3d26554b92c33855aa84b819af701b09d00213ff72f12f07097f6c81d24e6e69601f03606728789b8334248bf4229d48e8759173cd7cdf1955787ab93d8eb622e395a401f89c07019acbba9cf6859bb96702e28831336e24a6efdbcdc2890e9fa38477311f3daec4e9a3dfed974ba7176561af39b01a36d7cad305e5adf81fa0be5f93bcd7b6519ae8a6b3c741e014901a4cb8f1a260faa772deee52d7c3c345e9b4ac3df641d5576ca7f097c90924ec6504b76d7e0ce6ad1c55177a5c2b9d29a55875ba87b97cbad982cc2cdda4de8f63f8be162c08e8f3ed6fcd990a534a05781de5c376ff068ed2b59284f8ac5668b9bae7356c978cb5d748ad7aa8e811ab7a14ea86abea5889f6037c395c54f08b3b371f5cb408ab9b114c3a42375eed28841bf249ec376ea0fae8a253a799f7b520d90878eaf27ca3bdf298f34e21a9930b821dac65cf20603f33549ee2d52c87e20d919a2e63bd0308f93f596e396cf455f9d44c50f6b44b85230f38bf2694fb35e6a37f7d73febaed2a692003554eac8496db27844803bd1e888de9c5ee9cdd95cea858f6b26760a5c09f8bc90d49af517e4bb1a3141202cffbd21c5bf3acb5dc4d13df6f865c72322d5b1e29198ca08b64342bb3bfebe052b37eedc0cc0503d39790b7aca358f95c21671caa56a8d2f667832cf8c70572b7adaadac1188d38d91730c2ee14e0f8967f481d84410676a193a02faebd6bc76579592cc89fa9b1d79586c50eb9127e7a91b92f251738009c18534c7aa658ad96f16b5f45e88953992a965473552422c377cf7b4e856c65be59449d592f60466c8bedcf092d0004338bdfd5bd532c8756546f7aa1526469ad3758245d67b96787c112eeca8a423df769f8473d80fdbecbf1a4e2872d90f41a38460ba8f50f82ee12b55d43a09e3621150aa8a3646259369842ca777b1180723ad0a1f4feb3022b605d951064c7b0b233067de41138b8f2aac994a569934f3a547f331d1e4b4515121bf269d031f1013a9de446e997b6b458982ce6df6cc4636754686dfd3e409f10e9a8fcbee7c21fae59258df26e7751a5ff819e845d76ec85552603c36c4c9f87171226a82e6c7b59001e3b946b881c7df4b55766c94f094d500e7f8b74ec0046bd96d304a79cf85a2f7f546399461d638a76b290ed01707fed0c5379e4f7d856fbc827a4ee2620a68eb034e5e4388e1a0696b81ad87b181d118ac016dc238ad38ecbce92de9fa1cc930d2c0802cab3c1044a4db7b3c658e9b2e57fac20f8a76e454c7b7ee3b0cd22b131fe2599cc758706037eed34a9b93fc27078c4c4a18c8a37249fa403f38d04d4ff04b102bcfb6bb9cbce7d591da9877f5773995cbedb01e388bb3964c835ded4fca61cd939707e331e48b87db688dd62222d4aa7b53f42425e1b82bd02920cbf4b1ad45de4013f9bb2b6456e38416a5ffc399ff43d7323c25b744a3a3ac40065c5ad5f369f7afba5402bb349b9d0af85b3dd2775be3b9b6bb4815d699de69a04fcb2d784d00d686367ed7bd69e047c87274659d650f4c73e4c8e40c8c719a141dc2133727b77207380092e1b8fb9c0d63c6ea0ad49b1e746cf3561ccaf119fe22044d29456b44402b3e307937ab8f4180eb384b699bc1f214932d60a4cf0ee3e263ba4cee46f77e993d1e7e3a20912c00a605e6c065862570f317ff16735981580c3a54b1bf6fb04d877040eb02be6283166bd19897d0d5a835610ba5086a2cfbcd7715828b080e36ab64b2e7e007ce97df2b59fc84c25dc77bfe6ef9fcc928606868fa3dd4d810cbada2c02303d62adb44aced689445ed5ac177df6206c47e8440d7258e7e83cb767c4079a748f433382e3f9a54bb195ee0f115da44bf46e94cb9c74dd2a17d4c85194ee22cd043b0371faf01824e0f6116026d43ef54c5da1141ab5d128f6f448dcd0ecb6b44c6ec8459f8d8012038e329a29389a96e9b9de11d1da28cac6a59d9e35ffb0d5fc61ad62abb8be959d71dad6b88ba38cd5e7746d724dcbd4fc4795d4d920d87bccdefb919f1f9ba63a6b3f1138c00d034998c3f5f04496fa215ef90f2a09fa0a844723d5969fc8d6ee84c7d36b55a3af7dbef4543a6988cc4b8158a73a09d6123a39874e68f769ff96f5cc5ee99afcfca1b2ade7a28c81144f52295a64f390a8de8f03ffca4b312f6885a6ac5edd1f90341161b1664c8bd2f5fe2aa329709aa0a8eb9f5bde6a3133e8ccc573a128d0d053633fda9fbd3315cae5b436c78e132d285691c116442a1d6c5933e3d451f1b4d9c4861e4657d519637ca9c7a6940d7f60ac5adbb30ff3444bb84fbd270b267ab4b13476a5d62cfa0da9ce5e4d72f26b466e6cbc3847986466325a1ffc9f9c9770015e5f392f88ccfd01d9c7518e29a8085c0fbbc7499dbf9c3b932315a2e7f21d0dba1cc5129b12c7adeb493f5350c6c41fd532959e8d48e2672d2e71f6b90caa676867a72bf67d1af138aadafed05ba496cda8d9f10244ec6dcb8a7e4556c701785fc2f237dbd8767f889e46cc3c050f62bd0d460e93d977a6615bda565bc641f30fc6a41666272a6d5e1db06d8e4a765d43c86f7fd508e04f8280b4e4c1214277a876cc3692e1b4cc367bbfd0a7d14c3ce0328f3e857f3ba65c731db62ddfc0ae5c1851b921789e78140d0fd6812e178678d0ec1de11a783828c0449cb579c749f0684e0bf6db81032013c5c17fb5bee834176f4a21de8ffbb8dfbbf2bde7d9da3a09301671b0382f83ee0d1e6ca1d373735850525369c30e61ff9c90847605aa702a70997194b3e417640fcb573361e5535aaa45259ea1f9481581dae93980a230a70cbd6954ee8006632e22ccb66d58c9131f66c094eef5c7f0367e8aa543180440f5a5c5ff8c8141a5aa57c122a5fc0affe28edd1643b591c05e54d0869ed257ad51dd09b43870b58b64d561e00d65c9a6666dec55acf140c973541c0b096ab27d32f74c218a38f7bd898bf6fc5acac6116e363528d7802b1f15bbcd4983fa2482be1152d4d16501c167ae5e0c6fc3ad276382e98afd442573ea2f67b6407938df1d78efd618a2dc5231df3c5d6466a5cfd27f3fdfa74777c13c9592d319fec2d3d4a360ecc343327f6ece1fe63e6a9b504d5b33de096c125740ffd345655991b9b0", 0x1000}], 0x6) r9 = socket(0x10, 0x803, 0x0) socket(0x10, 0x800, 0x2) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@mask_fadd={0x58, 0x114, 0x8, {{}, 0x0, 0x0, 0xfffffffffffffffe, 0x26}}], 0x58, 0x40080}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r10, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6e, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r9) getsockname$packet(r9, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="3c000000100037040100"/20, @ANYRES32=r11, @ANYBLOB="83000500012c00001c0012800e00010069703665727370616e0000000800028004001200345d43133e5b6deaef86192ada696e5219314d397990d74da8a643062d650dd66803b4e370e75c9793b4b341f4ca3fab714f94d0408e2783d2beba098708237123ac3ced0d027e4aa7c60cf9ba5164f4565227f9cd594501ba5eb81b5ad6a39ec7aaaa9625bdc3e5c9ec65d56fb8772d2e32bd9337b0d9831452f2f0a710c5b65558bacda6a153d352f63496dfde84aca97cbeb318fc16668d"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x40850) socket$nl_generic(0x10, 0x3, 0x10) 2.256084166s ago: executing program 2 (id=3741): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x645c, 0x4, 0x40, 0x0, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800500010004000000060018"], 0x4c}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c004}, 0xc054) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x5, 0x4, 0x8}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f00000000c0)={r2, 0x2, 0x2}, 0x8) 1.937182739s ago: executing program 3 (id=3742): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000c40)=[{0x0}, {&(0x7f0000000580)="23a9", 0x2}, {&(0x7f0000002000)="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", 0x1000}], 0x3, 0x0, 0x0, 0x24000040}}], 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) (async) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) r2 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r2, 0x84, 0x7c, &(0x7f0000000000)=""/4103, &(0x7f0000001080)=0x1007) (async) getsockopt$bt_hci(r2, 0x84, 0x7c, &(0x7f0000000000)=""/4103, &(0x7f0000001080)=0x1007) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x2, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x100, 0x50, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x8cffffffffffffff], 0x0, 0x0, 0x20e6}}, 0x40) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x8000) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000007d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000007d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) (async) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040000) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) (async) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) (async) unshare(0x6a040000) r7 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r7, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) (async) setsockopt$sock_linger(r7, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r7, &(0x7f0000002140)={0xa, 0x4e20, 0x80000000, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r7, &(0x7f0000003700), 0x0, 0x4005c00) 1.666047183s ago: executing program 1 (id=3743): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000), 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}, 0x1, 0x0, 0x0, 0xc4}, 0x880) unshare(0x22020600) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000180), r3) sendmsg$NET_DM_CMD_START(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x14, r4, 0x401, 0x70bd2c, 0x25dfdbfd, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) bind$nfc_llcp(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="14000000100001e456b8aa00000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440080000000900010073797a3000000000080003400000000114000000110001"], 0x64}}, 0x4000010) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r8 = accept4(r7, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r8, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000003c80)=ANY=[], 0x12f4}}, 0x0) recvmmsg(r8, &(0x7f00000070c0)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000a80)=""/17, 0x11}], 0x1}, 0x8}], 0x1, 0x2000, 0x0) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x28, 0xfc, 0xfd, 0x5ae9}, {0x28, 0x7f, 0x4, 0x5753a39e}, {0x6, 0x0, 0x7, 0x3}]}, 0x10) sendmmsg$inet(r5, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000180)={0x0, 0x34, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03000000000000000000020000000900020073797a310000000008000340000000010900010073797a30"], 0x34}}, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x41071, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f00000001c0)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x2, {0x9, 0x6, "c76b72", 0x5, 0x11, 0x0, @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], "96b24e2389907a94"}}}}}}}, 0x0) 1.661185958s ago: executing program 2 (id=3744): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0xc, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18040000000000000000000000000000180000002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001040)={r0, 0x18000000000002a0, 0xe80, 0x0, &(0x7f00000003c0)="b9ff03316844268cb89e14f00800", 0x0, 0x2000000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.646341836s ago: executing program 0 (id=3745): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, 0x0, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'vlan1\x00', &(0x7f0000000000)=@ethtool_link_settings={0x4c, 0x2, 0x4, 0xbd, 0x8, 0x5, 0x4, 0x6, 0xff, 0x4, [0x9, 0x9, 0xff, 0x5, 0x0, 0x7fff, 0x81, 0x401], [0xb1, 0x7]}}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2d}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000001c0)={r6, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r7, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8004001}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newlink={0x54, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_NF_CALL_ARPTABLES={0x5}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x54}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x8004, 0x4, 0x2, 0x0, 0x1, 0x8}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r8, &(0x7f00000000c0), &(0x7f0000000000)=""/3, 0x2}, 0x20) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@ipv6_newrule={0x38, 0x20, 0x1, 0x70bd27, 0x0, {0xa, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x10000}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x4, 0x4}, @FIB_RULE_POLICY=@FRA_OIFNAME={0x14, 0x11, 'veth1_to_bridge\x00'}]}, 0x8c}, 0x1, 0x0, 0x0, 0x24040804}, 0x4008000) sendmsg$nl_route(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x40084) r10 = socket$netlink(0x10, 0x3, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x300000f, 0x11, r10, 0xd4741000) 1.413760542s ago: executing program 4 (id=3746): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) ioctl$PPPIOCGUNIT(r1, 0x80047456, &(0x7f0000000040)) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f00000009c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xf1}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x2, 0x300}, {0x6e}}, [@snprintf={{0x7, 0x0, 0xb, 0x9}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0xd0ffffff}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff0, 0xa000}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0xa, 0x20}, {}, {}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8, 0x9, 0x20}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000340)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x14, 0x18, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x3}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x3c}, 0x1, 0x0, 0x0, 0x40044}, 0x20008000) socket$nl_netfilter(0x10, 0x3, 0xc) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async) ioctl$PPPIOCGUNIT(r1, 0x80047456, &(0x7f0000000040)) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f00000009c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xf1}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x2, 0x300}, {0x6e}}, [@snprintf={{0x7, 0x0, 0xb, 0x9}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0xd0ffffff}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff0, 0xa000}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0xa, 0x20}, {}, {}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8, 0x9, 0x20}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000340)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x14, 0x18, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x3}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x3c}, 0x1, 0x0, 0x0, 0x40044}, 0x20008000) (async) 1.326753392s ago: executing program 4 (id=3747): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xb}, {0x4, 0x8}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x1ff, 0x9}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240408a0}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xf, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff00000000000000000000841000000600000018000000", @ANYRES32, @ANYBLOB="0000000000000000660800000000000018000000000000000000000000000001950000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xc}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYRES16=r8], 0x10) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r6, 0xc0c89425, &(0x7f0000000280)={"53e681deca57c6439d34d3c2f61dcdb5", 0x0, 0x0, {0x6, 0xb30bc9b}, {0x3, 0x9}, 0x0, [0x8, 0x8, 0x7, 0x6, 0x2ad, 0x2, 0x5, 0x2, 0x9, 0x1, 0x0, 0xc7, 0x100, 0x6, 0xfffffffffffffff8]}) ioctl$BTRFS_IOC_GET_DEV_STATS(r6, 0xc4089434, &(0x7f0000000400)={0x0, 0x5, 0x0, [0x8, 0xb3, 0xfffffffffffffff8, 0x4, 0x10], [0x4402, 0xd00, 0x3ff, 0x0, 0x400, 0xfffffffffffffcc7, 0x2, 0x7f, 0xd, 0x7, 0x2, 0x401, 0xfffffffffffffffb, 0x8000000000000001, 0x2, 0x8000, 0x2, 0x4, 0x400, 0x80000001, 0xcd0, 0xd, 0x4, 0xffffffffffffffff, 0x8bb, 0x8000, 0x2, 0x5, 0xffffffffffffff7d, 0xe, 0x9, 0x0, 0x2, 0x3c, 0xfffffffffffffffd, 0x7, 0xc0, 0x1, 0x3, 0x6, 0x3, 0x5, 0xbec2, 0xce4, 0xd8d, 0x1, 0x1, 0x1, 0x9, 0x9, 0x81, 0x1, 0x401, 0x8, 0x7fffffffffffffff, 0x1, 0x8, 0x0, 0x9, 0x11a, 0x8001, 0x2, 0x6, 0x3c8fe74b, 0x84, 0x0, 0x10001, 0xffff, 0x8, 0xb, 0x2, 0x1000, 0x7, 0x8, 0x3, 0xbf, 0x8, 0xe, 0x4, 0x7fff, 0x8, 0x8, 0x9, 0xc, 0x800, 0xd, 0x9c, 0x24, 0x1, 0xffffffffffff4a76, 0x100000001, 0x5, 0x2e3fe467, 0xcb, 0x7, 0x2, 0x6, 0x5, 0x9, 0xaa, 0x3, 0x1, 0x1, 0x5, 0x4, 0x7fff, 0x1, 0x1, 0xffffffffffff8001, 0xfffffffffffffffe, 0x8000000000000000, 0x8, 0x7, 0x4, 0x5, 0x1, 0xffffffffffffffff, 0x0, 0x6, 0xbfc3, 0x7]}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r6, 0x50009418, &(0x7f0000000840)={{r6}, r9, 0x8, @inherit={0x78, &(0x7f0000000380)={0x1, 0x6, 0x8fd5, 0xfffffffffffffffd, {0x1, 0x18, 0xff, 0x3, 0x6}, [0x0, 0x6, 0x1, 0x4, 0x8000000000, 0x9]}}, @devid=r10}) 700.340634ms ago: executing program 1 (id=3748): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu\x00', 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x38, r4, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r4, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x4000810) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r4, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x44}, 0x1, 0x0, 0x0, 0x8884}, 0x40040) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000080)={0x5, 0x0}, 0x8) getpeername$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000100)=0x14) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)={@ifindex=r7, 0xffffffffffffffff, 0xa, 0x4028, 0x4, @void, @void, @void, @value=r6}, 0x20) r8 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r8, 0x800442d4, 0xfffffffffffffffc) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu\x00', 0x0, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) (async) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x38, r4, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) (async) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r4, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x4000810) (async) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r4, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x44}, 0x1, 0x0, 0x0, 0x8884}, 0x40040) (async) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000080)={0x5}, 0x8) (async) getpeername$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000100)=0x14) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)={@ifindex=r7, 0xffffffffffffffff, 0xa, 0x4028, 0x4, @void, @void, @void, @value=r6}, 0x20) (async) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) (async) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r8, 0x800442d4, 0xfffffffffffffffc) (async) 646.262853ms ago: executing program 2 (id=3749): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x2, [0x0, 0x0]}, &(0x7f0000000040)=0xc) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000080)={r2, 0x8f}, 0x8) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x1402, 0x10, 0x70bd28, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x24004080) setsockopt$inet6_tcp_TLS_RX(r0, 0x11a, 0x2, &(0x7f00000001c0)=@gcm_256={{0x303}, "598ca58852d5e61d", "e6defa8b1b569744aac74242291714328c827fec15240022dd28d146ab2a0691", "428b3254", "eb7c608580201eaf"}, 0x38) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000200)) r4 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000240)='io.max\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f0000000280)=0x3, 0x12) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r5) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000300)=[@in={0x2, 0x4e24, @empty}, @in={0x2, 0x4e20, @broadcast}, @in={0x2, 0x4e21, @multicast1}], 0x30) sendmsg$NL80211_CMD_UPDATE_FT_IES(r5, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000600)={&(0x7f0000000380)={0x26c, r6, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x32}}}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x7}, @NL80211_ATTR_IE={0x132, 0x2a, [@sec_chan_ofs={0x3e, 0x1}, @random_vendor={0xdd, 0xbe, "5630cdfd4c0cdbb4ee68acadb792800e5c427b46f8207fe419d233dad500e3fe090ebae8bbb49c91b6a7cbd4feb5dd35b9ac1acde414cb62e48674c5f56bb79b3674b483a563454b5197c5f837ff81d7195f31aab32fb7f115d9a9e7a06f23863f100f949344d9896fcbae65a06c4c39d32b60939357252a22280b04940044071a3c4b27c0e75a55ea40db55f18cbfb6f14d9cd6e0837d611260107b0ffdd57c028c0369278aaa29b76beff43b2f52b1da55a1150ca35041e427b2af0a1e"}, @sec_chan_ofs={0x3e, 0x1, 0x1}, @prep={0x83, 0x1f, {{}, 0x40, 0x7, @device_b, 0x400, @void, 0x7ff, 0x1, @device_b, 0x80000000}}, @supported_rates={0x1, 0x7, [{0x4, 0x1}, {0x6c, 0x1}, {0x6, 0x1}, {0x12}, {0x5}, {0x0, 0x1}, {0x16}]}, @challenge={0x10, 0x1, 0xf0}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x9, 0x5, @broadcast, 0x4, @value=@broadcast, 0xfffffff8, 0x2, @device_b}}, @link_id={0x65, 0x12, {@from_mac, @broadcast, @device_b}}]}, @NL80211_ATTR_IE={0x30, 0x2a, [@mesh_id={0x72, 0x6}, @prep={0x83, 0x1f, {{}, 0x5, 0x5, @broadcast, 0x7, @void, 0x5, 0x4, @device_a, 0x2}}, @sec_chan_ofs={0x3e, 0x1}]}, @NL80211_ATTR_IE={0xc7, 0x2a, [@prep={0x83, 0x25, {{0x0, 0x1}, 0xa, 0x6, @broadcast, 0x2, @value=@device_b, 0x2, 0xe6, @device_a, 0x6}}, @mesh_id={0x72, 0x6}, @ibss={0x6, 0x2, 0x1}, @fast_bss_trans={0x37, 0x8e, {0x1, 0x3, "c09e0f4fcedf2c481f989553dd42fa08", "8264c4700eb8a36833af6c8cb616467e38bcdb3bd08a2fb05ea91c6222f91218", "c9bf6ab8e828ab4e857122b644f8f5026477ea797621dd01064c5fab12746dfc", [{0x3}, {0x4, 0x22, "18d89d624428a40d652706a32b181b96b92fbae863068f6834fed5cd221b5dd905b9"}, {0x3, 0x14, "9bfc9a0832df3fe852408fb6a9493c4f53f14e18"}]}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x7}, @NL80211_ATTR_MDID={0x6, 0xb1, 0xfffc}]}, 0x26c}, 0x1, 0x0, 0x0, 0x1}, 0x44010) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000680)={r1, 0xd1a, 0x101}, &(0x7f00000006c0)=0x8) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_KEY(r8, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x34, r9, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x34}}, 0x880) r10 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000880)=@o_path={&(0x7f0000000840)='./file0\x00', 0x0, 0x18, r0}, 0x18) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000008c0)={'batadv_slave_0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000900)={r10, r11, 0x25, 0x0, @val=@perf_event={0x5}}, 0x18) epoll_create1(0x0) r12 = syz_genetlink_get_family_id$gtp(&(0x7f0000000980), r5) sendmsg$GTP_CMD_GETPDP(r5, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x6c, r12, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@GTPA_VERSION={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_MS_ADDR6={0x14, 0xc, @empty}, @GTPA_PEER_ADDR6={0x14, 0xb, @remote}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_PEER_ADDR6={0x14, 0xb, @mcast1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x885}, 0x0) r13 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_SECURITY(r13, 0x112, 0x4, &(0x7f0000000ac0)={0x24, 0x4}, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000b00)) r14 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000b40)={'vcan0\x00'}) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f0000000b80)={r7, 0x482}, 0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000c40)={0x0, @in={{0x2, 0x4e20, @empty}}, 0x81, 0x3}, &(0x7f0000000d00)=0x90) 594.017595ms ago: executing program 0 (id=3750): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01031400e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000100000e200000000000000000000000a58000000e7f0efe202c3e6c43a76bc9e8a060a01040000000000000000020000002400048020000180080001006f736600140002800500020008000000010400000000000009000100797a300000000009fc5736c2797a320000000605000740d30000001400000011000100000000000000000000f97e0a00b3803726017d22331c3b07723ff61783c91724092311dd8685d7eda43e95825c6136"], 0x80}}, 0xc0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@bridge_delneigh={0x28, 0x1c, 0xe17, 0x70bd2b, 0x0, {0x2, 0x0, 0x0, r3, 0x8, 0x0, 0xa}, [@NDA_DST_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4000840) (async) r4 = socket$rds(0x15, 0x5, 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000010a0102"], 0x14}}, 0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r2) sendmsg$DEVLINK_CMD_PORT_SPLIT(r1, &(0x7f0000000740)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000700)={&(0x7f0000000500)={0x1d8, r6, 0x200, 0x70bd28, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x5}}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x4}, 0x4800) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) (async) recvmmsg(r5, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0xc}], 0x2, 0x0, 0x0) (async) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=@ipv6_getnexthop={0x20, 0x6a, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NHA_ID={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4010}, 0x0) (async) bind$rds(r4, &(0x7f0000000280)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r4, &(0x7f0000000f40)={&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@fadd={0x58, 0x114, 0x6, {{}, 0xfffffffffffffffe, 0x0}}], 0x58}, 0x0) 476.569406ms ago: executing program 0 (id=3751): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x20000810) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = gettid() r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000010c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r4, 0x84, 0x11, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f00000001c0)={0x2, &(0x7f0000000280)=[{0x28, 0x8, 0x0, 0xbfffdffe}, {0x80000006, 0x9, 0xd, 0x7fff}]}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="851000000400000095000000000000001800000000000000000000000000000085100000feffffff85100000fcffffffbed0bdab650cad59d65151fee70f82a3f6557714fe5e41bab7e71295d860479226d814cf6824add1168e6fecd68f924a4140559333b8a01a7d29f7fc53446f2b6946868ce2b5a7d17f25d191677abf2277c3bbaca4e797604ad39458a2603d4eb1606a933038df12e38a534683da3627f16042868afb126a25546a4f120ac79efa2705"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bind$bt_hci(r3, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000200)='ns/cgroup\x00') r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3000a}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0xffffffffffffff8e, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0xffffffff, 0x9}}]}]}, @IFLA_GROUP={0x8}]}, 0x3c}}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r7) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r7, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000240)=ANY=[@ANYBLOB='\t\x00\x00', @ANYRES16=r6, @ANYBLOB="010027bd7000fcdbdf251900000008000300", @ANYRES32=r8, @ANYBLOB="05001e000500000005001d0008000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20040000}, 0x24) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYBLOB="000829bd7000fddb52a3045a00e607000100600000000c009d0005000000520000000c406f1a74b4767591e52e86591983ca0099000800a4b334e3f65586a69a1bba00005d000000000000000000000000000089d3a138d9f83591d3e70a1c01b184edfcbf83fc2e1519ad635b9d41b40076b6b1c5454639cb0182ddd8c1ca81108e508594cd6efa957ba397e1db85e26f58062691df3e62a216b0682e1c8238c0446b08cf59e8135e99a2547a5ce75d7de80949d7c0980773bd368e58210bdfd3821f3b8128cabebc2c0a1521e4f6031030afa398f74d3ae7863be4959bf85457ffa9f478a859063ec1844e97c2bf3fba5e1531e03c02", @ANYRES32=r2, @ANYBLOB="080001006b0000000800db00", @ANYRES32=r9, @ANYBLOB="08000300", @ANYRES32=r8, @ANYBLOB="0c009900000000000e000000"], 0x74}, 0x1, 0x0, 0x0, 0x4008010}, 0x8044) close(0x3) 313.620805ms ago: executing program 4 (id=3752): r0 = socket(0x10, 0x3, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002800500190084"], 0x48}}, 0x4084) (async, rerun: 32) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async, rerun: 32) ioctl$sock_ifreq(0xffffffffffffffff, 0x8990, &(0x7f00000000c0)={'bond0\x00', @ifru_mtu=0x8}) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$xdp(0x2c, 0x3, 0x0) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00'}) (rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b000000050000000004000009000000"], 0x48) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000800)=ANY=[@ANYBLOB='M\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010026bd7000fbdbdf25010000000000000008410000004c"], 0x68}, 0x1, 0x0, 0x0, 0x20}, 0x4000) (async) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000200)={0x6, 'dvmrp0\x00', {0x6}, 0x8}) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x101, 0x0, 0xf, 0x0, 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) (async) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYRES16, @ANYBLOB="0100001400000000000002", @ANYRES32], 0x40}}, 0x0) (async) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) (async) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x8044) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000040), 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) 261.702153ms ago: executing program 2 (id=3753): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f00000000c0)="29000000140005b7ff000051915f95eb01010003a606a40e07fff024bb000000000000000040000000", 0x29) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x5, [@var={0x1, 0x0, 0x0, 0xe, 0x5, 0x1}]}, {0x0, [0x5f, 0x2e, 0x6]}}, 0x0, 0x2d, 0x0, 0x1, 0x2}, 0x28) (async) r2 = socket$rxrpc(0x21, 0x2, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r4) (async) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000000c0)="1800000014006b05c84e21000ab16d6e230675f811000000440002", 0x1b}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x24000000) (async) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000400000000000000000000850000002c000000850000002a00000095"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000840)={r9, r8, 0x25, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0, 0x0, 0x5}}, 0x30) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0xeb6}, 0x11) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r10, 0x0, 0xe40, 0xfffffe6d, &(0x7f0000000100)="5c71f91b05c413550230b4c817a628", 0x0, 0x1, 0x0, 0x302, 0x0, &(0x7f0000000180)='\x00', 0x0}, 0x48) (async) getsockopt(0xffffffffffffffff, 0x200000000114, 0x271b, 0x0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) (async) syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[], 0x0) sendmsg$nl_route(r3, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c000000130005002cbd70000000000000000000", @ANYRES32=r5, @ANYBLOB="12030000000000000a0001"], 0x2c}, 0x1, 0x0, 0x0, 0x44000}, 0x40042) (async) bind(r2, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0xffff, 0x4, 0xc, {0xa, 0x4e21, 0xb, @private2={0xfc, 0x2, '\x00', 0x1}, 0x803}}}, 0x80) (async) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000003c0)={0x4, &(0x7f0000000240)=[{0x40, 0xd, 0x7, 0x7}, {0x68, 0x5f, 0xff, 0x7}, {0x5, 0x3, 0xf0, 0x6}, {0xb421, 0x2, 0x9, 0x8}]}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0) r11 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r11, 0x10e, 0xc, &(0x7f0000000340)={0xfffbfffc, 0x2000000, 0x5, 0x6}, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000480), r4) 0s ago: executing program 1 (id=3754): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000001a00010000000000000000000a", @ANYRES64=r0], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3}, 0x48) kernel console output (not intermixed with test programs): h. [ 425.155720][T17082] netlink: 'syz.3.2846': attribute type 11 has an invalid length. [ 425.166866][ T9161] bond14: (slave bridge5): failed to get link speed/duplex [ 425.205503][T17080] netlink: 'syz.0.2844': attribute type 10 has an invalid length. [ 425.363808][T17097] netlink: 'syz.4.2848': attribute type 4 has an invalid length. [ 425.397803][T17087] A link change request failed with some changes committed already. Interface geneve3 may have been left with an inconsistent configuration, please check. [ 425.525740][T17095] bond22: (slave bridge24): making interface the new active one [ 425.543284][T17095] bond22: (slave bridge24): Enslaving as an active interface with an up link [ 425.697072][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 425.896934][ T34] bond11: (slave bridge0): failed to get link speed/duplex [ 425.995469][T17113] macvtap0: entered promiscuous mode [ 426.012350][T17113] dummy0: entered promiscuous mode [ 426.031179][T17113] macvtap0: entered allmulticast mode [ 426.046975][T17113] dummy0: entered allmulticast mode [ 426.066739][T17117] dummy0: left allmulticast mode [ 426.086077][T17117] macvtap0: left promiscuous mode [ 426.096028][T17117] macvtap0: left allmulticast mode [ 426.107340][T14885] dummy0: left promiscuous mode [ 426.148461][ T9164] bond14: (slave bridge5): failed to get link speed/duplex [ 426.168357][ T9164] bond11: (slave bridge0): failed to get link speed/duplex [ 426.269244][ T9163] bond14: (slave bridge5): failed to get link speed/duplex [ 426.467552][T17142] lo speed is unknown, defaulting to 1000 [ 427.141301][T17168] hmac(sha224: entered promiscuous mode [ 427.342513][T17183] netlink: 'syz.3.2870': attribute type 1 has an invalid length. [ 427.371776][T17175] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 427.397113][T17175] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 427.412655][T17175] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 427.440013][T17175] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 427.487528][T17192] __nla_validate_parse: 6 callbacks suppressed [ 427.487548][T17192] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2872'. [ 427.691670][T17197] bond10: (slave bridge6): making interface the new active one [ 427.718976][T17197] bond10: (slave bridge6): Enslaving as an active interface with an up link [ 427.784357][T17183] macvlan0: entered promiscuous mode [ 427.796958][T17183] macvlan0: entered allmulticast mode [ 427.803828][T17183] bond10: entered promiscuous mode [ 427.809547][T17183] bridge6: entered promiscuous mode [ 427.815447][T17183] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 427.823184][T17183] bond10: (slave macvlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 427.839719][T17183] bond10: left promiscuous mode [ 427.844615][T17183] bridge6: left promiscuous mode [ 427.862899][T17200] syzkaller1: entered promiscuous mode [ 427.871524][T17200] syzkaller1: entered allmulticast mode [ 428.250931][T17204] 8021q: adding VLAN 0 to HW filter on device bond20 [ 428.263180][T17204] 8021q: adding VLAN 0 to HW filter on device bond22 [ 428.275549][T15799] dummy0: entered promiscuous mode [ 428.402303][T17217] netlink: 'syz.0.2878': attribute type 1 has an invalid length. [ 428.451443][T17217] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2878'. [ 428.467998][T17217] netlink: 'syz.0.2878': attribute type 11 has an invalid length. [ 428.539298][ T9163] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 428.548108][T17217] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2878'. [ 428.566119][ T9163] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 428.585022][T17217] netlink: 'syz.0.2878': attribute type 11 has an invalid length. [ 428.613930][T17226] bond0: entered promiscuous mode [ 428.624147][T17226] bond_slave_0: entered promiscuous mode [ 428.632840][T17226] bond_slave_1: entered promiscuous mode [ 428.654032][T17226] bond0: left promiscuous mode [ 428.660915][T17235] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2882'. [ 428.685445][T17226] bond_slave_0: left promiscuous mode [ 428.709214][T17226] bond_slave_1: left promiscuous mode [ 428.728951][T17225] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2880'. [ 428.752736][ T9163] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 428.762847][ T9163] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 429.045224][T17250] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2886'. [ 429.069242][T17253] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2889'. [ 429.125279][T17258] validate_nla: 1 callbacks suppressed [ 429.125402][T17258] netlink: 'syz.3.2889': attribute type 13 has an invalid length. [ 429.175333][T17258] netlink: 'syz.3.2889': attribute type 17 has an invalid length. [ 429.353904][T17258] ip6tnl0: left promiscuous mode [ 429.374489][T17258] ip6tnl0: left allmulticast mode [ 429.442037][T17258] hsr0: left promiscuous mode [ 429.641703][T17258] macvtap1: left promiscuous mode [ 429.670385][T17258] gre2: left promiscuous mode [ 429.691735][T17258] bond5: left promiscuous mode [ 429.701472][T17258] vti0: left promiscuous mode [ 429.708613][T17258] gretap1: left promiscuous mode [ 429.724752][T17258] vlan2: left promiscuous mode [ 429.732065][T17258] geneve1: left promiscuous mode [ 429.738203][T17258] vlan2: left allmulticast mode [ 429.743202][T17258] geneve1: left allmulticast mode [ 429.752538][T17258] geneve3: left promiscuous mode [ 429.968258][ T9163] net_ratelimit: 45 callbacks suppressed [ 429.968278][ T9163] bond14: (slave bridge5): failed to get link speed/duplex [ 430.020815][ T9163] bond11: (slave bridge0): failed to get link speed/duplex [ 430.069162][T17295] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2897'. [ 430.085437][T17296] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.2894'. [ 430.145795][T17299] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2897'. [ 430.226087][T17295] bond23: entered promiscuous mode [ 430.237387][T17295] 8021q: adding VLAN 0 to HW filter on device bond23 [ 430.270191][ T9163] bond14: (slave bridge5): failed to get link speed/duplex [ 430.453151][ T9163] bond11: (slave bridge0): failed to get link speed/duplex [ 430.466992][ T9163] bond14: (slave bridge5): failed to get link speed/duplex [ 430.643406][T17318] A link change request failed with some changes committed already. Interface geneve4 may have been left with an inconsistent configuration, please check. [ 430.671134][ T9176] bond11: (slave bridge0): failed to get link speed/duplex [ 430.698118][ T30] audit: type=1804 audit(1781706612.114:13): pid=17327 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2904" name="/newroot/578/cgroup.controllers" dev="tmpfs" ino=2963 res=1 errno=0 [ 430.724556][ T9176] bond14: (slave bridge5): failed to get link speed/duplex [ 430.793192][ T30] audit: type=1800 audit(1781706612.114:14): pid=17327 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2904" name="cgroup.controllers" dev="tmpfs" ino=2963 res=0 errno=0 [ 430.821726][ T9176] bond11: (slave bridge0): failed to get link speed/duplex [ 430.870691][ T34] bond14: (slave bridge5): failed to get link speed/duplex [ 431.618507][T17379] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 431.818052][T17388] 8021q: adding VLAN 0 to HW filter on device bond12 [ 431.979205][ T5640] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 431.996486][ T5640] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 432.005517][ T5640] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 432.013763][ T5640] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 432.021923][ T5640] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 432.152628][T17389] bond12: entered promiscuous mode [ 432.178180][T17389] bond12: entered allmulticast mode [ 432.244984][T17389] 8021q: adding VLAN 0 to HW filter on device bond12 [ 432.281918][T17389] team0: Port device bond12 added [ 432.417176][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 432.793614][T17434] __nla_validate_parse: 3 callbacks suppressed [ 432.793637][T17434] netlink: 51 bytes leftover after parsing attributes in process `syz.3.2926'. [ 433.171135][T17398] lo speed is unknown, defaulting to 1000 [ 433.534041][T17473] netlink: 'syz.1.2934': attribute type 11 has an invalid length. [ 433.787744][T17491] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2938'. [ 434.056123][T17502] netlink: 'syz.3.2941': attribute type 2 has an invalid length. [ 434.102167][ T5640] Bluetooth: hci5: command tx timeout [ 434.115475][T17501] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 434.138777][T17504] netlink: 27 bytes leftover after parsing attributes in process `syz.1.2942'. [ 434.155295][T17502] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2941'. [ 434.183767][T17501] macsec1: entered promiscuous mode [ 434.185445][T17502] netlink: 35 bytes leftover after parsing attributes in process `syz.3.2941'. [ 434.212814][T17501] mac80211_hwsim hwsim9 wlan1: left promiscuous mode [ 434.249240][T17506] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2941'. [ 434.272899][T17506] netlink: 35 bytes leftover after parsing attributes in process `syz.3.2941'. [ 434.626424][T17398] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.649189][T17398] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.656704][T17398] bridge_slave_0: entered allmulticast mode [ 434.679019][T17398] bridge_slave_0: entered promiscuous mode [ 434.706403][T17398] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.722526][T17541] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2950'. [ 434.732006][T17541] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2950'. [ 434.746390][T17398] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.777118][T17398] bridge_slave_1: entered allmulticast mode [ 434.809773][T17398] bridge_slave_1: entered promiscuous mode [ 434.914622][T17398] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 434.972476][T17398] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 434.993014][T17552] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2951'. [ 435.057123][ C0] net_ratelimit: 41 callbacks suppressed [ 435.057187][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 435.141280][T17398] team0: Port device team_slave_0 added [ 435.159599][T17398] team0: Port device team_slave_1 added [ 435.236794][T17562] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 435.272055][T17398] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 435.289086][T17398] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 435.338257][T17398] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 435.356532][T17398] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 435.364772][T17398] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 435.397914][T17398] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 435.558740][ T9163] bond14: (slave bridge5): link status up again after 0 ms [ 435.597916][ T9155] bond14: (slave bridge5): link status up again after 0 ms [ 435.627688][ T9163] bond14: (slave bridge5): link status up again after 0 ms [ 435.677532][ T9155] bond14: (slave bridge5): link status up again after 0 ms [ 435.717422][ T9155] bond14: (slave bridge5): link status up again after 0 ms [ 435.747546][ T9155] bond14: (slave bridge5): link status up again after 0 ms [ 435.780104][ T9155] bond14: (slave bridge5): link status up again after 0 ms [ 435.807438][ T9176] bond14: (slave bridge5): link status up again after 0 ms [ 435.821934][ T9176] bond14: (slave bridge5): failed to get link speed/duplex [ 435.850872][T17398] hsr_slave_0: entered promiscuous mode [ 435.864458][T17398] hsr_slave_1: entered promiscuous mode [ 435.876182][T17398] debugfs: 'hsr0' already exists in 'hsr' [ 435.884083][T17398] Cannot create hsr debugfs directory [ 436.092447][ T5640] block nbd3: Receive control failed (result -32) [ 436.182238][ T5640] Bluetooth: hci5: command tx timeout [ 436.356723][T17398] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 436.400800][T17398] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.429500][T17398] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 436.456199][T17398] netdevsim netdevsim4 eth3 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 436.469790][T17398] netdevsim netdevsim4 eth3 (unregistering): unset [1, 3] type 2 family 0 port 56725 - 0 [ 436.647931][T17614] IPVS: set_ctl: invalid protocol: 33 172.20.20.66:20001 [ 436.832923][T17398] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 436.856005][T17398] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.881837][T17398] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 436.904214][T17398] netdevsim netdevsim4 eth2 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 436.924720][T17398] netdevsim netdevsim4 eth2 (unregistering): unset [1, 3] type 2 family 0 port 56725 - 0 [ 437.111300][T17398] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 437.121191][T17398] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.132401][T17398] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 437.144113][T17398] netdevsim netdevsim4 eth1 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 437.155009][T17398] netdevsim netdevsim4 eth1 (unregistering): unset [1, 3] type 2 family 0 port 56725 - 0 [ 437.314466][T17398] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 437.325357][T17398] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.337211][T17398] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 437.348796][T17398] netdevsim netdevsim4 eth0 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 437.359075][T17398] netdevsim netdevsim4 eth0 (unregistering): unset [1, 3] type 2 family 0 port 56725 - 0 [ 438.177363][ C0] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 438.256906][ T50] Bluetooth: hci5: command tx timeout [ 438.817352][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 439.958475][T17635] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 439.999784][T17398] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 440.052009][T17398] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 440.083986][T17398] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 440.148869][T17398] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 440.167019][ T9163] net_ratelimit: 58 callbacks suppressed [ 440.167040][ T9163] bond14: (slave bridge5): failed to get link speed/duplex [ 440.191004][T17398] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 440.205331][T17662] __nla_validate_parse: 3 callbacks suppressed [ 440.205350][T17662] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2980'. [ 440.209895][T17398] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 440.228969][T17662] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2980'. [ 440.231123][T17660] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 440.249821][T17660] netlink: 228 bytes leftover after parsing attributes in process `syz.1.2982'. [ 440.261920][T17398] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 440.266999][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 440.288143][T17398] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 440.327219][ T9161] bond14: (slave bridge5): failed to get link speed/duplex [ 440.337956][ T50] Bluetooth: hci5: command 0x0419 tx timeout [ 440.487970][ T12] bond11: (slave bridge0): failed to get link speed/duplex [ 440.607316][ T9155] bond14: (slave bridge5): failed to get link speed/duplex [ 440.727311][ T9155] bond11: (slave bridge0): failed to get link speed/duplex [ 440.745407][ T9162] bond14: (slave bridge5): failed to get link speed/duplex [ 440.866349][T17693] bond11: entered promiscuous mode [ 440.890175][T17693] bond11: entered allmulticast mode [ 440.929832][T17398] 8021q: adding VLAN 0 to HW filter on device bond0 [ 440.957447][T17398] 8021q: adding VLAN 0 to HW filter on device team0 [ 441.003786][ T9155] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.011020][ T9155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 441.060916][ T9155] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.068225][ T9155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 441.137562][ T12] bond11: (slave bridge0): failed to get link speed/duplex [ 441.223553][T17712] ip6gre2: entered promiscuous mode [ 441.244386][T17712] ip6gre2: entered allmulticast mode [ 441.297077][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 441.308836][ T12] bond11: (slave bridge0): failed to get link speed/duplex [ 441.324453][T17723] netlink: 'syz.1.2995': attribute type 4 has an invalid length. [ 441.342300][T17723] netlink: 17 bytes leftover after parsing attributes in process `syz.1.2995'. [ 441.390172][T17720] netlink: 67 bytes leftover after parsing attributes in process `syz.3.2991'. [ 441.602783][ T12] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 441.624374][ T12] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 441.631135][T17734] sock: sock_timestamping_bind_phc: sock not bind to device [ 441.633187][T15799] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 441.848947][T15799] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 441.908093][T15799] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 442.250721][T17764] netlink: 'syz.0.3001': attribute type 8 has an invalid length. [ 442.304381][T17398] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 442.417275][ T5640] Bluetooth: hci5: command 0x0419 tx timeout [ 442.508772][T17398] veth0_vlan: entered promiscuous mode [ 442.521709][T17398] veth1_vlan: entered promiscuous mode [ 442.550160][T17398] veth0_macvtap: entered promiscuous mode [ 442.563501][T17398] veth1_macvtap: entered promiscuous mode [ 442.585529][T17398] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 442.618258][T17398] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 442.647083][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.656687][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.679405][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.694196][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.705674][T17781] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3003'. [ 443.301666][ T34] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 443.302626][ T9155] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 444.078967][T17707] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 444.342006][ T9176] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 444.358489][ T9176] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 444.483812][T17802] sch_tbf: peakrate 9 is lower than or equals to rate 8937957770457510237 ! [ 444.523972][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 444.538740][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 444.620258][T17820] netlink: 212336 bytes leftover after parsing attributes in process `syz.1.3014'. [ 444.831878][T17827] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2919'. [ 444.841534][T17827] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2919'. [ 445.053013][T17834] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3020'. [ 445.241105][ T50] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 445.264708][ T50] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 445.274514][ T50] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 445.284119][ T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 445.287466][ T9161] net_ratelimit: 58 callbacks suppressed [ 445.287485][ T9161] bond14: (slave bridge5): failed to get link speed/duplex [ 445.311359][ T50] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 445.377236][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 445.385483][ T12] bond11: (slave bridge0): failed to get link speed/duplex [ 445.432941][T17847] openvswitch: : Dropping previously announced user features [ 445.457065][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 445.473148][ T12] bond14: (slave bridge5): failed to get link speed/duplex [ 445.527496][ T9176] bond11: (slave bridge0): failed to get link speed/duplex [ 445.538177][T17849] nbd: nbd0 already in use [ 445.638872][T17850] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3023'. [ 445.675018][T17849] syzkaller0: left promiscuous mode [ 445.694822][T17849] macvlan0: left promiscuous mode [ 445.729943][T17849] hsr1: left promiscuous mode [ 445.736735][T17849] bond3: left promiscuous mode [ 445.745726][T17849] geneve3: left promiscuous mode [ 445.759254][T17849] geneve4: left promiscuous mode [ 445.784158][T17849] bond8: left promiscuous mode [ 445.789562][T17849] ip6gre1: left promiscuous mode [ 445.805050][T17849] bond14: left promiscuous mode [ 445.811719][T17849] bridge5: left promiscuous mode [ 445.817352][T17849] bridge6: left promiscuous mode [ 445.826716][T17849] vlan3: left promiscuous mode [ 445.827911][ T34] bond14: (slave bridge5): link status up again after 0 ms [ 445.835035][T17849] bond_slave_1: left promiscuous mode [ 445.850799][T17849] bond18: left promiscuous mode [ 445.860003][ T34] bond14: (slave bridge5): link status up again after 0 ms [ 445.879858][T17849] bond21: left promiscuous mode [ 445.888564][ T34] bond14: (slave bridge5): link status up again after 0 ms [ 445.897775][T17849] bond23: left promiscuous mode [ 445.903751][T17849] ip6gre2: left promiscuous mode [ 445.911991][ T34] bond14: (slave bridge5): link status up again after 0 ms [ 445.928926][T17850] syzkaller0: refused to change device tx_queue_len [ 445.938809][ T9155] bond14: (slave bridge5): link status up again after 0 ms [ 445.948184][T15799] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 446.427408][T17884] netlink: 'syz.4.3027': attribute type 9 has an invalid length. [ 446.436082][T17882] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3028'. [ 446.439430][T17873] netlink: 'syz.2.3026': attribute type 1 has an invalid length. [ 446.451744][T17839] lo speed is unknown, defaulting to 1000 [ 446.475182][T17882] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3028'. [ 446.737940][T15799] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 446.776686][T17839] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.783959][T17839] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.791869][T17839] bridge_slave_0: entered allmulticast mode [ 446.800328][T17839] bridge_slave_0: entered promiscuous mode [ 446.809904][T17839] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.820342][T17839] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.828230][T17839] bridge_slave_1: entered allmulticast mode [ 446.835432][T17839] bridge_slave_1: entered promiscuous mode [ 446.865015][T17839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 446.878510][T17839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 446.912352][T17839] team0: Port device team_slave_0 added [ 446.920674][T17839] team0: Port device team_slave_1 added [ 446.946502][T17839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 446.953656][T17839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 446.980780][T17839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 446.993777][T17839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 447.002159][T17839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 447.036832][T17839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 447.280329][T17877] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 447.377965][ T50] Bluetooth: hci2: command tx timeout [ 447.618713][T17839] hsr_slave_0: entered promiscuous mode [ 447.626318][T17839] hsr_slave_1: entered promiscuous mode [ 447.640735][T17839] debugfs: 'hsr0' already exists in 'hsr' [ 447.652255][T17839] Cannot create hsr debugfs directory [ 447.769984][T17916] syzkaller0: entered promiscuous mode [ 447.781314][T17916] syzkaller0: entered allmulticast mode [ 447.993245][T17938] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3040'. [ 448.204079][T17948] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3043'. [ 448.208447][T17839] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 448.232891][T17839] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.244491][T17839] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 448.288127][T14885] IPVS: starting estimator thread 0... [ 448.350149][T17951] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3043'. [ 448.387623][T17955] IPVS: using max 30 ests per chain, 72000 per kthread [ 448.531135][T17962] tipc: Enabled bearer , priority 0 [ 448.616706][T17962] syzkaller0: entered promiscuous mode [ 448.622438][T17962] syzkaller0: entered allmulticast mode [ 448.628792][T17962] tipc: Resetting bearer [ 448.642961][T17960] tipc: Enabled bearer , priority 0 [ 448.651571][T17964] syzkaller0: entered promiscuous mode [ 448.658129][T17964] syzkaller0: entered allmulticast mode [ 448.725011][T17839] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 448.736192][T17839] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.748836][T17978] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3053'. [ 448.758932][T17839] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 448.795378][T17961] tipc: Resetting bearer [ 449.467678][ T50] Bluetooth: hci2: command tx timeout [ 450.659472][ C0] net_ratelimit: 27 callbacks suppressed [ 450.659487][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 451.537648][ T50] Bluetooth: hci2: command tx timeout [ 451.707049][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 451.920485][T17961] tipc: Disabling bearer [ 451.931413][T17960] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 451.955978][T17964] tipc: Resetting bearer [ 451.989288][T17964] tipc: Disabling bearer [ 452.007157][ T9161] bond14: (slave bridge5): failed to get link speed/duplex [ 452.124941][T17988] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3055'. [ 452.166601][T17839] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 452.191352][T17839] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.208764][T17839] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 452.278879][ T12] bond11: (slave bridge0): failed to get link speed/duplex [ 452.308391][ T12] bond14: (slave bridge5): failed to get link speed/duplex [ 452.465330][T17839] netdevsim netdevsim3 €Â (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 452.486275][T17839] netdevsim netdevsim3 €Â (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.509857][T17839] netdevsim netdevsim3 €Â (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 452.717344][ T12] bond14: (slave bridge5): failed to get link speed/duplex [ 452.746921][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 452.754649][ T9155] bond11: (slave bridge0): failed to get link speed/duplex [ 452.837201][ T12] bond14: (slave bridge5): failed to get link speed/duplex [ 452.877184][ T9155] bond11: (slave bridge0): failed to get link speed/duplex [ 452.897264][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 452.991600][T18026] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3063'. [ 453.174014][T18036] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3066'. [ 453.241586][T17839] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 453.278527][T18039] netlink: 'syz.4.3067': attribute type 2 has an invalid length. [ 453.347346][T18040] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3066'. [ 453.452482][T17839] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 453.468046][T18040] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3066'. [ 453.479457][T18040] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3066'. [ 453.619922][ T50] Bluetooth: hci2: command tx timeout [ 454.273480][T18060] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3073'. [ 454.324011][T17839] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 454.335907][T17839] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 454.366329][T17839] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 454.395092][T17839] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 454.404924][T17839] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 454.435704][T17839] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 454.466729][T18062] syzkaller0: entered promiscuous mode [ 454.684414][T17839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 454.734071][T17839] 8021q: adding VLAN 0 to HW filter on device team0 [ 454.769730][ T9155] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.776960][ T9155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 454.786106][T18088] netlink: 'syz.0.3079': attribute type 7 has an invalid length. [ 454.810471][ T9155] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.817755][ T9155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 454.869294][T18090] lo speed is unknown, defaulting to 1000 [ 454.905243][T18090] lo speed is unknown, defaulting to 1000 [ 454.914209][T18090] lo speed is unknown, defaulting to 1000 [ 455.098525][T18100] erspan0: entered promiscuous mode [ 455.413482][T18090] infiniband syz0: set active [ 455.419064][T15796] lo speed is unknown, defaulting to 1000 [ 455.438770][T18090] infiniband syz0: added lo [ 455.489686][T18090] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 455.506570][T18090] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 455.525839][T18090] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 455.572168][T18090] RDS/IB: syz0: added [ 455.601676][T18090] smc: adding ib device syz0 with port count 1 [ 455.670059][T18090] smc: ib device syz0 port 1 has no pnetid [ 455.690868][T17839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 455.709008][ T34] net_ratelimit: 26 callbacks suppressed [ 455.709025][ T34] bond14: (slave bridge5): failed to get link speed/duplex [ 455.745719][T14886] lo speed is unknown, defaulting to 1000 [ 455.758290][T18090] lo speed is unknown, defaulting to 1000 [ 455.786572][T18117] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3085'. [ 455.820881][T18117] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 455.849518][T18117] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3085'. [ 455.858972][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 455.867247][ T9176] bond11: (slave bridge0): failed to get link speed/duplex [ 455.915016][T17839] veth0_vlan: entered promiscuous mode [ 455.946653][T17839] veth1_vlan: entered promiscuous mode [ 455.977253][ T9162] bond14: (slave bridge5): failed to get link speed/duplex [ 456.007274][ T9162] bond11: (slave bridge0): failed to get link speed/duplex [ 456.101654][T17839] veth0_macvtap: entered promiscuous mode [ 456.133102][T17839] veth1_macvtap: entered promiscuous mode [ 456.200391][T17839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 456.251956][T17839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 456.291086][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.313504][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.324469][T18130] x_tables: duplicate underflow at hook 2 [ 456.325832][T18090] lo speed is unknown, defaulting to 1000 [ 456.344868][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.363711][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.377703][ T34] bond11: (slave bridge0): failed to get link speed/duplex [ 456.537022][ T9162] bond11: (slave bridge0): failed to get link speed/duplex [ 456.598045][ T9162] bond14: (slave bridge5): failed to get link speed/duplex [ 456.678455][ T9155] bond11: (slave bridge0): failed to get link speed/duplex [ 456.711409][T18143] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3091'. [ 456.745227][ T9164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 456.765384][ T9155] bond14: (slave bridge5): failed to get link speed/duplex [ 456.787199][ T9164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 456.947568][ T9155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 456.969119][ T9155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 457.120671][T18090] lo speed is unknown, defaulting to 1000 [ 457.262768][T18171] __nla_validate_parse: 4 callbacks suppressed [ 457.262785][T18171] netlink: 67 bytes leftover after parsing attributes in process `syz.4.3096'. [ 457.663055][T18184] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3100'. [ 457.815542][ T5640] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 457.830403][ T5640] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 457.842939][ T5640] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 457.872950][ T5640] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 457.885932][ T5640] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 457.894024][T18188] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3100'. [ 457.966064][T18188] SET target dimension over the limit! [ 457.994589][T18090] lo speed is unknown, defaulting to 1000 [ 458.003563][T18188] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3100'. [ 458.039995][T18192] netlink: 'syz.4.3102': attribute type 8 has an invalid length. [ 458.643484][T18090] lo speed is unknown, defaulting to 1000 [ 458.736218][T18215] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3107'. [ 458.816370][T18185] lo speed is unknown, defaulting to 1000 [ 459.065404][T18221] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3108'. [ 459.161718][T18185] lo speed is unknown, defaulting to 1000 [ 459.221179][T18227] netlink: 'syz.0.3110': attribute type 1 has an invalid length. [ 459.383798][T18230] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3111'. [ 459.505791][T18233] netlink: 'syz.3.3113': attribute type 1 has an invalid length. [ 459.550238][T18235] Bluetooth: MGMT ver 1.23 [ 459.577146][T18090] lo speed is unknown, defaulting to 1000 [ 459.584349][T18236] netlink: 'syz.0.3114': attribute type 4 has an invalid length. [ 459.615768][T18238] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3113'. [ 459.939612][ T50] Bluetooth: hci0: command tx timeout [ 460.008174][T18247] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3116'. [ 460.019973][T18246] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3116'. [ 460.030331][T18247] netlink: 'syz.3.3116': attribute type 3 has an invalid length. [ 460.107981][T18090] lo speed is unknown, defaulting to 1000 [ 460.750660][T18185] bridge0: port 1(bridge_slave_0) entered blocking state [ 460.759530][T18185] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.767508][T18185] bridge_slave_0: entered allmulticast mode [ 460.775232][T18185] bridge_slave_0: entered promiscuous mode [ 460.784752][T18185] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.792348][T18185] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.800203][T18185] bridge_slave_1: entered allmulticast mode [ 460.808910][T18185] bridge_slave_1: entered promiscuous mode [ 461.057609][ C0] net_ratelimit: 59 callbacks suppressed [ 461.057627][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 462.019236][ T50] Bluetooth: hci0: command tx timeout [ 462.107101][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 463.141082][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 464.108032][ T50] Bluetooth: hci0: command tx timeout [ 464.187076][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 464.267478][T18185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 464.303031][T18185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 464.373529][T18185] team0: Port device team_slave_0 added [ 464.388083][T18185] team0: Port device team_slave_1 added [ 464.437023][T18185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 464.450489][T18185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 464.497627][T18185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 464.525266][T18185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 464.545451][T18185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 464.623475][T18185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 464.637033][T18317] __nla_validate_parse: 6 callbacks suppressed [ 464.637051][T18317] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3131'. [ 464.678370][T18320] openvswitch: netlink: Tunnel attr 77 out of range max 16 [ 464.692821][T18321] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3132'. [ 464.729091][ T9164] bond11: (slave bridge0): failed to get link speed/duplex [ 464.842205][T18185] hsr_slave_0: entered promiscuous mode [ 464.855732][T18185] hsr_slave_1: entered promiscuous mode [ 464.870790][T18185] debugfs: 'hsr0' already exists in 'hsr' [ 464.885547][T18333] xt_bpf: check failed: parse error [ 464.902902][T18185] Cannot create hsr debugfs directory [ 465.088240][ T9164] bond14: (slave bridge5): failed to get link speed/duplex [ 465.212776][T18347] A link change request failed with some changes committed already. Interface geneve4 may have been left with an inconsistent configuration, please check. [ 465.228685][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 465.240518][T15697] lo speed is unknown, defaulting to 1000 [ 465.658066][ T9162] bond14: (slave bridge5): failed to get link speed/duplex [ 465.695591][T18370] xt_hashlimit: Unknown mode mask 3FFFF, kernel too old? [ 465.769979][T18374] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3145'. [ 465.824893][T18375] netlink: 'syz.3.3145': attribute type 2 has an invalid length. [ 465.850572][T18185] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.954864][T18375] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3145'. [ 466.164055][T18185] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.178231][ T50] Bluetooth: hci0: command tx timeout [ 466.257185][ C0] net_ratelimit: 3 callbacks suppressed [ 466.257204][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 466.332363][T18406] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3153'. [ 466.343138][T18400] can: request_module (can-proto-0) failed. [ 466.358234][ T9176] bond14: (slave bridge5): failed to get link speed/duplex [ 466.383413][ T9176] bond11: (slave bridge0): failed to get link speed/duplex [ 466.402342][T18406] IPVS: sed: FWM 3 0x00000003 - no destination available [ 466.480790][T18185] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.538605][ T34] bond11: (slave bridge0): failed to get link speed/duplex [ 466.620977][T18185] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.662034][ T9176] bond14: (slave bridge5): failed to get link speed/duplex [ 466.687058][ T9176] bond11: (slave bridge0): failed to get link speed/duplex [ 466.787872][ T9176] bond14: (slave bridge5): failed to get link speed/duplex [ 466.806992][ T9176] bond11: (slave bridge0): failed to get link speed/duplex [ 466.976080][T18185] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 466.992005][T18185] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 467.001105][T18185] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 467.014891][T18185] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 467.024734][T18185] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 467.038478][T18185] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 467.046700][T18185] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 467.059029][T18185] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 467.291556][T18185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 467.298426][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 467.372160][T18185] 8021q: adding VLAN 0 to HW filter on device team0 [ 467.400578][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.407797][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 467.461057][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.468390][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 467.564825][T18455] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3160'. [ 467.618908][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 467.652423][T18185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 468.070150][T18469] Bluetooth: MGMT ver 1.23 [ 468.521447][T18496] netlink: 'syz.1.3168': attribute type 1 has an invalid length. [ 468.534635][T18499] netlink: 'syz.4.3170': attribute type 10 has an invalid length. [ 468.543600][T18499] netlink: 228 bytes leftover after parsing attributes in process `syz.4.3170'. [ 468.553842][T18502] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3169'. [ 468.653599][T18505] bond13: (slave bridge5): making interface the new active one [ 468.665468][T18505] bond13: (slave bridge5): Enslaving as an active interface with an up link [ 468.708903][T18185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 468.756586][T18508] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3171'. [ 468.823307][T18508] team0: Device xfrm0 is of different type [ 468.873563][T18508] tipc: Started in network mode [ 468.888454][T18508] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 468.919751][T18508] tipc: Enabled bearer , priority 0 [ 468.939541][T18516] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3173'. [ 469.059264][T18185] veth0_vlan: entered promiscuous mode [ 469.082634][T18185] veth1_vlan: entered promiscuous mode [ 469.135143][T18521] sctp: [Deprecated]: syz.4.3175 (pid 18521) Use of int in maxseg socket option. [ 469.135143][T18521] Use struct sctp_assoc_value instead [ 469.160347][T18185] veth0_macvtap: entered promiscuous mode [ 469.172795][T18185] veth1_macvtap: entered promiscuous mode [ 469.234050][T18185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 469.275958][T18185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 469.323655][T18530] block nbd1: NBD_DISCONNECT [ 469.329578][ T9176] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.331000][T18530] block nbd1: Send disconnect failed -32 [ 469.344896][ T9176] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.344939][ T9176] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.344971][ T9176] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.392653][T18530] block nbd1: Send disconnect failed -32 [ 469.406269][T18530] block nbd1: shutting down sockets [ 469.693288][ T9164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 469.747962][T18547] __nla_validate_parse: 4 callbacks suppressed [ 469.747982][T18547] netlink: 176 bytes leftover after parsing attributes in process `syz.3.3183'. [ 469.748598][ T9164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 469.930297][ T9164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 469.963785][ T9164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 470.038908][T14887] tipc: Node number set to 11578026 [ 470.190446][T18561] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3188'. [ 470.331522][T18569] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3098'. [ 470.495486][T18580] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3192'. [ 470.724317][T18590] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 470.775182][T18593] SET target dimension over the limit! [ 470.846705][ T5640] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 470.874322][ T5640] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 470.887700][ T5640] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 470.902494][ T5640] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 470.912024][ T5640] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 471.160571][T18591] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3195'. [ 471.209691][T18591] netlink: 180 bytes leftover after parsing attributes in process `syz.3.3195'. [ 471.432841][ T9155] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 471.458181][ C0] net_ratelimit: 50 callbacks suppressed [ 471.458225][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 471.470876][ T9155] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.501799][ T9155] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 40144 - 0 [ 471.601417][T18631] netlink: 39 bytes leftover after parsing attributes in process `syz.0.3204'. [ 471.638016][ T9164] bond11: (slave bridge0): failed to get link speed/duplex [ 471.728482][ T9155] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 471.746864][ T9155] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.761867][ T9155] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 40144 - 0 [ 471.798579][ T9164] bond14: (slave bridge5): failed to get link speed/duplex [ 471.832735][ T9164] bond11: (slave bridge0): failed to get link speed/duplex [ 471.873185][T18644] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.882927][T18644] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.900848][T18643] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.908190][T18643] bridge0: port 2(bridge_slave_1) entered forwarding state [ 471.918060][T18643] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.925249][T18643] bridge0: port 1(bridge_slave_0) entered forwarding state [ 471.969104][T18643] bridge0: entered promiscuous mode [ 471.974516][T18643] bridge0: entered allmulticast mode [ 471.992859][T18648] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3208'. [ 472.016227][T18648] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3208'. [ 472.032530][T18643] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3207'. [ 472.100678][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 472.272951][ T9155] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 472.284278][ T9155] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.295411][ T9155] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 40144 - 0 [ 472.337994][ T9176] bond11: (slave bridge0): failed to get link speed/duplex [ 472.350497][T18596] lo speed is unknown, defaulting to 1000 [ 472.368981][ T9176] bond14: (slave bridge5): failed to get link speed/duplex [ 472.380162][T18596] lo speed is unknown, defaulting to 1000 [ 472.456950][ T9176] bond11: (slave bridge0): failed to get link speed/duplex [ 472.487597][ T9176] bond14: (slave bridge5): failed to get link speed/duplex [ 472.497020][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 472.977586][ T50] Bluetooth: hci4: command tx timeout [ 473.389867][ C0] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 473.536980][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 474.746471][ T9155] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 474.757388][ T9155] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.767952][ T9155] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 40144 - 0 [ 474.861039][T18663] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 474.952421][T18683] netlink: 'syz.3.3218': attribute type 10 has an invalid length. [ 474.976610][T18683] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3218'. [ 475.063492][ T50] Bluetooth: hci4: command tx timeout [ 475.106305][T18690] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3220'. [ 475.171407][T18695] netdevsim netdevsim3: Firmware load for './file0/file0/..' refused, path contains '..' component [ 475.240197][T18695] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3221'. [ 475.251710][T18695] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3221'. [ 475.301341][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 475.312590][ T9162] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 475.616219][T18718] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 475.705335][T18706] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 475.736264][T14887] team_slave_0: entered promiscuous mode [ 475.745513][T14887] team_slave_1: entered promiscuous mode [ 475.975900][ T9155] team0: left allmulticast mode [ 475.993599][ T9155] team_slave_0: left allmulticast mode [ 476.019115][ T9155] team_slave_1: left allmulticast mode [ 476.038590][ T9155] bridge1: left allmulticast mode [ 476.084149][ T9155] team0: left promiscuous mode [ 476.102248][ T9155] team_slave_0: left promiscuous mode [ 476.124917][ T9155] team_slave_1: left promiscuous mode [ 476.143263][ T9155] bridge1: left promiscuous mode [ 476.172193][ T9155] bridge0: port 3(team0) entered disabled state [ 476.221557][ T9155] bridge_slave_1: left allmulticast mode [ 476.233533][ T9155] bridge_slave_1: left promiscuous mode [ 476.247931][ T9155] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.590553][ T9155] bridge_slave_0: left allmulticast mode [ 476.601352][ T9155] bridge_slave_0: left promiscuous mode [ 476.630731][ T9155] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.657090][ C0] net_ratelimit: 8 callbacks suppressed [ 476.657110][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 476.678740][ T9155] pim6reg: left allmulticast mode [ 476.684247][ T9155] bridge0: left allmulticast mode [ 476.858281][T18779] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3235'. [ 477.063593][ T9155] team0: Port device bridge1 removed [ 477.098917][ T9155] bond1 (unregistering): (slave bridge3): Releasing backup interface [ 477.114958][ T9155] bond6 (unregistering): (slave bridge4): Releasing backup interface [ 477.134087][ T9155] bond13 (unregistering): (slave bridge5): Releasing active interface [ 477.142632][ T50] Bluetooth: hci4: command tx timeout [ 477.172272][ T9155] bond0 (unregistering): Released all slaves [ 477.189870][ T9155] bond1 (unregistering): Released all slaves [ 477.204132][ T9155] bond2 (unregistering): Released all slaves [ 477.226094][ T9155] bond3 (unregistering): Released all slaves [ 477.247256][ T9155] bond4 (unregistering): Released all slaves [ 477.261759][ T9155] bond5 (unregistering): Released all slaves [ 477.275373][ T9155] bond6 (unregistering): Released all slaves [ 477.296032][ T9155] bond7 (unregistering): Released all slaves [ 477.310136][ T9155] bond8 (unregistering): Released all slaves [ 477.327525][ T9155] bond9 (unregistering): (slave veth7): Releasing backup interface [ 477.336584][ T9155] bond9 (unregistering): Released all slaves [ 477.359849][ T9155] bond10 (unregistering): Released all slaves [ 477.373722][ T9155] bond11 (unregistering): Released all slaves [ 477.387807][ T9155] team0: Port device bond12 removed [ 477.394074][ T9155] bond12 (unregistering): Released all slaves [ 477.414190][ T9155] bond13 (unregistering): Released all slaves [ 477.462194][T18764] syzkaller0: entered promiscuous mode [ 477.477200][T18764] syzkaller0: entered allmulticast mode [ 477.499377][ T5291] 8021q: adding VLAN 0 to HW filter on device eth1 [ 477.697041][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 477.746299][T18789] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3238'. [ 477.755675][ T12] bond11: (slave bridge0): failed to get link speed/duplex [ 477.935136][ T9155] : left promiscuous mode [ 478.174900][ T9176] bond14: (slave bridge5): failed to get link speed/duplex [ 478.240169][ T9162] bond11: (slave bridge0): failed to get link speed/duplex [ 478.282875][T18808] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3239'. [ 478.292070][T18808] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3239'. [ 478.302697][T18808] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3239'. [ 478.326515][ T34] bond14: (slave bridge5): failed to get link speed/duplex [ 478.377157][ T9155] tipc: Left network mode [ 478.434254][T18830] netlink: 'syz.2.3242': attribute type 2 has an invalid length. [ 478.646989][ T9162] bond14: (slave bridge5): link status up again after 0 ms [ 478.687625][ T12] bond14: (slave bridge5): link status up again after 0 ms [ 478.712761][ T12] bond14: (slave bridge5): link status up again after 0 ms [ 478.721602][T18596] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.728964][T15791] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 478.747089][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 478.781296][T18596] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.798164][T18596] bridge_slave_0: entered allmulticast mode [ 478.814058][T18596] bridge_slave_0: entered promiscuous mode [ 478.832720][T18596] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.840869][T18596] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.848412][T18596] bridge_slave_1: entered allmulticast mode [ 478.868616][T18596] bridge_slave_1: entered promiscuous mode [ 479.161570][ T5291] 8021q: adding VLAN 0 to HW filter on device eth2 [ 479.175249][T18859] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3251'. [ 479.219409][T18596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 479.231531][ T50] Bluetooth: hci4: command tx timeout [ 479.262734][T18596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 479.375704][T18865] dvmrp0: entered allmulticast mode [ 479.438931][T18596] team0: Port device team_slave_0 added [ 479.525391][T18596] team0: Port device team_slave_1 added [ 479.661636][T18596] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 479.689623][T18596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 479.748369][T18596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 479.779333][T14887] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 479.887574][T18596] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 479.926082][T18596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 480.001157][T18596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 480.907639][T18596] hsr_slave_0: entered promiscuous mode [ 480.929016][T18596] hsr_slave_1: entered promiscuous mode [ 480.963998][T18596] debugfs: 'hsr0' already exists in 'hsr' [ 480.992920][T18596] Cannot create hsr debugfs directory [ 481.288471][T18941] netlink: 'syz.0.3262': attribute type 89 has an invalid length. [ 481.300600][ T5291] 8021q: adding VLAN 0 to HW filter on device eth3 [ 481.371992][T18923] lo speed is unknown, defaulting to 1000 [ 481.775767][T18923] lo speed is unknown, defaulting to 1000 [ 481.857116][ C0] net_ratelimit: 31 callbacks suppressed [ 481.857136][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 481.967726][ T9162] bond14: (slave bridge5): link status up again after 0 ms [ 482.010490][ T9162] bond14: (slave bridge5): link status up again after 0 ms [ 482.028343][T14887] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 482.046281][ T9163] bond14: (slave bridge5): link status up again after 0 ms [ 482.079295][ T9163] bond14: (slave bridge5): link status up again after 0 ms [ 482.117563][ T9164] bond14: (slave bridge5): link status up again after 0 ms [ 482.148066][ T9164] bond14: (slave bridge5): link status up again after 0 ms [ 482.177826][ T9164] bond14: (slave bridge5): link status up again after 0 ms [ 482.207763][ T9164] bond14: (slave bridge5): link status up again after 0 ms [ 482.257562][ T34] bond14: (slave bridge5): link status up again after 0 ms [ 482.344052][T18950] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 482.546091][T18964] __nla_validate_parse: 1 callbacks suppressed [ 482.546113][T18964] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3268'. [ 482.708913][T18965] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.716403][T18965] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.731578][T18965] team_slave_0: left promiscuous mode [ 482.741183][T18965] team_slave_1: left promiscuous mode [ 482.793216][T18965] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 482.811534][T18965] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 482.961657][ T9155] hsr_slave_0: left promiscuous mode [ 482.971281][ T9155] hsr_slave_1: left promiscuous mode [ 483.057195][T15791] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 483.070763][ T9155] veth1_macvtap: left promiscuous mode [ 483.088759][ T9155] veth0_macvtap: left promiscuous mode [ 483.385957][T18994] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3272'. [ 483.725692][ T9155] team0 (unregistering): Port device team_slave_1 removed [ 483.745185][ T9155] team0 (unregistering): Port device team_slave_0 removed [ 483.844945][ T9168] smc: removing ib device syz0 [ 483.925610][ T9168] smbdirect: ib_dev[syz0] removed [ 483.940811][ T9162] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.964715][ T9162] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.975489][ T9162] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.111056][T14885] lo speed is unknown, defaulting to 1000 [ 484.118196][ T5291] 8021q: adding VLAN 0 to HW filter on device eth4 [ 484.127481][T14885] syz0: Port: 1 Link DOWN [ 484.143233][ T9162] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.147607][T19004] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3274'. [ 484.175184][T19005] netlink: 'syz.2.3273': attribute type 11 has an invalid length. [ 484.393412][T19011] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3275'. [ 485.021135][T19028] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3277'. [ 486.231050][T19070] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 486.295327][T19063] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3285'. [ 486.419951][T19080] netlink: 'syz.4.3290': attribute type 10 has an invalid length. [ 486.644413][T19087] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3291'. [ 486.713334][T18596] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 486.766100][T18596] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 486.790389][T18596] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 486.824258][T18596] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 486.841970][T19096] FAULT_INJECTION: forcing a failure. [ 486.841970][T19096] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 486.857655][T18596] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 486.894829][T19096] CPU: 1 UID: 0 PID: 19096 Comm: syz.4.3294 Not tainted syzkaller #0 PREEMPT(full) [ 486.894855][T19096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 486.894866][T19096] Call Trace: [ 486.894872][T19096] [ 486.894893][T19096] dump_stack_lvl+0xe8/0x150 [ 486.894918][T19096] should_fail_ex+0x40c/0x560 [ 486.894958][T19096] _copy_from_user+0x2d/0xb0 [ 486.894979][T19096] ___sys_sendmsg+0x1c6/0x360 [ 486.894997][T19096] ? __lock_acquire+0x683/0x2cd0 [ 486.895017][T19096] ? __pfx____sys_sendmsg+0x10/0x10 [ 486.895067][T19096] ? __fget_files+0x2a/0x420 [ 486.895085][T19096] ? __fget_files+0x3a2/0x420 [ 486.895112][T19096] __x64_sys_sendmsg+0x1bd/0x2a0 [ 486.895133][T19096] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 486.895160][T19096] ? __pfx_ksys_write+0x10/0x10 [ 486.895190][T19096] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.895208][T19096] do_syscall_64+0x174/0x580 [ 486.895225][T19096] ? trace_irq_disable+0x3b/0x140 [ 486.895247][T19096] ? clear_bhb_loop+0x40/0x90 [ 486.895267][T19096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.895284][T19096] RIP: 0033:0x7f181459ce59 [ 486.895301][T19096] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 486.895315][T19096] RSP: 002b:00007f18153e4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 486.895334][T19096] RAX: ffffffffffffffda RBX: 00007f1814815fa0 RCX: 00007f181459ce59 [ 486.895344][T19096] RDX: 0000000000048884 RSI: 0000200000000080 RDI: 0000000000000003 [ 486.895353][T19096] RBP: 00007f18153e4090 R08: 0000000000000000 R09: 0000000000000000 [ 486.895362][T19096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 486.895372][T19096] R13: 00007f1814816038 R14: 00007f1814815fa0 R15: 00007ffeabf6b718 [ 486.895400][T19096] [ 487.057358][ C0] net_ratelimit: 110 callbacks suppressed [ 487.057376][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 487.175654][T18596] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 487.252552][T19108] Cannot find del_set index 14804 as target [ 487.384091][T19099] 8021q: adding VLAN 0 to HW filter on device bond0 [ 487.425778][T19099] 8021q: adding VLAN 0 to HW filter on device team0 [ 487.448140][T19099] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 487.556561][T19099] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 487.580223][T19099] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 487.633698][T19099] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 487.679207][T19099] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 487.755105][T19099] veth1_vlan: left promiscuous mode [ 487.778729][T19099] veth0_vlan: left promiscuous mode [ 487.788420][T19099] veth0_vlan: entered promiscuous mode [ 487.812534][T19099] veth1_vlan: entered promiscuous mode [ 487.825314][T19099] veth1_macvtap: left promiscuous mode [ 487.833215][T19099] veth0_macvtap: left promiscuous mode [ 487.870614][T19099] veth0_macvtap: entered promiscuous mode [ 487.878351][T19099] veth1_macvtap: entered promiscuous mode [ 487.937608][T19099] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 487.975680][T19099] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 488.011911][T19099] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 488.035258][T19099] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 488.076616][T19099] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 488.095886][T19099] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 488.108085][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 488.244672][ T998] team_slave_0: entered promiscuous mode [ 488.250474][ T998] team_slave_1: entered promiscuous mode [ 488.277360][ T34] bond14: (slave bridge5): failed to get link speed/duplex [ 488.285937][T18596] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 488.299010][T18596] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 488.310821][T19113] tipc: Enabled bearer , priority 0 [ 488.341376][ T9161] bridge0: port 1(bridge_slave_0) entered blocking state [ 488.348652][ T9161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 488.359397][ T9161] bridge0: port 2(bridge_slave_1) entered blocking state [ 488.366691][ T9161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 488.445179][T19117] syzkaller0: entered promiscuous mode [ 488.451506][T19117] syzkaller0: entered allmulticast mode [ 488.463036][ T9172] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.497478][ T9184] bond14: (slave bridge5): failed to get link speed/duplex [ 488.603907][ T9172] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.667954][T19117] tipc: Resetting bearer [ 488.799641][T19117] tipc: Disabling bearer [ 489.012592][ T9172] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.035574][ T9172] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.128723][T19171] veth15: entered allmulticast mode [ 489.137121][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 489.430616][ T9155] IPVS: stop unused estimator thread 0... [ 489.457546][ T9184] bond14: (slave bridge5): failed to get link speed/duplex [ 489.916092][T19216] netlink: 180 bytes leftover after parsing attributes in process `syz.4.3309'. [ 489.945782][T19218] netlink: 180 bytes leftover after parsing attributes in process `syz.4.3309'. [ 489.974818][T19222] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3310'. [ 490.058841][ T9161] bond14: (slave bridge5): link status up again after 0 ms [ 490.107316][ T9172] bond14: (slave bridge5): link status up again after 0 ms [ 490.125404][T15796] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 490.132529][ T9172] bond14: (slave bridge5): failed to get link speed/duplex [ 490.177057][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 490.257996][T19227] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3311'. [ 490.273068][T14885] IPVS: starting estimator thread 0... [ 490.423218][T19228] IPVS: using max 30 ests per chain, 72000 per kthread [ 490.493972][T18596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 490.501802][ T998] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 490.602098][T18596] 8021q: adding VLAN 0 to HW filter on device team0 [ 490.650153][ T9161] bridge0: port 1(bridge_slave_0) entered blocking state [ 490.657402][ T9161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 490.725522][ T9172] bridge0: port 2(bridge_slave_1) entered blocking state [ 490.733126][ T9172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 491.360669][T19269] netlink: 'syz.3.3318': attribute type 4 has an invalid length. [ 491.404428][T19269] netlink: 'syz.3.3318': attribute type 4 has an invalid length. [ 491.483689][T19269] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3318'. [ 491.672076][T19282] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3320'. [ 491.901880][T19286] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3321'. [ 492.136098][T19293] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3323'. [ 492.178734][ T9161] net_ratelimit: 22 callbacks suppressed [ 492.178751][ T9161] bond11: (slave bridge0): failed to get link speed/duplex [ 492.247298][ T34] bond14: (slave bridge5): failed to get link speed/duplex [ 492.257179][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 492.356928][ T9172] bond11: (slave bridge0): failed to get link speed/duplex [ 492.360274][T19300] sctp: [Deprecated]: syz.2.3326 (pid 19300) Use of int in max_burst socket option. [ 492.360274][T19300] Use struct sctp_assoc_value instead [ 492.380410][T19298] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 492.438690][ T9172] bond14: (slave bridge5): failed to get link speed/duplex [ 492.446169][T19298] netlink: 'syz.0.3325': attribute type 3 has an invalid length. [ 492.455931][T19298] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3325'. [ 492.477331][ T9161] bond11: (slave bridge0): failed to get link speed/duplex [ 492.559577][ T9172] bond14: (slave bridge5): failed to get link speed/duplex [ 492.597127][ T9172] bond11: (slave bridge0): failed to get link speed/duplex [ 492.632989][T18596] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 492.666358][T19313] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3329'. [ 492.727017][ T9172] bond11: (slave bridge0): failed to get link speed/duplex [ 492.859635][T18596] veth0_vlan: entered promiscuous mode [ 492.900188][T18596] veth1_vlan: entered promiscuous mode [ 492.982743][T19329] xt_hashlimit: size too large, truncated to 1048576 [ 493.005454][T18596] veth0_macvtap: entered promiscuous mode [ 493.040008][T18596] veth1_macvtap: entered promiscuous mode [ 493.097767][T18596] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 493.145841][T18596] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 493.192693][ T9172] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.226157][ T9168] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.269113][ T9168] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.306378][ T9168] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.583166][ T9162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 493.607251][ T9162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 493.725760][T19356] bridge2: port 1(veth7) entered blocking state [ 493.734087][T19356] bridge2: port 1(veth7) entered disabled state [ 493.741617][T19356] veth7: entered allmulticast mode [ 493.750556][T19356] veth7: entered promiscuous mode [ 493.760426][ T9161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 493.773975][T19363] bridge2: port 2(veth0_to_bond) entered blocking state [ 493.777726][ T9161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 493.782210][T19363] bridge2: port 2(veth0_to_bond) entered disabled state [ 493.796270][T19363] veth0_to_bond: entered allmulticast mode [ 493.816487][T19363] veth0_to_bond: entered promiscuous mode [ 493.901631][T19356] bridge2: port 3(veth9) entered blocking state [ 493.960251][T19356] bridge2: port 3(veth9) entered disabled state [ 493.963644][T14887] IPVS: starting estimator thread 0... [ 493.978741][T19356] veth9: entered allmulticast mode [ 493.999749][T19356] veth9: entered promiscuous mode [ 494.078142][T19370] IPVS: using max 41 ests per chain, 98400 per kthread [ 494.932921][T19417] __nla_validate_parse: 6 callbacks suppressed [ 494.932942][T19417] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3357'. [ 494.950732][ T9161] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 494.968135][ T5640] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 494.984657][ T9172] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 494.998763][T19417] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3357'. [ 495.008309][ T5640] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 495.021017][ T5640] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 495.024514][ T9172] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 495.051345][T19421] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3357'. [ 495.074171][ T5640] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 495.075565][ T9172] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 495.094826][ T5640] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 495.138373][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 495.332864][T19428] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3359'. [ 495.558320][T19439] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 496.034637][ T9161] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 496.108828][ T9161] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.128024][T19467] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3366'. [ 496.188602][T19455] netlink: 'syz.4.3363': attribute type 29 has an invalid length. [ 496.436236][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 496.472212][T19475] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3368'. [ 496.472853][ T9161] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 496.509204][ T9161] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.660285][T19475] bond1: entered promiscuous mode [ 496.681732][T19475] 8021q: adding VLAN 0 to HW filter on device bond1 [ 496.759403][T19419] lo speed is unknown, defaulting to 1000 [ 496.834489][ T9161] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 496.846125][ T9161] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.998618][ T9161] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 497.011493][ T9161] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.214518][T19505] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3373'. [ 497.224271][ T50] Bluetooth: hci3: command tx timeout [ 497.457184][ C0] net_ratelimit: 54 callbacks suppressed [ 497.457202][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 497.488785][ T9161] team0: left promiscuous mode [ 497.495309][ T9161] team_slave_0: left promiscuous mode [ 497.504895][ T9161] team_slave_1: left promiscuous mode [ 497.513050][ T9161] bridge3: left promiscuous mode [ 497.519064][ T9161] bridge4: left promiscuous mode [ 497.524684][ T9161] bridge0: port 2(team0) entered disabled state [ 497.535895][ T9161] bridge_slave_0: left allmulticast mode [ 497.547998][ T9161] bridge_slave_0: left promiscuous mode [ 497.555228][ T9161] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.670856][ T9161] pim6reg: left allmulticast mode [ 497.983642][ T30] audit: type=1107 audit(1781706679.404:15): pid=19526 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 498.507150][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 498.665532][ T9161] bond8 (unregistering): (slave ip6gre1): Releasing backup interface [ 498.738729][T19565] openvswitch: netlink: IP tunnel dst address not specified [ 498.844149][ T9161] gretap0 (unregistering): left promiscuous mode [ 498.902247][ T9161] bond1 (unregistering): (slave geneve2): Releasing active interface [ 498.983253][ T9161] team0: Port device bridge3 removed [ 498.992892][ T9161] team0: Port device bridge4 removed [ 499.002536][ T9161] bond14 (unregistering): (slave bridge5): Removing an active aggregator [ 499.013644][ T9161] bond14 (unregistering): (slave bridge5): Releasing backup interface [ 499.025262][ T9161] bond14 (unregistering): (slave bridge5): the permanent HWaddr of slave - aa:0c:9f:6b:21:e8 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 499.044227][ T9161] bridge5 (unregistering): left allmulticast mode [ 499.055264][ T9161] bond14 (unregistering): (slave bridge6): Releasing backup interface [ 499.064677][ T9161] bridge6 (unregistering): left allmulticast mode [ 499.218960][ T9161] bond22 (unregistering): (slave bridge24): Releasing active interface [ 499.272027][ T9161] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 499.283133][ T9161] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 499.297738][ T50] Bluetooth: hci3: command 0x041b tx timeout [ 499.313655][ T9161] bond0 (unregistering): Released all slaves [ 499.326491][ T9161] bond1 (unregistering): Released all slaves [ 499.345614][ T9161] bond2 (unregistering): Released all slaves [ 499.362047][ T9161] bond4 (unregistering): Released all slaves [ 499.376078][ T9161] bond3 (unregistering): Released all slaves [ 499.389949][ T9161] bond5 (unregistering): Released all slaves [ 499.414290][ T9161] bond6 (unregistering): Released all slaves [ 499.431545][ T9161] bond7 (unregistering): Released all slaves [ 499.445540][ T9161] bond8 (unregistering): Released all slaves [ 499.461196][ T9161] bond9 (unregistering): Released all slaves [ 499.474878][ T9161] bond10 (unregistering): Released all slaves [ 499.497484][ T9161] bond11 (unregistering): Released all slaves [ 499.513603][ T9161] bond12 (unregistering): Released all slaves [ 499.529194][ T9161] bond13 (unregistering): Released all slaves [ 499.550106][ T9161] bond14 (unregistering): Released all slaves [ 499.563647][ T9161] bond15 (unregistering): Released all slaves [ 499.577639][ T9161] bond16 (unregistering): Released all slaves [ 499.591734][ T9161] bond17 (unregistering): Released all slaves [ 499.610891][ T9161] bond18 (unregistering): Released all slaves [ 499.630072][ T9161] bond19 (unregistering): (slave batadv1): Releasing backup interface [ 499.641479][ T9161] bond19 (unregistering): Released all slaves [ 499.655669][ T9161] bond20 (unregistering): Released all slaves [ 499.669448][ T9161] bond21 (unregistering): Released all slaves [ 499.682994][ T9161] bond22 (unregistering): Released all slaves [ 499.703271][ T9161] bond23 (unregistering): Released all slaves [ 499.836287][ T9172] bond11: (slave bridge0): failed to get link speed/duplex [ 500.170164][ T9161] hmó3)ó€: left promiscuous mode [ 500.427556][ T9161] tipc: Disabling bearer [ 500.440810][ T9161] tipc: Disabling bearer [ 500.559145][T19594] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3394'. [ 500.652539][ T30] audit: type=1107 audit(1781706682.074:16): pid=19576 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 500.687235][ T9161] tipc: Left network mode [ 501.149397][T19594] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 501.241221][T19594] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 501.290885][T19594] bond0 (unregistering): Released all slaves [ 501.346156][T19419] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.354838][T19419] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.362755][T19419] bridge_slave_0: entered allmulticast mode [ 501.370917][T19419] bridge_slave_0: entered promiscuous mode [ 501.383565][T19419] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.395002][ T5640] Bluetooth: hci3: command 0x041b tx timeout [ 501.402779][T19419] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.410544][T19419] bridge_slave_1: entered allmulticast mode [ 501.418537][T19419] bridge_slave_1: entered promiscuous mode [ 501.437493][ T9172] bond11: (slave bridge0): failed to get link speed/duplex [ 501.571184][T19606] veth0: entered promiscuous mode [ 501.587997][T19608] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 501.726897][ T9168] bond11: (slave bridge0): failed to get link speed/duplex [ 501.771861][T19419] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 501.852496][T19604] veth0: left promiscuous mode [ 501.907921][T19419] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 502.072334][T19619] syzkaller0: entered promiscuous mode [ 502.087357][T19619] syzkaller0: entered allmulticast mode [ 502.100692][T19643] openvswitch: netlink: VXLAN extension message has 12 unknown bytes. [ 503.483360][ T5640] Bluetooth: hci3: command 0x041b tx timeout [ 505.547602][ T5640] Bluetooth: hci3: command 0x041b tx timeout [ 505.762468][T19419] team0: Port device team_slave_0 added [ 505.842446][ T5291] 8021q: adding VLAN 0 to HW filter on device eth1 [ 505.893471][T19419] team0: Port device team_slave_1 added [ 506.376304][T19419] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 506.391785][T19419] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 506.459397][T19419] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 506.743891][T19680] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3412'. [ 506.764288][T19419] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 506.795704][T19419] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 506.871805][T19419] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 506.974852][ T9172] bond11: (slave bridge0): failed to get link speed/duplex [ 507.039882][T19685] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3414'. [ 507.186890][ T9184] bond11: (slave bridge0): failed to get link speed/duplex [ 507.299172][ T9184] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 507.299180][ T34] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 507.329993][ T9161] veth1_to_team: left promiscuous mode [ 507.399590][ T9161] veth1_vlan: left promiscuous mode [ 507.419025][ T9161] veth0_vlan: left promiscuous mode [ 508.276589][ T9161] team_slave_1 (unregistering): left allmulticast mode [ 508.286388][ T9161] team0 (unregistering): Port device team_slave_1 removed [ 508.305114][ T9161] team_slave_0 (unregistering): left allmulticast mode [ 508.317257][ T9161] team0 (unregistering): Port device team_slave_0 removed [ 508.457323][T19419] hsr_slave_0: entered promiscuous mode [ 508.463846][T19419] hsr_slave_1: entered promiscuous mode [ 508.470247][T19419] debugfs: 'hsr0' already exists in 'hsr' [ 508.475999][T19419] Cannot create hsr debugfs directory [ 508.487020][ T9184] bond11: (slave bridge0): failed to get link speed/duplex [ 508.494722][T19707] tipc: Enabled bearer , priority 0 [ 508.509377][T19711] syzkaller0: entered promiscuous mode [ 508.514988][T19711] syzkaller0: entered allmulticast mode [ 508.546266][T19714] tipc: Resetting bearer [ 508.558208][ T5291] 8021q: adding VLAN 0 to HW filter on device eth2 [ 508.694557][T19714] tipc: Resetting bearer [ 508.729029][T19714] tipc: Disabling bearer [ 509.127380][ T34] bond11: (slave bridge0): failed to get link speed/duplex [ 509.188904][T19767] macsec1: entered allmulticast mode [ 509.208410][T19767] dummy0: entered allmulticast mode [ 509.231706][T19767] dummy0: entered promiscuous mode [ 509.245412][T19776] netlink: 'syz.1.3426': attribute type 9 has an invalid length. [ 509.293611][T19767] dummy0: left allmulticast mode [ 509.333219][T14885] dummy0: left promiscuous mode [ 510.185149][T19817] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3432'. [ 513.392158][ T5291] 8021q: adding VLAN 0 to HW filter on device eth3 [ 513.415937][ T9161] IPVS: stop unused estimator thread 0... [ 513.508085][ T9168] bond11: (slave bridge0): failed to get link speed/duplex [ 513.735677][T19838] netlink: 'syz.2.3438': attribute type 12 has an invalid length. [ 513.781224][ T9168] bond11: (slave bridge0): failed to get link speed/duplex [ 513.920834][T19845] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3439'. [ 513.974938][T19851] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3442'. [ 514.411212][T19871] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3444'. [ 514.472541][T19874] netlink: 180692 bytes leftover after parsing attributes in process `syz.3.3444'. [ 514.585374][T19861] veth3: entered allmulticast mode [ 514.636347][T19861] bond1: (slave veth3): Enslaving as an active interface with an up link [ 515.007284][ T9162] bond11: (slave bridge0): failed to get link speed/duplex [ 515.049849][T19893] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3447'. [ 515.215648][T19899] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3449'. [ 515.247287][ T9168] bond11: (slave bridge0): failed to get link speed/duplex [ 515.257915][T19899] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3449'. [ 515.274202][T19899] netlink: 'syz.4.3449': attribute type 10 has an invalid length. [ 515.379750][ T9162] bond11: (slave bridge0): failed to get link speed/duplex [ 515.453587][T19910] netlink: 'syz.3.3452': attribute type 1 has an invalid length. [ 515.517543][ T9184] bond11: (slave bridge0): failed to get link speed/duplex [ 515.521895][T19911] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3453'. [ 515.799419][ T9184] bond11: (slave bridge0): failed to get link speed/duplex [ 516.076499][T19935] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3460'. [ 516.188723][T19931] syzkaller1: entered promiscuous mode [ 516.213396][T19931] syzkaller1: entered allmulticast mode [ 516.251978][T19419] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 516.306436][T19419] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 516.345134][T19419] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 516.381415][T19419] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 516.459220][T19419] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 516.489740][T19952] siw: device registration error -23 [ 516.509425][T19419] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 516.519350][T19952] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3463'. [ 516.538879][T19419] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 516.562206][T19419] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 516.596364][T19948] netlink: 'syz.1.3462': attribute type 3 has an invalid length. [ 516.619006][T19948] netlink: 'syz.1.3462': attribute type 3 has an invalid length. [ 516.870803][T19980] netlink: 'syz.2.3468': attribute type 4 has an invalid length. [ 516.887794][ T9184] bond11: (slave bridge0): failed to get link speed/duplex [ 516.909645][ T9162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 516.951280][ T9162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 516.974247][T19989] nbd: couldn't find a device at index 524288 [ 517.150414][ T9155] bond11: (slave bridge0): failed to get link speed/duplex [ 517.286974][ T12] bond11: (slave bridge0): failed to get link speed/duplex [ 517.374125][T19419] 8021q: adding VLAN 0 to HW filter on device bond0 [ 517.424155][T19419] 8021q: adding VLAN 0 to HW filter on device team0 [ 517.467088][ T9161] bridge0: port 1(bridge_slave_0) entered blocking state [ 517.474482][ T9161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 517.533626][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 517.540905][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 517.888597][T20024] netlink: 'syz.2.3476': attribute type 14 has an invalid length. [ 518.540956][ T9162] net_ratelimit: 4 callbacks suppressed [ 518.540974][ T9162] bond11: (slave bridge0): failed to get link speed/duplex [ 518.742870][ T9155] bond11: (slave bridge0): failed to get link speed/duplex [ 518.848361][T20070] xt_hashlimit: size too large, truncated to 1048576 [ 518.900134][ T9161] bond11: (slave bridge0): failed to get link speed/duplex [ 519.037042][ T9155] bond11: (slave bridge0): failed to get link speed/duplex [ 519.089255][T20086] __nla_validate_parse: 6 callbacks suppressed [ 519.089275][T20086] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3489'. [ 519.113238][T20087] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.3488'. [ 519.176967][ T9172] bond11: (slave bridge0): failed to get link speed/duplex [ 519.217908][T20086] can: request_module (can-proto-0) failed. [ 519.315200][T20093] veth11: entered promiscuous mode [ 519.326368][T20099] netlink: 12700 bytes leftover after parsing attributes in process `syz.2.3488'. [ 519.341170][ T9161] bond11: (slave bridge0): failed to get link speed/duplex [ 519.466114][ T12] bond11: (slave bridge0): failed to get link speed/duplex [ 519.565706][T19419] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 519.639941][ T9162] bond11: (slave bridge0): failed to get link speed/duplex [ 519.752308][T19419] veth0_vlan: entered promiscuous mode [ 519.824333][T19419] veth1_vlan: entered promiscuous mode [ 519.866395][T20121] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3494'. [ 519.899772][T20121] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 519.975975][ T9161] tipc: Resetting bearer [ 520.088072][ T9161] bond11: (slave bridge0): failed to get link speed/duplex [ 520.396591][T20141] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3498'. [ 520.511089][T20127] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.519025][T20127] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.588022][T20146] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3500'. [ 520.733062][T20127] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 520.766281][T20127] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 520.942337][ T34] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.973537][ T34] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.009934][ T34] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.071655][ T34] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.114886][T19419] veth0_macvtap: entered promiscuous mode [ 521.187657][T19419] veth1_macvtap: entered promiscuous mode [ 521.237330][T20159] tipc: Can't bind to reserved service type 1 [ 521.278185][T20161] netlink: 'syz.1.3505': attribute type 1 has an invalid length. [ 521.360508][T19419] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 521.400345][T19419] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 521.450845][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.479821][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.529577][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.552290][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.598134][T20174] dummy0: entered promiscuous mode [ 521.605221][T20175] IPVS: sync thread started: state = MASTER, mcast_ifn = macsec0, syncid = 3, id = 0 [ 521.618847][T20173] dummy0: left promiscuous mode [ 521.810086][ T9162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 521.845336][ T9162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 521.919819][T20177] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3511'. [ 521.951295][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 521.974413][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 522.218860][T20194] netlink: 'syz.0.3355': attribute type 1 has an invalid length. [ 522.244998][T20194] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3355'. [ 522.245068][T20197] netlink: 'syz.1.3517': attribute type 1 has an invalid length. [ 522.292109][T20199] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3355'. [ 522.303001][T20199] block nbd4: Unsupported socket: should be TCP or UNIX. [ 522.332454][T20197] C: renamed from veth1_to_team (while UP) [ 522.350088][T20197] netlink: 'syz.1.3517': attribute type 2 has an invalid length. [ 522.367050][T20197] netlink: 116 bytes leftover after parsing attributes in process `syz.1.3517'. [ 522.392495][T20202] bridge0: port 1(bridge_slave_0) entered disabled state [ 523.334763][T20269] Bluetooth: MGMT ver 1.23 [ 523.637974][ T9164] net_ratelimit: 20 callbacks suppressed [ 523.637995][ T9164] bond11: (slave bridge0): failed to get link speed/duplex [ 523.709405][T20290] syzkaller0: entered promiscuous mode [ 523.715242][T20290] syzkaller0: entered allmulticast mode [ 523.838780][ T34] bond11: (slave bridge0): failed to get link speed/duplex [ 523.910110][T20297] x_tables: duplicate underflow at hook 1 [ 523.967911][ T34] bond11: (slave bridge0): failed to get link speed/duplex [ 524.023729][T20300] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 524.058947][T20300] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 524.085209][T20303] netlink: 'syz.2.3545': attribute type 1 has an invalid length. [ 524.175443][T20303] 8021q: adding VLAN 0 to HW filter on device bond2 [ 524.264469][T20309] vlan2: entered allmulticast mode [ 524.299922][T20309] bond2: entered allmulticast mode [ 524.346904][ T9155] bond11: (slave bridge0): failed to get link speed/duplex [ 524.478497][ T9155] bond11: (slave bridge0): failed to get link speed/duplex [ 524.535085][T20323] __nla_validate_parse: 9 callbacks suppressed [ 524.535107][T20323] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3550'. [ 524.592807][T20325] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3551'. [ 524.608218][ T9155] bond11: (slave bridge0): failed to get link speed/duplex [ 524.727429][ T9155] bond11: (slave bridge0): failed to get link speed/duplex [ 524.853282][T20335] bridge0: port 3(syz_tun) entered blocking state [ 524.872431][T20335] bridge0: port 3(syz_tun) entered disabled state [ 524.908125][T20335] syz_tun: entered allmulticast mode [ 524.951350][T20335] syz_tun: entered promiscuous mode [ 524.980564][T20335] bridge0: port 3(syz_tun) entered blocking state [ 524.987257][T20335] bridge0: port 3(syz_tun) entered forwarding state [ 525.068152][ T9155] bond11: (slave bridge0): failed to get link speed/duplex [ 525.190994][ T9172] bond11: (slave bridge0): failed to get link speed/duplex [ 525.260412][T20353] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3560'. [ 525.289444][T20353] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3560'. [ 525.317280][ T34] bond11: (slave bridge0): failed to get link speed/duplex [ 525.675584][T20373] netlink: 'syz.2.3565': attribute type 29 has an invalid length. [ 525.712889][T20375] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3566'. [ 525.730970][T20373] netlink: 'syz.2.3565': attribute type 4 has an invalid length. [ 525.829138][T20350] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3559'. [ 525.973245][T20380] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3567'. [ 526.021433][T20380] netlink: 'syz.3.3567': attribute type 10 has an invalid length. [ 526.042851][T20380] netlink: 228 bytes leftover after parsing attributes in process `syz.3.3567'. [ 526.145471][T20388] netlink: 480 bytes leftover after parsing attributes in process `syz.3.3572'. [ 526.163936][T20388] netlink: 480 bytes leftover after parsing attributes in process `syz.3.3572'. [ 526.375699][T20406] netlink: 'syz.0.3576': attribute type 1 has an invalid length. [ 526.679856][T20435] netlink: 'syz.4.3583': attribute type 3 has an invalid length. [ 526.716675][T20435] netlink: 'syz.4.3583': attribute type 3 has an invalid length. [ 526.895895][T20443] netlink: 'syz.4.3587': attribute type 6 has an invalid length. [ 526.964166][T20443] netlink: 'syz.4.3587': attribute type 1 has an invalid length. [ 526.988678][T20443] netlink: 'syz.4.3587': attribute type 2 has an invalid length. [ 527.253504][T20460] IPv6: Can't replace route, no match found [ 527.262919][T20456] syzkaller0: entered promiscuous mode [ 527.275021][T20456] syzkaller0: entered allmulticast mode [ 531.107268][ T9162] net_ratelimit: 15 callbacks suppressed [ 531.107289][ T9162] bond11: (slave bridge0): failed to get link speed/duplex [ 531.202059][T20483] __nla_validate_parse: 7 callbacks suppressed [ 531.202077][T20483] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3599'. [ 531.257497][T20488] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3601'. [ 531.258281][ T9162] bond11: (slave bridge0): failed to get link speed/duplex [ 531.315409][T20489] ip_vti0: entered promiscuous mode [ 531.330865][T20491] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3600'. [ 531.342228][T20489] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3602'. [ 531.408594][ T9155] bond11: (slave bridge0): failed to get link speed/duplex [ 531.528289][ T9161] bond11: (slave bridge0): failed to get link speed/duplex [ 531.588490][T20511] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 531.642302][T20511] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3606'. [ 531.657274][ T9155] bond11: (slave bridge0): failed to get link speed/duplex [ 531.777332][ T9162] bond11: (slave bridge0): failed to get link speed/duplex [ 531.897175][ T9172] bond11: (slave bridge0): failed to get link speed/duplex [ 531.970496][T20534] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3613'. [ 531.970513][T20533] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3613'. [ 532.028870][ T9162] bond11: (slave bridge0): failed to get link speed/duplex [ 532.046417][T20535] tipc: Enabled bearer , priority 0 [ 532.061563][T20534] netlink: 'syz.0.3613': attribute type 23 has an invalid length. [ 532.074199][T20540] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3615'. [ 532.093782][T20536] syzkaller0: entered promiscuous mode [ 532.106630][T20536] syzkaller0: entered allmulticast mode [ 532.120976][T20536] tipc: Resetting bearer [ 532.252091][T20544] netlink: 'syz.1.3616': attribute type 2 has an invalid length. [ 532.283294][ T12] tipc: Resetting bearer [ 532.292024][T20532] tipc: Resetting bearer [ 533.196169][T20560] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 533.205494][T20560] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 535.685695][T20532] tipc: Disabling bearer [ 535.706094][T20558] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 535.728627][ T12] bond11: (slave bridge0): failed to get link speed/duplex [ 535.857242][T20570] netlink: 220 bytes leftover after parsing attributes in process `syz.4.3621'. [ 535.869141][T20570] netlink: 'syz.4.3621': attribute type 2 has an invalid length. [ 535.935583][T20578] netlink: 'syz.3.3623': attribute type 1 has an invalid length. [ 535.961870][T20578] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3623'. [ 536.197779][T20592] netlink: 'syz.2.3629': attribute type 3 has an invalid length. [ 536.218020][ T34] net_ratelimit: 3 callbacks suppressed [ 536.218040][ T34] bond11: (slave bridge0): failed to get link speed/duplex [ 536.250923][T20592] __nla_validate_parse: 4 callbacks suppressed [ 536.250940][T20592] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3629'. [ 536.478393][ T9155] bond11: (slave bridge0): failed to get link speed/duplex [ 536.931275][T20617] bridge0: port 1(bridge_slave_0) entered blocking state [ 536.938563][T20617] bridge0: port 1(bridge_slave_0) entered forwarding state [ 536.994478][T20633] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3637'. [ 537.018159][T20633] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3637'. [ 537.042724][T20633] netlink: 'syz.1.3637': attribute type 9 has an invalid length. [ 537.049575][T20634] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3638'. [ 537.056205][T20633] netlink: 212340 bytes leftover after parsing attributes in process `syz.1.3637'. [ 537.082949][T20633] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 537.289884][ T9168] bond11: (slave bridge0): failed to get link speed/duplex [ 537.420560][ T9155] bond11: (slave bridge0): failed to get link speed/duplex [ 537.504547][T20637] lo speed is unknown, defaulting to 1000 [ 537.727543][ T9168] bond11: (slave bridge0): failed to get link speed/duplex [ 537.840503][T20655] netlink: 288 bytes leftover after parsing attributes in process `syz.1.3644'. [ 537.847216][ T9168] bond11: (slave bridge0): failed to get link speed/duplex [ 538.196977][ T9168] bond11: (slave bridge0): failed to get link speed/duplex [ 538.409365][ T9155] bond11: (slave bridge0): failed to get link speed/duplex [ 538.452186][T20662] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3646'. [ 538.498644][T20662] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3646'. [ 538.523290][T20662] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3646'. [ 538.790513][T20666] lo speed is unknown, defaulting to 1000 [ 538.979233][T20675] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3650'. [ 539.137541][ T9168] bond11: (slave bridge0): failed to get link speed/duplex [ 539.361362][ T34] bond11: (slave bridge0): failed to get link speed/duplex [ 539.502928][T20694] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 539.884927][T20717] FAULT_INJECTION: forcing a failure. [ 539.884927][T20717] name failslab, interval 1, probability 0, space 0, times 0 [ 539.912459][T20717] CPU: 0 UID: 0 PID: 20717 Comm: syz.1.3664 Not tainted syzkaller #0 PREEMPT(full) [ 539.912503][T20717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 539.912520][T20717] Call Trace: [ 539.912528][T20717] [ 539.912537][T20717] dump_stack_lvl+0xe8/0x150 [ 539.912567][T20717] should_fail_ex+0x40c/0x560 [ 539.912602][T20717] should_failslab+0xa8/0x100 [ 539.912631][T20717] __kmalloc_noprof+0xe8/0x750 [ 539.912655][T20717] ? tomoyo_realpath_from_path+0xef/0x640 [ 539.912807][T20717] tomoyo_realpath_from_path+0xef/0x640 [ 539.912846][T20717] tomoyo_check_open_permission+0x229/0x470 [ 539.912869][T20717] ? tomoyo_check_open_permission+0x1d3/0x470 [ 539.912891][T20717] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 539.912915][T20717] ? __asan_memset+0x22/0x50 [ 539.912961][T20717] ? lockref_get+0x15/0x60 [ 539.913081][T20717] ? tomoyo_file_open+0x163/0x220 [ 539.913104][T20717] security_file_open+0xa9/0x240 [ 539.913182][T20717] do_dentry_open+0x4a0/0x1380 [ 539.913215][T20717] vfs_open+0x3b/0x340 [ 539.913232][T20717] ? path_openat+0x2e23/0x3890 [ 539.913258][T20717] path_openat+0x2e3b/0x3890 [ 539.913279][T20717] ? arch_stack_walk+0xfb/0x150 [ 539.913321][T20717] ? do_getname+0x2e/0x250 [ 539.913348][T20717] ? stack_depot_save_flags+0x33/0x800 [ 539.913418][T20717] ? __pfx_path_openat+0x10/0x10 [ 539.913440][T20717] ? __x64_sys_openat+0x138/0x170 [ 539.913466][T20717] ? __lock_acquire+0x683/0x2cd0 [ 539.913497][T20717] do_file_open+0x23e/0x4a0 [ 539.913526][T20717] ? __pfx_do_file_open+0x10/0x10 [ 539.913572][T20717] ? alloc_fd+0x62e/0x6a0 [ 539.913604][T20717] do_sys_openat2+0x113/0x200 [ 539.913627][T20717] ? __pfx_do_sys_openat2+0x10/0x10 [ 539.913647][T20717] ? ksys_write+0x242/0x270 [ 539.913671][T20717] ? __pfx_ksys_write+0x10/0x10 [ 539.913698][T20717] __x64_sys_openat+0x138/0x170 [ 539.913722][T20717] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.913742][T20717] do_syscall_64+0x174/0x580 [ 539.913762][T20717] ? trace_irq_disable+0x3b/0x140 [ 539.913787][T20717] ? clear_bhb_loop+0x40/0x90 [ 539.913812][T20717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.913830][T20717] RIP: 0033:0x7fd44059ce59 [ 539.913849][T20717] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 539.913865][T20717] RSP: 002b:00007fd441503028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 539.913884][T20717] RAX: ffffffffffffffda RBX: 00007fd440815fa0 RCX: 00007fd44059ce59 [ 539.913898][T20717] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 539.913909][T20717] RBP: 00007fd441503090 R08: 0000000000000000 R09: 0000000000000000 [ 539.913920][T20717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 539.913931][T20717] R13: 00007fd440816038 R14: 00007fd440815fa0 R15: 00007ffe89bd92d8 [ 539.913962][T20717] [ 539.915503][T20717] ERROR: Out of memory at tomoyo_realpath_from_path. [ 540.316489][T20724] syzkaller0: entered promiscuous mode [ 540.324786][T20724] syzkaller0: entered allmulticast mode [ 540.345960][T20724] netlink: 'syz.4.3667': attribute type 5 has an invalid length. [ 541.292659][T20767] lo speed is unknown, defaulting to 1000 [ 541.307329][ T9172] net_ratelimit: 14 callbacks suppressed [ 541.307350][ T9172] bond11: (slave bridge0): failed to get link speed/duplex [ 541.367977][T20769] FAULT_INJECTION: forcing a failure. [ 541.367977][T20769] name failslab, interval 1, probability 0, space 0, times 0 [ 541.408183][T20769] CPU: 0 UID: 0 PID: 20769 Comm: syz.4.3678 Not tainted syzkaller #0 PREEMPT(full) [ 541.408206][T20769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 541.408217][T20769] Call Trace: [ 541.408223][T20769] [ 541.408231][T20769] dump_stack_lvl+0xe8/0x150 [ 541.408256][T20769] should_fail_ex+0x40c/0x560 [ 541.408291][T20769] should_failslab+0xa8/0x100 [ 541.408319][T20769] __kmalloc_noprof+0xe8/0x750 [ 541.408344][T20769] ? tomoyo_encode+0x2ad/0x570 [ 541.408374][T20769] tomoyo_encode+0x2ad/0x570 [ 541.408403][T20769] tomoyo_realpath_from_path+0x5fa/0x640 [ 541.408444][T20769] tomoyo_check_open_permission+0x229/0x470 [ 541.408467][T20769] ? tomoyo_check_open_permission+0x1d3/0x470 [ 541.408486][T20769] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 541.408509][T20769] ? __asan_memset+0x22/0x50 [ 541.408554][T20769] ? lockref_get+0x15/0x60 [ 541.408578][T20769] ? tomoyo_file_open+0x163/0x220 [ 541.408599][T20769] security_file_open+0xa9/0x240 [ 541.408621][T20769] do_dentry_open+0x4a0/0x1380 [ 541.408652][T20769] vfs_open+0x3b/0x340 [ 541.408668][T20769] ? path_openat+0x2e23/0x3890 [ 541.408694][T20769] path_openat+0x2e3b/0x3890 [ 541.408716][T20769] ? arch_stack_walk+0xfb/0x150 [ 541.408752][T20769] ? do_getname+0x2e/0x250 [ 541.408779][T20769] ? stack_depot_save_flags+0x33/0x800 [ 541.408804][T20769] ? __pfx_path_openat+0x10/0x10 [ 541.408825][T20769] ? __x64_sys_openat+0x138/0x170 [ 541.408850][T20769] ? __lock_acquire+0x683/0x2cd0 [ 541.408881][T20769] do_file_open+0x23e/0x4a0 [ 541.408911][T20769] ? __pfx_do_file_open+0x10/0x10 [ 541.408961][T20769] ? alloc_fd+0x62e/0x6a0 [ 541.408993][T20769] do_sys_openat2+0x113/0x200 [ 541.409016][T20769] ? __pfx_do_sys_openat2+0x10/0x10 [ 541.409040][T20769] ? ksys_write+0x242/0x270 [ 541.409066][T20769] ? __pfx_ksys_write+0x10/0x10 [ 541.409093][T20769] __x64_sys_openat+0x138/0x170 [ 541.409117][T20769] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.409136][T20769] do_syscall_64+0x174/0x580 [ 541.409153][T20769] ? trace_irq_disable+0x3b/0x140 [ 541.409177][T20769] ? clear_bhb_loop+0x40/0x90 [ 541.409198][T20769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.409216][T20769] RIP: 0033:0x7f181459ce59 [ 541.409233][T20769] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 541.409248][T20769] RSP: 002b:00007f18153e4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 541.409267][T20769] RAX: ffffffffffffffda RBX: 00007f1814815fa0 RCX: 00007f181459ce59 [ 541.409280][T20769] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 541.409292][T20769] RBP: 00007f18153e4090 R08: 0000000000000000 R09: 0000000000000000 [ 541.409303][T20769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 541.409313][T20769] R13: 00007f1814816038 R14: 00007f1814815fa0 R15: 00007ffeabf6b718 [ 541.409344][T20769] [ 541.409392][T20769] ERROR: Out of memory at tomoyo_realpath_from_path. [ 541.581353][ T9168] bond11: (slave bridge0): failed to get link speed/duplex [ 541.723670][ T9172] bond11: (slave bridge0): failed to get link speed/duplex [ 541.930646][T20780] netlink: 'syz.4.3683': attribute type 12 has an invalid length. [ 541.957597][T20779] netlink: 'syz.4.3683': attribute type 12 has an invalid length. [ 542.007256][T20783] __nla_validate_parse: 12 callbacks suppressed [ 542.007278][T20783] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3682'. [ 542.017018][ T12] bond11: (slave bridge0): failed to get link speed/duplex [ 542.196916][ T9162] bond11: (slave bridge0): failed to get link speed/duplex [ 542.245267][T20788] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3684'. [ 542.327141][ T12] bond11: (slave bridge0): failed to get link speed/duplex [ 542.447397][ T9168] bond11: (slave bridge0): failed to get link speed/duplex [ 542.569301][ T9168] bond11: (slave bridge0): failed to get link speed/duplex [ 542.699214][ T9168] bond11: (slave bridge0): failed to get link speed/duplex [ 542.836965][ T9172] bond11: (slave bridge0): failed to get link speed/duplex [ 542.874016][T20803] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3688'. [ 542.909274][T20798] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.229877][T20815] FAULT_INJECTION: forcing a failure. [ 543.229877][T20815] name failslab, interval 1, probability 0, space 0, times 0 [ 543.267142][T20815] CPU: 0 UID: 0 PID: 20815 Comm: syz.4.3693 Not tainted syzkaller #0 PREEMPT(full) [ 543.267168][T20815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 543.267179][T20815] Call Trace: [ 543.267187][T20815] [ 543.267194][T20815] dump_stack_lvl+0xe8/0x150 [ 543.267221][T20815] should_fail_ex+0x40c/0x560 [ 543.267254][T20815] should_failslab+0xa8/0x100 [ 543.267282][T20815] __kmalloc_noprof+0xe8/0x750 [ 543.267306][T20815] ? tomoyo_encode+0x2ad/0x570 [ 543.267336][T20815] tomoyo_encode+0x2ad/0x570 [ 543.267366][T20815] tomoyo_realpath_from_path+0x5fa/0x640 [ 543.267401][T20815] tomoyo_check_open_permission+0x229/0x470 [ 543.267423][T20815] ? tomoyo_check_open_permission+0x1d3/0x470 [ 543.267444][T20815] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 543.267466][T20815] ? __asan_memset+0x22/0x50 [ 543.267506][T20815] ? lockref_get+0x15/0x60 [ 543.267529][T20815] ? tomoyo_file_open+0x163/0x220 [ 543.267549][T20815] security_file_open+0xa9/0x240 [ 543.267572][T20815] do_dentry_open+0x4a0/0x1380 [ 543.267612][T20815] vfs_open+0x3b/0x340 [ 543.267627][T20815] ? path_openat+0x2e23/0x3890 [ 543.267653][T20815] path_openat+0x2e3b/0x3890 [ 543.267675][T20815] ? arch_stack_walk+0xfb/0x150 [ 543.267705][T20815] ? do_getname+0x2e/0x250 [ 543.267732][T20815] ? stack_depot_save_flags+0x33/0x800 [ 543.267760][T20815] ? __pfx_path_openat+0x10/0x10 [ 543.267781][T20815] ? __x64_sys_openat+0x138/0x170 [ 543.267806][T20815] ? __lock_acquire+0x683/0x2cd0 [ 543.267840][T20815] do_file_open+0x23e/0x4a0 [ 543.267869][T20815] ? __pfx_do_file_open+0x10/0x10 [ 543.267916][T20815] ? alloc_fd+0x62e/0x6a0 [ 543.267948][T20815] do_sys_openat2+0x113/0x200 [ 543.267972][T20815] ? __pfx_do_sys_openat2+0x10/0x10 [ 543.267992][T20815] ? ksys_write+0x242/0x270 [ 543.268019][T20815] ? __pfx_ksys_write+0x10/0x10 [ 543.268046][T20815] __x64_sys_openat+0x138/0x170 [ 543.268068][T20815] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.268086][T20815] do_syscall_64+0x174/0x580 [ 543.268103][T20815] ? trace_irq_disable+0x3b/0x140 [ 543.268128][T20815] ? clear_bhb_loop+0x40/0x90 [ 543.268150][T20815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.268167][T20815] RIP: 0033:0x7f181459ce59 [ 543.268184][T20815] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 543.268199][T20815] RSP: 002b:00007f18153e4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 543.268218][T20815] RAX: ffffffffffffffda RBX: 00007f1814815fa0 RCX: 00007f181459ce59 [ 543.268231][T20815] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 543.268242][T20815] RBP: 00007f18153e4090 R08: 0000000000000000 R09: 0000000000000000 [ 543.268253][T20815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 543.268263][T20815] R13: 00007f1814816038 R14: 00007f1814815fa0 R15: 00007ffeabf6b718 [ 543.268291][T20815] [ 543.268339][T20815] ERROR: Out of memory at tomoyo_realpath_from_path. [ 543.633001][T20819] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3695'. [ 546.867413][T20831] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 547.146106][T20852] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 547.596977][T20838] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3698'. [ 547.607193][T20838] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3698'. [ 547.620835][T20843] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3698'. [ 547.688836][T20860] FAULT_INJECTION: forcing a failure. [ 547.688836][T20860] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 547.702748][T20860] CPU: 1 UID: 0 PID: 20860 Comm: syz.2.3705 Not tainted syzkaller #0 PREEMPT(full) [ 547.702771][T20860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 547.702782][T20860] Call Trace: [ 547.702789][T20860] [ 547.702796][T20860] dump_stack_lvl+0xe8/0x150 [ 547.702823][T20860] should_fail_ex+0x40c/0x560 [ 547.702855][T20860] _copy_from_user+0x2d/0xb0 [ 547.702877][T20860] kstrtouint_from_user+0xd6/0x180 [ 547.702990][T20860] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 547.703034][T20860] proc_fail_nth_write+0x8e/0x210 [ 547.703058][T20860] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 547.703087][T20860] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 547.703108][T20860] vfs_write+0x296/0xba0 [ 547.703141][T20860] ? __pfx_vfs_write+0x10/0x10 [ 547.703167][T20860] ? __fget_files+0x2a/0x420 [ 547.703193][T20860] ? __fget_files+0x3a2/0x420 [ 547.703212][T20860] ? __fget_files+0x2a/0x420 [ 547.703243][T20860] ksys_write+0x150/0x270 [ 547.703270][T20860] ? __pfx_ksys_write+0x10/0x10 [ 547.703303][T20860] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.703323][T20860] do_syscall_64+0x174/0x580 [ 547.703340][T20860] ? trace_irq_disable+0x3b/0x140 [ 547.703365][T20860] ? clear_bhb_loop+0x40/0x90 [ 547.703387][T20860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.703404][T20860] RIP: 0033:0x7fd025d5d68e [ 547.703421][T20860] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 547.703437][T20860] RSP: 002b:00007fd026c2afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 547.703456][T20860] RAX: ffffffffffffffda RBX: 00007fd026c2b6c0 RCX: 00007fd025d5d68e [ 547.703469][T20860] RDX: 0000000000000001 RSI: 00007fd026c2b0a0 RDI: 0000000000000005 [ 547.703480][T20860] RBP: 00007fd026c2b090 R08: 0000000000000000 R09: 0000000000000000 [ 547.703491][T20860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 547.703501][T20860] R13: 00007fd026016038 R14: 00007fd026015fa0 R15: 00007ffccf4bb558 [ 547.703533][T20860] [ 547.978378][ T9155] net_ratelimit: 2 callbacks suppressed [ 547.978398][ T9155] bond11: (slave bridge0): failed to get link speed/duplex [ 548.103421][T20865] netlink: 'syz.0.3707': attribute type 1 has an invalid length. [ 548.112094][ T9172] bond11: (slave bridge0): failed to get link speed/duplex [ 548.134211][T20873] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 548.141742][T20873] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 548.289164][T20865] 8021q: adding VLAN 0 to HW filter on device bond1 [ 548.308220][ T9172] bond11: (slave bridge0): failed to get link speed/duplex [ 548.398222][T20881] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 548.454623][T20892] netlink: 'syz.4.3716': attribute type 2 has an invalid length. [ 548.468092][ T9172] bond11: (slave bridge0): failed to get link speed/duplex [ 548.677285][ T12] bond11: (slave bridge0): failed to get link speed/duplex [ 548.810900][ T9155] bond11: (slave bridge0): failed to get link speed/duplex [ 548.975600][T20917] bridge1: entered promiscuous mode [ 548.982836][T20918] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 549.001480][T20918] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 549.013608][T20918] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 549.028306][ T34] bond11: (slave bridge0): failed to get link speed/duplex [ 549.177020][ T12] bond11: (slave bridge0): failed to get link speed/duplex [ 549.199259][T20936] netlink: 824 bytes leftover after parsing attributes in process `syz.3.3727'. [ 549.389941][T20949] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3732'. [ 549.604020][T20958] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3736'. [ 549.724780][T20960] pim6reg1: entered promiscuous mode [ 549.745411][T20960] pim6reg1: entered allmulticast mode [ 550.184126][T20973] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3741'. [ 550.227729][T20973] bond3: option ad_actor_sys_prio: invalid value (0) [ 550.234765][T20973] bond3: option ad_actor_sys_prio: allowed values 1 - 65535 [ 550.400723][T20973] bond3 (unregistering): Released all slaves [ 550.650167][T20978] lo speed is unknown, defaulting to 1000 [ 550.822888][T20983] netlink: 'syz.0.3745': attribute type 1 has an invalid length. [ 550.834273][T20986] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3743'. [ 551.715965][T20990] bond2: (slave bridge2): making interface the new active one [ 551.745492][T20990] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 551.822770][T21008] tipc: Enabled bearer , priority 0 [ 551.832104][T21005] syzkaller0: entered promiscuous mode [ 551.841872][T21005] syzkaller0: entered allmulticast mode [ 551.861686][T20998] tipc: Resetting bearer [ 551.919719][T20998] tipc: Disabling bearer [ 552.028483][T21013] nbd1: detected capacity change from 0 to 63 [ 552.029748][T21023] bridge0: port 1(bridge_slave_0) entered disabled state [ 552.039327][T21021] block nbd1: NBD_DISCONNECT [ 552.175425][T21023] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 552.181122][T21021] block nbd1: Disconnected due to user request. [ 552.191994][T21023] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 552.204554][T21021] block nbd1: shutting down sockets [ 552.216216][T20564] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 552.239137][T21036] netlink: 'syz.2.3753': attribute type 1 has an invalid length. [ 552.260338][T20564] Buffer I/O error on dev nbd1, logical block 1, async page read [ 552.267051][T21034] netlink: 'syz.2.3753': attribute type 1 has an invalid length. [ 552.289267][ C1] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 552.298456][ C1] Buffer I/O error on dev nbd1, logical block 0, async page read [ 552.312900][ T4961] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 2 prio class 2 [ 552.327342][ T4961] Buffer I/O error on dev nbd1, logical block 2, async page read [ 552.338853][ T4961] Buffer I/O error on dev nbd1, logical block 3, async page read [ 552.349011][T20564] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 552.360007][T20564] Buffer I/O error on dev nbd1, logical block 0, async page read [ 552.368342][T20564] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 552.379226][T20564] Buffer I/O error on dev nbd1, logical block 1, async page read [ 552.388710][T20564] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 552.399177][T20564] Buffer I/O error on dev nbd1, logical block 2, async page read [ 552.407192][T20564] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 552.416282][T20564] Buffer I/O error on dev nbd1, logical block 3, async page read [ 552.424783][T20564] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 552.434112][T20564] Buffer I/O error on dev nbd1, logical block 0, async page read [ 552.442470][T20564] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 552.451722][T20564] Buffer I/O error on dev nbd1, logical block 1, async page read [ 552.459785][T20564] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 552.471499][T20564] ldm_validate_partition_table(): Disk read failed. [ 552.488773][T20564] Dev nbd1: unable to read RDB block 0 [ 552.495614][T20564] nbd1: unable to read partition table [ 552.513804][T20564] ldm_validate_partition_table(): Disk read failed. [ 552.525478][T20564] Dev nbd1: unable to read RDB block 0 [ 552.533688][T20564] nbd1: unable to read partition table [ 552.554162][T21023] bridge1: left promiscuous mode [ 552.564357][T20564] [ 552.566732][T20564] ====================================================== [ 552.573856][T20564] WARNING: possible circular locking dependency detected [ 552.580965][T20564] syzkaller #0 Not tainted [ 552.585442][T20564] ------------------------------------------------------ [ 552.592555][T20564] udevd/20564 is trying to acquire lock: [ 552.598282][T20564] ffffffff8ea80d80 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_node_noprof+0x4a/0x680 [ 552.608287][T20564] [ 552.608287][T20564] but task is already holding lock: [ 552.615651][T20564] ffffffff90165500 (uevent_sock_mutex){+.+.}-{4:4}, at: kobject_uevent_net_broadcast+0x27e/0x560 [ 552.626345][T20564] [ 552.626345][T20564] which lock already depends on the new lock. [ 552.626345][T20564] [ 552.636817][T20564] [ 552.636817][T20564] the existing dependency chain (in reverse order) is: [ 552.645904][T20564] [ 552.645904][T20564] -> #9 (uevent_sock_mutex){+.+.}-{4:4}: [ 552.653775][T20564] __mutex_lock+0x19d/0x1590 [ 552.658904][T20564] kobject_uevent_net_broadcast+0x27e/0x560 [ 552.665322][T20564] kobject_uevent_env+0x566/0x9e0 [ 552.670857][T20564] device_add+0x544/0xb90 [ 552.675901][T20564] device_create+0x269/0x300 [ 552.681016][T20564] msr_device_create+0x33/0x50 [ 552.686328][T20564] cpuhp_invoke_callback+0x448/0x860 [ 552.692122][T20564] cpuhp_thread_fun+0x362/0x780 [ 552.697484][T20564] smpboot_thread_fn+0x57c/0xa80 [ 552.702929][T20564] kthread+0x389/0x470 [ 552.707539][T20564] ret_from_fork+0x514/0xb70 [ 552.712641][T20564] ret_from_fork_asm+0x1a/0x30 [ 552.717924][T20564] [ 552.717924][T20564] -> #8 (cpuhp_state-up){+.+.}-{0:0}: [ 552.725554][T20564] cpuhp_thread_fun+0x127/0x780 [ 552.730923][T20564] smpboot_thread_fn+0x57c/0xa80 [ 552.736759][T20564] kthread+0x389/0x470 [ 552.741383][T20564] ret_from_fork+0x514/0xb70 [ 552.746748][T20564] ret_from_fork_asm+0x1a/0x30 [ 552.752033][T20564] [ 552.752033][T20564] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 552.759935][T20564] cpus_read_lock+0x42/0x160 [ 552.765066][T20564] static_key_slow_inc+0x12/0x30 [ 552.770583][T20564] tcp_md5_do_add+0x1d4/0x390 [ 552.775861][T20564] tcp_v6_parse_md5_keys+0x550/0x670 [ 552.781737][T20564] do_tcp_setsockopt+0x1250/0x1f80 [ 552.787648][T20564] do_sock_setsockopt+0x17c/0x1b0 [ 552.793273][T20564] __x64_sys_setsockopt+0x13d/0x1b0 [ 552.798998][T20564] do_syscall_64+0x174/0x580 [ 552.806808][T20564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.813218][T20564] [ 552.813218][T20564] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 552.820945][T20564] lock_sock_nested+0x41/0x100 [ 552.826226][T20564] inet_shutdown+0x6a/0x390 [ 552.831350][T20564] nbd_mark_nsock_dead+0x2cb/0x550 [ 552.837038][T20564] recv_work+0x1cef/0x1e10 [ 552.841969][T20564] process_scheduled_works+0xa8e/0x14e0 [ 552.848046][T20564] worker_thread+0xa47/0xfb0 [ 552.853174][T20564] kthread+0x389/0x470 [ 552.857754][T20564] ret_from_fork+0x514/0xb70 [ 552.862856][T20564] ret_from_fork_asm+0x1a/0x30 [ 552.868218][T20564] [ 552.868218][T20564] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 552.875853][T20564] __mutex_lock+0x19d/0x1590 [ 552.881061][T20564] nbd_queue_rq+0x373/0x1150 [ 552.886250][T20564] blk_mq_dispatch_rq_list+0x499/0x1990 [ 552.892385][T20564] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 552.899322][T20564] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 552.905814][T20564] blk_mq_run_hw_queue+0x348/0x4f0 [ 552.911450][T20564] blk_mq_dispatch_list+0xd11/0xe10 [ 552.917191][T20564] blk_mq_flush_plug_list+0x45f/0x540 [ 552.923093][T20564] __blk_flush_plug+0x3ed/0x4d0 [ 552.928525][T20564] __submit_bio+0x465/0x560 [ 552.933554][T20564] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 552.939712][T20564] block_read_full_folio+0x599/0x830 [ 552.945569][T20564] filemap_read_folio+0x12c/0x3a0 [ 552.951120][T20564] do_read_cache_folio+0x354/0x590 [ 552.956745][T20564] read_part_sector+0xb6/0x2b0 [ 552.962095][T20564] adfspart_check_ICS+0xb1/0x960 [ 552.967551][T20564] bdev_disk_changed+0x82b/0x1780 [ 552.973089][T20564] blkdev_get_whole+0x372/0x510 [ 552.978522][T20564] bdev_open+0x324/0xd70 [ 552.983288][T20564] blkdev_open+0x461/0x600 [ 552.988213][T20564] do_dentry_open+0x816/0x1380 [ 552.993489][T20564] vfs_open+0x3b/0x340 [ 552.998069][T20564] path_openat+0x2e3b/0x3890 [ 553.003175][T20564] do_file_open+0x23e/0x4a0 [ 553.008190][T20564] do_sys_openat2+0x113/0x200 [ 553.013909][T20564] __x64_sys_openat+0x138/0x170 [ 553.019375][T20564] do_syscall_64+0x174/0x580 [ 553.024474][T20564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.030961][T20564] [ 553.030961][T20564] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 553.038250][T20564] __mutex_lock+0x19d/0x1590 [ 553.043356][T20564] nbd_queue_rq+0xc1/0x1150 [ 553.048396][T20564] blk_mq_dispatch_rq_list+0x499/0x1990 [ 553.054488][T20564] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 553.061354][T20564] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 553.067946][T20564] blk_mq_run_hw_queue+0x348/0x4f0 [ 553.073571][T20564] blk_mq_dispatch_list+0xd11/0xe10 [ 553.079309][T20564] blk_mq_flush_plug_list+0x45f/0x540 [ 553.085367][T20564] __blk_flush_plug+0x3ed/0x4d0 [ 553.090818][T20564] __submit_bio+0x465/0x560 [ 553.095874][T20564] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 553.102056][T20564] block_read_full_folio+0x599/0x830 [ 553.107858][T20564] filemap_read_folio+0x12c/0x3a0 [ 553.113416][T20564] do_read_cache_folio+0x354/0x590 [ 553.119061][T20564] read_part_sector+0xb6/0x2b0 [ 553.124346][T20564] adfspart_check_ICS+0xb1/0x960 [ 553.129794][T20564] bdev_disk_changed+0x82b/0x1780 [ 553.135344][T20564] blkdev_get_whole+0x372/0x510 [ 553.140724][T20564] bdev_open+0x324/0xd70 [ 553.145482][T20564] blkdev_open+0x461/0x600 [ 553.150425][T20564] do_dentry_open+0x816/0x1380 [ 553.155799][T20564] vfs_open+0x3b/0x340 [ 553.160400][T20564] path_openat+0x2e3b/0x3890 [ 553.165638][T20564] do_file_open+0x23e/0x4a0 [ 553.170673][T20564] do_sys_openat2+0x113/0x200 [ 553.175863][T20564] __x64_sys_openat+0x138/0x170 [ 553.181224][T20564] do_syscall_64+0x174/0x580 [ 553.186324][T20564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.192855][T20564] [ 553.192855][T20564] -> #3 (set->srcu){.+.+}-{0:0}: [ 553.200623][T20564] __synchronize_srcu+0xc9/0x2f0 [ 553.206115][T20564] elevator_switch+0x1e8/0x7b0 [ 553.211466][T20564] elevator_change+0x2fa/0x480 [ 553.216755][T20564] elevator_set_default+0x375/0x440 [ 553.222478][T20564] blk_register_queue+0x3f3/0x4e0 [ 553.228033][T20564] __add_disk+0x6cb/0xe30 [ 553.232892][T20564] add_disk_fwnode+0xfb/0x4b0 [ 553.238089][T20564] nbd_dev_add+0x733/0xb60 [ 553.243038][T20564] nbd_init+0x15f/0x1e0 [ 553.247822][T20564] do_one_initcall+0x250/0x870 [ 553.253103][T20564] do_initcall_level+0x10a/0x1a0 [ 553.258663][T20564] do_initcalls+0x59/0xa0 [ 553.263512][T20564] kernel_init_freeable+0x29d/0x3e0 [ 553.269220][T20564] kernel_init+0x1d/0x1d0 [ 553.274126][T20564] ret_from_fork+0x514/0xb70 [ 553.279223][T20564] ret_from_fork_asm+0x1a/0x30 [ 553.284533][T20564] [ 553.284533][T20564] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 553.292611][T20564] __mutex_lock+0x19d/0x1590 [ 553.297822][T20564] elevator_change+0x1af/0x480 [ 553.303115][T20564] elevator_set_none+0xb5/0x140 [ 553.308921][T20564] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 553.315250][T20564] nbd_start_device+0x189/0xb30 [ 553.320622][T20564] nbd_genl_connect+0x1597/0x1c10 [ 553.326198][T20564] genl_family_rcv_msg_doit+0x233/0x340 [ 553.332260][T20564] genl_rcv_msg+0x614/0x7a0 [ 553.337369][T20564] netlink_rcv_skb+0x226/0x4a0 [ 553.342647][T20564] genl_rcv+0x28/0x40 [ 553.347141][T20564] netlink_unicast+0x7bb/0x940 [ 553.352508][T20564] netlink_sendmsg+0x813/0xb40 [ 553.357779][T20564] ____sys_sendmsg+0x9b9/0xa20 [ 553.363064][T20564] ___sys_sendmsg+0x2a5/0x360 [ 553.368272][T20564] __x64_sys_sendmsg+0x1bd/0x2a0 [ 553.373891][T20564] do_syscall_64+0x174/0x580 [ 553.378995][T20564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.385404][T20564] [ 553.385404][T20564] -> #1 (&q->q_usage_counter(io)#51){++++}-{0:0}: [ 553.394086][T20564] blk_alloc_queue+0x544/0x690 [ 553.399425][T20564] __blk_mq_alloc_disk+0x194/0x390 [ 553.405046][T20564] nbd_dev_add+0x494/0xb60 [ 553.409984][T20564] nbd_init+0x15f/0x1e0 [ 553.414694][T20564] do_one_initcall+0x250/0x870 [ 553.419970][T20564] do_initcall_level+0x10a/0x1a0 [ 553.425417][T20564] do_initcalls+0x59/0xa0 [ 553.430255][T20564] kernel_init_freeable+0x29d/0x3e0 [ 553.435963][T20564] kernel_init+0x1d/0x1d0 [ 553.440905][T20564] ret_from_fork+0x514/0xb70 [ 553.446009][T20564] ret_from_fork_asm+0x1a/0x30 [ 553.451373][T20564] [ 553.451373][T20564] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 553.458571][T20564] __lock_acquire+0x1520/0x2cd0 [ 553.464024][T20564] lock_acquire+0x106/0x350 [ 553.469038][T20564] fs_reclaim_acquire+0x71/0x100 [ 553.474520][T20564] kmem_cache_alloc_node_noprof+0x4a/0x680 [ 553.480927][T20564] __alloc_skb+0x276/0x7a0 [ 553.485865][T20564] alloc_uevent_skb+0x7d/0x230 [ 553.491160][T20564] kobject_uevent_net_broadcast+0x2fa/0x560 [ 553.497568][T20564] kobject_uevent_env+0x566/0x9e0 [ 553.503104][T20564] nbd_config_put+0x185/0x660 [ 553.508314][T20564] nbd_release+0xfe/0x140 [ 553.513162][T20564] bdev_release+0x571/0x690 [ 553.518180][T20564] blkdev_release+0x15/0x20 [ 553.523199][T20564] __fput+0x418/0xa50 [ 553.527787][T20564] fput_close_sync+0x11f/0x240 [ 553.533147][T20564] __x64_sys_close+0x7e/0x110 [ 553.538332][T20564] do_syscall_64+0x174/0x580 [ 553.543970][T20564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.550370][T20564] [ 553.550370][T20564] other info that might help us debug this: [ 553.550370][T20564] [ 553.560592][T20564] Chain exists of: [ 553.560592][T20564] fs_reclaim --> cpuhp_state-up --> uevent_sock_mutex [ 553.560592][T20564] [ 553.573278][T20564] Possible unsafe locking scenario: [ 553.573278][T20564] [ 553.581010][T20564] CPU0 CPU1 [ 553.586430][T20564] ---- ---- [ 553.591829][T20564] lock(uevent_sock_mutex); [ 553.596406][T20564] lock(cpuhp_state-up); [ 553.603242][T20564] lock(uevent_sock_mutex); [ 553.610344][T20564] lock(fs_reclaim); [ 553.614316][T20564] [ 553.614316][T20564] *** DEADLOCK *** [ 553.614316][T20564] [ 553.622541][T20564] 3 locks held by udevd/20564: [ 553.627289][T20564] #0: ffff88802c086350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x1b8/0x690 [ 553.636939][T20564] #1: ffff88807fd3b260 (&nbd->config_lock){+.+.}-{4:4}, at: refcount_dec_and_mutex_lock+0x30/0xa0 [ 553.647745][T20564] #2: ffffffff90165500 (uevent_sock_mutex){+.+.}-{4:4}, at: kobject_uevent_net_broadcast+0x27e/0x560 [ 553.658718][T20564] [ 553.658718][T20564] stack backtrace: [ 553.664601][T20564] CPU: 1 UID: 0 PID: 20564 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 553.664618][T20564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 553.664628][T20564] Call Trace: [ 553.664634][T20564] [ 553.664642][T20564] dump_stack_lvl+0xe8/0x150 [ 553.664661][T20564] print_circular_bug+0x2e1/0x300 [ 553.664680][T20564] check_noncircular+0x12e/0x150 [ 553.664698][T20564] __lock_acquire+0x1520/0x2cd0 [ 553.664712][T20564] ? fput_close_sync+0x11f/0x240 [ 553.664728][T20564] ? do_syscall_64+0x174/0x580 [ 553.664747][T20564] ? kmem_cache_alloc_node_noprof+0x4a/0x680 [ 553.664763][T20564] lock_acquire+0x106/0x350 [ 553.664776][T20564] ? kmem_cache_alloc_node_noprof+0x4a/0x680 [ 553.664796][T20564] fs_reclaim_acquire+0x71/0x100 [ 553.664815][T20564] ? kmem_cache_alloc_node_noprof+0x4a/0x680 [ 553.664832][T20564] kmem_cache_alloc_node_noprof+0x4a/0x680 [ 553.664849][T20564] ? __alloc_skb+0x276/0x7a0 [ 553.664868][T20564] ? __alloc_skb+0x189/0x7a0 [ 553.664888][T20564] __alloc_skb+0x276/0x7a0 [ 553.664907][T20564] alloc_uevent_skb+0x7d/0x230 [ 553.664925][T20564] kobject_uevent_net_broadcast+0x2fa/0x560 [ 553.664943][T20564] kobject_uevent_env+0x566/0x9e0 [ 553.664961][T20564] nbd_config_put+0x185/0x660 [ 553.664982][T20564] nbd_release+0xfe/0x140 [ 553.664999][T20564] ? __pfx_nbd_release+0x10/0x10 [ 553.665017][T20564] bdev_release+0x571/0x690 [ 553.665036][T20564] ? __pfx_blkdev_release+0x10/0x10 [ 553.665051][T20564] blkdev_release+0x15/0x20 [ 553.665066][T20564] __fput+0x418/0xa50 [ 553.665084][T20564] fput_close_sync+0x11f/0x240 [ 553.665099][T20564] ? __pfx_fput_close_sync+0x10/0x10 [ 553.665116][T20564] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.665136][T20564] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.665149][T20564] __x64_sys_close+0x7e/0x110 [ 553.665165][T20564] do_syscall_64+0x174/0x580 [ 553.665177][T20564] ? trace_irq_disable+0x3b/0x140 [ 553.665196][T20564] ? clear_bhb_loop+0x40/0x90 [ 553.665210][T20564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.665223][T20564] RIP: 0033:0x7f8d2aca7407 [ 553.665237][T20564] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 553.665249][T20564] RSP: 002b:00007ffe4030e150 EFLAGS: 00000202 ORIG_RAX: 0000000000000003 [ 553.665264][T20564] RAX: ffffffffffffffda RBX: 00007f8d2b430880 RCX: 00007f8d2aca7407 [ 553.665274][T20564] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 553.665282][T20564] RBP: 00007f8d2b4306e8 R08: 0000000000000000 R09: 0000000000000000 [ 553.665290][T20564] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 553.665298][T20564] R13: 000055fa06884190 R14: 0000000000000008 R15: 000055fa06889e20 [ 553.665313][T20564] [ 553.668179][ T9162] net_ratelimit: 12 callbacks suppressed [ 553.668197][ T9162] bond11: (slave bridge0): failed to get link speed/duplex [ 553.983875][T21036] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 553.984584][T21034] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 553.999707][ T9155] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.035214][ T9155] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.049503][ T9155] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.059761][ T9155] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.086865][ T34] bond11: (slave bridge0): failed to get link speed/duplex [ 554.206931][ T34] bond11: (slave bridge0): failed to get link speed/duplex [ 554.316915][ T12] bond11: (slave bridge0): failed to get link speed/duplex [ 554.426913][ T34] bond11: (slave bridge0): failed to get link speed/duplex [ 554.537075][ T12] bond11: (slave bridge0): failed to get link speed/duplex [ 554.646914][ T12] bond11: (slave bridge0): failed to get link speed/duplex [ 554.756951][ T34] bond11: (slave bridge0): failed to get link speed/duplex [ 554.866922][ T9155] bond11: (slave bridge0): failed to get link speed/duplex [ 554.977099][ T9161] bond11: (slave bridge0): failed to get link speed/duplex [ 555.857175][ T5640] Bluetooth: hci5: command 0x0419 tx timeout [ 558.727106][ T9155] net_ratelimit: 33 callbacks suppressed [ 558.727128][ T9155] bond11: (slave bridge0): failed to get link speed/duplex [ 558.847130][ T12] bond11: (slave bridge0): failed to get link speed/duplex [ 558.957276][ T9155] bond11: (slave bridge0): failed to get link speed/duplex [ 559.066933][ T9161] bond11: (slave bridge0): failed to get link speed/duplex [ 559.176954][ T9161] bond11: (slave bridge0): failed to get link speed/duplex [ 559.286942][ T34] bond11: (slave bridge0): failed to get link speed/duplex [ 559.397285][ T9155] bond11: (slave bridge0): failed to get link speed/duplex [ 559.507216][ T9161] bond11: (slave bridge0): failed to get link speed/duplex [ 559.617221][ T9155] bond11: (slave bridge0): failed to get link speed/duplex [ 559.727075][ T34] bond11: (slave bridge0): failed to get link speed/duplex