last executing test programs: 3.038101667s ago: executing program 2 (id=3778): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000002bc0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00ed6a", 0x1c, 0x2c, 0x0, @remote, @local, {[], {{0x600, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, {[@eol]}}, {"a91c7e6f"}}}}}}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="d2ff03076003008cb29e08f088a8", 0x0, 0x200009, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0x0, 0x1000, 0x3e, &(0x7f0000003100)="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", &(0x7f00000000c0)=""/62, 0x1, 0x0, 0x13, 0xb8, &(0x7f0000000200)="0931af9822ddbbee64168c77e44e3206e09642", &(0x7f0000000640)="4ba01ca26cbe41f964074179e8a9def0dd2fc693fc632c1a4e820571655aa7dce31f141a2fdce9e81d65ec0f3f17e4d434b5850d33169e03d3637d1710842b87234f4b540a22a245f5a7fd465c7ed7f8e196f0a99bf8d1b964df888eb71cfffd03ef84dd35f276b7536e118b6c876924dd081ba53ebe30196c06cbbde8fe40e8fedfc87afe5f496a458f7315043f80a7a2283e51c4a53f7ba1d505a287d2d6c8d0010621a61d5ff32889e8901b95fd2c492a445f7ce9b799", 0x3, 0x0, 0x9}, 0x50) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x4a, 0x800000, 0x805, 0x25, 0x7c}) write$bt_hci(r4, &(0x7f0000000080)=ANY=[], 0x6) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r9, {0x5}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0xa32, 0x6, 0x1, 0xc, 0x0, 0x4, 0x8, 0x52, 0x68d8, 0x5, 0x4, 0x3, 0x12, 0x6, 0xfffffffd, 0xfffffe01}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x5, 0xfff1}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0xf7513c36066f8950}, 0x20000010) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r13, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x300}], 0x2}, 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007a00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) 2.7358564s ago: executing program 4 (id=3783): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newqdisc={0x8c, 0x24, 0xe0b, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x9c4}, @TCA_TBF_PBURST={0x8, 0x7, 0x1fc0}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x8, 0x5, 0x4, 0x3}, 0xfffffffd, 0x83, 0xfffffffd}}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xa, 0x1, 0x1, 0x40, 0x2, 0xffffffff}}, {0x4}}]}]}, 0x8c}}, 0x4000080) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 2.487240942s ago: executing program 4 (id=3786): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000008500000029000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)={0x1c, 0x33, 0x107, 0x0, 0x25dfdbff, {0x3, 0x7c}, [@nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x101}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc044}, 0xc050) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, &(0x7f0000000040)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe, 0x0, &(0x7f0000000400)="e4e647c9e0b8e9a2f2ab3026da58", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x5c, r2, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8b49}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x67}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x2}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000040}, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb9", 0x41}], 0x1}], 0x1, 0x40800) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000000100000800010001"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYBLOB="1c000000020303000000000000000011000000100800010001"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="2000000003030100"], 0x20}, 0x1, 0x0, 0x0, 0x20008015}, 0x4040) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$ITER_CREATE(0xb, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000180)={0x8000, 0x0, 0x80, 0x3}, &(0x7f0000000380)=0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)=@getchain={0x5c, 0x66, 0x300, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x7, 0xfff2}, {0xfff2, 0xfff3}, {0x0, 0xffff}}, [{0x8, 0xb, 0x3b6f}, {0x8, 0xb, 0xd9}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0xfff}, {0x8}, {0x8, 0xb, 0x7}]}, 0x5c}, 0x1, 0x0, 0x0, 0x34004880}, 0x3000c81c) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r1) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, r7, 0x10, 0x70bd28, 0x25dfdbff, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040804}, 0x14000) r8 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) getsockopt$bt_BT_DEFER_SETUP(r8, 0x112, 0x7, &(0x7f0000000600)=0x1, &(0x7f0000000640)=0x4) 2.361247408s ago: executing program 0 (id=3789): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x31, &(0x7f0000000000)={@multicast, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x23, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast=0xe0000001}, {0x4e24, 0xe22, 0xf, 0x0, @opaque="178255c9f930ca"}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000600)=ANY=[@ANYBLOB="6112a000000000006113280000000000bf2000000000000007000000080000003d0301000000000095000000000000006916200000000000bf67000000000000170600000fff07006706000002000000070600000ee60000bf050000000000001f650000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070500000419311f3d2401000000000095000000000000000500000000000000950000000000000032ed3c5be95e76b67754bb12dc8c27df8ecf264e0f84f9f17d3c30e3c72fe9755ba08508460b603daf5a7d1dbdd2d17f2f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a674f888a08034b7dd399703d6c4f633a9a4f16d0a3e1282ee45a010fb94fa9de56c9d8a814261bdb94a6538b89dc6c60bf70d742a81b72bab8395fa64810b5b1bfd3782519518c51231422bb8fab4d4d897db2c544c0ec50b8eac8c63d2b1cd06a39702bd547f5ebaa6954f01cef3c9bacec15e2e3b2bd352e93a22adfe8efe33ffa78b02af242f8ee5476d4ef7a6f0c4704403b9bad2b648e90fff24f69a5ef05f5408ea197ed09a9510ee6063229de2984abdd46ea3ec78e3127002ed37c2564b8f8a621483fb2a5ff221e0d831d64759d17b8c59d0f2b06e7f6b7958fb5b939af4be5e55a95f8c6d785a91c7c3f0c17ae7f9ac5ff05f5ecddf0cef90d50e763be96496661c749e21ab63a1f50b30a65a9027ba357bf8c614497ee59b68bf6a5d45c81c567e347d545741fbbbea3e47b1750f272980087b7f8a13cce7014137f250370b8a70ae3eaf6d6f17759c3886871e97d063b7f26eed3226bb0b9ee6320a2b02fea7a06a0e37182adf"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1d4}, 0x48) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc) r3 = socket$qrtr(0x2a, 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) pwritev(r4, &(0x7f0000000280)=[{&(0x7f0000000340)="f7", 0x1}], 0x300, 0x0, 0x0) openat$cgroup_ro(r4, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x0, 0x0) recvmmsg(r2, &(0x7f0000000ac0)=[{{0x0, 0xff2c, 0x0}, 0x1}], 0x40, 0x2, 0x0) ioctl$sock_qrtr_SIOCGIFADDR(r2, 0x890b, 0x0) connect$qrtr(r3, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) writev(r3, &(0x7f0000000340)=[{&(0x7f0000000080)="fb", 0x1}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1a, 0x4, 0x0, 0x0, 0x3c531cb, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x300f000, 0xf, 0x0, &(0x7f0000000400)="1069c2704a075e307300ac14dd46df", 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x54, r5, 0x1, 0x70bd23, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, '&*,\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x91}, 0x8800) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_emit_ethernet(0x31, &(0x7f0000000000)={@multicast, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x23, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast=0xe0000001}, {0x4e24, 0xe22, 0xf, 0x0, @opaque="178255c9f930ca"}}}}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000600)=ANY=[@ANYBLOB="6112a000000000006113280000000000bf2000000000000007000000080000003d0301000000000095000000000000006916200000000000bf67000000000000170600000fff07006706000002000000070600000ee60000bf050000000000001f650000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070500000419311f3d2401000000000095000000000000000500000000000000950000000000000032ed3c5be95e76b67754bb12dc8c27df8ecf264e0f84f9f17d3c30e3c72fe9755ba08508460b603daf5a7d1dbdd2d17f2f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a674f888a08034b7dd399703d6c4f633a9a4f16d0a3e1282ee45a010fb94fa9de56c9d8a814261bdb94a6538b89dc6c60bf70d742a81b72bab8395fa64810b5b1bfd3782519518c51231422bb8fab4d4d897db2c544c0ec50b8eac8c63d2b1cd06a39702bd547f5ebaa6954f01cef3c9bacec15e2e3b2bd352e93a22adfe8efe33ffa78b02af242f8ee5476d4ef7a6f0c4704403b9bad2b648e90fff24f69a5ef05f5408ea197ed09a9510ee6063229de2984abdd46ea3ec78e3127002ed37c2564b8f8a621483fb2a5ff221e0d831d64759d17b8c59d0f2b06e7f6b7958fb5b939af4be5e55a95f8c6d785a91c7c3f0c17ae7f9ac5ff05f5ecddf0cef90d50e763be96496661c749e21ab63a1f50b30a65a9027ba357bf8c614497ee59b68bf6a5d45c81c567e347d545741fbbbea3e47b1750f272980087b7f8a13cce7014137f250370b8a70ae3eaf6d6f17759c3886871e97d063b7f26eed3226bb0b9ee6320a2b02fea7a06a0e37182adf"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001d00)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8fff7ff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b70500000000e000720a23fe000000008500000012000000b70000000000000095000000000000004e6258941c823b7505608556ba4ababb42684e890d31ae450400373a0a5447a801b8c1c4f0c4bd97c6555e61345400f9bd42abeb9ade0105000000000000a21902ff07000094a2b51c21df74924f5436a6ed89b98f75e800230c49c90fe1336481f3b92a63336c36fcd745d61d7739c6554ca201000000bebbe8282f8b1e26407437a397bf8f50e87ed4d27adfd876bffc402887781979461c4363bc5c9b6202ea471428197ef88bc333fbcec0ea4334f1ddb9d679ae95a90fd41d528f58d305000000435883df6c10ce86188c92292b2d0226082960be682836bdff8b0971f2a5405e453228e7b1005bd73479358a90df3e481947de6453736aa572158af6ea63d6d418fbbd2bba050000001da000ef78df03000000d19913a5fb03c79dac2e489f68127892658115e7ffb588a71dffffff951b8535167ab8069a2c92a3aa18e22517000026637b4c34bf2d0aa304ed42bf70480e9e97203fd169411f37fddd1f7fbe16dbbc0f307bceb5064f388a0350c3dc928b0e638b1e2b2a9d25264233e5d45eb377f56b95241024dbe30f67191c2b56b70328d6d3215dfffe5d89af1d10599bd494d921d1fb2db99b6aba0fa978f41eb1d4c553e5a9326ed550c13f8dd36716a899a1e79234294707c5312b924d142c17b20bb80ee202222c03fa84ccc374e717f694018630366397266090a82343aedfbf7afe892390c2eb775b0d16073da2229958db05de7df6ab7600004000010000006d8081cb3bf251d906c00da0e23b50465f8394820be571e3592d0000c7ef10fdc462e7040e7074ec43aa461fc54401a76406db718d4efd6c1bd10ce1d087cf9bba461162555a95524c84df0952d32093082b7aa71304e0d2d9ec310d1b676b378a5879e47941de1a28c3a8f400000000000000000e032b7d2badd0bc6617a859b7ac273b6304555f664469cec152030f06cc0ca1765838eb5590264736fbccfc3a8f4e3b10daf6a275daf5db2dac7096fe8ac8876acaad043663b3b0fedb05e6d31408fa20140c9d2db1c59ac8a3ce28e489d67d87d3a107ccea3007f58f2c5017e8807107f79ac50cc1d4f546b4443d137eb706b71b1767a10cca7a7c82b76c96e874aff249f36329a6526b354b6e674b08f7ef492b804c4b08fb10de807d79fd782027318cd7632e22d2faa16209272b39b5ec8d239832ea02cc88e249a2e77753a58987547571fbc8de747faab724bebb6401412b496e078fcb6c78ab447e871b76a8b0506f49594aa1d610567e14d739a60ff3ce04d0d2e5681e787c7e1ad25467bb81f2f440128207fe07a83759ec30cf9e0a3fd3f2fcee97fe8d273f8e712a8a64eaf2d89a1fa44554357fcd7ab531ff7a41c27164fca430a62d015b477de61853f5ee2e25b00a63642ec32ece2ff3bb5883deb895f52a923b5c744d8dccdd6a09ded8b90f1eeda8e6e884a4f090edb6ab9fc8107846508d51f3735493d5860cf80200ce31b92eb3563d485b5a7d192092d7a9fd2bc67d305d1d4573aad5f6501d1cd27657ce17330402dacb78d72d776330711645eed7d4c292f4448733c0826c4eb950f3d40457f82d7f792d106518f6bde874aff9e2bea7d73f74bebeeacfc700000000000000000000d40d73be47803297db004264c8c70b7761b22a7114a078a87d63d63b0c9dcc263a5b773bfeba212abef4181ad9e4872e328c0f105d51e3d167a2b717051d7681ba04552eeba18a000000b22b50d76d85040c9000ea68a528049a60d5e26b20455194f4be3b8466fd66d0e6cefcff7891c485d61cb66f4076cd60a22733cb00cf7cc12ca7d9bb864c0e650236a79a5c85349a9b1e6bbc3bace197e72490c566431cd3a08e9d1b641c1ba1f661d01573b904c3fa1427370fa15cecd294ac21fefe3d161fdf58e8bc5957ef145839f4370176e1be88d2e3516a1998c1621a00b4438b85a4dfee6f61827a1e50e158038b037dfda3ffb35069e41fc740ae720800de53948f176c3c15f3a529c02434b920d87f12a6e3420a2fdcb3559e7a5b1ddbb06b7a5977f63bfac701e673bf626d126b213c92e7169a930beb8d76f9db34e8098bea301baa96916d6458c923866dc192928b320738d1b298fb55f2a64500000000000000000000000000509885a38d9d995a46817e7ff7acddcc5f9253c63f86baf33f92820c9ff497cf76b6482c3ab53fb6ecea6d220b91b99b2fb4279ab09ae0645ab92df309000000000000a4868411948f8e3e259b717d722a1eebd3f6860a17f1ae9e10a1178f6aef4951b192d13e9600c1f700ca7b1d127e451034469bf2a8f93dbae6ad8e932e431dc18323794156238625bb9c45c5a76a68a8646e701b29a71ffbd854f50f195823106a5625ff94221f1f04c72525b50aae69081de9626de9847bf53475d90642d9730101d80b1b0000000000000000822b0641698d60160d9157548302dd2636d12c431f96728ae4a45361e6d47a1c4a52d67c0f0a62585c09fcfd70d0f249f87c44b47283c1c6f2430d70c751e4ada9b646e6e7c1719faee476d88a2943c71a21db55b7497dd7ed385ac2e8cb916390a3a0ed52e7371e1a141e69afa07b46ac20f3521fb251b72c82ee1c7eb4f67c0deed5618d0db925ce7a7c50a99835544c540f5d528587d1a26e78df1bc9a8e4d90c57d0b8122eae7b23e4456624f5337c16c42648c7a3d0b799ad409befe0cbe2aa781ba826918df7aa80dff4f62258e54419629eb1d37de7f6a3512bd618781d1ad3a4d4b0da44df9f9a93f0487f79a9b16dfa6f68b06ce6a96ca344d194cded05702c2300d1a4f451b33830765f8131f6c28fada65701851bba089b8a8347900e72d68cea965feb6a06225dd3f0e135323a5bde3b43c9d242b73abf9e05336af040a4a6bb5918146393f1d50705c1d1e986bf2f690de51ee8727d37339df5391db535bb1e9bb3e5dadb6e5a2bb4faa2dcbc6ca9b40ac96e448b9dadeb08fc2cf3a960f22bf20b9e967b7a75687372b8e3edc543896c360674d901a7f56b07ba1479b46eea3d94026a9c7e670ab40bb2c1ca1a7c90299361239bef773140af974c7efc285a64633d21513481b3ac62dec9fa3e8ce6156d76b82baa145bc550b0ccbc0934ccfea45292caa2f0654fe18dc0669a4f2af9fa232a293ad94261f55675cc686db72783a6bacc0df6a1ea943ae266af112f35319980cd681811a369e0d03cf7d22bed7cbe1afe498b88942b1bf7edae441a0d0d88fce65cb4e848793a28cbd7373f6acd3b5a48c034e487750388929d37fa3165f205dab3be5f3e5781a84298687cbf02dcaf0e14a2b260293f349d076eb75a2ddc5382d106f0beea02aa45018fe36d1176cf7704383b6922d10dc80bc7feca3982ae232d4bb47c722c83a7cf6ee8832f038b072eb803a47cd7f753e80c9f6eedb8"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1d4}, 0x48) (async) socket$qrtr(0x2a, 0x2, 0x0) (async) connect$qrtr(r2, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc) (async) socket$qrtr(0x2a, 0x2, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) (async) pwritev(r4, &(0x7f0000000280)=[{&(0x7f0000000340)="f7", 0x1}], 0x300, 0x0, 0x0) (async) openat$cgroup_ro(r4, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x0, 0x0) (async) recvmmsg(r2, &(0x7f0000000ac0)=[{{0x0, 0xff2c, 0x0}, 0x1}], 0x40, 0x2, 0x0) (async) ioctl$sock_qrtr_SIOCGIFADDR(r2, 0x890b, 0x0) (async) connect$qrtr(r3, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) (async) writev(r3, &(0x7f0000000340)=[{&(0x7f0000000080)="fb", 0x1}], 0x1) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1a, 0x4, 0x0, 0x0, 0x3c531cb, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x300f000, 0xf, 0x0, &(0x7f0000000400)="1069c2704a075e307300ac14dd46df", 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_MGMT_C_ADD(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x54, r5, 0x1, 0x70bd23, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, '&*,\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x91}, 0x8800) (async) 2.15766659s ago: executing program 4 (id=3793): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@delsa={0x48, 0x12, 0x1, 0x0, 0x0, {@in=@dev}, [@srcaddr={0x14, 0xd, @in6=@rand_addr=' \x01\x00'}, @mark={0xc}]}, 0x48}}, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={0xffffffffffffffff, 0x0}, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x190, 0x5230}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_SELECT={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="380000004800110025bd7000ffdbdf250a002000", @ANYRES32=0x0, @ANYBLOB="0900000014000100ff200000000000000000000000008001080002"], 0x38}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@delsa={0x48, 0x12, 0x1, 0x0, 0x0, {@in=@dev}, [@srcaddr={0x14, 0xd, @in6=@rand_addr=' \x01\x00'}, @mark={0xc}]}, 0x48}}, 0x0) (async) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={0xffffffffffffffff, 0x0}, 0x20) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x190, 0x5230}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_SELECT={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="380000004800110025bd7000ffdbdf250a002000", @ANYRES32=0x0, @ANYBLOB="0900000014000100ff200000000000000000000000008001080002"], 0x38}}, 0x0) (async) 2.04518235s ago: executing program 0 (id=3794): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100000000000400048008000c8004000b800800020001000000a00008801c00078008000500000000000800f400000000004dfd050000000000240007800800050000000000000005000000000061ff05000000000008000500000000000400078014000780080006"], 0xd0}, 0x1, 0x0, 0x44000000}, 0x0) 1.998860603s ago: executing program 0 (id=3795): bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[], 0x48) 1.940455252s ago: executing program 0 (id=3796): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newqdisc={0x8c, 0x24, 0xe0b, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x9c4}, @TCA_TBF_PBURST={0x8, 0x7, 0x1fc0}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x8, 0x5, 0x4, 0x3}, 0xfffffffd, 0x83, 0xfffffffd}}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xa, 0x1, 0x1, 0x40, 0x2, 0xffffffff}}, {0x4}}]}]}, 0x8c}}, 0x4000080) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="4103082c1116480401020200c52cf7c25975e005b02f000006892f000300897c6b118777faffffff3066090cb600c5471d130a66321a54e7df305fbe258161b6fd8f2428652265d94c6fdbaefc57376a57c2feffff188be9427c323ef024a37016d2a7f9ab6e7941a6fc4f95aa73c1dfff4941f6503b5bd8c91db22cd33795481c94085fa12cdc679ac2a5d7b5d99b93fb07acb0da680e78b74c74aae8d7690d5986a9af81622a0ac210bc7b5ca5fed11cb54d046642670041e846bb184ff5d39fe8516d2d2a8d84e6e7dfcb2b8a8023444db513a3d7a124b59f0a5cd36489dbbb75cce3145d0ea3c3aa21af7cbcbc7a7575db782e757ca543109f5ddcec4930aa91f4119ea3d1f56140cb86cfe0724b23904ef5d05c725ee23918a502b1afe09fb0757d", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 1.801135988s ago: executing program 3 (id=3798): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000003c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x24, r3, 0x1, 0x70bf2c, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c080}, 0x4040000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000002c0)={0x2c, r7, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'macvtap0\x00'}}]}]}, 0x2c}}, 0x0) sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)={0xec, r7, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xb}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3ff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000000}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9207}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffff8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x40}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xef}, @TIPC_NLA_MON_REF={0x8}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x4}, 0x4000084) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'vlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r1], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bond0\x00'}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000003c0)) (async) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x24, r3, 0x1, 0x70bf2c, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c080}, 0x4040000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000002c0)={0x2c, r7, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'macvtap0\x00'}}]}]}, 0x2c}}, 0x0) (async) sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)={0xec, r7, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xb}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3ff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000000}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9207}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffff8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x40}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xef}, @TIPC_NLA_MON_REF={0x8}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x4}, 0x4000084) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'vlan0\x00'}) (async) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r1], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) (async) 1.761602088s ago: executing program 1 (id=3799): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0xa, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000c60001002500000085100000010000009500000000000000184000000200fffe00000000000000009500000000000000850000e01200000095"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x807}, 0x94) 1.698008057s ago: executing program 4 (id=3800): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000f80)={'bond_slave_0\x00', &(0x7f0000000400)=@ethtool_stats={0x17, 0x1, [0x0]}}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'veth0\x00', {0x2, 0x4e22, @multicast2}}) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$sock_buf(r3, 0x1, 0x1c, 0x0, &(0x7f0000000040)) setsockopt$inet_int(r2, 0x0, 0x13, &(0x7f0000000040), 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r5 = socket(0x1, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x5452, &(0x7f0000000380)={'gre0\x00', 0x0}) recvmsg(r5, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(r5, &(0x7f0000001040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x80) r6 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r6, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e1e, 0x951, @local, 0x80000000}, 0x1c, 0x0, 0x0, &(0x7f0000000440)=[@rthdr_2292={{0x28, 0x29, 0x5, {0x0, 0x2, 0x2, 0x1, 0x0, [@ipv4={'\x00', '\xff\xff', @remote}]}}}], 0x28}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r7, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x3, 0x600}}, 0x20) listen(r4, 0xb) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000200)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10, 0xffff}}}}}}, 0x0) socket$kcm(0x29, 0x5, 0x0) 1.688760973s ago: executing program 0 (id=3801): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f000009f580), r0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x303, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x1}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x4}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22e8a65c15}, 0x4008840) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1a600000", @ANYRES16=r3, @ANYBLOB="fe0376d8bc1a61ea0000ffb3014d11000700f800220000000000000040000000ed", @ANYRES64], 0x11c}, 0x1, 0x0, 0x0, 0x4088}, 0x44840) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.683821533s ago: executing program 2 (id=3802): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x188, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0xa8, 0xf0, 0x0, {}, [@common=@unspec=@time={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@ip={@local, @local, 0x0, 0x0, 'veth0_to_team\x00', 'veth1_virt_wifi\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x401, 0xfffffffc, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0x743a}, @IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}, 0x1, 0x0, 0x0, 0x240088d0}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=r0, @ANYBLOB="c30c42470000009c68b59d800a00010076786c616e000000180002801400103ec39a3c71405e993598a1fd78c0e31cc4d7569746bca088adf3a287e2a106a95b09f60456e9ee2866dea1fbb78984b314a40e5fda4680bb5006ecbc02d5aaa602c234a0703b59d3c0"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) 1.671344271s ago: executing program 1 (id=3803): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x144, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x1, 0x394, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@dev={0xac, 0x14, 0x14, 0x1a}, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0x6, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x3}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fee33c4ae20000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd7000043500000a0001002000000000000000480003006465666c617465"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a00", @ANYRES32=0x0, @ANYRES64], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 1.501214527s ago: executing program 1 (id=3804): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f00000014c0)={0x98, 0x26, 0x0, 0x70bd29, 0x25dfdbff, {0x13}, [@generic="15feb8cd2506723ba6ca25086dae8bc9eb0a2f5be33cbb5ad018d0d1eaff48ad470db9ec2e638a38e270cf6ed757e3bd330e36e8a70160f688f430946536cfc16a7eb9cee4b802555524fbdc9efa367519da56c2aeb1c25b10fe03b540bb5ccb262470342f38e424a7619a82e9b86433ae49e9c589a383360950ba2793040020e1"]}, 0x98}, 0x1, 0x0, 0x0, 0x5}, 0x40000) (async) sendmsg$nl_generic(r1, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f00000014c0)={0x98, 0x26, 0x0, 0x70bd29, 0x25dfdbff, {0x13}, [@generic="15feb8cd2506723ba6ca25086dae8bc9eb0a2f5be33cbb5ad018d0d1eaff48ad470db9ec2e638a38e270cf6ed757e3bd330e36e8a70160f688f430946536cfc16a7eb9cee4b802555524fbdc9efa367519da56c2aeb1c25b10fe03b540bb5ccb262470342f38e424a7619a82e9b86433ae49e9c589a383360950ba2793040020e1"]}, 0x98}, 0x1, 0x0, 0x0, 0x5}, 0x40000) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000018c0)={0x54, r0, 0x511, 0x400000, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xd769}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vxcan1\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40850}, 0x0) (async) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000018c0)={0x54, r0, 0x511, 0x400000, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xd769}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vxcan1\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40850}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'bond0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000200)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, 0x0, 0x0) r5 = socket$nl_crypto(0x10, 0x3, 0x15) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001580)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xd, '\x00', r3, 0xffffffffffffffff, 0x5, 0x4}, 0x50) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$netlink(r5, &(0x7f0000001700)={&(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0xe6c2000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000001740)=ANY=[@ANYBLOB="010000800000000027bd7000fedbdf250c001d000c08c4944d9ad0b8872064dc70250009000000091400b10000000000d369e34bbbcba9308208b519c240a1a652a797a29200c4ab5c2adf5c8f8413a8287c3f8c6d537568f27159db99a66c37fd6771dfef63af97df0157e68f1ed9fa701db3ae13ffc6566534f1b3d25408bac54ebae576ecf4bf2122a7921a09c4561568df889f1aedf82164f688e496a1a4873942d9bf2bd554833a5bb126a6f432a75350bf8a12b42f1d0dfd3d0d06f2fac298da3510adc05f70c7416ab61db45ec3fea0c32dff443572a3d9dc72747cf96510c72f7a7e3d8b340c86"], 0x30}, {&(0x7f0000000480)={0x1024, 0x2d, 0x1, 0x70bd26, 0x25dfdbfd, "", [@typed={0x14, 0x112, 0x0, 0x0, @ipv6=@mcast2}, @generic, @generic="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"]}, 0x1024}, {&(0x7f00000002c0)={0xc8, 0x1a, 0xc00, 0x70bd27, 0x25dfdbfc, "", [@generic="779c25f0719eb0bf4b96606533803c5707fcac327093168e8edfec3e047dd93d31038c2c62e32fec", @generic="3ef7d4641f95bf9786e963dcc0e518ca2213f7cc75f5757cdeaa9bcb40edcb729ca9d1ecabc2e5e67bdb80b1940acb734fb42580f332a16c24f91d83bddcfd2b2ad68294bac1b065790b2501d600b971a3683b3f44e316f5e8d8bac57b6b443dd26bb7fbb4a81b404d2b333fafd40d6908590808bcccad1f9696994295fc577604eaa5dd4b03cb22acff4631ca85"]}, 0xc8}], 0x3, &(0x7f0000001640)=[@rights={{0x28, 0x1, 0x1, [r2, r2, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r7, 0xffffffffffffffff, r2]}}, @rights={{0x1c, 0x1, 0x1, [r2, 0xffffffffffffffff, r2]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}], 0x90, 0x400c000}, 0x80) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_MASTER={0x8, 0xa, r4}, @IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_SLAVE2={0x8, 0x2, r4}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) 1.370245843s ago: executing program 3 (id=3805): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000540)) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r2 = socket$packet(0x11, 0x3, 0x300) getpeername$packet(r2, &(0x7f0000000040), &(0x7f0000000080)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0x17, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x8}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x6, 0x0, 0xb, 0xa}, {0xf}}, [@printk={@lu, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x2, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}, {0x15}}], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$packet_buf(r4, 0x107, 0xd, &(0x7f0000000200)=""/132, &(0x7f00000002c0)=0x84) ioctl$F2FS_IOC_GET_PIN_FILE(r3, 0x8004f50e, &(0x7f0000000300)) 1.369392109s ago: executing program 2 (id=3806): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000007000000050000000000000604000000005f530000000000000033edbc59ee09d0c2b388f2ddf43ffa0ffd74dcc73ab5b2ed2a233ddaeab0e637f6c899850a62998c97f7e5556c59c5ccd94b673183be97671382970e79edd4917274be4c70209e3f4d3b909a40881a1ed2b376fe989a0b31983d722d299939487a16ae31cadc742f99ffaea5c6dce1af4c28b31bf37854e96c0c134f824cbf8abe2894305c19a5bff982ddf15797e6c6"], 0x0, 0x2b, 0x0, 0x1, 0x9}, 0x28) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300), 0x0, 0x0, 0x40}}, 0x40) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x8, 0x80000, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xfffe}}}]}, 0x38}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$IEEE802154_ADD_IFACE(r3, &(0x7f0000000680)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)=ANY=[@ANYBLOB="40a1a3fa", @ANYRES16=r4, @ANYBLOB="02002dbd7000fcdbdf25210000000a0001007770616e340000000c00050000000000000000000a0001007770616e310000000500200000000000"], 0x40}}, 0x4010) r5 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r6 = socket(0x2b, 0x80801, 0x1) r7 = socket$packet(0x11, 0x2, 0x300) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="1802000007000000000000002080020085000000750800000000010000000000e6d595d5c8148fee3677dd8da43f1161dc748cf14026a8dd6c208bc5ce4e9d603f389011faf3a2543ab45ff27d98a5b1f365b45be6b610c11b529a1d1f84957636535f580d4d09632f80b67a67ee16df4b319df27e22b3085e7a17e147ee5bdd041417d8676223a34a2acaefaf73a01c7e8efe29018efe9702c906012b51898c799fc44530e27ad4cfc33ccb3f289766697ffe9b63698f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000180)=r9, 0x4) socket(0xf, 0x2, 0x6) r10 = socket(0x22, 0x2, 0x23) close(r10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000240a05"], 0xf0}}, 0x4000000) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x10000, @empty, 0x43}, 0x1c) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x20) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r5, 0x8982, &(0x7f00000001c0)) socket$nl_netfilter(0x10, 0x3, 0xc) 1.305873591s ago: executing program 1 (id=3807): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x200080, 0x0, 0x0, 0x20}, 0x10) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000001a0001002cbd7000000000000a00000005"], 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x20000004) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYRES8=r0, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRESDEC=r0, @ANYRESHEX=r0, @ANYRESHEX=r0, @ANYRESOCT=r1], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0x14, &(0x7f00000003c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}}, @printk={@llu, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x0, 0xe, 0x0, &(0x7f0000000900)="928e04b416cac951c35f7f4586e6", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.300699777s ago: executing program 3 (id=3808): r0 = socket$alg(0x26, 0x5, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0x2a}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000004c00)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002540)=""/4096, 0x2328}], 0x1}, 0x2ca998c3}], 0x1, 0x40000021, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b40), 0x2328}}, 0x0) 1.13025463s ago: executing program 3 (id=3809): r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000001ac0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, r1}, 0x14) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r5 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r4, r4, 0x2f, 0x0, @void}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000080)={r5, r4, 0x4, r4}, 0x10) r6 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_ADD_RULE(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x3f3, 0x0, 0x0, 0x0, {0x10, 0x3fb, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000]}}, 0x420}}, 0x0) syz_emit_ethernet(0x15e6, &(0x7f00000000c0)=ANY=[], 0x0) r7 = socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) 842.029605ms ago: executing program 4 (id=3810): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x6c, 0x10, 0x403, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0xff7f}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x34, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @mcast2}]}}}, @IFLA_LINK={0x8}]}, 0x6c}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000008c0)={0x14, 0x2, 0x8, 0x3, 0x0, 0x0, {0x0, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x8004010}, 0x4) 386.187067ms ago: executing program 0 (id=3811): socket$nl_xfrm(0x10, 0x3, 0x6) (async) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000080)={'ip6gre0\x00', @random="522b439d74c3"}) (async) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000080)={'ip6gre0\x00', @random="522b439d74c3"}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a0b04000000000000000002000000480004802c0001800b000100736f636b657400001c000280080002400000000b08000140000000ffff000300000000891800018011000100666c6f775f6f66666c6f6164000000000900010073797a30000000000900020073797a32"], 0x9c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) socket(0x15, 0x5, 0x0) (async) r5 = socket(0x15, 0x5, 0x0) getsockopt(r5, 0x200000000114, 0x271e, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) ioctl$BTRFS_IOC_QUOTA_CTL(r5, 0xc0109428, &(0x7f0000000140)={0x1, 0x1ff}) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000001c0)=ANY=[@ANYBLOB="5937182347bcffffffffffff86dd609d008000183aff00000000000000000000000000000000ff02000000000000000000000000000187009078fe8000000000000000000000000000aa0000ff9b"], 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01030003000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c00000010001ffffcfffffffdffffff00000000", @ANYRES32=0x0, @ANYBLOB="0002010000000000240012800b00010065727370616e000014000280050016000000000008000700ac1414bb08000a00", @ANYRES32=r6], 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c00000010001ffffcfffffffdffffff00000000", @ANYRES32=0x0, @ANYBLOB="0002010000000000240012800b00010065727370616e000014000280050016000000000008000700ac1414bb08000a00", @ANYRES32=r6], 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000240035b900000000000000000700000006000480ffef0000060003"], 0x24}}, 0x4800) 314.346025ms ago: executing program 2 (id=3812): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newqdisc={0x8c, 0x24, 0xe0b, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x9c4}, @TCA_TBF_PBURST={0x8, 0x7, 0x1fc0}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x8, 0x5, 0x4, 0x3}, 0xfffffffd, 0x83, 0xfffffffd}}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xa, 0x1, 0x1, 0x40, 0x2, 0xffffffff}}, {0x4}}]}]}, 0x8c}}, 0x4000080) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 313.699075ms ago: executing program 1 (id=3813): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000040000000200000000000008000000000000610022f0192477e33d7ce45f3ff38e89a83582b74313ec87830237842a76cb5ab567d828"], 0x0, 0x28}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000000000000000000009500a500000000003e62782f6b62fe583a205a2a93679f78609d6ca7f05ba88e8460d0693a8e47c2857ff1c02f24ca929b6aec07a02b58cbd88131bb0d547c9bab43442e4535f88409162afd1ed8ff5a113677be48432632a733fb0c58fcdba24799f692860f292f268d00eac7dd739212a24e74fef584daca158d64b64536a0c21a0ab5a3e038038aaef7bd2ea0621eb7be6fc89005be16748d73f3a1887006e10ed1fb7d9eb609d12ae5bcfd530400e18f6ad05fe15db26a4951f34aa257313b453b"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, r1, 0x8, 0x0, 0x0, 0x14, 0x0, 0xff3d}, 0x80) 311.897378ms ago: executing program 4 (id=3814): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x40048850) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWCHAIN={0xc0, 0x3, 0xa, 0x76a9bba1a690db0f, 0x0, 0x0, {0xa, 0x0, 0x2005}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_USERDATA={0x8c, 0xc, "ba107a38eae015ed802fee91bf19ecfa37b1912886a8de9341a3b62aa93551cd443d79eeb6f0d9a36c194d82a529e29bcc079266b9bd3d77717b80750a178f1f88963b4aa6f14df606a52d27b47572a3790c83309608e852bbf5115d8bd46a66d045bcbdaf25016f90007f664d61d216b6d7b9a49dedef7261bd0e68260f6813235d5fa16f9252de"}, @NFTA_CHAIN_POLICY={0x8}]}, @NFT_MSG_NEWTABLE={0x88, 0x0, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0x44, 0x6, "41a1b721d1cacef2f9b1b7add06341a56235257b3cf6e33b317315ed2fb156b53b11580cd6f3223f5ce3fcefe06527f4c2e07f017de070d0758a71f2e92e7f8a"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x58, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELRULE={0x54, 0x8, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x1c4}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)={0x2c, 0x0, 0x9, 0x401, 0x0, 0x0, {0x7}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8}}]}, 0x2c}}, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, &(0x7f00000001c0)={'icmp6\x00'}, &(0x7f0000000240)=0x1e) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r4, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x4000, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffa888}}}}}}}, 0xfdef) r6 = socket$inet(0x2, 0x2, 0x5) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) close(r9) socket$inet(0x2, 0x2, 0x1) write$cgroup_subtree(r8, &(0x7f0000000140)=ANY=[], 0x48) splice(r7, 0x0, r9, 0x0, 0x3000, 0x100000000000000d) r10 = socket(0x2, 0x80805, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) sendmmsg$inet(r10, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x7, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)='\x00', 0x1}], 0x1}}], 0x1, 0x4000000) r11 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r10, 0x84, 0x10, &(0x7f0000000400)=@sack_info={r12, 0x12, 0x80}, 0xc) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r6, 0x84, 0x6d, &(0x7f0000000100)={r12, 0x56, "96c4744b146d21856b5f1601212aeccc119596f56a91414de15e5ad383e888ef5533407596832bd4d961206d64ed6b5bd6eee373a7f8a0dd76e73cd5f3a1530abff498fcde38918c35ed56df768546575d61e516d396"}, &(0x7f0000000180)=0x5e) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000068000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000f1ff08000540000000212c0011800a0001006c696d69740000001c0002800c00024000000000000000030c00014000000000000001014c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000200003800c00008008000340000000020c000080080003400000000204000080140000001000010000000000000000000084000a"], 0xfc}}, 0x0) 188.259805ms ago: executing program 3 (id=3815): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100000000000400048008000c8004000b800800020001000000a00008801c00078008000500000000000800f400000000004dfd050000000000240007800800050000000000000005000000000061ff05000000000008000500000000000400078014000780080006"], 0xd0}, 0x1, 0x0, 0x100000000000000}, 0x0) 159.214096ms ago: executing program 2 (id=3816): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d40)=@newsa={0x184, 0x10, 0x1, 0xfffffffe, 0x25dfdbfd, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8253c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1}, {0x2, 0x8}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x28}, [@algo_comp={0x48, 0x3, {{'lzjh\x00'}}}, @algo_auth_trunc={0x4c, 0x14, {{'sha1-asm\x00'}, 0x0, 0x80}}]}, 0x184}, 0x1, 0x0, 0x0, 0x8801}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 150.364418ms ago: executing program 1 (id=3817): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/uts\x00') (async) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/uts\x00') unshare(0x6a040000) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, 0x0, 0x90) socket(0x8, 0x3, 0x3) (async) r1 = socket(0x8, 0x3, 0x3) ioctl$sock_netrom_SIOCADDRT(r1, 0x6180, 0x0) (async) ioctl$sock_netrom_SIOCADDRT(r1, 0x6180, 0x0) sendmmsg$alg(r1, &(0x7f0000005ec0)=[{0x0, 0x0, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000000)="1bf1b44bbfa5f7b21c", 0x9}], 0x2, 0x0, 0x0, 0x2006c040}], 0x1, 0x4814) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$AUTOFS_IOC_SETTIMEOUT(r0, 0x80049367, &(0x7f0000000040)=0x7) 1.027384ms ago: executing program 2 (id=3818): r0 = socket(0x2b, 0x80801, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000200)=@nat={'nat\x00', 0x1b, 0x5, 0x360, 0x220, 0x0, 0xffffffff, 0x0, 0xa8, 0x2c8, 0x2c8, 0xffffffff, 0x2c8, 0x2c8, 0x8000000, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x10, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x65, @icmp_id=0x66}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote, 0x4, 0x10, [0x8, 0x2b, 0x36, 0x1a, 0x23, 0x29, 0x30, 0x7, 0x6, 0xa, 0x3d, 0x31, 0xc, 0x37, 0x15, 0x3], 0x1, 0x1, 0x10}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x4, @broadcast, @multicast2, @icmp_id=0x64, @gre_key=0x5}}}}, {{@ip={@multicast1, @multicast1, 0xff, 0xffffffff, 'ipvlan1\x00', 'caif0\x00', {0xff}, {0xff}, 0x21, 0x6, 0x1}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x3, @broadcast, @remote, @icmp_id=0x67, @port=0x4e23}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000008c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000880)={&(0x7f00000006c0)={0x1b0, 0x0, 0x4, 0x4, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x101}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_BEARER={0x158, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1b3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x64, @private1, 0xffff}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x4, @empty, 0x9}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @private=0xa010100}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x5, @remote, 0xacc7}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'veth0_vlan\x00'}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xce}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10}]}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xaa0}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}]}]}, 0x1b0}}, 0x80) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) bind$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0xffffffff) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e21}, 0x6e) r4 = socket$unix(0x1, 0x5, 0x0) connect$unix(r4, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0xc8, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x6}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0x6e, 0x7, 0x1, 0x0, "efec8d9633776a0a21a87142fe3b065597c54cfda6150967c42812a0ad4edc20cd69c706164f9d9b068d5eb50e93f6329503cb5fbcd7efaeeac4e83fa24c958745e1be46aee85c1b1e8b6a83099bf5df91eb7b148aba996d5f79124f4dc9610591610f28e51c23c155e0"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xf0}}, 0x0) 0s ago: executing program 3 (id=3819): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00\x00\x00'], 0x48) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000300)={r0, &(0x7f0000000180)='-\xce]\':,\x00', 0x410000, &(0x7f00000001c0)={@align=0x5400000, {0xbbd, 0x81, 0x9, 0x57}}, 0x9, &(0x7f0000000280), &(0x7f00000002c0)}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008c00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r1, &(0x7f0000000000)=""/42, 0x2a, 0x40, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x1c, r3, 0x705, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40008d4}, 0x0) kernel console output (not intermixed with test programs): [ 374.230770][T15119] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.444451][T15119] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.576446][T15157] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2650'. [ 374.601176][T15119] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.625464][T15157] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2650'. [ 374.770869][ T143] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.789815][T15159] netlink: 'syz.4.2651': attribute type 31 has an invalid length. [ 374.811012][T10805] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.850277][T10805] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.868899][T15162] syzkaller0: entered promiscuous mode [ 374.888235][T15162] syzkaller0: entered allmulticast mode [ 374.896595][T10805] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.917622][T15162] tipc: Enabled bearer , priority 0 [ 374.929908][T15161] tipc: Resetting bearer [ 374.980069][T15161] tipc: Disabling bearer [ 375.008242][T15174] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2656'. [ 375.080270][T15177] syzkaller0: entered promiscuous mode [ 375.085974][T15177] syzkaller0: entered allmulticast mode [ 375.135344][T15179] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2658'. [ 375.145862][T15179] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2658'. [ 375.190705][T15181] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2659'. [ 375.201671][T15181] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2659'. [ 375.274635][T15185] A link change request failed with some changes committed already. Interface veth0_to_team may have been left with an inconsistent configuration, please check. [ 375.294235][T15185] netlink: 'syz.2.2661': attribute type 30 has an invalid length. [ 375.428666][T15195] gretap0: entered promiscuous mode [ 375.438954][T15195] gretap0: left promiscuous mode [ 375.668223][T15213] netlink: 'syz.1.2670': attribute type 10 has an invalid length. [ 375.837434][T15225] netlink: 'syz.1.2673': attribute type 2 has an invalid length. [ 375.960260][T15233] openvswitch: netlink: Message has 576 unknown bytes. [ 375.967698][T15233] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 376.243028][ T10] IPVS: starting estimator thread 0... [ 376.341826][T15249] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 376.402905][T15245] IPVS: using max 29 ests per chain, 69600 per kthread [ 376.489084][T15258] netlink: 'syz.4.2682': attribute type 1 has an invalid length. [ 376.568117][T15264] netlink: 'syz.3.2685': attribute type 10 has an invalid length. [ 376.649227][T15268] tipc: Enabled bearer , priority 0 [ 376.657387][T15268] syzkaller0: entered promiscuous mode [ 376.663287][T15268] syzkaller0: entered allmulticast mode [ 376.694956][T15268] tipc: Resetting bearer [ 376.721296][T15267] tipc: Resetting bearer [ 376.766442][T15267] tipc: Disabling bearer [ 376.776575][T15275] xt_TCPMSS: Only works on TCP SYN packets [ 376.782157][T15278] syzkaller0: entered promiscuous mode [ 376.788931][T15278] syzkaller0: entered allmulticast mode [ 376.827119][T15275] syzkaller0: entered promiscuous mode [ 376.832632][T15275] syzkaller0: entered allmulticast mode [ 377.227515][T15290] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 378.406853][ T1300] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.440288][ T1300] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 378.840806][T15332] __nla_validate_parse: 17 callbacks suppressed [ 378.840826][T15332] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2707'. [ 379.025813][T15348] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2712'. [ 379.104959][T15348] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2712'. [ 379.182083][T15353] netlink: 'syz.2.2714': attribute type 1 has an invalid length. [ 379.190390][T15355] netlink: 312 bytes leftover after parsing attributes in process `syz.1.2712'. [ 379.286158][T15353] bond15: entered promiscuous mode [ 379.307313][T15353] 8021q: adding VLAN 0 to HW filter on device bond15 [ 379.385747][T15358] 8021q: adding VLAN 0 to HW filter on device bond15 [ 379.401954][T15358] bond15: (slave wireguard0): The slave device specified does not support setting the MAC address [ 379.413440][T15358] bond15: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 379.430811][T15358] bond15: (slave wireguard0): making interface the new active one [ 379.440180][T15358] wireguard0: entered promiscuous mode [ 379.448848][T15358] bond15: (slave wireguard0): Enslaving as an active interface with an up link [ 379.458478][T15325] 8021q: VLANs not supported on ip6tnl0 [ 379.511743][ T5147] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 379.524602][ T5147] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 379.544343][ T5147] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 379.552429][ T5147] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 379.568107][ T5147] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 379.626906][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 379.635016][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 379.645079][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 379.654864][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 379.668082][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 379.689770][T15369] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2717'. [ 379.753495][T15372] dvmrp0: entered allmulticast mode [ 379.761752][T15372] bridge_slave_0: entered promiscuous mode [ 379.770884][T15372] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 379.799906][T15372] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2718'. [ 379.802163][T15364] wlan1 speed is unknown, defaulting to 1000 [ 379.847150][T15364] lo speed is unknown, defaulting to 1000 [ 379.864383][T15364] virt_wifi0 speed is unknown, defaulting to 1000 [ 380.087617][T15382] bridge_slave_0: entered promiscuous mode [ 380.106891][T15382] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 380.126650][T15388] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2723'. [ 380.175422][T15393] siw: device registration error -23 [ 380.290417][T15405] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2727'. [ 380.515994][T15413] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2729'. [ 380.571237][T15364] chnl_net:caif_netlink_parms(): no params data found [ 380.650747][T15413] IPv6: sit3: Disabled Multicast RS [ 380.801854][T15429] syzkaller0: entered promiscuous mode [ 380.832080][T15429] syzkaller0: entered allmulticast mode [ 380.885523][T15432] openvswitch: netlink: IP tunnel attribute has 5 unknown bytes. [ 380.895739][T15429] tipc: Enabled bearer , priority 0 [ 380.933593][T15428] tipc: Resetting bearer [ 380.996937][T15428] tipc: Disabling bearer [ 381.105284][T15364] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.113802][T15364] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.129967][T15364] bridge_slave_0: entered allmulticast mode [ 381.145072][T15364] bridge_slave_0: entered promiscuous mode [ 381.154878][T15364] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.162096][T15364] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.165555][T15442] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2736'. [ 381.178036][T15364] bridge_slave_1: entered allmulticast mode [ 381.189211][T15364] bridge_slave_1: entered promiscuous mode [ 381.236062][T15364] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 381.274961][T15364] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 381.382133][T15364] team0: Port device team_slave_0 added [ 381.407804][T15364] team0: Port device team_slave_1 added [ 381.480078][T15364] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 381.487198][T15364] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 381.519970][T15364] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 381.586965][T15364] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 381.603096][T15364] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 381.652116][T15364] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 381.763192][ T5147] Bluetooth: hci5: command tx timeout [ 381.888995][T15364] hsr_slave_0: entered promiscuous mode [ 381.906893][T15364] hsr_slave_1: entered promiscuous mode [ 381.916926][T15364] debugfs: 'hsr0' already exists in 'hsr' [ 381.922706][T15364] Cannot create hsr debugfs directory [ 382.241958][T15502] macsec2: entered allmulticast mode [ 382.258696][ T2684] block nbd1: Possible stuck request ffff888026c08000: control (read@0,1024B). Runtime 90 seconds [ 382.269582][ T2684] block nbd1: Possible stuck request ffff888026c08200: control (read@1024,1024B). Runtime 90 seconds [ 382.281063][ T2684] block nbd1: Possible stuck request ffff888026c08400: control (read@2048,1024B). Runtime 90 seconds [ 382.292486][ T2684] block nbd1: Possible stuck request ffff888026c08600: control (read@3072,1024B). Runtime 90 seconds [ 382.293924][T15502] macsec0: entered allmulticast mode [ 382.394597][T15511] FAULT_INJECTION: forcing a failure. [ 382.394597][T15511] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 382.405948][T15510] nbd: nbd2 already in use [ 382.409150][T15511] CPU: 1 UID: 0 PID: 15511 Comm: syz.1.2759 Not tainted syzkaller #0 PREEMPT(full) [ 382.409174][T15511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 382.409190][T15511] Call Trace: [ 382.409197][T15511] [ 382.409206][T15511] dump_stack_lvl+0xe8/0x150 [ 382.409238][T15511] should_fail_ex+0x412/0x560 [ 382.409266][T15511] _copy_from_user+0x2d/0xb0 [ 382.409294][T15511] do_sock_getsockopt+0x165/0x3f0 [ 382.409325][T15511] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 382.409353][T15511] ? __fget_files+0x3a0/0x420 [ 382.409378][T15511] ? __fget_files+0x2a/0x420 [ 382.409408][T15511] __x64_sys_getsockopt+0x1a4/0x240 [ 382.409435][T15511] do_syscall_64+0x14d/0xf80 [ 382.409460][T15511] ? trace_irq_disable+0x3b/0x150 [ 382.409484][T15511] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.409503][T15511] ? clear_bhb_loop+0x40/0x90 [ 382.409525][T15511] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.409547][T15511] RIP: 0033:0x7f25e799c799 [ 382.409565][T15511] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 382.409581][T15511] RSP: 002b:00007f25e8874028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 382.409599][T15511] RAX: ffffffffffffffda RBX: 00007f25e7c15fa0 RCX: 00007f25e799c799 [ 382.409613][T15511] RDX: 000000000000007c RSI: 0000000000000084 RDI: 0000000000000003 [ 382.409625][T15511] RBP: 00007f25e8874090 R08: 0000200000001080 R09: 0000000000000000 [ 382.409645][T15511] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 382.409656][T15511] R13: 00007f25e7c16038 R14: 00007f25e7c15fa0 R15: 00007fff8d6f5458 [ 382.409686][T15511] [ 382.588989][T15516] block nbd2: NBD_DISCONNECT [ 382.593809][T15516] block nbd2: Send disconnect failed -32 [ 382.667768][T15521] netlink: 'syz.0.2763': attribute type 1 has an invalid length. [ 382.767140][T15521] 8021q: adding VLAN 0 to HW filter on device bond9 [ 382.808782][T15521] vlan5: entered promiscuous mode [ 382.816785][T15521] bond9: entered promiscuous mode [ 382.827109][T15521] vlan5: entered allmulticast mode [ 382.842077][T15521] bond9: entered allmulticast mode [ 382.866490][T15521] sctp: [Deprecated]: syz.0.2763 (pid 15521) Use of int in maxseg socket option. [ 382.866490][T15521] Use struct sctp_assoc_value instead [ 382.938642][T15521] bond9: (slave bridge11): making interface the new active one [ 382.948769][T15521] bridge11: entered promiscuous mode [ 382.954605][T15534] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 382.955039][T15521] bridge11: entered allmulticast mode [ 382.975728][T15521] bond9: (slave bridge11): Enslaving as an active interface with an up link [ 383.250640][T10806] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.267978][T10806] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.277853][T10806] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.286413][T10806] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.844784][ T5147] Bluetooth: hci5: command tx timeout [ 383.856397][T15568] syzkaller0: entered promiscuous mode [ 383.861884][T15568] syzkaller0: entered allmulticast mode [ 383.901653][T15570] netlink: 'syz.1.2776': attribute type 1 has an invalid length. [ 383.923803][T15570] 8021q: adding VLAN 0 to HW filter on device bond11 [ 383.962466][T15570] vlan8: entered promiscuous mode [ 383.967952][T15570] bond11: entered promiscuous mode [ 383.973284][T15570] vlan8: entered allmulticast mode [ 383.978400][T15570] bond11: entered allmulticast mode [ 383.986725][T15570] __nla_validate_parse: 10 callbacks suppressed [ 383.986735][T15570] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2776'. [ 384.059205][T15574] sctp: [Deprecated]: syz.1.2776 (pid 15574) Use of int in maxseg socket option. [ 384.059205][T15574] Use struct sctp_assoc_value instead [ 384.074509][T15574] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2776'. [ 384.221082][T15576] wlan1 speed is unknown, defaulting to 1000 [ 384.228856][T15576] lo speed is unknown, defaulting to 1000 [ 384.235957][T15576] virt_wifi0 speed is unknown, defaulting to 1000 [ 385.922918][ T5147] Bluetooth: hci5: command tx timeout [ 386.039762][T15536] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 386.051467][T15551] netlink: 'syz.0.2767': attribute type 1 has an invalid length. [ 386.060224][T15364] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 386.062842][T15551] netlink: 728 bytes leftover after parsing attributes in process `syz.0.2767'. [ 386.090042][T15364] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 386.175848][T15364] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 386.182465][T15583] netlink: 'syz.4.2778': attribute type 1 has an invalid length. [ 386.212607][T15583] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2778'. [ 386.222177][T15583] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2778'. [ 386.225208][T15364] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 386.239770][T15583] netlink: 'syz.4.2778': attribute type 1 has an invalid length. [ 386.250925][T15583] netlink: 634 bytes leftover after parsing attributes in process `syz.4.2778'. [ 386.399380][T15364] 8021q: adding VLAN 0 to HW filter on device bond0 [ 386.433656][T15602] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2783'. [ 386.460090][T15605] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2784'. [ 386.465901][T15364] 8021q: adding VLAN 0 to HW filter on device team0 [ 386.471962][T15605] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2784'. [ 386.588179][T15609] bridge12: port 1(veth9) entered blocking state [ 386.609301][T15609] bridge12: port 1(veth9) entered disabled state [ 386.633439][T15609] veth9: entered allmulticast mode [ 386.641683][T15609] veth9: entered promiscuous mode [ 386.704035][T15602] bridge12: port 2(veth0_to_bond) entered blocking state [ 386.731181][T15602] bridge12: port 2(veth0_to_bond) entered disabled state [ 386.750881][T15602] veth0_to_bond: entered allmulticast mode [ 386.759666][T15602] veth0_to_bond: entered promiscuous mode [ 386.786753][ T317] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.793989][ T317] bridge0: port 1(bridge_slave_0) entered forwarding state [ 386.830580][T15609] bridge12: port 3(veth11) entered blocking state [ 386.845221][T15609] bridge12: port 3(veth11) entered disabled state [ 386.851851][T15609] veth11: entered allmulticast mode [ 386.858656][T15609] veth11: entered promiscuous mode [ 386.878161][ T317] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.885325][ T317] bridge0: port 2(bridge_slave_1) entered forwarding state [ 386.899754][T15619] netlink: 'syz.2.2786': attribute type 11 has an invalid length. [ 386.903269][T15622] syzkaller0: entered promiscuous mode [ 386.914346][T15622] syzkaller0: entered allmulticast mode [ 387.038623][T15624] tipc: Enabled bearer , priority 0 [ 387.072251][T15620] tipc: Resetting bearer [ 387.091164][T15620] tipc: Disabling bearer [ 387.179130][T15636] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2793'. [ 387.485589][T15364] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 387.525799][T15660] netlink: 'syz.0.2798': attribute type 11 has an invalid length. [ 387.586835][T15664] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 387.603232][T15364] veth0_vlan: entered promiscuous mode [ 387.607659][T15664] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 387.636147][T15364] veth1_vlan: entered promiscuous mode [ 387.705516][T15364] veth0_macvtap: entered promiscuous mode [ 387.722654][T15364] veth1_macvtap: entered promiscuous mode [ 387.762189][T15364] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 387.812160][T15364] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 387.848542][T15674] netlink: 'syz.2.2803': attribute type 322 has an invalid length. [ 387.860210][T10806] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.881465][T10806] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.920414][T10806] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.941090][T10806] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.002923][ T5147] Bluetooth: hci5: command tx timeout [ 388.255190][T15689] team0: Port device dummy0 removed [ 388.438896][T10806] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 388.459767][T10806] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 388.552918][T10802] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 388.561052][T10802] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 388.909687][T15739] lo: Caught tx_queue_len zero misconfig [ 389.040984][T15747] __nla_validate_parse: 14 callbacks suppressed [ 389.041007][T15747] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2824'. [ 389.073281][T15747] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2824'. [ 389.099924][T15747] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2824'. [ 389.109455][T15747] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2824'. [ 389.278492][T15759] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2830'. [ 389.408793][T15767] syzkaller1: entered promiscuous mode [ 389.415030][T15767] syzkaller1: entered allmulticast mode [ 389.451992][T15767] bond12 (unregistering): Released all slaves [ 389.664982][T15784] syzkaller0: entered promiscuous mode [ 389.670592][T15784] syzkaller0: entered allmulticast mode [ 389.881720][T15797] syzkaller0: entered promiscuous mode [ 389.890624][T15798] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.2841'. [ 389.891633][T15797] syzkaller0: entered allmulticast mode [ 389.926449][T15789] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2839'. [ 389.989464][T15797] netlink: 'syz.0.2842': attribute type 9 has an invalid length. [ 390.136556][T15812] batadv_slave_0: entered promiscuous mode [ 390.144281][T15809] batadv_slave_0: left promiscuous mode [ 390.202185][T15817] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2848'. [ 390.217626][T15803] wlan1 speed is unknown, defaulting to 1000 [ 390.226861][T15817] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2848'. [ 390.238444][T15803] lo speed is unknown, defaulting to 1000 [ 390.248804][T15803] virt_wifi0 speed is unknown, defaulting to 1000 [ 390.462529][T15831] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2852'. [ 390.473700][T15828] tipc: Enabling of bearer rejected, failed to enable media [ 390.579479][T15828] wlan1 speed is unknown, defaulting to 1000 [ 390.635625][T15828] lo speed is unknown, defaulting to 1000 [ 390.736528][T15828] virt_wifi0 speed is unknown, defaulting to 1000 [ 391.663937][T15876] wlan1 speed is unknown, defaulting to 1000 [ 391.672349][T15876] lo speed is unknown, defaulting to 1000 [ 391.680681][T15876] virt_wifi0 speed is unknown, defaulting to 1000 [ 391.950018][T15890] vlan2: entered promiscuous mode [ 391.992887][T15890] veth0_to_team: entered promiscuous mode [ 392.045374][T15890] vlan2: entered allmulticast mode [ 392.057545][T15890] veth0_to_team: entered allmulticast mode [ 392.250838][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 392.262081][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 392.284480][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 392.294576][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 392.302722][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 392.431488][T15905] Cannot find set identified by id 0 to match [ 392.490775][T15900] wlan1 speed is unknown, defaulting to 1000 [ 392.542013][T15900] lo speed is unknown, defaulting to 1000 [ 392.613755][T15902] wlan1 speed is unknown, defaulting to 1000 [ 392.613774][T15900] virt_wifi0 speed is unknown, defaulting to 1000 [ 392.678448][T15902] lo speed is unknown, defaulting to 1000 [ 392.709590][T15902] virt_wifi0 speed is unknown, defaulting to 1000 [ 392.918798][T15932] No such timeout policy "syz1" [ 392.973225][T15934] netlink: zone id is out of range [ 393.001418][T15934] netlink: set zone limit has 4 unknown bytes [ 393.289516][T15934] wlan1 speed is unknown, defaulting to 1000 [ 393.338778][T15934] lo speed is unknown, defaulting to 1000 [ 393.431533][T15934] virt_wifi0 speed is unknown, defaulting to 1000 [ 393.606460][T15900] chnl_net:caif_netlink_parms(): no params data found [ 393.870398][T15900] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.887874][T15900] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.895811][T15900] bridge_slave_0: entered allmulticast mode [ 393.906279][T15900] bridge_slave_0: entered promiscuous mode [ 393.916885][T15900] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.934231][T15900] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.949085][T15900] bridge_slave_1: entered allmulticast mode [ 393.967323][T15900] bridge_slave_1: entered promiscuous mode [ 393.975535][T15976] syzkaller0: entered promiscuous mode [ 393.981103][T15976] syzkaller0: entered allmulticast mode [ 394.009999][T15988] tipc: Enabled bearer , priority 0 [ 394.086970][T15967] tipc: Resetting bearer [ 394.120739][T15967] tipc: Disabling bearer [ 394.136101][T15900] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 394.173811][T15900] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 394.278169][T15900] team0: Port device team_slave_0 added [ 394.298901][T15900] team0: Port device team_slave_1 added [ 394.333011][T16003] __nla_validate_parse: 16 callbacks suppressed [ 394.333029][T16003] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2895'. [ 394.356644][T16007] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 394.365274][T16007] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 394.385669][T15900] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 394.402997][ T5147] Bluetooth: hci3: command tx timeout [ 394.407859][T15900] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 394.465869][T16009] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2897'. [ 394.481682][T15900] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 394.498364][T16009] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2897'. [ 394.505098][T15900] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 394.522972][T15900] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 394.541642][T16009] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2897'. [ 394.580298][T16016] netlink: 'syz.4.2899': attribute type 30 has an invalid length. [ 394.581235][T16009] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2897'. [ 394.588804][T15900] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 394.670113][T16024] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2903'. [ 394.714656][T16024] net veth1_virt_wifi virt_wifi0 (unregistering): left promiscuous mode [ 394.880547][T15900] hsr_slave_0: entered promiscuous mode [ 394.889260][T15900] hsr_slave_1: entered promiscuous mode [ 394.895848][T16038] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2907'. [ 394.943760][T15900] debugfs: 'hsr0' already exists in 'hsr' [ 394.949619][T15900] Cannot create hsr debugfs directory [ 395.222999][T16050] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2910'. [ 395.248500][T16055] wlan1 speed is unknown, defaulting to 1000 [ 395.258805][T16050] veth1_macvtap: left promiscuous mode [ 395.297055][T16055] lo speed is unknown, defaulting to 1000 [ 395.323762][T16055] virt_wifi0 speed is unknown, defaulting to 1000 [ 395.538280][T15900] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.746019][T15900] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.888785][T15900] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.007655][T15900] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.246642][T16098] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2925'. [ 396.319741][T16100] netlink: 'syz.3.2924': attribute type 13 has an invalid length. [ 396.408495][T15900] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 396.441882][T15900] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 396.468088][T15900] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 396.482959][ T5147] Bluetooth: hci3: command tx timeout [ 396.495426][T16104] wlan1 speed is unknown, defaulting to 1000 [ 396.495468][T15900] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 396.519506][T16104] lo speed is unknown, defaulting to 1000 [ 396.538276][T16118] netlink: 'syz.1.2931': attribute type 1 has an invalid length. [ 396.568370][T16118] 8021q: adding VLAN 0 to HW filter on device bond12 [ 396.576119][T16104] virt_wifi0 speed is unknown, defaulting to 1000 [ 396.657827][T16123] vlan9: entered promiscuous mode [ 396.663744][T16123] bond12: entered promiscuous mode [ 396.665593][T16125] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2932'. [ 396.669398][T16123] vlan9: entered allmulticast mode [ 396.684240][T16123] bond12: entered allmulticast mode [ 396.735771][T16118] sctp: [Deprecated]: syz.1.2931 (pid 16118) Use of int in maxseg socket option. [ 396.735771][T16118] Use struct sctp_assoc_value instead [ 396.936861][T15900] 8021q: adding VLAN 0 to HW filter on device bond0 [ 396.966725][T15900] 8021q: adding VLAN 0 to HW filter on device team0 [ 397.027148][ T143] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.034351][ T143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 397.098810][ T143] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.106025][ T143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 397.188275][T15900] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 397.424117][T16160] netlink: 'syz.3.2944': attribute type 1 has an invalid length. [ 397.489786][T16160] 8021q: adding VLAN 0 to HW filter on device bond1 [ 397.527833][T15900] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 397.562048][T16160] vlan3: entered promiscuous mode [ 397.579719][T16160] bond1: entered promiscuous mode [ 397.593347][T16160] vlan3: entered allmulticast mode [ 397.598495][T16160] bond1: entered allmulticast mode [ 397.642200][T16160] sctp: [Deprecated]: syz.3.2944 (pid 16160) Use of int in maxseg socket option. [ 397.642200][T16160] Use struct sctp_assoc_value instead [ 397.721022][T15900] veth0_vlan: entered promiscuous mode [ 397.767207][T15900] veth1_vlan: entered promiscuous mode [ 397.782221][T16178] syzkaller0: entered promiscuous mode [ 397.795216][T16178] syzkaller0: entered allmulticast mode [ 397.881442][T15900] veth0_macvtap: entered promiscuous mode [ 397.900994][T15900] veth1_macvtap: entered promiscuous mode [ 397.951531][T15900] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 397.976841][T15900] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 398.012037][ T1135] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.052721][ T1135] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.099704][T16190] bond10: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 398.112503][T16190] bond10 (unregistering): Released all slaves [ 398.136875][ T1135] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.145819][ T1135] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.168654][T16192] bond2: entered promiscuous mode [ 398.194414][T16199] macvlan2: entered promiscuous mode [ 398.200181][T16199] macvlan2: entered allmulticast mode [ 398.209543][T16199] bond2: (slave macvlan2): Opening slave failed [ 398.235868][T16195] syzkaller0: entered promiscuous mode [ 398.241443][T16195] syzkaller0: entered allmulticast mode [ 398.298706][T16195] tipc: Enabled bearer , priority 0 [ 398.331978][T16193] tipc: Resetting bearer [ 398.338295][T16207] netlink: 'syz.3.2958': attribute type 1 has an invalid length. [ 398.484561][T16207] 8021q: adding VLAN 0 to HW filter on device bond3 [ 398.553965][T16223] vlan4: entered promiscuous mode [ 398.566795][T16223] bond3: entered promiscuous mode [ 398.567650][ T5147] Bluetooth: hci3: command tx timeout [ 398.571990][T16223] vlan4: entered allmulticast mode [ 398.572007][T16223] bond3: entered allmulticast mode [ 398.591364][ T1135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 398.610539][ T1135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 398.672223][T16224] wlan1 speed is unknown, defaulting to 1000 [ 398.681491][T16207] sctp: [Deprecated]: syz.3.2958 (pid 16207) Use of int in maxseg socket option. [ 398.681491][T16207] Use struct sctp_assoc_value instead [ 398.720865][T16224] lo speed is unknown, defaulting to 1000 [ 398.732141][T10805] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 398.741934][T10805] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 398.787404][T16224] virt_wifi0 speed is unknown, defaulting to 1000 [ 398.816986][T16220] wlan1 speed is unknown, defaulting to 1000 [ 398.865963][T16220] lo speed is unknown, defaulting to 1000 [ 399.022906][T16220] virt_wifi0 speed is unknown, defaulting to 1000 [ 399.271711][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 399.284029][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 399.291836][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 399.300652][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 399.308699][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 399.515586][ T317] tipc: Resetting bearer [ 399.743425][T16259] syzkaller0: entered promiscuous mode [ 399.749249][T16259] syzkaller0: entered allmulticast mode [ 399.804788][T16247] wlan1 speed is unknown, defaulting to 1000 [ 399.847130][T16247] lo speed is unknown, defaulting to 1000 [ 399.871213][T16261] tipc: Started in network mode [ 399.885749][T16261] tipc: Node identity 42f401726499, cluster identity 4711 [ 399.911042][T16261] tipc: Enabled bearer , priority 0 [ 399.927686][T16247] virt_wifi0 speed is unknown, defaulting to 1000 [ 399.938103][T16258] tipc: Resetting bearer [ 399.951517][T16270] netlink: 'syz.3.2972': attribute type 1 has an invalid length. [ 399.971061][T16258] tipc: Disabling bearer [ 400.009371][T16270] 8021q: adding VLAN 0 to HW filter on device bond4 [ 400.094591][T16275] bond10: option min_links: invalid value (18446744073709551612) [ 400.102663][T16275] bond10: option min_links: allowed values 0 - 2147483647 [ 400.116341][T16275] bond10 (unregistering): Released all slaves [ 400.118442][T16279] __nla_validate_parse: 11 callbacks suppressed [ 400.118458][T16279] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2974'. [ 400.156131][T16270] vlan5: entered promiscuous mode [ 400.162236][T16270] bond4: entered promiscuous mode [ 400.179424][T16270] vlan5: entered allmulticast mode [ 400.194530][T16270] bond4: entered allmulticast mode [ 400.210710][T16274] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2972'. [ 400.260019][T16270] sctp: [Deprecated]: syz.3.2972 (pid 16270) Use of int in maxseg socket option. [ 400.260019][T16270] Use struct sctp_assoc_value instead [ 400.279815][T16270] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2972'. [ 400.327397][T16285] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2976'. [ 400.388165][T16247] chnl_net:caif_netlink_parms(): no params data found [ 400.463814][T16289] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2977'. [ 400.536185][T16247] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.540669][T16301] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2980'. [ 400.543514][T16247] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.543665][T16247] bridge_slave_0: entered allmulticast mode [ 400.545303][T16247] bridge_slave_0: entered promiscuous mode [ 400.574683][T16247] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.581856][T16247] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.589551][T16247] bridge_slave_1: entered allmulticast mode [ 400.598182][T16247] bridge_slave_1: entered promiscuous mode [ 400.623921][T16302] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 400.645423][ T5147] Bluetooth: hci3: command tx timeout [ 400.672435][T16301] vlan6: entered promiscuous mode [ 400.679223][T16301] bridge0: entered promiscuous mode [ 400.692040][T16299] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2979'. [ 400.712275][T16299] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2979'. [ 400.727947][T16247] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 400.748562][T16247] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 400.785107][T16301] netlink: 'syz.3.2980': attribute type 11 has an invalid length. [ 400.806876][T16301] netlink: 199788 bytes leftover after parsing attributes in process `syz.3.2980'. [ 400.840686][T16312] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2983'. [ 400.852637][T16247] team0: Port device team_slave_0 added [ 400.864982][T16247] team0: Port device team_slave_1 added [ 400.946936][T16247] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 400.960626][T16247] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 400.996269][T16247] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 401.014167][T16319] bond0: option min_links: invalid value (18446744071562133520) [ 401.021894][T16319] bond0: option min_links: allowed values 0 - 2147483647 [ 401.035031][T16321] openvswitch: netlink: IP tunnel dst address not specified [ 401.057695][T16247] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 401.067695][T16247] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 401.096455][T16247] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 401.153814][T16329] netlink: 'syz.0.2989': attribute type 1 has an invalid length. [ 401.207584][T16330] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.280436][T16329] 8021q: adding VLAN 0 to HW filter on device bond10 [ 401.296397][T16247] hsr_slave_0: entered promiscuous mode [ 401.303049][T16247] hsr_slave_1: entered promiscuous mode [ 401.310007][T16247] debugfs: 'hsr0' already exists in 'hsr' [ 401.315860][T16247] Cannot create hsr debugfs directory [ 401.330832][T16335] vlan6: entered promiscuous mode [ 401.337282][T16335] bond10: entered promiscuous mode [ 401.343798][T16335] vlan6: entered allmulticast mode [ 401.348982][T16335] bond10: entered allmulticast mode [ 401.355862][T16334] tipc: Enabled bearer , priority 0 [ 401.363614][ T5147] Bluetooth: hci0: command tx timeout [ 401.384982][T16330] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.402465][T16338] syzkaller0: entered allmulticast mode [ 401.429665][T16330] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.432488][T16329] sctp: [Deprecated]: syz.0.2989 (pid 16329) Use of int in maxseg socket option. [ 401.432488][T16329] Use struct sctp_assoc_value instead [ 401.485142][T16334] tipc: Resetting bearer [ 401.525498][T16330] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.551959][T16333] tipc: Resetting bearer [ 401.588325][T16333] tipc: Disabling bearer [ 401.750895][ T1135] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.796621][ T1135] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.836995][ T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.890690][ T143] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.062901][T16382] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 402.158848][T16388] netlink: 'syz.2.3003': attribute type 1 has an invalid length. [ 402.233983][T16388] vlan2: entered promiscuous mode [ 402.239147][T16388] veth1_virt_wifi: entered promiscuous mode [ 402.245854][T16388] vlan2: entered allmulticast mode [ 402.251164][T16388] veth1_virt_wifi: entered allmulticast mode [ 402.272455][T16247] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 402.274183][T16388] sctp: [Deprecated]: syz.2.3003 (pid 16388) Use of int in maxseg socket option. [ 402.274183][T16388] Use struct sctp_assoc_value instead [ 402.297452][T16247] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 402.309037][T16247] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 402.320615][T16247] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 402.410473][T16247] 8021q: adding VLAN 0 to HW filter on device bond0 [ 402.432062][T16247] 8021q: adding VLAN 0 to HW filter on device team0 [ 402.444933][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.452095][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 402.511226][ T1135] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.518400][ T1135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 402.789903][T16418] netlink: 'syz.3.3009': attribute type 10 has an invalid length. [ 402.799226][T16418] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 402.801426][T16247] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 402.876643][T16419] netlink: 'syz.2.3010': attribute type 13 has an invalid length. [ 403.019900][T16430] netlink: 'syz.3.3013': attribute type 1 has an invalid length. [ 403.238165][T16430] 8021q: adding VLAN 0 to HW filter on device bond5 [ 403.326415][T16430] vlan7: entered promiscuous mode [ 403.336272][T16430] bond5: entered promiscuous mode [ 403.341515][T16430] vlan7: entered allmulticast mode [ 403.350013][T16430] bond5: entered allmulticast mode [ 403.428643][T16430] sctp: [Deprecated]: syz.3.3013 (pid 16430) Use of int in maxseg socket option. [ 403.428643][T16430] Use struct sctp_assoc_value instead [ 403.444658][ T5147] Bluetooth: hci0: command tx timeout [ 403.644248][T16455] syzkaller0: entered promiscuous mode [ 403.651107][T16455] syzkaller0: entered allmulticast mode [ 403.741546][T16247] veth0_vlan: entered promiscuous mode [ 403.778384][T16247] veth1_vlan: entered promiscuous mode [ 403.809188][T16455] wlan1 speed is unknown, defaulting to 1000 [ 403.825825][T16465] FAULT_INJECTION: forcing a failure. [ 403.825825][T16465] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 403.857112][T16465] CPU: 1 UID: 0 PID: 16465 Comm: syz.1.3021 Not tainted syzkaller #0 PREEMPT(full) [ 403.857136][T16465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 403.857147][T16465] Call Trace: [ 403.857154][T16465] [ 403.857161][T16465] dump_stack_lvl+0xe8/0x150 [ 403.857190][T16465] should_fail_ex+0x412/0x560 [ 403.857216][T16465] _copy_from_user+0x2d/0xb0 [ 403.857241][T16465] ___sys_sendmsg+0x1c6/0x360 [ 403.857264][T16465] ? __pfx____sys_sendmsg+0x10/0x10 [ 403.857310][T16465] ? __fget_files+0x2a/0x420 [ 403.857334][T16465] ? __fget_files+0x3a0/0x420 [ 403.857366][T16465] __x64_sys_sendmsg+0x1bd/0x2a0 [ 403.857382][T16465] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 403.857401][T16465] ? __pfx_ksys_write+0x10/0x10 [ 403.857427][T16465] do_syscall_64+0x14d/0xf80 [ 403.857451][T16465] ? trace_irq_disable+0x3b/0x150 [ 403.857474][T16465] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.857492][T16465] ? clear_bhb_loop+0x40/0x90 [ 403.857513][T16465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.857530][T16465] RIP: 0033:0x7f25e799c799 [ 403.857547][T16465] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 403.857561][T16465] RSP: 002b:00007f25e8874028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 403.857579][T16465] RAX: ffffffffffffffda RBX: 00007f25e7c15fa0 RCX: 00007f25e799c799 [ 403.857591][T16465] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 403.857601][T16465] RBP: 00007f25e8874090 R08: 0000000000000000 R09: 0000000000000000 [ 403.857610][T16465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 403.857620][T16465] R13: 00007f25e7c16038 R14: 00007f25e7c15fa0 R15: 00007fff8d6f5458 [ 403.857647][T16465] [ 403.857828][T16455] lo speed is unknown, defaulting to 1000 [ 403.904414][T16247] veth0_macvtap: entered promiscuous mode [ 404.055753][T16455] virt_wifi0 speed is unknown, defaulting to 1000 [ 404.057234][T16247] veth1_macvtap: entered promiscuous mode [ 404.110922][T16468] xt_CT: No such helper "snmp_trap" [ 404.203542][T16247] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 404.235260][T16247] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 404.251976][ T1135] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.272537][T16478] netlink: 'syz.3.3025': attribute type 62 has an invalid length. [ 404.295455][ T1135] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.384306][ T1135] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.422806][ T1135] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.792429][T10806] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 404.842904][T10806] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 404.911006][ T1135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 404.933816][ T1135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 405.121464][T16526] netlink: 'syz.1.3038': attribute type 27 has an invalid length. [ 405.161312][T16517] wlan1 speed is unknown, defaulting to 1000 [ 405.186433][T16517] lo speed is unknown, defaulting to 1000 [ 405.194015][T16517] virt_wifi0 speed is unknown, defaulting to 1000 [ 405.523230][ T5147] Bluetooth: hci0: command tx timeout [ 405.755916][T16554] bond0: entered promiscuous mode [ 405.761113][T16554] bond_slave_0: entered promiscuous mode [ 405.767918][T16554] bond_slave_1: entered promiscuous mode [ 405.785551][T16554] batadv0: entered promiscuous mode [ 405.806019][T16554] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 405.853995][T16554] bond0: left promiscuous mode [ 405.858871][T16554] bond_slave_0: left promiscuous mode [ 405.894419][T16554] bond_slave_1: left promiscuous mode [ 405.908745][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 405.920120][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 405.930334][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 405.939837][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 405.947514][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 405.955969][T16554] batadv0: left promiscuous mode [ 406.010534][T16546] syzkaller1: entered promiscuous mode [ 406.025219][T16546] syzkaller1: entered allmulticast mode [ 406.179334][T16541] ip6gretap0: entered promiscuous mode [ 406.194422][T16541] ip6gretap0: entered allmulticast mode [ 406.202943][T16555] wlan1 speed is unknown, defaulting to 1000 [ 406.219328][T16555] lo speed is unknown, defaulting to 1000 [ 406.240793][T16555] virt_wifi0 speed is unknown, defaulting to 1000 [ 406.460922][T16555] chnl_net:caif_netlink_parms(): no params data found [ 406.581673][T16555] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.604090][T16555] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.611353][T16555] bridge_slave_0: entered allmulticast mode [ 406.621677][T16555] bridge_slave_0: entered promiscuous mode [ 406.651206][T16555] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.663145][T16555] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.674045][T16555] bridge_slave_1: entered allmulticast mode [ 406.684292][T16555] bridge_slave_1: entered promiscuous mode [ 406.721959][T16555] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 406.736958][T16555] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 406.764712][T16555] team0: Port device team_slave_0 added [ 406.772359][T16555] team0: Port device team_slave_1 added [ 406.806649][T16555] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 406.816020][T16555] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 406.843645][T16555] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 406.859598][T16555] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 406.866871][T16555] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 406.894651][T16555] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 406.905886][T16592] wlan1 speed is unknown, defaulting to 1000 [ 406.914447][T16592] lo speed is unknown, defaulting to 1000 [ 406.930305][T16592] virt_wifi0 speed is unknown, defaulting to 1000 [ 406.954569][T16555] hsr_slave_0: entered promiscuous mode [ 406.960873][T16555] hsr_slave_1: entered promiscuous mode [ 406.968933][T16555] debugfs: 'hsr0' already exists in 'hsr' [ 406.974875][T16555] Cannot create hsr debugfs directory [ 407.115528][T16555] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.180797][T16555] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.217149][T16555] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.276359][T16555] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.605670][ T5147] Bluetooth: hci0: command tx timeout [ 408.003798][ T5147] Bluetooth: hci2: command tx timeout [ 409.099197][T16561] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 409.125780][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 409.154883][T16555] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 409.209398][T16555] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 409.274020][T16555] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 409.298437][T16598] syzkaller0: entered promiscuous mode [ 409.304992][T16598] syzkaller0: entered allmulticast mode [ 410.093647][ T5147] Bluetooth: hci2: command tx timeout [ 410.115844][T16555] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 410.174564][T16604] bond6: entered promiscuous mode [ 410.180494][T16604] 8021q: adding VLAN 0 to HW filter on device bond6 [ 410.205460][T16610] tipc: Enabled bearer , priority 0 [ 410.225286][T16611] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 410.234664][T16611] syzkaller0: entered allmulticast mode [ 410.255334][T16616] tipc: Resetting bearer [ 410.285463][T16607] tipc: Resetting bearer [ 410.296021][T16607] tipc: Disabling bearer [ 410.451929][T16555] 8021q: adding VLAN 0 to HW filter on device bond0 [ 410.490023][T16629] wlan1 speed is unknown, defaulting to 1000 [ 410.510860][T16637] syzkaller1: entered promiscuous mode [ 410.522416][T16637] syzkaller1: entered allmulticast mode [ 410.534665][T16629] lo speed is unknown, defaulting to 1000 [ 410.535331][T16637] __nla_validate_parse: 20 callbacks suppressed [ 410.535345][T16637] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3063'. [ 410.550017][T16555] 8021q: adding VLAN 0 to HW filter on device team0 [ 410.576397][T16629] virt_wifi0 speed is unknown, defaulting to 1000 [ 410.586358][T16637] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 410.672066][ T317] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.679286][ T317] bridge0: port 1(bridge_slave_0) entered forwarding state [ 410.717526][ T317] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.724683][ T317] bridge0: port 2(bridge_slave_1) entered forwarding state [ 410.737302][T16649] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3067'. [ 410.942102][T16555] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 411.050708][T16665] netlink: 'syz.4.3072': attribute type 2 has an invalid length. [ 411.060386][T16659] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3071'. [ 411.098424][T16661] syzkaller0: entered promiscuous mode [ 411.110189][T16661] syzkaller0: entered allmulticast mode [ 411.171187][T16670] tipc: Enabled bearer , priority 0 [ 411.171445][T16673] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3075'. [ 411.192570][T16670] syzkaller0: entered allmulticast mode [ 411.199145][T16673] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3075'. [ 411.298274][T16670] tipc: Resetting bearer [ 411.333832][T16669] tipc: Resetting bearer [ 411.393391][T16669] tipc: Disabling bearer [ 411.430992][T16679] wlan1 speed is unknown, defaulting to 1000 [ 411.460181][T16555] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 411.474845][T16679] lo speed is unknown, defaulting to 1000 [ 411.487656][T16679] virt_wifi0 speed is unknown, defaulting to 1000 [ 411.588966][T16692] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 411.603716][T16694] lo speed is unknown, defaulting to 1000 [ 411.642018][T16555] veth0_vlan: entered promiscuous mode [ 412.047763][T16712] syzkaller0: entered promiscuous mode [ 412.071368][T16718] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3086'. [ 412.087221][T16712] syzkaller0: entered allmulticast mode [ 412.094511][T16718] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3086'. [ 412.141409][T16720] openvswitch: netlink: IP tunnel dst address not specified [ 412.150208][T16555] veth1_vlan: entered promiscuous mode [ 412.166142][ T5147] Bluetooth: hci2: command tx timeout [ 412.327457][ T2684] block nbd1: Possible stuck request ffff888026c08000: control (read@0,1024B). Runtime 120 seconds [ 412.341135][ T2684] block nbd1: Possible stuck request ffff888026c08200: control (read@1024,1024B). Runtime 120 seconds [ 412.353119][ T2684] block nbd1: Possible stuck request ffff888026c08400: control (read@2048,1024B). Runtime 120 seconds [ 412.364624][ T2684] block nbd1: Possible stuck request ffff888026c08600: control (read@3072,1024B). Runtime 120 seconds [ 412.440496][T16720] syzkaller0: entered promiscuous mode [ 412.446614][T16720] syzkaller0: entered allmulticast mode [ 413.791125][T16748] FAULT_INJECTION: forcing a failure. [ 413.791125][T16748] name failslab, interval 1, probability 0, space 0, times 0 [ 413.804665][T16748] CPU: 0 UID: 0 PID: 16748 Comm: syz.0.3093 Not tainted syzkaller #0 PREEMPT(full) [ 413.804690][T16748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 413.804701][T16748] Call Trace: [ 413.804708][T16748] [ 413.804716][T16748] dump_stack_lvl+0xe8/0x150 [ 413.804745][T16748] should_fail_ex+0x412/0x560 [ 413.804773][T16748] should_failslab+0xa8/0x100 [ 413.804795][T16748] ? skb_clone+0x212/0x3a0 [ 413.804814][T16748] kmem_cache_alloc_noprof+0x87/0x650 [ 413.804842][T16748] skb_clone+0x212/0x3a0 [ 413.804864][T16748] __netlink_deliver_tap+0x404/0x850 [ 413.804899][T16748] ? netlink_deliver_tap+0x2e/0x1b0 [ 413.804924][T16748] netlink_deliver_tap+0x19c/0x1b0 [ 413.804950][T16748] netlink_sendskb+0x68/0x140 [ 413.804974][T16748] netlink_unicast+0x3a3/0x9b0 [ 413.805005][T16748] ? __pfx_netlink_unicast+0x10/0x10 [ 413.805037][T16748] netlink_rcv_skb+0x2b6/0x4b0 [ 413.805062][T16748] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 413.805089][T16748] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 413.805124][T16748] ? netlink_deliver_tap+0x2e/0x1b0 [ 413.805156][T16748] netlink_unicast+0x80f/0x9b0 [ 413.805186][T16748] ? __pfx_netlink_unicast+0x10/0x10 [ 413.805211][T16748] ? netlink_sendmsg+0x650/0xb40 [ 413.805232][T16748] ? skb_put+0x11b/0x210 [ 413.805262][T16748] netlink_sendmsg+0x813/0xb40 [ 413.805296][T16748] ? __pfx_netlink_sendmsg+0x10/0x10 [ 413.805324][T16748] ? aa_sock_msg_perm+0xf1/0x1b0 [ 413.805348][T16748] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 413.805371][T16748] ____sys_sendmsg+0x972/0x9f0 [ 413.805406][T16748] ? __pfx_____sys_sendmsg+0x10/0x10 [ 413.805432][T16748] ? import_iovec+0x73/0xa0 [ 413.805462][T16748] ___sys_sendmsg+0x2a5/0x360 [ 413.805487][T16748] ? __pfx____sys_sendmsg+0x10/0x10 [ 413.805539][T16748] ? __fget_files+0x2a/0x420 [ 413.805564][T16748] ? __fget_files+0x3a0/0x420 [ 413.805596][T16748] __x64_sys_sendmsg+0x1bd/0x2a0 [ 413.805617][T16748] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 413.805645][T16748] ? __pfx_ksys_write+0x10/0x10 [ 413.805678][T16748] do_syscall_64+0x14d/0xf80 [ 413.805702][T16748] ? trace_irq_disable+0x3b/0x150 [ 413.805726][T16748] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.805745][T16748] ? clear_bhb_loop+0x40/0x90 [ 413.805767][T16748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.805784][T16748] RIP: 0033:0x7fc4d1f9c799 [ 413.805802][T16748] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 413.805818][T16748] RSP: 002b:00007fc4d2ebc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 413.805838][T16748] RAX: ffffffffffffffda RBX: 00007fc4d2216090 RCX: 00007fc4d1f9c799 [ 413.805851][T16748] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 413.805862][T16748] RBP: 00007fc4d2ebc090 R08: 0000000000000000 R09: 0000000000000000 [ 413.805874][T16748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 413.805884][T16748] R13: 00007fc4d2216128 R14: 00007fc4d2216090 R15: 00007fff8f110328 [ 413.805914][T16748] [ 414.189914][T16555] veth0_macvtap: entered promiscuous mode [ 414.199761][T16555] veth1_macvtap: entered promiscuous mode [ 414.231802][T16555] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 414.255018][ T5147] Bluetooth: hci2: command tx timeout [ 414.264644][T16555] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 414.280616][T10805] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.316370][T10805] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.351730][T10805] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.361178][T10805] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.393583][T16770] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3098'. [ 414.501469][T16770] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3098'. [ 414.613167][ T143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 414.621481][ T143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 414.652447][T16775] syzkaller0: entered promiscuous mode [ 414.674052][T16775] syzkaller0: entered allmulticast mode [ 414.706347][T16779] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3101'. [ 414.750070][T16779] vlan2: entered promiscuous mode [ 414.756538][T16779] bridge0: entered promiscuous mode [ 414.768889][T16781] syzkaller0: entered promiscuous mode [ 414.774860][T16781] syzkaller0: entered allmulticast mode [ 414.791802][ T143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 414.802116][ T143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 414.854493][T16783] tipc: Enabled bearer , priority 0 [ 414.884974][T16780] tipc: Resetting bearer [ 414.929821][T16780] tipc: Disabling bearer [ 415.171487][T16811] netlink: 'syz.2.3108': attribute type 10 has an invalid length. [ 415.268964][T16811] team0: Failed to send options change via netlink (err -105) [ 415.284592][T16811] team0: Port device dummy0 added [ 415.427666][T16823] syzkaller0: entered promiscuous mode [ 415.434861][T16823] syzkaller0: entered allmulticast mode [ 415.901584][T16850] netlink: 'syz.4.3120': attribute type 39 has an invalid length. [ 415.912517][T16849] __nla_validate_parse: 6 callbacks suppressed [ 415.912537][T16849] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3122'. [ 415.929628][T16849] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3122'. [ 416.011179][T16856] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3124'. [ 416.018333][T16858] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3125'. [ 416.030481][T16856] syzkaller1: entered promiscuous mode [ 416.036452][T16856] syzkaller1: entered allmulticast mode [ 416.136853][T16860] syzkaller0: entered promiscuous mode [ 416.142492][T16860] syzkaller0: entered allmulticast mode [ 416.443848][T16876] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3131'. [ 417.785927][T16896] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3134'. [ 417.801519][T16896] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3134'. [ 417.951423][T16907] geneve2: entered promiscuous mode [ 418.029625][T16919] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3138'. [ 418.158668][T16927] 8021q: VLANs not supported on ip6_vti0 [ 418.230394][T16933] bridge0: entered allmulticast mode [ 418.384693][T16930] wlan1 speed is unknown, defaulting to 1000 [ 418.414548][T16930] lo speed is unknown, defaulting to 1000 [ 418.448198][T16930] virt_wifi0 speed is unknown, defaulting to 1000 [ 418.771601][T16966] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3149'. [ 418.838126][T16966] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3149'. [ 419.526857][T17018] FAULT_INJECTION: forcing a failure. [ 419.526857][T17018] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 419.541168][T17018] CPU: 0 UID: 0 PID: 17018 Comm: syz.0.3164 Not tainted syzkaller #0 PREEMPT(full) [ 419.541194][T17018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 419.541205][T17018] Call Trace: [ 419.541213][T17018] [ 419.541220][T17018] dump_stack_lvl+0xe8/0x150 [ 419.541251][T17018] should_fail_ex+0x412/0x560 [ 419.541279][T17018] _copy_from_user+0x2d/0xb0 [ 419.541306][T17018] sctp_getsockopt_reconfig_supported+0xbe/0x580 [ 419.541330][T17018] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 419.541354][T17018] ? __pfx_sctp_getsockopt_reconfig_supported+0x10/0x10 [ 419.541375][T17018] ? sctp_getsockopt+0x12f/0xb90 [ 419.541401][T17018] ? __local_bh_enable_ip+0xd0/0x130 [ 419.541429][T17018] sctp_getsockopt+0x585/0xb90 [ 419.541451][T17018] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 419.541476][T17018] do_sock_getsockopt+0x2d3/0x3f0 [ 419.541506][T17018] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 419.541533][T17018] ? __fget_files+0x3a0/0x420 [ 419.541565][T17018] ? __fget_files+0x2a/0x420 [ 419.541597][T17018] __x64_sys_getsockopt+0x1a4/0x240 [ 419.541624][T17018] do_syscall_64+0x14d/0xf80 [ 419.541649][T17018] ? trace_irq_disable+0x3b/0x150 [ 419.541673][T17018] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.541691][T17018] ? clear_bhb_loop+0x40/0x90 [ 419.541713][T17018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.541730][T17018] RIP: 0033:0x7fc4d1f9c799 [ 419.541748][T17018] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 419.541762][T17018] RSP: 002b:00007fc4d2edd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 419.541781][T17018] RAX: ffffffffffffffda RBX: 00007fc4d2215fa0 RCX: 00007fc4d1f9c799 [ 419.541794][T17018] RDX: 0000000000000075 RSI: 0000000000000084 RDI: 0000000000000003 [ 419.541804][T17018] RBP: 00007fc4d2edd090 R08: 0000200000000400 R09: 0000000000000000 [ 419.541816][T17018] R10: 00002000000003c0 R11: 0000000000000246 R12: 0000000000000001 [ 419.541827][T17018] R13: 00007fc4d2216038 R14: 00007fc4d2215fa0 R15: 00007fff8f110328 [ 419.541858][T17018] [ 420.222303][T17064] FAULT_INJECTION: forcing a failure. [ 420.222303][T17064] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 420.235689][T17064] CPU: 1 UID: 0 PID: 17064 Comm: syz.2.3179 Not tainted syzkaller #0 PREEMPT(full) [ 420.235715][T17064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 420.235725][T17064] Call Trace: [ 420.235733][T17064] [ 420.235740][T17064] dump_stack_lvl+0xe8/0x150 [ 420.235769][T17064] should_fail_ex+0x412/0x560 [ 420.235798][T17064] _copy_to_user+0x31/0xb0 [ 420.235827][T17064] simple_read_from_buffer+0xe1/0x170 [ 420.235857][T17064] proc_fail_nth_read+0x1bb/0x230 [ 420.235885][T17064] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 420.235912][T17064] ? rw_verify_area+0x2a6/0x4d0 [ 420.235931][T17064] ? reacquire_held_locks+0x104/0x190 [ 420.235954][T17064] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 420.235980][T17064] vfs_read+0x20c/0xa70 [ 420.235997][T17064] ? fdget_pos+0x246/0x320 [ 420.236038][T17064] ? __pfx___mutex_lock+0x10/0x10 [ 420.236065][T17064] ? __pfx_vfs_read+0x10/0x10 [ 420.236086][T17064] ? __fget_files+0x2a/0x420 [ 420.236114][T17064] ? __fget_files+0x3a0/0x420 [ 420.236137][T17064] ? __fget_files+0x2a/0x420 [ 420.236169][T17064] ksys_read+0x150/0x270 [ 420.236191][T17064] ? __pfx_ksys_read+0x10/0x10 [ 420.236207][T17064] ? fput+0xa0/0xd0 [ 420.236242][T17064] do_syscall_64+0x14d/0xf80 [ 420.236265][T17064] ? trace_irq_disable+0x3b/0x150 [ 420.236289][T17064] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.236308][T17064] ? clear_bhb_loop+0x40/0x90 [ 420.236330][T17064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.236347][T17064] RIP: 0033:0x7fce2155cfce [ 420.236365][T17064] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 420.236380][T17064] RSP: 002b:00007fce223b2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 420.236399][T17064] RAX: ffffffffffffffda RBX: 00007fce223b36c0 RCX: 00007fce2155cfce [ 420.236411][T17064] RDX: 000000000000000f RSI: 00007fce223b30a0 RDI: 0000000000000004 [ 420.236422][T17064] RBP: 00007fce223b3090 R08: 0000000000000000 R09: 0000000000000000 [ 420.236432][T17064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 420.236442][T17064] R13: 00007fce21816038 R14: 00007fce21815fa0 R15: 00007fff5caaa4a8 [ 420.236471][T17064] [ 420.561148][T17069] ip6tnl0: Caught tx_queue_len zero misconfig [ 420.639609][T17075] syzkaller0: entered promiscuous mode [ 420.666723][T17075] syzkaller0: entered allmulticast mode [ 421.316067][T17115] netlink: 'syz.2.3196': attribute type 1 has an invalid length. [ 421.405725][T17115] 8021q: adding VLAN 0 to HW filter on device bond1 [ 421.482369][T17115] vlan3: entered promiscuous mode [ 421.496241][T17115] bond1: entered promiscuous mode [ 421.506020][T17115] vlan3: entered allmulticast mode [ 421.554383][T17115] bond1: entered allmulticast mode [ 421.590785][T17127] __nla_validate_parse: 9 callbacks suppressed [ 421.590803][T17127] netlink: 576 bytes leftover after parsing attributes in process `syz.3.3198'. [ 421.615213][T17121] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3196'. [ 421.668002][T17115] sctp: [Deprecated]: syz.2.3196 (pid 17115) Use of int in maxseg socket option. [ 421.668002][T17115] Use struct sctp_assoc_value instead [ 421.873445][T17137] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3199'. [ 422.270701][T17147] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3204'. [ 422.310321][T17147] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3204'. [ 422.616083][T17162] netlink: 'syz.2.3210': attribute type 1 has an invalid length. [ 422.709555][T17162] 8021q: adding VLAN 0 to HW filter on device bond2 [ 422.790036][T17162] vlan4: entered promiscuous mode [ 422.823042][T17162] bond2: entered promiscuous mode [ 422.828224][T17162] vlan4: entered allmulticast mode [ 422.862807][T17162] bond2: entered allmulticast mode [ 422.869063][T17165] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3210'. [ 422.935846][T17162] sctp: [Deprecated]: syz.2.3210 (pid 17162) Use of int in maxseg socket option. [ 422.935846][T17162] Use struct sctp_assoc_value instead [ 423.041223][T17177] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3214'. [ 423.054612][T17177] RDS: rds_bind could not find a transport for ::ffff:172.30.1.4, load rds_tcp or rds_rdma? [ 423.290292][T17188] wlan1 speed is unknown, defaulting to 1000 [ 423.304046][T17190] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3219'. [ 423.314010][T17190] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3219'. [ 423.314952][T17188] lo speed is unknown, defaulting to 1000 [ 423.336293][T17186] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3218'. [ 423.350587][T17188] virt_wifi0 speed is unknown, defaulting to 1000 [ 423.397934][T17186] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 423.432000][T17186] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 423.444549][T17198] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048) [ 423.464998][T17186] bond0 (unregistering): Released all slaves [ 423.718094][T17210] openvswitch: netlink: Tunnel attr 10 has unexpected len 0 expected 2 [ 423.804497][T17213] netlink: 'syz.1.3225': attribute type 1 has an invalid length. [ 423.840754][T17217] vlan3: entered promiscuous mode [ 423.849059][T17217] geneve1: entered promiscuous mode [ 423.856503][T17217] vlan3: entered allmulticast mode [ 423.861810][T17217] geneve1: entered allmulticast mode [ 423.987457][T17222] bridge2: entered promiscuous mode [ 424.005986][T17222] bridge2: left promiscuous mode [ 424.230623][T17242] wlan1 speed is unknown, defaulting to 1000 [ 424.265568][T17242] lo speed is unknown, defaulting to 1000 [ 424.312017][T17251] netlink: 'syz.3.3239': attribute type 11 has an invalid length. [ 424.320259][T17251] netlink: 'syz.3.3239': attribute type 23 has an invalid length. [ 424.336046][T17253] netlink: 'syz.3.3239': attribute type 11 has an invalid length. [ 424.344138][T17242] virt_wifi0 speed is unknown, defaulting to 1000 [ 424.351278][T17253] netlink: 'syz.3.3239': attribute type 23 has an invalid length. [ 424.798373][T17287] netlink: 'syz.0.3250': attribute type 29 has an invalid length. [ 424.809552][T17286] syzkaller0: entered promiscuous mode [ 424.815189][T17286] syzkaller0: entered allmulticast mode [ 424.970880][T17291] wlan1 speed is unknown, defaulting to 1000 [ 424.985527][T17291] lo speed is unknown, defaulting to 1000 [ 425.018569][T17291] virt_wifi0 speed is unknown, defaulting to 1000 [ 425.348411][T17313] sctp: [Deprecated]: syz.4.3259 (pid 17313) Use of int in max_burst socket option deprecated. [ 425.348411][T17313] Use struct sctp_assoc_value instead [ 425.414320][T17313] sctp: [Deprecated]: syz.4.3259 (pid 17313) Use of int in max_burst socket option deprecated. [ 425.414320][T17313] Use struct sctp_assoc_value instead [ 425.629761][T17323] netlink: 'syz.1.3261': attribute type 1 has an invalid length. [ 425.677455][T17316] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 425.979378][T17342] wlan1 speed is unknown, defaulting to 1000 [ 425.990386][T17342] lo speed is unknown, defaulting to 1000 [ 426.029865][T17342] virt_wifi0 speed is unknown, defaulting to 1000 [ 426.124875][T17352] tipc: Enabled bearer , priority 0 [ 426.170599][T17352] syzkaller0: entered promiscuous mode [ 426.205619][T17352] syzkaller0: entered allmulticast mode [ 426.385878][T17352] tipc: Resetting bearer [ 426.415141][T17363] netlink: 'syz.1.3272': attribute type 2 has an invalid length. [ 426.447914][T17351] tipc: Resetting bearer [ 426.448359][T17378] netlink: 'syz.4.3276': attribute type 1 has an invalid length. [ 426.511439][T17351] tipc: Disabling bearer [ 426.535273][T17378] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 426.629103][T17392] __nla_validate_parse: 12 callbacks suppressed [ 426.629124][T17392] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3279'. [ 426.750369][T17400] netlink: 436 bytes leftover after parsing attributes in process `syz.0.3283'. [ 426.754382][T17398] syzkaller0: entered promiscuous mode [ 426.782881][T17398] syzkaller0: entered allmulticast mode [ 426.831619][T17404] wlan1 speed is unknown, defaulting to 1000 [ 426.850094][T17404] lo speed is unknown, defaulting to 1000 [ 426.858409][T17404] virt_wifi0 speed is unknown, defaulting to 1000 [ 427.100055][T17417] bond0: Caught tx_queue_len zero misconfig [ 427.302284][T17432] netlink: 'syz.3.3291': attribute type 3 has an invalid length. [ 427.446899][T17442] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3294'. [ 427.629043][T17450] syzkaller0: entered promiscuous mode [ 427.649080][T17450] syzkaller0: entered allmulticast mode [ 427.661107][T17458] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3299'. [ 427.693831][T17458] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3299'. [ 427.706766][T17458] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3299'. [ 427.730834][T17458] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3299'. [ 427.742678][T17450] tipc: Started in network mode [ 427.748296][T17450] tipc: Node identity 8ee03a61c96f, cluster identity 4711 [ 427.774460][T17450] tipc: Enabled bearer , priority 0 [ 427.781899][T17462] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 427.798179][T17448] tipc: Resetting bearer [ 427.815387][T17448] tipc: Disabling bearer [ 427.831330][T17462] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.839694][T17462] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.006114][T17465] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 428.123630][T17477] tipc: Can't bind to reserved service type 1 [ 428.160002][T17477] netlink: 'syz.0.3304': attribute type 39 has an invalid length. [ 428.211828][T17484] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3304'. [ 428.222277][T17484] netlink: 43 bytes leftover after parsing attributes in process `syz.0.3304'. [ 428.248298][T17484] netlink: 'syz.0.3304': attribute type 5 has an invalid length. [ 428.281488][T17484] netlink: 43 bytes leftover after parsing attributes in process `syz.0.3304'. [ 428.349629][T17483] netlink: 'syz.1.3307': attribute type 13 has an invalid length. [ 428.375135][T17489] vlan7: entered allmulticast mode [ 428.380433][T17489] bridge_slave_0: entered allmulticast mode [ 428.457653][T17499] sctp: [Deprecated]: syz.4.3311 (pid 17499) Use of struct sctp_assoc_value in delayed_ack socket option. [ 428.457653][T17499] Use struct sctp_sack_info instead [ 428.504788][T17499] sctp: [Deprecated]: syz.4.3311 (pid 17499) Use of struct sctp_assoc_value in delayed_ack socket option. [ 428.504788][T17499] Use struct sctp_sack_info instead [ 428.578761][T17483] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 428.972117][T17528] netlink: 'syz.0.3320': attribute type 10 has an invalid length. [ 429.120134][T17528] team0: Device veth0_vlan failed to register rx_handler [ 429.231682][T17546] netlink: 'syz.1.3326': attribute type 1 has an invalid length. [ 429.294259][T17546] 8021q: adding VLAN 0 to HW filter on device bond2 [ 429.304649][T17546] bond1: (slave bond2): making interface the new active one [ 429.314566][T17546] bond1: (slave bond2): Enslaving as an active interface with an up link [ 429.341781][T17546] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 429.382978][T17546] 8021q: adding VLAN 0 to HW filter on device bond1 [ 429.399853][T17546] vlan2: entered promiscuous mode [ 429.405330][T17546] bond1: entered promiscuous mode [ 429.410474][T17546] bond2: entered promiscuous mode [ 429.484993][T17560] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 429.519968][T17553] 8021q: adding VLAN 0 to HW filter on device bond1 [ 429.685400][T17570] netlink: 'syz.0.3333': attribute type 19 has an invalid length. [ 429.715347][T17570] netlink: 'syz.0.3333': attribute type 20 has an invalid length. [ 429.768313][T17577] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 429.779378][T17577] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 429.954555][T17589] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 429.973375][T17589] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 430.043790][T17589] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 430.050947][ T5964] IPVS: starting estimator thread 0... [ 430.094974][T17593] syzkaller0: entered promiscuous mode [ 430.100602][T17593] syzkaller0: entered allmulticast mode [ 430.143374][T17594] IPVS: using max 30 ests per chain, 72000 per kthread [ 431.608649][T17611] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 431.682923][T17616] __nla_validate_parse: 14 callbacks suppressed [ 431.682942][T17616] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3348'. [ 431.716981][T17616] vlan7: entered promiscuous mode [ 431.779107][T17620] bond7: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 431.816132][T17624] validate_nla: 1 callbacks suppressed [ 431.816150][T17624] netlink: 'syz.4.3351': attribute type 4 has an invalid length. [ 431.830842][T17620] bond7 (unregistering): Released all slaves [ 431.868893][T17624] batadv0: entered promiscuous mode [ 431.885990][T17624] vlan4: entered promiscuous mode [ 432.082827][ T30] audit: type=1800 audit(1773848039.463:7): pid=17633 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3355" name="memory.events" dev="tmpfs" ino=363 res=0 errno=0 [ 432.339824][T17645] Bluetooth: MGMT ver 1.23 [ 432.350547][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 432.360732][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 432.371464][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 432.380586][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 432.388422][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 432.706364][T17646] wlan1 speed is unknown, defaulting to 1000 [ 432.730964][T17646] lo speed is unknown, defaulting to 1000 [ 432.752415][T17646] virt_wifi0 speed is unknown, defaulting to 1000 [ 433.164926][T17669] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 433.171982][T17669] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 433.254596][T17682] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3365'. [ 433.316820][T17682] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3365'. [ 433.363227][T17646] chnl_net:caif_netlink_parms(): no params data found [ 433.398143][T17682] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3365'. [ 433.422229][T17682] nbd: illegal input index 38656 [ 433.534784][T17702] netlink: 'syz.2.3370': attribute type 11 has an invalid length. [ 433.568636][T17702] lo: Caught tx_queue_len zero misconfig [ 433.629422][T17646] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.641548][T17646] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.666007][T17646] bridge_slave_0: entered allmulticast mode [ 433.683936][T17646] bridge_slave_0: entered promiscuous mode [ 433.692557][T17646] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.700242][T17646] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.708157][T17646] bridge_slave_1: entered allmulticast mode [ 433.716118][T17646] bridge_slave_1: entered promiscuous mode [ 433.759778][T17646] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 433.779924][T17715] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3373'. [ 433.785194][T17646] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 433.792524][T17715] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3373'. [ 433.807737][T17715] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3373'. [ 433.817592][T17715] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3373'. [ 433.887847][T17646] team0: Port device team_slave_0 added [ 433.896529][T17646] team0: Port device team_slave_1 added [ 433.926791][T17717] netlink: 'syz.3.3374': attribute type 1 has an invalid length. [ 433.963840][T17646] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 433.970861][T17717] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3374'. [ 433.988609][T17646] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 434.018145][T17646] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 434.031390][T17646] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 434.038904][T17646] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 434.065928][T17646] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 434.124989][T17730] siw: device registration error -23 [ 434.155413][T17646] hsr_slave_0: entered promiscuous mode [ 434.177572][T17646] hsr_slave_1: entered promiscuous mode [ 434.195055][T17646] debugfs: 'hsr0' already exists in 'hsr' [ 434.200818][T17646] Cannot create hsr debugfs directory [ 434.357079][T17745] netlink: 'syz.1.3381': attribute type 8 has an invalid length. [ 434.372881][T17745] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3381'. [ 434.402976][ T51] Bluetooth: hci1: command tx timeout [ 434.416729][T17745] bond0: entered promiscuous mode [ 434.423194][T17745] bond_slave_0: entered promiscuous mode [ 434.453170][T17745] bond_slave_1: entered promiscuous mode [ 434.461218][T17745] gretap0: entered promiscuous mode [ 434.491133][T17745] hsr1: entered promiscuous mode [ 434.545191][T17646] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.616323][T17759] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input5 [ 434.666168][T17646] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.708828][T17755] wlan1 speed is unknown, defaulting to 1000 [ 434.709775][T17760] RDS: rds_bind could not find a transport for fc02::, load rds_tcp or rds_rdma? [ 434.716562][T17755] lo speed is unknown, defaulting to 1000 [ 434.737960][T17755] virt_wifi0 speed is unknown, defaulting to 1000 [ 434.771100][T17646] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.845286][T17646] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.897332][T17767] wlan1 speed is unknown, defaulting to 1000 [ 434.919385][T17767] lo speed is unknown, defaulting to 1000 [ 434.950591][T17770] bond3: option primary_reselect: invalid value (4) [ 434.972027][T17770] bond3 (unregistering): Released all slaves [ 435.001929][T17767] virt_wifi0 speed is unknown, defaulting to 1000 [ 435.059255][T17773] netlink: 'syz.3.3390': attribute type 1 has an invalid length. [ 435.337469][T17646] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 435.418194][T17646] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 435.436291][T17646] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 435.457717][T17646] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 435.479037][T10904] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 435.544455][T17797] netlink: 'syz.4.3392': attribute type 1 has an invalid length. [ 435.658747][T17803] af_packet: tpacket_rcv: packet too big, clamped from 92 to 4294967272. macoff=96 [ 435.719387][T17798] bridge3: entered promiscuous mode [ 435.759352][T17798] bridge3: entered allmulticast mode [ 435.781121][T17798] team0: Port device bridge3 added [ 435.800144][T17788] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 435.814790][T17788] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 435.845998][T17803] bond2: (slave gretap1): making interface the new active one [ 435.857263][T17803] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 435.876078][T17797] macvlan2: entered promiscuous mode [ 435.881517][T17797] macvlan2: entered allmulticast mode [ 435.888435][T17797] bond2: entered promiscuous mode [ 435.896345][T17797] gretap1: entered promiscuous mode [ 435.902553][T17797] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 435.915039][T17797] bond2: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 435.929281][T17797] bond2: left promiscuous mode [ 435.934742][T17797] gretap1: left promiscuous mode [ 435.976001][T17816] mac80211_hwsim hwsim30 syzkaller0: entered promiscuous mode [ 435.989172][T17816] mac80211_hwsim hwsim30 syzkaller0: entered allmulticast mode [ 436.016298][T17827] ip6tnl0: Caught tx_queue_len zero misconfig [ 436.159756][T17646] 8021q: adding VLAN 0 to HW filter on device bond0 [ 436.204520][T17831] netlink: 'syz.3.3404': attribute type 11 has an invalid length. [ 436.213490][T17831] netlink: 'syz.3.3404': attribute type 4 has an invalid length. [ 436.230577][T17646] 8021q: adding VLAN 0 to HW filter on device team0 [ 436.261319][T10806] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.268543][T10806] bridge0: port 1(bridge_slave_0) entered forwarding state [ 436.331304][ T317] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.338498][ T317] bridge0: port 2(bridge_slave_1) entered forwarding state [ 436.413105][T17646] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 436.483183][ T51] Bluetooth: hci1: command tx timeout [ 436.557733][T17855] netlink: 'syz.3.3411': attribute type 11 has an invalid length. [ 436.716278][T17646] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 436.772103][T17646] veth0_vlan: entered promiscuous mode [ 436.786384][T17646] veth1_vlan: entered promiscuous mode [ 436.821323][T17646] veth0_macvtap: entered promiscuous mode [ 436.847743][T17646] veth1_macvtap: entered promiscuous mode [ 436.901380][T17646] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 436.941601][T17646] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 436.970121][T17878] netlink: 'syz.2.3417': attribute type 8 has an invalid length. [ 436.990840][T10803] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.999763][T17878] __nla_validate_parse: 8 callbacks suppressed [ 436.999778][T17878] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3417'. [ 437.004232][T10803] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.066920][T10803] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.089648][T10803] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.398389][ T1135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 437.416669][ T1135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 437.569988][T10803] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 437.598912][T10803] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 437.811605][T17907] netlink: 'syz.3.3426': attribute type 29 has an invalid length. [ 437.912013][T17912] syzkaller0: entered promiscuous mode [ 437.920499][T17912] syzkaller0: entered allmulticast mode [ 437.928407][T17914] syzkaller0: entered allmulticast mode [ 438.089108][ T30] audit: type=1804 audit(1773848045.473:8): pid=17924 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3432" name="/newroot/119/memory.events" dev="tmpfs" ino=621 res=1 errno=0 [ 438.112245][ T30] audit: type=1800 audit(1773848045.473:9): pid=17924 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3432" name="memory.events" dev="tmpfs" ino=621 res=0 errno=0 [ 438.144885][ T30] audit: type=1804 audit(1773848045.523:10): pid=17924 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.3432" name="/newroot/119/memory.events" dev="tmpfs" ino=621 res=1 errno=0 [ 438.318000][T17934] xt_l2tp: unknown flags: 51 [ 438.383769][T17943] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3436'. [ 438.563712][ T5147] Bluetooth: hci1: command tx timeout [ 438.590448][T17935] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.673379][T17943] vlan2: entered promiscuous mode [ 438.678610][T17943] bridge0: entered promiscuous mode [ 438.691665][T17944] syzkaller0: entered promiscuous mode [ 438.701243][T17944] syzkaller0: entered allmulticast mode [ 438.817105][T17964] mac80211_hwsim hwsim30 syzkaller0: left promiscuous mode [ 438.955536][T17970] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3446'. [ 438.991779][T17970] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3446'. [ 439.012129][T17970] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3446'. [ 439.041034][T17970] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3446'. [ 439.197298][T17991] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3452'. [ 439.240504][T17991] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.247752][T17991] bridge0: port 2(bridge_slave_1) entered listening state [ 439.255189][T17991] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.262341][T17991] bridge0: port 1(bridge_slave_0) entered listening state [ 439.318357][T17994] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3452'. [ 439.333442][T17994] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 439.441643][T18000] netlink: 124 bytes leftover after parsing attributes in process `syz.2.3454'. [ 439.676816][T18005] tipc: Enabling of bearer rejected, failed to enable media [ 439.723528][T17935] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.747441][T18005] mac80211_hwsim hwsim30 syzkaller0: entered promiscuous mode [ 439.757140][T18010] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3458'. [ 439.847356][ T1300] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.858730][ T1300] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 439.894972][T18020] wlan1 speed is unknown, defaulting to 1000 [ 439.902597][T18020] lo speed is unknown, defaulting to 1000 [ 439.929140][T18020] virt_wifi0 speed is unknown, defaulting to 1000 [ 440.061141][T18031] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 440.068891][T18031] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 440.077786][T18031] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 440.085871][T18031] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 440.138322][T18033] netlink: 'syz.4.3465': attribute type 19 has an invalid length. [ 440.149487][T18033] netlink: 'syz.4.3465': attribute type 20 has an invalid length. [ 440.478257][T17935] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.590383][T17935] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.643282][ T51] Bluetooth: hci1: command tx timeout [ 440.757582][T18061] tipc: Enabling of bearer rejected, failed to enable media [ 440.787075][T18061] syzkaller0: entered promiscuous mode [ 440.792590][T18061] syzkaller0: entered allmulticast mode [ 440.917390][ T1101] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.037730][T10803] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.057311][T18064] netlink: 'syz.3.3473': attribute type 13 has an invalid length. [ 441.090402][T10803] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.112851][T10803] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.656160][T18104] macsec1: entered promiscuous mode [ 441.661389][T18104] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 442.172413][T18126] bridge3: entered promiscuous mode [ 442.336268][T18139] wlan1 speed is unknown, defaulting to 1000 [ 442.376559][T18139] lo speed is unknown, defaulting to 1000 [ 442.403822][T18142] netlink: 'syz.2.3498': attribute type 39 has an invalid length. [ 442.411986][ T2684] block nbd1: Possible stuck request ffff888026c08000: control (read@0,1024B). Runtime 150 seconds [ 442.413854][T18139] virt_wifi0 speed is unknown, defaulting to 1000 [ 442.425494][ T2684] block nbd1: Possible stuck request ffff888026c08200: control (read@1024,1024B). Runtime 150 seconds [ 442.442331][ T2684] block nbd1: Possible stuck request ffff888026c08400: control (read@2048,1024B). Runtime 150 seconds [ 442.455009][ T2684] block nbd1: Possible stuck request ffff888026c08600: control (read@3072,1024B). Runtime 150 seconds [ 442.637378][T18151] __nla_validate_parse: 11 callbacks suppressed [ 442.637397][T18151] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3501'. [ 442.673112][T18151] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3501'. [ 442.693987][T18151] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3501'. [ 442.712973][T18151] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3501'. [ 442.828294][T18159] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3503'. [ 443.271799][T18171] geneve0: entered promiscuous mode [ 443.297094][T18171] batadv_slave_0: entered promiscuous mode [ 443.314855][T18171] batadv_slave_0: left promiscuous mode [ 443.323685][T18177] xt_bpf: check failed: parse error [ 443.350114][T18171] geneve0: left promiscuous mode [ 443.355613][T18181] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3507'. [ 443.511530][T18178] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 443.543998][T18178] bridge2: entered allmulticast mode [ 443.663498][T18187] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3511'. [ 443.721737][T18190] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3511'. [ 443.823204][T18193] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3512'. [ 443.997602][T18202] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3513'. [ 444.170021][T18210] gretap0: entered promiscuous mode [ 444.209377][T18210] macvtap1: entered allmulticast mode [ 444.217660][T18214] netlink: 'syz.3.3514': attribute type 21 has an invalid length. [ 444.237313][T18210] gretap0: entered allmulticast mode [ 444.909923][T18210] gretap0: left allmulticast mode [ 444.915584][T18210] gretap0: left promiscuous mode [ 445.105987][T18216] gretap0: entered promiscuous mode [ 445.121605][T18216] macvtap1: entered allmulticast mode [ 445.131581][T18216] gretap0: entered allmulticast mode [ 445.194183][T18216] gretap0: left allmulticast mode [ 445.199275][T18216] gretap0: left promiscuous mode [ 445.273019][T18229] tipc: Enabling of bearer rejected, failed to enable media [ 445.302399][T18229] syzkaller0: entered promiscuous mode [ 445.310381][T18229] syzkaller0: entered allmulticast mode [ 445.905641][T18257] netlink: 'syz.1.3527': attribute type 4 has an invalid length. [ 446.137247][T18271] netlink: 'syz.1.3529': attribute type 27 has an invalid length. [ 446.240826][T18274] netlink: 'syz.2.3530': attribute type 2 has an invalid length. [ 446.499490][T18254] hsr_slave_1 (unregistering): left promiscuous mode [ 446.627510][T18271] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.635109][T18271] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.735578][T18271] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 446.750426][T18271] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 446.917937][T18271] geneve2: left promiscuous mode [ 446.930917][T18271] hsr1: left promiscuous mode [ 446.952556][T10805] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.974325][T10805] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.995261][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 447.007222][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 447.028791][T18294] netlink: 'syz.0.3536': attribute type 1 has an invalid length. [ 447.098224][T10805] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.138370][T10805] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.204686][T18294] vlan3: entered promiscuous mode [ 447.215004][T18294] bond_slave_1: entered promiscuous mode [ 447.228451][T18294] vlan3: entered allmulticast mode [ 447.237101][T18294] bond_slave_1: entered allmulticast mode [ 447.296152][T18310] syzkaller0: entered promiscuous mode [ 447.304326][T18310] syzkaller0: entered allmulticast mode [ 447.308275][T18294] sctp: [Deprecated]: syz.0.3536 (pid 18294) Use of int in maxseg socket option. [ 447.308275][T18294] Use struct sctp_assoc_value instead [ 447.377865][T18310] tipc: Enabled bearer , priority 0 [ 447.398412][T18304] tipc: Resetting bearer [ 447.413550][T18304] tipc: Disabling bearer [ 447.598071][T18322] tipc: Failed to remove unknown binding: 66,0,0/0:688844753/688844755 [ 447.607065][T18322] tipc: Failed to remove unknown binding: 66,0,0/0:688844753/688844754 [ 447.625827][T18322] tipc: Failed to remove unknown binding: 66,0,0/0:688844753/688844755 [ 447.647930][T18322] tipc: Failed to remove unknown binding: 66,0,0/0:688844753/688844754 [ 447.920060][T18345] syzkaller1: entered promiscuous mode [ 447.926116][T18345] syzkaller1: entered allmulticast mode [ 448.145591][T18352] bond7: Unable to set up delay as MII monitoring is disabled [ 448.154633][T18352] bond7 (unregistering): Released all slaves [ 448.250150][T18356] netlink: 'syz.4.3553': attribute type 1 has an invalid length. [ 448.290804][T18356] 8021q: adding VLAN 0 to HW filter on device bond3 [ 448.414100][T18363] __nla_validate_parse: 16 callbacks suppressed [ 448.414118][T18363] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3553'. [ 448.430806][T18371] tipc: Started in network mode [ 448.453037][T18371] tipc: Node identity 080211, cluster identity 4711 [ 448.459985][T18371] tipc: Enabled bearer , priority 0 [ 448.491358][T18375] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3555'. [ 448.507473][T18356] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3553'. [ 448.519829][T18356] sctp: [Deprecated]: syz.4.3553 (pid 18356) Use of int in maxseg socket option. [ 448.519829][T18356] Use struct sctp_assoc_value instead [ 448.593926][T18380] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3559'. [ 448.608859][T18380] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3559'. [ 448.771337][T18393] netlink: 'syz.0.3563': attribute type 1 has an invalid length. [ 448.781842][T18393] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3563'. [ 448.899166][T18399] netlink: 'syz.1.3566': attribute type 298 has an invalid length. [ 448.994239][T18403] tipc: Enabled bearer , priority 0 [ 449.049459][T18403] syzkaller0: entered promiscuous mode [ 449.056273][T18403] syzkaller0: entered allmulticast mode [ 449.087187][T18403] tipc: Resetting bearer [ 449.505222][T10806] tipc: Resetting bearer [ 449.513621][T18402] tipc: Resetting bearer [ 449.572133][T18413] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3570'. [ 450.924030][T18402] tipc: Disabling bearer [ 450.932279][ T1209] tipc: Node number set to 134353152 [ 450.950586][ T9] tipc: Node number set to 1200568929 [ 450.989705][T18425] wlan1 speed is unknown, defaulting to 1000 [ 450.998966][T18425] lo speed is unknown, defaulting to 1000 [ 451.020000][T18425] virt_wifi0 speed is unknown, defaulting to 1000 [ 451.133488][T18441] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3579'. [ 451.157431][T18441] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3579'. [ 451.385095][T18447] gtp0: entered promiscuous mode [ 451.401809][T18447] gtp0: entered allmulticast mode [ 451.711095][T18478] netlink: 'syz.3.3590': attribute type 1 has an invalid length. [ 451.865233][T18483] wlan1 speed is unknown, defaulting to 1000 [ 451.878332][T18483] lo speed is unknown, defaulting to 1000 [ 451.920468][T18483] virt_wifi0 speed is unknown, defaulting to 1000 [ 452.418194][T18516] FAULT_INJECTION: forcing a failure. [ 452.418194][T18516] name failslab, interval 1, probability 0, space 0, times 0 [ 452.433135][T18516] CPU: 1 UID: 0 PID: 18516 Comm: syz.1.3602 Not tainted syzkaller #0 PREEMPT(full) [ 452.433160][T18516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 452.433170][T18516] Call Trace: [ 452.433178][T18516] [ 452.433186][T18516] dump_stack_lvl+0xe8/0x150 [ 452.433216][T18516] should_fail_ex+0x412/0x560 [ 452.433245][T18516] should_failslab+0xa8/0x100 [ 452.433266][T18516] ? skb_clone+0x212/0x3a0 [ 452.433283][T18516] kmem_cache_alloc_noprof+0x87/0x650 [ 452.433299][T18516] ? apparmor_capable+0x126/0x170 [ 452.433331][T18516] skb_clone+0x212/0x3a0 [ 452.433346][T18516] ? nfnetlink_rcv+0x4b0/0x27b0 [ 452.433370][T18516] nfnetlink_rcv+0x4e2/0x27b0 [ 452.433388][T18516] ? is_bpf_text_address+0x26/0x2b0 [ 452.433412][T18516] ? is_bpf_text_address+0x292/0x2b0 [ 452.433428][T18516] ? is_bpf_text_address+0x26/0x2b0 [ 452.433452][T18516] ? __kernel_text_address+0xd/0x30 [ 452.433470][T18516] ? unwind_get_return_address+0x4d/0x90 [ 452.433495][T18516] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 452.433513][T18516] ? arch_stack_walk+0xfb/0x150 [ 452.433546][T18516] ? __lock_acquire+0x6b5/0x2cf0 [ 452.433568][T18516] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 452.433600][T18516] ? __lock_acquire+0x6b5/0x2cf0 [ 452.433629][T18516] ? __lock_acquire+0x6b5/0x2cf0 [ 452.433657][T18516] ? __netlink_lookup+0xc6/0x8b0 [ 452.433686][T18516] ? __netlink_lookup+0x7e4/0x8b0 [ 452.433718][T18516] ? netlink_deliver_tap+0x2e/0x1b0 [ 452.433765][T18516] netlink_unicast+0x80f/0x9b0 [ 452.433795][T18516] ? __pfx_netlink_unicast+0x10/0x10 [ 452.433819][T18516] ? netlink_sendmsg+0x650/0xb40 [ 452.433840][T18516] ? skb_put+0x11b/0x210 [ 452.433867][T18516] netlink_sendmsg+0x813/0xb40 [ 452.433900][T18516] ? __pfx_netlink_sendmsg+0x10/0x10 [ 452.433927][T18516] ? aa_sock_msg_perm+0xf1/0x1b0 [ 452.433950][T18516] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 452.433973][T18516] ____sys_sendmsg+0x972/0x9f0 [ 452.433999][T18516] ? __pfx_____sys_sendmsg+0x10/0x10 [ 452.434027][T18516] ? import_iovec+0x73/0xa0 [ 452.434055][T18516] ___sys_sendmsg+0x2a5/0x360 [ 452.434078][T18516] ? __pfx____sys_sendmsg+0x10/0x10 [ 452.434131][T18516] ? __fget_files+0x2a/0x420 [ 452.434154][T18516] ? __fget_files+0x3a0/0x420 [ 452.434186][T18516] __x64_sys_sendmsg+0x1bd/0x2a0 [ 452.434206][T18516] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 452.434234][T18516] ? __pfx_ksys_write+0x10/0x10 [ 452.434265][T18516] do_syscall_64+0x14d/0xf80 [ 452.434289][T18516] ? trace_irq_disable+0x3b/0x150 [ 452.434312][T18516] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.434329][T18516] ? clear_bhb_loop+0x40/0x90 [ 452.434350][T18516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.434365][T18516] RIP: 0033:0x7f6475f9c799 [ 452.434382][T18516] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 452.434396][T18516] RSP: 002b:00007f6476e9d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 452.434414][T18516] RAX: ffffffffffffffda RBX: 00007f6476215fa0 RCX: 00007f6475f9c799 [ 452.434427][T18516] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 452.434438][T18516] RBP: 00007f6476e9d090 R08: 0000000000000000 R09: 0000000000000000 [ 452.434448][T18516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 452.434457][T18516] R13: 00007f6476216038 R14: 00007f6476215fa0 R15: 00007ffce182c078 [ 452.434487][T18516] [ 453.075979][T18534] wlan1 speed is unknown, defaulting to 1000 [ 453.084595][T18534] lo speed is unknown, defaulting to 1000 [ 453.094748][T18534] virt_wifi0 speed is unknown, defaulting to 1000 [ 453.268942][T18542] wlan1 speed is unknown, defaulting to 1000 [ 453.310345][T18549] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3612'. [ 453.313621][T18542] lo speed is unknown, defaulting to 1000 [ 453.349656][T18542] virt_wifi0 speed is unknown, defaulting to 1000 [ 453.427550][T18554] FAULT_INJECTION: forcing a failure. [ 453.427550][T18554] name failslab, interval 1, probability 0, space 0, times 0 [ 453.472912][T18554] CPU: 0 UID: 0 PID: 18554 Comm: syz.2.3615 Not tainted syzkaller #0 PREEMPT(full) [ 453.472938][T18554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 453.472949][T18554] Call Trace: [ 453.472956][T18554] [ 453.472964][T18554] dump_stack_lvl+0xe8/0x150 [ 453.472993][T18554] should_fail_ex+0x412/0x560 [ 453.473018][T18554] should_failslab+0xa8/0x100 [ 453.473039][T18554] ? skb_clone+0x212/0x3a0 [ 453.473058][T18554] kmem_cache_alloc_noprof+0x87/0x650 [ 453.473076][T18554] ? apparmor_capable+0x126/0x170 [ 453.473107][T18554] skb_clone+0x212/0x3a0 [ 453.473122][T18554] ? nfnetlink_rcv+0x4b0/0x27b0 [ 453.473145][T18554] nfnetlink_rcv+0x4e2/0x27b0 [ 453.473184][T18554] ? lockdep_hardirqs_on+0x7a/0x110 [ 453.473209][T18554] ? __dev_queue_xmit+0x28b/0x3870 [ 453.473226][T18554] ? __local_bh_enable_ip+0xd0/0x130 [ 453.473248][T18554] ? __dev_queue_xmit+0x1efe/0x3870 [ 453.473264][T18554] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.473292][T18554] ? __dev_queue_xmit+0x28b/0x3870 [ 453.473312][T18554] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 453.473347][T18554] ? ref_tracker_free+0x693/0x840 [ 453.473368][T18554] ? __copy_skb_header+0xa3/0x4a0 [ 453.473386][T18554] ? __pfx_ref_tracker_free+0x10/0x10 [ 453.473421][T18554] ? skb_clone+0x246/0x3a0 [ 453.473442][T18554] ? __netlink_deliver_tap+0x807/0x850 [ 453.473466][T18554] ? netlink_deliver_tap+0x2e/0x1b0 [ 453.473503][T18554] netlink_unicast+0x80f/0x9b0 [ 453.473532][T18554] ? __pfx_netlink_unicast+0x10/0x10 [ 453.473556][T18554] ? netlink_sendmsg+0x650/0xb40 [ 453.473577][T18554] ? skb_put+0x11b/0x210 [ 453.473605][T18554] netlink_sendmsg+0x813/0xb40 [ 453.473637][T18554] ? __pfx_netlink_sendmsg+0x10/0x10 [ 453.473664][T18554] ? aa_sock_msg_perm+0xf1/0x1b0 [ 453.473686][T18554] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 453.473708][T18554] ____sys_sendmsg+0x972/0x9f0 [ 453.473735][T18554] ? __pfx_____sys_sendmsg+0x10/0x10 [ 453.473762][T18554] ? import_iovec+0x73/0xa0 [ 453.473790][T18554] ___sys_sendmsg+0x2a5/0x360 [ 453.473813][T18554] ? __pfx____sys_sendmsg+0x10/0x10 [ 453.473861][T18554] ? __fget_files+0x2a/0x420 [ 453.473885][T18554] ? __fget_files+0x3a0/0x420 [ 453.473918][T18554] __x64_sys_sendmsg+0x1bd/0x2a0 [ 453.473938][T18554] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 453.473965][T18554] ? __pfx_ksys_write+0x10/0x10 [ 453.473995][T18554] do_syscall_64+0x14d/0xf80 [ 453.474018][T18554] ? trace_irq_disable+0x3b/0x150 [ 453.474041][T18554] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.474058][T18554] ? clear_bhb_loop+0x40/0x90 [ 453.474078][T18554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.474095][T18554] RIP: 0033:0x7fce2159c799 [ 453.474113][T18554] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 453.474127][T18554] RSP: 002b:00007fce223b3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 453.474147][T18554] RAX: ffffffffffffffda RBX: 00007fce21815fa0 RCX: 00007fce2159c799 [ 453.474160][T18554] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 453.474179][T18554] RBP: 00007fce223b3090 R08: 0000000000000000 R09: 0000000000000000 [ 453.474190][T18554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 453.474201][T18554] R13: 00007fce21816038 R14: 00007fce21815fa0 R15: 00007fff5caaa4a8 [ 453.474230][T18554] [ 454.008101][T18575] netlink: 'syz.2.3622': attribute type 1 has an invalid length. [ 454.090217][T18575] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 454.180242][T18586] __nla_validate_parse: 3 callbacks suppressed [ 454.180264][T18586] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3627'. [ 455.189977][T18649] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3645'. [ 455.269832][T18652] netlink: 'syz.4.3646': attribute type 39 has an invalid length. [ 455.403589][T18655] netlink: 'syz.2.3647': attribute type 1 has an invalid length. [ 455.469547][T18661] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3649'. [ 455.577906][T18665] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3650'. [ 455.587836][T18665] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 455.633968][T18665] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 455.674254][T18662] wlan1 speed is unknown, defaulting to 1000 [ 455.684091][T18662] lo speed is unknown, defaulting to 1000 [ 455.691524][T18662] virt_wifi0 speed is unknown, defaulting to 1000 [ 455.740447][T18671] bond7: option resend_igmp: invalid value (2878) [ 455.748965][T18671] bond7: option resend_igmp: allowed values 0 - 255 [ 455.758281][T18671] bond7 (unregistering): Released all slaves [ 455.820336][T18678] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3655'. [ 455.928909][T18681] pim6reg: entered allmulticast mode [ 455.977913][T18681] pim6reg: left allmulticast mode [ 455.984755][T18683] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3656'. [ 456.012422][T18689] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3658'. [ 456.031614][T18689] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3658'. [ 456.047071][T18686] mac80211_hwsim hwsim30 syzkaller0: left promiscuous mode [ 456.055200][T18686] mac80211_hwsim hwsim30 syzkaller0: left allmulticast mode [ 456.063184][T18686] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3658'. [ 456.072361][T18686] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3658'. [ 456.251034][T18659] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 456.568575][T18720] geneve2: entered promiscuous mode [ 456.574356][T18720] geneve2: entered allmulticast mode [ 456.579848][T18713] wlan1 speed is unknown, defaulting to 1000 [ 456.595450][T18713] lo speed is unknown, defaulting to 1000 [ 456.618110][T18713] virt_wifi0 speed is unknown, defaulting to 1000 [ 457.028979][T18747] vlan4: entered promiscuous mode [ 457.038304][T18747] geneve1: entered promiscuous mode [ 457.044961][T18747] vlan4: entered allmulticast mode [ 457.050207][T18747] geneve1: entered allmulticast mode [ 457.096814][T18698] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 458.177875][T18812] netlink: 'syz.4.3695': attribute type 10 has an invalid length. [ 459.261211][T18879] xt_TCPMSS: Only works on TCP SYN packets [ 459.349721][T18883] __nla_validate_parse: 8 callbacks suppressed [ 459.349742][T18883] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3719'. [ 459.393426][T18883] bond7: entered promiscuous mode [ 459.398976][T18883] 8021q: adding VLAN 0 to HW filter on device bond7 [ 459.407380][T18886] netlink: 'syz.0.3718': attribute type 1 has an invalid length. [ 459.436605][T18886] netlink: 264 bytes leftover after parsing attributes in process `syz.0.3718'. [ 459.464005][T18886] netlink: 'syz.0.3718': attribute type 1 has an invalid length. [ 459.491496][T18886] netlink: 264 bytes leftover after parsing attributes in process `syz.0.3718'. [ 459.506078][T18898] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 459.565393][T18883] 8021q: adding VLAN 0 to HW filter on device bond7 [ 459.606544][T18883] bond7: (slave sit1): The slave device specified does not support setting the MAC address [ 459.635644][T18905] block nbd1: reconnected socket [ 459.654807][ T51] block nbd1: Receive control failed (result -32) [ 459.664193][T18883] bond7: (slave sit1): Error -95 calling set_mac_address [ 459.689504][T18909] FAULT_INJECTION: forcing a failure. [ 459.689504][T18909] name failslab, interval 1, probability 0, space 0, times 0 [ 459.748016][T18909] CPU: 0 UID: 0 PID: 18909 Comm: syz.4.3724 Not tainted syzkaller #0 PREEMPT(full) [ 459.748050][T18909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 459.748061][T18909] Call Trace: [ 459.748068][T18909] [ 459.748076][T18909] dump_stack_lvl+0xe8/0x150 [ 459.748104][T18909] should_fail_ex+0x412/0x560 [ 459.748130][T18909] should_failslab+0xa8/0x100 [ 459.748152][T18909] __kvmalloc_node_noprof+0x178/0x8a0 [ 459.748173][T18909] ? nf_tables_commit+0xc2c/0xa400 [ 459.748190][T18909] ? nf_tables_commit+0x936/0xa400 [ 459.748211][T18909] nf_tables_commit+0xc2c/0xa400 [ 459.748228][T18909] ? do_raw_spin_lock+0x12b/0x2f0 [ 459.748270][T18909] ? __pfx_nf_tables_commit+0x10/0x10 [ 459.748290][T18909] ? __free_frozen_pages+0x706/0xdb0 [ 459.748318][T18909] ? nf_tables_newrule+0x2590/0x28b0 [ 459.748353][T18909] ? __pfx_nf_tables_newrule+0x10/0x10 [ 459.748394][T18909] nfnetlink_rcv+0x1c1b/0x27b0 [ 459.748449][T18909] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 459.748486][T18909] ? ref_tracker_free+0x693/0x840 [ 459.748538][T18909] ? __netlink_deliver_tap+0x807/0x850 [ 459.748562][T18909] ? netlink_deliver_tap+0x2e/0x1b0 [ 459.748600][T18909] netlink_unicast+0x80f/0x9b0 [ 459.748629][T18909] ? __pfx_netlink_unicast+0x10/0x10 [ 459.748653][T18909] ? netlink_sendmsg+0x650/0xb40 [ 459.748675][T18909] ? skb_put+0x11b/0x210 [ 459.748704][T18909] netlink_sendmsg+0x813/0xb40 [ 459.748738][T18909] ? __pfx_netlink_sendmsg+0x10/0x10 [ 459.748767][T18909] ? aa_sock_msg_perm+0xf1/0x1b0 [ 459.748790][T18909] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 459.748812][T18909] ____sys_sendmsg+0x972/0x9f0 [ 459.748841][T18909] ? __pfx_____sys_sendmsg+0x10/0x10 [ 459.748868][T18909] ? import_iovec+0x73/0xa0 [ 459.748898][T18909] ___sys_sendmsg+0x2a5/0x360 [ 459.748925][T18909] ? __pfx____sys_sendmsg+0x10/0x10 [ 459.748977][T18909] ? __fget_files+0x2a/0x420 [ 459.749001][T18909] ? __fget_files+0x3a0/0x420 [ 459.749043][T18909] __x64_sys_sendmsg+0x1bd/0x2a0 [ 459.749065][T18909] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 459.749094][T18909] ? __pfx_ksys_write+0x10/0x10 [ 459.749124][T18909] do_syscall_64+0x14d/0xf80 [ 459.749149][T18909] ? trace_irq_disable+0x3b/0x150 [ 459.749173][T18909] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.749191][T18909] ? clear_bhb_loop+0x40/0x90 [ 459.749213][T18909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.749231][T18909] RIP: 0033:0x7fa3dcd9c799 [ 459.749249][T18909] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 459.749265][T18909] RSP: 002b:00007fa3ddb76028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 459.749285][T18909] RAX: ffffffffffffffda RBX: 00007fa3dd015fa0 RCX: 00007fa3dcd9c799 [ 459.749298][T18909] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 459.749310][T18909] RBP: 00007fa3ddb76090 R08: 0000000000000000 R09: 0000000000000000 [ 459.749321][T18909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 459.749331][T18909] R13: 00007fa3dd016038 R14: 00007fa3dd015fa0 R15: 00007ffd1cccb008 [ 459.749361][T18909] [ 460.083246][T18912] netlink: 'syz.0.3723': attribute type 3 has an invalid length. [ 460.091710][T18912] netlink: 'syz.0.3723': attribute type 2 has an invalid length. [ 460.100942][T18912] netlink: 'syz.0.3723': attribute type 2 has an invalid length. [ 460.317823][T18929] team0: Port device syz_tun added [ 460.549767][T18951] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3735'. [ 460.567374][T18939] team0: Port device syz_tun removed [ 460.630672][T18939] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.638407][T18939] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.701410][T18956] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 461.121702][T18939] bridge_slave_0: left allmulticast mode [ 461.127838][T18939] bridge_slave_0: left promiscuous mode [ 461.138726][T18939] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.160704][T18939] bridge_slave_1: left allmulticast mode [ 461.168439][T18939] bridge_slave_1: left promiscuous mode [ 461.177963][T18939] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.198298][T18939] bond0: (slave bond_slave_0): Releasing backup interface [ 461.219230][T18939] bond0: (slave bond_slave_1): Releasing backup interface [ 461.234660][T18939] team0: Port device team_slave_0 removed [ 461.246009][T18939] team0: Port device team_slave_1 removed [ 461.254676][T18939] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 461.264891][T18939] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 461.276982][T18939] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 461.289385][T18939] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 461.303595][T18939] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 461.480313][T18969] wlan1 speed is unknown, defaulting to 1000 [ 461.519790][T18969] lo speed is unknown, defaulting to 1000 [ 461.520187][T18968] wlan1 speed is unknown, defaulting to 1000 [ 461.538212][T18969] virt_wifi0 speed is unknown, defaulting to 1000 [ 461.554639][T18968] lo speed is unknown, defaulting to 1000 [ 461.629961][T18968] virt_wifi0 speed is unknown, defaulting to 1000 [ 461.654881][T18978] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3743'. [ 461.655608][T18979] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3743'. [ 461.703470][T18979] nbd: must specify a device to reconfigure [ 461.710920][T18978] nbd: must specify a device to reconfigure [ 462.227187][T19016] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3751'. [ 462.236384][T19001] macsec1: entered allmulticast mode [ 462.236408][T19001] macsec0: entered allmulticast mode [ 462.236420][T19001] veth1_macvtap: entered allmulticast mode [ 462.458982][T19030] netlink: 'syz.0.3754': attribute type 16 has an invalid length. [ 462.469398][T19016] netlink: 1272 bytes leftover after parsing attributes in process `syz.3.3751'. [ 462.479817][T19016] netlink: 14724 bytes leftover after parsing attributes in process `syz.3.3751'. [ 462.502813][T19030] netlink: 'syz.0.3754': attribute type 17 has an invalid length. [ 462.623153][T19030] 8021q: adding VLAN 0 to HW filter on device bond0 [ 462.632006][T19030] 8021q: adding VLAN 0 to HW filter on device team0 [ 462.701644][T19030] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 462.882219][T19036] wlan1 speed is unknown, defaulting to 1000 [ 462.913867][T19032] wlan1 speed is unknown, defaulting to 1000 [ 462.927133][T19032] lo speed is unknown, defaulting to 1000 [ 462.951108][T19036] lo speed is unknown, defaulting to 1000 [ 462.994036][T19032] virt_wifi0 speed is unknown, defaulting to 1000 [ 463.064184][T19036] virt_wifi0 speed is unknown, defaulting to 1000 [ 463.080813][T19052] netlink: 364 bytes leftover after parsing attributes in process `syz.3.3764'. [ 463.468709][T19083] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 463.484148][T19083] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 463.604123][T19085] syzkaller0: entered promiscuous mode [ 463.612587][T19085] syzkaller0: entered allmulticast mode [ 463.666000][T19094] syzkaller0: entered promiscuous mode [ 463.672373][T19094] syzkaller0: entered allmulticast mode [ 463.951906][T19113] xt_hashlimit: size too large, truncated to 1048576 [ 463.989463][T19116] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 463.996764][T19116] IPv6: NLM_F_CREATE should be set when creating new route [ 464.211151][T19120] syzkaller0: entered promiscuous mode [ 464.244404][T19120] syzkaller0: entered allmulticast mode [ 464.501185][T19148] netlink: 'syz.4.3786': attribute type 2 has an invalid length. [ 464.518989][T19148] __nla_validate_parse: 4 callbacks suppressed [ 464.519010][T19148] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3786'. [ 464.827226][T19164] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3793'. [ 464.841806][T19164] netlink: 'syz.4.3793': attribute type 21 has an invalid length. [ 465.297523][T19193] tipc: Enabled bearer , priority 10 [ 465.345677][T19192] ip6tnl1: entered promiscuous mode [ 465.371026][T19200] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3798'. [ 465.372143][T19201] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3802'. [ 465.417550][T19189] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3801'. [ 465.483825][T19189] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3801'. [ 465.567559][T19189] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3801'. [ 465.591235][T19189] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3801'. [ 465.675239][ T1101] bond3 (unregistering): (slave ip6gretap1): Releasing active interface [ 465.682300][T19211] delete_channel: no stack [ 465.720429][ T1101] sit0 (unregistering): left allmulticast mode [ 465.902223][ T1101] bond2 (unregistering): (slave bridge1): Releasing active interface [ 465.947542][ T1101] bond4 (unregistering): (slave bridge2): Releasing active interface [ 465.957380][ T1101] bridge2 (unregistering): left promiscuous mode [ 465.964123][ T1101] bridge2 (unregistering): left allmulticast mode [ 466.026302][ T1101] bond5 (unregistering): (slave bridge3): Releasing active interface [ 466.034658][ T1101] bridge3 (unregistering): left promiscuous mode [ 466.040991][ T1101] bridge3 (unregistering): left allmulticast mode [ 466.196616][ T1101] bond8 (unregistering): (slave bridge7): Releasing active interface [ 466.205265][ T1101] bridge7 (unregistering): left promiscuous mode [ 466.211617][ T1101] bridge7 (unregistering): left allmulticast mode [ 466.267921][ T1101] bond0 (unregistering): Released all slaves [ 466.277866][ T1101] bond1 (unregistering): Released all slaves [ 466.291212][ T1101] bond2 (unregistering): Released all slaves [ 466.310671][ T1101] bond3 (unregistering): Released all slaves [ 466.330210][ T1101] bond4 (unregistering): Released all slaves [ 466.352178][ T1101] bond5 (unregistering): Released all slaves [ 466.365124][ T1101] bond6 (unregistering): Released all slaves [ 466.378149][ T1101] bond7 (unregistering): Released all slaves [ 466.399553][ T1101] bond8 (unregistering): Released all slaves [ 466.414227][ T1101] bond9 (unregistering): Released all slaves [ 466.434554][ T1101] bond10 (unregistering): Released all slaves [ 466.449808][ T143] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 466.458314][ T143] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 466.484433][T19223] ip6tnl1: entered promiscuous mode [ 466.492921][T19223] ip6tnl1: entered allmulticast mode [ 466.504560][ T143] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 466.533271][ T143] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 466.655691][ T1101] tipc: Disabling bearer [ 466.689971][T19233] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3814'. [ 466.693512][ T1101] tipc: Left network mode [ 466.723390][T19226] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3811'. [ 466.801680][T19226] netlink: 'syz.0.3811': attribute type 1 has an invalid length. [ 466.898170][T19226] bond1: entered promiscuous mode [ 466.903781][T19226] bond1: entered allmulticast mode [ 466.913299][T19226] 8021q: adding VLAN 0 to HW filter on device bond1 [ 467.021515][T19246] wlan1 speed is unknown, defaulting to 1000 [ 467.022413][ T1101] [ 467.029852][ T1101] ====================================================== [ 467.036864][ T1101] WARNING: possible circular locking dependency detected [ 467.043894][ T1101] syzkaller #0 Not tainted [ 467.048292][ T1101] ------------------------------------------------------ [ 467.055291][ T1101] kworker/u8:7/1101 is trying to acquire lock: [ 467.061438][ T1101] ffff88801b6dda20 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_unlink_sibling+0x71/0x180 [ 467.071986][ T1101] [ 467.071986][ T1101] but task is already holding lock: [ 467.079342][ T1101] ffff88801b6dd988 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3d/0x130 [ 467.089597][ T1101] [ 467.089597][ T1101] which lock already depends on the new lock. [ 467.089597][ T1101] [ 467.099980][ T1101] [ 467.099980][ T1101] the existing dependency chain (in reverse order) is: [ 467.108971][ T1101] [ 467.108971][ T1101] -> #9 (&root->kernfs_rwsem){++++}-{4:4}: [ 467.116949][ T1101] down_write+0x96/0x200 [ 467.121696][ T1101] kernfs_add_one+0x41/0x5c0 [ 467.126797][ T1101] kernfs_create_dir_ns+0xde/0x130 [ 467.132414][ T1101] internal_create_group+0x425/0x1180 [ 467.138293][ T1101] cpuhp_invoke_callback+0x445/0x860 [ 467.144088][ T1101] cpuhp_issue_call+0x430/0x7a0 [ 467.149443][ T1101] __cpuhp_setup_state_cpuslocked+0x3d9/0x6b0 [ 467.156018][ T1101] __cpuhp_setup_state+0x3f/0x60 [ 467.161462][ T1101] do_one_initcall+0x250/0x8d0 [ 467.166736][ T1101] do_initcall_level+0x104/0x190 [ 467.172176][ T1101] do_initcalls+0x59/0xa0 [ 467.177007][ T1101] kernel_init_freeable+0x2a6/0x3e0 [ 467.182711][ T1101] kernel_init+0x1d/0x1d0 [ 467.187543][ T1101] ret_from_fork+0x51e/0xb90 [ 467.192639][ T1101] ret_from_fork_asm+0x1a/0x30 [ 467.198429][ T1101] [ 467.198429][ T1101] -> #8 (cpuhp_state_mutex){+.+.}-{4:4}: [ 467.206235][ T1101] [ 467.206235][ T1101] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 467.213948][ T1101] cpus_read_lock+0x42/0x160 [ 467.219135][ T1101] static_key_slow_inc+0x12/0x30 [ 467.224578][ T1101] nbd_genl_reconfigure+0x132f/0x1ea0 [ 467.230457][ T1101] genl_family_rcv_msg_doit+0x22a/0x330 [ 467.236504][ T1101] genl_rcv_msg+0x61c/0x7a0 [ 467.241507][ T1101] netlink_rcv_skb+0x232/0x4b0 [ 467.246775][ T1101] genl_rcv+0x28/0x40 [ 467.251257][ T1101] netlink_unicast+0x80f/0x9b0 [ 467.256524][ T1101] netlink_sendmsg+0x813/0xb40 [ 467.261795][ T1101] ____sys_sendmsg+0x972/0x9f0 [ 467.267059][ T1101] ___sys_sendmsg+0x2a5/0x360 [ 467.272234][ T1101] __x64_sys_sendmsg+0x1bd/0x2a0 [ 467.277673][ T1101] do_syscall_64+0x14d/0xf80 [ 467.282771][ T1101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.289166][ T1101] [ 467.289166][ T1101] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 467.296795][ T1101] __mutex_lock+0x19f/0x1300 [ 467.301893][ T1101] nbd_queue_rq+0x37b/0x1100 [ 467.306997][ T1101] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 467.313042][ T1101] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 467.319874][ T1101] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 467.326366][ T1101] blk_mq_run_hw_queue+0x348/0x4f0 [ 467.331991][ T1101] blk_mq_dispatch_list+0xd16/0xe10 [ 467.337692][ T1101] blk_mq_flush_plug_list+0x48d/0x570 [ 467.343564][ T1101] __blk_flush_plug+0x3ed/0x4d0 [ 467.348915][ T1101] __submit_bio+0x28d/0x580 [ 467.353917][ T1101] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 467.360051][ T1101] block_read_full_folio+0x599/0x830 [ 467.365846][ T1101] filemap_read_folio+0x137/0x3b0 [ 467.371374][ T1101] do_read_cache_folio+0x358/0x590 [ 467.376992][ T1101] read_part_sector+0xb6/0x2b0 [ 467.382263][ T1101] adfspart_check_ICS+0xa5/0xa40 [ 467.387725][ T1101] bdev_disk_changed+0x7ba/0x1550 [ 467.393249][ T1101] blkdev_get_whole+0x380/0x510 [ 467.398614][ T1101] bdev_open+0x31e/0xd30 [ 467.403357][ T1101] blkdev_open+0x470/0x610 [ 467.408276][ T1101] do_dentry_open+0x785/0x14e0 [ 467.413551][ T1101] vfs_open+0x3b/0x340 [ 467.418126][ T1101] path_openat+0x2e08/0x3860 [ 467.423217][ T1101] do_file_open+0x23e/0x4a0 [ 467.428225][ T1101] do_sys_openat2+0x113/0x200 [ 467.433411][ T1101] __x64_sys_openat+0x138/0x170 [ 467.438771][ T1101] do_syscall_64+0x14d/0xf80 [ 467.443869][ T1101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.450264][ T1101] [ 467.450264][ T1101] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 467.457454][ T1101] __mutex_lock+0x19f/0x1300 [ 467.462555][ T1101] nbd_queue_rq+0xc6/0x1100 [ 467.467567][ T1101] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 467.473613][ T1101] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 467.480445][ T1101] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 467.486929][ T1101] blk_mq_run_hw_queue+0x348/0x4f0 [ 467.492554][ T1101] blk_mq_dispatch_list+0xd16/0xe10 [ 467.498253][ T1101] blk_mq_flush_plug_list+0x48d/0x570 [ 467.504126][ T1101] __blk_flush_plug+0x3ed/0x4d0 [ 467.509480][ T1101] __submit_bio+0x28d/0x580 [ 467.514486][ T1101] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 467.520620][ T1101] block_read_full_folio+0x599/0x830 [ 467.526408][ T1101] filemap_read_folio+0x137/0x3b0 [ 467.531941][ T1101] do_read_cache_folio+0x358/0x590 [ 467.537561][ T1101] read_part_sector+0xb6/0x2b0 [ 467.542829][ T1101] adfspart_check_ICS+0xa5/0xa40 [ 467.548266][ T1101] bdev_disk_changed+0x7ba/0x1550 [ 467.553788][ T1101] blkdev_get_whole+0x380/0x510 [ 467.559144][ T1101] bdev_open+0x31e/0xd30 [ 467.563886][ T1101] blkdev_open+0x470/0x610 [ 467.568808][ T1101] do_dentry_open+0x785/0x14e0 [ 467.574079][ T1101] vfs_open+0x3b/0x340 [ 467.578656][ T1101] path_openat+0x2e08/0x3860 [ 467.583747][ T1101] do_file_open+0x23e/0x4a0 [ 467.588755][ T1101] do_sys_openat2+0x113/0x200 [ 467.593937][ T1101] __x64_sys_openat+0x138/0x170 [ 467.599297][ T1101] do_syscall_64+0x14d/0xf80 [ 467.604396][ T1101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.610791][ T1101] [ 467.610791][ T1101] -> #4 (set->srcu){.+.+}-{0:0}: [ 467.617899][ T1101] __synchronize_srcu+0xca/0x3e0 [ 467.623341][ T1101] elevator_switch+0x1e8/0x7a0 [ 467.628604][ T1101] elevator_change+0x2cc/0x450 [ 467.633870][ T1101] elevator_set_default+0x36c/0x430 [ 467.639568][ T1101] blk_register_queue+0x366/0x430 [ 467.645094][ T1101] __add_disk+0x677/0xd50 [ 467.649926][ T1101] add_disk_fwnode+0xfb/0x480 [ 467.655109][ T1101] nbd_dev_add+0x72c/0xb50 [ 467.660029][ T1101] nbd_init+0x168/0x1f0 [ 467.664687][ T1101] do_one_initcall+0x250/0x8d0 [ 467.669965][ T1101] do_initcall_level+0x104/0x190 [ 467.675401][ T1101] do_initcalls+0x59/0xa0 [ 467.680229][ T1101] kernel_init_freeable+0x2a6/0x3e0 [ 467.685925][ T1101] kernel_init+0x1d/0x1d0 [ 467.690762][ T1101] ret_from_fork+0x51e/0xb90 [ 467.695859][ T1101] ret_from_fork_asm+0x1a/0x30 [ 467.701130][ T1101] [ 467.701130][ T1101] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 467.708929][ T1101] __mutex_lock+0x19f/0x1300 [ 467.714030][ T1101] elevator_change+0x1b3/0x450 [ 467.719377][ T1101] elevator_set_none+0xb5/0x140 [ 467.724731][ T1101] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 467.731048][ T1101] nbd_start_device+0x17f/0xb10 [ 467.736405][ T1101] nbd_genl_connect+0x165b/0x1cf0 [ 467.741936][ T1101] genl_family_rcv_msg_doit+0x22a/0x330 [ 467.748098][ T1101] genl_rcv_msg+0x61c/0x7a0 [ 467.753105][ T1101] netlink_rcv_skb+0x232/0x4b0 [ 467.758375][ T1101] genl_rcv+0x28/0x40 [ 467.762858][ T1101] netlink_unicast+0x80f/0x9b0 [ 467.768126][ T1101] netlink_sendmsg+0x813/0xb40 [ 467.773398][ T1101] ____sys_sendmsg+0x972/0x9f0 [ 467.778665][ T1101] ___sys_sendmsg+0x2a5/0x360 [ 467.783843][ T1101] __x64_sys_sendmsg+0x1bd/0x2a0 [ 467.789279][ T1101] do_syscall_64+0x14d/0xf80 [ 467.794376][ T1101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.800775][ T1101] [ 467.800775][ T1101] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 467.809367][ T1101] blk_alloc_queue+0x546/0x680 [ 467.814642][ T1101] __blk_mq_alloc_disk+0x197/0x390 [ 467.820259][ T1101] nbd_dev_add+0x499/0xb50 [ 467.825194][ T1101] nbd_init+0x168/0x1f0 [ 467.829873][ T1101] do_one_initcall+0x250/0x8d0 [ 467.835157][ T1101] do_initcall_level+0x104/0x190 [ 467.840614][ T1101] do_initcalls+0x59/0xa0 [ 467.845463][ T1101] kernel_init_freeable+0x2a6/0x3e0 [ 467.851172][ T1101] kernel_init+0x1d/0x1d0 [ 467.856017][ T1101] ret_from_fork+0x51e/0xb90 [ 467.861119][ T1101] ret_from_fork_asm+0x1a/0x30 [ 467.866394][ T1101] [ 467.866394][ T1101] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 467.873593][ T1101] fs_reclaim_acquire+0x71/0x100 [ 467.879041][ T1101] kmem_cache_alloc_noprof+0x40/0x650 [ 467.884916][ T1101] __kernfs_iattrs+0xdf/0x340 [ 467.890101][ T1101] kernfs_iop_setattr+0xea/0x3f0 [ 467.895544][ T1101] notify_change+0xc1a/0xf40 [ 467.900641][ T1101] do_truncate+0x1c2/0x250 [ 467.905574][ T1101] path_openat+0x2f89/0x3860 [ 467.910683][ T1101] do_file_open+0x23e/0x4a0 [ 467.915695][ T1101] do_sys_openat2+0x113/0x200 [ 467.920893][ T1101] __x64_sys_openat+0x138/0x170 [ 467.926263][ T1101] do_syscall_64+0x14d/0xf80 [ 467.931369][ T1101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.937767][ T1101] [ 467.937767][ T1101] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 467.946266][ T1101] __lock_acquire+0x15a5/0x2cf0 [ 467.951625][ T1101] lock_acquire+0xf0/0x2e0 [ 467.956547][ T1101] down_write+0x96/0x200 [ 467.961293][ T1101] kernfs_unlink_sibling+0x71/0x180 [ 467.966991][ T1101] __kernfs_remove+0x3e7/0x660 [ 467.972258][ T1101] kernfs_remove_by_name_ns+0xaf/0x130 [ 467.978230][ T1101] _cfg80211_unregister_wdev+0x130/0x570 [ 467.984385][ T1101] ieee80211_remove_interfaces+0x49c/0x6d0 [ 467.990707][ T1101] ieee80211_unregister_hw+0x5d/0x2c0 [ 467.996587][ T1101] mac80211_hwsim_del_radio+0x28a/0x490 [ 468.002637][ T1101] hwsim_exit_net+0xede/0xfa0 [ 468.007819][ T1101] ops_undo_list+0x49f/0x940 [ 468.012924][ T1101] cleanup_net+0x56b/0x800 [ 468.017853][ T1101] process_scheduled_works+0xb02/0x1830 [ 468.023912][ T1101] worker_thread+0xa50/0xfc0 [ 468.029019][ T1101] kthread+0x388/0x470 [ 468.033588][ T1101] ret_from_fork+0x51e/0xb90 [ 468.038686][ T1101] ret_from_fork_asm+0x1a/0x30 [ 468.043960][ T1101] [ 468.043960][ T1101] other info that might help us debug this: [ 468.043960][ T1101] [ 468.054166][ T1101] Chain exists of: [ 468.054166][ T1101] &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem [ 468.054166][ T1101] [ 468.068574][ T1101] Possible unsafe locking scenario: [ 468.068574][ T1101] [ 468.076008][ T1101] CPU0 CPU1 [ 468.081355][ T1101] ---- ---- [ 468.086699][ T1101] lock(&root->kernfs_rwsem); [ 468.091449][ T1101] lock(cpuhp_state_mutex); [ 468.098541][ T1101] lock(&root->kernfs_rwsem); [ 468.105808][ T1101] lock(&root->kernfs_iattr_rwsem); [ 468.111080][ T1101] [ 468.111080][ T1101] *** DEADLOCK *** [ 468.111080][ T1101] [ 468.119200][ T1101] 6 locks held by kworker/u8:7/1101: [ 468.124462][ T1101] #0: ffff88801b6de948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 468.135327][ T1101] #1: ffffc900046ffc40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 468.145838][ T1101] #2: ffffffff8fbb86d0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800 [ 468.155139][ T1101] #3: ffffffff8fbc6fc8 (rtnl_mutex){+.+.}-{4:4}, at: ieee80211_unregister_hw+0x55/0x2c0 [ 468.164951][ T1101] #4: ffff88803fb90788 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0x132/0x6d0 [ 468.175722][ T1101] #5: ffff88801b6dd988 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3d/0x130 [ 468.186406][ T1101] [ 468.186406][ T1101] stack backtrace: [ 468.192287][ T1101] CPU: 1 UID: 0 PID: 1101 Comm: kworker/u8:7 Not tainted syzkaller #0 PREEMPT(full) [ 468.192303][ T1101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 468.192313][ T1101] Workqueue: netns cleanup_net [ 468.192334][ T1101] Call Trace: [ 468.192340][ T1101] [ 468.192347][ T1101] dump_stack_lvl+0xe8/0x150 [ 468.192367][ T1101] print_circular_bug+0x2e1/0x300 [ 468.192389][ T1101] check_noncircular+0x12e/0x150 [ 468.192412][ T1101] __lock_acquire+0x15a5/0x2cf0 [ 468.192432][ T1101] ? __lock_acquire+0x6b5/0x2cf0 [ 468.192453][ T1101] lock_acquire+0xf0/0x2e0 [ 468.192469][ T1101] ? kernfs_unlink_sibling+0x71/0x180 [ 468.192486][ T1101] down_write+0x96/0x200 [ 468.192500][ T1101] ? kernfs_unlink_sibling+0x71/0x180 [ 468.192513][ T1101] ? __pfx_down_write+0x10/0x10 [ 468.192526][ T1101] ? kernfs_root+0x1c/0x230 [ 468.192543][ T1101] ? kernfs_root+0x1c/0x230 [ 468.192562][ T1101] ? kernfs_root+0x1ea/0x230 [ 468.192580][ T1101] kernfs_unlink_sibling+0x71/0x180 [ 468.192595][ T1101] __kernfs_remove+0x3e7/0x660 [ 468.192609][ T1101] kernfs_remove_by_name_ns+0xaf/0x130 [ 468.192624][ T1101] _cfg80211_unregister_wdev+0x130/0x570 [ 468.192643][ T1101] ieee80211_remove_interfaces+0x49c/0x6d0 [ 468.192663][ T1101] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 468.192683][ T1101] ieee80211_unregister_hw+0x5d/0x2c0 [ 468.192700][ T1101] mac80211_hwsim_del_radio+0x28a/0x490 [ 468.192720][ T1101] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 468.192735][ T1101] ? hwsim_exit_net+0xd11/0xfa0 [ 468.192750][ T1101] ? __local_bh_enable_ip+0xd0/0x130 [ 468.192769][ T1101] hwsim_exit_net+0xede/0xfa0 [ 468.192782][ T1101] ? hwsim_exit_net+0x336/0xfa0 [ 468.192796][ T1101] ? __pfx_hwsim_exit_net+0x10/0x10 [ 468.192810][ T1101] ? __ip_vs_dev_cleanup_batch+0x238/0x260 [ 468.192829][ T1101] ops_undo_list+0x49f/0x940 [ 468.192850][ T1101] ? __pfx_ops_undo_list+0x10/0x10 [ 468.192870][ T1101] ? idr_destroy+0x218/0x290 [ 468.192886][ T1101] ? do_raw_spin_unlock+0xf5/0x210 [ 468.192901][ T1101] cleanup_net+0x56b/0x800 [ 468.192920][ T1101] ? __pfx_cleanup_net+0x10/0x10 [ 468.192946][ T1101] ? process_scheduled_works+0xa25/0x1830 [ 468.192963][ T1101] ? process_scheduled_works+0xa25/0x1830 [ 468.192980][ T1101] process_scheduled_works+0xb02/0x1830 [ 468.193007][ T1101] ? __pfx_process_scheduled_works+0x10/0x10 [ 468.193025][ T1101] ? assign_work+0x3d5/0x5e0 [ 468.193043][ T1101] worker_thread+0xa50/0xfc0 [ 468.193069][ T1101] kthread+0x388/0x470 [ 468.193082][ T1101] ? __pfx_worker_thread+0x10/0x10 [ 468.193098][ T1101] ? __pfx_kthread+0x10/0x10 [ 468.193110][ T1101] ret_from_fork+0x51e/0xb90 [ 468.193129][ T1101] ? __pfx_ret_from_fork+0x10/0x10 [ 468.193145][ T1101] ? __switch_to+0xc7d/0x1450 [ 468.193161][ T1101] ? __pfx_kthread+0x10/0x10 [ 468.193173][ T1101] ret_from_fork_asm+0x1a/0x30 [ 468.193198][ T1101] [ 468.585704][T19246] lo speed is unknown, defaulting to 1000 [ 468.592342][T19246] virt_wifi0 speed is unknown, defaulting to 1000 [ 468.638481][T19257] wlan1 speed is unknown, defaulting to 1000 [ 468.658944][T19257] lo speed is unknown, defaulting to 1000 [ 468.708661][T19257] virt_wifi0 speed is unknown, defaulting to 1000 [ 468.766689][ T1101] hsr_slave_0: left promiscuous mode [ 468.772396][ T1101] hsr_slave_1: left promiscuous mode [ 468.778829][ T1101] macsec0: left allmulticast mode [ 469.217323][ T1101] IPVS: stop unused estimator thread 0... [ 469.283191][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 469.290292][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 472.225652][ T5195] udevd[5195]: worker [13811] /devices/virtual/block/nbd1 timeout; kill it [ 472.234355][ T5195] udevd[5195]: seq 20254 '/devices/virtual/block/nbd1' killed [ 472.483081][ T2684] block nbd1: Possible stuck request ffff888026c08000: control (read@0,1024B). Runtime 180 seconds [ 472.494071][T15026] block nbd1: Dead connection, failed to find a fallback [ 472.501086][T15026] block nbd1: shutting down sockets [ 472.506592][T15026] blk_print_req_error: 138 callbacks suppressed [ 472.506606][T15026] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 472.522560][ T2684] block nbd1: Possible stuck request ffff888026c08200: control (read@1024,1024B). Runtime 180 seconds [ 472.533896][T15026] buffer_io_error: 138 callbacks suppressed [ 472.533910][T15026] Buffer I/O error on dev nbd1, logical block 0, async page read [ 472.547898][ T2684] block nbd1: Possible stuck request ffff888026c08400: control (read@2048,1024B). Runtime 180 seconds [ 472.559117][T15026] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 472.569041][ T2684] block nbd1: Possible stuck request ffff888026c08600: control (read@3072,1024B). Runtime 180 seconds [ 472.580471][T15026] Buffer I/O error on dev nbd1, logical block 1, async page read [ 472.588582][T15026] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 472.598330][T15026] Buffer I/O error on dev nbd1, logical block 3, async page read [ 472.606138][T15026] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 472.615972][T15026] Buffer I/O error on dev nbd1, logical block 2, async page read [ 472.624048][T13811] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 472.633871][T13811] Buffer I/O error on dev nbd1, logical block 0, async page read [ 472.641606][T13811] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 472.651509][T13811] Buffer I/O error on dev nbd1, logical block 1, async page read [ 472.659746][T13811] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 472.669477][T13811] Buffer I/O error on dev nbd1, logical block 2, async page read [ 472.677304][T13811] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 472.687397][T13811] Buffer I/O error on dev nbd1, logical block 3, async page read [ 472.695226][T13811] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 472.704753][T13811] Buffer I/O error on dev nbd1, logical block 0, async page read [ 472.712480][T13811] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 472.722227][T13811] Buffer I/O error on dev nbd1, logical block 1, async page read [ 472.730362][T13811] ldm_validate_partition_table(): Disk read failed. [ 472.737405][T13811] Dev nbd1: unable to read RDB block 0 [ 472.743806][T13811] nbd1: unable to read partition table [ 472.753350][ T5195] udevd[5195]: worker [13811] terminated by signal 9 (Killed) [ 472.760834][ T5195] udevd[5195]: worker [13811] failed while handling '/devices/virtual/block/nbd1'