last executing test programs: 26.385581891s ago: executing program 2 (id=3208): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}}, 0x0) write$tun(r0, &(0x7f0000001840)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x8, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0x28, 0x66, 0x0, 0xb, 0x6, 0x0, @rand_addr=0x64010101, @broadcast}, "3297e3ba0fa8a2e71bd9fe1a399b5110420b7046"}}, 0x36) 22.584164485s ago: executing program 2 (id=3215): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000002180)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00'}, 0x94) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet6(0xa, 0x6, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000000) r3 = socket(0x11, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) bind$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, 0x0, 0x20000081) sendmmsg$inet(r1, &(0x7f0000001140), 0x0, 0x40080) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r6, 0x5452, &(0x7f0000000300)=0xffffffffffffffff) r7 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f00000002c0)={0x40002001}) setsockopt$sock_int(r6, 0x1, 0x7, &(0x7f0000000180), 0x4) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000001080)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x81c}]}]}, 0x5c}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 22.272213081s ago: executing program 2 (id=3217): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, &(0x7f0000000180)=r2) write$cgroup_devices(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80d80400000000", @ANYRESDEC], 0xffdd) 19.708898135s ago: executing program 2 (id=3221): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r3, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000300)="d2ffdd934517f3e145f228e086dd", 0x0, 0xd5b4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c000000200025a72bbd7000fedbdf250a002004ff00800102000100080006000000000014000200000000000000000000000000000000011400110074"], 0x4c}, 0x1, 0x0, 0x0, 0x845}, 0x4000000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) preadv(r7, &(0x7f0000002880)=[{&(0x7f00000000c0)=""/91, 0x5b}], 0x1, 0xa2e1, 0xc) ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000000540)) r8 = openat$cgroup_procs(r6, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) preadv(r8, &(0x7f00000039c0)=[{&(0x7f0000000140)=""/142, 0x8e}], 0x1, 0x4, 0x3) sendfile(r7, r7, 0x0, 0x10001) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r4, &(0x7f0000000240)=[{&(0x7f00000003c0)="2e9bbd3507e03dd65193dfb6c575963f86dd606712e900320400000000000000eeeb", 0x22}, {&(0x7f0000000680)="17a8a7c41e58e8b6cdb8040db329c064116e4c4cbb04627d", 0x18}], 0x2) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x18, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000000000010000180100002020702500000000002020207b1af8ff00000000bfa10000000000000701000078ffffffb702000008000000b7030000000800008500000006000000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_KEY(r11, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x78, r12, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x4}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0x100}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}]}, 0x78}, 0x1, 0x0, 0x0, 0x8040}, 0x8000) 18.704797181s ago: executing program 2 (id=3227): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xffff}, {0xffff, 0xffff}, {0x2, 0x10}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x0, [0x2, 0x8, 0x3, 0x5, 0x2, 0x9, 0x2, 0xb, 0xc, 0xc, 0x1, 0x9, 0x9, 0xc, 0x1, 0x1], 0x1, [0x3, 0x8000, 0x3e63, 0x1, 0x466, 0x5, 0x7ff, 0x0, 0xaf, 0x9, 0x3, 0x9, 0x8e, 0xd4de, 0xb, 0x9], [0x2, 0x7, 0x6, 0x3ff, 0x101, 0x100, 0x5, 0xfffb, 0xfffb, 0x1000, 0x101, 0x81, 0x7fff, 0x4, 0x0, 0x7]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0x4}, {0xffff}, {0xfff3, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x6, 0x8, 0x8, 0x2, 0x0, 0x1, 0x8, 0xff, 0x10, 0x4], 0x3, [0xc, 0x101, 0x4, 0x2002, 0x1, 0x4, 0x6, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x27, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f00000002c0)="05031c00d3fc14e5fd004788031c", 0xe, 0x4, &(0x7f0000000140)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @multicast}, 0x14) r11 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r11, 0x0, 0x0, 0x48040, &(0x7f00000001c0)={0x11, 0x7, r8, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)=ANY=[], 0xa4}}, 0x40) syz_genetlink_get_family_id$devlink(&(0x7f0000001b00), 0xffffffffffffffff) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_SET(r12, 0x0, 0x0) socket(0x10, 0x3, 0x0) 3.356941656s ago: executing program 0 (id=3328): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000002180)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00'}, 0x94) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet6(0xa, 0x6, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000000) r3 = socket(0x11, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) bind$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, 0x0, 0x20000081) sendmmsg$inet(r1, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{0x0}, {0x0}], 0x2}}], 0x1, 0x40080) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r6, 0x5452, 0x0) r7 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f00000002c0)={0x40002001}) setsockopt$sock_int(r6, 0x1, 0x7, &(0x7f0000000180), 0x4) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000001080)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x81c}]}]}, 0x5c}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 3.354718362s ago: executing program 3 (id=3329): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000ac0)=@bpf_lsm={0x18, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1, 0xc}, @ldst={0x3, 0x0, 0x6, 0x0, 0x0, 0x80}]}, &(0x7f0000000100)='GPL\x00', 0x8}, 0x94) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000680)={'dummy0\x00', &(0x7f0000000640)=@ethtool_sfeatures}) unshare(0x50000000) syz_emit_ethernet(0x72, &(0x7f0000000740)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1c}, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f57a14", 0x38, 0x3a, 0xff, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "508359", 0xfffd, 0x3a, 0x0, @private1, @mcast1, [@hopopts={0x73}]}}}}}}}, 0x0) 3.206953616s ago: executing program 4 (id=3331): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000017c0)={0x1f, 0x8, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xa8}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x48) 3.093475046s ago: executing program 3 (id=3332): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4000, 0x8004}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x38}}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x50}}, 0x2000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x3a}, @jmp={0x5, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffe88}], &(0x7f00000005c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0xa1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000028000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) accept4$llc(r2, 0x0, 0x0, 0x80000) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4000, 0x8004}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x38}}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x50}}, 0x2000000) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x3a}, @jmp={0x5, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffe88}], &(0x7f00000005c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0xa1) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000028000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) accept4$llc(r2, 0x0, 0x0, 0x80000) (async) 3.045892765s ago: executing program 4 (id=3333): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000002180)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00'}, 0x94) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet6(0xa, 0x6, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000000) r3 = socket(0x11, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) bind$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, 0x0, 0x20000081) sendmmsg$inet(r1, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{0x0}], 0x1}}], 0x1, 0x40080) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r6, 0x5452, &(0x7f0000000300)=0xffffffffffffffff) r7 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f00000002c0)={0x40002001}) setsockopt$sock_int(r6, 0x1, 0x7, &(0x7f0000000180), 0x4) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000001080)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x81c}]}]}, 0x5c}}, 0x0) 2.876627106s ago: executing program 0 (id=3334): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'vxcan0\x00', 0x0}) r1 = socket$kcm(0x2, 0x3, 0x2) socket$l2tp(0x2, 0x2, 0x73) sendmsg$inet(r1, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}], 0x20}, 0x4008804) sendmsg$kcm(r1, &(0x7f0000000480)={&(0x7f0000002140)=@l2tp={0x2, 0x0, @remote, 0xfffffffe}, 0x80, &(0x7f0000002240)=[{&(0x7f0000000c40)="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", 0x3f3}, {&(0x7f0000002b40)="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", 0x1c0}, {&(0x7f0000000200)="f2", 0x1}], 0x3}, 0x8400) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x70bd26, 0x25dffbfb, {0x0, 0x0, 0x0, 0x0, 0x155a, 0x4c901}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ACTIVE_SLAVE={0x8}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x24048044) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001006c4789ec390bca4900000000", @ANYRES32=0x0, @ANYBLOB="211000000300000008001b0000000000080004000180"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x40084) sendmsg$inet(r1, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000640)="a1", 0x1}], 0x1}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff0100000000000000000000000000010c000280"], 0xe4}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x84, 0x84, 0x5, [@enum={0x6, 0x3, 0x0, 0x6, 0x4, [{0xb, 0x8}, {0x6, 0x2}, {0x8}]}, @const={0x9, 0x0, 0x0, 0xa, 0x1}, @var={0xe, 0x0, 0x0, 0xe, 0x4, 0x1}, @enum={0x8, 0x1, 0x0, 0x6, 0x4, [{0xd, 0x6}]}, @enum64={0xd, 0x2, 0x0, 0x13, 0x0, 0x1, [{0x8, 0x8, 0x2}, {0x1, 0x9, 0xe}]}, @type_tag={0xb, 0x0, 0x0, 0x12, 0x2}]}, {0x0, [0x5f, 0x30, 0x0]}}, &(0x7f0000000340)=""/139, 0xa1, 0x8b, 0x1, 0x59f6, 0x10000}, 0x28) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0xc8}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @map_fd={0x18, 0x8}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x3}, @alu={0x4, 0x1, 0x2, 0x5, 0x5, 0xfffffffffffffff0, 0xfffffffffffffffc}, @ldst={0x0, 0x0, 0x1, 0x8, 0x2, 0xfffffffffffffffc, 0x4}]}, &(0x7f0000000100)='syzkaller\x00', 0xd, 0x27, &(0x7f0000000000)=""/39, 0x40f00, 0x2, '\x00', r0, 0x1f, r5, 0x8, &(0x7f0000000440)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000480)={0x5, 0x1, 0x7}, 0x10, 0x3053c, 0xffffffffffffffff, 0x3, 0x0, &(0x7f00000004c0)=[{0x3, 0x4, 0xf, 0x6}, {0x5, 0x1, 0x5, 0x4}, {0x4, 0x3, 0x8008, 0x8}], 0x10, 0x7}, 0x94) 2.797119633s ago: executing program 1 (id=3335): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000000c0), 0x33) sendmsg$can_bcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x5, 0x410, 0x0, {}, {0x77359400}, {0x0, 0x0, 0x1}, 0x1, @can={{0x0, 0x0, 0x1}, 0x8, 0x2, 0x0, 0x0, "8d416cfa6fc2313e"}}, 0x48}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, &(0x7f00000002c0)) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x24, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x42, 0x2021}, [@IFLA_PROP_LIST={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4c014) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) r3 = socket(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000001500)={0x28, 0x0, 0x2710, @host}, 0x10) ioctl$sock_SIOCOUTQ(r6, 0x5411, &(0x7f0000000000)) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r8, {0x0, 0xffe0}, {}, {0xa}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) r11 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r11, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r11, &(0x7f0000002c40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000029c0)=""/238, 0xee}, 0xb1fb}], 0x1, 0x10022, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r11, 0x8983, &(0x7f0000001080)) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r12, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x2000000) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000080)=0x8, 0x4) getsockopt$bt_hci(r2, 0x84, 0x7f, &(0x7f0000000080)=""/4057, 0x0) 2.045081544s ago: executing program 4 (id=3336): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000001c0), &(0x7f0000000300)=0x63) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket(0x1, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xe, 0x4, &(0x7f0000000480)=ANY=[@ANYRES8=r1], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xd2, &(0x7f00000004c0)=""/210, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x5, 0x3}, 0x10}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES64=r1], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r2}, 0x20) bind$unix(r2, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000001680)=[{{&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) setsockopt$inet_int(r1, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000440)=ANY=[@ANYRESDEC=r0], 0x0, 0x5, 0x0, 0x0, 0x41100}, 0x94) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4014001}, 0x9590f6cc3ea35512) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) r8 = socket$inet(0xa, 0x801, 0x84) listen(r8, 0xfffffffd) sendmsg$TCPDIAG_GETSOCK(r7, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000002b40)=ANY=[@ANYBLOB="2df0c4c07b54ac52f183e08e1cca6415dfec4819effadb47ccf6eaa5761a5265bd3367ba610bfde0", @ANYRES32=r6, @ANYBLOB="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"], 0x54}, 0x1, 0x0, 0x0, 0x4008811}, 0x40000) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r9, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100fdffffff0000000001000000100007800c00018008000100", @ANYRES32=r11, @ANYBLOB="08000100000000000200ff7f0000001e00000000"], 0x38}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c00ea16", @ANYRES16=r10, @ANYBLOB="010027bd7000ffdbdf25020000000800010000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x51}, 0x4000810) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd24, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008040) r12 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r12, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) 2.018972108s ago: executing program 3 (id=3337): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000100)) r1 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000040)={'pim6reg1\x00', 0x4}) socket$inet_icmp(0x2, 0x2, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) unshare(0x20000400) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b000000000000000000000000a8800000000000b82ff6f451cfbc09ba0021a3df30fc379d5fb74394d9d9f349a15cda06069a2a6fce3127d0ea63738bb7", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r4, 0x8914, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$DEVLINK_CMD_RATE_DEL(r4, &(0x7f0000000640)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x74, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x74}, 0x1, 0x0, 0x0, 0x14}, 0x8004) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000040)={'ip6tnl0\x00', &(0x7f0000000000)=@ethtool_cmd={0x1, 0x3, 0x1, 0x4, 0x18, 0xfe, 0x7, 0x3, 0x49, 0x1, 0x35, 0x3, 0xfffb, 0x8, 0x45, 0x0, [0x5, 0x40fe]}}) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x7, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000780)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)={0x24, 0x18, 0x107, 0x70bd25, 0x25dfdbfb, {0x6, 0x7c, 0x3f}, [@nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0xf4}]}, @typed={0x8, 0xb8, 0x0, 0x0, @ipv4=@multicast2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040895}, 0x20040010) 1.861752641s ago: executing program 0 (id=3338): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000131000010000000000000000000200000a20000000000a050000000000000000000100fffc0900010073797a300000000040000000030a010100000000001e0000010000000900030073797a310000000014000480080002400000000008000140000000030900010073797a300000000064000000060a01040000000000000000010000003c0004803800018007000100637400002c0002800800024000000008080001400000000008000140000000170500030000000000050003000100000008000b40000000000900010073797a30"], 0xec}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) 1.748084047s ago: executing program 1 (id=3339): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) getpid() ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) 1.724807912s ago: executing program 4 (id=3340): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) socket$netlink(0x10, 0x3, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000018) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310007000008000a40fffffffc14000000110001"], 0x64}}, 0x24000000) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0600000004000000040000000e"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xb, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000002080000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200000100"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2c00a800}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) sendmsg$unix(r5, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a6c000000090a010400000000000000000a0000040900020073797a310000000008000a40fffffffc0900010073797a3100000000080005400000000d2800128014000180090001006c61737400000000040100000000000000000100636f756e7465720008000340000001"], 0x94}, 0x1, 0x0, 0x0, 0x4044050}, 0x4000000) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), r1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x18, 0x8, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf3ffffff, 0x0, 0x0, 0x0, 0x80ffffff}, [@jmp={0x5, 0x0, 0x9, 0x0, 0x0, 0x2, 0x10}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2}, @map_val={0x18, 0x3, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x80000000}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) socket$unix(0x1, 0x1, 0x0) 1.457840705s ago: executing program 0 (id=3341): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000425bd7000fcdbdf040200010008003f0036000000080061"], 0x24}, 0x1, 0x0, 0x0, 0x4008001}, 0x20000000) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}}, 0x28}}, 0x1000000) 1.35195679s ago: executing program 3 (id=3342): r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='io.max\x00', 0x2, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r0, 0x80286722, &(0x7f00000000c0)={&(0x7f0000000040)=""/125, 0x7d, 0x8, 0xffff649b}) ioctl$FITHAW(r0, 0xc0045878) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)="68276307f3c6204285ae79c9d2eb8268865903c92b0ed8f2dbb75a8d2334766d8abbf8ac05b6682a8daa2d4e6df87dddb9e259085ee985b1841537119a8cb3115dd424a575225f43a83656aea71b1648666af3c447935f0affb732894aa902b1c01e602243a06b14af7a9cce723eb48c3258a5a774d70844dbea580d4224b3141748d30b0d18320754d7518feb516fb23dbdf73c98652146ee17fd60fd16276c8b35e9177ce83a9026e809f27b0fcb22e0972adfa7209ead46", 0xb9, 0x40801, &(0x7f00000001c0)={0x2, 0x4e22, @empty}, 0x10) r1 = accept$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @broadcast}, &(0x7f0000000240)=0x10) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r1, &(0x7f00000002c0)="b360ac730a41c26bab575199", 0xc, 0x20000011, &(0x7f0000000300)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, 0x6, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}}, 0x4004054) sendto(r1, &(0x7f0000000440)="345a0077de92e2c6c6ef99a0ddb7ad41c3577bf5b8724a9c72e105c267a100825e2fe4bb3378ebc94209b40d7b9f7a743cb61c9807fa64d6f38d5d89a4b132426a1d61c12d45d756e5b3841fbb3830646b0f1809ca89a10ba89b1825be227ed081cbe77604371fb224b793dc4daffcfc318d6913a223e7709977d5893641cc596a2b67253bba638359dbecc3f1c4bd16bd6755af6930bce080463bc2bae447f1b2ea4c", 0xa3, 0x4010, &(0x7f0000000500)=@in6={0xa, 0x4e23, 0x0, @local, 0x3}, 0x80) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), r3) connect$inet(r1, &(0x7f00000005c0)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r4 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000600), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000640)={[{0x2b, 'net'}, {0x2d, 'perf_event'}, {0x2d, 'perf_event'}, {0x2d, 'cpuacct'}]}, 0x26) sendmsg$IPCTNL_MSG_CT_GET_DYING(r2, &(0x7f0000000740)={&(0x7f0000000680), 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x6}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20040040}, 0x12) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r3) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000800)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r3, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x40, r5, 0x10, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x3}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x264f}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x3}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x8001) r7 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETMIFCNT_IN6(r7, 0x89e0, &(0x7f0000000900)={0xffffffffffffffff}) sendmsg$nl_generic(r3, &(0x7f0000000b00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000980)={0x10c, 0x18, 0x0, 0x70bd2d, 0x25dfdbfc, {0x1d}, [@typed={0xf0, 0x15a, 0x0, 0x0, @binary="e1746a4d3de89afd4bc25ee594886c7ac536db7abfdf67e5f6e9a8131669e5cb1739c95a10ff18168d8afea565126be93425fc4f7c779856529f7c1785bfa12a85420cfe012bdabcf761b2747a164d34744a6539ab993d42041b0417b4360eb067883dcda98fa84ab942801887c6892f8461d1b51a3d3ac0aad6fe01300c03379fc6a30b8824485cb8bfd7f7b831a15e30b4fb2d9b3686a6d537e8fe576f2ab5a5ae89e143f24004eaa409798aea06da9c12ad74bac425676bcf51810ba0d87496b8e0f5596c279a963e2cc4c27bfa825d8b29e2ebe1f8abc7ec60e75c3c6d8d82fdfb0c2702cbd8b6d07e9b"}, @typed={0x8, 0xa, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x42}}]}, 0x10c}, 0x1, 0x0, 0x0, 0x40001}, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f0000000b40)) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r2, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x60, 0x2, 0x8, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8809}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0xa28}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xae25}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0xa2}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x9}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x80) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000d40)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r8, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x60, r9, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x826a}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}]}, 0x60}, 0x1, 0x0, 0x0, 0x24044040}, 0x811) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000ec0), r3) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f0000000f80)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x24, r11, 0x201, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x70000000}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20004082}, 0x80) 1.328635633s ago: executing program 0 (id=3343): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], 0x0, 0xfffffffd}, 0x94) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet6_int(r0, 0x29, 0x3a, 0x0, &(0x7f0000000340)) r1 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$MRT6(r1, 0x29, 0xce, 0x0, &(0x7f0000001440)) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0x68000000}, 0x0) r3 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e23, 0x9, @private1}}, 0xa0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x80fe) r4 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e21, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}}, 0xfcca, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x807e) r5 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e23, 0xfffffffc, @private0={0xfc, 0x0, '\x00', 0x1}}}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x80fe) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60020000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.200873558s ago: executing program 1 (id=3344): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x64, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x6a}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000000206050000000000000000000700bfff0c00078008000800000000400900020073797a32000000000500040000000000050005000a000000050001000600000015000300686173683a69702c706f72742c6e657400000000ba23ed3a6359895f7d15772314280b22e94623bf8a1c989970439f8f3610dec573f583"], 0x5c}}, 0x80) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x54, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403, 0x0, 0x0, 0x10000}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @sit={{0x8}, {0x28, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0x80000000}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @dev}, @IFLA_IPTUN_6RD_PREFIX={0x14, 0xb, @mcast2}]}}}]}, 0x54}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x8, 0x8031, 0xffffffffffffffff, 0x67476000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) mmap(&(0x7f00005d5000/0x2000)=nil, 0x2000, 0x3, 0x28011, r6, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x1, 0xfff1}, {0xffff, 0xffff}, {0xb, 0xf}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3ff, 0x1, 0xfffffffc, 0x4, 0x0, 0xddb0, 0x4, 0xf2e, 0x8}}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x6, 0xa}, {0x1, 0xfff1}, {0x7, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4041080) write$cgroup_int(r4, &(0x7f0000000300), 0x12) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000042000100000000000000000003010000000063d82600010000010100005566778899aabb0800450000140000000001ea0000010203040506070800000c00020006000600894f00000c0003"], 0x58}}, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r11) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)={0x20, r12, 0x607, 0x4, 0xfffffffd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004005}, 0xc000) sendmsg$IEEE802154_ADD_IFACE(r10, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, r12, 0x0, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_MSG_GETSET(r0, &(0x7f00000002c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f00000004c0)={0xdc, 0xa, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_SET_EXPRESSIONS={0xb0, 0x12, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x10}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}}}, {0x38, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0xb}]}}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}]}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x29}]}, 0xdc}, 0x1, 0x0, 0x0, 0x40000c0}, 0x4040011) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x8b}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x5}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) 1.083963751s ago: executing program 4 (id=3345): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000002180)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00'}, 0x94) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet6(0xa, 0x6, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000000) r3 = socket(0x11, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) bind$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, 0x0, 0x20000081) sendmmsg$inet(r1, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{0x0}], 0x1}}], 0x1, 0x40080) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r6, 0x5452, &(0x7f0000000300)=0xffffffffffffffff) r7 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f00000002c0)={0x40002001}) setsockopt$sock_int(r6, 0x1, 0x7, &(0x7f0000000180), 0x4) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000001080)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x81c}]}]}, 0x5c}}, 0x0) 1.083089518s ago: executing program 0 (id=3346): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket(0x11, 0x3, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt(r0, 0x107, 0xf, &(0x7f0000000140)="1b6dda5b", 0x4) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40eff, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, r4, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x2596, &(0x7f0000005100)=ANY=[], 0x0) pwrite64(r1, &(0x7f0000000000)="801ad0205a4686504ef5ba38150e0c5d18032e53f4f457d791aad49f361a68178861da6ea9d4eb45e35e76055a2fe6f6c9904f9fba84d21f53e99d3c6340b546c55bedfb99cd70aea245b2df7c9f9c4d65469f95d482614fb4b4c27710c1b3a6b3b5f03cc93cd013c4b25fad0c129bde314c9633d368c58c5eefcb3f03b6a173c1bec4c2b3607b676e5fd4", 0x8b, 0x3) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0x3c, &(0x7f0000000840)=ANY=[@ANYRESDEC=r1, @ANYRES64=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYRESOCT=r1], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000072"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x10, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000074f6967d00000000000000180100002020702500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000000000002500000006000000be91000000000000b502ecffffff00008500000005000000b70000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0xd, 0x4, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0xe}, 0x94) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$NFT_BATCH(r0, &(0x7f0000000600)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140008001000010000000000000000000200000a2c000000090a010400400000000000000a00000508000a4000000001100012800c090000000000000061741314676a7f9a000100000000ffff0000000100000a"], 0x54}, 0x1, 0x0, 0x0, 0x20008001}, 0x40080) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f00000003c0)=[@in6={0xa, 0x4e21, 0xb59, @private0={0xfc, 0x0, '\x00', 0x1}, 0xffff}]}, &(0x7f00000002c0)=0x10) getsockopt$IP_VS_SO_GET_DESTS(r8, 0x0, 0x484, &(0x7f00000008c0)=""/7, &(0x7f0000000800)=0x7) getsockopt$inet_sctp6_SCTP_MAX_BURST(r9, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000010c0)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r8, 0x84, 0xa, &(0x7f0000000000)={0xe4, 0x5, 0x3, 0x9, 0x10001, 0x5, 0x3, 0x9, r10}, &(0x7f0000000040)=0x20) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="4c04000002060500000000d0040ea1b29737b7c07aa0005d7787feeabace0e365ce48d8e24b100000000000000041a0003006269746d61703a69702c6d616300000005000000000000000900020073797a300000000005"], 0x4c}, 0x1, 0x0, 0x0, 0x8805}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 996.245302ms ago: executing program 2 (id=3233): sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x41) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$kcm(0x23, 0x5, 0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind(r2, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000000440)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003400220000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4", 0xc7}], 0x1}, 0x40880) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xa, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x541b, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) recvfrom$inet6(r4, 0x0, 0x0, 0x1, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000700)=ANY=[@ANYBLOB="280000005e00817b00000000000000b20c00fe0501f0ffffff0000800c000180080004"], 0x28}], 0x1, 0x0, 0x0, 0x40004}, 0x0) listen(r1, 0x3) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, 0x0, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x400002, 0xc, 0x1400}, 0x50) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="fc0000000301010200000000000000000a000004dc0002800c00028005000100840000002c00018014000300fe80000000000000000000000000002f14000400000000000000000000000000000000011400018008000100ac1e010108000200ac1414aa0c00028005000100060000001400018008000100ffffffff08000200000000001400018008000100ac1414bb080002000a0101022c00018014000300000000000000000000000000000000011400", @ANYRES16=r6], 0xfc}, 0x1, 0x0, 0x0, 0x4050}, 0x40080c0) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x80000a, 0x31, 0xffffffffffffffff, 0xd0fb8000) 834.08597ms ago: executing program 3 (id=3347): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x2, 0xd, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @printk={@ld={0x18, 0x0}, {}, {0x5, 0x1, 0xb, 0x1, 0x2, 0xffff}, {}, {0x5, 0x0, 0xb, 0x2, 0x0, 0x2}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffffffff}, {0x85, 0x0, 0x0, 0xae}}]}, &(0x7f0000000080)='syzkaller\x00', 0x9}, 0x94) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000040)={0x1, 0x4, 0x5, 0x3, @vifc_lcl_addr=@empty, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x54, 0x10, 0x401, 0x5, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503, 0x41}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0xe, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x308, {0x5, 0xb}}]}, @IFLA_VLAN_ID={0x6, 0x1, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000810}, 0x4000000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) getsockopt$TIPC_NODE_RECVQ_DEPTH(r3, 0x10f, 0x83, &(0x7f0000000080), &(0x7f00000000c0)=0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="ec0000002100010027bd7000fefffffffc020000000000000000000000000000fc020000000000000000000000000001dffc0000000000000a00e08000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffffffffff7f9c001100fe"], 0xec}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$sock_bt_hci(r0, 0x800448d2, &(0x7f0000000040)) bind$rds(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) 729.861481ms ago: executing program 4 (id=3348): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000000c0), 0x33) sendmsg$can_bcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x5, 0x410, 0x0, {}, {0x77359400}, {0x0, 0x0, 0x1}, 0x1, @can={{0x0, 0x0, 0x1}, 0x8, 0x2, 0x0, 0x0, "8d416cfa6fc2313e"}}, 0x48}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, &(0x7f00000002c0)) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x24, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x42, 0x2021}, [@IFLA_PROP_LIST={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4c014) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) r3 = socket(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000001500)={0x28, 0x0, 0x2710, @host}, 0x10) ioctl$sock_SIOCOUTQ(r6, 0x5411, &(0x7f0000000000)) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r8, {0x0, 0xffe0}, {}, {0xa}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) r11 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r11, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r11, &(0x7f0000002c40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000029c0)=""/238, 0xee}, 0xb1fb}], 0x1, 0x10022, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r11, 0x8983, &(0x7f0000001080)) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r12, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x2000000) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000080)=0x8, 0x4) getsockopt$bt_hci(r2, 0x84, 0x7f, &(0x7f0000000080)=""/4057, 0x0) 543.631031ms ago: executing program 1 (id=3349): openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0x50, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x59, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x12, &(0x7f0000000280)=@raw=[@exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x808d}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @call={0x85, 0x0, 0x0, 0x24}, @jmp={0x5, 0x0, 0xb, 0x3, 0x3, 0x20}, @map_idx_val={0x18, 0xa314402b9be21ff1, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6f5}], &(0x7f0000000340)='GPL\x00', 0xc, 0xec, &(0x7f00000005c0)=""/236, 0x0, 0x22, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x2, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, &(0x7f0000000780)=[{0x2, 0x4, 0x8, 0x7}, {0x2, 0x2, 0x4, 0x1}, {0x3, 0x4, 0x6, 0x9}, {0x1, 0x4, 0x8}, {0x1, 0x1, 0xd, 0xb}, {0x4, 0x5, 0x6, 0xa}, {0x1, 0x2, 0xd, 0xc}, {0x0, 0x3, 0x6, 0xb}, {0x2, 0x4, 0x0, 0x8}, {0x2, 0x5, 0x9, 0x9}], 0x10, 0x2}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x4, @void}, 0x10) syz_emit_ethernet(0xd81, &(0x7f0000000ec0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}, @void, {@mpls_mc={0x8848, {[], @ipv6=@generic={0x8, 0x6, "38f611", 0xd4b, 0x32, 0xff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @mcast2, {[], "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"}}}}}}, 0x0) 357.77258ms ago: executing program 1 (id=3350): openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x4, @void}, 0x10) syz_emit_ethernet(0xd81, &(0x7f0000000ec0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}, @void, {@mpls_mc={0x8848, {[], @ipv6=@generic={0x8, 0x6, "38f611", 0xd4b, 0x32, 0xff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @mcast2, {[], "8c791b9db5dbe81aa4493527a4963126e4149c3d1e1895393ceeedc9d7e1992bbf3d530732ba7bb27a4d842eaec6c4764e3ee95818b539b06bb7da1b5d29d71a5732e94420762f85de2c57b8c375cb86c00c57e08a3fad1e680ff25c9efcf6d1916937bb0c6e6a1420ba28e37d66157feaa6e85a6b17c7127fe4d9baf13c75124e6a937a2f552a678730caf2187a09566c5836ce27ef8f8259fbe893bc3c9d340c6a9090d1a31bbc3c5caa954ff998bf84543937982b5ee16305f43676f4a5cda42c54821c391d5745712d96f352668c873bfa10c0a9ab1340ad2c88790cdad487b802f52306f55859c39761b773efb67a25e3a0afe8bddc9412195a2acee1201ddf6ed17b2fd6eb9a687b3f31542b4b7632f73de71488d05fd66014797c9bf21b81a56f7e74a3d34ce99ec3e139d6e73b1dd47437bb7ee7886b1a9b32f0a3f4a14f0b7bb6766bfe143244985e1f18347be31ee78952c45574a6d07ae07c34701b118ed1f25f3df83588f1b65a28c4450af77047ea12d0082126c686124aa60591e68622418294323577cebe1f342757d810fb6c9df977d7805c730e3676ba36c314ec641662ef8f96bd2a0ee0cf757aa997ca1f7ed8e1ba0374b596c9fc16f0d32b78824b51689ee07a7a3bc023dba435cda020ce5763dd2f5454fa1c3e13ce9d63853128bc947766976082904b1c8a0eb042354ccc9c8c621476eec1f6c01230c89e299a2fc1a79234b0332c5bfe92b20e848d41b620769220a3bfe74e50b2f9adc6c94950c574dae8e5969a192b0b5c7ff934c7223e0ad2df63813f59b098f458e08b38a627a707259fb2a1fa2b382255ce4cb823172f0b9129b3c2833ba5ae9680d4c2716c689ea9cd741111a21985b74fadea87997ae62352c898f45384825effa20266c54b55a554754dd6c0f5437b3e9ed77b33ffe90f932ce8f64e7e89c1551be2cc7f5604d815378401fd7b431bf576a3c380579e8919c90ad6a007e3e152d78ee8ec02752c5833fddf7c0097bc86e3991363e782ba346c773635290fc948cf75f8bfea0ef9476d7526958026d331ac21b83fee734f2b1dbf2d8029f59f4113d96888d9e90caac5e75ab6446669003754f81124ad866a2627d228a2be0791a1c65f0e66e7c0b796114ddbd8edf3bd8773f464062206715fa375eeb3c35e751c3bbc7a97ce69411af42e102bbdd8f98f74f682bbb92080c981821b481791274a7c8f0eb29887d05a07edcfb1d8a5d468e84b41cb3effbe47f1ac04be9a2b27ce218d5ae56384e734026edb8ea256d3365e804e4db670408765f0ca62444ff7f514437a47322ea7f14c012ac961a7a8de6ea621f4fcd452f5b3b872188dd1ece7d6e1bbb5e08f3f73f1cf1babfe54283dea5ff10d293cb36b7da3e40de61ddec7662e45995f517953a09e8d0d3a0a35e5c9edd0404781087de3305c58951238470e1047d5ab9e5d0bed35a82ac1bfbfbfecbb238c4e9fa374c2fd4a896fdeeb4c88bd96f19f28c12b4902765e705e285ff92a3d3dbb3cbad3d5251c793b7224e643076bca9d838901abc0fffc630594c2e9d749ddac44580211b44140f35c0193bf359e14f06954ac257f14ce579c1e69009d05a1d23b46b7a9579fc85f9e6f1db8aec01bb4249659611cb7603e935feef060982cc5c705268db306d0e683e10cdc852755735623e2819129edb8139caf182c7385d85ce1697487a6d960e27b6b4fda0fc09eca49640756d2f8d0dc7ed66e6f5ba2d83258d76745539d0afdf62aa4afaa46b37eb100413d99278925bcb643992e2fa8f27e624aef1d16cf8f2617b24943d4185cb98c7fe0ab9f738a89dc0b8f68e65ec46768e28e3c8c0b13974ea8d9bd98b9a7d2a0533efee246f5c2855feca519acd49439627f2c8527b92e9e58b8154b3702a930f96aa5424d6c1f469f82f6df19c9a1492f2be9f59ca4196e2b72b133e9560a3f5dc7f8a7aaf494568bd05a4b9a5a907c7e4e22d3d6e93de5c80f03ed618ad2580585308dbb1d25e2111cb4e22225833ace4fd07bbfb3b09aab6bf8669607e1fa559edec4a8e01355025f41e176f320a4649dda407edf5d183f26de0b0ca9b7e95744397f7e344a64b791a64ec05c113b100b156c23f7aaa063c955bf27c0665a4543d4f5f4de3354aaf2fd61b7f40516f10ca0dd77811ad1fabee1615e50e3ca6374b97fbe776d94bed43d40a96a526c45f2f939715f715fbdc74548769d375937fe3a3ae0335181ad99e7e6d46c124f44374ce50025bd28b4a486046a252735d8ef8d66905c9ff78b28f95ccc3f808d6056c23a5585b42e57e758a17d77d58e7ed856aab45b6406294effffd28dcbcc3da751688696401c1321c2f9735c86da7ff5ac9332fe49360f054cbf291c5ea87d22fe6b00e00369ea7de75266ab272eface4c338154759972f548a4abee0af3ae97dfd221a973d28ba073314bcaa04524786b31dc9d485eb644c8b14753616041f70c981ded52031377ac5a7256b57357c86c530083e69b00fbf61a862ce6f40d4c13bb78d6ea10dad24770b7dad687a81bf958f1133132fe6d44babd40ba58510a4e19613ae3bd6fcd95dc0af3cf59c317eac916ef36e0ce19691e7bce759f9e8b9c4438d65ef63058e09a65866d538ddd5fd50abcdb01c2e2d42ef7e8887225f5065cf6b6745241cffc11b986ccff6e0bf636c5df61bfbebfcdb666e4dfb71cba6461be4ba90ddfe6e7b8a6a42e1e0b3b8a975d491c9f09b93b6fcd0895e859ab7ad44c609ca1ef245084c1d34c571223644bd82026a3ece05c011c07f4575ae4c3e8d89bc2a10c232831fbb52e67bba73f89c6b5fffea3e5ec0e8cdb461f94464b421a1a82106dba32293c1aab67e67184c8b543d0641fc85ace80f59084c228442b06b11d9206f8628d2168273c92ec11bb9b8b2cec6f1bb4be63d87e3a25825c77374e2b7059dd7950637429119d8b8acc4eac9f9a4e151b55391c2edf64d8840ec1c09099aa23d890dee129bbe3728190226b2b08e82db9978f6a9d5e5f2dbbd657248ed5bfa344327edbb3ebe7de74c5d4634a33277f10a57c0bf311f167456795373f1e86030743549e3d17b556f5449510cd57a6c6cdbb24b8f4725557208abd1b71d04490bda595f53e6ed8e7120a31ec5828c9e8811dc34160acaed55ebad18d4f7d8a4482da78f1957330b08f78443da1ebef0b22fbbfc6826b0f0d10c51f06d2132066df5f6a12b5c51441d97e4063519215ba795c469ac22989e5dd85a9b9acbae1071bc07aa8248b530e5cc5807c4b8f874e9d0d7b2b5bd6d471be32650e5eb78de34cff88031da2b391b438157face2b5228fc0a3c5d56a09a923a7baa0b0b311fa6f8eacee8f86a8d02b8491a85c9095a03e5fbdc5d63607f62dfa670d7c06db309e717165f2457a5985ace988578d43035d0172393305f635f7d600b720b901bc5b1b994b64b628dc315b57cb170e38f0228212c93ddca2529b2d1bf306fdaf87613341910c8250b42d2b47981c34b319beb58e1d676363df4308c1a63e99f8c6f93aa38f41cfb8a40b239a324d0d3d58fbe8be57a9b22d94124ec4ed4a81d2d6c3c9a0ede48da699a46e0e3ca6dccc5bd5ad6800fb0f718f1526dedc0541b6653e3b2f93f2d54cee30b6a5cf5d999b3e0837c76fff7e7016f63461421d57b3b08098c3a993177d13fb85e7650c029d79f1d9dbcf23b2e9ffd3cf53978f1a9ce74ccbdb4f2cbbdb8e72d9eb8a04cf7b6cc9f0833c7352aeecfc3136ae3a6389f82d60c7e502692318b2c88693faeb2190ee0149f0a017c7d6d1bcfb15f8b16abc54c1759c4bd190800145839f526fcf1c129438c72bc98eacebf31ce765c231108100643b85204e24e3be9947fcef2b691ef19ddef06caf0c8a8450d56edcd7f74b3d9042094e41d8a4186c0bd96519086c764696a13336fe0ca15ad951d411459c4f86fc6e5f0922d9a75e9145f148a092e78294603ae5c7236289800ceb6c8a016ba3a66ed4f6839a47123704ce293883017c9040a0aaaaa80243f44de7dd1d1880295de22f2fff8f3a72022e0d62d5ab405e4615a2248dd91b8cb9782c697dd95cec919537f3c37d1333a529a5d4154392659d78b5a0b9131b939845e6d7972c4498a7c8c6600ab27cae813ec2b12605a98c23bbd6dae14b17d7e54b87ce6e8f7705679254a87b0fe63ca8f7add3f97df8864a06547bb328bce63352646a3faabe83c84dd39aba317c9b7878fb6370703fc53a728c177c1e4acb154dd720cadb90578f246ac535b9740ca763b2df35f8be76c447008439afa4d08dc5da22742305c1aa4dc90f6859636d72e789c433c7ae19c4d811b1a450f59a658ff578aad3d4798e16b0ee12f26afba6b4c0042a3f8f880a0ad2b33a8c5bed51d0fc9423732691be5ff945b6ce433490028a3fd806d7d8d3100fc4414e5328bd8400e3269f4b2d43d4bc3bc9fbe857329645873f2a415ce7a007c609e95cf038e6e00b125073255873c4a3d16fb9ebf031e025dfcff4b3982638dd573f13bfcbd9f17232bec9531f3a38e9d666327ce3e7e900c0476b47291a7c547b4a627dcbc293951fc55847b306e2e3ed8d1446eb03ced0332f2efbf61afcc096ec682bd6db01f390d03724c7a395a5c944a5dec5016f670fcc2580f7a7eb4096f1b4890459cd6e34f76e5ac295d780867e324423fc94f734085bcced74dc76fb5b754bd334199a46332ce99ee426359463e93c9755bb5e979b71b269fbc6bd7997434069828cb75068d0d291594bab5853f867c7b6ea05019ab9bd32f196f75158281c866513cfdb288cd44732"}}}}}}, 0x0) 291.633562ms ago: executing program 3 (id=3351): openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x4, @void}, 0x10) syz_emit_ethernet(0xd81, &(0x7f0000000ec0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}, @void, {@mpls_mc={0x8848, {[], @ipv6=@generic={0x8, 0x6, "38f611", 0xd4b, 0x32, 0xff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @mcast2, {[], "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"}}}}}}, 0x0) (fail_nth: 1) 0s ago: executing program 1 (id=3352): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000680)='%pi6 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0x29, &(0x7f00000006c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYRES64=r2, @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000de9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000500)="b9ffe4306844ebe99b554e0fe9ad", 0x0, 0x4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000080)=@req3={0x5, 0x80000001, 0x7fffffff, 0x29fb, 0x6, 0x5, 0x1}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, &(0x7f0000000140)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r7 = socket$inet6_icmp(0xa, 0x2, 0x3a) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4e23, 0x10000, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}, 0x1}, 0x1c) unshare(0x68040200) kernel console output (not intermixed with test programs): 680][ T86] bond3: (slave gretap1): failed to get link speed/duplex [ 395.255895][ T6264] bond3: (slave gretap1): failed to get link speed/duplex [ 395.362009][ T86] bond3: (slave gretap1): failed to get link speed/duplex [ 395.472557][ T6272] bond3: (slave gretap1): failed to get link speed/duplex [ 395.497081][T14413] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2466'. [ 395.585619][ T86] bond3: (slave gretap1): failed to get link speed/duplex [ 395.694166][ T6256] bond3: (slave gretap1): failed to get link speed/duplex [ 395.729076][T14417] IPVS: set_ctl: invalid protocol: 12 172.20.20.170:20001 [ 395.807132][ T6272] bond3: (slave gretap1): failed to get link speed/duplex [ 395.856537][T14430] netlink: 67 bytes leftover after parsing attributes in process `syz.4.2464'. [ 395.906326][ T1708] block nbd1: Possible stuck request ffff888027887000: control (read@0,1024B). Runtime 90 seconds [ 395.915208][ T6264] bond3: (slave gretap1): failed to get link speed/duplex [ 396.022459][ T6274] bond3: (slave gretap1): failed to get link speed/duplex [ 396.131863][ T6274] bond3: (slave gretap1): failed to get link speed/duplex [ 396.750866][T14450] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2473'. [ 396.858188][T14450] bond2: entered allmulticast mode [ 397.147526][T14462] sock: sock_timestamping_bind_phc: sock not bind to device [ 397.486154][T14473] FAULT_INJECTION: forcing a failure. [ 397.486154][T14473] name failslab, interval 1, probability 0, space 0, times 0 [ 397.486390][T14473] CPU: 1 UID: 0 PID: 14473 Comm: syz.1.2478 Not tainted syzkaller #0 PREEMPT(full) [ 397.486417][T14473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 397.486431][T14473] Call Trace: [ 397.486441][T14473] [ 397.486451][T14473] dump_stack_lvl+0xe8/0x150 [ 397.486488][T14473] should_fail_ex+0x410/0x560 [ 397.486623][T14473] should_failslab+0xa8/0x100 [ 397.486756][T14473] __kmalloc_cache_noprof+0xa3/0x600 [ 397.486850][T14473] ? bpf_trampoline_get+0xd8/0x450 [ 397.486922][T14473] ? bpf_trampoline_get+0xd8/0x450 [ 397.487008][T14473] bpf_trampoline_get+0xd8/0x450 [ 397.487080][T14473] ? __pfx_btf_id_cmp_func+0x10/0x10 [ 397.487155][T14473] check_attach_btf_id+0xefe/0x1a30 [ 397.487240][T14473] ? bpf_stack_liveness_init+0x29/0x90 [ 397.487301][T14473] ? trace_kmalloc+0x2a/0xf0 [ 397.487383][T14473] ? __pfx_check_attach_btf_id+0x10/0x10 [ 397.487445][T14473] ? bpf_stack_liveness_init+0x29/0x90 [ 397.487493][T14473] ? __kvmalloc_node_noprof+0x52f/0x820 [ 397.487552][T14473] ? 0xffffffffa040260c [ 397.487626][T14473] ? __asan_memset+0x22/0x50 [ 397.487712][T14473] bpf_check+0x252b/0x2e10 [ 397.487805][T14473] ? ktime_get_with_offset+0x93/0x2d0 [ 397.487886][T14473] ? __pfx_bpf_check+0x10/0x10 [ 397.487956][T14473] ? bpf_obj_name_cpy+0x194/0x1e0 [ 397.488062][T14473] bpf_prog_load+0x14d6/0x1c20 [ 397.488127][T14473] ? __pfx_bpf_prog_load+0x10/0x10 [ 397.488273][T14473] __sys_bpf+0xd0d/0xd90 [ 397.488360][T14473] ? __pfx___sys_bpf+0x10/0x10 [ 397.488456][T14473] ? __fget_files+0x2a/0x420 [ 397.488573][T14473] ? ksys_write+0x242/0x270 [ 397.488661][T14473] ? __pfx_ksys_write+0x10/0x10 [ 397.488751][T14473] __x64_sys_bpf+0xba/0xd0 [ 397.488817][T14473] do_syscall_64+0x166/0x520 [ 397.488901][T14473] ? trace_irq_disable+0x3b/0x140 [ 397.488958][T14473] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.489032][T14473] ? clear_bhb_loop+0x70/0xc0 [ 397.489101][T14473] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.489164][T14473] RIP: 0033:0x7fc82e79e159 [ 397.489219][T14473] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 397.489272][T14473] RSP: 002b:00007fc82f6c8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 397.489336][T14473] RAX: ffffffffffffffda RBX: 00007fc82ea25fa0 RCX: 00007fc82e79e159 [ 397.489381][T14473] RDX: 0000000000000094 RSI: 0000200000000500 RDI: 0000000000000005 [ 397.489430][T14473] RBP: 00007fc82f6c8090 R08: 0000000000000000 R09: 0000000000000000 [ 397.489473][T14473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 397.489526][T14473] R13: 00007fc82ea26038 R14: 00007fc82ea25fa0 R15: 00007ffcaf241508 [ 397.489629][T14473] [ 397.855288][T14477] tap0: tun_chr_ioctl cmd 1074025673 [ 397.997445][T14480] FAULT_INJECTION: forcing a failure. [ 397.997445][T14480] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 398.015234][T14480] CPU: 0 UID: 0 PID: 14480 Comm: syz.1.2479 Not tainted syzkaller #0 PREEMPT(full) [ 398.015266][T14480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 398.015281][T14480] Call Trace: [ 398.015291][T14480] [ 398.015301][T14480] dump_stack_lvl+0xe8/0x150 [ 398.015341][T14480] should_fail_ex+0x410/0x560 [ 398.015379][T14480] _copy_from_iter+0x1d3/0x1660 [ 398.015413][T14480] ? __alloc_skb+0x27a/0x7a0 [ 398.015447][T14480] ? __alloc_skb+0x27a/0x7a0 [ 398.015482][T14480] ? __alloc_skb+0x27a/0x7a0 [ 398.015514][T14480] ? __pfx__copy_from_iter+0x10/0x10 [ 398.015541][T14480] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 398.015568][T14480] ? __alloc_skb+0x27a/0x7a0 [ 398.015592][T14480] ? __alloc_skb+0x27a/0x7a0 [ 398.015622][T14480] ? netlink_sendmsg+0x650/0xb40 [ 398.015643][T14480] ? skb_put+0x112/0x210 [ 398.015672][T14480] netlink_sendmsg+0x6c0/0xb40 [ 398.015700][T14480] ? __pfx_netlink_sendmsg+0x10/0x10 [ 398.015728][T14480] ? apparmor_socket_sendmsg+0x98/0x360 [ 398.015761][T14480] ? __pfx_netlink_sendmsg+0x10/0x10 [ 398.015781][T14480] sock_sendmsg_nosec+0x13a/0x180 [ 398.015807][T14480] ____sys_sendmsg+0x54e/0x850 [ 398.015829][T14480] ? __pfx_____sys_sendmsg+0x10/0x10 [ 398.015854][T14480] ? import_iovec+0x73/0xa0 [ 398.015885][T14480] ___sys_sendmsg+0x2a5/0x360 [ 398.015902][T14480] ? __lock_acquire+0x6df/0x2e50 [ 398.015924][T14480] ? __pfx____sys_sendmsg+0x10/0x10 [ 398.015978][T14480] ? __fget_files+0x2a/0x420 [ 398.016001][T14480] ? __fget_files+0x3a2/0x420 [ 398.016033][T14480] __x64_sys_sendmsg+0x1b1/0x290 [ 398.016054][T14480] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 398.016089][T14480] do_syscall_64+0x166/0x520 [ 398.016113][T14480] ? trace_irq_disable+0x3b/0x140 [ 398.016131][T14480] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.016150][T14480] ? clear_bhb_loop+0x70/0xc0 [ 398.016173][T14480] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.016191][T14480] RIP: 0033:0x7fc82e79e159 [ 398.016208][T14480] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 398.016224][T14480] RSP: 002b:00007fc82f6c8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 398.016244][T14480] RAX: ffffffffffffffda RBX: 00007fc82ea25fa0 RCX: 00007fc82e79e159 [ 398.016258][T14480] RDX: 0000000000000080 RSI: 0000200000000140 RDI: 0000000000000003 [ 398.016270][T14480] RBP: 00007fc82f6c8090 R08: 0000000000000000 R09: 0000000000000000 [ 398.016282][T14480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 398.016293][T14480] R13: 00007fc82ea26038 R14: 00007fc82ea25fa0 R15: 00007ffcaf241508 [ 398.016321][T14480] [ 399.437669][T14503] netlink: 'syz.1.2488': attribute type 3 has an invalid length. [ 399.681114][T14511] netlink: 'syz.1.2491': attribute type 1 has an invalid length. [ 399.681153][T14511] netlink: 'syz.1.2491': attribute type 2 has an invalid length. [ 400.172729][ T6270] net_ratelimit: 31 callbacks suppressed [ 400.172793][ T6270] bond3: (slave gretap1): failed to get link speed/duplex [ 400.281939][ T6274] bond3: (slave gretap1): failed to get link speed/duplex [ 400.391983][ T6270] bond3: (slave gretap1): failed to get link speed/duplex [ 400.506795][ T6264] bond3: (slave gretap1): failed to get link speed/duplex [ 400.612516][ T6274] bond3: (slave gretap1): failed to get link speed/duplex [ 400.727141][ T6274] bond3: (slave gretap1): failed to get link speed/duplex [ 400.832567][ T6256] bond3: (slave gretap1): failed to get link speed/duplex [ 400.941568][ T6274] bond3: (slave gretap1): failed to get link speed/duplex [ 400.985024][T14531] netlink: 'syz.1.2499': attribute type 1 has an invalid length. [ 400.992974][T14531] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.2499'. [ 401.002484][T14531] netlink: 'syz.1.2499': attribute type 1 has an invalid length. [ 401.010864][T14531] netlink: 2016 bytes leftover after parsing attributes in process `syz.1.2499'. [ 401.025171][T14531] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2499'. [ 401.061883][ T6274] bond3: (slave gretap1): failed to get link speed/duplex [ 401.171176][ T6264] bond3: (slave gretap1): failed to get link speed/duplex [ 401.723457][T14547] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2504'. [ 402.302177][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 402.925371][T14570] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2507'. [ 403.093148][T14572] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2509'. [ 403.113096][T14572] bridge: RTM_NEWNEIGH with invalid ether address [ 403.437962][T14583] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2512'. [ 404.182495][T14596] block nbd3: not configured, cannot reconfigure [ 404.526134][T14607] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2515'. [ 404.526196][T14607] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2515'. [ 405.814873][T14630] tipc: Enabling of bearer rejected, failed to enable media [ 405.831025][ T6256] net_ratelimit: 34 callbacks suppressed [ 405.831080][ T6256] bond3: (slave gretap1): failed to get link speed/duplex [ 405.941159][ T6270] bond3: (slave gretap1): failed to get link speed/duplex [ 406.056061][ T6270] bond3: (slave gretap1): failed to get link speed/duplex [ 406.161074][ T6270] bond3: (slave gretap1): failed to get link speed/duplex [ 406.271275][ T6270] bond3: (slave gretap1): failed to get link speed/duplex [ 406.381700][ T6274] bond3: (slave gretap1): failed to get link speed/duplex [ 406.501069][ T6270] bond3: (slave gretap1): failed to get link speed/duplex [ 406.623540][ T6264] bond3: (slave gretap1): failed to get link speed/duplex [ 406.731939][ T6270] bond3: (slave gretap1): failed to get link speed/duplex [ 406.841145][ T6264] bond3: (slave gretap1): failed to get link speed/duplex [ 407.049579][T14656] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2532'. [ 407.079581][T14655] sock: sock_timestamping_bind_phc: sock not bind to device [ 407.377405][T14662] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2534'. [ 407.377449][T14662] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2534'. [ 407.466028][T14662] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2534'. [ 407.692082][T14662] team0: Port device team_slave_0 removed [ 408.188827][T14677] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2539'. [ 408.927890][T14688] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2544'. [ 409.278129][T14698] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2546'. [ 409.319093][T14698] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2546'. [ 410.119844][T14711] netlink: 'syz.0.2548': attribute type 1 has an invalid length. [ 410.269947][T14711] bond8: entered promiscuous mode [ 410.277452][T14711] 8021q: adding VLAN 0 to HW filter on device bond8 [ 410.376857][T14717] syzkaller0: entered promiscuous mode [ 410.377259][T14717] syzkaller0: entered allmulticast mode [ 410.619844][T14726] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2556'. [ 410.723473][T14727] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2555'. [ 410.851225][ T6274] net_ratelimit: 29 callbacks suppressed [ 410.851281][ T6274] bond3: (slave gretap1): failed to get link speed/duplex [ 410.971038][ T6270] bond3: (slave gretap1): failed to get link speed/duplex [ 411.453752][ T6264] bond3: (slave gretap1): failed to get link speed/duplex [ 411.561515][ T6269] bond3: (slave gretap1): failed to get link speed/duplex [ 411.671729][ T6274] bond3: (slave gretap1): failed to get link speed/duplex [ 411.792033][ T6272] bond3: (slave gretap1): failed to get link speed/duplex [ 411.904221][ T6264] bond3: (slave gretap1): failed to get link speed/duplex [ 412.011935][ T6272] bond3: (slave gretap1): failed to get link speed/duplex [ 412.121035][ T6274] bond3: (slave gretap1): failed to get link speed/duplex [ 412.135080][T14760] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2563'. [ 412.236295][ T6274] bond3: (slave gretap1): failed to get link speed/duplex [ 412.505032][T14771] syzkaller0: entered promiscuous mode [ 412.505076][T14771] syzkaller0: entered allmulticast mode [ 414.071717][T14793] netlink: 'syz.0.2574': attribute type 1 has an invalid length. [ 414.079748][T14793] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2574'. [ 414.845614][T14811] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2577'. [ 415.617166][T14843] syz_tun: tun_net_xmit 86 [ 415.721833][T14846] syzkaller0: entered promiscuous mode [ 415.727633][T14846] syzkaller0: entered allmulticast mode [ 416.215449][ T6274] net_ratelimit: 24 callbacks suppressed [ 416.215498][ T6274] bond3: (slave gretap1): failed to get link speed/duplex [ 416.445447][T14862] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2593'. [ 416.553977][T14866] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2592'. [ 416.581106][ T6274] bond3: (slave gretap1): failed to get link speed/duplex [ 416.621327][ C1] syz_tun: tun_net_xmit 86 [ 416.841329][ T6274] bond3: (slave gretap1): failed to get link speed/duplex [ 416.952065][ T6270] bond3: (slave gretap1): failed to get link speed/duplex [ 417.056520][T14865] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2594'. [ 417.082004][ T6270] bond3: (slave gretap1): failed to get link speed/duplex [ 417.127126][T14865] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 417.179642][T14865] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2594'. [ 417.192474][ T6264] bond3: (slave gretap1): failed to get link speed/duplex [ 417.301393][ T6270] bond3: (slave gretap1): failed to get link speed/duplex [ 417.408487][T14880] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2596'. [ 417.419456][ T6264] bond3: (slave gretap1): failed to get link speed/duplex [ 417.521614][ T6274] bond3: (slave gretap1): failed to get link speed/duplex [ 417.622920][T14888] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2602'. [ 417.661226][ C1] syz_tun: tun_net_xmit 86 [ 418.171318][T14907] syzkaller0: entered promiscuous mode [ 418.171363][T14907] syzkaller0: entered allmulticast mode [ 418.390776][T14916] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2609'. [ 418.817547][T14928] syz_tun: tun_net_xmit 86 [ 418.987409][T14932] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2614'. [ 419.781674][T14952] syzkaller0: entered promiscuous mode [ 419.782077][T14952] syzkaller0: entered allmulticast mode [ 419.826873][ C0] syz_tun: tun_net_xmit 86 [ 419.919527][T14955] netlink: 'syz.2.2619': attribute type 3 has an invalid length. [ 419.947313][T14955] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2619'. [ 419.947882][T14955] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2619'. [ 420.037929][T14966] FAULT_INJECTION: forcing a failure. [ 420.037929][T14966] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 420.052637][T14966] CPU: 0 UID: 0 PID: 14966 Comm: syz.1.2626 Not tainted syzkaller #0 PREEMPT(full) [ 420.052667][T14966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 420.052682][T14966] Call Trace: [ 420.052692][T14966] [ 420.052701][T14966] dump_stack_lvl+0xe8/0x150 [ 420.052740][T14966] should_fail_ex+0x410/0x560 [ 420.052777][T14966] _copy_to_user+0x31/0xb0 [ 420.052801][T14966] bpf_test_finish+0x52e/0x690 [ 420.052836][T14966] ? __pfx_bpf_test_finish+0x10/0x10 [ 420.052871][T14966] ? rep_movs_alternative+0x4a/0xa0 [ 420.052898][T14966] bpf_prog_test_run_xdp+0x8bc/0x11d0 [ 420.052942][T14966] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 420.052974][T14966] ? __fget_files+0x2a/0x420 [ 420.053008][T14966] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 420.053037][T14966] bpf_prog_test_run+0x2c5/0x340 [ 420.053069][T14966] __sys_bpf+0xa22/0xd90 [ 420.053103][T14966] ? __pfx___sys_bpf+0x10/0x10 [ 420.053139][T14966] ? __fget_files+0x2a/0x420 [ 420.053186][T14966] ? ksys_write+0x242/0x270 [ 420.053220][T14966] ? __pfx_ksys_write+0x10/0x10 [ 420.053258][T14966] __x64_sys_bpf+0xba/0xd0 [ 420.053284][T14966] do_syscall_64+0x166/0x520 [ 420.053313][T14966] ? trace_irq_disable+0x3b/0x140 [ 420.053335][T14966] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.053358][T14966] ? clear_bhb_loop+0x70/0xc0 [ 420.053387][T14966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.053410][T14966] RIP: 0033:0x7fc82e79e159 [ 420.053431][T14966] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 420.053460][T14966] RSP: 002b:00007fc82f6c8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 420.053485][T14966] RAX: ffffffffffffffda RBX: 00007fc82ea25fa0 RCX: 00007fc82e79e159 [ 420.053503][T14966] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 420.053518][T14966] RBP: 00007fc82f6c8090 R08: 0000000000000000 R09: 0000000000000000 [ 420.053533][T14966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 420.053548][T14966] R13: 00007fc82ea26038 R14: 00007fc82ea25fa0 R15: 00007ffcaf241508 [ 420.053583][T14966] [ 420.472304][T14970] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2627'. [ 420.662710][T14981] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2629'. [ 420.862802][ C0] syz_tun: tun_net_xmit 86 [ 421.612472][ T6269] net_ratelimit: 27 callbacks suppressed [ 421.612541][ T6269] bond3: (slave gretap1): failed to get link speed/duplex [ 421.721072][ T6269] bond3: (slave gretap1): failed to get link speed/duplex [ 421.818432][T15000] netlink: 'syz.2.2640': attribute type 2 has an invalid length. [ 421.841315][ T6270] bond3: (slave gretap1): failed to get link speed/duplex [ 421.939265][T15003] syzkaller0: entered promiscuous mode [ 421.945080][T15003] syzkaller0: entered allmulticast mode [ 421.997908][T15008] netlink: 'syz.4.2638': attribute type 3 has an invalid length. [ 422.007023][T15008] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2638'. [ 422.144529][ T86] bond3: (slave gretap1): failed to get link speed/duplex [ 422.171425][ C0] syz_tun: tun_net_xmit 58 [ 422.301200][ T6264] bond3: (slave gretap1): failed to get link speed/duplex [ 422.411284][ C0] syz_tun: tun_net_xmit 58 [ 422.440740][T15024] __nla_validate_parse: 1 callbacks suppressed [ 422.448841][T15024] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2643'. [ 422.458308][ T6264] bond3: (slave gretap1): failed to get link speed/duplex [ 422.561582][ T6264] bond3: (slave gretap1): failed to get link speed/duplex [ 422.671064][ T86] bond3: (slave gretap1): failed to get link speed/duplex [ 422.747132][T15031] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2645'. [ 422.782449][ T6264] bond3: (slave gretap1): failed to get link speed/duplex [ 422.946405][ T6264] bond3: (slave gretap1): failed to get link speed/duplex [ 423.063607][T15042] netlink: 75 bytes leftover after parsing attributes in process `syz.3.2648'. [ 423.185621][T15047] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2650'. [ 423.250110][T15048] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2648'. [ 423.429256][T15054] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2653'. [ 423.502270][T15055] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2652'. [ 423.741897][ T4932] Bluetooth: hci3: command 0x0405 tx timeout [ 423.926193][T15065] syzkaller0: entered promiscuous mode [ 423.934032][T15065] syzkaller0: entered allmulticast mode [ 424.031080][T15069] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2657'. [ 424.074448][T15072] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2659'. [ 424.098587][T15072] netlink: 'syz.3.2659': attribute type 8 has an invalid length. [ 424.234932][T15072] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2659'. [ 424.842492][T15101] netlink: 'syz.2.2668': attribute type 12 has an invalid length. [ 424.842535][T15101] netlink: 'syz.2.2668': attribute type 29 has an invalid length. [ 424.842599][T15101] netlink: 'syz.2.2668': attribute type 3 has an invalid length. [ 425.005911][T15106] syzkaller0: entered promiscuous mode [ 425.012775][T15106] syzkaller0: entered allmulticast mode [ 425.321247][T15117] netlink: 'syz.1.2672': attribute type 11 has an invalid length. [ 425.982275][ T1708] block nbd1: Possible stuck request ffff888027887000: control (read@0,1024B). Runtime 120 seconds [ 426.148571][T15138] syzkaller1: entered promiscuous mode [ 426.148615][T15138] syzkaller1: entered allmulticast mode [ 426.218583][T15140] syz_tun: entered promiscuous mode [ 426.224901][T15140] macvlan2: entered promiscuous mode [ 426.255137][T15140] syz_tun: left promiscuous mode [ 426.656381][T15155] net_ratelimit: 28 callbacks suppressed [ 426.659576][T15155] openvswitch: netlink: Actions may not be safe on all matching packets [ 426.683106][ T86] bond3: (slave gretap1): failed to get link speed/duplex [ 426.723870][T15155] IPVS: Unknown mcast interface: vcan0 [ 426.815253][ T6269] bond3: (slave gretap1): failed to get link speed/duplex [ 426.851147][T15159] syzkaller0: entered promiscuous mode [ 426.856804][T15159] syzkaller0: entered allmulticast mode [ 426.921780][ T6269] bond3: (slave gretap1): failed to get link speed/duplex [ 427.194577][ T6269] bond3: (slave gretap1): failed to get link speed/duplex [ 427.313986][ T6274] bond3: (slave gretap1): failed to get link speed/duplex [ 427.431826][ T6274] bond3: (slave gretap1): failed to get link speed/duplex [ 427.471577][T15172] __nla_validate_parse: 11 callbacks suppressed [ 427.472086][T15172] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2690'. [ 427.541295][ T6274] bond3: (slave gretap1): failed to get link speed/duplex [ 427.660691][ T6272] bond3: (slave gretap1): failed to get link speed/duplex [ 427.771237][ T6274] bond3: (slave gretap1): failed to get link speed/duplex [ 427.780671][T15182] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2693'. [ 427.820931][T15182] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2693'. [ 427.954480][T15192] sock: sock_timestamping_bind_phc: sock not bind to device [ 428.061164][T15193] syzkaller0: entered promiscuous mode [ 428.061202][T15193] syzkaller0: entered allmulticast mode [ 428.184436][T15198] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2701'. [ 428.875846][T15218] block nbd3: server does not support multiple connections per device. [ 428.888041][T15218] block nbd3: shutting down sockets [ 429.025326][T15224] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2711'. [ 429.038333][T15224] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2711'. [ 429.076474][T15225] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2709'. [ 429.289943][T15233] syzkaller0: entered promiscuous mode [ 429.300706][T15233] syzkaller0: entered allmulticast mode [ 429.675989][T15218] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 429.676036][T15218] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 429.724998][T15218] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 429.725041][T15218] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 429.773601][T15218] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 429.786112][T15218] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 429.818915][T15218] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 429.818956][T15218] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 429.988068][T15253] sock: sock_timestamping_bind_phc: sock not bind to device [ 430.177487][T15259] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2719'. [ 430.370509][T15264] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2723'. [ 430.388391][T15264] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2723'. [ 431.724338][ T6255] net_ratelimit: 30 callbacks suppressed [ 431.733676][ T6255] bond3: (slave gretap1): failed to get link speed/duplex [ 432.081640][ T6255] bond3: (slave gretap1): failed to get link speed/duplex [ 432.194246][ T6267] bond3: (slave gretap1): failed to get link speed/duplex [ 432.317742][ T6267] bond3: (slave gretap1): failed to get link speed/duplex [ 432.421045][ T6255] bond3: (slave gretap1): failed to get link speed/duplex [ 432.461113][T15337] sock: sock_timestamping_bind_phc: sock not bind to device [ 432.533551][ T6267] bond3: (slave gretap1): failed to get link speed/duplex [ 432.652350][ T6258] bond3: (slave gretap1): failed to get link speed/duplex [ 432.761004][ T6267] bond3: (slave gretap1): failed to get link speed/duplex [ 432.803560][T15347] __nla_validate_parse: 7 callbacks suppressed [ 432.805575][T15347] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2744'. [ 432.872582][ T6255] bond3: (slave gretap1): failed to get link speed/duplex [ 432.981105][ T6267] bond3: (slave gretap1): failed to get link speed/duplex [ 433.334238][T15368] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2751'. [ 433.356382][T15368] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2751'. [ 433.554054][T15379] xt_hashlimit: max too large, truncated to 1048576 [ 433.571264][T15379] xt_hashlimit: overflow, rate too high: 0 [ 433.598321][T15381] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2756'. [ 433.808796][T15387] syzkaller0: entered promiscuous mode [ 433.816588][T15387] syzkaller0: entered allmulticast mode [ 434.233859][T15408] sock: sock_timestamping_bind_phc: sock not bind to device [ 434.271460][T15409] FAULT_INJECTION: forcing a failure. [ 434.271460][T15409] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 434.272867][T15409] CPU: 1 UID: 0 PID: 15409 Comm: syz.2.2761 Not tainted syzkaller #0 PREEMPT(full) [ 434.272933][T15409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 434.272986][T15409] Call Trace: [ 434.273033][T15409] [ 434.273056][T15409] dump_stack_lvl+0xe8/0x150 [ 434.273143][T15409] should_fail_ex+0x410/0x560 [ 434.273237][T15409] _copy_from_user+0x2d/0xb0 [ 434.273295][T15409] bpf_test_init+0xd8/0x150 [ 434.273371][T15409] bpf_prog_test_run_xdp+0x4cc/0x11d0 [ 434.273506][T15409] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 434.273595][T15409] ? __fget_files+0x2a/0x420 [ 434.273694][T15409] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 434.273765][T15409] bpf_prog_test_run+0x2c5/0x340 [ 434.273846][T15409] __sys_bpf+0xa22/0xd90 [ 434.273930][T15409] ? __pfx___sys_bpf+0x10/0x10 [ 434.274022][T15409] ? __fget_files+0x2a/0x420 [ 434.274145][T15409] ? ksys_write+0x242/0x270 [ 434.274229][T15409] ? __pfx_ksys_write+0x10/0x10 [ 434.274320][T15409] __x64_sys_bpf+0xba/0xd0 [ 434.274389][T15409] do_syscall_64+0x166/0x520 [ 434.274464][T15409] ? trace_irq_disable+0x3b/0x140 [ 434.274556][T15409] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.274629][T15409] ? clear_bhb_loop+0x70/0xc0 [ 434.274704][T15409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.274766][T15409] RIP: 0033:0x7f201379e159 [ 434.274878][T15409] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 434.274945][T15409] RSP: 002b:00007f2014592028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 434.275010][T15409] RAX: ffffffffffffffda RBX: 00007f2013a25fa0 RCX: 00007f201379e159 [ 434.275062][T15409] RDX: 0000000000000050 RSI: 0000200000000340 RDI: 000000000000000a [ 434.275103][T15409] RBP: 00007f2014592090 R08: 0000000000000000 R09: 0000000000000000 [ 434.275131][T15409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 434.275172][T15409] R13: 00007f2013a26038 R14: 00007f2013a25fa0 R15: 00007ffd3c0baf58 [ 434.275267][T15409] [ 434.818827][T15423] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2766'. [ 434.849822][T15423] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2766'. [ 435.240308][T15438] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2768'. [ 435.473834][T15451] netlink: 'syz.3.2769': attribute type 11 has an invalid length. [ 435.473878][T15451] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2769'. [ 435.811839][T15457] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993 [ 436.077492][T15461] syzkaller0: entered promiscuous mode [ 436.081039][T15461] syzkaller0: entered allmulticast mode [ 436.306129][T15469] syzkaller1: entered promiscuous mode [ 436.309755][T15469] syzkaller1: entered allmulticast mode [ 436.345360][T15471] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2777'. [ 436.365532][T15471] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2777'. [ 437.073107][ T6267] net_ratelimit: 23 callbacks suppressed [ 437.073159][ T6267] bond3: (slave gretap1): failed to get link speed/duplex [ 437.181317][ T6269] bond3: (slave gretap1): failed to get link speed/duplex [ 437.194499][T15484] sock: sock_timestamping_bind_phc: sock not bind to device [ 437.291131][ T6269] bond3: (slave gretap1): failed to get link speed/duplex [ 437.631022][ T6258] bond3: (slave gretap1): failed to get link speed/duplex [ 437.741553][ T6255] bond3: (slave gretap1): failed to get link speed/duplex [ 437.851074][ T6255] bond3: (slave gretap1): failed to get link speed/duplex [ 437.910357][T15517] __nla_validate_parse: 1 callbacks suppressed [ 437.918247][T15517] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2788'. [ 437.929713][T15517] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2788'. [ 438.008861][ T6255] bond3: (slave gretap1): failed to get link speed/duplex [ 438.053847][T15519] syzkaller1: entered promiscuous mode [ 438.071883][T15519] syzkaller1: entered allmulticast mode [ 438.241374][T15203] bond3: (slave gretap1): failed to get link speed/duplex [ 438.354548][T15529] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2791'. [ 438.354685][ T6267] bond3: (slave gretap1): failed to get link speed/duplex [ 438.372239][T15529] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2791'. [ 438.461032][ T6267] bond3: (slave gretap1): failed to get link speed/duplex [ 438.541032][ T5811] page_pool_release_retry() stalled pool shutdown: id 185, 1 inflight 60 sec [ 438.672653][T15542] sock: sock_timestamping_bind_phc: sock not bind to device [ 439.448181][T15560] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2800'. [ 439.483986][T15560] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2800'. [ 439.626996][T15567] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2801'. [ 439.808654][T15575] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2803'. [ 439.843849][T15575] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2803'. [ 439.906457][T15572] syzkaller1: entered promiscuous mode [ 439.907332][T15572] syzkaller1: entered allmulticast mode [ 440.053662][ T5631] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 440.096358][ T5631] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 440.104091][ T5631] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 440.115870][ T5631] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 440.118473][ T5631] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 440.599519][ T5616] syz_tun (unregistering): left allmulticast mode [ 441.262368][T15617] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2812'. [ 441.287242][T15618] sock: sock_timestamping_bind_phc: sock not bind to device [ 441.608806][T15579] lo speed is unknown, defaulting to 1000 [ 441.717251][T15633] syzkaller1: entered promiscuous mode [ 441.723086][T15633] syzkaller1: entered allmulticast mode [ 442.141080][ T4932] Bluetooth: hci5: command tx timeout [ 442.281452][ T6267] net_ratelimit: 22 callbacks suppressed [ 442.281494][ T6267] bond3: (slave gretap1): failed to get link speed/duplex [ 442.337642][T15652] ip_tables: iptables: counters copy to user failed while replacing table [ 442.401631][ T6272] bond3: (slave gretap1): failed to get link speed/duplex [ 442.519631][ T6258] bond3: (slave gretap1): failed to get link speed/duplex [ 442.621769][ T6267] bond3: (slave gretap1): failed to get link speed/duplex [ 442.669386][T15658] lo speed is unknown, defaulting to 1000 [ 443.325436][ T6269] bond3: (slave gretap1): failed to get link speed/duplex [ 443.325719][T15676] syzkaller1: entered promiscuous mode [ 443.325764][T15676] syzkaller1: entered allmulticast mode [ 443.874090][T15695] sock: sock_timestamping_bind_phc: sock not bind to device [ 444.217812][T15705] __nla_validate_parse: 5 callbacks suppressed [ 444.222981][ T4932] Bluetooth: hci5: command tx timeout [ 444.233962][T15705] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2834'. [ 444.288589][T15579] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.296795][T15579] bridge0: port 1(bridge_slave_0) entered disabled state [ 444.307490][T15579] bridge_slave_0: entered allmulticast mode [ 444.329857][T15579] bridge_slave_0: entered promiscuous mode [ 444.344389][T15579] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.352393][T15579] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.359727][T15579] bridge_slave_1: entered allmulticast mode [ 444.368821][T15579] bridge_slave_1: entered promiscuous mode [ 444.486777][T15579] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 444.508526][T15579] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 444.622975][T15579] team0: Port device team_slave_0 added [ 444.644281][T15579] team0: Port device team_slave_1 added [ 444.719466][T15579] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 444.719502][T15579] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 444.719549][T15579] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 444.768340][T15579] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 444.768375][T15579] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 444.768425][T15579] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 444.951572][T15579] hsr_slave_0: entered promiscuous mode [ 444.960531][T15579] hsr_slave_1: entered promiscuous mode [ 444.968859][T15579] debugfs: 'hsr0' already exists in 'hsr' [ 444.977046][T15579] Cannot create hsr debugfs directory [ 445.065350][T15711] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2839'. [ 445.077896][T15711] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2839'. [ 445.123004][T15712] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2838'. [ 445.471202][ T6272] bond3: (slave gretap1): failed to get link speed/duplex [ 445.498868][T15720] syzkaller1: entered promiscuous mode [ 445.504731][T15720] syzkaller1: entered allmulticast mode [ 445.656345][T15733] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2844'. [ 445.982475][T15742] sock: sock_timestamping_bind_phc: sock not bind to device [ 446.302150][ T4932] Bluetooth: hci5: command tx timeout [ 446.329894][T15749] ip_tables: iptables: counters copy to user failed while replacing table [ 446.362098][ T6258] bond3: (slave gretap1): failed to get link speed/duplex [ 446.471115][ T6269] bond3: (slave gretap1): failed to get link speed/duplex [ 446.775806][T15758] syzkaller0: entered promiscuous mode [ 446.782196][T15758] syzkaller0: entered allmulticast mode [ 446.792547][T15764] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2851'. [ 446.885562][T15579] bond0: (slave netdevsim1): Releasing backup interface [ 447.316391][T15770] bond3: entered promiscuous mode [ 447.322959][T15770] bond3: entered allmulticast mode [ 447.330020][T15770] 8021q: adding VLAN 0 to HW filter on device bond3 [ 447.562827][T15203] net_ratelimit: 1 callbacks suppressed [ 447.562875][T15203] bond3: (slave gretap1): failed to get link speed/duplex [ 447.671310][ T6258] bond3: (slave gretap1): failed to get link speed/duplex [ 447.912674][T15203] bond3: (slave gretap1): failed to get link speed/duplex [ 448.040751][ T6269] bond3: (slave gretap1): failed to get link speed/duplex [ 448.095483][T15579] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 448.122779][T15579] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 448.132765][T15579] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 448.164399][T15579] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 448.173146][T15579] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 448.194830][T15579] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 448.227217][ T6255] bond3: (slave gretap1): failed to get link speed/duplex [ 448.381770][ T4932] Bluetooth: hci5: command tx timeout [ 448.423110][T15807] sock: sock_timestamping_bind_phc: sock not bind to device [ 448.897608][T15579] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 448.921746][T15579] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 449.052509][ T6258] bond3: (slave gretap1): failed to get link speed/duplex [ 449.181742][ T6258] bond3: (slave gretap1): failed to get link speed/duplex [ 449.331527][ T6255] bond3: (slave gretap1): failed to get link speed/duplex [ 449.420005][T15829] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2865'. [ 449.490369][T15826] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:65534 [ 449.513624][T15579] 8021q: adding VLAN 0 to HW filter on device bond0 [ 449.634593][T15826] tunl0: left promiscuous mode [ 449.639841][T15830] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2864'. [ 449.891998][ T6266] bond3: (slave gretap1): link status up again after 0 ms [ 449.921810][T15203] bond3: (slave gretap1): link status up again after 0 ms [ 450.096242][T15844] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2869'. [ 450.109070][T15579] 8021q: adding VLAN 0 to HW filter on device team0 [ 450.164590][ T6255] bridge0: port 1(bridge_slave_0) entered blocking state [ 450.164719][ T6255] bridge0: port 1(bridge_slave_0) entered forwarding state [ 450.228722][ T6269] bridge0: port 2(bridge_slave_1) entered blocking state [ 450.228876][ T6269] bridge0: port 2(bridge_slave_1) entered forwarding state [ 450.571699][T15847] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2879'. [ 450.614273][T15847] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2879'. [ 451.509160][T15869] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2874'. [ 451.529933][T15869] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2874'. [ 451.857164][T15876] tipc: Enabling of bearer rejected, failed to enable media [ 451.873885][T15879] syzkaller0: entered promiscuous mode [ 451.874872][T15879] syzkaller0: entered allmulticast mode [ 452.068231][T15579] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 452.134515][T15886] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2881'. [ 452.148604][T15886] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2881'. [ 452.566394][T15579] veth0_vlan: entered promiscuous mode [ 452.596154][T15579] veth1_vlan: entered promiscuous mode [ 452.616909][T15897] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2886'. [ 452.735596][T15579] veth0_macvtap: entered promiscuous mode [ 452.741721][T15898] sock: sock_timestamping_bind_phc: sock not bind to device [ 452.775040][T15579] veth1_macvtap: entered promiscuous mode [ 452.803335][T15579] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 452.875162][T15902] FAULT_INJECTION: forcing a failure. [ 452.875162][T15902] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 452.889417][T15902] CPU: 0 UID: 0 PID: 15902 Comm: syz.0.2888 Not tainted syzkaller #0 PREEMPT(full) [ 452.889448][T15902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 452.889463][T15902] Call Trace: [ 452.889472][T15902] [ 452.889483][T15902] dump_stack_lvl+0xe8/0x150 [ 452.889521][T15902] should_fail_ex+0x410/0x560 [ 452.889559][T15902] _copy_from_user+0x2d/0xb0 [ 452.889583][T15902] ___sys_recvmsg+0x173/0x5a0 [ 452.889614][T15902] ? __pfx____sys_recvmsg+0x10/0x10 [ 452.889644][T15902] ? lock_acquire+0x115/0x350 [ 452.889698][T15902] do_recvmmsg+0x31a/0x7f0 [ 452.889732][T15902] ? __pfx_do_recvmmsg+0x10/0x10 [ 452.889769][T15902] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 452.889803][T15902] ? __fget_files+0x3a2/0x420 [ 452.889849][T15902] __x64_sys_recvmmsg+0x198/0x250 [ 452.889895][T15902] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 452.889934][T15902] do_syscall_64+0x166/0x520 [ 452.889972][T15902] ? trace_irq_disable+0x3b/0x140 [ 452.890007][T15902] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.890032][T15902] ? clear_bhb_loop+0x70/0xc0 [ 452.890061][T15902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.890084][T15902] RIP: 0033:0x7ff502b9e159 [ 452.890106][T15902] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 452.890127][T15902] RSP: 002b:00007ff503992028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 452.890152][T15902] RAX: ffffffffffffffda RBX: 00007ff502e25fa0 RCX: 00007ff502b9e159 [ 452.890170][T15902] RDX: 0000000003ffffbd RSI: 0000200000001d00 RDI: 0000000000000004 [ 452.890186][T15902] RBP: 00007ff503992090 R08: 0000000000000000 R09: 0000000000000000 [ 452.890201][T15902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 452.890215][T15902] R13: 00007ff502e26038 R14: 00007ff502e25fa0 R15: 00007ffee41c5ec8 [ 452.890250][T15902] [ 452.904082][ T6269] net_ratelimit: 22 callbacks suppressed [ 452.904152][ T6269] bond3: (slave gretap1): failed to get link speed/duplex [ 453.151326][T15579] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 453.183273][ T6269] bond3: (slave gretap1): failed to get link speed/duplex [ 453.331851][T15203] bond3: (slave gretap1): failed to get link speed/duplex [ 453.332403][T15203] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.339315][ T6266] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.345708][T15203] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.348959][T15203] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.461405][ T6266] bond3: (slave gretap1): failed to get link speed/duplex [ 453.714850][ T6272] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 453.715351][ T6272] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 454.167089][ T6271] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 454.167127][ T6271] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 454.202910][T15203] bond3: (slave gretap1): failed to get link speed/duplex [ 454.271512][T15925] netlink: 'syz.1.2895': attribute type 11 has an invalid length. [ 454.311183][ T6269] bond3: (slave gretap1): failed to get link speed/duplex [ 454.414257][T15925] syzkaller0: entered promiscuous mode [ 454.421147][T15925] syzkaller0: entered allmulticast mode [ 454.443384][ T6272] bond3: (slave gretap1): failed to get link speed/duplex [ 454.571654][ T6266] bond3: (slave gretap1): failed to get link speed/duplex [ 454.685903][T15932] __nla_validate_parse: 3 callbacks suppressed [ 454.695302][T15932] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2897'. [ 454.718235][T15932] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2897'. [ 454.851051][T15203] bond3: (slave gretap1): failed to get link speed/duplex [ 454.869442][T15936] syz_tun: tun_net_xmit 42 [ 454.962167][T15203] bond3: (slave gretap1): failed to get link speed/duplex [ 455.131237][T15943] syzkaller0: entered promiscuous mode [ 455.137794][T15943] syzkaller0: entered allmulticast mode [ 455.911256][ C0] syz_tun: tun_net_xmit 42 [ 456.070131][ T1708] block nbd1: Possible stuck request ffff888027887000: control (read@0,1024B). Runtime 150 seconds [ 456.118490][T15961] Cannot find del_set index 4 as target [ 456.647781][T15965] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2906'. [ 456.659481][T15973] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2909'. [ 456.941050][ C0] syz_tun: tun_net_xmit 42 [ 457.222749][T15994] FAULT_INJECTION: forcing a failure. [ 457.222749][T15994] name failslab, interval 1, probability 0, space 0, times 0 [ 457.238806][T15994] CPU: 0 UID: 0 PID: 15994 Comm: syz.3.2916 Not tainted syzkaller #0 PREEMPT(full) [ 457.238838][T15994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 457.238852][T15994] Call Trace: [ 457.238862][T15994] [ 457.238872][T15994] dump_stack_lvl+0xe8/0x150 [ 457.238911][T15994] should_fail_ex+0x410/0x560 [ 457.238950][T15994] should_failslab+0xa8/0x100 [ 457.238979][T15994] __kmalloc_noprof+0xfe/0x720 [ 457.239015][T15994] ? sock_kmalloc+0xd6/0x160 [ 457.239037][T15994] ? sock_kmalloc+0xd6/0x160 [ 457.239067][T15994] sock_kmalloc+0xd6/0x160 [ 457.239103][T15994] ____sys_sendmsg+0x1be/0x850 [ 457.239131][T15994] ? __pfx_____sys_sendmsg+0x10/0x10 [ 457.239164][T15994] ? import_iovec+0x73/0xa0 [ 457.239202][T15994] ___sys_sendmsg+0x2a5/0x360 [ 457.239224][T15994] ? __lock_acquire+0x6df/0x2e50 [ 457.239252][T15994] ? __pfx____sys_sendmsg+0x10/0x10 [ 457.239280][T15994] ? kstrtouint+0x6e/0xe0 [ 457.239336][T15994] ? __fget_files+0x2a/0x420 [ 457.239364][T15994] ? __fget_files+0x3a2/0x420 [ 457.239403][T15994] __sys_sendmmsg+0x273/0x4d0 [ 457.239442][T15994] ? __pfx___sys_sendmmsg+0x10/0x10 [ 457.239473][T15994] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 457.239517][T15994] ? ksys_write+0x242/0x270 [ 457.239550][T15994] ? __pfx_ksys_write+0x10/0x10 [ 457.239587][T15994] __x64_sys_sendmmsg+0xa0/0xc0 [ 457.239611][T15994] do_syscall_64+0x166/0x520 [ 457.239639][T15994] ? trace_irq_disable+0x3b/0x140 [ 457.239662][T15994] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.239685][T15994] ? clear_bhb_loop+0x70/0xc0 [ 457.239729][T15994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.239753][T15994] RIP: 0033:0x7f5c66d9e159 [ 457.239775][T15994] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 457.239796][T15994] RSP: 002b:00007f5c67c69028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 457.239821][T15994] RAX: ffffffffffffffda RBX: 00007f5c67025fa0 RCX: 00007f5c66d9e159 [ 457.239839][T15994] RDX: 0000000000000001 RSI: 0000200000004580 RDI: 0000000000000003 [ 457.239854][T15994] RBP: 00007f5c67c69090 R08: 0000000000000000 R09: 0000000000000000 [ 457.239869][T15994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 457.239883][T15994] R13: 00007f5c67026038 R14: 00007f5c67025fa0 R15: 00007ffe60da7118 [ 457.239930][T15994] [ 458.206240][T16024] net_ratelimit: 12 callbacks suppressed [ 458.206291][T16024] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 458.333155][T16032] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2922'. [ 458.525502][T16042] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2923'. [ 458.711189][ T6255] bond3: (slave gretap1): failed to get link speed/duplex [ 458.913579][T16050] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2926'. [ 459.042281][ T6255] bond3: (slave gretap1): failed to get link speed/duplex [ 459.153298][ T6266] bond3: (slave gretap1): failed to get link speed/duplex [ 459.265325][ T6255] bond3: (slave gretap1): failed to get link speed/duplex [ 459.386856][ T6266] bond3: (slave gretap1): failed to get link speed/duplex [ 459.531761][ T6266] bond3: (slave gretap1): failed to get link speed/duplex [ 459.641187][ T6271] bond3: (slave gretap1): failed to get link speed/duplex [ 459.750997][ T6255] bond3: (slave gretap1): failed to get link speed/duplex [ 459.774716][T16082] sock: sock_timestamping_bind_phc: sock not bind to device [ 459.862829][ T6255] bond3: (slave gretap1): failed to get link speed/duplex [ 460.390965][T16085] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2933'. [ 460.467616][T16087] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2934'. [ 461.003363][T16100] hsr0: entered promiscuous mode [ 461.143903][ T5631] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 461.154213][ T5631] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 461.163856][ T5631] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 461.202136][ T5628] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 461.214544][ T5628] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 461.583085][T16112] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.599236][T16112] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.886589][T16112] bridge0: port 3(vlan2) entered disabled state [ 462.117180][T16128] syzkaller0: entered promiscuous mode [ 462.118055][T16128] syzkaller0: entered allmulticast mode [ 462.193075][T16099] hsr0: left promiscuous mode [ 462.463999][T16140] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2948'. [ 463.261030][ T4932] Bluetooth: hci2: command tx timeout [ 463.344892][ T6266] net_ratelimit: 28 callbacks suppressed [ 463.345143][ T6266] bond3: (slave gretap1): failed to get link speed/duplex [ 463.549268][T16150] syzkaller0: entered promiscuous mode [ 463.556146][T16150] syzkaller0: entered allmulticast mode [ 463.591638][ T6258] bond3: (slave gretap1): failed to get link speed/duplex [ 463.635730][T16106] lo speed is unknown, defaulting to 1000 [ 465.341067][ T4932] Bluetooth: hci2: command tx timeout [ 465.661376][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 466.611700][ T4983] udevd[4983]: worker [6731] /devices/virtual/block/nbd1 is taking a long time [ 466.784008][T16178] syzkaller0: entered promiscuous mode [ 466.789717][T16178] syzkaller0: entered allmulticast mode [ 466.892205][T16195] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2958'. [ 467.152308][T16205] syz_tun: tun_net_xmit 62 [ 467.271219][ T6258] bond3: (slave gretap1): failed to get link speed/duplex [ 467.421812][ T4932] Bluetooth: hci2: command tx timeout [ 467.426861][ T6269] bond3: (slave gretap1): failed to get link speed/duplex [ 467.532324][ T6255] bond3: (slave gretap1): failed to get link speed/duplex [ 467.865152][T16106] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.872910][T16106] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.881787][T16106] bridge_slave_0: entered allmulticast mode [ 467.891381][T16106] bridge_slave_0: entered promiscuous mode [ 467.917299][T16106] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.926903][T16106] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.927130][T16106] bridge_slave_1: entered allmulticast mode [ 467.931272][T16106] bridge_slave_1: entered promiscuous mode [ 468.484052][T16106] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 468.497420][T16106] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 468.617304][T16106] team0: Port device team_slave_0 added [ 468.630775][T16106] team0: Port device team_slave_1 added [ 468.678065][T16106] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 468.685193][T16106] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 468.711679][T16106] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 468.724582][T16106] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 468.731675][T16106] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 468.757870][T16106] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 468.815868][T16231] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2965'. [ 469.168230][T16241] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 469.501001][ T4932] Bluetooth: hci2: command tx timeout [ 469.546414][ T6258] bond3: (slave gretap1): failed to get link speed/duplex [ 469.630269][T16106] hsr_slave_0: entered promiscuous mode [ 469.638262][T16106] hsr_slave_1: entered promiscuous mode [ 469.644862][T16106] debugfs: 'hsr0' already exists in 'hsr' [ 469.657010][T16106] Cannot create hsr debugfs directory [ 469.665482][T16246] ip_tables: iptables: counters copy to user failed while replacing table [ 469.673775][ T6269] bond3: (slave gretap1): failed to get link speed/duplex [ 469.775280][T16256] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2969'. [ 469.847460][T16258] FAULT_INJECTION: forcing a failure. [ 469.847460][T16258] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 469.860771][T16258] CPU: 0 UID: 0 PID: 16258 Comm: syz.2.2970 Not tainted syzkaller #0 PREEMPT(full) [ 469.860803][T16258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 469.860819][T16258] Call Trace: [ 469.860829][T16258] [ 469.860840][T16258] dump_stack_lvl+0xe8/0x150 [ 469.860881][T16258] should_fail_ex+0x410/0x560 [ 469.861019][T16258] _copy_to_user+0x31/0xb0 [ 469.861070][T16258] simple_read_from_buffer+0xe1/0x170 [ 469.861105][T16258] proc_fail_nth_read+0x1bb/0x230 [ 469.861137][T16258] ? common_file_perm+0x20e/0x2b0 [ 469.861223][T16258] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 469.861271][T16258] ? rw_verify_area+0x24a/0x4c0 [ 469.861301][T16258] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 469.861331][T16258] vfs_read+0x213/0xa80 [ 469.861364][T16258] ? __pfx___mutex_lock+0x10/0x10 [ 469.861426][T16258] ? __pfx_vfs_read+0x10/0x10 [ 469.861456][T16258] ? __fget_files+0x2a/0x420 [ 469.861486][T16258] ? __fget_files+0x3a2/0x420 [ 469.861530][T16258] ? __fget_files+0x2a/0x420 [ 469.861568][T16258] ksys_read+0x150/0x270 [ 469.861600][T16258] ? __pfx_ksys_read+0x10/0x10 [ 469.861642][T16258] do_syscall_64+0x166/0x520 [ 469.861717][T16258] ? trace_irq_disable+0x3b/0x140 [ 469.861738][T16258] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.861762][T16258] ? clear_bhb_loop+0x70/0xc0 [ 469.861790][T16258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.861812][T16258] RIP: 0033:0x7f201375e98e [ 469.861833][T16258] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 469.861853][T16258] RSP: 002b:00007f2014591fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 469.861877][T16258] RAX: ffffffffffffffda RBX: 00007f20145926c0 RCX: 00007f201375e98e [ 469.861894][T16258] RDX: 000000000000000f RSI: 00007f20145920a0 RDI: 0000000000000004 [ 469.861909][T16258] RBP: 00007f2014592090 R08: 0000000000000000 R09: 0000000000000000 [ 469.861923][T16258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 469.861945][T16258] R13: 00007f2013a26038 R14: 00007f2013a25fa0 R15: 00007ffd3c0baf58 [ 469.861981][T16258] [ 470.412681][ T6269] bond3: (slave gretap1): failed to get link speed/duplex [ 470.572175][ T6269] bond3: (slave gretap1): failed to get link speed/duplex [ 470.639579][T16267] tipc: Enabling of bearer rejected, failed to enable media [ 470.681691][ T6258] bond3: (slave gretap1): failed to get link speed/duplex [ 470.793141][ T6271] bond3: (slave gretap1): failed to get link speed/duplex [ 470.879679][T16281] syzkaller0: entered promiscuous mode [ 470.879723][T16281] syzkaller0: entered allmulticast mode [ 470.901745][ T6269] bond3: (slave gretap1): failed to get link speed/duplex [ 471.190591][T16294] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2979'. [ 471.200428][T16294] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2979'. [ 471.282633][T16295] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2979'. [ 471.788306][T16300] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2980'. [ 471.788355][T16300] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2980'. [ 471.788399][T16300] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2980'. [ 471.790046][T16304] syzkaller0: entered promiscuous mode [ 471.793180][T16304] syzkaller0: entered allmulticast mode [ 471.925827][T16106] team0: Port device netdevsim1 removed [ 472.011763][ T6271] bond3: (slave gretap1): failed to get link speed/duplex [ 472.612555][T16106] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 472.699581][T16106] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 472.710605][T16106] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 472.747393][T16106] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 472.762619][T16106] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 472.788769][T16106] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 472.801305][T16106] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 472.852044][T16106] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 472.876045][T16322] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2987'. [ 472.969633][T16322] batman_adv: batadv0: Interface deactivated: veth0 [ 472.969678][T16322] batman_adv: batadv0: Removing interface: veth0 [ 472.986600][T16322] bridge0: port 4(veth0) entered blocking state [ 472.995498][T16322] bridge0: port 4(veth0) entered disabled state [ 472.996594][T16322] veth0: entered allmulticast mode [ 473.458304][T16338] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2989'. [ 473.552020][T16106] 8021q: adding VLAN 0 to HW filter on device bond0 [ 473.747542][T16106] 8021q: adding VLAN 0 to HW filter on device team0 [ 473.779209][T16346] syzkaller0: entered promiscuous mode [ 473.786418][T16346] syzkaller0: entered allmulticast mode [ 473.885795][ T6269] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.885922][ T6269] bridge0: port 1(bridge_slave_0) entered forwarding state [ 473.910280][ T6269] bridge0: port 2(bridge_slave_1) entered blocking state [ 473.910405][ T6269] bridge0: port 2(bridge_slave_1) entered forwarding state [ 474.018705][T16351] xt_l2tp: v2 doesn't support IP mode [ 474.074265][T16356] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2995'. [ 474.099612][T16356] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2995'. [ 474.121477][ T5739] syz_tun: tun_net_xmit 90 [ 474.211169][ T5739] syz_tun: tun_net_xmit 90 [ 474.287163][T16363] syz_tun: tun_net_xmit 86 [ 474.550669][ T6269] net_ratelimit: 10 callbacks suppressed [ 474.557636][ T6269] bond3: (slave gretap1): failed to get link speed/duplex [ 474.691424][ T5738] syz_tun: tun_net_xmit 90 [ 474.734031][ T6258] bond3: (slave gretap1): failed to get link speed/duplex [ 474.845995][ T5739] syz_tun: tun_net_xmit 90 [ 474.862389][T15203] bond3: (slave gretap1): failed to get link speed/duplex [ 474.972059][ T6272] bond3: (slave gretap1): failed to get link speed/duplex [ 475.086873][ T6255] bond3: (slave gretap1): failed to get link speed/duplex [ 475.140667][T16385] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3002'. [ 475.154993][T16385] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3002'. [ 475.211660][ T6258] bond3: (slave gretap1): failed to get link speed/duplex [ 475.352685][ C0] syz_tun: tun_net_xmit 86 [ 475.372335][ T6271] bond3: (slave gretap1): failed to get link speed/duplex [ 475.502752][ T6269] bond3: (slave gretap1): failed to get link speed/duplex [ 475.622336][ T6257] bond3: (slave gretap1): failed to get link speed/duplex [ 475.735787][ T6271] bond3: (slave gretap1): failed to get link speed/duplex [ 475.746209][T16395] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3003'. [ 475.746773][T16395] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3003'. [ 475.746822][T16395] tipc: Invalid UDP bearer configuration [ 475.746925][T16395] tipc: Enabling of bearer rejected, failed to enable media [ 476.381273][ C0] syz_tun: tun_net_xmit 86 [ 476.616854][T16428] syzkaller0: entered promiscuous mode [ 476.623340][T16428] syzkaller0: entered allmulticast mode [ 477.050263][T16106] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 477.438154][T16106] veth0_vlan: entered promiscuous mode [ 477.485398][T16106] veth1_vlan: entered promiscuous mode [ 477.717367][T16106] veth0_macvtap: entered promiscuous mode [ 477.748027][T16106] veth1_macvtap: entered promiscuous mode [ 477.886333][T16466] netlink: 'syz.3.3019': attribute type 1 has an invalid length. [ 478.061484][T16466] 8021q: adding VLAN 0 to HW filter on device bond1 [ 478.079030][T16473] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3020'. [ 478.098291][T16467] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 478.127801][T16467] bond1: (slave batadv1): making interface the new active one [ 478.137005][T16467] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 478.374549][T16467] bond1 (unregistering): (slave batadv1): Releasing active interface [ 478.429264][T16467] bond1 (unregistering): Released all slaves [ 478.564472][T16106] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 478.626543][T16106] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 478.685450][ T6255] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.686579][ T6255] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.686686][ T6255] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.686781][ T6255] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.756221][T16479] syz_tun: tun_net_xmit 62 [ 479.099621][ T6271] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 479.106687][ T6271] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 479.307007][T15203] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 479.307047][T15203] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 479.637014][ T6255] net_ratelimit: 21 callbacks suppressed [ 479.637251][ T6255] bond3: (slave gretap1): failed to get link speed/duplex [ 479.765981][T15203] bond3: (slave gretap1): failed to get link speed/duplex [ 479.871746][ T6271] bond3: (slave gretap1): failed to get link speed/duplex [ 479.988692][T15203] bond3: (slave gretap1): failed to get link speed/duplex [ 480.101193][T15203] bond3: (slave gretap1): failed to get link speed/duplex [ 480.211074][T15203] bond3: (slave gretap1): failed to get link speed/duplex [ 480.269196][T16497] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3026'. [ 480.289996][T16499] FAULT_INJECTION: forcing a failure. [ 480.289996][T16499] name failslab, interval 1, probability 0, space 0, times 0 [ 480.310496][T16499] CPU: 0 UID: 0 PID: 16499 Comm: syz.0.3027 Not tainted syzkaller #0 PREEMPT(full) [ 480.310529][T16499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 480.310543][T16499] Call Trace: [ 480.310553][T16499] [ 480.310563][T16499] dump_stack_lvl+0xe8/0x150 [ 480.310601][T16499] should_fail_ex+0x410/0x560 [ 480.310639][T16499] should_failslab+0xa8/0x100 [ 480.310665][T16499] ? alloc_empty_file+0x5b/0x1d0 [ 480.310692][T16499] kmem_cache_alloc_noprof+0xa1/0x600 [ 480.310728][T16499] ? alloc_empty_file+0x5b/0x1d0 [ 480.310761][T16499] alloc_empty_file+0x5b/0x1d0 [ 480.310801][T16499] alloc_file_pseudo+0x115/0x1e0 [ 480.310829][T16499] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 480.310854][T16499] ? _raw_spin_unlock+0x28/0x50 [ 480.310974][T16499] ? alloc_fd+0x651/0x6c0 [ 480.311003][T16499] sock_alloc_file+0xb8/0x2e0 [ 480.311080][T16499] ? __sys_socket+0x12b/0x1b0 [ 480.311110][T16499] __sys_socket+0x13f/0x1b0 [ 480.311142][T16499] __x64_sys_socket+0x7a/0x90 [ 480.311171][T16499] do_syscall_64+0x166/0x520 [ 480.311199][T16499] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.311222][T16499] ? clear_bhb_loop+0x70/0xc0 [ 480.311248][T16499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.311270][T16499] RIP: 0033:0x7ff502b9e159 [ 480.311291][T16499] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 480.311310][T16499] RSP: 002b:00007ff503991fc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 480.311334][T16499] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 00007ff502b9e159 [ 480.311350][T16499] RDX: 0000000000000008 RSI: 0000000000000005 RDI: 000000000000001f [ 480.311363][T16499] RBP: 00007ff503992090 R08: 0000000000000000 R09: 0000000000000000 [ 480.311377][T16499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 480.311390][T16499] R13: 00007ff502e26038 R14: 00007ff502e25fa0 R15: 00007ffee41c5ec8 [ 480.311423][T16499] [ 480.340536][ T6258] bond3: (slave gretap1): failed to get link speed/duplex [ 480.448597][ T6269] bond3: (slave gretap1): failed to get link speed/duplex [ 480.572495][ T6257] bond3: (slave gretap1): failed to get link speed/duplex [ 480.639220][T16499] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3027'. [ 481.025075][ T6272] bond3: (slave gretap1): failed to get link speed/duplex [ 481.323703][ T5628] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 481.337525][ T5628] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 481.348148][ T5628] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 481.368389][ T5628] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 481.389656][ T5628] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 481.441885][T16524] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3034'. [ 481.832275][T16536] FAULT_INJECTION: forcing a failure. [ 481.832275][T16536] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 481.832340][T16536] CPU: 0 UID: 0 PID: 16536 Comm: syz.3.3037 Not tainted syzkaller #0 PREEMPT(full) [ 481.832367][T16536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 481.832381][T16536] Call Trace: [ 481.832391][T16536] [ 481.832401][T16536] dump_stack_lvl+0xe8/0x150 [ 481.832438][T16536] should_fail_ex+0x410/0x560 [ 481.832477][T16536] _copy_to_user+0x31/0xb0 [ 481.832502][T16536] bpf_verifier_vlog+0x496/0x900 [ 481.832550][T16536] verbose+0x11d/0x1a0 [ 481.832584][T16536] ? rcu_is_watching+0x16/0xb0 [ 481.832616][T16536] ? __pfx_verbose+0x10/0x10 [ 481.832648][T16536] ? sort_subprogs_topo+0xf5/0xf20 [ 481.832677][T16536] ? __kvmalloc_node_noprof+0x345/0x820 [ 481.832701][T16536] ? sort_subprogs_topo+0xf5/0xf20 [ 481.832733][T16536] sort_subprogs_topo+0xdbf/0xf20 [ 481.832780][T16536] bpf_check+0x25a5/0x2e10 [ 481.832816][T16536] ? ktime_get_with_offset+0x93/0x2d0 [ 481.832844][T16536] ? __pfx_bpf_check+0x10/0x10 [ 481.832872][T16536] ? bpf_obj_name_cpy+0x194/0x1e0 [ 481.832907][T16536] bpf_prog_load+0x14d6/0x1c20 [ 481.832946][T16536] ? __pfx_bpf_prog_load+0x10/0x10 [ 481.832999][T16536] __sys_bpf+0xd0d/0xd90 [ 481.833036][T16536] ? __pfx___sys_bpf+0x10/0x10 [ 481.833073][T16536] ? __fget_files+0x2a/0x420 [ 481.833121][T16536] ? ksys_write+0x242/0x270 [ 481.833156][T16536] ? __pfx_ksys_write+0x10/0x10 [ 481.833194][T16536] __x64_sys_bpf+0xba/0xd0 [ 481.833221][T16536] do_syscall_64+0x166/0x520 [ 481.833251][T16536] ? trace_irq_disable+0x3b/0x140 [ 481.833273][T16536] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.833297][T16536] ? clear_bhb_loop+0x70/0xc0 [ 481.833333][T16536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.833375][T16536] RIP: 0033:0x7f5c66d9e159 [ 481.833397][T16536] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 481.833418][T16536] RSP: 002b:00007f5c67c69028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 481.833444][T16536] RAX: ffffffffffffffda RBX: 00007f5c67025fa0 RCX: 00007f5c66d9e159 [ 481.833462][T16536] RDX: 0000000000000094 RSI: 0000200000000440 RDI: 0000000000000005 [ 481.833478][T16536] RBP: 00007f5c67c69090 R08: 0000000000000000 R09: 0000000000000000 [ 481.833494][T16536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 481.833509][T16536] R13: 00007f5c67026038 R14: 00007f5c67025fa0 R15: 00007ffe60da7118 [ 481.833546][T16536] [ 482.557697][ T6257] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.672956][T16546] syzkaller0: entered promiscuous mode [ 482.680168][T16546] syzkaller0: entered allmulticast mode [ 482.869642][ T6257] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.307090][ T6257] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.501868][ T5628] Bluetooth: hci4: command tx timeout [ 483.521316][ T6257] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.636731][T16519] lo speed is unknown, defaulting to 1000 [ 483.877854][T16578] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3044'. [ 484.577671][T16588] sock: sock_timestamping_bind_phc: sock not bind to device [ 484.788278][T16596] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3050'. [ 484.825309][T16596] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3050'. [ 484.923587][ T6267] net_ratelimit: 13 callbacks suppressed [ 484.929583][ T6267] bond3: (slave gretap1): failed to get link speed/duplex [ 485.647890][ T5628] Bluetooth: hci4: command tx timeout [ 486.143242][ T1708] block nbd1: Possible stuck request ffff888027887000: control (read@0,1024B). Runtime 180 seconds [ 487.209718][ T6257] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 487.223269][ T6257] bond_slave_0: left promiscuous mode [ 487.231038][ T6257] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 487.240207][ T6257] bond_slave_1: left promiscuous mode [ 487.250338][ T6257] bond0 (unregistering): Released all slaves [ 487.265972][ T6257] bond1 (unregistering): Released all slaves [ 487.289962][ T6257] bond2 (unregistering): Released all slaves [ 487.316080][ T6257] bond3 (unregistering): Released all slaves [ 487.411636][ T6269] bond3: (slave gretap1): failed to get link speed/duplex [ 487.424695][ T5278] 8021q: adding VLAN 0 to HW filter on device eth1 [ 487.664813][ T5628] Bluetooth: hci4: command tx timeout [ 487.725818][T16649] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3055'. [ 487.777223][ T6257] tipc: Left network mode [ 487.787385][ T6266] bond3: (slave gretap1): failed to get link speed/duplex [ 487.894613][ T6255] bond3: (slave gretap1): failed to get link speed/duplex [ 488.159748][T16668] netlink: Invalid conntrack helper [ 488.162288][T16668] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 488.817515][ T6271] bond3: (slave gretap1): failed to get link speed/duplex [ 488.991356][ T6255] bond3: (slave gretap1): failed to get link speed/duplex [ 489.202983][T16683] tipc: Enabled bearer , priority 0 [ 489.282604][T16689] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 489.433695][T16694] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3062'. [ 489.446188][T16694] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3062'. [ 489.647562][T16685] tipc: Resetting bearer [ 489.676050][T16681] tipc: Disabling bearer [ 489.716680][T16700] syz_tun: tun_net_xmit 86 [ 489.743225][ T5628] Bluetooth: hci4: command tx timeout [ 489.819749][T16519] bridge0: port 1(bridge_slave_0) entered blocking state [ 489.820549][T16519] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.823164][T16519] bridge_slave_0: entered allmulticast mode [ 489.837870][T16519] bridge_slave_0: entered promiscuous mode [ 489.852859][T16519] bridge0: port 2(bridge_slave_1) entered blocking state [ 489.855095][T16519] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.858027][T16519] bridge_slave_1: entered allmulticast mode [ 489.876187][T16519] bridge_slave_1: entered promiscuous mode [ 490.166510][T16519] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 490.201262][T16519] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 490.384194][T16519] team0: Port device team_slave_0 added [ 490.405568][T16519] team0: Port device team_slave_1 added [ 490.464808][ T6255] bond3: (slave gretap1): failed to get link speed/duplex [ 490.781100][ C0] syz_tun: tun_net_xmit 86 [ 490.922817][T16519] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 490.922856][T16519] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 490.922914][T16519] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 490.953998][T16519] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 490.954042][T16519] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 490.954124][T16519] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 491.056801][ T5278] 8021q: adding VLAN 0 to HW filter on device eth2 [ 491.331173][ T6257] hsr_slave_0: left promiscuous mode [ 491.340713][ T6257] hsr_slave_1: left promiscuous mode [ 491.821243][ C0] syz_tun: tun_net_xmit 86 [ 492.265444][T16738] Set syz1 is full, maxelem 2076 reached [ 492.554911][ T6257] team0 (unregistering): Port device team_slave_1 removed [ 492.567832][T16751] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3074'. [ 492.587486][T16751] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3074'. [ 493.698783][T16519] hsr_slave_0: entered promiscuous mode [ 493.721573][T16519] hsr_slave_1: entered promiscuous mode [ 493.811964][ T5811] syz_tun: tun_net_xmit 110 [ 493.946153][T16763] FAULT_INJECTION: forcing a failure. [ 493.946153][T16763] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 493.946219][T16763] CPU: 0 UID: 0 PID: 16763 Comm: syz.1.3077 Not tainted syzkaller #0 PREEMPT(full) [ 493.946246][T16763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 493.946260][T16763] Call Trace: [ 493.946318][T16763] [ 493.946358][T16763] dump_stack_lvl+0xe8/0x150 [ 493.946504][T16763] should_fail_ex+0x410/0x560 [ 493.946609][T16763] _copy_from_iter+0x1d3/0x1660 [ 493.946775][T16763] ? sctp_chunkify+0x5a/0x260 [ 493.946920][T16763] ? sctp_addto_chunk+0xf8/0x220 [ 493.946985][T16763] ? __asan_memcpy+0x40/0x70 [ 493.947083][T16763] ? __pfx__copy_from_iter+0x10/0x10 [ 493.947165][T16763] ? __asan_memcpy+0x40/0x70 [ 493.947248][T16763] ? sctp_make_datafrag_empty+0x184/0x240 [ 493.947321][T16763] ? __kasan_kmalloc+0x93/0xb0 [ 493.947395][T16763] ? __pfx_sctp_make_datafrag_empty+0x10/0x10 [ 493.947459][T16763] ? skb_put+0x112/0x210 [ 493.947607][T16763] sctp_user_addto_chunk+0x7c/0x230 [ 493.947693][T16763] sctp_datamsg_from_user+0x754/0xef0 [ 493.947807][T16763] sctp_sendmsg_to_asoc+0x13cf/0x1880 [ 493.947964][T16763] ? sctp_assoc_add_peer+0xd57/0x1430 [ 493.948117][T16763] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 493.948204][T16763] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 493.948284][T16763] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 493.948379][T16763] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 493.948453][T16763] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 493.948551][T16763] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 493.948653][T16763] ? security_sctp_bind_connect+0x7e/0x2c0 [ 493.948815][T16763] sctp_sendmsg+0x1bb5/0x2d00 [ 493.948923][T16763] ? kstrtouint+0x6e/0xe0 [ 493.949027][T16763] ? __pfx_sctp_sendmsg+0x10/0x10 [ 493.949101][T16763] ? lock_acquire+0x115/0x350 [ 493.949179][T16763] ? get_pid_task+0x20/0x1f0 [ 493.949299][T16763] ? aa_sock_msg_perm+0xf5/0x210 [ 493.949383][T16763] ? sock_rps_record_flow+0x19/0x350 [ 493.949493][T16763] ? inet_sendmsg+0x298/0x320 [ 493.949556][T16763] ? apparmor_socket_sendmsg+0x98/0x360 [ 493.949648][T16763] ? __pfx_inet_sendmsg+0x10/0x10 [ 493.949721][T16763] sock_sendmsg_nosec+0x10e/0x180 [ 493.949791][T16763] __sys_sendto+0x408/0x5a0 [ 493.949875][T16763] ? ksys_write+0x1e6/0x270 [ 493.949961][T16763] ? __pfx___sys_sendto+0x10/0x10 [ 493.950036][T16763] ? __mutex_unlock_slowpath+0x731/0x900 [ 493.950198][T16763] ? __pfx_ksys_write+0x10/0x10 [ 493.950295][T16763] __x64_sys_sendto+0xde/0x100 [ 493.950385][T16763] do_syscall_64+0x166/0x520 [ 493.950461][T16763] ? trace_irq_disable+0x3b/0x140 [ 493.950523][T16763] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.950594][T16763] ? clear_bhb_loop+0x70/0xc0 [ 493.950675][T16763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.950736][T16763] RIP: 0033:0x7f24ff79e159 [ 493.950792][T16763] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 493.950847][T16763] RSP: 002b:00007f250072a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 493.950912][T16763] RAX: ffffffffffffffda RBX: 00007f24ffa25fa0 RCX: 00007f24ff79e159 [ 493.950955][T16763] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000003 [ 493.950997][T16763] RBP: 00007f250072a090 R08: 000020000005ffe4 R09: 000000000000001c [ 493.951032][T16763] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000002 [ 493.951071][T16763] R13: 00007f24ffa26038 R14: 00007f24ffa25fa0 R15: 00007ffe19b95e48 [ 493.951158][T16763] [ 494.281464][T16745] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 494.370717][T16756] syzkaller1: entered promiscuous mode [ 494.370772][T16756] syzkaller1: entered allmulticast mode [ 494.391315][ T6267] bond3: (slave gretap1): failed to get link speed/duplex [ 494.509450][T16769] xt_esp: unknown flags DD [ 494.822105][ T6272] bond3: (slave gretap1): failed to get link speed/duplex [ 494.862407][ T5739] syz_tun: tun_net_xmit 110 [ 495.437874][T16796] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3085'. [ 495.448910][T16796] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3085'. [ 495.688322][ T6257] IPVS: stop unused estimator thread 0... [ 495.704437][ T6267] bond3: (slave gretap1): failed to get link speed/duplex [ 495.813073][ T6267] bond3: (slave gretap1): failed to get link speed/duplex [ 495.922294][ T6267] bond3: (slave gretap1): failed to get link speed/duplex [ 496.170518][T16810] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3088'. [ 496.212079][ T6258] bond3: (slave gretap1): failed to get link speed/duplex [ 496.322049][T15203] bond3: (slave gretap1): failed to get link speed/duplex [ 496.521225][T15203] bond3: (slave gretap1): failed to get link speed/duplex [ 496.534802][T16832] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 496.557083][T16833] netlink: 'syz.3.3091': attribute type 10 has an invalid length. [ 496.576171][T16832] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 496.660826][T16833] team0: Device vxcan0 is of different type [ 496.691210][ T6267] bond3: (slave gretap1): failed to get link speed/duplex [ 496.706734][T16834] erspan0: entered promiscuous mode [ 496.736057][T16834] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3092'. [ 496.961113][ T6267] bond3: (slave gretap1): failed to get link speed/duplex [ 497.071274][ T6269] bond3: (slave gretap1): failed to get link speed/duplex [ 497.281296][ T6269] bond3: (slave gretap1): failed to get link speed/duplex [ 497.397487][T16519] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 497.423574][T16519] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 497.433365][T16519] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 497.456285][T16519] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 497.465488][T16519] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 497.497193][T16519] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 497.505480][T16519] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 497.536664][T16519] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 497.722202][T16519] 8021q: adding VLAN 0 to HW filter on device bond0 [ 497.805532][T16519] 8021q: adding VLAN 0 to HW filter on device team0 [ 497.842892][ T6269] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.843027][ T6269] bridge0: port 1(bridge_slave_0) entered forwarding state [ 497.878719][ T6269] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.879013][ T6269] bridge0: port 2(bridge_slave_1) entered forwarding state [ 497.915047][T16887] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3104'. [ 497.962075][T16887] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3104'. [ 498.662566][T16911] netlink: 'syz.0.3107': attribute type 2 has an invalid length. [ 498.697926][T16915] sysfs: cannot create duplicate filename '/class/ieee80211/!ù' [ 498.709156][T16915] CPU: 1 UID: 0 PID: 16915 Comm: syz.0.3107 Not tainted syzkaller #0 PREEMPT(full) [ 498.709188][T16915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 498.709204][T16915] Call Trace: [ 498.709214][T16915] [ 498.709224][T16915] dump_stack_lvl+0xe8/0x150 [ 498.709266][T16915] sysfs_warn_dup+0x8e/0xa0 [ 498.709301][T16915] sysfs_do_create_link_sd+0xc0/0x110 [ 498.709339][T16915] device_add_class_symlinks+0x1cf/0x240 [ 498.709496][T16915] device_add+0x467/0xb80 [ 498.709531][T16915] wiphy_register+0x1fc8/0x2ff0 [ 498.709605][T16915] ? __pfx_wiphy_register+0x10/0x10 [ 498.709634][T16915] ? __pfx_netdev_run_todo+0x10/0x10 [ 498.709691][T16915] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 498.709785][T16915] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 498.709873][T16915] ieee80211_register_hw+0x3d3d/0x4a50 [ 498.709963][T16915] ? ieee80211_register_hw+0x1961/0x4a50 [ 498.710029][T16915] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 498.710066][T16915] ? __asan_memset+0x22/0x50 [ 498.710102][T16915] ? __hrtimer_setup+0x1b7/0x260 [ 498.710133][T16915] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 498.710205][T16915] mac80211_hwsim_new_radio+0x3258/0x56b0 [ 498.710274][T16915] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 498.710308][T16915] ? kstrndup+0xbd/0x160 [ 498.710336][T16915] ? kstrndup+0xbd/0x160 [ 498.710360][T16915] hwsim_new_radio_nl+0xd8b/0xf90 [ 498.710423][T16915] genl_family_rcv_msg_doit+0x233/0x340 [ 498.710514][T16915] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 498.710564][T16915] ? bpf_lsm_capable+0x9/0x20 [ 498.710596][T16915] ? security_capable+0x7e/0x2c0 [ 498.710691][T16915] genl_rcv_msg+0x614/0x7a0 [ 498.710732][T16915] ? __pfx_genl_rcv_msg+0x10/0x10 [ 498.710765][T16915] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 498.710800][T16915] ? __pfx_ref_tracker_free+0x10/0x10 [ 498.710899][T16915] netlink_rcv_skb+0x226/0x4a0 [ 498.710926][T16915] ? __pfx_genl_rcv_msg+0x10/0x10 [ 498.710961][T16915] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 498.711005][T16915] ? down_read+0x2be/0x330 [ 498.711044][T16915] genl_rcv+0x28/0x40 [ 498.711073][T16915] netlink_unicast+0x7bd/0x940 [ 498.711109][T16915] netlink_sendmsg+0x813/0xb40 [ 498.711147][T16915] ? __pfx_netlink_sendmsg+0x10/0x10 [ 498.711181][T16915] ? apparmor_socket_sendmsg+0x98/0x360 [ 498.711211][T16915] ? __pfx_netlink_sendmsg+0x10/0x10 [ 498.711232][T16915] sock_sendmsg_nosec+0x13a/0x180 [ 498.711260][T16915] ____sys_sendmsg+0x54e/0x850 [ 498.711286][T16915] ? __pfx_____sys_sendmsg+0x10/0x10 [ 498.711315][T16915] ? import_iovec+0x73/0xa0 [ 498.711350][T16915] ___sys_sendmsg+0x2a5/0x360 [ 498.711368][T16915] ? __lock_acquire+0x6df/0x2e50 [ 498.711392][T16915] ? __pfx____sys_sendmsg+0x10/0x10 [ 498.711416][T16915] ? futex_wait+0x2a2/0x390 [ 498.711474][T16915] ? __fget_files+0x2a/0x420 [ 498.711499][T16915] ? __fget_files+0x3a2/0x420 [ 498.711534][T16915] __x64_sys_sendmsg+0x1b1/0x290 [ 498.711556][T16915] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 498.711597][T16915] do_syscall_64+0x166/0x520 [ 498.711622][T16915] ? trace_irq_disable+0x3b/0x140 [ 498.711640][T16915] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.711660][T16915] ? clear_bhb_loop+0x70/0xc0 [ 498.711684][T16915] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.711704][T16915] RIP: 0033:0x7ff502b9e159 [ 498.711723][T16915] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 498.711740][T16915] RSP: 002b:00007ff500dd5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 498.711761][T16915] RAX: ffffffffffffffda RBX: 00007ff502e26180 RCX: 00007ff502b9e159 [ 498.711776][T16915] RDX: 0000000000000084 RSI: 0000200000000100 RDI: 000000000000000c [ 498.711789][T16915] RBP: 00007ff502c35024 R08: 0000000000000000 R09: 0000000000000000 [ 498.711802][T16915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 498.711821][T16915] R13: 00007ff502e26218 R14: 00007ff502e26180 R15: 00007ffee41c5ec8 [ 498.711854][T16915] [ 499.231897][ T4932] block nbd3: Receive control failed (result -32) [ 499.246271][ T5628] block nbd3: Receive control failed (result -32) [ 499.527892][T16928] tipc: Started in network mode [ 499.527951][T16928] tipc: Node identity c2a444a4211d, cluster identity 4711 [ 499.528472][T16928] tipc: Enabled bearer , priority 0 [ 499.533897][T16928] syzkaller0: entered promiscuous mode [ 499.533921][T16928] syzkaller0: entered allmulticast mode [ 499.570329][T16926] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3110'. [ 499.583082][T16928] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3111'. [ 499.640203][T16947] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3111'. [ 499.808959][T16928] bond1 (unregistering): Released all slaves [ 499.862828][T16932] tipc: Resetting bearer [ 499.908254][T16950] tipc: Resetting bearer [ 499.942442][T16950] tipc: Disabling bearer [ 499.990796][T16519] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 500.130716][T16961] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3115'. [ 500.612007][T16989] __nla_validate_parse: 1 callbacks suppressed [ 500.612056][T16989] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3121'. [ 500.612078][T16989] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3121'. [ 500.771057][ T6257] net_ratelimit: 21 callbacks suppressed [ 500.771112][ T6257] bond3: (slave gretap1): failed to get link speed/duplex [ 500.887016][T16519] veth0_vlan: entered promiscuous mode [ 500.894503][ T6267] bond3: (slave gretap1): failed to get link speed/duplex [ 500.910185][T16981] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3121'. [ 500.935964][T16519] veth1_vlan: entered promiscuous mode [ 501.048236][T16519] veth0_macvtap: entered promiscuous mode [ 501.076024][T16519] veth1_macvtap: entered promiscuous mode [ 501.115904][ T6269] bond3: (slave gretap1): failed to get link speed/duplex [ 501.229141][T16519] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 501.240177][T17002] IPVS: set_ctl: invalid protocol: 58 255.255.255.255:20001 [ 501.267641][T16519] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 501.288185][T17002] netlink: 'syz.2.3123': attribute type 61 has an invalid length. [ 501.327756][T17008] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3133'. [ 501.365261][ T6271] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.365345][ T6271] bond3: (slave gretap1): failed to get link speed/duplex [ 501.411135][ T6258] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.431637][ T6271] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.433106][ T6271] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.551196][ T6267] bond3: (slave gretap1): failed to get link speed/duplex [ 501.662135][T15203] bond3: (slave gretap1): failed to get link speed/duplex [ 501.673121][T17024] FAULT_INJECTION: forcing a failure. [ 501.673121][T17024] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 501.688520][T17024] CPU: 1 UID: 0 PID: 17024 Comm: syz.3.3125 Not tainted syzkaller #0 PREEMPT(full) [ 501.688559][T17024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 501.688573][T17024] Call Trace: [ 501.688583][T17024] [ 501.688592][T17024] dump_stack_lvl+0xe8/0x150 [ 501.688629][T17024] should_fail_ex+0x410/0x560 [ 501.688666][T17024] _copy_from_user+0x2d/0xb0 [ 501.688690][T17024] ___sys_sendmsg+0x1c6/0x360 [ 501.688719][T17024] ? __pfx____sys_sendmsg+0x10/0x10 [ 501.688739][T17024] ? __lock_acquire+0x6df/0x2e50 [ 501.688812][T17024] __sys_sendmmsg+0x273/0x4d0 [ 501.688853][T17024] ? __pfx___sys_sendmmsg+0x10/0x10 [ 501.688883][T17024] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 501.688926][T17024] ? ksys_write+0x242/0x270 [ 501.688959][T17024] ? __pfx_ksys_write+0x10/0x10 [ 501.688995][T17024] __x64_sys_sendmmsg+0xa0/0xc0 [ 501.689019][T17024] do_syscall_64+0x166/0x520 [ 501.689046][T17024] ? trace_irq_disable+0x3b/0x140 [ 501.689067][T17024] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.689089][T17024] ? clear_bhb_loop+0x70/0xc0 [ 501.689116][T17024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.689137][T17024] RIP: 0033:0x7f5c66d9e159 [ 501.689157][T17024] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 501.689175][T17024] RSP: 002b:00007f5c67c69028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 501.689216][T17024] RAX: ffffffffffffffda RBX: 00007f5c67025fa0 RCX: 00007f5c66d9e159 [ 501.689233][T17024] RDX: 03fffffffffffe8f RSI: 0000200000004d00 RDI: 0000000000000003 [ 501.689248][T17024] RBP: 00007f5c67c69090 R08: 0000000000000000 R09: 0000000000000000 [ 501.689263][T17024] R10: 0000000004000f50 R11: 0000000000000246 R12: 0000000000000002 [ 501.689276][T17024] R13: 00007f5c67026038 R14: 00007f5c67025fa0 R15: 00007ffe60da7118 [ 501.689311][T17024] [ 501.865085][ T6267] bond3: (slave gretap1): failed to get link speed/duplex [ 501.942324][ T6267] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 501.942363][ T6267] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 501.982323][ T6269] bond3: (slave gretap1): failed to get link speed/duplex [ 502.092487][ T6258] bond3: (slave gretap1): failed to get link speed/duplex [ 502.239028][ T6257] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 502.239075][ T6257] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 502.303680][ T6258] bond3: (slave gretap1): failed to get link speed/duplex [ 503.413170][T17085] syzkaller0: entered promiscuous mode [ 503.413214][T17085] syzkaller0: entered allmulticast mode [ 503.468798][T17089] syzkaller1: entered promiscuous mode [ 503.468844][T17089] syzkaller1: entered allmulticast mode [ 503.657209][ T4932] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 503.666461][ T4932] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 503.674644][ T4932] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 503.685641][ T4932] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 503.693194][ T4932] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 504.348310][T17108] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3144'. [ 504.700266][T17095] lo speed is unknown, defaulting to 1000 [ 504.803719][T17139] syzkaller1: entered promiscuous mode [ 504.803768][T17139] syzkaller1: entered allmulticast mode [ 505.751617][ T5628] Bluetooth: hci0: command tx timeout [ 505.947427][T17171] FAULT_INJECTION: forcing a failure. [ 505.947427][T17171] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 505.961522][T17171] CPU: 1 UID: 0 PID: 17171 Comm: syz.1.3161 Not tainted syzkaller #0 PREEMPT(full) [ 505.961552][T17171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 505.961566][T17171] Call Trace: [ 505.961575][T17171] [ 505.961585][T17171] dump_stack_lvl+0xe8/0x150 [ 505.961623][T17171] should_fail_ex+0x410/0x560 [ 505.961660][T17171] _copy_to_user+0x31/0xb0 [ 505.961685][T17171] bpf_test_finish+0x4ea/0x690 [ 505.961812][T17171] ? __pfx_bpf_test_finish+0x10/0x10 [ 505.961844][T17171] ? _copy_from_user+0x94/0xb0 [ 505.961867][T17171] ? bpf_test_init+0x113/0x150 [ 505.961893][T17171] bpf_prog_test_run_xdp+0x8bc/0x11d0 [ 505.961939][T17171] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 505.961971][T17171] ? __fget_files+0x2a/0x420 [ 505.962007][T17171] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 505.962034][T17171] bpf_prog_test_run+0x2c5/0x340 [ 505.962065][T17171] __sys_bpf+0xa22/0xd90 [ 505.962102][T17171] ? __pfx___sys_bpf+0x10/0x10 [ 505.962145][T17171] ? __fget_files+0x2a/0x420 [ 505.962192][T17171] ? ksys_write+0x242/0x270 [ 505.962227][T17171] ? __pfx_ksys_write+0x10/0x10 [ 505.962265][T17171] __x64_sys_bpf+0xba/0xd0 [ 505.962290][T17171] do_syscall_64+0x166/0x520 [ 505.962320][T17171] ? trace_irq_disable+0x3b/0x140 [ 505.962341][T17171] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.962365][T17171] ? clear_bhb_loop+0x70/0xc0 [ 505.962393][T17171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.962415][T17171] RIP: 0033:0x7f24ff79e159 [ 505.962435][T17171] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 505.962454][T17171] RSP: 002b:00007f250072a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 505.962477][T17171] RAX: ffffffffffffffda RBX: 00007f24ffa25fa0 RCX: 00007f24ff79e159 [ 505.962493][T17171] RDX: 0000000000000050 RSI: 0000200000001840 RDI: 000000000000000a [ 505.962508][T17171] RBP: 00007f250072a090 R08: 0000000000000000 R09: 0000000000000000 [ 505.962523][T17171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 505.962536][T17171] R13: 00007f24ffa26038 R14: 00007f24ffa25fa0 R15: 00007ffe19b95e48 [ 505.962572][T17171] [ 506.273393][T17095] bridge0: port 1(bridge_slave_0) entered blocking state [ 506.275447][T17095] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.275957][T17095] bridge_slave_0: entered allmulticast mode [ 506.314175][T17095] bridge_slave_0: entered promiscuous mode [ 506.345998][T17095] bridge0: port 2(bridge_slave_1) entered blocking state [ 506.346646][T17095] bridge0: port 2(bridge_slave_1) entered disabled state [ 506.346800][T17095] bridge_slave_1: entered allmulticast mode [ 506.355446][T17095] bridge_slave_1: entered promiscuous mode [ 506.404220][T17179] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3164'. [ 506.420106][T17181] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3163'. [ 506.448941][T17095] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 506.462789][T17095] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 506.610333][T17095] team0: Port device team_slave_0 added [ 506.674776][T17095] team0: Port device team_slave_1 added [ 506.717844][T17095] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 506.725797][T17095] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 506.725842][T17095] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 506.727269][T17186] syzkaller0: entered promiscuous mode [ 506.727290][T17186] syzkaller0: entered allmulticast mode [ 506.727708][T17191] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3167'. [ 506.788634][T17095] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 506.796459][T17095] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 506.823336][T17095] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 506.875975][T17191] gretap0: entered promiscuous mode [ 506.984136][T17194] syzkaller1: entered promiscuous mode [ 506.989794][T17194] syzkaller1: entered allmulticast mode [ 507.109387][T17095] hsr_slave_0: entered promiscuous mode [ 507.119050][T17095] hsr_slave_1: entered promiscuous mode [ 507.125561][T17095] debugfs: 'hsr0' already exists in 'hsr' [ 507.125586][T17095] Cannot create hsr debugfs directory [ 507.391128][ T6257] net_ratelimit: 21 callbacks suppressed [ 507.391395][ T6257] bond3: (slave gretap1): failed to get link speed/duplex [ 507.423725][T17218] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3175'. [ 507.668355][T17224] syzkaller0: entered promiscuous mode [ 507.668405][T17224] syzkaller0: entered allmulticast mode [ 507.821525][ T5628] Bluetooth: hci0: command tx timeout [ 507.878852][T17095] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 507.890538][T17095] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.921523][ T6267] bond3: (slave gretap1): failed to get link speed/duplex [ 508.048486][T17235] syzkaller1: entered promiscuous mode [ 508.055295][T17235] syzkaller1: entered allmulticast mode [ 508.080255][T17095] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 508.080323][T17095] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.245924][T17095] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 508.259038][T17095] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.366139][T17255] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3186'. [ 508.386655][ T6258] bond3: (slave gretap1): failed to get link speed/duplex [ 508.574504][T17095] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 508.592986][T17095] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.662438][T17262] syzkaller0: entered promiscuous mode [ 508.662503][T17262] syzkaller0: entered allmulticast mode [ 508.852511][ T6267] bond3: (slave gretap1): failed to get link speed/duplex [ 509.231144][T17280] syzkaller1: entered promiscuous mode [ 509.231188][T17280] syzkaller1: entered allmulticast mode [ 509.319376][T17095] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 509.330197][T17281] netlink: 'syz.2.3193': attribute type 49 has an invalid length. [ 509.354728][T17095] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 509.500293][T17281] ip6gretap0: entered promiscuous mode [ 509.506522][T17281] ip6gretap0: entered allmulticast mode [ 509.524309][T17095] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 509.541505][T17095] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 509.549731][T17095] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 509.563167][T17095] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 509.629079][T17095] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 509.639736][T17095] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 509.755739][ T6269] bond3: (slave gretap1): failed to get link speed/duplex [ 509.901105][ T5628] Bluetooth: hci0: command tx timeout [ 509.981551][ T6267] bond3: (slave gretap1): failed to get link speed/duplex [ 510.102446][T17319] No such timeout policy "syz0" [ 510.112073][ T6269] bond3: (slave gretap1): failed to get link speed/duplex [ 510.134433][T17320] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3204'. [ 510.157707][T17095] 8021q: adding VLAN 0 to HW filter on device bond0 [ 510.166599][T17316] syzkaller0: entered promiscuous mode [ 510.166646][T17316] syzkaller0: entered allmulticast mode [ 510.205573][T17324] ip6t_rt: `--rt-type 0' required before `--rt-0-*' [ 510.268854][T17095] 8021q: adding VLAN 0 to HW filter on device team0 [ 510.287165][ T6267] bond3: (slave gretap1): failed to get link speed/duplex [ 510.300337][ T6269] bridge0: port 1(bridge_slave_0) entered blocking state [ 510.300461][ T6269] bridge0: port 1(bridge_slave_0) entered forwarding state [ 510.336743][ T6269] bridge0: port 2(bridge_slave_1) entered blocking state [ 510.336981][ T6269] bridge0: port 2(bridge_slave_1) entered forwarding state [ 510.365023][T17327] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 510.393573][ T6267] bond3: (slave gretap1): failed to get link speed/duplex [ 510.561244][ T6271] bond3: (slave gretap1): failed to get link speed/duplex [ 510.754224][T17343] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3207'. [ 510.778041][T17343] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3207'. [ 511.280003][T17366] ipvlan1: entered promiscuous mode [ 511.286390][T17366] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3211'. [ 511.981294][ T5628] Bluetooth: hci0: command tx timeout [ 514.136350][ T4983] udevd[4983]: worker [6731] /devices/virtual/block/nbd1 timeout; kill it [ 514.136510][ T4983] udevd[4983]: seq 17241 '/devices/virtual/block/nbd1' killed [ 514.543459][ T6267] net_ratelimit: 6 callbacks suppressed [ 514.543509][ T6267] bond3: (slave gretap1): failed to get link speed/duplex [ 514.648818][T17095] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 514.656377][ T6267] bond3: (slave gretap1): failed to get link speed/duplex [ 514.773346][T17385] IPVS: length: 15 != 8 [ 514.784700][T17095] veth0_vlan: entered promiscuous mode [ 514.791232][ T6257] bond3: (slave gretap1): failed to get link speed/duplex [ 514.843962][T17095] veth1_vlan: entered promiscuous mode [ 514.851712][T17386] syzkaller0: entered promiscuous mode [ 514.851774][T17386] syzkaller0: entered allmulticast mode [ 515.086148][T17095] veth0_macvtap: entered promiscuous mode [ 515.158704][T17396] syzkaller0: entered promiscuous mode [ 515.165176][T17396] syzkaller0: entered allmulticast mode [ 515.173771][T17095] veth1_macvtap: entered promiscuous mode [ 515.263401][T17402] netlink: 'syz.4.3218': attribute type 10 has an invalid length. [ 516.067185][ T30] page_pool_release_retry() stalled pool shutdown: id 225, 1 inflight 60 sec [ 516.241204][ T1708] block nbd1: Possible stuck request ffff888027887000: control (read@0,1024B). Runtime 210 seconds [ 517.480711][T17402] team0: Device vxcan0 is of different type [ 517.543762][T17095] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 517.615845][T17095] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 517.692483][T17420] syz_tun: tun_net_xmit 62 [ 518.202113][ T6267] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.202196][ T6267] bond3: (slave gretap1): failed to get link speed/duplex [ 518.206485][ T6267] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.206543][ T6267] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.219615][ T6267] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.473855][ T6271] bond3: (slave gretap1): failed to get link speed/duplex [ 518.526388][T17434] IPVS: set_ctl: invalid protocol: 58 255.255.255.255:20001 [ 518.588992][T17432] syzkaller0: entered promiscuous mode [ 518.589055][T17432] syzkaller0: entered allmulticast mode [ 518.599131][T17434] netlink: 'syz.4.3226': attribute type 61 has an invalid length. [ 518.614714][ T6257] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 518.614753][ T6257] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 518.734938][T17436] syzkaller0: entered promiscuous mode [ 518.741368][T17436] syzkaller0: entered allmulticast mode [ 518.797110][ T6271] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 518.797158][ T6271] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 518.831162][ T6266] bond3: (slave gretap1): failed to get link speed/duplex [ 519.012446][ T6267] bond3: (slave gretap1): failed to get link speed/duplex [ 519.067602][T17450] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 519.075942][T17450] netlink: 'syz.4.3231': attribute type 39 has an invalid length. [ 519.124191][ T6267] bond3: (slave gretap1): failed to get link speed/duplex [ 519.238738][T15203] bond3: (slave gretap1): failed to get link speed/duplex [ 519.384828][ T4932] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 519.398584][ T4932] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 519.406706][ T4932] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 519.415467][ T4932] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 519.428350][ T5631] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 519.533805][T17461] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3235'. [ 519.587694][T17461] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3235'. [ 519.626592][ T6267] net_ratelimit: 2 callbacks suppressed [ 519.626656][ T6267] bond3: (slave gretap1): failed to get link speed/duplex [ 519.700484][T17463] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3236'. [ 519.732416][T15203] bond3: (slave gretap1): failed to get link speed/duplex [ 519.773617][T17463] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3236'. [ 519.846044][ T6267] bond3: (slave gretap1): failed to get link speed/duplex [ 519.951102][ T6266] bond3: (slave gretap1): failed to get link speed/duplex [ 520.062063][T17475] siw: device registration error -23 [ 520.389045][ T6267] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.606197][ T6266] bond3: (slave gretap1): failed to get link speed/duplex [ 520.739261][T17489] netlink: 'syz.3.3243': attribute type 2 has an invalid length. [ 520.739314][T17489] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3243'. [ 520.904814][ T6267] netdevsim netdevsim2 netdevsim2 (unregistering): left allmulticast mode [ 520.928709][ T6267] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.972907][T15203] bond3: (slave gretap1): failed to get link speed/duplex [ 521.048675][ T6267] bond0: (slave netdevsim1): Releasing backup interface [ 521.083448][ T6267] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.161241][T15203] bond3: (slave gretap1): failed to get link speed/duplex [ 521.282723][ T6267] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.293032][T17503] xt_TCPMSS: Only works on TCP SYN packets [ 521.353385][ T6266] bond3: (slave gretap1): failed to get link speed/duplex [ 521.434347][T17454] lo speed is unknown, defaulting to 1000 [ 521.501101][ T5628] Bluetooth: hci1: command tx timeout [ 521.691124][ T6257] bond3: (slave gretap1): failed to get link speed/duplex [ 521.976327][T17525] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3254'. [ 521.995168][T17525] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3254'. [ 522.045263][ T6267] bridge_slave_1: left allmulticast mode [ 522.054031][ T6267] bridge_slave_1: left promiscuous mode [ 522.061534][ T6267] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.108580][ T6267] bridge_slave_0: left allmulticast mode [ 522.116228][ T6267] bridge_slave_0: left promiscuous mode [ 522.125222][ T6267] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.246778][T17530] netlink: 'syz.0.3256': attribute type 1 has an invalid length. [ 522.428962][T17538] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3258'. [ 522.429009][T17538] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3258'. [ 522.974590][ T6267] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 523.019387][ T6267] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 523.061780][ T6257] smbdirect: ib_dev[syz1] removed [ 523.079829][ T6267] bond0 (unregistering): Released all slaves [ 523.116445][ T6267] bond1 (unregistering): Released all slaves [ 523.168977][ T6267] bond2 (unregistering): (slave lo): Releasing backup interface [ 523.189439][ T6267] bond2 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 523.203734][ T6267] bond2 (unregistering): Released all slaves [ 523.245420][ T6267] bond3 (unregistering): Released all slaves [ 523.279601][ T6267] bond4 (unregistering): Released all slaves [ 523.404929][ T6269] bond3: (slave gretap1): failed to get link speed/duplex [ 523.410444][ T30] lo speed is unknown, defaulting to 1000 [ 523.410605][ T30] syz2: Port: 1 Link DOWN [ 523.415389][ T1612] lo speed is unknown, defaulting to 1000 [ 523.416997][ T5803] infiniband syz1: ib_query_port failed (-19) [ 523.488179][ T5278] 8021q: adding VLAN 0 to HW filter on device eth1 [ 523.553317][ T6267] tipc: Left network mode [ 523.580952][ T5628] Bluetooth: hci1: command tx timeout [ 524.339582][T17603] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3265'. [ 524.420321][T17595] tipc: Started in network mode [ 524.420385][T17595] tipc: Node identity 7f000001, cluster identity 4711 [ 524.434379][T17595] tipc: Enabled bearer , priority 10 [ 524.646772][ T6267] hsr_slave_0: left promiscuous mode [ 524.683747][ T6267] veth1_macvtap: left promiscuous mode [ 524.683920][ T6267] veth0_macvtap: left promiscuous mode [ 524.684417][ T6267] veth1_vlan: left promiscuous mode [ 524.707286][ T6267] veth0_vlan: left promiscuous mode [ 525.402276][ T6267] team0 (unregistering): Port device team_slave_1 removed [ 525.468270][ T6267] team0 (unregistering): Port device team_slave_0 removed [ 525.661030][ T5628] Bluetooth: hci1: command tx timeout [ 525.753858][ T6271] smbdirect: ib_dev[syz2] removed [ 525.868803][ T5278] 8021q: adding VLAN 0 to HW filter on device eth2 [ 525.876954][ T4944] tipc: Node number set to 2130706433 [ 525.887065][ T6269] net_ratelimit: 5 callbacks suppressed [ 525.887105][ T6269] bond3: (slave gretap1): failed to get link speed/duplex [ 526.236624][T17659] __nla_validate_parse: 2 callbacks suppressed [ 526.243890][T17659] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3275'. [ 526.255165][T17659] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3275'. [ 526.339145][T17454] bridge0: port 1(bridge_slave_0) entered blocking state [ 526.344729][T17454] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.345154][T17454] bridge_slave_0: entered allmulticast mode [ 526.375905][T17454] bridge_slave_0: entered promiscuous mode [ 526.406355][T17454] bridge0: port 2(bridge_slave_1) entered blocking state [ 526.406477][T17454] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.406666][T17454] bridge_slave_1: entered allmulticast mode [ 526.437861][T17454] bridge_slave_1: entered promiscuous mode [ 526.471754][ T6257] bond3: (slave gretap1): failed to get link speed/duplex [ 526.481292][T17668] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3277'. [ 526.782457][ T6266] bond3: (slave gretap1): failed to get link speed/duplex [ 526.818249][T17454] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 526.839011][ T6267] IPVS: stop unused estimator thread 0... [ 526.875924][T17454] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 527.036483][T17454] team0: Port device team_slave_0 added [ 527.058091][T17454] team0: Port device team_slave_1 added [ 527.099457][T17454] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 527.109783][T17454] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 527.109846][T17454] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 527.205064][T17454] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 527.218667][T17454] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 527.218737][T17454] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 527.282062][ T6267] bond3: (slave gretap1): failed to get link speed/duplex [ 527.503980][T17703] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3285'. [ 527.525880][T17454] hsr_slave_0: entered promiscuous mode [ 527.533961][T17703] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3285'. [ 527.538403][T17454] hsr_slave_1: entered promiscuous mode [ 527.548089][T17454] debugfs: 'hsr0' already exists in 'hsr' [ 527.548149][T17454] Cannot create hsr debugfs directory [ 527.549015][T17703] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3285'. [ 527.554271][ T6267] bond3: (slave gretap1): failed to get link speed/duplex [ 527.615003][T17705] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3286'. [ 527.646283][T17705] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3286'. [ 527.678510][T17705] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3286'. [ 527.678567][T17705] netlink: 'syz.1.3286': attribute type 7 has an invalid length. [ 527.678596][T17705] netlink: 'syz.1.3286': attribute type 8 has an invalid length. [ 527.678614][T17705] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3286'. [ 527.736056][ T5278] 8021q: adding VLAN 0 to HW filter on device eth3 [ 527.746723][ T5628] Bluetooth: hci1: command tx timeout [ 527.753808][ T6267] bond3: (slave gretap1): failed to get link speed/duplex [ 527.986222][T17708] syz_tun: entered promiscuous mode [ 527.992917][T17708] macvlan2: entered promiscuous mode [ 528.003983][T17708] syz_tun: left promiscuous mode [ 528.343337][ T6257] bond3: (slave gretap1): failed to get link speed/duplex [ 528.622910][ T6267] bond3: (slave gretap1): failed to get link speed/duplex [ 528.931777][ T6267] bond3: (slave gretap1): failed to get link speed/duplex [ 529.141196][ T6257] bond3: (slave gretap1): failed to get link speed/duplex [ 529.315332][T17761] x_tables: duplicate underflow at hook 2 [ 529.577629][T17768] veth0: entered promiscuous mode [ 529.723964][T17766] veth0: left promiscuous mode [ 530.159120][T17454] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 530.183171][T17454] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 530.196634][T17454] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 530.235988][T17454] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 530.245662][T17454] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 530.280325][T17454] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 530.296994][T17454] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 530.344881][T17454] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 530.399670][T17801] syzkaller0: entered promiscuous mode [ 530.399725][T17801] syzkaller0: entered allmulticast mode [ 530.888593][T17454] 8021q: adding VLAN 0 to HW filter on device bond0 [ 531.109288][T17830] bridge0: port 2(bridge_slave_1) entered disabled state [ 531.110006][T17830] bridge0: port 1(bridge_slave_0) entered disabled state [ 531.371958][T17830] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 531.400062][T17830] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 532.101862][ T6266] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.101988][ T6266] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.102100][ T6266] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.102209][ T6266] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.112944][ T6271] net_ratelimit: 8 callbacks suppressed [ 532.113002][ T6271] bond3: (slave gretap1): failed to get link speed/duplex [ 532.256844][T17454] 8021q: adding VLAN 0 to HW filter on device team0 [ 532.319981][ T6271] bridge0: port 1(bridge_slave_0) entered blocking state [ 532.320209][ T6271] bridge0: port 1(bridge_slave_0) entered forwarding state [ 532.350026][ T6267] bridge0: port 2(bridge_slave_1) entered blocking state [ 532.350275][ T6267] bridge0: port 2(bridge_slave_1) entered forwarding state [ 532.381934][ T6267] bond3: (slave gretap1): failed to get link speed/duplex [ 532.601572][ T6266] bond3: (slave gretap1): failed to get link speed/duplex [ 532.702917][T17888] openvswitch: netlink: Mixed IPv4 and IPv6 tunnel attributes [ 532.711473][ T6269] bond3: (slave gretap1): failed to get link speed/duplex [ 532.842817][ T6257] bond3: (slave gretap1): failed to get link speed/duplex [ 532.952047][ T6257] bond3: (slave gretap1): failed to get link speed/duplex [ 533.062059][ T6257] bond3: (slave gretap1): failed to get link speed/duplex [ 533.157613][T17907] __nla_validate_parse: 3 callbacks suppressed [ 533.164237][T17907] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3321'. [ 533.184107][T17907] macvlan2: entered promiscuous mode [ 533.189686][T17907] syz_tun: entered promiscuous mode [ 533.197348][T17907] syz_tun: left promiscuous mode [ 533.337578][ T6266] bond3: (slave gretap1): failed to get link speed/duplex [ 533.443308][T15203] bond3: (slave gretap1): failed to get link speed/duplex [ 533.672620][T17927] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3323'. [ 534.188954][T17454] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 534.417686][T17454] veth0_vlan: entered promiscuous mode [ 534.480626][T17454] veth1_vlan: entered promiscuous mode [ 534.709669][T17974] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 534.766284][T17981] netlink: 116 bytes leftover after parsing attributes in process `syz.0.3334'. [ 534.766336][T17981] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3334'. [ 535.087956][T17974] bond1 (unregistering): Released all slaves [ 535.259204][T17993] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3336'. [ 535.269471][T17993] nbd: must specify a size in bytes for the device [ 535.290339][T17454] veth0_macvtap: entered promiscuous mode [ 535.308286][T17993] netlink: 'syz.4.3336': attribute type 20 has an invalid length. [ 535.318890][T17993] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3336'. [ 535.397683][T17993] netlink: 'syz.4.3336': attribute type 20 has an invalid length. [ 535.407000][T17993] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3336'. [ 535.414964][ T6257] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 535.415113][ T6257] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 535.415220][ T6257] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 535.415325][ T6257] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 535.466625][T17454] veth1_macvtap: entered promiscuous mode [ 535.604476][T17454] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 535.635998][T17454] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 535.682323][T15203] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.682481][T15203] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.682618][T15203] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.682725][T15203] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.787973][T18010] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3340'. [ 535.788029][T18010] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3340'. [ 535.852930][T18015] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3341'. [ 536.052587][ T6267] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 536.052631][ T6267] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 536.153102][ T6258] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 536.153139][ T6258] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 536.283050][T18023] tipc: Cannot configure node identity twice [ 537.088865][T18061] FAULT_INJECTION: forcing a failure. [ 537.088865][T18061] name failslab, interval 1, probability 0, space 0, times 0 [ 537.088916][T18061] CPU: 1 UID: 0 PID: 18061 Comm: syz.3.3351 Not tainted syzkaller #0 PREEMPT(full) [ 537.088940][T18061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 537.088953][T18061] Call Trace: [ 537.088962][T18061] [ 537.088971][T18061] dump_stack_lvl+0xe8/0x150 [ 537.089006][T18061] should_fail_ex+0x410/0x560 [ 537.089040][T18061] ? __alloc_skb+0x1db/0x7a0 [ 537.089068][T18061] should_failslab+0xa8/0x100 [ 537.089094][T18061] ? __alloc_skb+0x1db/0x7a0 [ 537.089120][T18061] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 537.089167][T18061] ? __alloc_skb+0x18d/0x7a0 [ 537.089198][T18061] ? __alloc_skb+0x1db/0x7a0 [ 537.089236][T18061] __alloc_skb+0x1db/0x7a0 [ 537.089272][T18061] alloc_skb_with_frags+0xc6/0x760 [ 537.089401][T18061] ? __lock_acquire+0x6df/0x2e50 [ 537.089426][T18061] sock_alloc_send_pskb+0x878/0x990 [ 537.089471][T18061] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 537.089513][T18061] tun_get_user+0x8fb/0x44d0 [ 537.089657][T18061] ? aa_file_perm+0x4ed/0x15f0 [ 537.089681][T18061] ? __pfx_tun_get_user+0x10/0x10 [ 537.089715][T18061] ? __lock_acquire+0x6df/0x2e50 [ 537.089742][T18061] ? kstrtoull+0x137/0x1d0 [ 537.089782][T18061] ? ref_tracker_alloc+0x341/0x4b0 [ 537.089817][T18061] ? lock_acquire+0x115/0x350 [ 537.089846][T18061] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 537.089884][T18061] ? lock_acquire+0x115/0x350 [ 537.089907][T18061] ? tun_get+0x1c/0x2f0 [ 537.089943][T18061] ? tun_get+0x1c/0x2f0 [ 537.089972][T18061] ? tun_get+0x1c/0x2f0 [ 537.090009][T18061] tun_chr_write_iter+0x113/0x200 [ 537.090043][T18061] vfs_write+0x612/0xba0 [ 537.090086][T18061] ? __pfx_vfs_write+0x10/0x10 [ 537.090131][T18061] ? __fget_files+0x2a/0x420 [ 537.090175][T18061] ksys_write+0x150/0x270 [ 537.090211][T18061] ? __pfx_ksys_write+0x10/0x10 [ 537.090255][T18061] do_syscall_64+0x166/0x520 [ 537.090285][T18061] ? trace_irq_disable+0x3b/0x140 [ 537.090307][T18061] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.090338][T18061] ? clear_bhb_loop+0x70/0xc0 [ 537.090367][T18061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.090390][T18061] RIP: 0033:0x7f5c66d5e98e [ 537.090413][T18061] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 537.090433][T18061] RSP: 002b:00007f5c67c68fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 537.090458][T18061] RAX: ffffffffffffffda RBX: 00007f5c67c696c0 RCX: 00007f5c66d5e98e [ 537.090476][T18061] RDX: 0000000000000d81 RSI: 0000200000000ec0 RDI: 00000000000000c8 [ 537.090492][T18061] RBP: 00007f5c67c69090 R08: 0000000000000000 R09: 0000000000000000 [ 537.090507][T18061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 537.090521][T18061] R13: 00007f5c67026038 R14: 00007f5c67025fa0 R15: 00007ffe60da7118 [ 537.090558][T18061] [ 537.255698][ T6269] net_ratelimit: 23 callbacks suppressed [ 537.255860][ T6269] bond3: (slave gretap1): failed to get link speed/duplex [ 537.365639][ T5633] block nbd2: Receive control failed (result -110) [ 537.366166][ T5633] [ 537.430780][ T5633] ====================================================== [ 537.437854][ T5633] WARNING: possible circular locking dependency detected [ 537.444915][ T5633] syzkaller #0 Not tainted [ 537.449358][ T5633] ------------------------------------------------------ [ 537.456410][ T5633] kworker/u9:7/5633 is trying to acquire lock: [ 537.462598][ T5633] ffff888050915060 (sk_lock-AF_INET-NBD){+.+.}-{0:0}, at: inet_shutdown+0x6a/0x390 [ 537.471966][ T5633] [ 537.471966][ T5633] but task is already holding lock: [ 537.479365][ T5633] ffff8880783ef868 (&nsock->tx_lock){+.+.}-{4:4}, at: recv_work+0x1cd9/0x1e10 [ 537.488431][ T5633] [ 537.488431][ T5633] which lock already depends on the new lock. [ 537.488431][ T5633] [ 537.498859][ T5633] [ 537.498859][ T5633] the existing dependency chain (in reverse order) is: [ 537.507902][ T5633] [ 537.507902][ T5633] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 537.515590][ T5633] __mutex_lock+0x19d/0x1550 [ 537.520751][ T5633] nbd_queue_rq+0x373/0xff0 [ 537.525822][ T5633] blk_mq_dispatch_rq_list+0x499/0x1990 [ 537.532041][ T5633] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 537.538997][ T5633] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 537.545540][ T5633] blk_mq_run_work_fn+0x16c/0x300 [ 537.551165][ T5633] process_scheduled_works+0xc3d/0x1630 [ 537.557285][ T5633] worker_thread+0xa47/0xfb0 [ 537.562442][ T5633] kthread+0x38b/0x480 [ 537.567063][ T5633] ret_from_fork+0x514/0xb70 [ 537.572217][ T5633] ret_from_fork_asm+0x1a/0x30 [ 537.577563][ T5633] [ 537.577563][ T5633] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 537.584824][ T5633] __mutex_lock+0x19d/0x1550 [ 537.589989][ T5633] nbd_queue_rq+0xc1/0xff0 [ 537.594975][ T5633] blk_mq_dispatch_rq_list+0x499/0x1990 [ 537.601088][ T5633] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 537.607984][ T5633] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 537.614534][ T5633] blk_mq_run_work_fn+0x16c/0x300 [ 537.620129][ T5633] process_scheduled_works+0xc3d/0x1630 [ 537.626242][ T5633] worker_thread+0xa47/0xfb0 [ 537.631399][ T5633] kthread+0x38b/0x480 [ 537.636004][ T5633] ret_from_fork+0x514/0xb70 [ 537.641146][ T5633] ret_from_fork_asm+0x1a/0x30 [ 537.646458][ T5633] [ 537.646458][ T5633] -> #4 (set->srcu){.+.+}-{0:0}: [ 537.653609][ T5633] __synchronize_srcu+0xc9/0x2f0 [ 537.659089][ T5633] elevator_switch+0x1e8/0x7b0 [ 537.664505][ T5633] elevator_change+0x2fa/0x480 [ 537.669832][ T5633] elevator_set_default+0x375/0x440 [ 537.675578][ T5633] blk_register_queue+0x3f3/0x4e0 [ 537.681198][ T5633] __add_disk+0x6cb/0xe30 [ 537.686090][ T5633] add_disk_fwnode+0x100/0x3a0 [ 537.691393][ T5633] nbd_dev_add+0x733/0xb60 [ 537.696347][ T5633] nbd_init+0x168/0x1f0 [ 537.701059][ T5633] do_one_initcall+0x250/0x870 [ 537.706376][ T5633] do_initcall_level+0x10a/0x1a0 [ 537.711861][ T5633] do_initcalls+0x59/0xa0 [ 537.716734][ T5633] kernel_init_freeable+0x29d/0x3e0 [ 537.722483][ T5633] kernel_init+0x22/0x1d0 [ 537.727356][ T5633] ret_from_fork+0x514/0xb70 [ 537.732497][ T5633] ret_from_fork_asm+0x1a/0x30 [ 537.737805][ T5633] [ 537.737805][ T5633] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 537.745647][ T5633] __mutex_lock+0x19d/0x1550 [ 537.750779][ T5633] elevator_change+0x1af/0x480 [ 537.756088][ T5633] elevator_set_none+0xb5/0x140 [ 537.761480][ T5633] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 537.767820][ T5633] nbd_start_device+0x189/0xb30 [ 537.773232][ T5633] nbd_genl_connect+0x167d/0x1cd0 [ 537.778856][ T5633] genl_family_rcv_msg_doit+0x233/0x340 [ 537.784947][ T5633] genl_rcv_msg+0x614/0x7a0 [ 537.790023][ T5633] netlink_rcv_skb+0x226/0x4a0 [ 537.795336][ T5633] genl_rcv+0x28/0x40 [ 537.799857][ T5633] netlink_unicast+0x7bd/0x940 [ 537.805155][ T5633] netlink_sendmsg+0x813/0xb40 [ 537.810463][ T5633] sock_sendmsg_nosec+0x13a/0x180 [ 537.816037][ T5633] ____sys_sendmsg+0x54e/0x850 [ 537.821350][ T5633] ___sys_sendmsg+0x2a5/0x360 [ 537.826567][ T5633] __x64_sys_sendmsg+0x1b1/0x290 [ 537.832039][ T5633] do_syscall_64+0x166/0x520 [ 537.837176][ T5633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.843616][ T5633] [ 537.843616][ T5633] -> #2 (&q->q_usage_counter(io)#52){++++}-{0:0}: [ 537.852242][ T5633] blk_alloc_queue+0x544/0x690 [ 537.857544][ T5633] __blk_mq_alloc_disk+0x194/0x390 [ 537.863199][ T5633] nbd_dev_add+0x494/0xb60 [ 537.868859][ T5633] nbd_init+0x168/0x1f0 [ 537.873553][ T5633] do_one_initcall+0x250/0x870 [ 537.878883][ T5633] do_initcall_level+0x10a/0x1a0 [ 537.884361][ T5633] do_initcalls+0x59/0xa0 [ 537.889238][ T5633] kernel_init_freeable+0x29d/0x3e0 [ 537.894989][ T5633] kernel_init+0x22/0x1d0 [ 537.899866][ T5633] ret_from_fork+0x514/0xb70 [ 537.905006][ T5633] ret_from_fork_asm+0x1a/0x30 [ 537.910315][ T5633] [ 537.910315][ T5633] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 537.917540][ T5633] fs_reclaim_acquire+0x71/0x100 [ 537.923033][ T5633] kmem_cache_alloc_node_noprof+0x5f/0x610 [ 537.929406][ T5633] __alloc_skb+0x1db/0x7a0 [ 537.934359][ T5633] tcp_stream_alloc_skb+0x3f/0x580 [ 537.940092][ T5633] tcp_connect+0x1646/0x54e0 [ 537.945270][ T5633] tcp_v4_connect+0x1051/0x1950 [ 537.950674][ T5633] __inet_stream_connect+0x258/0xe00 [ 537.956535][ T5633] inet_stream_connect+0x66/0xa0 [ 537.962023][ T5633] __sys_connect+0x316/0x450 [ 537.967165][ T5633] __x64_sys_connect+0x7a/0x90 [ 537.972475][ T5633] do_syscall_64+0x166/0x520 [ 537.977616][ T5633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.984051][ T5633] [ 537.984051][ T5633] -> #0 (sk_lock-AF_INET-NBD){+.+.}-{0:0}: [ 537.992073][ T5633] __lock_acquire+0x15ff/0x2e50 [ 537.997474][ T5633] lock_acquire+0x115/0x350 [ 538.002521][ T5633] lock_sock_nested+0x41/0x100 [ 538.007837][ T5633] inet_shutdown+0x6a/0x390 [ 538.012888][ T5633] nbd_mark_nsock_dead+0x2cb/0x550 [ 538.018549][ T5633] recv_work+0x1cee/0x1e10 [ 538.023520][ T5633] process_scheduled_works+0xc3d/0x1630 [ 538.029624][ T5633] worker_thread+0xa47/0xfb0 [ 538.034789][ T5633] kthread+0x38b/0x480 [ 538.039402][ T5633] ret_from_fork+0x514/0xb70 [ 538.044555][ T5633] ret_from_fork_asm+0x1a/0x30 [ 538.049869][ T5633] [ 538.049869][ T5633] other info that might help us debug this: [ 538.049869][ T5633] [ 538.060129][ T5633] Chain exists of: [ 538.060129][ T5633] sk_lock-AF_INET-NBD --> &cmd->lock --> &nsock->tx_lock [ 538.060129][ T5633] [ 538.073101][ T5633] Possible unsafe locking scenario: [ 538.073101][ T5633] [ 538.080580][ T5633] CPU0 CPU1 [ 538.085961][ T5633] ---- ---- [ 538.091335][ T5633] lock(&nsock->tx_lock); [ 538.095775][ T5633] lock(&cmd->lock); [ 538.102304][ T5633] lock(&nsock->tx_lock); [ 538.109253][ T5633] lock(sk_lock-AF_INET-NBD); [ 538.114027][ T5633] [ 538.114027][ T5633] *** DEADLOCK *** [ 538.114027][ T5633] [ 538.122193][ T5633] locks held by kworker/u9:7/5633: 3, last CPU#1: [ 538.128623][ T5633] #0: ffff8880277cb140 ((wq_completion)nbd2-recv){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 538.139888][ T5633] #1: ffffc90003cafc40 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 538.151651][ T5633] #2: ffff8880783ef868 (&nsock->tx_lock){+.+.}-{4:4}, at: recv_work+0x1cd9/0x1e10 [ 538.160994][ T5633] [ 538.160994][ T5633] stack backtrace: [ 538.166898][ T5633] CPU: 1 UID: 0 PID: 5633 Comm: kworker/u9:7 Not tainted syzkaller #0 PREEMPT(full) [ 538.176374][ T5633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 538.186450][ T5633] Workqueue: nbd2-recv recv_work [ 538.191412][ T5633] Call Trace: [ 538.194713][ T5633] [ 538.197678][ T5633] dump_stack_lvl+0xe8/0x150 [ 538.202304][ T5633] print_circular_bug+0x2e2/0x300 [ 538.207343][ T5633] check_noncircular+0x12f/0x150 [ 538.212300][ T5633] __lock_acquire+0x15ff/0x2e50 [ 538.217181][ T5633] lock_acquire+0x115/0x350 [ 538.221709][ T5633] ? inet_shutdown+0x6a/0x390 [ 538.226409][ T5633] ? __queue_work+0x1f8/0x10d0 [ 538.231202][ T5633] lock_sock_nested+0x41/0x100 [ 538.236010][ T5633] ? inet_shutdown+0x6a/0x390 [ 538.240709][ T5633] inet_shutdown+0x6a/0x390 [ 538.245236][ T5633] nbd_mark_nsock_dead+0x2cb/0x550 [ 538.250381][ T5633] recv_work+0x1cee/0x1e10 [ 538.254829][ T5633] ? lockdep_unlock+0x5c/0xd0 [ 538.259906][ T5633] ? __lock_acquire+0x14b9/0x2e50 [ 538.264956][ T5633] ? __pfx_recv_work+0x10/0x10 [ 538.269746][ T5633] ? lockdep_hardirqs_on+0x7b/0x110 [ 538.274971][ T5633] ? irqentry_exit+0x218/0x910 [ 538.279752][ T5633] ? trace_irq_disable+0x3b/0x140 [ 538.284799][ T5633] ? rcu_is_watching+0x16/0xb0 [ 538.289583][ T5633] ? process_scheduled_works+0x97a/0x1630 [ 538.295315][ T5633] process_scheduled_works+0xc3d/0x1630 [ 538.300893][ T5633] ? __pfx_process_scheduled_works+0x10/0x10 [ 538.306895][ T5633] ? assign_work+0x3cf/0x5d0 [ 538.311499][ T5633] worker_thread+0xa47/0xfb0 [ 538.316126][ T5633] ? __kthread_parkme+0x71/0x1f0 [ 538.321103][ T5633] kthread+0x38b/0x480 [ 538.325229][ T5633] ? __pfx_worker_thread+0x10/0x10 [ 538.330366][ T5633] ? __pfx_kthread+0x10/0x10 [ 538.334978][ T5633] ret_from_fork+0x514/0xb70 [ 538.339609][ T5633] ? __pfx_ret_from_fork+0x10/0x10 [ 538.344769][ T5633] ? __switch_to+0xc89/0x1420 [ 538.349479][ T5633] ? __pfx_kthread+0x10/0x10 [ 538.354088][ T5633] ret_from_fork_asm+0x1a/0x30 [ 538.358903][ T5633] [ 538.541466][ T6267] bond3: (slave gretap1): failed to get link speed/duplex [ 538.711722][ T6267] bond3: (slave gretap1): failed to get link speed/duplex [ 538.821731][T15203] bond3: (slave gretap1): failed to get link speed/duplex [ 538.931593][ T6271] bond3: (slave gretap1): failed to get link speed/duplex [ 539.042015][ T6257] bond3: (slave gretap1): failed to get link speed/duplex [ 539.151561][ T6257] bond3: (slave gretap1): failed to get link speed/duplex [ 539.262180][ T6266] bond3: (slave gretap1): failed to get link speed/duplex [ 539.371177][ T6257] bond3: (slave gretap1): failed to get link speed/duplex [ 539.481565][ T6271] bond3: (slave gretap1): failed to get link speed/duplex [ 542.342650][ T6266] net_ratelimit: 25 callbacks suppressed [ 542.342701][ T6266] bond3: (slave gretap1): failed to get link speed/duplex [ 542.452746][ T6271] bond3: (slave gretap1): failed to get link speed/duplex [ 542.562386][T15203] bond3: (slave gretap1): failed to get link speed/duplex [ 542.672776][T15203] bond3: (slave gretap1): failed to get link speed/duplex [ 542.781158][ T6266] bond3: (slave gretap1): failed to get link speed/duplex [ 542.892558][ T6266] bond3: (slave gretap1): failed to get link speed/duplex [ 543.002240][ T6257] bond3: (slave gretap1): failed to get link speed/duplex [ 543.110999][ T6271] bond3: (slave gretap1): failed to get link speed/duplex [ 543.221591][ T6257] bond3: (slave gretap1): failed to get link speed/duplex [ 543.331541][T15203] bond3: (slave gretap1): failed to get link speed/duplex [ 546.302032][ T1708] block nbd1: Possible stuck request ffff888027887000: control (read@0,1024B). Runtime 240 seconds [ 547.421523][ T6266] net_ratelimit: 36 callbacks suppressed [ 547.427592][ T6266] bond3: (slave gretap1): failed to get link speed/duplex