last executing test programs: 23.481074347s ago: executing program 1 (id=3233): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x4bd1bfda, 0x0, 0x6}, 0x1c) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x800000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x830}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_USER_PORT_KEY={0x6, 0x19, 0x7}, @IFLA_BOND_MODE={0x5, 0x1, 0x4}, @IFLA_BOND_AD_ACTOR_SYSTEM={0x8, 0x1a, @multicast2}]}}}]}, 0x4c}, 0x1, 0xba01}, 0x0) 23.129058567s ago: executing program 1 (id=3237): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet(0x2, 0x1, 0x8) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000006e40)={{{@in6, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@private0}}, &(0x7f0000006f40)=0xe8) socket$packet(0x11, 0xa, 0x300) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x47, &(0x7f0000000140)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0x11, 0x11, 0x0, @private1, @mcast2, {[], {0x0, 0xe22, 0x11, 0x0, @gue={{0x1, 0x1, 0x0, 0x9, 0x0, @void}, "5f3bc99e3a"}}}}}}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000005c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000001ac1414aa00000000000000000000000000000000000000030a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000dfffffffffffffff00000000000a000000000000feffffffff7f40000200000000000008ffffffff0000000001000601000000004400050000000000000000000000ffffffffffff000000003c00000002000000ac1414aa0000000000000000000000000600000004"], 0xfc}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={0xffffffffffffffff, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000580)="b9ff0300600d698cff9e13f008004de7f9c76436ffffff1100135433f6e31e17128c", 0x0, 0xfffffffe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @random="d976f308c05c"}) write$tun(r4, &(0x7f0000000180)={@val={0x8, 0x800}, @val={0x7, 0x3, 0x3, 0x2, 0x14, 0x7}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x6, 0x2c, 0x0, 0x0, 0x8, 0x2f, 0x0, @empty, @broadcast}, {{0x8100, 0x6558, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x20, 0x5, 0x0, 0x0, {[@exp_fastopen={0xfe, 0x4}]}}}}}, 0x3a) 22.561952043s ago: executing program 1 (id=3241): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 22.402632578s ago: executing program 1 (id=3244): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r1) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x48, r2, 0x1, 0x70bd27, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x1c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x4}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4801}, 0xc800) bind$alg(r0, &(0x7f0000010400)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$nl_route(r3, &(0x7f00000009c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000a40)=ANY=[@ANYBLOB="141d91541391f9000000520000ff7fbd0000c274ea5761d615f5ea79e6b57db5b86467ceac94ba869cb0bde6635783ad5c9d6813d91e66f6674b69e0582656b2bee5d51f18c29ae91900"/92], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$kcm(0x23, 0x5, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0xa, &(0x7f0000000000), 0x75) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0x627, 0x7ffffd, 0x0, {}, [{0x34, 0x1, [@m_gact={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x48}}, 0x4010) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000001300050000000000feffffff07000000", @ANYRES32=r6, @ANYBLOB="00300000000000003c001a803800048034"], 0x5c}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x541b, &(0x7f0000000940)={r4}) sendmmsg$alg(r3, &(0x7f0000000a00)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="42a86aa87f8cd13ebe3448412ba8", 0xe}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@assoc={0x18, 0x117, 0x4, 0xffff}], 0x18, 0x44010}], 0x1, 0x40800) getsockname$l2tp6(r3, &(0x7f0000000340)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000600)=0x20) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000640)=""/88, 0x58}, {&(0x7f00000006c0)=""/105, 0x69}, {&(0x7f0000000200)=""/82, 0x52}, {&(0x7f0000000280)=""/175, 0xaf}, {&(0x7f00000001c0)=""/3, 0x3}, {&(0x7f00000004c0)=""/225, 0xe1}, {&(0x7f00000007c0)=""/221, 0xdd}], 0x7}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f0000000400)=[{&(0x7f00000000c0)="390000001000111867090707a640400f0021ff3f30000000170a001700000000040037000900030001632564b758b9a64411f6bb744dc48f57", 0x39}], 0x1) 21.912952485s ago: executing program 1 (id=3248): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000080), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000004c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r4, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c109924b22788", @ANYRES16=r3, @ANYBLOB="010026bd7000fcdbdf252000000008000300", @ANYRES32=r5, @ANYBLOB], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan4\x00'}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r6) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_CCA_MODE(r6, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xfffffffffffffc62, &(0x7f0000000480)={&(0x7f0000000540)=ANY=[@ANYBLOB="a034ef4ce6f29ae2105c2e0698c09679d37201ba2b2d35380a305f96d53cdbfe1a55b8789a5820dc6aa9d89b7aa8dbf8da6edab563480ac037d9ed090c95c29c4f5a94a86947db72c8c9a0094e", @ANYRES16=r1, @ANYBLOB="080027bd7000fddbdf250d00000008000c000300000008000300", @ANYRES32=r9, @ANYBLOB="0c0006000200000002000000"], 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x41) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x14, r8, 0x411, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x40000) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000180)={'wpan0\x00'}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan3\x00'}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000200)={'wpan3\x00'}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000240)={'wpan3\x00'}) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r10, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f0000000200)={0xa, 0xfffa, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r12 = socket$inet6_sctp(0xa, 0x1, 0x84) close(r11) r13 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r13, 0x29, 0x4e, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r13, 0x84, 0x64, &(0x7f00000005c0)=[@in6={0xa, 0x4e23, 0x0, @remote, 0x3}], 0x1c) sendmmsg$inet6(r13, &(0x7f0000001d80)=[{{&(0x7f00000003c0)={0xa, 0x4e20, 0x9, @local, 0x9}, 0x1c, &(0x7f0000001c00)=[{&(0x7f0000001740)='p', 0x1}], 0x1}}], 0x1, 0x5dc) setsockopt(r12, 0x84, 0x80, &(0x7f0000000000), 0x0) 8.512733337s ago: executing program 2 (id=3330): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x2) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014) recvmmsg(r4, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4082, 0xff2}], 0x1}, 0xfffffffc}], 0x1, 0x2, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x17, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2000000}, {}, {}, [@ringbuf_query={{}, {}, {0x85, 0x0, 0x0, 0x17}}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x8d0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newtfilter={0xd8, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xc}, {0xfff2}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0xac, 0x2, [@TCA_BPF_ACT={0x4c}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}]}, 0xd8}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e000000850000000700000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r7, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) sendmsg$inet6(r7, &(0x7f0000000c00)={&(0x7f0000000140)={0xa, 0x4e22, 0xffffffda, @private2, 0x200}, 0x1c, &(0x7f0000000300)=[{&(0x7f00000001c0)="d2", 0x1}], 0x1}, 0x40) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001f00)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}], 0x1, 0x0) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r7, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRES32=r9], 0x9) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000640)="d9b9547ed3c0021a6fd6a67ab922", 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 8.082999725s ago: executing program 2 (id=3334): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x18, 0xa, 0x0) r2 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r2, &(0x7f0000000040)={0x2, 0x1234, @local}, 0x10) readv(r2, &(0x7f0000000380)=[{&(0x7f0000000140)=""/111, 0x6f}], 0x1) syz_emit_ethernet(0x2a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb08004500001c006400004801907864010102ac1423aa0000907812340001eb70ce0ebb59d6cf115f7e"], 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000100)) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000030400"/20, @ANYRES32, @ANYBLOB="000000000000000014001280090001007665746800000000040002800a000100aaaaaaaaaa00000008000400", @ANYRESOCT=r0], 0x48}}, 0x0) 7.036948459s ago: executing program 2 (id=3345): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0x6, 0xb}, {0x2, 0xffe0}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0x7}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200040f0}, 0x4890) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r4 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x800000000000, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x2c}, 0xfffffffd, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x0, 0x1, 0x7}}, 0xe8) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000140)) 6.842664124s ago: executing program 4 (id=3347): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000002740), 0x0, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, 0x0) (async) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000440)={0x2, 0x4e20, @empty}, 0x10) (async) connect$inet(r1, &(0x7f0000000440)={0x2, 0x4e20, @empty}, 0x10) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0), 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00006dbffc), 0x4) (async) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) (async) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000640)={0x0, 0xcd, "8966478739e7f4212f8580c678b4ca87cfd5244bb3e8cb0e9dbca550281238fef8f5d376f9d5a146cc1c707a5978b9ff846baacc448a236bdcb410369e13c9212b4f80c4e58ec94ab82894274797e1012830751788dd72831c04b17a3798acbbea3ea3a316803e7512db698da806b6b1680da2ea2873749d08a327035470c3ef73f5f1fc3e96e7530f6f729a3854f3bda4799069406eba193f5f25a2fbf9f37da594eb1ebc5a2b92ace300176b49feefa768a085a30d390e6a0c034feb826ca89172501ad8c0168703a369ecea"}, &(0x7f0000000740)=0xd5) (async) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000640)={0x0, 0xcd, "8966478739e7f4212f8580c678b4ca87cfd5244bb3e8cb0e9dbca550281238fef8f5d376f9d5a146cc1c707a5978b9ff846baacc448a236bdcb410369e13c9212b4f80c4e58ec94ab82894274797e1012830751788dd72831c04b17a3798acbbea3ea3a316803e7512db698da806b6b1680da2ea2873749d08a327035470c3ef73f5f1fc3e96e7530f6f729a3854f3bda4799069406eba193f5f25a2fbf9f37da594eb1ebc5a2b92ace300176b49feefa768a085a30d390e6a0c034feb826ca89172501ad8c0168703a369ecea"}, &(0x7f0000000740)=0xd5) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000780)={r2, 0x8}, &(0x7f00000007c0)=0x8) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)="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", 0x142}, {&(0x7f0000000d00)="0f198d5aa5caa1c55b84b414797cbdd4e8c576a921a070fc828060506683fd1106a961ac55b5b8ea3342ca7de5559ca2c14e05e42aed8ba14b2c78cb540f71a817d80fbf1945a046ebda494a8048a106a4d49d7f214735ada53397db3b203885ce39ee48d69465935eade21ce36e61826c52c82f038341d9bab5687c740ed3c18897094e7e1391eb84a4052e03c0c7c39ae86d454938f65e284620b99481c33d9f5e5b7a6c0d7548723f55b213c76be37f40c850c38e265758ebd8238257a146d6eced16fd658a784c928fea7a841db1a7fd6520442dae5fc0d3a3d3a5f16fcf6fe4f062ecdad7d0f3c6cd339339533c0ef28ad1e2729907094c3de93c1b1b00ad6df89507000000fb7565d3a8e9eaea020ed173c2179fb03e0944460989240a689c7fe795d310be4e7a6b778a903280dbf426b39c3603c49049980767e31edb997f59785184cbd7b9070400000073c745f71db0906cb51780f908fa61634af8ac85d9f04f3dff0a948e81cd3229a59aaeb00995358155343e3239588a0383e4df109d5ca24276d0d83a27d0e9bf681c1bbea12a6f3c20ad50f63430333bb327eb6ae32fe8809065bce26d2dc2fbb2b48d404637d61fd86852e0e1b6ccc6f75b1107aaa5f60ef45f94e953b3f213c3cb4ca4c716565078c666f84e1a99bb4cb5c7190648132f6ff1f6cb79b93f20752753c938da6241607a742361d995188b23cb4b8269e98e822585695962620673433748e476f7cc3e37db88639c525ff3a502c82c283b00aecfe7734ab369e1ed7c75e27a5a333641817baa3ea37844e20e6266c5095abf9d47ca5f8ad93f1a4d8795daec222ada00d65cf91425fae7939ceaa8d94ec1ab5082e1d251c27b3132119b350e81771f3733be232ffb90c03a818bf458aac3314007c3e35d5e4bed6b897608b01e7e26a54433e5f5c74a2ee3c2fc50067be05a677f122b7dba7010830b879a41b579d44158fbc84589ea05761d2d369853bea84dfb8081ed7b891dcb3bb3361534fdc5252e4964aed936ad2838e7af14fc65c7c1c6d44c6256f2462ae83cfd6a6b2651da607fe79d345e5080098e9e6e7482cc5c267e00d8d09dcde70b60fe6220fe953054720185010000f1885ecc2f106b66cd99131523c99f6102ddd7403791b3a7ac59b256cc4c938fe0", 0x33f}], 0x2}, 0x0) (async) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)="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", 0x142}, {&(0x7f0000000d00)="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", 0x33f}], 0x2}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000127bd7000fcdbdf25040000000900010073797a3200000000140002006970365f7674693000000000000000000900010073797a3200000000"], 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x20008810) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000380)={0x6, {{0x2, 0x4e22, @broadcast}}}, 0x88) bind$xdp(0xffffffffffffffff, &(0x7f0000000040)={0x2c, 0x6, 0x0, 0x1c, r1}, 0x10) (async) bind$xdp(0xffffffffffffffff, &(0x7f0000000040)={0x2c, 0x6, 0x0, 0x1c, r1}, 0x10) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYBLOB="100029bd7000ffdbdf250e0000003400028008000800060000000300030000000000080006000001000005000d0001000000080006"], 0x48}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000680001000000000000"], 0x18}, 0x1, 0x0, 0x0, 0x4402}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000980)=ANY=[@ANYRES16=r1, @ANYRESOCT=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230", @ANYRES8=r5, @ANYBLOB="105ba64111cab8fb68b6eab19ea5561b3da3330395a36e51fd753c9ca618443fc4e4ab7468efe53559856741facc3f6f8b3c22ea0c5845ae91219ce31f5ae7ccab2943e088b4a528a41a563485476e78172dadf98bcd6153f19d75bde7de741ca1ee855357a6552635a2038bc4a5e9984ea872398c07704b67877265704618c2efcbaa6bf57204f21b104dc6f00bd4a097ab07665d331ebb63e4f0e210db1e82f1"], 0x38}}, 0x0) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000980)=ANY=[@ANYRES16=r1, @ANYRESOCT=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230", @ANYRES8=r5, @ANYBLOB="105ba64111cab8fb68b6eab19ea5561b3da3330395a36e51fd753c9ca618443fc4e4ab7468efe53559856741facc3f6f8b3c22ea0c5845ae91219ce31f5ae7ccab2943e088b4a528a41a563485476e78172dadf98bcd6153f19d75bde7de741ca1ee855357a6552635a2038bc4a5e9984ea872398c07704b67877265704618c2efcbaa6bf57204f21b104dc6f00bd4a097ab07665d331ebb63e4f0e210db1e82f1"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r4, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0x140}], 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e6400000000180002801400"], 0x48}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e6400000000180002801400"], 0x48}}, 0x0) sendmmsg$inet(r3, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) socket$inet(0xa, 0x801, 0x84) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f00000000c0), 0x4) 6.736113297s ago: executing program 2 (id=3349): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x14, 0x17, 0x301, 0x70bd2b, 0x25dfdbfa, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000000) (async) r1 = socket$inet(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10) (async) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x130, 0x1c8, 0x260, 0x2f8, 0x98, 0x130, 0x1c8, 0x260, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x1, 0x1}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) syz_emit_ethernet(0x6c, &(0x7f0000000180)={@broadcast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5e, 0x65, 0x0, 0x0, 0x2f, 0x0, @private, @empty}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x88a8, 0x0, 0x3, [0xff, 0x3]}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x800, [0x6]}, {}, {}, {}, {0x8, 0x6558, 0xfffffffd}}}}}}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="0100acbd0f2104000000054dd5dd0000000000000000080009"], 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x4c, r4, 0x1, 0x70bd29, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x5}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008004}, 0x840) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000005a80)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x24000008}, 0x800) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x1, 0x40, 0x40, 0x41, 0xffffffffffffffff, 0xfffffffe}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000840)="ac17a905bf7bb1b165160f8aab38a1e709c998c81bc9cfa511de16f027bc10ad67be7863f941928938b91a5fc0970b5bd2c86f8f2de3d03d82cd279ca4fe0b00000000920a0e68992804a7f2", &(0x7f00000003c0), 0x1003, r5}, 0x38) (async) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000b80)={r5, &(0x7f00000005c0), &(0x7f0000000b40)=""/31}, 0x20) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x68, 0x42, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="000000002600010000112233445566778899aabb0800450000140000000001170000010203040506070800000c00020006000600080000000c000300080017000400010004000400"]}, 0x68}}, 0x0) 6.518797319s ago: executing program 2 (id=3350): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r0, 0x11, 0x1, 0x0, &(0x7f0000000300)) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r2, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x10, 0x8, 0x8, &(0x7f0000001680)}}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001280)=[r3, r3], 0x0, 0x10, 0x1000}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0d000000875a0000040000000100000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000100030b01000000da00000000008910527903090f403117aa919ed134711cb3dca08f8d82d9e161fd2c0ea61cee405f6d9b93874e6b4180fa17a26edbb147cccbe4fcf6a8a08b0108e0d77f2b51a34b7c9cda9d6028412e126ec1564843060688700dcbdb5ca094fd69ec74bc9f646d6333ca58d4f9bac6c0f6e6fefa6f", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0x2, r4, 0x0, 0x8000000}, 0x27) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x403, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x52001}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_AF_SPEC={0x4}]}, 0x3c}}, 0x440088c4) 2.10048112s ago: executing program 4 (id=3357): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040), &(0x7f00000000c0)=0xc) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xb2001080}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xac, r3, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x4}]}, 0xac}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async, rerun: 64) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000010010000000ffdbdf2500000000", @ANYRES32=r2, @ANYBLOB="0000000000000000240012800b0001006d616373656300001400028005000f0002000000080005"], 0x44}}, 0x0) (rerun: 64) 2.066190348s ago: executing program 3 (id=3358): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 1.849225022s ago: executing program 3 (id=3360): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x14, 0x1e, 0x1, 0x70bd2c, 0x25dfdbfd, {0x20}}, 0x14}, 0x1, 0x0, 0x0, 0xc}, 0x80) close(r1) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000201000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r3}, 0x38) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="680000001000478dd39922c3b8b5df2500000000", @ANYRES32=0x0, @ANYBLOB="100a0500231a0500480012800e00010069703665727370616e00000034000280060003003000000014000700fc02000000000000000000000000000014000600fc020000000000000000000000000001"], 0x68}, 0x1, 0x20000, 0x0, 0x240440d5}, 0x9080) 1.84896593s ago: executing program 4 (id=3361): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xf}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xb, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa0}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) 1.671988864s ago: executing program 4 (id=3363): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="6c00000010000000daa874fe31eaabfeda8c762096c1c9f9e1938d0205446371969e898beed39b25fab1765b6930310c20e226146203676c6a83a497433f2fdb1fed9b157920b370076e0e583181d2c4128082743570587dd614c4e737426af14172e021d513d3ea0f912228e5cd931396181504af08fb3dc1bc278165e4fe348708", @ANYRES32=0x0, @ANYBLOB="fab0837dadb8f11a38001280110001006272696467655f736c617665000000002000058004001800050021000000000005002000010000000500190003000000140003006272696467655f736c6176655f300000"], 0x6c}, 0x1, 0x0, 0x0, 0x20044010}, 0x4050) 1.562167562s ago: executing program 4 (id=3365): socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000083) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x100, 0x50, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x20e6}}, 0x40) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000001300c000b400000000000000006400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d1030000140000001100010000000000000000000100000a000000"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x248}, 0x1, 0x0, 0x0, 0x20044090}, 0x20048804) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1d, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005100000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000c100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000480)={&(0x7f0000000280), 0xc, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="300000001a00000429bd7000fedbdf2507000007fe01fd0b0008000008000300", @ANYRES32=r0, @ANYBLOB="0c0016800600060000100000"], 0x30}, 0x1, 0x0, 0x0, 0x4814}, 0xa0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x10000014}) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r9 = socket(0x10, 0x3, 0x0) r10 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYRES16=r6], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7}, 0x94) ioctl$sock_bt_bnep_BNEPCONNDEL(r10, 0x400442c9, &(0x7f0000000080)={0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}) write(r9, &(0x7f00000002c0)="2000000012005f0214f9f4070000fbe60a0000000000c5c61f33ad512e9cfc31", 0x20) recvmmsg(r9, &(0x7f00000021c0), 0x5b, 0x40, 0x0) ioctl$FS_IOC_GETFSLABEL(r8, 0x800452d2, &(0x7f0000000100)) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r12, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="5753fcfffffffddbdf256b00000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900317400004e000000"], 0x28}, 0x1, 0x0, 0x0, 0x8441}, 0x4000000) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000340)={r5, r5, 0xd, 0x0, 0x0, 0x9, 0x1, 0x16c0, 0x5505, 0x8b, 0x1, 0x9, 'syz0\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x50) 1.432854808s ago: executing program 3 (id=3366): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000100)={@val={0x0, 0x6003}, @val={0x2, 0x1, 0x100, 0x7, 0x3ff, 0x5}, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, @val={@void}, {@ipv4={0x800, @udp={{0x19, 0x4, 0x0, 0x0, 0x70, 0x4000, 0x0, 0x3, 0x2f, 0x0, @private=0x1fe1, @multicast1, {[@cipso={0x86, 0x4c, 0x3, [{0x5, 0xb, "36b1c19889d9f74d2f"}, {0x7, 0x3, 'Q'}, {0x7, 0x12, "a5905773500ef98262554b7c9e824fd7"}, {0x0, 0xd, "9e20fd6bb4cbfa3317322a"}, {0x5, 0xc, "928d4ede2d63bee9c2bf"}, {0x5, 0xd, "4f9953e87174b4547c05f9"}]}, @rr={0x7, 0x3, 0xa}]}}, {0xa000, 0x8864, 0xc, 0x0, @gue={{0x1, 0x0, 0x1, 0x9, 0x0, @void}}}}}}}}, 0x90) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, &(0x7f0000000080)) 1.414407579s ago: executing program 0 (id=3367): ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000002580)={{0xffffffffffffffff, &(0x7f00000001c0)='\x00', 0x2, &(0x7f0000000200)={@_ha_fsid={[0x0, 0x1ff]}, {0x80, 0x6, 0x46, 0x7}}, 0x8001, &(0x7f0000000240), &(0x7f0000000280)}, {[0x4, 0x1, 0x6, 0x7]}, 0xfffeffff, 0x1000, &(0x7f0000001580)=""/4096}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002680)={0x11, 0x7, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x95}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, @map_idx={0x18, 0x2, 0x5, 0x0, 0xa}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfac, 0x0, 0x0, 0x0, 0xffff0000}], &(0x7f0000000080)='syzkaller\x00', 0x56d, 0x77, &(0x7f0000000140)=""/119, 0x41100, 0x1, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000002600)={0x5, 0x3, 0x5a7}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f0000002640)=[{0x4, 0x4, 0x3, 0x6}, {0x4, 0x2, 0x5, 0xc}, {0x4, 0x3, 0xb, 0x5}], 0x10, 0x100}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r3}, 0x38) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xad5, 0x0, 0x0, 0x0, 0x9}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000ec0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001880)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000013c0)=0xc) sendmmsg$unix(r6, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r7, @ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="0000000014000000000000000100000001"], 0x38, 0x4004c}}], 0x1, 0x805) (async) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000ac0)={{{@in=@multicast2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@loopback}}, &(0x7f0000000bc0)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000c00)={0x0, 0x0, 0x0}, &(0x7f0000000c40)=0xc) (async) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r13 = getpid() bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r12, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1, 0x0, r13}}, 0x40) (async) r14 = socket$inet_sctp(0x2, 0x5, 0x84) (async) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x6}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp_SCTP_CONTEXT(r14, 0x84, 0x11, &(0x7f0000000080)={r15, 0x101}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r14, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e22, 0x401, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, @in={0x2, 0x4e22, @multicast2}, @in6={0xa, 0x4e22, 0x3, @mcast2, 0x4}, @in={0x2, 0x4e24, @multicast2}, @in6={0xa, 0x4e20, 0xc, @mcast1, 0x2}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e21, 0x9, @mcast2, 0x5}], 0xa0) (async) ioctl$XFS_IOC_BULKSTAT(r14, 0x8040587f, &(0x7f0000000400)={{0x8, 0x1, 0x80000001, 0x4, 0x5}, &(0x7f00000001c0)=[{}, {}, {}]}) (async) r16 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$XFS_IOC_START_COMMIT(r16, 0x80585882, &(0x7f0000000480)={0xffffffffffffffff}) setsockopt$inet_udp_int(r17, 0x11, 0x3, &(0x7f0000000500)=0x1d, 0x4) getsockopt$sock_cred(r14, 0x1, 0x11, &(0x7f0000000540)={0x0, 0x0}, &(0x7f0000000580)=0xc) ioctl$TUNSETOWNER(r17, 0x400454cc, r18) (async) r19 = getgid() sendmsg$netlink(r0, &(0x7f0000000d40)={&(0x7f0000000400)=@kern={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a40)=[{&(0x7f0000000500)={0x80, 0x14, 0x200, 0x70bd26, 0x25dfdbfb, "", [@nested={0x27, 0xae, 0x0, 0x1, [@nested={0x4, 0xd}, @nested={0x4, 0x10f}, @typed={0xc, 0x105, 0x0, 0x0, @u64=0x4436}, @generic="fd176d613d9d2de0d40f267335c5c7"]}, @typed={0x25, 0x16, 0x0, 0x0, @binary="f10afe07bbc1f67f75fa1d27c92ba082e99cb9306bd0d5763b4afc7314c2ba41ea"}, @typed={0xc, 0x3, 0x0, 0x0, @u64=0xfcf}, @typed={0x8, 0x47, 0x0, 0x0, @u32=0xf30}, @nested={0xc, 0x4f, 0x0, 0x1, [@typed={0x8, 0x23, 0x0, 0x0, @pid=0xffffffffffffffff}]}]}, 0x80}, {&(0x7f0000000580)={0x94, 0x17, 0x300, 0x70bd2d, 0x25dfdbfd, "", [@nested={0x81, 0xa2, 0x0, 0x1, [@nested={0x4, 0x152}, @nested={0x4, 0x67}, @generic="dfafe55c5fbf98e77fba987f49aa814b1a7bafeedaaa9655c33ebe687751e218eefc23b19988f6896155f6327899ba67510c28d128aa27a8bfaefe2af89c51facd0aeaf0538b7800f7f294468afad0460a373255e2980a61d19a71966cdcd20fbd0c82e42eeae90ac22b842f7c516a6f71163194f9"]}]}, 0x94}, {&(0x7f0000000640)=ANY=[@ANYBLOB="ec0200002b00000828bd7000fbdbdf2508003300", @ANYRES32=r2, @ANYBLOB="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"], 0x2ec}, {&(0x7f0000000940)={0x1c, 0x34, 0x200, 0x70bd29, 0x25dfdbfe, "", [@typed={0xc, 0x4c, 0x0, 0x0, @u64=0x3}]}, 0x1c}, {&(0x7f0000000980)={0xbc, 0x42, 0xa10, 0x10, 0x25dfdbfb, "", [@typed={0x8, 0x159, 0x0, 0x0, @u32=0x1}, @generic="93460f944d2933b1510681623d01aa0ebe8892090218842bd93a71f894623343af2b97cc68b3cb26b09ab2db63ba2b529bf333", @typed={0x14, 0xdd, 0x0, 0x0, @ipv6=@remote}, @generic="e2f5c36f63f9bddbd037e7c45a24625e9bba74777a8869edb7b8967dd9416c0cf2316d7cdaf59d9973d640f0dc2949d290ac474250058a4e6e5028548b9be3cbb8c85c8d3b9c0473c23a379575cbd6833f816a8d155f704387fe93a8"]}, 0xbc}], 0x5, &(0x7f0000000c80)=[@cred={{0x1c, 0x1, 0x2, {r7, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r13, r18, r19}}}, @rights={{0x2c, 0x1, 0x1, [r3, r0, r4, r1, r2, r0, r5]}}, @rights={{0x18, 0x1, 0x1, [r1, r2]}}], 0x88, 0x28000}, 0x4000) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000340)={'gre0\x00', &(0x7f00000002c0)={'ip_vti0\x00', 0x0, 0x7800, 0x1, 0x6, 0x400, {{0x9, 0x4, 0x2, 0x34, 0x24, 0x68, 0x0, 0x4, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x26}, @multicast1, {[@lsrr={0x83, 0x7, 0xda, [@empty]}, @generic={0x83, 0x7, "97d109f7c2"}, @noop]}}}}}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x7ff, '\x00', r20, r0, 0x5, 0x0, 0x2}, 0x50) 1.20074889s ago: executing program 0 (id=3368): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000fd7fffff0000640a3855e7cf0d930000360000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)="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", 0xfc}, {&(0x7f0000000140)}, {&(0x7f0000000180)="e3481e", 0x3}], 0x3}, 0x20000000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r1, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f00000002c0)=0x1, 0x4) sendmmsg$inet(r1, &(0x7f0000000580)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[], 0xf0}}], 0x1, 0x24004c41) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000600)="87fc5d85da21530562070095c108", 0x0, 0x8011, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x40}, 0x50) 1.161433301s ago: executing program 0 (id=3369): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 1.009828565s ago: executing program 0 (id=3370): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @dev, @loopback}, &(0x7f0000000080)=0xc) sendmsg$nl_route_sched(r0, &(0x7f0000001dc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001d80)={&(0x7f00000000c0)=@newtfilter={0x1c90, 0x2c, 0x20, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x1}, {0x8, 0x10}, {0x5, 0x8}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x1c58, 0x2, [@TCA_CGROUP_ACT={0x6d4, 0x1, [@m_ife={0x104, 0xc, 0x0, 0x0, {{0x8}, {0x44, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @multicast}, @TCA_IFE_PARMS={0x1c, 0x1, {{0xffffbd70, 0x8, 0x20000000, 0xa, 0x80}}}, @TCA_IFE_SMAC={0xa, 0x4, @broadcast}, @TCA_IFE_DMAC={0xa, 0x3, @multicast}]}, {0x9a, 0x6, "97f0ec9161af824b0216a6d17267e53601da285bbdd853f552fb0cf10147d15046d4eecd205390bfcb838ca0856ba4d2582e39051142dedb6c4d5e1abfb98bacb104710bc040fbb5fbcfa839987ca2227de35b9ecf5c2541c5d13f17844c52f2166f2221c5952784f2c2a05c4750f42697e8b714cb89438455557b4a38ecc7e62f91e76db94ba4b0306cddac56fb3fbb1781ab9d90c3"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ctinfo={0x110, 0xc, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x1}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x9}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x5}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x6}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x7}, @TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x3, 0x3, 0x3ea5, 0x1}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0xf5}]}, {0x99, 0x6, "489fd59eabb5891c3f7a2ae2e84e5449e64bc7a071351e4c0910c0c6bb2e73ea32e0ecf78df79c471038cd93bc07c51713267152892ada6612b06f20b285e74d582f763cf235d103d42ee61b5c8185047e0a119a6312c64cd5b4d75a0752b753721b8e26bfd9167476749be2a88740f5a37034273b7c7de21fa6d193c7a30f6e62ae075b69a8865fbf160232639df944fbe76a1504"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_simple={0xa8, 0x1a, 0x0, 0x0, {{0xb}, {0x50, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0xfffffffe, 0x9, 0x0, 0x70a, 0x2}}, @TCA_DEF_DATA={0xb, 0x3, '{$(^:/\x00'}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_DATA={0x6, 0x3, '@\x00'}, @TCA_DEF_DATA={0x7, 0x3, '&!\x00'}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}]}, {0x2e, 0x6, "3ba1418bbc7c4549d4c5e78f72fafeac38dce48987cfe5d8ccd14d0cefde82a444374b044b3fb64a75d3"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_gact={0x100, 0x12, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x5, 0x0, 0x8, 0x80000001, 0x2cf8}}, @TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x4, 0x10000000, 0xa67, 0x80000001}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1c0c, 0x6}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0xb4f, 0x2}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0xf69, 0x3}}]}, {0x7f, 0x6, "faaea30f2ed951ef481ae767e73a0223dbe3b7f2dcaa7d8c14c7bd92e667014a80dee72a84171a13aca522052b6edc564026f28ff68cb78e4cc386456044e495903809b37be89d746b78cc1e4ff9dfd828c82f2692b49cc0f2de0e72919472058e154b7ed873207d257d1be0be73b35889ad12118cf2ff297f1ba5"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_skbmod={0x13c, 0x9, 0x0, 0x0, {{0xb}, {0x10, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa}]}, {0x103, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_connmark={0x160, 0x1f, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4e4481ac, 0x4, 0x20000000, 0x6, 0x1}, 0x7f}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x1, 0xfffffffffffffffd, 0x2, 0x5}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x4, 0x20000000, 0x3bc, 0x1}, 0xc79}}]}, {0xda, 0x6, "64c5623e92d8f3a46810e4b8f6a73c615f9aa48a400d9a0064b512474fa59eba4aaf122b375f02d7c285ad424e356ccd7ea7b2d3c6e5c4d031322859addfac3ef37f356488e222e90ef6d6ab91e6cd325139e1170bf3af1ffaddfec020cfb8cee11253b8559083e6a4dfd9db1e60d65f5a897b5efc2ad13c176e59121897fae7114d3dbb74676cf3c2836d1896f5a45ec9d3528d53a2a69afce61ad46b15750d1ef557b3464bf08c1df515569cad9d2ef1f8846231921a252bd527944e6410e71299f040d9f338f510895ec813bacac97dca3cbd06a3"}, {0xc, 0x7, {0x1, 0x3c54d2602fa63b78}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_skbedit={0x78, 0x3, 0x0, 0x0, {{0xc}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0xd2}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x2}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xff, 0x4000, 0x8, 0x4, 0x9}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x5}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x6}]}, {0x11, 0x6, "2a09d3fc0a1ef3db4bf2cf44e3"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}, @TCA_CGROUP_ACT={0x1390, 0x1, [@m_vlan={0x1050, 0x0, 0x0, 0x0, {{0x9}, {0x24, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x18c}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x9a2}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x2}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_mpls={0x108, 0x7, 0x0, 0x0, {{0x9}, {0x4}, {0xd9, 0x6, "31e6cbae09b88dec45d554cf5e842d02f6a4bc23f61a8dfd4f486ba834d981d15b5867c9cfc92fecabba30626762bdd74af96f36c4c469bc8eb855d2fe088cba1c6b4c6109a8beecd0da98032315dc91148817549a4103174ee4588cf8842441069c687280d05067c8241671f4ca74669d5e158c56ca46b193dd09011ea7e8d5e28740779952c53233e2af142833ffc10812fdb82365a3e3c2ec2c90426c1c919a1a22085788a6087768d17824787b2a22238d2ee7e6b3a253af745127ea7978b310305fdc88cc7013797ff75888b27f726103f615"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x5}}}}, @m_csum={0x174, 0x1b, 0x0, 0x0, {{0x9}, {0x90, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x9, 0xffffffffffffffff, 0x9}, 0x12}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xfffffff9, 0x10, 0x20000000, 0xfffffffa, 0x6eec}, 0xc}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2eff, 0x2, 0x4, 0x6, 0x9}, 0x26}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xfffffff9, 0x869, 0xffffffffffffffff, 0x7c, 0x10001}, 0x78}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x29, 0x7, 0x1000, 0x1}, 0x56}}]}, {0xba, 0x6, "0c16742444acc4234b038d2ed5d3a96bad97c080c10e30a516ae23982984bb4570398cb04143484565dc164a083f1ff29182e02c7cb878b00b36bf92d3f30884c00bb3de5f204263eb845f4aeb75cf045d07344a3b34117669a2b7955087bc1ed730df714b52f7034b94a72738fc03bc11ee17ac6d8b3770b48befb498f07955791776fb32057334cc97515c7c8219efc8839cf07584bdeeef1ffa5b34ac7cd136c55f9e1b02a3d32683275e674541006f5e11785a32"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_tunnel_key={0xc0, 0x4, 0x0, 0x0, {{0xf}, {0x80, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x2, 0x5, 0x20000000, 0x1}, 0x2}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3b}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x35}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x10001, 0x10000000, 0x7, 0x9}, 0x1}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e21}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x3}]}, {0x14, 0x6, "f7a40f15356fbc2969bef4ebcbeb0bf0"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_CGROUP_ACT={0x1f0, 0x1, [@m_mirred={0xdc, 0x13, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1000, 0x2, 0x2, 0xd, 0xffffffff}, 0x3, r1}}]}, {0x8d, 0x6, "9eb7e0fccc6af1a7a4377efa4a9eddd000839b7dd53e34f3f3817713c6eb0a8e61742c585043722047ccda75eb01883ef989354382d2dfaa476bb6872e89b476476957fd005f95343ca272a859a1878dfce4f90149ba0f7b22937a3d5dc09b0393ca32fa05c151bc059b00e5fb98a085f315dceb679827a6c232b611818e29ef5001c97a750fbbf195"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x4}}}}, @m_vlan={0x84, 0x10, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xe76}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x4c7, 0x5, 0x5, 0x8f94, 0x7}, 0x3}}]}, {0x33, 0x6, "c3ff1aee6f44c1307694eb1c98cdc2b7ab2b9c6c08e7c146ccae3e741d1b9bc734c88711c1f51fabc025816087b1e3"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_sample={0x8c, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x5}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x66, 0x8, 0x10000000, 0x4, 0x1ff}}]}, {0x3e, 0x6, "3738cbb418f67569529dc2593a476f3d1d94b11626870b8a23992e21ee95514dc9ec0c9dbb6e28f4ff70278f086e47be7208c1767b9c4caad7c6"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x7, 0x1}}]}, 0x1c90}, 0x1, 0x0, 0x0, 0x4008000}, 0x24040001) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001e40), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000001f00)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001e80)={0x2c, r3, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004410}, 0xc0000) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000003040)={{r0, &(0x7f0000001f40)='\x00', 0x105601, &(0x7f0000001f80)={@align=0x2, {0x2db9, 0x2, 0x8001, 0x8000}}, 0x1, &(0x7f0000001fc0)={@_ha_fsid}, &(0x7f0000002000)=0x8}, {[0x2, 0x3, 0xcbc6, 0xffff]}, 0x40, 0x1000, &(0x7f0000002040)=""/4096}) sendmsg$nl_route(r4, &(0x7f0000003180)={&(0x7f00000030c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000003140)={&(0x7f0000003100)=@ipv4_getnetconf={0x34, 0x52, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [@NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x6}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x8}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x7}, @NETCONFA_IFINDEX={0x8, 0x1, r1}]}, 0x34}}, 0x100) bpf$OBJ_GET_PROG(0x7, &(0x7f0000003200)=@o_path={&(0x7f00000031c0)='./file0\x00', 0x0, 0x8, r0}, 0x18) setsockopt$inet_mreqn(r4, 0x0, 0x24, &(0x7f0000003240)={@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, r1}, 0xc) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000003480)={&(0x7f0000003280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000003440)={&(0x7f00000032c0)={0x150, 0x1403, 0x20, 0x70bd2c, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'pimreg1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond_slave_0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'geneve0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'team0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wlan0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'macvlan1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'team_slave_1\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'batadv0\x00'}}]}, 0x150}, 0x1, 0x0, 0x0, 0x2004c040}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r4, &(0x7f00000035c0)={&(0x7f00000034c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000003580)={&(0x7f0000003500)={0x44, 0x1, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000001}, 0x48080) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000003640), r4) sendmsg$SEG6_CMD_GET_TUNSRC(r4, &(0x7f0000003780)={&(0x7f0000003600)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000003740)={&(0x7f0000003680)={0x84, r6, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1f62}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x166f]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_DST={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x84}, 0x1, 0x0, 0x0, 0x40085}, 0x40804) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f00000037c0)={0x1, {{0x2, 0x4e21, @rand_addr=0x64010100}}}, 0x88) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f00000038c0), r2) sendmsg$NL802154_CMD_SET_LBT_MODE(r7, &(0x7f0000003980)={&(0x7f0000003880)={0x10, 0x0, 0x0, 0xa800050}, 0xc, &(0x7f0000003940)={&(0x7f0000003900)={0x24, r8, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0xc020}, 0x800) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000003a00), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000003a40)=0x0) sendmsg$NFC_CMD_LLC_SDREQ(r2, &(0x7f0000003b40)={&(0x7f00000039c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000003b00)={&(0x7f0000003a80)={0x54, r9, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_LLC_SDP={0x38, 0x13, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [{0x9, 0x1, 'vlan\x00'}, {0x8, 0x1, '-}\':'}, {0xb, 0x1, 'skbmod\x00'}, {0xf, 0x1, 'tunnel_key\x00'}]}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x28000888}, 0x0) sendmsg$NFC_CMD_FW_DOWNLOAD(r2, &(0x7f0000003c40)={&(0x7f0000003b80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000003c00)={&(0x7f0000003bc0)={0x2c, r9, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@NFC_ATTR_FIRMWARE_NAME={0x5, 0x14, '^'}, @NFC_ATTR_FIRMWARE_NAME={0x7, 0x14, '/,)'}, @NFC_ATTR_FIRMWARE_NAME={0x6, 0x14, '@\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000003c80)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = accept4$inet(r4, &(0x7f0000003cc0)={0x2, 0x0, @multicast2}, &(0x7f0000003d00)=0x10, 0x0) ioctl$sock_SIOCGPGRP(r11, 0x8904, &(0x7f0000003d40)=0x0) setsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000003d80)={r13, 0xee00, 0xee01}, 0xc) bind$bt_l2cap(r4, &(0x7f0000003dc0)={0x1f, 0xf801, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7f, 0x2}, 0xe) ioctl$ifreq_SIOCGIFINDEX_vcan(r12, 0x8933, &(0x7f0000003e00)={'vxcan0\x00'}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r4, &(0x7f0000003f80)={&(0x7f0000003e40), 0xc, &(0x7f0000003f40)={&(0x7f0000003f00)={0x28, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x31}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4800}, 0x4000011) 769.292558ms ago: executing program 3 (id=3371): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0x8, @remote, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000580), 0x3) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000b80)='n', 0x1}], 0x1}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000050000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000001c00038018000380140001007465616d300000000000000000000000080007"], 0xd8}, 0x1, 0x0, 0x0, 0x4008005}, 0x8d4) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x9, 0x7a8, 0x6}, 0x14) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000500)=@gcm_256={{0x303}, "b190a11277a083fc", "7f7f7a75830e874fc6f6f68f39217be89534d65ea56eaf9de57107b38594b13f", "8364ecf5", "28d9a3bd0874d9af"}, 0x38) syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r0) 692.567578ms ago: executing program 0 (id=3372): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xf}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xb, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb4}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) 630.662323ms ago: executing program 3 (id=3373): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xe, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1080, 0x9, 0x5, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x9, 0x4, 0x2, 0x762, 0x3, 0x80, 0x3, 0x2b12, 0x100, 0x6, 0x1c04, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x80000000, 0x8, 0x79b, 0x2, 0x1, 0x7d, 0x8, 0x2, 0x7, 0xd, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x8, 0x180000, 0x400a, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x5, 0x6, 0x9, 0x9, 0xb, 0x4009, 0x0, 0x4, 0xffffff01, 0x8, 0x752, 0x0, 0x1005, 0x5, 0x10001, 0x2, 0xffffffff, 0x6, 0x4, 0x9, 0x7ffffffe, 0xfdffffff, 0xfffffffe, 0x2, 0x84, 0x800100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0xffffffff, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x2, 0x2, 0x5, 0x1, 0x0, 0x0, 0x2, 0x40, 0x8, 0x4, 0x3, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) setsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f0000000080)={0x4, 0x4}, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=@newtaction={0x48, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x34, 0x1, [@m_pedit={0x30, 0x1, 0x0, 0x0, {{0xa}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000540), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r4, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000002c0)={0x28, r6, 0x1, 0x70bd2b, 0x25dfdbfb, {0x2, 0x0, 0x500}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000050}, 0x20000884) close(0x3) unshare(0x22020600) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f0016000600060009000600200002400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a20000000000a01040000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a300000000028000480080002400000000008000140000000051400030076657468315f6d6163567461700000000900010073797a3100000000d8000000050a01020000000000000000010020000c00024000000000000000010900010073797a31000000002c000480140003007665df68315f6d6163767461700022ef"], 0x174}, 0x1, 0x0, 0x0, 0x404c854}, 0x20040010) 472.663566ms ago: executing program 0 (id=3374): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="1c00000021006bcd210002006e04fcff80000010000000017aa60864", 0x1c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x110) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000004c0)={0x0, 0xffdf, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0800035700000004640000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000380003803400008028000180230001"], 0xf0}, 0x1, 0x0, 0x0, 0x400c880}, 0x20000000) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f00000006c0)={0x2, {{0x2, 0x0, @private=0xa010101}}, {{0x2, 0x0, @empty}}}, 0x108) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000bc0)={r0, r1, 0x4, 0xa6, &(0x7f0000000b00)="a9a5f05e932439eb75f4e7dcb1b33cb58dbb74a9ea50fc47ef4ffad44fd1456dbf595558ebf18df9829c419c3ccdfc6e64aa56c3c17278e471d534e526ec5027ceec3a51be59b5249d5f03e5006015048a4d4aeb43946d85a8e8d3fcfcd64356fda0720ecb0fa0fdcf7755d0cfabc91f6ee3e1cc966e2ab85e7c9d420d1b32e64e403384c7403557b92181beac43ff07a51d014c564072d32933a2380969ae335422d118f79a", 0x5a, 0x4e, 0x52, 0x1, 0x3, 0x1, 0x0, 'syz1\x00'}) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000000240)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @private}}}, 0x108) r3 = socket(0x200000000000011, 0x2, 0xd) ioctl$XFS_IOC_FD_TO_HANDLE(r3, 0xc038586a, &(0x7f0000000d40)={r3, &(0x7f0000000580)='ethtool\x00', 0x10240, &(0x7f0000000c80)={@align=0x2, {0xc3, 0x400, 0x5, 0x81a4}}, 0x6, &(0x7f0000000cc0)={@_ha_fsid}, &(0x7f0000000d00)}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000008c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)=@getchain={0x5c, 0x66, 0x2, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xfff3, 0x9}, {0x7, 0xb}, {0xfff2, 0xffe0}}, [{0x8, 0xb, 0x7}, {0x8, 0xb, 0x10000000}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0xfc}, {0x8, 0xb, 0x73ed}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x8000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r3) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f00000002c0)={'ip_vti0\x00', r4, 0x40, 0x7800, 0xb, 0xfffffffc, {{0x34, 0x4, 0x0, 0x9, 0xd0, 0x67, 0x0, 0x3, 0x29, 0x0, @remote, @remote, {[@cipso={0x86, 0x21, 0x3, [{0x6, 0xb, "c094f9166fdbb517d6"}, {0x2, 0x3, "9b"}, {0x2, 0xd, "bcf1aca026a5c4063a22d7"}]}, @timestamp_prespec={0x44, 0x24, 0x96, 0x3, 0x2, [{@multicast1, 0x6}, {@multicast2, 0x9}, {@multicast1, 0x2}, {@empty, 0x3}]}, @timestamp={0x44, 0x10, 0xdb, 0x0, 0x2, [0x9, 0xfffff005, 0x9]}, @timestamp={0x44, 0x24, 0x72, 0x0, 0x7, [0xffff8000, 0x5, 0x8, 0x6, 0x7, 0x2, 0xfb, 0x6]}, @timestamp_addr={0x44, 0x14, 0x4d, 0x1, 0x9, [{@multicast1, 0x5}, {@local, 0x5}]}, @lsrr={0x83, 0x13, 0xfc, [@dev={0xac, 0x14, 0x14, 0x2e}, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @loopback]}, @end, @ssrr={0x89, 0x1b, 0x6, [@private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @loopback, @rand_addr=0x64010103, @broadcast]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000004c0)={'ip_vti0\x00', &(0x7f0000000400)={'syztnl2\x00', r4, 0x8000, 0x80a0, 0x7ff, 0x938, {{0x12, 0x4, 0x0, 0x9, 0x48, 0x67, 0x0, 0x4, 0x4, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x13}, {[@generic={0x44, 0x4, "bf94"}, @ssrr={0x89, 0x13, 0x16, [@empty, @broadcast, @local, @loopback]}, @generic={0x89, 0x10, "f592ef4d2d500040fe345f366ddd"}, @timestamp_addr={0x44, 0xc, 0xe2, 0x1, 0x1, [{@remote}]}]}}}}}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002dbd7000fddbdf250300000008000100000000001c0007800c00018008000100", @ANYRES32=r7, @ANYBLOB="0c00018008000100", @ANYRES32, @ANYBLOB="340007800c00018008000100", @ANYRES32=r7, @ANYBLOB="0c0042020a3e60d8", @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB], 0x6c}, 0x1, 0x0, 0x0, 0x4004850}, 0x10) ioctl$sock_FIOGETOWN(r7, 0x8903, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f00000004c0)) getgid() ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000499088225155b23ad0d26f6a99d000000000000000000000000000000000000000000000000000f9ecaeb60559f2c23156580000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x24}, 0x94) getsockopt$sock_cred(r8, 0x1, 0x11, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) 188.26179ms ago: executing program 4 (id=3375): r0 = socket$kcm(0x2, 0xa, 0x2) r1 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000a00)={'veth1_to_bond\x00', &(0x7f00000009c0)=@ethtool_rxfh={0x1, 0x2, 0xfffff001, 0x41, 0x2, "07c61e", 0x2cd15049}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'ip6_vti0\x00', 0x0}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f00000004c0)=ANY=[@ANYBLOB="ffffffffffffb64a0688aabb86dd60120008001bfaf37dc69a04103afffe8000000000000000000000000000bbff0200000000000186009078ff00000000000000000000014b116aeb400000000000000000"], 0x0) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x129642, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) close(0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x60, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffefdf8, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x34, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x400, 0x4}}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0xb2a6, 0xffffffff}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40098}, 0x8000) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x8800}, 0x0) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000540)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000feffffff01000000040007800c00020000000000000000000c0003000700000000000000eedac0af6bdc29faf4a16d67178785e5ec803a24c67936ee1584aaada9914e1ac41336aee4f60d1ce76e43c04b647e68be6c683f49465891b294b441d681a573a60b7bd0345bc0aae6f0d250df836e8c919447b876ecec5a66bbfefc692352d6a0cf6dd005ddb187af16010241dcce33b17560ceec3e99202a9e6dda2764b7f952746fe003bca7030d535061d72729de92d349fcafb785099145fe4c9931acbd298250c83ca35e64e176fe3232a85301c368d80ac5cda4ee777d3bcb2c488a"], 0x30}, 0x1, 0x0, 0x0, 0x40008090}, 0x2048044) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f00000001c0)={r0, &(0x7f00000000c0)='o-\x00', 0x80, &(0x7f0000000100)={@_ha_fsid={[0xc, 0x80000000]}, {0x6, 0x7ff, 0x7, 0xf}}, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0xed86}) setsockopt$inet6_udp_encap(r8, 0x11, 0x64, &(0x7f0000000200)=0x4, 0x4) sendmsg$key(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB="020a08091e0000002dbd7000ffdbdf25020013000d00000027bd7000000000000100d5a44e22000002001000000004d3000004d60000000002001300060000000300000007350000020013000700000029bd70000235000008001200010002000000000008000000060033000a0300000600000000000000e0000001000000000000000000000000fe8800000000000000000000000001010800120004000100bf6b6e00ff03000006040000009800000900000000000000fe8000000000000000000000000000bb000000000000000000000000f4ffffffffffffff000004d6000004d300000000010016004e210000"], 0xf0}}, 0x4000000) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r9, &(0x7f0000003b80)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000008001a00020000000800170003000000080013000000000008000900030000000800070000000200080002"], 0x5c}, 0x1, 0x0, 0x0, 0x24004000}, 0x0) r11 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r11, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x438, 0x0, 0x0, 0x148, 0x120, 0x148, 0x3a0, 0x240, 0x240, 0x3a0, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0xff000000, 'ip6tnl0\x00', 'wlan1\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xc0, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @inet=@rpfilter={{0x28}, {0xf}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@empty, [0xffffff00, 0xffffff00, 0x0, 0xffffff00], 0x4e22, 0x4e22, 0x4e1d, 0x4e20, 0x8, 0x2, 0x5f4a, 0x100, 0xa22}}}, {{@ip={@rand_addr=0x64010101, @multicast1, 0xff000000, 0xffffff00, 'wlan0\x00', 'pimreg1\x00', {0xff}, {0xff}, 0x2, 0x0, 0x60}, 0x0, 0x260, 0x280, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x9, 0x1, 0x1, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x4, 0x3, 0x1, 0x0, 'syz1\x00', 0x5}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x498) socket$nl_generic(0x10, 0x3, 0x10) 144.494808ms ago: executing program 3 (id=3376): r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000700)) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0xfffffffe, 0xffffffffffffffff, 0x4}, 0x38) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r1) socket(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x10, 0x10, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000ff0300000000000008000000b7080000000000007b8af8ff00000000b708000005000000"], 0x0, 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000100)=0x4) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000003c0)="00214500002c00000000400600000a0000010a000002005000500000000100000001601003e80000000001010101", 0x2e}], 0x1, 0x0, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000003c0)="00214500002c00000000400600000a0000010a00000200500050000b000100000001601003e80000000001010101", 0x2e}], 0x1, 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x1}, 0xe) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) ioctl$SIOCSIFHWADDR(r1, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="540080f3", @ANYRES16=r7, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffffff00000000000000000d0001007564703a73797a3200000000"], 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010026bd7000fbdbdf2505000000280001007564703a73797a320000000014000280080003008a000000080004000cdb000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) sendmsg$TIPC_NL_NET_GET(r5, &(0x7f0000001b80)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001b40)={&(0x7f0000001980)={0x1a4, r7, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xdf}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffff7}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}]}, @TIPC_NLA_NODE={0x60, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffffe4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffffc}, @TIPC_NLA_NODE_ID={0x35, 0x3, "3d30d15c2350f3a263d74e2424374a42b99aafb51535d00fa24e3058f070f7ad9e96457dc6a350d5b25abf49b33e29e81f"}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xb4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffff5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x81}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x4048015}, 0x4000) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001100351d5a47840ffdb3df2500000000", @ANYRES32=0x0, @ANYBLOB="9210000010020000140003006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x42072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x2000) 54.986823ms ago: executing program 1 (id=3255): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3d}, 0x1c) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000140)={0x50, r2, 0x1, 0x70bd25, 0x2, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0xc082}, 0x24004080) clock_gettime(0x0, &(0x7f0000004a40)={0x0, 0x0}) recvmmsg(r0, &(0x7f00000048c0)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, &(0x7f00000045c0)=[{0x0}, {&(0x7f00000031c0)=""/225, 0xe1}, {&(0x7f0000000100)=""/4100, 0x1004}], 0x3}, 0xfe4}, {{0x0, 0x0, &(0x7f0000002340)=[{&(0x7f0000001140)=""/4096, 0x1000}], 0x1}, 0x5}], 0x3, 0x40000021, &(0x7f0000004a80)={r3, r4+10000000}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f00000021c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002180)={&(0x7f0000002140)={0x2c, r6, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_DEBUG={0x8}]}, 0xfffffe4b}, 0x1, 0x0, 0x0, 0x20048044}, 0x8840) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x55, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x5c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x94) 0s ago: executing program 2 (id=3377): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r1) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x68, r2, 0x1, 0x0, 0x0, {{}, {0x0, 0x410c}, {0x4c, 0x14, {0xffffffef, @link='broadcast-link\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x8010}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x3, 0x1}, @func_proto, @func_proto={0x2, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x2e, 0x2e]}}, 0x0, 0x44, 0x0, 0x2, 0x3}, 0x28) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000e00)=@newtaction={0xd8, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0xc4, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0xffffffff, 0x3, 0x0, 0x0, 0x0, {0x81, 0x0, 0x0, 0xd85, 0x8000}, {}, 0x4}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x54, 0x2, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x2}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1066, 0x20000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x100c4041}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) setsockopt$MRT_DEL_MFC_PROXY(r3, 0x0, 0xd3, &(0x7f0000000200)={@multicast1, @remote, 0x1, "f626811f20a9af8c2d43a8326e07269b4b7e0259d6a87fa8b3bc5f231f1480e1", 0x7, 0x0, 0x9, 0xf42b}, 0x3c) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000540)={'hsr0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r5], 0x50}, 0x1, 0x0, 0x0, 0x40004}, 0x8000) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r1) (async) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x68, r2, 0x1, 0x0, 0x0, {{}, {0x0, 0x410c}, {0x4c, 0x14, {0xffffffef, @link='broadcast-link\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x8010}, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x3, 0x1}, @func_proto, @func_proto={0x2, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x2e, 0x2e]}}, 0x0, 0x44, 0x0, 0x2, 0x3}, 0x28) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000e00)=@newtaction={0xd8, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0xc4, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0xffffffff, 0x3, 0x0, 0x0, 0x0, {0x81, 0x0, 0x0, 0xd85, 0x8000}, {}, 0x4}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x54, 0x2, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x2}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1066, 0x20000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x100c4041}, 0x0) (async) pipe(&(0x7f0000000140)) (async) setsockopt$MRT_DEL_MFC_PROXY(r3, 0x0, 0xd3, &(0x7f0000000200)={@multicast1, @remote, 0x1, "f626811f20a9af8c2d43a8326e07269b4b7e0259d6a87fa8b3bc5f231f1480e1", 0x7, 0x0, 0x9, 0xf42b}, 0x3c) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000540)={'hsr0\x00'}) (async) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r5], 0x50}, 0x1, 0x0, 0x0, 0x40004}, 0x8000) (async) kernel console output (not intermixed with test programs): 0000000003 [ 463.967669][T15912] RBP: 00007fea59aac090 R08: 0000000000000000 R09: 0000000000000000 [ 463.967683][T15912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 463.967696][T15912] R13: 00007fea58e26038 R14: 00007fea58e25fa0 R15: 00007ffdcbad1018 [ 463.967731][T15912] [ 464.628346][T15927] netlink: 'syz.3.2489': attribute type 3 has an invalid length. [ 464.687313][T15934] sctp: [Deprecated]: syz.2.2491 (pid 15934) Use of struct sctp_assoc_value in delayed_ack socket option. [ 464.687313][T15934] Use struct sctp_sack_info instead [ 464.903683][T15944] FAULT_INJECTION: forcing a failure. [ 464.903683][T15944] name failslab, interval 1, probability 0, space 0, times 0 [ 464.926972][T15944] CPU: 1 UID: 0 PID: 15944 Comm: syz.1.2495 Not tainted syzkaller #0 PREEMPT(full) [ 464.927012][T15944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 464.927025][T15944] Call Trace: [ 464.927033][T15944] [ 464.927042][T15944] dump_stack_lvl+0xe8/0x150 [ 464.927079][T15944] should_fail_ex+0x410/0x560 [ 464.927119][T15944] should_failslab+0xa8/0x100 [ 464.927154][T15944] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 464.927181][T15944] ? skb_clone+0x212/0x3a0 [ 464.927201][T15944] ? skb_clone+0x212/0x3a0 [ 464.927229][T15944] skb_clone+0x212/0x3a0 [ 464.927247][T15944] ? nfnetlink_rcv+0x4b0/0x28c0 [ 464.927386][T15944] nfnetlink_rcv+0x4de/0x28c0 [ 464.927423][T15944] ? __dev_queue_xmit+0x29b/0x3820 [ 464.927483][T15944] ? __local_bh_enable_ip+0xd6/0x140 [ 464.927525][T15944] ? lockdep_hardirqs_on+0x7b/0x110 [ 464.927550][T15944] ? __dev_queue_xmit+0x29b/0x3820 [ 464.927570][T15944] ? __local_bh_enable_ip+0xd6/0x140 [ 464.927594][T15944] ? __dev_queue_xmit+0x29b/0x3820 [ 464.927616][T15944] ? __dev_queue_xmit+0x1edc/0x3820 [ 464.927636][T15944] ? do_syscall_64+0x166/0x520 [ 464.927660][T15944] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.927697][T15944] ? __dev_queue_xmit+0x29b/0x3820 [ 464.927720][T15944] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 464.927771][T15944] ? ref_tracker_free+0x689/0x830 [ 464.927839][T15944] ? __pfx_ref_tracker_free+0x10/0x10 [ 464.927871][T15944] ? __skb_clone+0x449/0x6c0 [ 464.927911][T15944] ? skb_clone+0x246/0x3a0 [ 464.927936][T15944] ? __netlink_deliver_tap+0x811/0x860 [ 464.927958][T15944] ? netlink_deliver_tap+0x2e/0x1b0 [ 464.927987][T15944] ? netlink_deliver_tap+0x2e/0x1b0 [ 464.928015][T15944] ? netlink_deliver_tap+0x2e/0x1b0 [ 464.928043][T15944] netlink_unicast+0x7bd/0x940 [ 464.928095][T15944] netlink_sendmsg+0x813/0xb40 [ 464.928128][T15944] ? __pfx_netlink_sendmsg+0x10/0x10 [ 464.928152][T15944] ? aa_sock_msg_perm+0xf6/0x1c0 [ 464.928195][T15944] ? __pfx_netlink_sendmsg+0x10/0x10 [ 464.928216][T15944] sock_sendmsg_nosec+0x13a/0x180 [ 464.928243][T15944] ____sys_sendmsg+0x54e/0x850 [ 464.928281][T15944] ? __pfx_____sys_sendmsg+0x10/0x10 [ 464.928328][T15944] ? import_iovec+0x73/0xa0 [ 464.928356][T15944] ___sys_sendmsg+0x2a5/0x360 [ 464.928389][T15944] ? __lock_acquire+0x683/0x2cf0 [ 464.928441][T15944] ? __pfx____sys_sendmsg+0x10/0x10 [ 464.928518][T15944] ? __fget_files+0x2a/0x420 [ 464.928548][T15944] ? __fget_files+0x3a2/0x420 [ 464.928589][T15944] __x64_sys_sendmsg+0x1b1/0x290 [ 464.928625][T15944] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 464.928682][T15944] do_syscall_64+0x166/0x520 [ 464.928707][T15944] ? trace_irq_disable+0x3b/0x140 [ 464.928735][T15944] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.928757][T15944] ? clear_bhb_loop+0x70/0xc0 [ 464.928785][T15944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.928807][T15944] RIP: 0033:0x7ff98959e0d9 [ 464.928828][T15944] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 464.928846][T15944] RSP: 002b:00007ff98a443028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 464.928868][T15944] RAX: ffffffffffffffda RBX: 00007ff989825fa0 RCX: 00007ff98959e0d9 [ 464.928885][T15944] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 464.928899][T15944] RBP: 00007ff98a443090 R08: 0000000000000000 R09: 0000000000000000 [ 464.928912][T15944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 464.928925][T15944] R13: 00007ff989826038 R14: 00007ff989825fa0 R15: 00007fff175ec818 [ 464.928959][T15944] [ 465.441539][T15952] netlink: 'syz.4.2500': attribute type 2 has an invalid length. [ 465.449662][T15952] netlink: 'syz.4.2500': attribute type 5 has an invalid length. [ 465.492606][T15955] netlink: 'syz.3.2501': attribute type 10 has an invalid length. [ 465.513795][T15956] __nla_validate_parse: 16 callbacks suppressed [ 465.513817][T15956] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2498'. [ 465.519318][T15955] team0: Port device dummy0 added [ 465.538973][T15956] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2498'. [ 465.692860][T15967] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2503'. [ 465.730027][T15967] netlink: 'syz.4.2503': attribute type 30 has an invalid length. [ 465.753615][T15971] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2503'. [ 465.776840][T15970] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2504'. [ 465.818592][T15971] netlink: 'syz.4.2503': attribute type 30 has an invalid length. [ 465.986894][T15985] FAULT_INJECTION: forcing a failure. [ 465.986894][T15985] name failslab, interval 1, probability 0, space 0, times 0 [ 466.023236][T15985] CPU: 0 UID: 0 PID: 15985 Comm: syz.1.2509 Not tainted syzkaller #0 PREEMPT(full) [ 466.023267][T15985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 466.023281][T15985] Call Trace: [ 466.023289][T15985] [ 466.023298][T15985] dump_stack_lvl+0xe8/0x150 [ 466.023335][T15985] should_fail_ex+0x410/0x560 [ 466.023376][T15985] should_failslab+0xa8/0x100 [ 466.023409][T15985] __kmalloc_noprof+0xfe/0x720 [ 466.023436][T15985] ? nft_pernet+0x23/0x240 [ 466.023593][T15985] ? nf_tables_newrule+0x1524/0x28a0 [ 466.023623][T15985] ? nf_tables_newrule+0x1524/0x28a0 [ 466.023661][T15985] nf_tables_newrule+0x1524/0x28a0 [ 466.023709][T15985] ? __pfx_nf_tables_newrule+0x10/0x10 [ 466.023738][T15985] ? nfnl_pernet+0x23/0x240 [ 466.023770][T15985] ? nfnl_pernet+0x23/0x240 [ 466.023812][T15985] ? __nla_parse+0x40/0x60 [ 466.023840][T15985] nfnetlink_rcv+0x1288/0x28c0 [ 466.023918][T15985] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 466.023969][T15985] ? ref_tracker_free+0x689/0x830 [ 466.024020][T15985] ? skb_clone+0x246/0x3a0 [ 466.024046][T15985] ? __netlink_deliver_tap+0x811/0x860 [ 466.024077][T15985] ? netlink_deliver_tap+0x2e/0x1b0 [ 466.024099][T15985] ? netlink_deliver_tap+0x2e/0x1b0 [ 466.024127][T15985] netlink_unicast+0x7bd/0x940 [ 466.024177][T15985] netlink_sendmsg+0x813/0xb40 [ 466.024210][T15985] ? __pfx_netlink_sendmsg+0x10/0x10 [ 466.024237][T15985] ? aa_sock_msg_perm+0xf6/0x1c0 [ 466.024278][T15985] ? __pfx_netlink_sendmsg+0x10/0x10 [ 466.024299][T15985] sock_sendmsg_nosec+0x13a/0x180 [ 466.024329][T15985] ____sys_sendmsg+0x54e/0x850 [ 466.024368][T15985] ? __pfx_____sys_sendmsg+0x10/0x10 [ 466.024412][T15985] ? import_iovec+0x73/0xa0 [ 466.024439][T15985] ___sys_sendmsg+0x2a5/0x360 [ 466.024470][T15985] ? __lock_acquire+0x683/0x2cf0 [ 466.024507][T15985] ? __pfx____sys_sendmsg+0x10/0x10 [ 466.024580][T15985] ? __fget_files+0x2a/0x420 [ 466.024608][T15985] ? __fget_files+0x3a2/0x420 [ 466.024650][T15985] __x64_sys_sendmsg+0x1b1/0x290 [ 466.024686][T15985] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 466.024743][T15985] do_syscall_64+0x166/0x520 [ 466.024768][T15985] ? trace_irq_disable+0x3b/0x140 [ 466.024796][T15985] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.024819][T15985] ? clear_bhb_loop+0x70/0xc0 [ 466.024846][T15985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.024868][T15985] RIP: 0033:0x7ff98959e0d9 [ 466.024889][T15985] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 466.024916][T15985] RSP: 002b:00007ff98a443028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 466.024939][T15985] RAX: ffffffffffffffda RBX: 00007ff989825fa0 RCX: 00007ff98959e0d9 [ 466.024955][T15985] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 466.024968][T15985] RBP: 00007ff98a443090 R08: 0000000000000000 R09: 0000000000000000 [ 466.024981][T15985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 466.024994][T15985] R13: 00007ff989826038 R14: 00007ff989825fa0 R15: 00007fff175ec818 [ 466.025029][T15985] [ 466.496142][T15995] netdevsim netdevsim2 €Â: renamed from netdevsim0 [ 467.042034][T16022] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2518'. [ 467.222170][T16038] netlink: 'syz.1.2519': attribute type 13 has an invalid length. [ 467.247796][T16038] netlink: 'syz.1.2519': attribute type 17 has an invalid length. [ 468.206324][T16030] veth1_vlan: left allmulticast mode [ 468.841216][T16038] syz_tun: left promiscuous mode [ 468.865897][T16038] 8021q: adding VLAN 0 to HW filter on device team0 [ 468.950834][T16038] 0·: left allmulticast mode [ 468.956114][T16038] hsr_slave_0: left allmulticast mode [ 468.962183][T16038] hsr_slave_1: left allmulticast mode [ 468.978255][T16038] veth1_vlan: left promiscuous mode [ 468.984949][T16038] veth0_vlan: left promiscuous mode [ 468.993003][T16038] veth0_vlan: entered promiscuous mode [ 469.000847][T16038] veth1_vlan: entered promiscuous mode [ 469.006591][T16038] veth1_vlan: entered allmulticast mode [ 469.013368][T16038] macvlan0: left allmulticast mode [ 469.018886][T16038] veth1_vlan: left allmulticast mode [ 469.031290][T16038] veth1_macvtap: left promiscuous mode [ 469.038184][T16038] veth0_macvtap: left promiscuous mode [ 469.045793][T16038] veth0_macvtap: entered promiscuous mode [ 469.061033][T16038] veth1_macvtap: entered promiscuous mode [ 469.073136][T16038] netdevsim netdevsim1 €Â: left allmulticast mode [ 469.080836][T16038] 8021q: adding VLAN 0 to HW filter on device €Â [ 469.092412][T16038] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 469.104689][T16038] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 469.116752][T16038] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 469.133989][T16038] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 469.149286][T16038] bond1: left promiscuous mode [ 469.154260][T16038] bond1: left allmulticast mode [ 469.160001][T16038] 8021q: adding VLAN 0 to HW filter on device bond1 [ 469.170553][T16038] 8021q: adding VLAN 0 to HW filter on device bond2 [ 469.181288][T16038] bond3: left promiscuous mode [ 469.186138][T16038] ipip0: left promiscuous mode [ 469.192289][T16038] 8021q: adding VLAN 0 to HW filter on device bond3 [ 469.204545][T16038] bond0: left promiscuous mode [ 469.209793][T16038] 8021q: adding VLAN 0 to HW filter on device bond0 [ 469.242120][T16038] 8021q: adding VLAN 0 to HW filter on device bond4 [ 469.250083][T16038] gtp0: left promiscuous mode [ 469.255089][T16038] gtp0: left allmulticast mode [ 469.261971][T16038] bridge3: left allmulticast mode [ 469.275210][T16038] 8021q: adding VLAN 0 to HW filter on device bond5 [ 469.294709][T16038] bond6: left promiscuous mode [ 469.299567][T16038] bridge5: left promiscuous mode [ 469.306272][T16038] 8021q: adding VLAN 0 to HW filter on device bond6 [ 469.318251][T16038] bond7: left allmulticast mode [ 469.324333][T16038] 8021q: adding VLAN 0 to HW filter on device bond7 [ 469.342213][T16038] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 469.413177][T16048] tipc: Enabling of bearer rejected, already enabled [ 469.618161][T16074] syzkaller0: entered promiscuous mode [ 469.624972][T16074] syzkaller0: entered allmulticast mode [ 469.671990][T16074] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2529'. [ 469.758150][T16086] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2533'. [ 469.796445][T16084] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2532'. [ 469.819912][T16087] netlink: 244 bytes leftover after parsing attributes in process `syz.0.2534'. [ 469.877593][T16087] netlink: 'syz.0.2534': attribute type 1 has an invalid length. [ 469.930054][T16087] 8021q: adding VLAN 0 to HW filter on device bond9 [ 469.983063][T16087] bond9: (slave dummy0): making interface the new active one [ 469.992918][T16087] bond9: (slave dummy0): Enslaving as an active interface with an up link [ 470.004942][T14750] dummy0: entered promiscuous mode [ 470.068382][T16099] xt_CT: You must specify a L4 protocol and not use inversions on it [ 470.107737][T16096] netlink: Invalid conntrack helper [ 470.117458][T16096] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 470.246640][T16105] netlink: 'syz.0.2538': attribute type 8 has an invalid length. [ 470.273408][T16105] netlink: 'syz.0.2538': attribute type 9 has an invalid length. [ 470.637450][T16118] __nla_validate_parse: 5 callbacks suppressed [ 470.637470][T16118] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2542'. [ 470.654953][T16118] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2542'. [ 470.675966][T16118] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2542'. [ 470.685575][T16118] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2542'. [ 470.690712][T15121] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 470.704808][T15121] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 470.730336][T15121] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 470.749458][T15121] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 470.865796][T16121] 8021q: adding VLAN 0 to HW filter on device bond0 [ 470.878169][T16121] 8021q: adding VLAN 0 to HW filter on device team0 [ 470.897741][T16121] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 470.940844][T16121] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 470.952657][T16121] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 470.966838][T16121] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 471.449395][T16138] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2550'. [ 471.499229][T16143] FAULT_INJECTION: forcing a failure. [ 471.499229][T16143] name failslab, interval 1, probability 0, space 0, times 0 [ 471.513158][T16143] CPU: 1 UID: 0 PID: 16143 Comm: syz.4.2551 Not tainted syzkaller #0 PREEMPT(full) [ 471.513189][T16143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 471.513202][T16143] Call Trace: [ 471.513210][T16143] [ 471.513219][T16143] dump_stack_lvl+0xe8/0x150 [ 471.513256][T16143] should_fail_ex+0x410/0x560 [ 471.513294][T16143] should_failslab+0xa8/0x100 [ 471.513323][T16143] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 471.513349][T16143] ? skb_clone+0x212/0x3a0 [ 471.513365][T16143] ? skb_clone+0x212/0x3a0 [ 471.513405][T16143] skb_clone+0x212/0x3a0 [ 471.513427][T16143] __netlink_deliver_tap+0x413/0x860 [ 471.513462][T16143] ? netlink_deliver_tap+0x2e/0x1b0 [ 471.513486][T16143] netlink_deliver_tap+0x19c/0x1b0 [ 471.513509][T16143] netlink_sendskb+0x68/0x140 [ 471.513544][T16143] nfnetlink_rcv+0x260c/0x28c0 [ 471.513613][T16143] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 471.513664][T16143] ? ref_tracker_free+0x689/0x830 [ 471.513713][T16143] ? skb_clone+0x246/0x3a0 [ 471.513736][T16143] ? __netlink_deliver_tap+0x811/0x860 [ 471.513776][T16143] ? netlink_deliver_tap+0x2e/0x1b0 [ 471.513797][T16143] ? netlink_deliver_tap+0x2e/0x1b0 [ 471.513824][T16143] netlink_unicast+0x7bd/0x940 [ 471.513865][T16143] netlink_sendmsg+0x813/0xb40 [ 471.513895][T16143] ? __pfx_netlink_sendmsg+0x10/0x10 [ 471.513922][T16143] ? aa_sock_msg_perm+0xf6/0x1c0 [ 471.513964][T16143] ? __pfx_netlink_sendmsg+0x10/0x10 [ 471.513985][T16143] sock_sendmsg_nosec+0x13a/0x180 [ 471.514015][T16143] ____sys_sendmsg+0x54e/0x850 [ 471.514054][T16143] ? __pfx_____sys_sendmsg+0x10/0x10 [ 471.514098][T16143] ? import_iovec+0x73/0xa0 [ 471.514123][T16143] ___sys_sendmsg+0x2a5/0x360 [ 471.514154][T16143] ? __lock_acquire+0x683/0x2cf0 [ 471.514189][T16143] ? __pfx____sys_sendmsg+0x10/0x10 [ 471.514261][T16143] ? __fget_files+0x2a/0x420 [ 471.514291][T16143] ? __fget_files+0x3a2/0x420 [ 471.514331][T16143] __x64_sys_sendmsg+0x1b1/0x290 [ 471.514367][T16143] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 471.514423][T16143] do_syscall_64+0x166/0x520 [ 471.514450][T16143] ? trace_irq_disable+0x3b/0x140 [ 471.514479][T16143] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.514501][T16143] ? clear_bhb_loop+0x70/0xc0 [ 471.514528][T16143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.514548][T16143] RIP: 0033:0x7fcf8f79e0d9 [ 471.514568][T16143] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 471.514586][T16143] RSP: 002b:00007fcf9061e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 471.514609][T16143] RAX: ffffffffffffffda RBX: 00007fcf8fa25fa0 RCX: 00007fcf8f79e0d9 [ 471.514624][T16143] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 471.514637][T16143] RBP: 00007fcf9061e090 R08: 0000000000000000 R09: 0000000000000000 [ 471.514651][T16143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 471.514663][T16143] R13: 00007fcf8fa26038 R14: 00007fcf8fa25fa0 R15: 00007fff14706e88 [ 471.514699][T16143] [ 472.004808][T16152] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2556'. [ 472.033202][T16152] netlink: 'syz.0.2556': attribute type 8 has an invalid length. [ 472.041351][T16152] netlink: 13439 bytes leftover after parsing attributes in process `syz.0.2556'. [ 472.089237][T16156] FAULT_INJECTION: forcing a failure. [ 472.089237][T16156] name failslab, interval 1, probability 0, space 0, times 0 [ 472.129448][T16156] CPU: 1 UID: 0 PID: 16156 Comm: syz.4.2557 Not tainted syzkaller #0 PREEMPT(full) [ 472.129479][T16156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 472.129493][T16156] Call Trace: [ 472.129500][T16156] [ 472.129509][T16156] dump_stack_lvl+0xe8/0x150 [ 472.129545][T16156] should_fail_ex+0x410/0x560 [ 472.129583][T16156] should_failslab+0xa8/0x100 [ 472.129616][T16156] kmem_cache_alloc_node_noprof+0xb3/0x620 [ 472.129641][T16156] ? local_lock_release+0x9c/0x160 [ 472.129672][T16156] ? __alloc_skb+0x1db/0x7a0 [ 472.129699][T16156] ? __alloc_skb+0x1db/0x7a0 [ 472.129735][T16156] __alloc_skb+0x1db/0x7a0 [ 472.129770][T16156] netlink_sendmsg+0x5d4/0xb40 [ 472.129804][T16156] ? __pfx_netlink_sendmsg+0x10/0x10 [ 472.129830][T16156] ? aa_sock_msg_perm+0xf6/0x1c0 [ 472.129872][T16156] ? __pfx_netlink_sendmsg+0x10/0x10 [ 472.129893][T16156] sock_sendmsg_nosec+0x13a/0x180 [ 472.129922][T16156] ____sys_sendmsg+0x54e/0x850 [ 472.129961][T16156] ? __pfx_____sys_sendmsg+0x10/0x10 [ 472.130004][T16156] ? import_iovec+0x73/0xa0 [ 472.130031][T16156] ___sys_sendmsg+0x2a5/0x360 [ 472.130062][T16156] ? __lock_acquire+0x683/0x2cf0 [ 472.130098][T16156] ? __pfx____sys_sendmsg+0x10/0x10 [ 472.130169][T16156] ? __fget_files+0x2a/0x420 [ 472.130198][T16156] ? __fget_files+0x3a2/0x420 [ 472.130238][T16156] __x64_sys_sendmsg+0x1b1/0x290 [ 472.130274][T16156] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 472.130338][T16156] do_syscall_64+0x166/0x520 [ 472.130362][T16156] ? trace_irq_disable+0x3b/0x140 [ 472.130391][T16156] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.130414][T16156] ? clear_bhb_loop+0x70/0xc0 [ 472.130440][T16156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.130462][T16156] RIP: 0033:0x7fcf8f79e0d9 [ 472.130483][T16156] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 472.130502][T16156] RSP: 002b:00007fcf9061e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 472.130526][T16156] RAX: ffffffffffffffda RBX: 00007fcf8fa25fa0 RCX: 00007fcf8f79e0d9 [ 472.130541][T16156] RDX: 0000000020008000 RSI: 0000200000000200 RDI: 0000000000000003 [ 472.130555][T16156] RBP: 00007fcf9061e090 R08: 0000000000000000 R09: 0000000000000000 [ 472.130569][T16156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 472.130581][T16156] R13: 00007fcf8fa26038 R14: 00007fcf8fa25fa0 R15: 00007fff14706e88 [ 472.130615][T16156] [ 472.589268][T16168] netlink: 'syz.4.2562': attribute type 1 has an invalid length. [ 472.669991][T16175] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2563'. [ 472.869040][T16168] bridge6: entered promiscuous mode [ 472.887941][T16168] bridge7: entered promiscuous mode [ 472.984418][T16178] syzkaller1: entered allmulticast mode [ 473.012951][T16185] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2565'. [ 473.525129][T16206] tipc: Enabled bearer , priority 0 [ 476.055240][T16224] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2574'. [ 476.099555][T16229] netlink: 'syz.3.2575': attribute type 1 has an invalid length. [ 476.122003][T16229] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2575'. [ 476.285391][T16229] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 476.332872][T16229] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 476.386416][T16229] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 476.545589][T16256] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2582'. [ 476.567015][T16256] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2582'. [ 476.714097][T16258] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2583'. [ 476.741209][T16258] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2583'. [ 476.826796][T16270] syzkaller0: entered promiscuous mode [ 476.844440][T16270] syzkaller0: entered allmulticast mode [ 476.981203][T16278] syzkaller0: entered promiscuous mode [ 476.991155][T16282] IPv6: addrconf: prefix option has invalid lifetime [ 476.999104][T16278] syzkaller0: entered allmulticast mode [ 477.117626][T16286] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2590'. [ 477.368711][T16297] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2592'. [ 477.481953][T16294] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2592'. [ 477.764335][T16297] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 478.024131][T16326] ieee802154 phy0 wpan0: encryption failed: -22 [ 478.113770][T16329] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2598'. [ 478.186255][T16329] netlink: 'syz.2.2598': attribute type 7 has an invalid length. [ 478.218355][T16329] netlink: 'syz.2.2598': attribute type 3 has an invalid length. [ 478.243809][T16339] nbd: must specify at least one socket [ 478.339001][T16344] netlink: 'syz.3.2603': attribute type 2 has an invalid length. [ 479.338415][T16394] netlink: Invalid conntrack helper [ 479.367740][T16394] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 481.135249][T16475] netlink: 'syz.0.2632': attribute type 1 has an invalid length. [ 481.139883][T16476] __nla_validate_parse: 4 callbacks suppressed [ 481.139936][T16476] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2636'. [ 481.166541][T16475] netlink: 'syz.0.2632': attribute type 21 has an invalid length. [ 481.188756][T16475] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2632'. [ 481.205625][T16475] netlink: 'syz.0.2632': attribute type 4 has an invalid length. [ 481.217245][T16475] netlink: 'syz.0.2632': attribute type 5 has an invalid length. [ 481.227459][T16475] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2632'. [ 481.238091][T16481] syzkaller0: entered promiscuous mode [ 481.257585][T16481] syzkaller0: entered allmulticast mode [ 481.338701][T16489] netlink: Invalid conntrack helper [ 481.372984][T16489] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 481.685492][T16503] netlink: 'syz.3.2643': attribute type 1 has an invalid length. [ 481.695628][T16500] Bluetooth: hci0: unsupported parameter 5134 [ 481.720316][T16500] Bluetooth: hci0: unsupported parameter 8192 [ 481.726780][T16503] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2643'. [ 481.740029][T16500] Bluetooth: hci0: unsupported parameter 5134 [ 481.743324][T16506] bridge_slave_1: Caught tx_queue_len zero misconfig [ 481.758650][T16500] Bluetooth: hci0: unsupported parameter 8192 [ 482.018653][T16514] netlink: 'syz.3.2644': attribute type 1 has an invalid length. [ 482.067692][T16514] netlink: 'syz.3.2644': attribute type 2 has an invalid length. [ 482.453565][T16539] xt_CT: No such helper "netbios-ns" [ 482.790640][T16556] netlink: Conntrack attr has 4 unknown bytes [ 482.797175][T16556] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 482.822981][T16564] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2655'. [ 482.852690][T16560] bridge0: left allmulticast mode [ 482.861277][T16564] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2655'. [ 482.887193][T16564] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2655'. [ 482.907177][T16564] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2655'. [ 482.948174][T16570] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2656'. [ 483.033602][T16574] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2657'. [ 483.315412][T16560] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 483.363368][T16560] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 483.540413][T15124] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 483.560801][T15124] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 483.677196][T16568] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 483.720591][ T48] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 483.757503][ T48] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 483.768638][T16581] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 483.786310][ T48] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 483.797514][T16586] netlink: Invalid conntrack helper [ 483.811287][T16586] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 483.822555][ T48] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 483.875697][ T48] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 483.928246][ T48] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 484.039216][T16594] x_tables: duplicate underflow at hook 1 [ 484.846405][T16628] syzkaller0: entered promiscuous mode [ 484.853416][T16628] syzkaller0: entered allmulticast mode [ 485.330631][T16654] xt_CONNSECMARK: invalid mode: 254 [ 485.586153][T16672] pim6reg1: entered promiscuous mode [ 485.592522][T16672] pim6reg1: entered allmulticast mode [ 485.611004][T16675] netlink: Invalid conntrack helper [ 485.619109][T16675] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 486.363317][T16709] __nla_validate_parse: 5 callbacks suppressed [ 486.363337][T16709] netlink: 136 bytes leftover after parsing attributes in process `syz.0.2695'. [ 486.922699][T16730] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2700'. [ 486.945191][T16729] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2699'. [ 486.970230][T16730] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2700'. [ 486.977864][T16729] unsupported nla_type 216 [ 487.005283][T16734] netlink: 'syz.4.2701': attribute type 21 has an invalid length. [ 487.016624][T16735] hsr0: entered promiscuous mode [ 487.120035][T16741] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2699'. [ 487.148171][T16734] netlink: 'syz.4.2701': attribute type 1 has an invalid length. [ 487.173371][T16734] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2701'. [ 487.662584][T16727] hsr0: left promiscuous mode [ 487.747555][T16760] netlink: 'syz.3.2707': attribute type 11 has an invalid length. [ 487.855382][T16760] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2707'. [ 487.928909][T16764] netlink: Invalid conntrack helper [ 487.949330][T16764] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 488.295368][T16774] netlink: 'syz.3.2711': attribute type 13 has an invalid length. [ 488.318435][T16776] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2712'. [ 488.345688][T16774] netlink: 'syz.3.2711': attribute type 17 has an invalid length. [ 488.507274][T16774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 488.538030][T16774] 8021q: adding VLAN 0 to HW filter on device team0 [ 488.695540][T16774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 488.955903][T16774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 489.004026][T16774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 489.065927][T16774] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 489.264071][T16774] veth1_vlan: left promiscuous mode [ 489.291989][T16823] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2719'. [ 489.336671][T16774] veth0_vlan: left promiscuous mode [ 489.355071][T16831] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2718'. [ 489.378790][T16774] veth0_vlan: entered promiscuous mode [ 489.400148][T16774] veth1_vlan: entered promiscuous mode [ 489.416766][T16774] veth1_macvtap: left promiscuous mode [ 489.431500][T16774] veth0_macvtap: left promiscuous mode [ 489.439836][T16774] veth0_macvtap: entered promiscuous mode [ 489.466315][T16774] veth1_macvtap: entered promiscuous mode [ 489.482013][T16774] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 489.490070][T16774] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 489.506400][T16774] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 489.538032][T16774] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 489.551924][T16774] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 489.572999][T16774] 8021q: adding VLAN 0 to HW filter on device bond1 [ 489.585080][T16774] 8021q: adding VLAN 0 to HW filter on device bond2 [ 489.598334][T16774] 8021q: adding VLAN 0 to HW filter on device bond3 [ 489.621087][T16774] A link change request failed with some changes committed already. Interface batadv1 may have been left with an inconsistent configuration, please check. [ 489.743386][T16816] tc_dump_action: action bad kind [ 490.001068][T15121] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 490.033311][T15121] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.072406][T15121] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 490.108049][T15121] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.145293][T16850] netlink: NAT attribute has 4 unknown bytes [ 490.162045][T16850] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 490.179105][T16847] FAULT_INJECTION: forcing a failure. [ 490.179105][T16847] name failslab, interval 1, probability 0, space 0, times 0 [ 490.206342][T16847] CPU: 0 UID: 0 PID: 16847 Comm: syz.1.2725 Not tainted syzkaller #0 PREEMPT(full) [ 490.206369][T16847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 490.206381][T16847] Call Trace: [ 490.206390][T16847] [ 490.206398][T16847] dump_stack_lvl+0xe8/0x150 [ 490.206430][T16847] should_fail_ex+0x410/0x560 [ 490.206464][T16847] should_failslab+0xa8/0x100 [ 490.206492][T16847] kmem_cache_alloc_node_noprof+0xb3/0x620 [ 490.206512][T16847] ? local_lock_release+0x9c/0x160 [ 490.206538][T16847] ? __alloc_skb+0x1db/0x7a0 [ 490.206559][T16847] ? __alloc_skb+0x1db/0x7a0 [ 490.206588][T16847] __alloc_skb+0x1db/0x7a0 [ 490.206615][T16847] netlink_ack+0x136/0xb30 [ 490.206642][T16847] ? __pfx_genl_rcv_msg+0x10/0x10 [ 490.206665][T16847] ? __pfx_nl80211_post_doit+0x10/0x10 [ 490.206824][T16847] ? __pfx_ref_tracker_free+0x10/0x10 [ 490.206855][T16847] netlink_rcv_skb+0x2a4/0x4a0 [ 490.206877][T16847] ? __pfx_genl_rcv_msg+0x10/0x10 [ 490.206905][T16847] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 490.206943][T16847] ? down_read+0x2be/0x330 [ 490.207011][T16847] genl_rcv+0x28/0x40 [ 490.207037][T16847] netlink_unicast+0x7bd/0x940 [ 490.207082][T16847] netlink_sendmsg+0x813/0xb40 [ 490.207116][T16847] ? __pfx_netlink_sendmsg+0x10/0x10 [ 490.207143][T16847] ? aa_sock_msg_perm+0xf6/0x1c0 [ 490.207186][T16847] ? __pfx_netlink_sendmsg+0x10/0x10 [ 490.207207][T16847] sock_sendmsg_nosec+0x13a/0x180 [ 490.207237][T16847] ____sys_sendmsg+0x54e/0x850 [ 490.207277][T16847] ? __pfx_____sys_sendmsg+0x10/0x10 [ 490.207320][T16847] ? import_iovec+0x73/0xa0 [ 490.207347][T16847] ___sys_sendmsg+0x2a5/0x360 [ 490.207378][T16847] ? __lock_acquire+0x683/0x2cf0 [ 490.207415][T16847] ? __pfx____sys_sendmsg+0x10/0x10 [ 490.207486][T16847] ? __fget_files+0x2a/0x420 [ 490.207516][T16847] ? __fget_files+0x3a2/0x420 [ 490.207558][T16847] __x64_sys_sendmsg+0x1b1/0x290 [ 490.207592][T16847] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 490.207646][T16847] do_syscall_64+0x166/0x520 [ 490.207670][T16847] ? trace_irq_disable+0x3b/0x140 [ 490.207699][T16847] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.207730][T16847] ? clear_bhb_loop+0x70/0xc0 [ 490.207759][T16847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.207781][T16847] RIP: 0033:0x7ff98959e0d9 [ 490.207818][T16847] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 490.207836][T16847] RSP: 002b:00007ff98a443028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 490.207858][T16847] RAX: ffffffffffffffda RBX: 00007ff989825fa0 RCX: 00007ff98959e0d9 [ 490.207873][T16847] RDX: 0000000020008000 RSI: 0000200000000200 RDI: 0000000000000003 [ 490.207888][T16847] RBP: 00007ff98a443090 R08: 0000000000000000 R09: 0000000000000000 [ 490.207901][T16847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 490.207920][T16847] R13: 00007ff989826038 R14: 00007ff989825fa0 R15: 00007fff175ec818 [ 490.207955][T16847] [ 490.247498][T16841] ipvlan2: entered promiscuous mode [ 490.549431][T16841] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 490.578089][T16841] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 490.589593][T16841] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 490.631165][T15127] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 490.642194][T15127] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.660628][T15127] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 490.670536][T15127] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.711147][T16867] FAULT_INJECTION: forcing a failure. [ 490.711147][T16867] name failslab, interval 1, probability 0, space 0, times 0 [ 490.726504][T16868] netlink: Invalid conntrack helper [ 490.733423][T16868] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 490.743430][T16867] CPU: 0 UID: 0 PID: 16867 Comm: syz.1.2729 Not tainted syzkaller #0 PREEMPT(full) [ 490.743458][T16867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 490.743472][T16867] Call Trace: [ 490.743480][T16867] [ 490.743489][T16867] dump_stack_lvl+0xe8/0x150 [ 490.743527][T16867] should_fail_ex+0x410/0x560 [ 490.743566][T16867] should_failslab+0xa8/0x100 [ 490.743600][T16867] __kmalloc_noprof+0xfe/0x720 [ 490.743628][T16867] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 490.743658][T16867] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 490.743697][T16867] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 490.743745][T16867] genl_family_rcv_msg_doit+0xda/0x340 [ 490.743782][T16867] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 490.743819][T16867] ? apparmor_capable+0x126/0x170 [ 490.743848][T16867] ? bpf_lsm_capable+0x9/0x20 [ 490.743908][T16867] ? security_capable+0x7e/0x2c0 [ 490.744041][T16867] genl_rcv_msg+0x614/0x7a0 [ 490.744076][T16867] ? __pfx_genl_rcv_msg+0x10/0x10 [ 490.744103][T16867] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 490.744164][T16867] ? __pfx_ref_tracker_free+0x10/0x10 [ 490.744199][T16867] netlink_rcv_skb+0x226/0x4a0 [ 490.744222][T16867] ? __pfx_genl_rcv_msg+0x10/0x10 [ 490.744252][T16867] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 490.744290][T16867] ? down_read+0x2be/0x330 [ 490.744323][T16867] genl_rcv+0x28/0x40 [ 490.744347][T16867] netlink_unicast+0x7bd/0x940 [ 490.744391][T16867] netlink_sendmsg+0x813/0xb40 [ 490.744425][T16867] ? __pfx_netlink_sendmsg+0x10/0x10 [ 490.744452][T16867] ? aa_sock_msg_perm+0xf6/0x1c0 [ 490.744493][T16867] ? __pfx_netlink_sendmsg+0x10/0x10 [ 490.744514][T16867] sock_sendmsg_nosec+0x13a/0x180 [ 490.744544][T16867] ____sys_sendmsg+0x54e/0x850 [ 490.744583][T16867] ? __pfx_____sys_sendmsg+0x10/0x10 [ 490.744626][T16867] ? import_iovec+0x73/0xa0 [ 490.744654][T16867] ___sys_sendmsg+0x2a5/0x360 [ 490.744685][T16867] ? __lock_acquire+0x683/0x2cf0 [ 490.744729][T16867] ? __pfx____sys_sendmsg+0x10/0x10 [ 490.744803][T16867] ? __fget_files+0x2a/0x420 [ 490.744832][T16867] ? __fget_files+0x3a2/0x420 [ 490.744873][T16867] __x64_sys_sendmsg+0x1b1/0x290 [ 490.744910][T16867] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 490.744972][T16867] do_syscall_64+0x166/0x520 [ 490.744997][T16867] ? trace_irq_disable+0x3b/0x140 [ 490.745026][T16867] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.745049][T16867] ? clear_bhb_loop+0x70/0xc0 [ 490.745077][T16867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.745099][T16867] RIP: 0033:0x7ff98959e0d9 [ 490.745121][T16867] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 490.745140][T16867] RSP: 002b:00007ff98a443028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 490.745164][T16867] RAX: ffffffffffffffda RBX: 00007ff989825fa0 RCX: 00007ff98959e0d9 [ 490.745181][T16867] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000004 [ 490.745195][T16867] RBP: 00007ff98a443090 R08: 0000000000000000 R09: 0000000000000000 [ 490.745209][T16867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 490.745221][T16867] R13: 00007ff989826038 R14: 00007ff989825fa0 R15: 00007fff175ec818 [ 490.745258][T16867] [ 491.224486][T16870] bond6: option broadcast_neighbor: invalid value (3) [ 491.259949][T16870] bond6 (unregistering): Released all slaves [ 491.364405][T16878] ovs-system: entered promiscuous mode [ 491.946662][T16901] bond0: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 492.067463][T16910] openvswitch: netlink: Duplicate or invalid key (type 0). [ 492.117417][T16910] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 492.152296][T16908] __nla_validate_parse: 5 callbacks suppressed [ 492.152317][T16908] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2739'. [ 492.422188][T16925] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2742'. [ 492.454491][T16930] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 492.771152][T16940] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 493.288558][T16953] syzkaller0: entered promiscuous mode [ 493.310299][T16953] syzkaller0: entered allmulticast mode [ 493.491815][T16973] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2755'. [ 493.578075][T16980] openvswitch: netlink: Multiple metadata blocks provided [ 493.742004][T16987] Cannot find add_set index 1 as target [ 493.875203][T16992] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2760'. [ 494.063812][T16995] vlan5: entered promiscuous mode [ 494.079340][T16995] macvlan0: entered promiscuous mode [ 494.266984][T17001] netlink: 'syz.0.2763': attribute type 23 has an invalid length. [ 494.476403][T16997] erspan0: entered promiscuous mode [ 494.577828][T17014] FAULT_INJECTION: forcing a failure. [ 494.577828][T17014] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 494.642557][T17014] CPU: 1 UID: 0 PID: 17014 Comm: syz.0.2766 Not tainted syzkaller #0 PREEMPT(full) [ 494.642589][T17014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 494.642600][T17014] Call Trace: [ 494.642607][T17014] [ 494.642614][T17014] dump_stack_lvl+0xe8/0x150 [ 494.642645][T17014] should_fail_ex+0x410/0x560 [ 494.642677][T17014] _copy_to_user+0x31/0xb0 [ 494.642698][T17014] simple_read_from_buffer+0xe1/0x170 [ 494.642728][T17014] proc_fail_nth_read+0x1bb/0x230 [ 494.642797][T17014] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 494.642828][T17014] ? rw_verify_area+0x24a/0x4c0 [ 494.642862][T17014] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 494.642892][T17014] vfs_read+0x213/0xa80 [ 494.642922][T17014] ? __pfx___mutex_lock+0x10/0x10 [ 494.642944][T17014] ? __pfx_vfs_read+0x10/0x10 [ 494.642971][T17014] ? __fget_files+0x2a/0x420 [ 494.642998][T17014] ? __fget_files+0x3a2/0x420 [ 494.643021][T17014] ? __fget_files+0x2a/0x420 [ 494.643052][T17014] ksys_read+0x150/0x270 [ 494.643080][T17014] ? __pfx_ksys_read+0x10/0x10 [ 494.643116][T17014] do_syscall_64+0x166/0x520 [ 494.643136][T17014] ? trace_irq_disable+0x3b/0x140 [ 494.643160][T17014] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.643178][T17014] ? clear_bhb_loop+0x70/0xc0 [ 494.643199][T17014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.643217][T17014] RIP: 0033:0x7fea58b5e90e [ 494.643233][T17014] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 494.643249][T17014] RSP: 002b:00007fea59aabfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 494.643268][T17014] RAX: ffffffffffffffda RBX: 00007fea59aac6c0 RCX: 00007fea58b5e90e [ 494.643280][T17014] RDX: 000000000000000f RSI: 00007fea59aac0a0 RDI: 0000000000000005 [ 494.643291][T17014] RBP: 00007fea59aac090 R08: 0000000000000000 R09: 0000000000000000 [ 494.643301][T17014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 494.643311][T17014] R13: 00007fea58e26038 R14: 00007fea58e25fa0 R15: 00007ffdcbad1018 [ 494.643339][T17014] [ 494.646995][T16997] 8021q: adding VLAN 0 to HW filter on device team0 [ 494.923029][T16997] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 495.023463][T16997] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 495.104183][T16997] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 495.145307][T16997] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 495.179780][T16997] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 495.214651][T16997] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 495.319541][T16997] 8021q: adding VLAN 0 to HW filter on device bond1 [ 495.361590][T16997] 8021q: adding VLAN 0 to HW filter on device bond2 [ 495.399036][T16997] 8021q: adding VLAN 0 to HW filter on device bond3 [ 495.429080][T16997] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 495.471531][T16997] 8021q: adding VLAN 0 to HW filter on device bond4 [ 495.500033][T16997] 8021q: adding VLAN 0 to HW filter on device bond5 [ 495.527065][T16997] 8021q: adding VLAN 0 to HW filter on device bond6 [ 495.772244][ T6273] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 495.804719][ T6273] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.831774][ T6273] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 495.884057][T17044] netlink: 'syz.3.2771': attribute type 7 has an invalid length. [ 495.913236][T17044] netlink: 'syz.3.2771': attribute type 8 has an invalid length. [ 495.935109][T17044] netlink: 'syz.3.2771': attribute type 13 has an invalid length. [ 495.974058][T15121] netdevsim netdevsim2 €Â: set [0, 0] type 1 family 0 port 8472 - 0 [ 496.022731][T15121] netdevsim netdevsim2 €Â: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.051006][T15121] netdevsim netdevsim2 €Â: set [1, 1] type 2 family 0 port 20000 - 0 [ 496.086318][T15121] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 496.106334][T15121] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.116159][T15121] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 496.151565][T15127] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 496.169540][T15127] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.217062][T15127] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 496.383784][T17051] bond0: option min_links: invalid value (18446744073709551615) [ 496.392194][T17051] bond0: option min_links: allowed values 0 - 2147483647 [ 496.407433][T17051] bond0 (unregistering): Released all slaves [ 496.535191][T17055] bond0: option arp_validate: invalid value (55553) [ 496.543890][ T134] bond0: (slave bond_slave_0): interface is now down [ 496.545009][T17065] netlink: 'syz.1.2774': attribute type 1 has an invalid length. [ 496.597248][ T134] bond0: (slave bond_slave_1): interface is now down [ 496.620339][T17058] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2774'. [ 496.724263][ T134] bond0: now running without any active interface! [ 496.760365][T17068] netlink: 'syz.0.2775': attribute type 3 has an invalid length. [ 496.829455][T17058] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2774'. [ 497.333135][T17093] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2779'. [ 497.601404][T17103] syzkaller0: entered promiscuous mode [ 497.620417][T17103] syzkaller0: entered allmulticast mode [ 497.655854][T17103] tipc: Enabled bearer , priority 0 [ 497.732406][T17103] tipc: Resetting bearer [ 497.783674][T17102] tipc: Resetting bearer [ 497.808508][T17117] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2783'. [ 497.874343][T17117] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2783'. [ 497.906693][T17117] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2783'. [ 497.936298][T17102] tipc: Disabling bearer [ 497.993797][T17124] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2788'. [ 498.365865][T17135] Dropped outbound packet type=88ca [ 498.379304][T17135] tipc: Enabled bearer , priority 10 [ 498.500495][ C1] Dropped outbound packet type=88ca [ 498.608427][T17149] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 498.770259][ C1] Dropped outbound packet type=88ca [ 498.827873][T17162] netlink: 'syz.4.2800': attribute type 1 has an invalid length. [ 498.872848][T17162] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2800'. [ 498.895027][T17167] netlink: 'syz.4.2800': attribute type 1 has an invalid length. [ 499.300526][ C1] Dropped outbound packet type=88ca [ 499.583352][ T5622] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 499.597313][ T5622] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 499.608068][ T5622] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 499.618554][ T5622] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 499.630164][ T5622] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 499.932889][T17203] netlink: 'syz.0.2809': attribute type 11 has an invalid length. [ 499.973301][ T5612] tipc: Resetting bearer [ 500.099404][ T5612] tipc: Disabling bearer [ 500.330191][ C1] Dropped outbound packet type=88ca [ 500.383035][T15124] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 500.395630][T15124] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.414730][T17212] block nbd4: server does not support multiple connections per device. [ 500.422281][T15124] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 500.439260][T17212] block nbd4: shutting down sockets [ 500.515065][T17212] syzkaller0: entered promiscuous mode [ 500.522072][T17212] syzkaller0: entered allmulticast mode [ 500.796943][T15124] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 500.807909][T15124] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.825857][T15124] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 500.963096][T15124] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 500.982408][T15124] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.010934][T15124] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 501.266010][T15124] netdevsim netdevsim2 €Â (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 501.276181][T15124] netdevsim netdevsim2 €Â (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.286536][T15124] netdevsim netdevsim2 €Â (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 501.325135][T17250] syzkaller0: entered promiscuous mode [ 501.332827][T17250] syzkaller0: entered allmulticast mode [ 501.370193][ C1] Dropped outbound packet type=88ca [ 501.690925][ T50] Bluetooth: hci5: command tx timeout [ 501.757007][T17265] syzkaller0: entered promiscuous mode [ 501.773120][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.792075][T17265] syzkaller0: entered allmulticast mode [ 501.824184][T17271] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 501.846172][T17274] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2829'. [ 501.881321][T17274] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2829'. [ 501.900362][T17274] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2829'. [ 502.204250][T17285] netlink: 'syz.4.2832': attribute type 2 has an invalid length. [ 502.410270][ C1] Dropped outbound packet type=88ca [ 502.661219][T17294] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2834'. [ 502.705768][T17301] netlink: 'syz.0.2835': attribute type 1 has an invalid length. [ 502.914519][T17314] bond9: (slave dummy0): Releasing active interface [ 502.968309][T17298] netlink: 'syz.0.2835': attribute type 10 has an invalid length. [ 502.998726][T17298] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2835'. [ 503.105762][T17301] 8021q: adding VLAN 0 to HW filter on device bond10 [ 503.194592][T17330] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2839'. [ 503.450220][ C1] Dropped outbound packet type=88ca [ 503.602564][T15124] bond2 (unregistering): (slave ipip0): Releasing backup interface [ 503.628739][T15124] bond3 (unregistering): (slave geneve2): Releasing active interface [ 503.685439][T15124] bond6 (unregistering): (slave bridge4): Releasing backup interface [ 503.736134][T15124] bond1 (unregistering): Released all slaves [ 503.753673][T15124] bond2 (unregistering): Released all slaves [ 503.770366][ T50] Bluetooth: hci5: command tx timeout [ 503.776759][T15124] bond3 (unregistering): Released all slaves [ 503.798873][T15124] bond4 (unregistering): Released all slaves [ 503.823373][T15124] bond5 (unregistering): Released all slaves [ 503.839986][T15124] bond6 (unregistering): Released all slaves [ 503.901764][T17307] bond10: (slave veth3): Enslaving as an active interface with a down link [ 503.994008][T17192] bridge0: port 1(bridge_slave_0) entered blocking state [ 504.017648][T17192] bridge0: port 1(bridge_slave_0) entered disabled state [ 504.029570][T17192] bridge_slave_0: entered allmulticast mode [ 504.047652][T17192] bridge_slave_0: entered promiscuous mode [ 504.057900][T17192] bridge0: port 2(bridge_slave_1) entered blocking state [ 504.066098][T17192] bridge0: port 2(bridge_slave_1) entered disabled state [ 504.075034][T17192] bridge_slave_1: entered allmulticast mode [ 504.088110][T17192] bridge_slave_1: entered promiscuous mode [ 504.109584][T17330] 8021q: VLANs not supported on ip_vti0 [ 504.145540][T15124] þ: left promiscuous mode [ 504.287833][T17335] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2841'. [ 504.347844][T17192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 504.391328][T15124] tipc: Disabling bearer [ 504.409271][T15124] tipc: Left network mode [ 504.420628][T17192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 504.491066][ C1] Dropped outbound packet type=88ca [ 504.605034][T17192] team0: Port device team_slave_0 added [ 504.635018][T17192] team0: Port device team_slave_1 added [ 504.654464][T17350] netlink: 'syz.4.2845': attribute type 63 has an invalid length. [ 504.704975][T17353] smc: adding net device pimreg0 with user defined pnetid SYZ1 [ 504.830545][T17364] netlink: 16170 bytes leftover after parsing attributes in process `syz.3.2847'. [ 505.133297][T17353] smc: removing net device pimreg0 with user defined pnetid SYZ1 [ 505.191774][T17192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 505.225038][T17192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 505.284157][T17192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 505.461092][T17192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 505.482800][T17192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 505.528335][T17192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 505.539225][ C1] Dropped outbound packet type=88ca [ 505.567234][T17391] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 505.640943][T17385] bond11: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 505.670977][T17385] bond11 (unregistering): Released all slaves [ 505.852191][ T50] Bluetooth: hci5: command tx timeout [ 506.032313][ T5271] 8021q: adding VLAN 0 to HW filter on device eth1 [ 506.219601][T17192] hsr_slave_0: entered promiscuous mode [ 506.247530][T17192] hsr_slave_1: entered promiscuous mode [ 506.274691][T17192] debugfs: 'hsr0' already exists in 'hsr' [ 506.295991][T17192] Cannot create hsr debugfs directory [ 506.570269][ C1] Dropped outbound packet type=88ca [ 506.702036][T17426] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2860'. [ 506.716838][T17417] syzkaller0: entered promiscuous mode [ 506.740433][T17417] syzkaller0: entered allmulticast mode [ 507.083897][T17437] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2862'. [ 507.610192][ C1] Dropped outbound packet type=88ca [ 507.933570][ T50] Bluetooth: hci5: command tx timeout [ 508.650274][ C1] Dropped outbound packet type=88ca [ 509.690292][ C1] Dropped outbound packet type=88ca [ 510.730400][ C1] Dropped outbound packet type=88ca [ 510.816222][T17459] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2865'. [ 510.865958][T17466] A link change request failed with some changes committed already. Interface batadv1 may have been left with an inconsistent configuration, please check. [ 510.901906][T17467] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 510.926304][T17464] bond11: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3) [ 510.942253][T17464] bond11 (unregistering): Released all slaves [ 510.975653][T17469] netlink: 'syz.4.2866': attribute type 6 has an invalid length. [ 511.047185][T15124] hsr_slave_0: left promiscuous mode [ 511.770219][ C1] Dropped outbound packet type=88ca [ 511.971625][ T5271] 8021q: adding VLAN 0 to HW filter on device eth2 [ 512.244064][T17517] netlink: 54852 bytes leftover after parsing attributes in process `syz.4.2872'. [ 512.406542][T17517] hsr_slave_1 (unregistering): left promiscuous mode [ 512.427079][T17523] bridge0: port 1(wlan1) entered blocking state [ 512.441935][T17523] bridge0: port 1(wlan1) entered disabled state [ 512.458302][T17523] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 512.484515][T17525] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2877'. [ 512.499874][T17523] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 512.775689][T15124] IPVS: stop unused estimator thread 0... [ 512.810235][ C1] Dropped outbound packet type=88ca [ 513.070743][T17558] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 513.850294][ C1] Dropped outbound packet type=88ca [ 513.981207][T17192] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 514.006312][T17599] netlink: NAT attribute has 5 unknown bytes [ 514.025104][T17599] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 514.058875][T17192] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 514.085052][T17192] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 514.105668][T17192] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 514.223958][T17192] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 514.263744][T17192] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 514.284195][T17192] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 514.316238][T17192] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 514.763099][T17192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 514.838653][T17192] 8021q: adding VLAN 0 to HW filter on device team0 [ 514.890183][ C1] Dropped outbound packet type=88ca [ 515.038533][T17640] bridge0: port 4(macvlan2) entered disabled state [ 515.045392][T17640] bridge0: port 3(bond0) entered disabled state [ 515.052648][T17640] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.060279][T17640] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.115869][T17640] tipc: Resetting bearer [ 515.156903][T17640] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 515.169510][T17640] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 515.213538][T17640] veth0_vlan: left promiscuous mode [ 515.484799][T17640] veth0_to_bridge: left allmulticast mode [ 515.670710][ T48] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 515.700239][ T48] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 515.711941][ T48] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 515.740289][ T6274] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 515.770062][ T6274] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 515.797851][ T6274] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 515.817078][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 515.824359][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 515.835799][T17658] Bluetooth: hci0: unsupported parameter 5135 [ 515.846269][T17660] IPVS: set_ctl: invalid protocol: 1 10.1.1.0:20000 [ 515.868221][T17658] Bluetooth: hci0: unsupported parameter 8192 [ 515.877298][T15121] bridge0: port 2(bridge_slave_1) entered blocking state [ 515.883044][T17658] Bluetooth: hci0: unsupported parameter 5135 [ 515.884893][T15121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 515.916659][T17658] Bluetooth: hci0: unsupported parameter 8192 [ 515.923213][T15121] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 515.923252][T15121] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 515.923281][T15121] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 515.923342][T15121] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 515.923381][T15121] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 515.923410][T15121] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 515.930447][ C1] Dropped outbound packet type=88ca [ 516.279134][T17678] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2905'. [ 516.373966][T17678] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2905'. [ 516.455256][T17683] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2906'. [ 516.511924][T17683] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2906'. [ 516.858106][T17702] netlink: 'syz.1.2910': attribute type 1 has an invalid length. [ 516.898159][T17702] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2910'. [ 516.927331][T17710] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2910'. [ 516.948413][T17702] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2910'. [ 516.970241][ C1] Dropped outbound packet type=88ca [ 517.122901][T17720] xt_hashlimit: size too large, truncated to 1048576 [ 517.158002][T17722] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2912'. [ 517.224135][T17722] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2912'. [ 517.267556][T17722] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2912'. [ 517.468636][T17192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 517.720539][T17192] veth0_vlan: entered promiscuous mode [ 517.785872][T17192] veth1_vlan: entered promiscuous mode [ 517.946354][T17192] veth0_macvtap: entered promiscuous mode [ 517.959628][T17192] veth1_macvtap: entered promiscuous mode [ 518.002600][T17192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 518.010315][ C1] Dropped outbound packet type=88ca [ 518.018246][T17192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 518.172280][ T6274] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.203250][ T6274] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.214747][ T6274] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.252292][ T6273] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.479430][T17760] bond10: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 518.492605][T17760] bond10 (unregistering): Released all slaves [ 519.050297][ C1] Dropped outbound packet type=88ca [ 519.683700][T17806] syzkaller1: entered promiscuous mode [ 519.689451][T17806] syzkaller1: entered allmulticast mode [ 519.738704][T17697] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 519.954250][ T6274] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 519.980563][ T6274] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 520.090260][ C1] Dropped outbound packet type=88ca [ 520.243340][T17822] netlink: 'syz.3.2921': attribute type 2 has an invalid length. [ 520.256426][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 520.284931][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 520.541467][T17833] netlink: 'syz.1.2923': attribute type 49 has an invalid length. [ 521.130262][ C1] Dropped outbound packet type=88ca [ 522.035607][T17889] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 522.056678][T17889] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 522.067918][T17889] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 522.083951][T17889] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 522.098164][T17889] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 522.170202][ C1] Dropped outbound packet type=88ca [ 522.271768][T17893] Bluetooth: MGMT ver 1.23 [ 522.648237][T17908] __nla_validate_parse: 5 callbacks suppressed [ 522.648258][T17908] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2936'. [ 522.834965][T17913] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2937'. [ 522.905883][T17913] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2937'. [ 523.018366][T17917] ipt_REJECT: TCP_RESET invalid for non-tcp [ 523.210267][ C1] Dropped outbound packet type=88ca [ 523.615887][T17942] syzkaller0: entered promiscuous mode [ 523.629969][T17942] syzkaller0: entered allmulticast mode [ 524.180564][ T50] Bluetooth: hci3: command tx timeout [ 524.250192][ C1] Dropped outbound packet type=88ca [ 524.804984][T17885] bridge0: port 1(bridge_slave_0) entered blocking state [ 524.830294][T17885] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.839776][T17885] bridge_slave_0: entered allmulticast mode [ 524.862816][T17885] bridge_slave_0: entered promiscuous mode [ 524.880996][T17885] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.903425][T17885] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.929500][T17885] bridge_slave_1: entered allmulticast mode [ 524.957760][T17885] bridge_slave_1: entered promiscuous mode [ 525.066211][T17993] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2949'. [ 525.118034][T17885] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 525.159127][T17885] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 525.290245][ C1] Dropped outbound packet type=88ca [ 525.351748][T18000] netlink: 'syz.1.2950': attribute type 5 has an invalid length. [ 525.364237][T17885] team0: Port device team_slave_0 added [ 525.407250][T17885] team0: Port device team_slave_1 added [ 525.513415][T18009] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2952'. [ 525.566866][T18012] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2951'. [ 525.647376][T18010] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.654871][T18010] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.844573][T18020] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2953'. [ 526.165245][T17885] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 526.174541][T17885] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 526.238219][T17885] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 526.260961][ T50] Bluetooth: hci3: command tx timeout [ 526.296809][T17885] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 526.313290][T17885] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 526.330419][ C1] Dropped outbound packet type=88ca [ 526.348483][T17885] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 526.550748][ T48] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 526.574884][ T48] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.587351][T18046] netlink: 'syz.0.2956': attribute type 61 has an invalid length. [ 526.604172][T18045] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 526.634971][T18052] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2956'. [ 526.670248][T15125] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 526.689329][T15125] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.755644][T17885] hsr_slave_0: entered promiscuous mode [ 526.766086][T17885] hsr_slave_1: entered promiscuous mode [ 526.780706][T17885] debugfs: 'hsr0' already exists in 'hsr' [ 526.796980][T17885] Cannot create hsr debugfs directory [ 526.808899][T18057] tipc: Invalid UDP bearer configuration [ 526.808985][T18057] tipc: Enabling of bearer rejected, failed to enable media [ 527.067324][T18069] tipc: Enabling of bearer rejected, failed to enable media [ 527.111906][T15125] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 527.154592][T15125] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.320430][ T62] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 527.327597][ T50] block nbd4: Receive control failed (result -32) [ 527.352351][ T62] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.370297][ C1] Dropped outbound packet type=88ca [ 527.749347][T17885] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 527.801614][T17885] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.005776][T18076] pim6reg: entered allmulticast mode [ 528.087925][T18093] syzkaller0: entered promiscuous mode [ 528.111511][T18093] syzkaller0: entered allmulticast mode [ 528.204807][T17885] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 528.233974][T17885] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.258844][ T29] audit: type=1800 audit(1787597115.924:6): pid=18120 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2973" name="blkio.bfq.time_recursive" dev="tmpfs" ino=104 res=0 errno=0 [ 528.299481][T18076] netlink: 'syz.1.2962': attribute type 4 has an invalid length. [ 528.330526][ T50] Bluetooth: hci3: command tx timeout [ 528.347160][T18115] ovs-s: entered promiscuous mode [ 528.410203][ C1] Dropped outbound packet type=88ca [ 528.557005][T15126] nci: nci_rsp_packet: unknown rsp opcode 0x72e [ 528.958260][T18119] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 529.450209][ C1] Dropped outbound packet type=88ca [ 530.420954][ T50] Bluetooth: hci3: command tx timeout [ 530.491321][ C1] Dropped outbound packet type=88ca [ 531.530279][ C1] Dropped outbound packet type=88ca [ 531.669280][T18116] openvswitch: ovs-s: Dropping previously announced user features [ 531.699002][T18140] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 531.741694][T18140] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 531.807583][T18149] IPVS: set_ctl: invalid protocol: 4 224.0.0.2:20002 [ 531.835327][T17885] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 531.846357][T17885] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.963563][T18152] netlink: 'syz.4.2979': attribute type 1 has an invalid length. [ 532.014495][T18154] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 532.026419][T17885] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 532.043890][T17885] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.218363][T18167] xt_hashlimit: size too large, truncated to 1048576 [ 532.266451][T18152] 8021q: adding VLAN 0 to HW filter on device bond13 [ 532.569603][T18183] openvswitch: netlink: Key type 54 is out of range max 32 [ 532.577130][ C1] Dropped outbound packet type=88ca [ 532.604663][T18184] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2984'. [ 532.759035][T18194] netlink: 'syz.4.2986': attribute type 13 has an invalid length. [ 533.104169][T18212] x_tables: ip_tables: osf match: only valid for protocol 6 [ 533.237353][T18197] bond11: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 533.307183][T18197] bond11 (unregistering): Released all slaves [ 533.388289][T18221] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 533.460403][T17885] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 533.499798][T17885] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 533.569969][T17885] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 533.610205][ C1] Dropped outbound packet type=88ca [ 533.629983][T17885] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 533.669943][T17885] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 533.710899][T17885] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 533.729644][T17885] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 533.766009][T17885] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 534.129310][T18260] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2999'. [ 534.171190][T17885] 8021q: adding VLAN 0 to HW filter on device bond0 [ 534.394814][T17885] 8021q: adding VLAN 0 to HW filter on device team0 [ 534.650531][ C1] Dropped outbound packet type=88ca [ 534.719122][T18281] openvswitch: netlink: Missing valid actions attribute. [ 534.727810][T18281] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 534.791097][T18285] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3003'. [ 535.006703][T18294] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3004'. [ 535.557388][T18301] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3006'. [ 535.679232][T18305] ipt_REJECT: TCP_RESET invalid for non-tcp [ 535.690300][ C1] Dropped outbound packet type=88ca [ 536.730414][ C1] Dropped outbound packet type=88ca [ 537.770283][ C1] Dropped outbound packet type=88ca [ 538.082731][T18289] vlan6: entered promiscuous mode [ 538.087882][T18289] bridge0: entered promiscuous mode [ 538.108128][T18301] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 538.272371][T15124] bridge0: port 1(bridge_slave_0) entered blocking state [ 538.279713][T15124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 538.392382][T15125] bridge0: port 2(bridge_slave_1) entered blocking state [ 538.400523][T15125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 538.810214][ C1] Dropped outbound packet type=88ca [ 539.073237][T18346] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3017'. [ 539.084092][T18345] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 539.142173][T18345] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 539.177211][T18347] syzkaller0: entered promiscuous mode [ 539.196801][T18347] syzkaller0: entered allmulticast mode [ 539.219334][T18353] tipc: Enabling of bearer rejected, already enabled [ 539.234525][T18348] xfrm0 speed is unknown, defaulting to 1000 [ 539.339979][T18348] xfrm0 speed is unknown, defaulting to 1000 [ 539.448268][T18348] xfrm0 speed is unknown, defaulting to 1000 [ 539.850265][ C1] Dropped outbound packet type=88ca [ 539.959443][T17885] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 540.014746][T18374] tap0: tun_chr_ioctl cmd 1074025677 [ 540.025046][T18374] tap0: linktype set to 805 [ 540.118161][T18348] infiniband syz0: set down [ 540.146039][T18348] infiniband syz0: added xfrm0 [ 540.152724][T14750] xfrm0 speed is unknown, defaulting to 1000 [ 540.205186][T18348] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 540.228049][T18348] infiniband syz0: Couldn't open port 1 [ 540.274598][T18348] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 540.317247][T18348] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 540.362293][T18348] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 540.378260][T17885] veth0_vlan: entered promiscuous mode [ 540.449373][T17885] veth1_vlan: entered promiscuous mode [ 540.459699][T18387] netlink: 'syz.4.3026': attribute type 7 has an invalid length. [ 540.544278][T18392] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3026'. [ 540.548327][T17885] veth0_macvtap: entered promiscuous mode [ 540.582705][T18348] RDS/IB: syz0: added [ 540.588951][T18348] smc: adding ib device syz0 with port count 1 [ 540.597193][T18348] smc: ib device syz0 port 1 has no pnetid [ 540.609723][T14750] xfrm0 speed is unknown, defaulting to 1000 [ 540.617662][T18393] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3026'. [ 540.627588][T17885] veth1_macvtap: entered promiscuous mode [ 540.650619][T18392] netlink: 548 bytes leftover after parsing attributes in process `syz.4.3026'. [ 540.678028][T18348] xfrm0 speed is unknown, defaulting to 1000 [ 540.688238][T18392] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3026'. [ 540.719167][T17885] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 540.768440][T17885] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 540.892561][ C1] Dropped outbound packet type=88ca [ 540.929649][T18405] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3030'. [ 540.953181][T18405] netlink: 312 bytes leftover after parsing attributes in process `syz.2.3030'. [ 540.979365][T18405] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3030'. [ 541.150677][T18407] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3030'. [ 541.190541][T15123] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.281915][T15124] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.344898][T15124] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.440563][T15123] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.473464][T18417] netlink: 'syz.4.3032': attribute type 1 has an invalid length. [ 541.481942][T15123] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 541.509955][T15123] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 541.598556][T18348] xfrm0 speed is unknown, defaulting to 1000 [ 541.647308][T18417] veth0_to_bond: left allmulticast mode [ 541.682693][T18417] bond14: (slave veth0_to_bond): making interface the new active one [ 541.718048][T18417] bond14: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 541.814828][T18429] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3033'. [ 541.930251][ C1] Dropped outbound packet type=88ca [ 542.031475][T18427] tipc: Resetting bearer [ 542.720062][T18427] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 542.970235][ C1] Dropped outbound packet type=88ca [ 542.984573][T18419] macvlan4: entered promiscuous mode [ 542.991262][T18419] macvlan4: entered allmulticast mode [ 542.997629][T18419] bond14: entered promiscuous mode [ 543.004111][T18419] veth0_to_bond: entered promiscuous mode [ 543.014117][T18419] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 543.022426][T18419] bond14: (slave macvlan4): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 543.039899][T18419] bond14: left promiscuous mode [ 543.045371][T18419] veth0_to_bond: left promiscuous mode [ 543.071248][T15124] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 543.080499][T18348] xfrm0 speed is unknown, defaulting to 1000 [ 543.101475][ T62] netdevsim netdevsim1 €Â: unset [0, 0] type 1 family 0 port 8472 - 0 [ 543.115011][T15124] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 543.130876][ T62] netdevsim netdevsim1 €Â: unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.149526][ T62] netdevsim netdevsim1 €Â: unset [1, 1] type 2 family 0 port 20004 - 0 [ 543.401580][ T13] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 543.435892][ T13] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.469366][ T13] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 543.482530][T18437] batadv_slave_0: Caught tx_queue_len zero misconfig [ 543.549186][T18437] netlink: 'syz.4.3034': attribute type 1 has an invalid length. [ 543.570945][ T13] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 543.582887][ T13] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.593282][ T13] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 543.612295][ T13] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 543.632645][ T13] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.656992][ T13] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 543.718490][T18449] nbd: must specify an index to disconnect [ 543.886333][T18348] xfrm0 speed is unknown, defaulting to 1000 [ 544.010688][ C1] Dropped outbound packet type=88ca [ 544.131971][T18458] __nla_validate_parse: 6 callbacks suppressed [ 544.131991][T18458] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3042'. [ 544.198656][T18458] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3042'. [ 544.409858][T18466] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3044'. [ 544.486878][T17889] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 544.515868][T17889] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 544.527277][T17889] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 544.539714][T17889] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 544.549667][T17889] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 544.968772][T18348] xfrm0 speed is unknown, defaulting to 1000 [ 545.050212][ C1] Dropped outbound packet type=88ca [ 545.668216][T18348] xfrm0 speed is unknown, defaulting to 1000 [ 546.090238][ C1] Dropped outbound packet type=88ca [ 546.257336][T18468] xfrm0 speed is unknown, defaulting to 1000 [ 546.650812][T17889] Bluetooth: hci0: command tx timeout [ 546.898253][T18505] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3053'. [ 546.915207][T18506] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3052'. [ 546.925464][T18506] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3052'. [ 546.981287][T18507] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3053'. [ 546.991581][T18503] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3052'. [ 547.001465][T18503] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3052'. [ 547.130255][ C1] Dropped outbound packet type=88ca [ 547.381609][T18525] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3058'. [ 548.170273][ C1] Dropped outbound packet type=88ca [ 548.730261][T17889] Bluetooth: hci0: command tx timeout [ 549.210271][ C1] Dropped outbound packet type=88ca [ 550.250323][ C1] Dropped outbound packet type=88ca [ 550.657700][T18524] __nla_validate_parse: 1 callbacks suppressed [ 550.657725][T18524] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3057'. [ 550.811270][T17889] Bluetooth: hci0: command tx timeout [ 551.036390][T18556] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3064'. [ 551.038570][T18552] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3062'. [ 551.114835][T18565] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3066'. [ 551.162287][T18556] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3064'. [ 551.194514][T18569] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3066'. [ 551.238688][T18468] bridge0: port 1(bridge_slave_0) entered blocking state [ 551.247521][T18468] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.256357][T18468] bridge_slave_0: entered allmulticast mode [ 551.264680][T18468] bridge_slave_0: entered promiscuous mode [ 551.277370][T18571] tipc: Resetting bearer [ 551.290880][ C1] Dropped outbound packet type=88ca [ 551.322910][T18468] bridge0: port 2(bridge_slave_1) entered blocking state [ 551.333271][T18468] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.346202][T18468] bridge_slave_1: entered allmulticast mode [ 551.354357][T18468] bridge_slave_1: entered promiscuous mode [ 551.507009][T18468] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 551.593641][T18468] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 551.609856][T18584] rdma_rxe: rxe_newlink: failed to add lo [ 551.742017][T18468] team0: Port device team_slave_0 added [ 551.759755][T18468] team0: Port device team_slave_1 added [ 551.888235][T18468] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 551.924527][T18468] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 551.978704][T18468] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 552.005627][T18468] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 552.031039][T18468] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 552.085408][T18468] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 552.135399][T18608] IPVS: set_ctl: invalid protocol: 4 172.20.20.170:20003 [ 552.161819][T18607] IPVS: set_ctl: invalid protocol: 4 172.20.20.170:20003 [ 552.231534][T18600] syzkaller1: entered allmulticast mode [ 552.332343][ C1] Dropped outbound packet type=88ca [ 552.368780][T18468] hsr_slave_0: entered promiscuous mode [ 552.376572][T18468] hsr_slave_1: entered promiscuous mode [ 552.392861][T18468] debugfs: 'hsr0' already exists in 'hsr' [ 552.409003][T18468] Cannot create hsr debugfs directory [ 552.890375][T17889] Bluetooth: hci0: command tx timeout [ 553.370193][ C1] Dropped outbound packet type=88ca [ 553.725099][T18636] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3083'. [ 554.410237][ C1] Dropped outbound packet type=88ca [ 555.139792][T18635] bond1 (unregistering): Released all slaves [ 555.283741][T18644] Bluetooth: MGMT ver 1.23 [ 555.366121][T18594] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.451126][ C1] Dropped outbound packet type=88ca [ 555.681516][T18657] openvswitch: netlink: Duplicate key (type 0). [ 556.045293][T18673] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3090'. [ 556.086432][T18646] bridge0: port 2(bridge_slave_1) entered disabled state [ 556.094570][T18646] bridge0: port 1(bridge_slave_0) entered disabled state [ 556.490208][ C1] Dropped outbound packet type=88ca [ 556.672635][T18646] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 557.251498][T15123] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.405277][T18594] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.530186][ C1] Dropped outbound packet type=88ca [ 557.620900][T18700] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3096'. [ 557.639104][T18594] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.676508][T18700] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3096'. [ 557.695969][T15126] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.724915][T18700] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3096'. [ 557.757479][T18594] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.822330][T15123] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.840266][T15123] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.872187][T18704] netlink: 'syz.2.3098': attribute type 6 has an invalid length. [ 557.919872][T18702] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3097'. [ 557.951488][T18702] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3097'. [ 558.213117][T18719] netlink: 'syz.1.3102': attribute type 1 has an invalid length. [ 558.304805][T18719] 8021q: adding VLAN 0 to HW filter on device bond10 [ 558.313037][T15126] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.463442][T18723] bond10: (slave veth11): Enslaving as an active interface with a down link [ 558.527962][T18731] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 558.544566][T18731] bond10: (slave batadv0): making interface the new active one [ 558.558002][T18731] batadv0: entered promiscuous mode [ 558.564488][T18731] bond10: (slave batadv0): Enslaving as an active interface with an up link [ 558.573508][ C1] Dropped outbound packet type=88ca [ 558.618276][T18468] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 558.633116][T18468] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 558.648977][T18468] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 558.664361][T18468] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 558.672666][T18468] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 558.684474][T18468] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 558.709545][T18736] syzkaller0: entered promiscuous mode [ 558.716611][T18736] syzkaller0: entered allmulticast mode [ 558.725823][T18468] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 558.748572][T18468] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 558.783121][T18740] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 558.870762][T15123] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.943762][T15124] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.970904][T15124] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.018437][T15123] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 559.047159][T18468] 8021q: adding VLAN 0 to HW filter on device bond0 [ 559.075619][T18468] 8021q: adding VLAN 0 to HW filter on device team0 [ 559.091282][T15126] bridge0: port 1(bridge_slave_0) entered blocking state [ 559.098638][T15126] bridge0: port 1(bridge_slave_0) entered forwarding state [ 559.124567][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 559.131963][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 559.394977][T18774] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3114'. [ 559.610818][ C1] Dropped outbound packet type=88ca [ 559.657756][T18784] batman_adv: batadv0: Adding interface: veth0 [ 559.666119][T18784] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 559.694515][T18784] batman_adv: batadv0: Interface activated: veth0 [ 559.714576][T18755] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 559.725031][T18784] batman_adv: batadv0: Interface deactivated: veth0 [ 559.732251][T18784] batman_adv: batadv0: Removing interface: veth0 [ 559.786638][T18784] bond10: (slave batadv0): Releasing active interface [ 559.818005][T18784] batadv0 (unregistering): left promiscuous mode [ 560.060792][T18468] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 560.105561][T18795] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3118'. [ 560.147078][T18795] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3118'. [ 560.468098][T18812] netlink: 'syz.1.3121': attribute type 29 has an invalid length. [ 560.498355][T18814] netlink: 'syz.2.3122': attribute type 6 has an invalid length. [ 560.504641][T18815] netlink: 'syz.2.3122': attribute type 6 has an invalid length. [ 560.548565][T18807] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3121'. [ 560.650264][ C1] Dropped outbound packet type=88ca [ 560.835053][T18468] veth0_vlan: entered promiscuous mode [ 560.909741][T18468] veth1_vlan: entered promiscuous mode [ 560.924724][T18828] Bluetooth: hci0: invalid length 0, exp 2 for type 2 [ 561.141160][T18468] veth0_macvtap: entered promiscuous mode [ 561.185658][T18468] veth1_macvtap: entered promiscuous mode [ 561.264189][T18468] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 561.337226][T18468] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 561.446478][T18848] syzkaller0: entered promiscuous mode [ 561.453793][T18848] syzkaller0: entered allmulticast mode [ 561.526670][ T62] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.546955][T18837] nbd5: detected capacity change from 0 to 64 [ 561.556886][ T62] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.586149][T18844] block nbd1: NBD_DISCONNECT [ 561.606603][T18844] block nbd1: Send disconnect failed -32 [ 561.623188][T18844] block nbd1: shutting down sockets [ 561.630384][ T48] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.661309][ T48] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.684515][T17889] block nbd5: Receive control failed (result -104) [ 561.690717][ C1] Dropped outbound packet type=88ca [ 561.858926][T15124] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 561.881369][T15124] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 562.099689][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 562.118448][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 562.453588][T18875] netlink: 'syz.0.3136': attribute type 2 has an invalid length. [ 562.483335][T18881] __nla_validate_parse: 3 callbacks suppressed [ 562.483355][T18881] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3137'. [ 562.504654][T18881] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3137'. [ 562.504790][ T50] block nbd1: Receive control failed (result -32) [ 562.524024][T17889] block nbd1: Receive control failed (result -32) [ 562.730277][ C1] Dropped outbound packet type=88ca [ 562.879722][T18903] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3140'. [ 563.172413][ T50] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 563.190434][ T50] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 563.203920][ T50] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 563.214573][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.227154][ T50] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 563.236295][ T50] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 563.326878][T18918] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3145'. [ 563.411302][T18918] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3145'. [ 563.770172][ C1] Dropped outbound packet type=88ca [ 563.799412][T18936] netlink: 'syz.4.3148': attribute type 3 has an invalid length. [ 563.811062][T18929] xfrm0 speed is unknown, defaulting to 1000 [ 564.005556][T18944] netlink: 'syz.4.3151': attribute type 62 has an invalid length. [ 564.020542][T18945] netlink: 'syz.4.3151': attribute type 62 has an invalid length. [ 564.038120][T18944] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3151'. [ 564.093657][T18944] xt_l2tp: missing protocol rule (udp|l2tpip) [ 564.106885][T18945] xt_l2tp: missing protocol rule (udp|l2tpip) [ 564.647267][T18971] netlink: 'syz.2.3156': attribute type 39 has an invalid length. [ 564.765098][T18913] xfrm0 speed is unknown, defaulting to 1000 [ 564.810183][ C1] Dropped outbound packet type=88ca [ 565.044547][T18973] sctp: [Deprecated]: syz.4.3157 (pid 18973) Use of struct sctp_assoc_value in delayed_ack socket option. [ 565.044547][T18973] Use struct sctp_sack_info instead [ 565.293276][T17889] Bluetooth: hci4: command tx timeout [ 565.461664][T18990] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3162'. [ 565.676880][T18995] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3164'. [ 565.717174][T18995] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 565.850172][ C1] Dropped outbound packet type=88ca [ 565.891798][T19003] netlink: 'syz.1.3166': attribute type 10 has an invalid length. [ 566.024791][T19003] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3166'. [ 566.052114][T19003] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3166'. [ 566.208393][T19014] team0: entered promiscuous mode [ 566.218306][T19014] team_slave_0: entered promiscuous mode [ 566.227953][T19014] team_slave_1: entered promiscuous mode [ 566.248853][T19014] team0: entered allmulticast mode [ 566.258297][T19014] team_slave_0: entered allmulticast mode [ 566.264882][T19014] team_slave_1: entered allmulticast mode [ 566.273174][T19014] 8021q: adding VLAN 0 to HW filter on device team0 [ 566.281748][T19014] team0: Cannot enslave team device to itself [ 566.577012][T19024] netlink: 'syz.1.3171': attribute type 20 has an invalid length. [ 566.603631][T19024] netlink: 'syz.1.3171': attribute type 21 has an invalid length. [ 566.864737][T18913] bridge0: port 1(bridge_slave_0) entered blocking state [ 566.873726][T18913] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.881804][T18913] bridge_slave_0: entered allmulticast mode [ 566.889894][T18913] bridge_slave_0: entered promiscuous mode [ 566.896057][ C1] Dropped outbound packet type=88ca [ 566.905227][T19047] tipc: Can't bind to reserved service type 0 [ 566.906038][T18913] bridge0: port 2(bridge_slave_1) entered blocking state [ 566.919114][T18913] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.927459][T18913] bridge_slave_1: entered allmulticast mode [ 566.936652][T18913] bridge_slave_1: entered promiscuous mode [ 567.002426][T18913] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 567.025033][T18913] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 567.332981][T18913] team0: Port device team_slave_0 added [ 567.357459][T18913] team0: Port device team_slave_1 added [ 567.371507][T17889] Bluetooth: hci4: command tx timeout [ 567.454989][T18913] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 567.486898][T18913] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 567.514373][T19068] __nla_validate_parse: 2 callbacks suppressed [ 567.514392][T19068] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3180'. [ 567.581614][T18913] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 567.682487][T18913] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 567.689669][T18913] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 567.726709][T18913] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 567.931116][ C1] Dropped outbound packet type=88ca [ 567.964866][T19079] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3186'. [ 567.975068][T19079] netlink: 'syz.1.3186': attribute type 10 has an invalid length. [ 567.983424][T19079] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3186'. [ 567.985698][T18913] hsr_slave_0: entered promiscuous mode [ 568.014888][T18913] hsr_slave_1: entered promiscuous mode [ 568.028743][T18913] debugfs: 'hsr0' already exists in 'hsr' [ 568.039217][T18913] Cannot create hsr debugfs directory [ 568.056408][T19081] ip6gre2: entered promiscuous mode [ 568.061883][T19081] ip6gre2: entered allmulticast mode [ 568.076952][T19079] geneve4: entered promiscuous mode [ 568.083029][T19079] geneve4: entered allmulticast mode [ 568.791262][T15123] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.830586][T15123] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.861181][T15123] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.889865][T15123] netdevsim netdevsim1 €Â: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.958418][T19113] syzkaller1: entered allmulticast mode [ 568.970649][ C1] Dropped outbound packet type=88ca [ 569.089258][T19119] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3195'. [ 569.307538][T19125] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 569.317397][T19125] IPv6: NLM_F_CREATE should be set when creating new route [ 569.382016][T19125] pim6reg99999999: entered allmulticast mode [ 569.433551][T19130] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3196'. [ 569.461856][T17889] Bluetooth: hci4: command tx timeout [ 569.545504][T19133] netlink: 'syz.3.3199': attribute type 1 has an invalid length. [ 569.767413][T19148] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3203'. [ 569.845499][T19150] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3204'. [ 569.908556][T19150] ip: renamed from virt_wifi0 [ 570.005506][T19150] A link change request failed with some changes committed already. Interface ip may have been left with an inconsistent configuration, please check. [ 570.010682][ C1] Dropped outbound packet type=88ca [ 570.307452][T19161] dummy0: entered promiscuous mode [ 570.319344][T19161] dummy0: left promiscuous mode [ 570.575351][T18913] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 570.635233][T18913] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 570.666022][T18913] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 570.691009][T18913] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 570.706963][T19174] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3210'. [ 570.716271][T18913] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 570.738842][T18913] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 570.751764][T19172] syzkaller1: entered allmulticast mode [ 570.766264][T19175] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3209'. [ 570.768709][T18913] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 570.792890][T18913] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 571.050213][ C1] Dropped outbound packet type=88ca [ 571.102652][T18913] 8021q: adding VLAN 0 to HW filter on device bond0 [ 571.156103][T18913] 8021q: adding VLAN 0 to HW filter on device team0 [ 571.183996][T15123] bridge0: port 1(bridge_slave_0) entered blocking state [ 571.191251][T15123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 571.225680][T15123] bridge0: port 2(bridge_slave_1) entered blocking state [ 571.233144][T15123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 571.287613][T15123] IPVS: starting estimator thread 0... [ 571.335250][T19200] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3216'. [ 571.346057][T19199] unsupported nlmsg_type 40 [ 571.391666][T19197] IPVS: using max 29 ests per chain, 69600 per kthread [ 571.532037][T17889] Bluetooth: hci4: command tx timeout [ 571.616026][T19212] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 571.844258][T19217] tc action pedit offset 34448 out of bounds [ 571.852760][T19217] tc action pedit offset 34448 out of bounds [ 571.858811][T19217] tc action pedit offset 34448 out of bounds [ 571.864950][T19217] tc action pedit offset 34448 out of bounds [ 571.871030][T19217] tc action pedit offset 34448 out of bounds [ 571.877073][T19217] tc action pedit offset 34448 out of bounds [ 571.883177][T19217] tc action pedit offset 34448 out of bounds [ 571.889212][T19217] tc action pedit offset 34448 out of bounds [ 571.895331][T19217] tc action pedit offset 34448 out of bounds [ 571.901424][T19217] tc action pedit offset 34448 out of bounds [ 571.907469][T19217] 0: reclassify loop, rule prio 0, protocol 800 [ 572.025184][T19222] syzkaller1: entered allmulticast mode [ 572.090448][ C1] Dropped outbound packet type=88ca [ 572.270908][T19235] syzkaller1: entered promiscuous mode [ 572.301591][T19235] syzkaller1: entered allmulticast mode [ 572.364291][T18913] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 572.638519][T18913] veth0_vlan: entered promiscuous mode [ 572.683999][T18913] veth1_vlan: entered promiscuous mode [ 572.692087][T19252] __nla_validate_parse: 1 callbacks suppressed [ 572.692106][T19252] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3231'. [ 572.778805][T19259] bond11 (unregistering): Released all slaves [ 572.834999][T19252] veth1_vlan: left promiscuous mode [ 572.840721][T19252] veth1_vlan: entered promiscuous mode [ 572.846280][T19252] veth1_vlan: entered allmulticast mode [ 572.997581][T19268] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 573.017365][T18913] veth0_macvtap: entered promiscuous mode [ 573.079782][T18913] veth1_macvtap: entered promiscuous mode [ 573.130464][ C1] Dropped outbound packet type=88ca [ 573.195233][T19275] syzkaller1: entered allmulticast mode [ 573.252452][T19280] netlink: zone id is out of range [ 573.284361][T19280] netlink: zone id is out of range [ 573.292208][T19280] netlink: zone id is out of range [ 573.300869][T19280] netlink: zone id is out of range [ 573.306369][T19280] netlink: zone id is out of range [ 573.321625][T19280] netlink: zone id is out of range [ 573.333591][T19280] netlink: zone id is out of range [ 573.359265][T19280] netlink: zone id is out of range [ 573.388423][T19280] netlink: zone id is out of range [ 573.401373][T18913] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 573.461142][T18913] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 573.555455][T15124] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.602132][T15123] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.639843][T15123] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.681476][T15123] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.977308][T19303] netlink: 9 bytes leftover after parsing attributes in process `syz.1.3244'. [ 574.002575][T19303] 1·: renamed from c0· [ 574.019670][T19303] 1·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 574.031652][T19303] 1·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 574.047570][T19303] 1·: entered allmulticast mode [ 574.052990][T19303] hsr_slave_0: entered allmulticast mode [ 574.058788][T19303] hsr_slave_1: entered allmulticast mode [ 574.078314][T15124] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 574.117333][T15124] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 574.170191][ C1] Dropped outbound packet type=88ca [ 574.222732][T19313] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3247'. [ 574.245957][T19313] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3247'. [ 574.278797][T19313] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3247'. [ 574.305095][T15123] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 574.316998][T19313] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3247'. [ 574.342265][T15123] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 574.807074][T19337] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 574.818711][T19334] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3141'. [ 574.861957][T19337] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3251'. [ 574.875969][T19338] syzkaller1: entered allmulticast mode [ 575.210403][ C1] Dropped outbound packet type=88ca [ 575.289319][T19057] udevd[19057]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 575.343097][T19354] x_tables: duplicate underflow at hook 4 [ 575.734265][ T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 575.755417][ T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 575.767592][ T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 575.783195][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 575.794871][ T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 576.250178][ C1] Dropped outbound packet type=88ca [ 577.290540][ C1] Dropped outbound packet type=88ca [ 577.850699][T17889] Bluetooth: hci1: command tx timeout [ 578.330201][ C1] Dropped outbound packet type=88ca [ 579.370185][ C1] Dropped outbound packet type=88ca [ 579.684193][ T5608] tipc: Disabling bearer [ 579.849750][T19376] tipc: Started in network mode [ 579.868203][T19376] tipc: Node identity , cluster identity 4711 [ 579.923242][T19376] tipc: Failed to set node id, please configure manually [ 579.930869][T19376] tipc: Enabling of bearer rejected, failed to enable media [ 579.944137][T17889] Bluetooth: hci1: command tx timeout [ 580.087981][T19386] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3262'. [ 580.115995][T19386] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3262'. [ 580.331459][T19402] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 580.367323][T19406] ref_ctr_offset mismatch. inode: 0x82 offset: 0x0 ref_ctr_offset(old): 0x300000006 ref_ctr_offset(new): 0x0 [ 580.410169][ C1] Dropped outbound packet type=88ca [ 580.470791][T19408] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3266'. [ 580.611936][T19362] xfrm0 speed is unknown, defaulting to 1000 [ 580.628746][T19417] netlink: 'syz.2.3268': attribute type 1 has an invalid length. [ 580.751174][T19417] bond1: option mode: invalid value (8) [ 580.799768][T19417] bond1 (unregistering): Released all slaves [ 580.972852][T19429] : renamed from dummy0 [ 581.109625][T19438] No such timeout policy "syz1" [ 581.117474][T19439] No such timeout policy "syz1" [ 581.259037][T19445] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3274'. [ 581.305157][T19447] bridge3: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 581.450170][ C1] Dropped outbound packet type=88ca [ 581.671432][T19464] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3280'. [ 581.708620][T19464] 8021q: VLANs not supported on vxcan0 [ 582.011990][T17889] Bluetooth: hci1: command tx timeout [ 582.051423][T19362] bridge0: port 1(bridge_slave_0) entered blocking state [ 582.058821][T19362] bridge0: port 1(bridge_slave_0) entered disabled state [ 582.066650][T19362] bridge_slave_0: entered allmulticast mode [ 582.077337][T19362] bridge_slave_0: entered promiscuous mode [ 582.086906][T19362] bridge0: port 2(bridge_slave_1) entered blocking state [ 582.095456][T19362] bridge0: port 2(bridge_slave_1) entered disabled state [ 582.104560][T19362] bridge_slave_1: entered allmulticast mode [ 582.136412][T19362] bridge_slave_1: entered promiscuous mode [ 582.296964][T19362] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 582.312502][T19362] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 582.425570][T19362] team0: Port device team_slave_0 added [ 582.436214][T19362] team0: Port device team_slave_1 added [ 582.490183][ C1] Dropped outbound packet type=88ca [ 582.548688][T19362] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 582.588662][T19362] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 582.657778][T19362] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 582.704618][T19362] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 582.725882][T19362] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 582.786124][T19362] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 582.842152][T19519] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3296'. [ 582.868106][T19522] netlink: 'syz.3.3297': attribute type 1 has an invalid length. [ 582.888159][T19516] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3294'. [ 582.921912][T19519] hsr_slave_1 (unregistering): left promiscuous mode [ 582.933394][T19524] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3297'. [ 582.946705][T19524] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3297'. [ 583.018763][T19522] bond1: entered promiscuous mode [ 583.026036][T19522] 8021q: adding VLAN 0 to HW filter on device bond1 [ 583.114154][T19527] bond1: (slave bridge4): making interface the new active one [ 583.127444][T19527] bridge4: entered promiscuous mode [ 583.157873][T19527] bond1: (slave bridge4): Enslaving as an active interface with an up link [ 583.197032][T19525] syzkaller0: entered promiscuous mode [ 583.203624][T19525] syzkaller0: entered allmulticast mode [ 583.259611][T19362] hsr_slave_0: entered promiscuous mode [ 583.273153][T19533] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3299'. [ 583.274013][T19362] hsr_slave_1: entered promiscuous mode [ 583.293504][T19362] debugfs: 'hsr0' already exists in 'hsr' [ 583.294473][T19533] nbd: must specify at least one socket [ 583.302810][T19362] Cannot create hsr debugfs directory [ 583.424862][T19536] netlink: 'syz.2.3299': attribute type 13 has an invalid length. [ 583.434466][T19536] netlink: 'syz.2.3299': attribute type 17 has an invalid length. [ 583.477143][T19533] syzkaller0: entered promiscuous mode [ 583.487965][T19533] syzkaller0: entered allmulticast mode [ 583.530181][ C1] Dropped outbound packet type=88ca [ 583.645177][T19554] netlink: 'syz.0.3304': attribute type 2 has an invalid length. [ 583.655160][T19554] netlink: 'syz.0.3304': attribute type 8 has an invalid length. [ 583.749656][T19536] 8021q: adding VLAN 0 to HW filter on device bond0 [ 583.763432][T19536] team0: left promiscuous mode [ 583.768527][T19536] team_slave_0: left promiscuous mode [ 583.777645][T19536] team_slave_1: left promiscuous mode [ 583.785476][T19536] team0: left allmulticast mode [ 583.809577][T19536] team_slave_0: left allmulticast mode [ 583.819547][T19536] team_slave_1: left allmulticast mode [ 584.092286][T17889] Bluetooth: hci1: command tx timeout [ 584.276967][T19536] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 584.528232][T19536] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 584.547998][T19536] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 584.558797][T19536] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 584.570162][ C1] Dropped outbound packet type=88ca [ 584.594306][T19536] veth1_vlan: left promiscuous mode [ 584.599757][T19536] veth1_vlan: left allmulticast mode [ 584.607149][T19536] veth0_vlan: left promiscuous mode [ 584.617580][T19536] veth0_vlan: entered promiscuous mode [ 584.627749][T19536] veth1_vlan: entered promiscuous mode [ 584.646044][T19536] veth1_macvtap: left promiscuous mode [ 584.655669][T19536] veth0_macvtap: left promiscuous mode [ 584.665486][T19536] veth0_macvtap: entered promiscuous mode [ 584.689206][T19536] veth1_macvtap: entered promiscuous mode [ 584.708229][T19536] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 584.723323][T19536] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 584.749187][T19536] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 584.772923][T19536] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 584.809210][T19536] mac80211_hwsim hwsim33 wlan0: entered promiscuous mode [ 584.821891][T19536] syzkaller0: left promiscuous mode [ 584.827212][T19536] syzkaller0: left allmulticast mode [ 584.846866][T19547] net_ratelimit: 6 callbacks suppressed [ 584.846883][T19547] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 584.892902][T15126] bridge0: port 1(bridge_slave_0) entered blocking state [ 584.901898][T15126] bridge0: port 1(bridge_slave_0) entered forwarding state [ 584.933612][T15126] bridge0: port 2(bridge_slave_1) entered blocking state [ 584.940985][T15126] bridge0: port 2(bridge_slave_1) entered forwarding state [ 585.072292][T19571] netlink: 'syz.3.3308': attribute type 1 has an invalid length. [ 585.098000][T19564] syzkaller1: entered allmulticast mode [ 585.325979][T19573] gretap1: entered allmulticast mode [ 585.336953][T19573] bond2: (slave gretap1): making interface the new active one [ 585.347730][T19573] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 585.591709][ T62] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.611374][ C1] Dropped outbound packet type=88ca [ 585.783320][ T62] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.174580][T19362] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.322384][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.506658][T19362] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.541671][T19619] syzkaller0: entered promiscuous mode [ 586.561881][T19619] syzkaller0: entered allmulticast mode [ 586.650155][ C1] Dropped outbound packet type=88ca [ 586.692868][T19362] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.714632][T19612] tipc: Started in network mode [ 586.719698][T19612] tipc: Node identity 72a5a83e6439, cluster identity 4711 [ 586.728366][T19612] tipc: Enabled bearer , priority 0 [ 586.744390][T19616] netlink: 'syz.0.3318': attribute type 10 has an invalid length. [ 586.770706][T19608] tipc: Resetting bearer [ 586.844380][T19608] tipc: Disabling bearer [ 586.921668][ T6272] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.041070][T19362] netdevsim netdevsim1 €Â (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.121816][T19639] xt_CT: You must specify a L4 protocol and not use inversions on it [ 587.447849][T19647] netlink: 'syz.2.3327': attribute type 1 has an invalid length. [ 587.534201][T19647] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 587.617851][T19655] __nla_validate_parse: 1 callbacks suppressed [ 587.617874][T19655] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3329'. [ 587.690146][ C1] Dropped outbound packet type=88ca [ 587.747125][T19659] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3330'. [ 587.875383][T19659] netlink: 'syz.2.3330': attribute type 5 has an invalid length. [ 587.905099][T19659] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3330'. [ 588.059403][T19668] nbd: must specify at least one socket [ 588.074900][T19362] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 588.096173][T19668] netlink: 'syz.4.3331': attribute type 2 has an invalid length. [ 588.115180][T19362] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 588.169724][T19362] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 588.202024][T19362] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 588.225228][T19362] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 588.251428][T19362] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 588.265314][T19362] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 588.275759][T19362] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 588.284352][T19662] syzkaller0: entered promiscuous mode [ 588.291101][T19662] syzkaller0: entered allmulticast mode [ 588.442703][T19362] 8021q: adding VLAN 0 to HW filter on device bond0 [ 588.477439][T19362] 8021q: adding VLAN 0 to HW filter on device team0 [ 588.506398][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 588.513747][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 588.540388][T15124] bridge0: port 2(bridge_slave_1) entered blocking state [ 588.547735][T15124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 588.730149][ C1] Dropped outbound packet type=88ca [ 589.467441][T19735] ip_tables: iptables: counters copy to user failed while replacing table [ 589.487287][T19736] xt_TPROXY: Can be used only with -p tcp or -p udp [ 589.505720][T19734] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3349'. [ 589.661826][T19729] syzkaller0: entered promiscuous mode [ 589.687908][T19729] syzkaller0: entered allmulticast mode [ 589.770210][ C1] Dropped outbound packet type=88ca [ 590.086679][T19751] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3354'. [ 590.203090][T19755] netlink: 'syz.0.3354': attribute type 1 has an invalid length. [ 590.317996][T19756] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3354'. [ 590.820706][ C1] Dropped outbound packet type=88ca [ 591.850216][ C1] Dropped outbound packet type=88ca [ 592.018075][ T1585] block nbd5: Possible stuck request ffff8880278d7000: control (read@0,4096B). Runtime 30 seconds [ 592.035465][T19763] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3356'. [ 592.901782][ C1] Dropped outbound packet type=88ca [ 593.849825][T19739] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 593.884692][T19753] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3354'. [ 593.912545][T19756] geneve0: entered promiscuous mode [ 593.912572][T19756] geneve0: entered allmulticast mode [ 593.930543][ C1] Dropped outbound packet type=88ca [ 593.998966][T19362] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 594.061089][T19742] xfrm0 speed is unknown, defaulting to 1000 [ 594.225948][T19362] veth0_vlan: entered promiscuous mode [ 594.284430][T19362] veth1_vlan: entered promiscuous mode [ 594.389618][T19362] veth0_macvtap: entered promiscuous mode [ 594.430904][T19362] veth1_macvtap: entered promiscuous mode [ 594.510560][T19783] ip6erspan0: entered allmulticast mode [ 594.587323][T19362] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 594.633993][T19362] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 594.749705][T19793] netlink: 564 bytes leftover after parsing attributes in process `syz.4.3365'. [ 594.762193][ T62] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.931392][T19800] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input6 [ 594.971258][ C1] Dropped outbound packet type=88ca [ 595.132787][ T62] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.173168][ T62] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.212351][T15123] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.526364][T15123] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 595.544574][T15123] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 595.667697][T19816] netlink: 'syz.3.3373': attribute type 21 has an invalid length. [ 595.710390][T19816] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3373'. [ 595.732997][T19814] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3373'. [ 595.779635][T19816] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3373'. [ 595.787007][T19817] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3374'. [ 595.809233][T19817] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3374'. [ 595.834422][T15123] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 595.864790][T15123] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 595.979577][T19817] block nbd0: reconnected socket [ 595.987300][T19817] nbd: socks must be embedded in a SOCK_ITEM attr [ 596.010813][ C1] Dropped outbound packet type=88ca [ 596.110083][T19821] [ 596.110383][T17889] block nbd0: Receive control failed (result -32) [ 596.112479][T19821] ====================================================== [ 596.112491][T19821] WARNING: possible circular locking dependency detected [ 596.112532][T19821] syzkaller #0 Not tainted [ 596.140397][T19821] ------------------------------------------------------ [ 596.147452][T19821] syz.4.3375/19821 is trying to acquire lock: [ 596.153806][T19821] ffffffff8ec8c680 (fs_reclaim){+.+.}-{0:0}, at: prepare_alloc_pages+0x15b/0x650 [ 596.163025][T19821] [ 596.163025][T19821] but task is already holding lock: [ 596.170430][T19821] ffffffff8ec66b20 (pcpu_alloc_mutex){+.+.}-{4:4}, at: pcpu_alloc_noprof+0x231/0x1900 [ 596.180279][T19821] [ 596.180279][T19821] which lock already depends on the new lock. [ 596.180279][T19821] [ 596.191008][T19821] [ 596.191008][T19821] the existing dependency chain (in reverse order) is: [ 596.200246][T19821] [ 596.200246][T19821] -> #7 (pcpu_alloc_mutex){+.+.}-{4:4}: [ 596.208215][T19821] __mutex_lock+0x19d/0x1550 [ 596.213556][T19821] pcpu_alloc_noprof+0x231/0x1900 [ 596.219160][T19821] smpcfd_prepare_cpu+0xf8/0x150 [ 596.224824][T19821] cpuhp_invoke_callback+0x434/0x810 [ 596.230738][T19821] _cpu_up+0x2ce/0x5b0 [ 596.235646][T19821] cpu_up+0x1d2/0x220 [ 596.239322][T19823] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3376'. [ 596.240242][T19821] cpuhp_bringup_mask+0xb2/0x1a0 [ 596.254714][T19821] cpuhp_bringup_cpus_parallel+0x109/0x120 [ 596.261101][T19821] bringup_nonboot_cpus+0x17/0x30 [ 596.266702][T19821] smp_init+0x32/0x110 [ 596.271504][T19821] kernel_init_freeable+0x27f/0x3e0 [ 596.277415][T19821] kernel_init+0x22/0x1d0 [ 596.282312][T19821] ret_from_fork+0x514/0xb70 [ 596.287763][T19821] ret_from_fork_asm+0x1a/0x30 [ 596.293170][T19821] [ 596.293170][T19821] -> #6 (cpu_hotplug_lock){++++}-{0:0}: [ 596.301115][T19821] cpus_read_lock+0x42/0x160 [ 596.306277][T19821] static_key_slow_inc+0x12/0x30 [ 596.311814][T19821] nbd_genl_reconfigure+0x1301/0x1e80 [ 596.317862][T19821] genl_family_rcv_msg_doit+0x233/0x340 [ 596.323963][T19821] genl_rcv_msg+0x614/0x7a0 [ 596.329042][T19821] netlink_rcv_skb+0x226/0x4a0 [ 596.334352][T19821] genl_rcv+0x28/0x40 [ 596.338892][T19821] netlink_unicast+0x7bd/0x940 [ 596.344337][T19821] netlink_sendmsg+0x813/0xb40 [ 596.349700][T19821] sock_sendmsg_nosec+0x13a/0x180 [ 596.355287][T19821] ____sys_sendmsg+0x54e/0x850 [ 596.360628][T19821] ___sys_sendmsg+0x2a5/0x360 [ 596.365980][T19821] __x64_sys_sendmsg+0x1b1/0x290 [ 596.371493][T19821] do_syscall_64+0x166/0x520 [ 596.376669][T19821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.383117][T19821] [ 596.383117][T19821] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 596.390891][T19821] __mutex_lock+0x19d/0x1550 [ 596.396079][T19821] nbd_queue_rq+0x373/0x1150 [ 596.401322][T19821] blk_mq_dispatch_rq_list+0x499/0x1990 [ 596.407523][T19821] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 596.414573][T19821] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 596.421221][T19821] blk_mq_run_work_fn+0x16c/0x300 [ 596.427408][T19821] process_scheduled_works+0xa88/0x14c0 [ 596.433540][T19821] worker_thread+0xa47/0xfb0 [ 596.438727][T19821] kthread+0x38b/0x480 [ 596.443459][T19821] ret_from_fork+0x514/0xb70 [ 596.448758][T19821] ret_from_fork_asm+0x1a/0x30 [ 596.454088][T19821] [ 596.454088][T19821] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 596.461735][T19821] __mutex_lock+0x19d/0x1550 [ 596.466904][T19821] nbd_queue_rq+0xc1/0x1150 [ 596.472071][T19821] blk_mq_dispatch_rq_list+0x499/0x1990 [ 596.478394][T19821] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 596.485307][T19821] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 596.492154][T19821] blk_mq_run_work_fn+0x16c/0x300 [ 596.497751][T19821] process_scheduled_works+0xa88/0x14c0 [ 596.503862][T19821] worker_thread+0xa47/0xfb0 [ 596.509271][T19821] kthread+0x38b/0x480 [ 596.513928][T19821] ret_from_fork+0x514/0xb70 [ 596.519093][T19821] ret_from_fork_asm+0x1a/0x30 [ 596.524424][T19821] [ 596.524424][T19821] -> #3 (set->srcu){.+.+}-{0:0}: [ 596.531580][T19821] __synchronize_srcu+0xc9/0x2f0 [ 596.537296][T19821] elevator_switch+0x1e8/0x7b0 [ 596.542861][T19821] elevator_change+0x2fa/0x480 [ 596.548289][T19821] elevator_set_default+0x375/0x440 [ 596.554065][T19821] blk_register_queue+0x3f3/0x4e0 [ 596.559767][T19821] __add_disk+0x6cb/0xe30 [ 596.564737][T19821] add_disk_fwnode+0x100/0x3a0 [ 596.570335][T19821] nbd_dev_add+0x733/0xb60 [ 596.575598][T19821] nbd_init+0x15f/0x1e0 [ 596.580701][T19821] do_one_initcall+0x250/0x870 [ 596.586042][T19821] do_initcall_level+0x10a/0x1a0 [ 596.591632][T19821] do_initcalls+0x59/0xa0 [ 596.596558][T19821] kernel_init_freeable+0x29d/0x3e0 [ 596.602637][T19821] kernel_init+0x22/0x1d0 [ 596.607532][T19821] ret_from_fork+0x514/0xb70 [ 596.613141][T19821] ret_from_fork_asm+0x1a/0x30 [ 596.618589][T19821] [ 596.618589][T19821] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 596.626794][T19821] __mutex_lock+0x19d/0x1550 [ 596.631952][T19821] elevator_change+0x1af/0x480 [ 596.637290][T19821] elevator_set_none+0xb5/0x140 [ 596.642725][T19821] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 596.649199][T19821] nbd_start_device+0x189/0xb30 [ 596.654715][T19821] nbd_genl_connect+0x1597/0x1c10 [ 596.660317][T19821] genl_family_rcv_msg_doit+0x233/0x340 [ 596.666456][T19821] genl_rcv_msg+0x614/0x7a0 [ 596.671541][T19821] netlink_rcv_skb+0x226/0x4a0 [ 596.676898][T19821] genl_rcv+0x28/0x40 [ 596.681436][T19821] netlink_unicast+0x7bd/0x940 [ 596.686759][T19821] netlink_sendmsg+0x813/0xb40 [ 596.692076][T19821] sock_sendmsg_nosec+0x13a/0x180 [ 596.698088][T19821] ____sys_sendmsg+0x54e/0x850 [ 596.703418][T19821] ___sys_sendmsg+0x2a5/0x360 [ 596.708652][T19821] __x64_sys_sendmsg+0x1b1/0x290 [ 596.714168][T19821] do_syscall_64+0x166/0x520 [ 596.719317][T19821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.725783][T19821] [ 596.725783][T19821] -> #1 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 596.734427][T19821] blk_alloc_queue+0x544/0x690 [ 596.739914][T19821] __blk_mq_alloc_disk+0x194/0x390 [ 596.745594][T19821] nbd_dev_add+0x494/0xb60 [ 596.750588][T19821] nbd_init+0x15f/0x1e0 [ 596.755399][T19821] do_one_initcall+0x250/0x870 [ 596.760763][T19821] do_initcall_level+0x10a/0x1a0 [ 596.766408][T19821] do_initcalls+0x59/0xa0 [ 596.771307][T19821] kernel_init_freeable+0x29d/0x3e0 [ 596.777073][T19821] kernel_init+0x22/0x1d0 [ 596.781979][T19821] ret_from_fork+0x514/0xb70 [ 596.787172][T19821] ret_from_fork_asm+0x1a/0x30 [ 596.792585][T19821] [ 596.792585][T19821] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 596.800097][T19821] __lock_acquire+0x1520/0x2cf0 [ 596.805529][T19821] lock_acquire+0x106/0x350 [ 596.810735][T19821] fs_reclaim_acquire+0x71/0x100 [ 596.816269][T19821] prepare_alloc_pages+0x15b/0x650 [ 596.821991][T19821] __alloc_frozen_pages_noprof+0x12f/0x380 [ 596.828370][T19821] __alloc_pages_noprof+0x10/0x100 [ 596.834045][T19821] pcpu_populate_chunk+0x181/0xb30 [ 596.839717][T19821] pcpu_alloc_noprof+0xbca/0x1900 [ 596.845297][T19821] xt_percpu_counter_alloc+0x145/0x1e0 [ 596.851493][T19821] translate_table+0x129a/0x1f80 [ 596.857067][T19821] do_ipt_set_ctl+0xa53/0xe20 [ 596.862398][T19821] nf_setsockopt+0x26f/0x290 [ 596.867642][T19821] smc_setsockopt+0x232/0xb00 [ 596.872953][T19821] do_sock_setsockopt+0x17c/0x1b0 [ 596.878550][T19821] __x64_sys_setsockopt+0x13d/0x1b0 [ 596.884311][T19821] do_syscall_64+0x166/0x520 [ 596.889456][T19821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.896244][T19821] [ 596.896244][T19821] other info that might help us debug this: [ 596.896244][T19821] [ 596.906566][T19821] Chain exists of: [ 596.906566][T19821] fs_reclaim --> cpu_hotplug_lock --> pcpu_alloc_mutex [ 596.906566][T19821] [ 596.919380][T19821] Possible unsafe locking scenario: [ 596.919380][T19821] [ 596.926867][T19821] CPU0 CPU1 [ 596.932618][T19821] ---- ---- [ 596.938019][T19821] lock(pcpu_alloc_mutex); [ 596.942556][T19821] lock(cpu_hotplug_lock); [ 596.949620][T19821] lock(pcpu_alloc_mutex); [ 596.956680][T19821] lock(fs_reclaim); [ 596.960788][T19821] [ 596.960788][T19821] *** DEADLOCK *** [ 596.960788][T19821] [ 596.969495][T19821] locks held by syz.4.3375/19821: 2, last CPU#1: [ 596.975869][T19821] #0: ffff88806830bda8 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_setsockopt+0x174/0xb00 [ 596.988550][T19821] #1: ffffffff8ec66b20 (pcpu_alloc_mutex){+.+.}-{4:4}, at: pcpu_alloc_noprof+0x231/0x1900 [ 596.998622][T19821] [ 596.998622][T19821] stack backtrace: [ 597.004543][T19821] CPU: 1 UID: 0 PID: 19821 Comm: syz.4.3375 Not tainted syzkaller #0 PREEMPT(full) [ 597.004566][T19821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 597.004577][T19821] Call Trace: [ 597.004587][T19821] [ 597.004597][T19821] dump_stack_lvl+0xe8/0x150 [ 597.004625][T19821] print_circular_bug+0x2e1/0x300 [ 597.004648][T19821] check_noncircular+0x12e/0x150 [ 597.004668][T19821] __lock_acquire+0x1520/0x2cf0 [ 597.004699][T19821] ? __lock_acquire+0x683/0x2cf0 [ 597.004727][T19821] ? prepare_alloc_pages+0x15b/0x650 [ 597.004750][T19821] lock_acquire+0x106/0x350 [ 597.004774][T19821] ? prepare_alloc_pages+0x15b/0x650 [ 597.004801][T19821] fs_reclaim_acquire+0x71/0x100 [ 597.004821][T19821] ? prepare_alloc_pages+0x15b/0x650 [ 597.004848][T19821] prepare_alloc_pages+0x15b/0x650 [ 597.004873][T19821] __alloc_frozen_pages_noprof+0x12f/0x380 [ 597.004899][T19821] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 597.004924][T19821] ? pcpu_chunk_refresh_hint+0x80a/0x950 [ 597.004950][T19821] __alloc_pages_noprof+0x10/0x100 [ 597.004973][T19821] pcpu_populate_chunk+0x181/0xb30 [ 597.004996][T19821] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 597.005074][T19821] pcpu_alloc_noprof+0xbca/0x1900 [ 597.005099][T19821] xt_percpu_counter_alloc+0x145/0x1e0 [ 597.005129][T19821] translate_table+0x129a/0x1f80 [ 597.005161][T19821] ? __pfx_translate_table+0x10/0x10 [ 597.005181][T19821] ? __might_fault+0xaf/0x130 [ 597.005199][T19821] ? __might_fault+0xaf/0x130 [ 597.005225][T19821] ? _copy_from_user+0x94/0xb0 [ 597.005245][T19821] do_ipt_set_ctl+0xa53/0xe20 [ 597.005269][T19821] ? rcu_is_watching+0x16/0xb0 [ 597.005286][T19821] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 597.005315][T19821] ? __mutex_unlock_slowpath+0x731/0x900 [ 597.005338][T19821] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 597.005360][T19821] ? __pfx___mutex_lock+0x10/0x10 [ 597.005384][T19821] nf_setsockopt+0x26f/0x290 [ 597.005409][T19821] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 597.005431][T19821] smc_setsockopt+0x232/0xb00 [ 597.005453][T19821] ? __pfx_smc_setsockopt+0x10/0x10 [ 597.005472][T19821] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 597.005489][T19821] ? __pfx_smc_setsockopt+0x10/0x10 [ 597.005507][T19821] do_sock_setsockopt+0x17c/0x1b0 [ 597.005535][T19821] __x64_sys_setsockopt+0x13d/0x1b0 [ 597.005562][T19821] do_syscall_64+0x166/0x520 [ 597.005582][T19821] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.005599][T19821] ? clear_bhb_loop+0x70/0xc0 [ 597.005619][T19821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.005637][T19821] RIP: 0033:0x7f0a37b9e0d9 [ 597.005654][T19821] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 597.005669][T19821] RSP: 002b:00007f0a389e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 597.005688][T19821] RAX: ffffffffffffffda RBX: 00007f0a37e25fa0 RCX: 00007f0a37b9e0d9 [ 597.005700][T19821] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 0000000000000009 [ 597.005711][T19821] RBP: 00007f0a37c35024 R08: 0000000000000498 R09: 0000000000000000 [ 597.005722][T19821] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 597.005733][T19821] R13: 00007f0a37e26038 R14: 00007f0a37e25fa0 R15: 00007ffd68731058 [ 597.005753][T19821] [ 597.330897][ C1] Dropped outbound packet type=88ca SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 597.399108][T19829] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3377'. [ 597.423118][T19829] veth1_to_team: entered promiscuous mode [ 597.551850][T19829] veth1_to_team: left promiscuous mode [ 597.593046][T15128] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 597.600037][T15128] mac80211_hwsim hwsim5 wlan1: left promiscuous mode [ 597.623984][T15128] bridge0: port 1(wlan1) entered disabled state [ 597.636506][T15128] pim6reg: left allmulticast mode [ 597.641849][T15128] pimreg: left allmulticast mode [ 597.947539][T15128] bond4 (unregistering): (slave geneve3): Releasing active interface [ 597.958769][T15128] bond2 (unregistering): (slave geneve2): Releasing active interface [ 597.985775][T15128] team0: Port device bridge0 removed [ 597.996933][T15128] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 598.008029][T15128] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 598.018070][T15128] bond0 (unregistering): Released all slaves [ 598.027605][T15128] bond1 (unregistering): Released all slaves [ 598.042348][T15128] bond2 (unregistering): Released all slaves [ 598.055966][T15128] bond3 (unregistering): (slave veth3): Releasing active interface [ 598.065238][T15128] bond3 (unregistering): Released all slaves [ 598.075610][T15128] bond4 (unregistering): Released all slaves [ 598.088559][T15128] bond5 (unregistering): Released all slaves [ 598.246596][T15128] D†'|o: left promiscuous mode [ 598.411729][ C1] Dropped outbound packet type=88ca [ 598.423915][T15128] tipc: Disabling bearer [ 598.461272][T15128] tipc: Left network mode [ 598.481890][T15128] IPVS: stopping backup sync thread 11246 ... [ 598.966222][T15128] hsr_slave_0: left promiscuous mode [ 598.973155][T15128] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 598.981006][T15128] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 598.989305][T15128] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 598.997572][T15128] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 599.008948][T15128] veth1_macvtap: left promiscuous mode [ 599.014936][T15128] veth0_macvtap: left promiscuous mode [ 599.020804][T15128] veth1_vlan: left promiscuous mode [ 599.026283][T15128] veth0_vlan: left promiscuous mode [ 599.249335][T15128] team0 (unregistering): Port device team_slave_1 removed [ 599.261723][T15128] team0 (unregistering): Port device team_slave_0 removed [ 599.327708][T15128] team0 (unregistering): Port device dummy0 removed [ 599.646041][T15128] IPVS: stop unused estimator thread 0... [ 599.728919][T15128] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.777293][T15128] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.824882][T15128] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.908059][T15128] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 600.008274][T15128] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 600.077705][T15128] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 600.128319][T15128] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 600.184779][T15128] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 600.341277][T15128] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 600.362339][ T5271] 8021q: adding VLAN 0 to HW filter on device eth1 [ 600.396987][T15128] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 600.450016][T15128] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 600.506806][T15128] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 600.596724][T15128] bridge_slave_1: left allmulticast mode [ 600.607742][T15128] bridge_slave_1: left promiscuous mode [ 600.613743][T15128] bridge0: port 2(bridge_slave_1) entered disabled state [ 600.623431][T15128] bridge_slave_0: left allmulticast mode [ 600.629208][T15128] bridge_slave_0: left promiscuous mode [ 600.637686][T15128] bridge0: port 1(bridge_slave_0) entered disabled state [ 600.647849][T15128] pim6reg99999999: left allmulticast mode [ 600.656893][T15128] bridge_slave_1: left allmulticast mode [ 600.662883][T15128] bridge_slave_1: left promiscuous mode [ 600.668697][T15128] bridge0: port 2(bridge_slave_1) entered disabled state [ 600.679864][T15128] bridge_slave_0: left allmulticast mode [ 600.691773][T15128] bridge0: port 1(bridge_slave_0) entered disabled state [ 600.710222][T15128] bridge_slave_1: left allmulticast mode [ 600.715971][T15128] bridge_slave_1: left promiscuous mode [ 600.722342][T15128] bridge0: port 2(bridge_slave_1) entered disabled state [ 600.739961][T15128] bridge_slave_0: left allmulticast mode [ 600.745938][T15128] bridge_slave_0: left promiscuous mode [ 600.751815][T15128] bridge0: port 1(bridge_slave_0) entered disabled state [ 600.896991][T15128] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 600.907760][T15128] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 600.918630][T15128] bond0 (unregistering): Released all slaves [ 600.928268][T15128] bond1 (unregistering): Released all slaves [ 600.965981][T15128] bond2 (unregistering): (slave gretap1): Releasing active interface [ 601.002147][T15128] bond1 (unregistering): (slave bridge4): Releasing backup interface [ 601.010727][T15128] bridge4 (unregistering): left promiscuous mode [ 601.026555][T15128] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 601.042815][T15128] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 601.053166][T15128] bond0 (unregistering): Released all slaves [ 601.067757][T15128] bond1 (unregistering): Released all slaves [ 601.078853][T15128] bond2 (unregistering): Released all slaves [ 601.127750][T15128] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 601.138801][T15128] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 601.149909][T15128] bond0 (unregistering): Released all slaves [ 601.159385][ T5271] 8021q: adding VLAN 0 to HW filter on device eth2 [ 601.279218][T15128] tipc: Left network mode [ 601.546585][ T5271] 8021q: adding VLAN 0 to HW filter on device eth3 [ 601.933481][ T5271] 8021q: adding VLAN 0 to HW filter on device eth4 [ 602.143853][T15128] hsr_slave_0: left promiscuous mode [ 602.149848][T15128] hsr_slave_1: left promiscuous mode [ 602.157277][T15128] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 602.164891][T15128] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 602.188696][T15128] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 602.197898][T15128] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 602.209169][T15128] hsr_slave_0: left promiscuous mode [ 602.221111][T15128] hsr_slave_1: left promiscuous mode [ 602.227504][T15128] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 602.236130][T15128] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 602.245056][T15128] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 602.255465][T15128] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 602.268271][T15128] hsr_slave_0: left promiscuous mode [ 602.274350][T15128] hsr_slave_1: left promiscuous mode [ 602.281248][T15128] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 602.288725][T15128] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 602.297384][T15128] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 602.305541][T15128] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 602.326756][T15128] veth1_macvtap: left promiscuous mode [ 602.332549][T15128] veth0_macvtap: left promiscuous mode [ 602.338487][T15128] veth1_vlan: left promiscuous mode [ 602.344652][T15128] veth0_vlan: left promiscuous mode [ 602.351248][T15128] veth1_macvtap: left promiscuous mode [ 602.356843][T15128] veth0_macvtap: left promiscuous mode [ 602.363267][T15128] veth1_vlan: left promiscuous mode [ 602.368685][T15128] veth0_vlan: left promiscuous mode [ 602.375460][T15128] veth1_macvtap: left promiscuous mode [ 602.382765][T15128] veth0_macvtap: left promiscuous mode [ 602.388407][T15128] veth1_vlan: left promiscuous mode [ 602.394017][T15128] veth0_vlan: left promiscuous mode [ 602.644316][T15128] team0 (unregistering): Port device team_slave_1 removed [ 602.656515][T15128] team0 (unregistering): Port device team_slave_0 removed [ 602.805999][T15128] team0 (unregistering): Port device team_slave_1 removed [ 602.818751][T15128] team0 (unregistering): Port device team_slave_0 removed [ 602.945655][T15128] team0 (unregistering): Port device team_slave_1 removed [ 602.964425][T15128] team0 (unregistering): Port device team_slave_0 removed [ 603.019507][ T5271] 8021q: adding VLAN 0 to HW filter on device eth5 [ 603.415965][ T5271] 8021q: adding VLAN 0 to HW filter on device eth6 [ 603.793152][ T5271] 8021q: adding VLAN 0 to HW filter on device eth7 [ 604.106140][ T5271] 8021q: adding VLAN 0 to HW filter on device eth8 [ 604.384656][ T5271] 8021q: adding VLAN 0 to HW filter on device eth9 [ 604.664693][ T5271] 8021q: adding VLAN 0 to HW filter on device eth11 [ 604.948316][ T5271] 8021q: adding VLAN 0 to HW filter on device eth10 [ 605.226420][ T5271] 8021q: adding VLAN 0 to HW filter on device eth12