last executing test programs: 7.766145093s ago: executing program 3 (id=16823): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001000)={'syzkaller0\x00', 0x2}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x6040850}, 0x20000040) connect$unix(r1, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) ppoll(&(0x7f0000000100)=[{r1, 0x5082}], 0x1, 0x0, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x3, 0x6361, 0x6, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x40000880) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b928, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0xd, 0xffe0}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x1c, 0x2, [@TCA_PIE_ECN={0x8, 0x6, 0x1}, @TCA_PIE_TARGET={0x8, 0x1, 0x3}, @TCA_PIE_LIMIT={0x8, 0x2, 0x100}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4000000) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) close(0x3) vmsplice(r6, &(0x7f00000007c0)=[{&(0x7f00000001c0)="1bedaf4df0d49d4734e9eaec4b3b0405a80539d90f4b3b7f319847e1cd39da79b3a92943ef6c07d51dceccc053e15e8ba2b0b5628b16eee4336fc764b2f9a024cfe3637b9b0e03f7b421b5c1b0d3fadac13fa70f28b7c0dfae86945fb7e9a31994d3585ca67c0d023ecd0aa019e30720b568e4264a3a09a639a05b1828e6d34d59094a9df006721c974c07ff2efa08d64b0a4dece00ccde07c5137b102", 0x9d}, {&(0x7f0000000400)="a50829ea13f7bb4aeac6ed7721cabd059389eb412980b42b0077eb649fa1656499047e5a89b8fcaeb24499ee5682c4b70ecd88fb0231fefed7d17c5b6b31a61ec5e2983d5d9a81530700a7ed83e6867bd24c41a5ef9c1a49d6b565a68b2c4ea5efc525165e8ab763e627a39424b56bcac9547b29e65a473ccfd9060879261ec63bc7290716cf495f32841ccb17783b312c2fa0324a85509834092e40b9cfdcb925704a050ac59e4e756a680608b3e0adc13c4f9103cc2c571716171c81e89358c1", 0xc1}, {&(0x7f0000000500)="2494c2bf98eb6935e75985868165d4e623bdb6e6ee62d2acb59289144f10cce24b1b716bd1ad5b4b8d39c5aa2dfd1252e02a3a0024eb48cb43603a51b0186e14bc271db4b5c060", 0x47}, {&(0x7f0000001040)="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", 0x1000}, {&(0x7f00000006c0)="047969a0968a654a30446ccbbde556f5558772531eeaff86de69fe83f946c07e23c54f2e20d638b46635cb2c8c54c7bebc62dad545c912f8f2b9a3a393d33657cf8b2f4b8afcf50aebebe23dc2eb2b7a9f3c5eeb141c64d38983b0f37b15e9d0323f679e2d8e1941d30622c70bafb40be32b69cb294df7add120a2d1bae8544b43addc659e4f171f4eb067de878b276cdf14b0bdc5092260f4dfca957b5deb5c0019ca11ea7dd94beeba85f7a9691fbe2573427bb17ea436fb3678fc750031397b3ff9ccff83138ec0fd255878803b6164ec93b9f1700dfd43d2d7f85a4515df1754b0365384e5f6faf434dbe1353ada4c8753be93d2b269b9", 0xf9}, {&(0x7f00000005c0)="6f8b22b02e81ac86e53f987bbdf08b315f0d9a9187d7b021fabcf03893cd7347f649e408a5d7b9ae128cd4c48fdc6d3e82f3cf12766f35fdcd67e2523f36cc0d4cc3e4564d70f14b9514e080fb48540c8367c87d6010b61aa58e4daa168c", 0x5e}], 0x6, 0x8) 7.422802252s ago: executing program 3 (id=16826): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$alg(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@iv={0x18}, @iv={0x18}], 0x30}, 0x0) connect$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) 7.246491872s ago: executing program 3 (id=16827): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$tun(r2, &(0x7f00000002c0)=ANY=[], 0x33) sendfile(r2, r1, 0x0, 0x10000) write(r0, &(0x7f0000000340)="08000000010000", 0x7) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000005f00175627ad7000ffdb9f25000000001c"], 0x3c}, 0x1, 0x0, 0x0, 0x200008c4}, 0x4c040) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000ed0759cb47cd90df41fa7a40c72a22dcc53a83731c39b01fceb7"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) 6.769848732s ago: executing program 3 (id=16836): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000400)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000080), 0x12) r3 = openat$cgroup_procs(r1, &(0x7f0000000480)='cgroup.threads\x00', 0x2, 0x0) pread64(r3, &(0x7f0000001840)=""/4096, 0x1000, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet(r5, &(0x7f0000000940)=[{{&(0x7f0000000000)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000040)="93", 0x1}], 0x1}}], 0x1, 0x46054) setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000000100)={0x1, 0x2}, 0x8) close(r5) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newlink={0x60, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x28, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7f53, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0x800}}]}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x60}, 0x1, 0x0, 0x0, 0x880}, 0x8048802) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000004850000000c000000b70700000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001000000850000000600000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.690706372s ago: executing program 0 (id=16871): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x20}, 0x1, 0x0, 0x0, 0x48804}, 0x800) r1 = socket(0x10, 0x2, 0x6) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r1) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0x1, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4809c) r3 = socket$nl_route(0x10, 0x3, 0x0) pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000280)="31d24a5b815392a916c37bbd5a26ad6212360783fa6227cf9f2e1826138e56de33662397578f816a03facc61a96b1a9541952567918a48636b1e325fc3101d497d35a96f14eb7879a4609a53199b17c63280b0ac1959aa1ca5170413cbda89dab79811712cfa39dcb13de56c685aeb54ea8dc4456fe509467de39dd7e07d89ca3cad454a3e5c2a14bcf44ede13c154832de0975d6b4de8ed464f35777f48dea46dd2ff78e3eeecd1eecd8e417e6a2b481226fdbc9bbee0d26192935d4a450b3c6fb3fe8b48397f19a1e8820f517473d375b5245f70ef420cdb13b05e14", 0xdd}], 0x1, 0x10001, 0x10001) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f00000003c0)={0x0, 0xef, "bc6d9ac84b371703ae0424955155eea83b1044cd24136aed519f998cde1009f2df3716f80b73138159f8cb9e46c926774d7bf2e697dfc4fa6b67a8dd0dabf5349e3163101a5a007d6ebe8efc863c90577a9e1e7b56570d24078bbf267678f25ac039a726691d3d0972096b892bb6b141a2611781ec12b468a5994d987373077bfcc6e0d4dd3e873c1fd545bb7da76ca7708fd25ad4a26e50501f1aa7b2bb69f2050fa90e9f6908e344fa6f599c29837181aa6ac65d8f0c9c41d5af0d46dee2b6c7db6900433cefd9f388a3354b7dfea892e675a49c8ee59331adf71632dacc05dc0d63c173b59968db475ab6f0acfd"}, &(0x7f00000004c0)=0xf7) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000500)='macvtap0\x00') socket$xdp(0x2c, 0x3, 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), r1) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r6, 0x800, 0x70bd27, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) r7 = socket$inet6(0xa, 0x4, 0x6) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000700)=@mangle={'mangle\x00', 0x1f, 0x6, 0x7b8, 0x358, 0x478, 0x0, 0x358, 0x238, 0x6e8, 0x6e8, 0x6e8, 0x6e8, 0x6e8, 0x6, &(0x7f0000000680), {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @local, [0xff000000, 0x7c01adec5302047b, 0xffffff00, 0xff000000], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffff00], 'batadv_slave_1\x00', 'wg0\x00', {}, {}, 0x1d, 0xb, 0x2}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}, {0x3}}, @common=@eui64={{0x28}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x6, 0xee, 0x2}}}, {{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@dst={{0x48}, {0xe61, 0x4, 0x1, [0x4, 0xb12, 0x5, 0x6, 0xc2cf, 0x17, 0x5, 0x7, 0x8001, 0x8, 0x3, 0x4, 0x3, 0x6, 0x9, 0x6]}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x8}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0xf4}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @private0, [0xff000000, 0xff, 0x1000001ff, 0xff], [0xffffffff, 0xff000000, 0x0, 0xffffffff], 'lo\x00', 'gretap0\x00', {}, {}, 0x3c, 0x3, 0x3, 0x48}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@eui64={{0x28}}, @inet=@rpfilter={{0x28}, {0xa}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x9}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, [0xffffff00, 0xff], [0xffffff00, 0x60a5dbd956caeb5b, 0xff, 0x1fffffffe], 'pim6reg\x00', 'pimreg1\x00', {0xff}, {}, 0x32, 0x40, 0x4, 0x20}, 0x0, 0x210, 0x270, 0x0, {}, [@common=@frag={{0x30}, {[0x138, 0x7ff], 0x8, 0x20, 0x2}}, @common=@rt={{0x138}, {0x2, [0x10, 0x6], 0x0, 0xbc8349f25812e3e7, 0x77ef675f015527ae, [@local, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, @private2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @dev={0xfe, 0x80, '\x00', 0x3d}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @private2, @dev={0xfe, 0x80, '\x00', 0x37}, @mcast2, @mcast1, @mcast2, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, @mcast1], 0xc}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x27}, [0xff000000, 0xff000000, 0xff000000, 0xffffffff], 0x4e24, 0x4e21, 0x4e21, 0x4e23, 0x9f6a, 0x72, 0x8001, 0x2c4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x818) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000f80)={'vcan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)=@can_newroute={0x3c, 0x18, 0x200, 0x70bd2b, 0x25dfdbfd, {0x1d, 0x1, 0x3}, [@CGW_DST_IF={0x8, 0xa, r8}, @CGW_MOD_XOR={0x15, 0x3, {{{0x3, 0x0, 0x0, 0x1}, 0x1, 0x2, 0x0, 0x0, "4595715bb914678b"}, 0x4}}, @CGW_LIM_HOPS={0x5, 0xd, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000014}, 0x2404c004) r9 = syz_genetlink_get_family_id$smc(&(0x7f00000010c0), r1) sendmsg$SMC_PNETID_GET(r1, &(0x7f00000011c0)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x64, r9, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip_vti0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x40048c1}, 0xd0) ioctl$F2FS_IOC_COMPRESS_FILE(r3, 0xf518, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000001200)={'wlan0\x00'}) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000001240)={0x0, 0xe4, "dd58dbde871a3b2776e18a1c5dc6c7af51ea710346f4612520cefb4ccbad2ec46b72050c04310cf186bbc33e10bacb07e46bb19ef8bea5c87e1ff27f3c942f952ca57373b6855b3f6d154491e0351b24315e8be09ec2beb84d4ac62161dc5254f0fd2b7ef78f5d068fe39790ba301e9cc1e248d7e2d36729fc13ee56dd619827f456dc862ae49aa16194f493901b1ee72a6d4ecdbbe9f2cd2528b8e05af2b3c1b3b991c757d83edc46d306505867e71dda6e3a659ff7d972960efcf99ce0a618e3d09230a89d7467f6a5a2edf2b5864319cb8934f992bc25bc49c9cae8844704a0d2a7a5"}, &(0x7f0000001340)=0xec) r10 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r10, 0x84, 0x10, &(0x7f0000001380)=@assoc_value={r5, 0xfffffffa}, 0x8) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001400)={'erspan0\x00', &(0x7f00000013c0)={'erspan0\x00', r8, 0x40, 0x80, 0x80, 0x2, {{0x5, 0x4, 0x1, 0x12, 0x14, 0x64, 0x0, 0x4, 0x2f, 0x0, @remote, @broadcast}}}}) sendmsg$nl_route(r1, &(0x7f0000001500)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)=@ipv4_delrule={0x34, 0x21, 0x20, 0x70bd27, 0x6, {0x2, 0x14, 0x20, 0x0, 0x3, 0x0, 0x0, 0x2, 0x10000}, [@FRA_FLOW={0x8, 0xb, 0x2}, @FRA_GENERIC_POLICY=@FRA_PRIORITY={0x8, 0x6, 0xfffffe00}, @FRA_DST={0x8, 0x1, @remote}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000000}, 0x40) connect$can_j1939(0xffffffffffffffff, &(0x7f0000001540)={0x1d, r11, 0x0, {0x1, 0x1, 0x2}, 0xfe}, 0x18) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x28, 0x2, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}]}, 0x28}, 0x1, 0x0, 0x0, 0x840}, 0x40040) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f00000016c0), r1) sendmsg$NL80211_CMD_START_P2P_DEVICE(r1, &(0x7f0000001780)={&(0x7f0000001680), 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x20, r12, 0x10, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x5, 0x29}}}}, ["", "", "", "", "", "", "", ""]}, 0x20}}, 0x40800) 3.625762697s ago: executing program 3 (id=16872): r0 = socket(0x2b, 0x1, 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x8, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {}, {0xfff2, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x86dd}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x3a}, @TCA_FLOWER_KEY_ICMPV6_CODE={0x5}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x24000000) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e5b, 0x80000000, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x5}, 0x1c) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000400000000000000fcffff0185000000bc0000001801000020646c2400000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000f000000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x54, r9, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @empty}}, {0x14, 0x2, @in={0x2, 0x4e24, @remote}}}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40815}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000380), r5) r11 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x60, 0xbfdee5ce6664299d) accept4$nfc_llcp(r11, &(0x7f00000000c0), &(0x7f0000000140)=0x60, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x1c, r13, 0x713, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1e9a}]}, 0x1c}, 0x1, 0x0, 0x0, 0x884}, 0x40020) sendmsg$NFC_CMD_LLC_SET_PARAMS(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x24, r10, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x8080) 3.450601528s ago: executing program 3 (id=16874): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000600)=ANY=[@ANYBLOB="300000000203010100000000000000000000000908000100010000270800034000000008090002020000000000000000"], 0x30}, 0x1, 0x0, 0x0, 0x4048840}, 0x800) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101842, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSACTIVE(r1, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) readv(r1, &(0x7f0000000280)=[{&(0x7f0000000240)=""/49, 0x3d}], 0x26) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) ioctl$BTRFS_IOC_DEFRAG(r2, 0x50009402, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) unshare(0x40000480) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000001c0)=0x6533, 0x4) connect$inet(r4, &(0x7f00000002c0)={0x2, 0x6e20, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$sock_int(r4, 0x1, 0x27, &(0x7f0000000000)=0x7b, 0x4) recvfrom$inet(r4, 0x0, 0x0, 0x2043, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r5, 0x0, 0x487, &(0x7f0000002100), &(0x7f0000000000)=0x30) connect$inet6(r3, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xb}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000180)={'gre0\x00', &(0x7f0000000040)={'erspan0\x00', 0x0, 0x7800, 0x1, 0x3, 0x0, {{0x40, 0x4, 0x1, 0xa, 0x100, 0x64, 0x0, 0xc, 0x29, 0x0, @remote, @rand_addr=0x64010102, {[@ssrr={0x89, 0xb, 0x63, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_addr={0x44, 0x34, 0x4a, 0x1, 0x6, [{@local, 0x6}, {@dev={0xac, 0x14, 0x14, 0x1c}, 0xc8f}, {@multicast1, 0xff}, {@broadcast, 0x2}, {@remote, 0x10}, {@multicast2, 0x8}]}, @noop, @timestamp={0x44, 0x1c, 0xb7, 0x0, 0x5, [0x0, 0xdfffffff, 0x8, 0x43, 0x80100001, 0x7fffffff]}, @lsrr={0x83, 0x17, 0xf, [@local, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x30}]}, @generic={0x44, 0x10, "a263b6b846a853be63b19e5adc89"}, @timestamp_addr={0x44, 0x54, 0xaf, 0x1, 0x8, [{@multicast1, 0x3ff}, {@rand_addr=0x64010101, 0xfffffffa}, {@remote, 0xe}, {@remote, 0x8001}, {@broadcast, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@multicast2, 0x800}, {@loopback}, {@rand_addr=0x64010102, 0x9}, {@multicast2, 0xc}]}, @ssrr={0x89, 0x13, 0x4, [@private=0xa010101, @multicast1, @loopback, @remote]}]}}}}}) sendmsg$nl_route(r6, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) 3.218294939s ago: executing program 0 (id=16876): r0 = socket$kcm(0x21, 0x7, 0x2) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$NFT_BATCH(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bond\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x5c, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x30, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vcan0\x00'}, {0x14, 0x1, 'pim6reg1\x00'}]}]}]}], {0x14, 0x10}}, 0xfc}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) (async) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$kcm(0x10, 0x2, 0x10) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r6, 0x10e, 0xc, &(0x7f00000002c0)=0x6, 0x4) (async) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRES16=r2], 0x24}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000000500)={'tunl0\x00', &(0x7f00000004c0)={'sit0\x00', r5, 0x10, 0x7, 0x1, 0x9, {{0x7, 0x4, 0x0, 0x6, 0x1c, 0x67, 0x0, 0x1f, 0x29, 0x0, @empty, @local, {[@end, @rr={0x7, 0x7, 0x90, [@multicast1]}]}}}}}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f0000000600)=@RTM_DELMDB={0x118, 0x55, 0x100, 0x70bd26, 0x25dfdbfb, {0x7, r5}, [@MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x1, 0x3, 0x2, {@in6_addr=@mcast1, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x0, 0x2, 0x2, {@in6_addr=@empty}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x0, 0x2, 0x0, {@in6_addr=@local, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x0, 0x1, 0x4, {@in6_addr=@loopback, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x0, 0x3, 0x1, {@ip4=@local, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r7, 0x1, 0x2, 0x3, {@ip4=@multicast2, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x1, 0x6, 0x4, {@in6_addr=@remote, 0x4b6e}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x0, 0x0, 0x0, {@ip4=@private=0xa010100, 0x86dd}}}]}, 0x118}, 0x1, 0x0, 0x0, 0x4c005}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@delchain={0x24, 0x2e, 0x501, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff2, 0xffff}, {0x0, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async, rerun: 32) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0c00000004000000040000000900000000000000381859016a06d54b092547c2f9ccc1a2c3315798b9", @ANYRES32], 0x50) (async) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c0002"], 0xdc}}, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003d40)=ANY=[@ANYBLOB="4000000040000701feffffff00000100017c0000040042800c00018006000600800a00001c00028018000b80140001"], 0x40}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(r9, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000900)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="10002abd7000fbdbdf25070000000c0017000203aaaaaaaaaaaa08000300", @ANYRES32=r12, @ANYBLOB="0a0004007770616e310000000c0017000200aaaaaaaaaaaa08000500ffffffff080001000000000008000300", @ANYRES32=r12, @ANYBLOB="fb45346fe5ae09a3fcdb446fb1365137fc3c5c9520ce219236a0c307c582f6b6b00572f22e92bc05ca97aa385a6573a170fb7c68da485cda1509c10001e82d583f80d10d0bb4644692d060e85874d8fa6922a9ad5da51ced293f9905d38dfaa7e4bc50662015c791831ae9beaf9a8778345e21727c0dc19d62b195b22a4064c35aead9521b5d9c4555b87e02dc68eea4dc8b38dd090416cf492206fadcba7e90c8c574ed0f525e5eaeadfca285000000"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x4014) setsockopt$sock_attach_bpf(r0, 0x110, 0x7, 0x0, 0x4) 2.826423325s ago: executing program 0 (id=16878): socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) socket(0x10, 0x2, 0x0) socket$igmp6(0xa, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$igmp6(0xa, 0x3, 0x2) r0 = socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000300)=r2}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000400), &(0x7f0000000480)=@tcp6=r0, 0x1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x5, 0xe, 0x0, &(0x7f00000000c0)="6121eed4cd50bb2b01e841acde1a", 0x0, 0x2a1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c010000", @ANYRES16, @ANYBLOB="000826bd7000fbdbdf25120000004c0002803400038008000200070000000800010001000000080002000000000008000100070000000800010007000000080002000200000008000200e50b00000c0003"], 0x14c}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="840000000002010400000000000000000a00000004000180300003802c00018014000300fc00000000000000000000100000000014004400fe800000001f610000000000000000bb3c0002800c00028005000100000000002c00018014000300fc02000000000000000000000000000014"], 0x84}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYRES32, @ANYBLOB="14000100ff010000000000000000000000000001140006"], 0x70}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0) 2.724177521s ago: executing program 0 (id=16879): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc4}}, 0x0) (async, rerun: 32) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000100)={0xfeb, 0x0}, 0x8) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xd5, &(0x7f0000000000)=""/197, 0x0, 0x4a, '\x00', 0x0, @cgroup_sock_addr=0x13, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1}, 0x94) 2.705474238s ago: executing program 4 (id=16880): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x803, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x58, 0x10, 0x503, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0x11508, 0x1021}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e24}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x10}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newtaction={0x70, 0x30, 0x871a15abc695fa3d, 0xfffffffe, 0x0, {}, [{0x5c, 0x1, [@m_ctinfo={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3f00}, @TCA_CTINFO_ACT={0x18, 0x3, {0xfa, 0x1, 0xffffffffffffffff, 0x100}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x1000}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x200408d0}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c00000015000103000000000000e7ff0b00000008000100", @ANYRES64=r0], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 2.565777749s ago: executing program 4 (id=16882): r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="480000001500257f09004b01fcfc8c860a881300f217e0060000e3323909b8f8896e33719fe3bb036e0bc90900000000000000000000ffff5bf1090000d0bd5e000000006203005b", 0x48}], 0x1) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f0000000c80)=[{{&(0x7f0000000040)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000180)="fd", 0x1}], 0x1}}, {{&(0x7f0000001180)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f00000011c0)=[{&(0x7f0000004d00)='f', 0x1}], 0x1}}], 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000300)={r4, 0x1}, 0x8) socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$XFS_IOC_FSBULKSTAT(r1, 0xc0205865, &(0x7f00000003c0)={&(0x7f0000000000)=0x80000001, 0xffffffa3, &(0x7f0000000140)=[{}, {}, {}], &(0x7f0000000380)}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r6, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000040)="b90103606908068c3c270040e700009e0ff008001ffff2e1ffff8100", 0x0, 0x8104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair(0x1d, 0x802, 0x7, &(0x7f0000004740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x8942, &(0x7f0000000640)={'tunl0\x00', 0x0}) openat$nci(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) connect$pppl2tp(r7, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, r7, {0x2, 0x4e24, @multicast2}, 0x4, 0x2, 0x3}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f0000000540)="43210098") 2.46147393s ago: executing program 1 (id=16884): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYBLOB="c098edffb2d1d5606bf4779a03e784231c0000000203010100000000000000"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x20, 0x2, 0x3, 0xa01, 0x0, 0x0, {0x2}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x8, 0x1}}]}, 0x20}, 0x1, 0x0, 0x0, 0x44001}, 0x40000c0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmmsg(r5, &(0x7f0000003540)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003680)=ANY=[@ANYBLOB="10000000a2ab00000100000003000000"], 0x10}}], 0x2, 0x20004840) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x8}]}, 0x28}}, 0x0) r7 = socket$qrtr(0x2a, 0x2, 0x0) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='blkio.bfq.sectors\x00', 0x0, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r8, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x80, r3, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x48}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x37}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x42}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xe}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x34}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x32}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x8080) bind$qrtr(r7, &(0x7f0000000300)={0x2a, 0x3, 0x4001}, 0xc) ioctl$XFS_IOC_PATH_TO_HANDLE(r5, 0xc0385869, &(0x7f0000000500)={r1, &(0x7f0000000380)='\xaa\xaa\xaa\xaa\xaa', 0x101000, &(0x7f00000003c0)={@_ha_fsid={[0x3, 0x6]}, {0x101, 0x9, 0x39fbd6c6, 0x4}}, 0x5, &(0x7f0000000400), &(0x7f0000000440)=0x9}) ioctl$SIOCRSGCAUSE(r9, 0x89e0, &(0x7f0000000540)) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f00000002c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000600)={0x20, r3, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6d54ebd7, 0x1a}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0xe820) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000880), r8) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r6, &(0x7f0000000a00)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000009c0)={&(0x7f00000008c0)={0xd4, r10, 0x200, 0x70bd27, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x81}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xa6e}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xd53}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x44084}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg(r11, &(0x7f0000002580)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000001c0)="a5bdd8dc865ec909374201e96d8f81cc97bd02ac608b5f047fb45fc412c5e9abc3f65029c01e708d6b8b7348388ae4bdb46a6fe5e68657fbe1d5c5397d2b147eea869134be30dddf8e413c18e61bf36021aa148dccb53e9341f49451950cca8f73faf0de5a477be8d72e07f7698a97aac75efc9ea1662bd80de5b10e282515178227cc167d30c9ebdf79fb510f618d5443324db3040038ab122f4e053baf350ce6ec09fed07ef02dc2100f01bcfd92b5b6ac", 0xb2}], 0x1}}, {{&(0x7f0000001880)=@nfc_llcp={0x27, 0x0, 0x1, 0x4, 0x1, 0x51, "621170966da909be0588f594e4f7de7aabbf9b86b66c5b270b894aa6a33e37c245570bbe5d4b1dd87c9f7e119420e6bb8d0fa6a9f76d1a9c8f36f6a2a09095", 0x1b}, 0x80, &(0x7f0000000800)=[{&(0x7f0000001900)="21a284a7", 0x4}], 0x1, &(0x7f0000000000)=[{0x10, 0x104, 0x6}], 0x10}}], 0x2, 0x240408d0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_int(r12, &(0x7f0000000080)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0) sendfile(r13, r13, 0x0, 0x3) r14 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001980)={0x18, 0x3, &(0x7f00000013c0)=@framed, &(0x7f0000001400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000240)=@generic={&(0x7f0000000000)='./file0\x00', r14}, 0x18) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7c00000010000305000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="15010000000000005c0012800e00010069703667726574617000000048000280060011004e23000014000700fe8000000000000000000000000000aa060018000200000006000e0000f9e61b"], 0x7c}}, 0x0) 2.323213327s ago: executing program 1 (id=16885): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000004600070128b570000000008f017c0000080004804e2d", @ANYBLOB="54093a6eedc24150ad2627837a145d15b3bde51dfa63f81ef8711397fe0a2df2e29afc95f13cec8cafdd6fec8f05db5499fd644a"], 0x1c}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$kcm(0x2a, 0x2, 0x0) r3 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) recvmsg(r3, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40002182) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x8918, 0x0) sendmsg$kcm(r2, &(0x7f0000001540)={&(0x7f0000000040)=@qipcrtr={0x2a, 0x1, 0x4000}, 0x80, 0x0}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x34, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x10, 0x2, 0x0, 0x1, [@nested={0xc, 0x14, 0x0, 0x1, [@typed={0x8, 0xd, 0x0, 0x0, @u32=0x5}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c783, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x4}, @TCA_CAKE_WASH={0x8}]}}]}, 0x44}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r7, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x2, @local, 0x3, 0x1}, 0x80, &(0x7f00000029c0)=[{&(0x7f00000016c0)="83", 0x1}], 0x65}, 0x41) sendmsg$nl_route(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6, 0x18, 0x3}, @IFLA_BOND_MODE={0x5, 0x1, 0x3}]}}}]}, 0x44}}, 0x0) 1.530460908s ago: executing program 0 (id=16886): mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x9, 0x32, 0xffffffffffffffff, 0x59449000) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x11, &(0x7f0000000080)=ANY=[@ANYBLOB="1800002701000000000900000b000000100000ad99e909e2f37dd4d8dfd23cc0e5294db992b61f22805e2ae23800e320ab067ca637c11f0770f33b5c1c3495076daef3add77a9a33a63708a69d742e64f28981930802bb28e3c8986095f419cf0af1184fa7b61f693863e2d33050af307e01b29cc35c06cbbc536a39af47beb053995417d5fdcd548dc633319b47ab2fe5b6d7e3e4159a0f0ec2cf488f", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000fcff00008500000086000000bf0900000000000055090100000000809500000000000000adaa0400000000002500fafffcffffffbf91000000000000b702000003000000850000002a000000b7000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0xb, 0xffc, &(0x7f0000000cc0)=""/4092, 0x41100, 0x2f}, 0x94) 1.528984062s ago: executing program 4 (id=16887): syz_emit_ethernet(0x46, &(0x7f0000000000)={@multicast, @random="6696eeee2a81", @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00', 0x10, 0x3a, 0x0, @empty, @mcast1, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x2d, 0x6, 0x999, 0x5932}}}}}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000240)={0x0, 0x1228000, 0x1000, 0x2, 0x1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000080), &(0x7f0000000180)=r2}, 0x20) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_CQM(r6, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000580)={r5, r4, 0x25, 0x0, @val=@perf_event={0x3}}, 0x18) syz_emit_ethernet(0xae, &(0x7f00000002c0)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x1f, 0x4, 0x0, 0x0, 0xa0, 0x67, 0x0, 0x0, 0x88, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, {[@rr={0x7, 0x23, 0x46, [@multicast2, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x13}, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_prespec={0x44, 0x34, 0xf9, 0x3, 0x2, [{@broadcast, 0x7}, {@remote, 0x2ec}, {@local, 0x400}, {@empty, 0x4000000}, {@rand_addr=0x64010102, 0x4}, {@private=0xa010102, 0x7}]}, @ssrr={0x89, 0xf, 0xb7, [@local, @multicast2, @rand_addr=0x64010101]}]}}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x7, 0x4, 0x1, 0x5, 0x5, 0x67, 0x8001, 0x3b, 0x88, 0xfffa, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, {[@timestamp_addr={0x44, 0x4, 0x24, 0x1, 0xd}, @end]}}}}}}}, 0x0) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000003c0)='GPL\x00'}, 0x94) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209000200737997310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xff3b, 0xc, 0x2, [@const={0xd, 0x0, 0x0, 0xa, 0x4}]}}, 0x0, 0x26}, 0x28) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x40, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="2c0000000a0a0101"], 0x2c}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) 1.472223147s ago: executing program 0 (id=16888): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000040) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x4b, 0x21, "49720705000000004709b89e6fb2c55c00a79e082584e55fee49e0020000000000"}}) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0x18fd9ca9fb75925e}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r5, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @loopback}}}, 0x108) sendmsg$nl_crypto(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)=@del={0x120, 0x11, 0x2, 0x70bd25, 0x25dfdbfb, {{'crct10dif-arm64-ce\x00'}, '\x00', '\x00', 0x2000}, [{0x8, 0x1, 0xffffffff}, {0x8, 0x1, 0x1ff}, {0x8, 0x1, 0xfd9}, {0x8, 0x1, 0x40}, {0x8, 0x1, 0x1}, {0x8, 0x1, 0x6}, {0x8, 0x1, 0x3}, {0x8, 0x1, 0x3}]}, 0x120}, 0x1, 0x0, 0x0, 0x40}, 0x378c85ec0f5d4e2) syz_emit_ethernet(0x46, &(0x7f00000003c0)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0x1c}}, 0x200448c0) getsockopt$sock_buf(r0, 0x1, 0x37, &(0x7f00000005c0)=""/9, &(0x7f0000000600)=0x9) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000009, 0x12, r6, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_buf(r5, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {0xfff1}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x408c0}, 0x4000) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.424502316s ago: executing program 2 (id=16889): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0x0, 0x8, 0x10}, 0xc) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket$kcm(0x11, 0x4, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x41, 0x3, 0xa10, 0x0, 0x19, 0x0, 0x0, 0x0, 0x978, 0x1f0, 0x1f0, 0x978, 0x1f0, 0x3, 0x0, {[{{@ip={@dev={0xac, 0x14, 0x14, 0x42}, @dev, 0xff000000, 0x0, 'wlan1\x00', 'veth1_to_bridge\x00', {}, {}, 0x73, 0x0, 0x40}, 0x0, 0x878, 0x898, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@u32={{0x7e0}, {[{[{}, {0x9, 0x2}, {0x59, 0x3}, {0x7fffffff, 0x1}, {0x74000000, 0x2}, {0xe0, 0x1}, {0x0, 0x2}, {0x100, 0x2}, {0x6}, {0x9, 0x3}, {0x8ee}], [{0x9, 0x1ff}, {0x6729, 0x4}, {0x4, 0x5}, {0xffffffff, 0x2}, {0x9, 0x9}, {0x2, 0x200}, {0x6, 0x291}, {0x8, 0x1}, {0x5, 0x4}, {0x7, 0x53}, {0xf, 0x1}], 0x5, 0x3}, {[{0x100, 0x3}, {0x9, 0x3}, {0xd}, {0x8, 0x3}, {0xfffff801, 0x3}, {0x3b21aa46, 0x2}, {0x2}, {0x1, 0x2}, {0x6, 0x2}, {0x9, 0x2}, {0x800, 0x2}], [{0xffffffdb, 0x5}, {0x4, 0x7}, {0x2, 0x64}, {0x9, 0x10000}, {0x3ff, 0x7}, {0x1}, {0x10001, 0x3}, {0x48, 0xffff}, {0x5, 0xb}, {0xb3b5, 0x3784}, {0xfffffffd, 0x29}], 0xb, 0x7}, {[{0x12a}, {0xd4, 0x2}, {0x80000000, 0x2}, {0x4, 0x2}, {0x8, 0x3}, {0x3b84}, {0x2, 0x3}, {0x9}, {0x2, 0x3}, {0x6}, {0x1, 0x3}], [{0xfaa, 0x2}, {0xfffffff9, 0x800}, {0x3, 0xa}, {0x816, 0x200}, {0x13}, {0x5d3, 0x5}, {0x5, 0x9}, {0x2, 0x4}, {0x7, 0x200}, {0x8, 0x135}, {0xc5}], 0x7, 0x9}, {[{0x7, 0x1}, {0xaf8f, 0x1}, {0x10001, 0x2}, {0x800, 0x3}, {0xb3, 0x1}, {0x924}, {0x4, 0x1}, {}, {0x81, 0x1}, {0x40, 0x2}, {0x101, 0x1}], [{0x2, 0x9}, {0x2, 0xa}, {0x8, 0x3}, {0x1, 0x8}, {0x5, 0x7}, {0x1, 0x1}, {0xd04, 0x280000}, {0x5}, {0x8, 0xb71}, {0xd, 0x9}, {0x1, 0x40}], 0x1, 0x9}, {[{0x6}, {0x2, 0x2}, {0x9, 0x3}, {0x1, 0x2}, {0x400, 0x1}, {0x7, 0x2}, {0x1, 0x2}, {0x4, 0x1}, {0x4753, 0x2}, {0x9, 0x3}, {0xec4, 0x3}], [{0x3, 0xfff}, {0x3, 0x655}, {0x8000, 0xd}, {0x2, 0x2}, {0x4, 0x3}, {0x3, 0x2}, {0xb, 0x3c11f007}, {0x2, 0x80}, {0x7, 0x5}, {0x26e, 0x10}, {0x2, 0x7}], 0x9, 0xb}, {[{0x5}, {0x80, 0x2}, {0x1}, {0x8, 0x1}, {0xfff}, {0x8}, {0x4, 0x2}, {0x8}, {0x8001, 0x2}, {0xffffffff, 0x2}, {0x7, 0x1}], [{0x81, 0x800}, {0x225d5607, 0x8}, {0x72}, {0xc, 0x3}, {0x4, 0x3}, {0x7, 0x10001}, {0xc8c5, 0x100}, {0x4, 0xff}, {0x8001, 0x8001}, {0xf55, 0x40}, {0x7f, 0x3104}], 0x8, 0xb}, {[{0x9, 0x3}, {0x2, 0x1}, {0x3}, {0xc0000000, 0x1}, {0x6}, {0x3, 0x3}, {0x3e06, 0x1}, {0x0, 0x2}, {}, {0xff, 0x2}, {0xffff8001, 0x1}], [{0x10001}, {0xc5, 0x2}, {0x9a8a, 0x7fffffff}, {0x8, 0x1}, {0x0, 0x2}, {0xf, 0x9}, {0x0, 0xffff8000}, {0x1000, 0x9}, {0x6, 0x3}, {0x48bb, 0xfffff800}, {0x8, 0x1}], 0x6, 0x6}, {[{0x0, 0x2}, {0x6, 0x1}, {0x2, 0x2}, {0x2}, {0x4, 0x3}, {0xc843, 0x2}, {0x3, 0x3}, {0x9, 0x3}, {0x3, 0x1}, {0x4, 0x3}, {0x7fffffff, 0x2}], [{0x5be, 0x7ff}, {0x7, 0x8f}, {0x1, 0x6}, {0x2, 0x9}, {0x1, 0xeb}, {0x2, 0x1}, {0x9, 0x101}, {0x32, 0x7a}, {0xff, 0xf}, {0x927, 0x80000001}, {0x1ff, 0x9}], 0x9, 0x6}, {[{0x7, 0x3}, {0x2000000, 0x1}, {0x9, 0x1}, {0x51c6, 0x3}, {0x1fc7d189, 0x3}, {0x400, 0x2}, {0x3, 0x2}, {0x0, 0x1}, {0x4}, {0x9, 0x3}, {0x8, 0x3}], [{0x2, 0x6}, {0x3}, {0x9, 0x8d3}, {0x7f, 0x10}, {0xfffffc00, 0x7fff}, {0x53, 0x8000}, {0x5, 0x7}, {0x8, 0x8}, {0x5, 0xffff0000}, {0x1, 0x1}, {0x6, 0x8}], 0x7}, {[{0xe1, 0x2}, {0xc0, 0x3}, {0x8, 0x2}, {0x6, 0x1}, {0x7f, 0x1}, {0x200000, 0x3}, {0x8, 0x3}, {0x2, 0x3}, {0x1, 0x3}, {0x0, 0x1}, {0xb2}], [{0xcde7, 0x7}, {0x4, 0x63}, {0x5, 0x1}, {0x2, 0x1000}, {0x101, 0x8001}, {0x3, 0x9}, {0x1, 0x5954}, {0x8, 0x6}, {0x80000000, 0x5}, {0x40, 0x24b3}, {0xffffa468, 0x6}], 0x3, 0x9}, {[{0x7, 0x1}, {0xffffffff, 0x1}, {0x9, 0x3}, {0x7f, 0x2}, {0x2}, {0x4}, {0x70}, {0x5, 0x1}, {0x7fff, 0x2}, {0xe6e6, 0x2}, {0x5}], [{0xe53e, 0x9b}, {0x36, 0x4}, {0x8, 0x1}, {0x5, 0x5}, {0x4, 0x1}, {0x1000, 0x6}, {0x6, 0x10001}, {0x10000, 0x7fffffff}, {0x5, 0x1}, {0x9, 0x2}, {0x2, 0xa8f}], 0x5, 0x4}], 0xff, 0x1}}, @common=@inet=@socket1={{0x28}, 0xc}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0xa70) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x56) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x9, 0x7, 0x8, 0x40, 0x42, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r6}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r6, &(0x7f0000000580), &(0x7f0000001580)=""/92}, 0x20) sendmsg$kcm(r3, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r4, 0x42}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000314000e00002fb96dffff1144ee163cddcb00"/38, 0x26}, {&(0x7f00000004c0)="f058fe60ad777f8f", 0x8}], 0x2}, 0x4005) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r8, 0x0) mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r8, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r8, 0x89f8, &(0x7f0000000440)={'syztnl0\x00', &(0x7f00000003c0)={'sit0\x00', 0x0, 0x8000, 0x27, 0x1400, 0x2, {{0x16, 0x4, 0x2, 0x3e, 0x58, 0x64, 0x0, 0x8, 0x2f, 0x0, @remote, @multicast1, {[@timestamp={0x44, 0x18, 0xe2, 0x0, 0x4, [0x2ba, 0x3, 0x6, 0x3ff, 0x5]}, @noop, @rr={0x7, 0x17, 0xf8, [@empty, @private=0xa010102, @local, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x11}]}, @timestamp_addr={0x44, 0x14, 0x19, 0x1, 0x1, [{@loopback, 0x1}, {@empty, 0x7}]}]}}}}}) ioctl$XFS_IOC_FSGEOMETRY_V4(r8, 0x8070587c, &(0x7f0000000600)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x80, 0x8, 0x4, 0x4a907, r1, 0x0, '\x00', r4, r7, 0x0, 0x1, 0x5, 0xa, @value=r8}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2608064c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.347588869s ago: executing program 1 (id=16890): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000280)="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", 0x501, 0x20004890, &(0x7f0000001280)={0xa, 0x0, 0x8, @mcast1, 0xfffeffff, 0x2}, 0x20) 1.246686807s ago: executing program 4 (id=16891): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) accept(r0, &(0x7f0000000280)=@generic, &(0x7f0000000000)=0x80) getsockopt$WPAN_SECURITY_LEVEL(r2, 0x41, 0x2, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), r0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x30, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x4}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1000}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}]}, 0x30}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) socket$netlink(0x10, 0x3, 0xc) (async) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) accept(r0, &(0x7f0000000280)=@generic, &(0x7f0000000000)=0x80) (async) getsockopt$WPAN_SECURITY_LEVEL(r2, 0x41, 0x2, 0x0, 0x0) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), r0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x30, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x4}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1000}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}]}, 0x30}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) (async) 1.244580253s ago: executing program 1 (id=16892): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x1000) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x3, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x13, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x14, r4, 0xc8036ab6d6cbef07, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x45080) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r0) 1.061653856s ago: executing program 4 (id=16893): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$kcm(0x29, 0x2, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r4, 0x119, 0x1, &(0x7f00000001c0)=0x2, 0x4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x810, r5, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={r5, 0x58, &(0x7f0000000340)}, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r6, {0xf, 0xb}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0x8000e23, 0x3, 0x1, 0x7fff, 0x1}}}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) close(r1) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r7) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='86t\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r9, 0x0, 0x2a, &(0x7f0000000180)={0x7, {{0x2, 0x0, @multicast1}}}, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r9, 0x0, 0x2a, &(0x7f0000000000)={0x9, {{0x2, 0x4e22, @multicast2}}}, 0x88) setsockopt$inet_mreqsrc(r9, 0x0, 0x27, &(0x7f0000000100)={@multicast1=0xe0000002, @dev={0xac, 0x14, 0x14, 0xf}, @multicast1}, 0xc) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000300000004"], 0x48) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000cc0)={r12}, 0xc) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r13) r14 = socket$unix(0x1, 0x2, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 1.042950067s ago: executing program 1 (id=16894): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x18, 0x2, {{0x0, 0x0, 0x20, 0x80, 0xffffffff}, 0x0, 0x0, 0x4, 0x6, 0x2e, 0x14, 0x0, 0x0, 0x4, 0x0, {0x0, 0x3, 0x8, 0x0, 0x3}}}}]}, 0x78}}, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @multicast2}, 0x10) 763.696981ms ago: executing program 1 (id=16895): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) writev(r2, &(0x7f0000001d00)=[{0x0}, {&(0x7f0000000c40)="a05a", 0x2}], 0x2) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_ECN={0x8}]}}]}, 0x3c}}, 0x0) 702.33871ms ago: executing program 2 (id=16896): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f00000008c0)={'bond_slave_1\x00', 0xd}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f00000002c0)={@ipv4={""/10, ""/2, @remote}, 0x0}, &(0x7f00000004c0)=0x14) sendmsg$nl_xfrm(r0, &(0x7f0000000880)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000840)={&(0x7f0000000500)=@newsa={0x33c, 0x10, 0x1, 0x70bd26, 0x25dfdbfe, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x4e20, 0x0, 0x4e23, 0x1, 0x8, 0x20, 0x80, 0x67, r1}, {@in6=@private2, 0x4d6, 0x32}, @in=@rand_addr=0x64010100, {0x401, 0x10001, 0x3, 0x2, 0x20f1, 0x8000, 0x278, 0x4}, {0x400, 0x2, 0x3ff, 0x4}, {0x4, 0x9, 0x3}, 0x70bd29, 0x34ff, 0xa, 0x3, 0xee, 0x63}, [@XFRMA_SET_MARK={0x8, 0x1d, 0xf}, @migrate={0x50, 0x11, [{@in=@multicast1, @in=@rand_addr=0x64010101, @in6=@rand_addr=' \x01\x00', @in=@private=0xa010102, 0x33, 0x4, 0x0, 0x3505, 0xa, 0x2}]}, @algo_auth={0x139, 0x1, {{'hmac(sha256-neon)\x00'}, 0x788, "f4fc9283e7bd48d6b7fd4cf48f927dff5d3d9d8cc6f210b6cc47b00426b543e28da3ef3d42ad537c5c066bfeaec3c1056a105a620d67fe8ba31cbe6e8944db23bbc471cdf8311872f014130b7a2cba71434ff3e7ca6344fd28eddcf3a5a4031affc5e055da432e7e4e08485ea69709a00f31b057dcac0196065bec5f8d635caff68c5c544f275028ecb9c1040ee0d0e5d814d82c929f0d0788b1626fd78eaaaecb27be849f49c02d8ddce52813cb003ae4c47767cc407306564f1cb36101584a66999f4dcd491b1b58a60c204b56b948a8d73806aa18becd23ba0dba30331db8d342a40b792f07b088ccd18be4f21cc462"}}, @srcaddr={0x14, 0xd, @in=@rand_addr=0x64010102}, @migrate={0x50, 0x11, [{@in6=@mcast2, @in6=@remote, @in=@multicast2, @in6=@local, 0x3c, 0x4, 0x0, 0x34ff, 0x2, 0x2}]}, @user_kmaddress={0x2c, 0x13, {@in6=@mcast1, @in6=@empty, 0x0, 0xa}}, @address_filter={0x28, 0x1a, {@in6=@private0, @in6=@local, 0x2, 0xa, 0x3}}]}, 0x33c}, 0x1, 0x0, 0x0, 0x40000}, 0xc0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="280000001e00010026bd7000fedbdf2507000000", @ANYRES32=0x0, @ANYBLOB="000000000a0093000000000000000180"], 0x28}, 0x1, 0x0, 0x0, 0x4008451}, 0x20000800) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xc, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x2b}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x4, 0x4, &(0x7f0000000500)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x29}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000240)={r3, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000000)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[0x0], 0x0, 0x35, &(0x7f0000000100)=[{}, {}], 0x10, 0x10, &(0x7f0000000140), &(0x7f00000001c0), 0x8, 0xa5, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) 671.818856ms ago: executing program 4 (id=16897): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x18) r1 = socket(0x2, 0x80805, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x48040) r2 = socket(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000020603000000000000000000000000001400078008001240000000000500150002000000050001000600000005000500020000000500040000000000090002"], 0x4c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200e19}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff7fff}, 0x94) syz_emit_ethernet(0x3c, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa08004500002e00"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0xe0b, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xd, 0xe}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24020080}, 0x4044080) bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000880)={'syztnl0\x00', &(0x7f0000000800)={'ip6_vti0\x00', 0x0, 0x2d, 0x4, 0x6, 0x3, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x43}, 0x7, 0x7, 0x40ee, 0x2}}) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000009c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="d8000000", @ANYRES16=0x0, @ANYBLOB="20002abd7000fedbdf25160000000500020000000000050004000100000005000200000000000500030001000000050004000100000020000180140002006e7230000000000000000000000000000800030000000000300001801400020065727370616e3000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000300010000000800030077c8090559de27550200000005000200000000004400018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468305f746f5f62726964676500140002006970766c616e3100000000000000000008000100", @ANYRES32=r5, @ANYBLOB], 0xd8}}, 0x801) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) read(r6, &(0x7f0000000100)=""/114, 0x72) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) accept$unix(r1, &(0x7f00000001c0)=@abs, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x24, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, 0x1402, 0x4, 0x70bd25, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x8800}, 0xc0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x2c, 0x24, 0x400, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0xffe0}, {0xa, 0x1}, {0x0, 0x9}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x2c}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22eca65405}, 0x4008840) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) 602.796815ms ago: executing program 2 (id=16898): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) pread64(r2, &(0x7f0000000f80)=""/247, 0xf7, 0x100000001) 429.212639ms ago: executing program 2 (id=16899): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) ioctl$XFS_IOC_FSGROWFSDATA(r0, 0x4010586e, &(0x7f0000000080)={0x35355e99, 0xfffffff9}) r4 = socket(0x10, 0x3, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) close(0x4) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000140)) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r7, {0xa, 0x9}, {}, {0xc, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x1, 0xd}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x60000080}, 0x20000000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4004044) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) 210.920258ms ago: executing program 2 (id=16900): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xb8, 0x19, 0xc03, 0x0, 0x0, {{@in6=@local, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3, 0x0, 0xfffc, 0xf800, 0x2, 0x0, 0x0, 0x3e}, {0xfffffffffffffffc, 0x100000000007, 0x6, 0x8001, 0x0, 0x2}, {0xfffffffffffffffe, 0xffffffffffffffff}, 0x0, 0x0, 0x2, 0x0, 0x1, 0x2}}, 0xb8}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100677265001400028008000600ac14142e08000700e0"], 0x48}, 0x1, 0x0, 0x0, 0x24040000}, 0x2000800) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) 0s ago: executing program 2 (id=16901): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="0180c200000000000000000008004503003100674000002f9078ac1414bbffffffff0000883e001d9078231aefa27aa5952b4956fe64f354"], 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073717a3000000000080041007278650014003300"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$nl_route(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x5ba8aec43a755617, 0x70ad27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x800, 0x6358b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0x8}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x15}, 0xc084) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@iv={0xf0, 0x117, 0x2, 0xd8, "b2042a3ca88267d1cf226156a434da88ef6acbe5498bc877ca5aee13143e52339f36530bc9310e536d7fee0998d363fd9e0fac6551e8d998e0144991015d68b8a05cecec1cba2ab4ff563082bd514bde0aa50f4d956a0d987cb2e2fb9d203a54df6f7c0465655961842fdf977d5db78cd7764de79ef9ecde20991b118b9bf88ffd250d01b5023cd24317c4472c794b0ba747cc3c21cb00e7ed9bbbdfe85f6f4ee9bb160bee1e5da52817f1c92285da522b39d5b987fa8440f32cfb58bd96e3a56915e4f913434c4185d7aba6e4a1dda3655bbb3e9e733d60"}], 0xf0, 0x24008090}, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000000a1c0)=ANY=[], 0x3bfc}, 0x1, 0x0, 0x0, 0x4000}, 0x40040) recvmsg$can_raw(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000280)=""/124, 0x7c}, {0x0}], 0x2}, 0x1021) r5 = socket(0x1f, 0x80000, 0x8) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r6 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r8 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r8, &(0x7f0000000040), 0x10) listen(r8, 0x0) r9 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r9, &(0x7f0000000080), 0x10) close(0x3) close(0x4) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r7, @ANYBLOB="00001000252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000000000f94c412075a98ef767de0bae586561071f086cf9ed6bddd2734b949ba940f8efe666757bac22bf96cbcdb16a4048392d1a1d88a1513ea396e28aa2a90de6b77a4dfc0f73", @ANYRES32=r7, @ANYBLOB="031500008c20000008000a00", @ANYRES32=r7, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x20044880}, 0x0) kernel console output (not intermixed with test programs): 91] dvmrp12: entered allmulticast mode [ 1660.343930][T29791] dvmrp12: left allmulticast mode [ 1660.784498][T29810] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15495'. [ 1660.804276][T29810] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1660.885786][T29810] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1660.928621][T29771] lo speed is unknown, defaulting to 1000 [ 1661.190857][ T5143] Bluetooth: hci5: command tx timeout [ 1661.342049][T29823] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 1661.369174][T29827] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 1661.756030][T29771] chnl_net:caif_netlink_parms(): no params data found [ 1661.949686][T29861] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15507'. [ 1661.963104][T29771] bridge0: port 1(bridge_slave_0) entered blocking state [ 1661.970795][T29771] bridge0: port 1(bridge_slave_0) entered disabled state [ 1661.978595][T29771] bridge_slave_0: entered allmulticast mode [ 1661.986526][T29771] bridge_slave_0: entered promiscuous mode [ 1661.996465][T29771] bridge0: port 2(bridge_slave_1) entered blocking state [ 1662.005075][T29771] bridge0: port 2(bridge_slave_1) entered disabled state [ 1662.033765][T29771] bridge_slave_1: entered allmulticast mode [ 1662.048694][T29771] bridge_slave_1: entered promiscuous mode [ 1662.094776][T29771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1662.120588][T29771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1662.239193][T29771] team0: Port device team_slave_0 added [ 1662.253821][T29771] team0: Port device team_slave_1 added [ 1662.349256][T29771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1662.372152][T29771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1662.391217][T29879] netlink: 64 bytes leftover after parsing attributes in process `syz.4.15512'. [ 1662.422970][T29771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1662.440883][T29880] IPVS: length: 609091586 != 8 [ 1662.444794][T29771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1662.485610][T29771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1662.532038][T29884] IPv6: addrconf: prefix option has invalid lifetime [ 1662.549610][T29771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1662.568214][T29886] netlink: 'syz.3.15515': attribute type 1 has an invalid length. [ 1662.621645][T29893] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15515'. [ 1662.625289][T29886] bond4: entered promiscuous mode [ 1662.636734][T29886] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1662.714890][T29771] hsr_slave_0: entered promiscuous mode [ 1662.723542][T29771] hsr_slave_1: entered promiscuous mode [ 1662.731421][T29771] debugfs: 'hsr0' already exists in 'hsr' [ 1662.737390][T29771] Cannot create hsr debugfs directory [ 1662.838822][T29893] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15515'. [ 1662.886708][T29886] bond4: (slave bridge3): making interface the new active one [ 1662.933973][T29886] bridge3: entered promiscuous mode [ 1662.964585][T29886] bond4: (slave bridge3): Enslaving as an active interface with an up link [ 1663.250538][T29771] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1663.262370][T29771] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1663.276444][ T5143] Bluetooth: hci5: command tx timeout [ 1663.347000][T29771] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1663.358262][T29771] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1663.469301][T29771] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1663.481114][T29771] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1663.495253][T20311] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1663.504631][T20311] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1663.513813][T20311] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1663.523699][T20311] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1663.562894][T29771] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1663.573513][T29771] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1665.350637][ T5143] Bluetooth: hci5: command tx timeout [ 1665.539902][T29898] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1665.576256][T29771] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1665.660269][T29771] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1665.696621][T29771] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1665.733425][T29942] netlink: 'syz.3.15531': attribute type 1 has an invalid length. [ 1665.738966][T29944] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15528'. [ 1665.795352][T29771] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1665.894219][T29942] bond5: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 1665.923316][T29942] netlink: 28 bytes leftover after parsing attributes in process `syz.3.15531'. [ 1665.943958][T29967] sch_tbf: burst 1 is lower than device syzkaller0 mtu (1500) ! [ 1665.952507][T29968] sch_tbf: burst 1 is lower than device syzkaller0 mtu (1500) ! [ 1665.973605][T29942] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1665.975873][T20305] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1666.013210][T29971] netlink: 'syz.4.15534': attribute type 13 has an invalid length. [ 1666.048344][T29967] syzkaller0: entered promiscuous mode [ 1666.078078][T29967] syzkaller0: entered allmulticast mode [ 1666.090950][T29969] ip6_tunnel: non-ECT from 2001:0000:0000:0000:0000:0000:0000:0001 with DS=0xd5 [ 1666.117850][T20303] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1666.140904][T29968] ip6_tunnel: non-ECT from 2001:0000:0000:0000:0000:0000:0000:0001 with DS=0xd5 [ 1666.176064][T29771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1666.320310][T29771] 8021q: adding VLAN 0 to HW filter on device team0 [ 1666.370784][ T8503] bridge0: port 1(bridge_slave_0) entered blocking state [ 1666.378114][ T8503] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1666.434906][ T8503] bridge0: port 2(bridge_slave_1) entered blocking state [ 1666.442197][ T8503] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1666.579374][T29993] syz_tun: entered allmulticast mode [ 1666.769271][T30002] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15541'. [ 1666.949246][T20330] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1666.958136][T20330] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1666.966608][T20330] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1666.975793][T30014] netlink: 'syz.2.15546': attribute type 2 has an invalid length. [ 1667.006064][T20330] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1667.235446][T30024] netlink: 732 bytes leftover after parsing attributes in process `syz.4.15548'. [ 1667.250901][T29771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1667.279739][T30024] netlink: 732 bytes leftover after parsing attributes in process `syz.4.15548'. [ 1667.319664][T30028] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15549'. [ 1667.340012][T29771] veth0_vlan: entered promiscuous mode [ 1667.354597][T29771] veth1_vlan: entered promiscuous mode [ 1667.369146][T30024] netlink: 'syz.4.15548': attribute type 13 has an invalid length. [ 1667.412615][T30024] netlink: 'syz.4.15548': attribute type 17 has an invalid length. [ 1667.439759][ T5143] Bluetooth: hci5: command tx timeout [ 1667.602056][T30024] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1667.616686][T30024] 8021q: adding VLAN 0 to HW filter on device team0 [ 1667.647274][T30024] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1667.680986][T29771] veth0_macvtap: entered promiscuous mode [ 1667.709811][T29771] veth1_macvtap: entered promiscuous mode [ 1667.738345][T29771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1667.756665][T29771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1667.782494][T20330] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1667.793383][T20330] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1667.826280][T20330] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1667.904480][T20330] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1668.009363][ T8503] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1668.035068][ T8503] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1668.094491][T20311] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1668.143031][T29994] syz_tun: left allmulticast mode [ 1668.149424][T20311] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1668.325035][T30058] lo speed is unknown, defaulting to 1000 [ 1668.483503][T30074] netlink: 20 bytes leftover after parsing attributes in process `syz.0.15564'. [ 1668.519354][T30077] netlink: 'syz.2.15565': attribute type 2 has an invalid length. [ 1668.629610][T30085] netlink: 'syz.3.15566': attribute type 1 has an invalid length. [ 1668.655259][T30087] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15567'. [ 1668.684009][T30087] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15567'. [ 1668.777837][T30058] lo speed is unknown, defaulting to 1000 [ 1668.799310][T30096] netlink: 328 bytes leftover after parsing attributes in process `syz.1.15567'. [ 1668.825112][T30096] openvswitch: netlink: Flow key attr not present in new flow. [ 1668.833551][T30059] lo speed is unknown, defaulting to 1000 [ 1668.876455][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 1668.883168][ T1300] aoe: packet could not be sent on bridge0. consider increasing tx_queue_len [ 1668.942061][T30094] bpq0: entered allmulticast mode [ 1669.465920][T30104] lo speed is unknown, defaulting to 1000 [ 1669.832646][T30059] lo speed is unknown, defaulting to 1000 [ 1669.840095][T30112] lo speed is unknown, defaulting to 1000 [ 1669.881905][T30104] lo speed is unknown, defaulting to 1000 [ 1669.924323][T30131] x_tables: duplicate entry at hook 2 [ 1669.988310][T30131] x_tables: duplicate entry at hook 2 [ 1670.405326][T30140] sctp: [Deprecated]: syz.2.15582 (pid 30140) Use of int in maxseg socket option. [ 1670.405326][T30140] Use struct sctp_assoc_value instead [ 1670.544880][T30112] lo speed is unknown, defaulting to 1000 [ 1670.869655][T30148] vlan4: entered allmulticast mode [ 1671.428694][ T2094] block nbd5: Possible stuck request ffff888026978000: control (read@0,1024B). Runtime 150 seconds [ 1671.439914][ T2094] block nbd5: Possible stuck request ffff888026978200: control (read@1024,1024B). Runtime 150 seconds [ 1671.451709][ T2094] block nbd5: Possible stuck request ffff888026978400: control (read@2048,1024B). Runtime 150 seconds [ 1671.463172][ T2094] block nbd5: Possible stuck request ffff888026978600: control (read@3072,1024B). Runtime 150 seconds [ 1671.541811][T30177] lo speed is unknown, defaulting to 1000 [ 1671.651513][T30172] gretap1: entered promiscuous mode [ 1671.955984][T30196] ipvlan0: entered promiscuous mode [ 1672.030967][T30196] bridge0: port 1(ipvlan0) entered blocking state [ 1672.043636][T30196] bridge0: port 1(ipvlan0) entered disabled state [ 1672.052455][T30196] ipvlan0: entered allmulticast mode [ 1672.059485][T30196] bridge0: entered allmulticast mode [ 1672.088819][T30196] ipvlan0: left allmulticast mode [ 1672.094086][T30196] bridge0: left allmulticast mode [ 1672.163145][T30177] lo speed is unknown, defaulting to 1000 [ 1672.163200][T30200] lo speed is unknown, defaulting to 1000 [ 1672.362993][T30213] xt_connbytes: Forcing CT accounting to be enabled [ 1672.380070][T30215] __nla_validate_parse: 2 callbacks suppressed [ 1672.380089][T30215] netlink: 16 bytes leftover after parsing attributes in process `syz.2.15604'. [ 1672.437613][T30215] netlink: 640 bytes leftover after parsing attributes in process `syz.2.15604'. [ 1672.463726][T30215] openvswitch: netlink: Flow key attr not present in new flow. [ 1672.670687][T30228] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15608'. [ 1672.710801][T30228] netlink: 28 bytes leftover after parsing attributes in process `syz.2.15608'. [ 1672.736510][T30228] netlink: 28 bytes leftover after parsing attributes in process `syz.2.15608'. [ 1672.891031][T30236] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15613'. [ 1672.910919][T30236] netlink: 5 bytes leftover after parsing attributes in process `syz.1.15613'. [ 1672.917662][T30242] netlink: 92 bytes leftover after parsing attributes in process `syz.0.15615'. [ 1672.931766][T30200] lo speed is unknown, defaulting to 1000 [ 1672.958350][T30236] netlink: 32 bytes leftover after parsing attributes in process `syz.1.15613'. [ 1673.310079][T30265] netlink: 28 bytes leftover after parsing attributes in process `syz.0.15619'. [ 1673.451601][T30271] netlink: 'syz.3.15622': attribute type 1 has an invalid length. [ 1673.467948][T30271] netlink: 'syz.3.15622': attribute type 2 has an invalid length. [ 1673.475833][T30271] netlink: 'syz.3.15622': attribute type 1 has an invalid length. [ 1673.528078][T30275] bond0: entered promiscuous mode [ 1673.547360][T30275] bond_slave_0: entered promiscuous mode [ 1673.556791][T30275] bond_slave_1: entered promiscuous mode [ 1673.570304][T30275] batadv0: entered promiscuous mode [ 1673.576515][T30275] debugfs: 'hsr1' already exists in 'hsr' [ 1673.591996][T30275] Cannot create hsr debugfs directory [ 1673.593253][T30281] openvswitch: netlink: IP tunnel dst address not specified [ 1673.599803][T30277] netlink: 'syz.0.15623': attribute type 2 has an invalid length. [ 1673.616759][T30275] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 1673.783851][T30277] !9: entered promiscuous mode [ 1673.907827][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms [ 1673.915961][ C0] lec:lec_tx_timeout: lec0 [ 1673.932467][T30296] netlink: 'syz.0.15628': attribute type 1 has an invalid length. [ 1673.946650][T30296] pim6reg1: entered promiscuous mode [ 1673.957308][T30296] pim6reg1: entered allmulticast mode [ 1673.976716][T30287] syzkaller0: entered promiscuous mode [ 1673.988832][T30287] syzkaller0: entered allmulticast mode [ 1674.082111][T30303] netlink: 'syz.2.15631': attribute type 1 has an invalid length. [ 1674.359098][T30320] bridge0: port 2(bridge_slave_1) entered disabled state [ 1674.366560][T30320] bridge0: port 1(bridge_slave_0) entered disabled state [ 1674.428735][T13940] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1675.042466][T30369] FAULT_INJECTION: forcing a failure. [ 1675.042466][T30369] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1675.101648][T30369] CPU: 1 UID: 0 PID: 30369 Comm: syz.2.15654 Not tainted syzkaller #0 PREEMPT(full) [ 1675.101674][T30369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1675.101685][T30369] Call Trace: [ 1675.101692][T30369] [ 1675.101701][T30369] dump_stack_lvl+0xe8/0x150 [ 1675.101731][T30369] should_fail_ex+0x412/0x560 [ 1675.101757][T30369] _copy_from_iter+0x1d3/0x1670 [ 1675.101780][T30369] ? rcu_is_watching+0x15/0xb0 [ 1675.101806][T30369] ? trace_kmem_cache_alloc+0x29/0xf0 [ 1675.101833][T30369] ? __build_skb+0x62/0x440 [ 1675.101858][T30369] ? __build_skb+0x62/0x440 [ 1675.101881][T30369] ? __pfx__copy_from_iter+0x10/0x10 [ 1675.101907][T30369] ? __build_skb+0x2a2/0x440 [ 1675.101932][T30369] ? netlink_sendmsg+0x650/0xb40 [ 1675.101955][T30369] ? skb_put+0x11b/0x210 [ 1675.101981][T30369] netlink_sendmsg+0x6c0/0xb40 [ 1675.102013][T30369] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1675.102039][T30369] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1675.102062][T30369] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1675.102084][T30369] sock_write_iter+0x503/0x550 [ 1675.102107][T30369] ? __pfx_sock_write_iter+0x10/0x10 [ 1675.102136][T30369] ? bpf_lsm_file_permission+0x9/0x20 [ 1675.102164][T30369] ? security_file_permission+0x75/0x260 [ 1675.102200][T30369] vfs_write+0x61d/0xb90 [ 1675.102225][T30369] ? __pfx_vfs_write+0x10/0x10 [ 1675.102250][T30369] ? __fget_files+0x2a/0x420 [ 1675.102282][T30369] ksys_write+0x150/0x270 [ 1675.102302][T30369] ? __pfx_ksys_write+0x10/0x10 [ 1675.102330][T30369] do_syscall_64+0x14d/0xf80 [ 1675.102355][T30369] ? trace_irq_disable+0x3b/0x150 [ 1675.102380][T30369] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1675.102398][T30369] ? clear_bhb_loop+0x40/0x90 [ 1675.102421][T30369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1675.102439][T30369] RIP: 0033:0x7fb106b9c799 [ 1675.102457][T30369] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1675.102472][T30369] RSP: 002b:00007fb107a2e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1675.102492][T30369] RAX: ffffffffffffffda RBX: 00007fb106e15fa0 RCX: 00007fb106b9c799 [ 1675.102506][T30369] RDX: 000000000000fe33 RSI: 0000200000000000 RDI: 0000000000000003 [ 1675.102518][T30369] RBP: 00007fb107a2e090 R08: 0000000000000000 R09: 0000000000000000 [ 1675.102529][T30369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1675.102540][T30369] R13: 00007fb106e16038 R14: 00007fb106e15fa0 R15: 00007fff672690d8 [ 1675.102569][T30369] [ 1675.208371][T13940] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1675.415515][T30372] bond4: invalid ARP target 0.0.0.0 specified for addition [ 1675.537884][T30372] bond4: option arp_ip_target: invalid value (0) [ 1675.715891][T30396] netlink: 'syz.2.15661': attribute type 9 has an invalid length. [ 1675.822263][T30372] bond4 (unregistering): Released all slaves [ 1676.237915][T30411] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1676.250688][T30421] FAULT_INJECTION: forcing a failure. [ 1676.250688][T30421] name failslab, interval 1, probability 0, space 0, times 0 [ 1676.264581][T30421] CPU: 0 UID: 0 PID: 30421 Comm: syz.0.15668 Not tainted syzkaller #0 PREEMPT(full) [ 1676.264605][T30421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1676.264615][T30421] Call Trace: [ 1676.264622][T30421] [ 1676.264630][T30421] dump_stack_lvl+0xe8/0x150 [ 1676.264659][T30421] should_fail_ex+0x412/0x560 [ 1676.264684][T30421] should_failslab+0xa8/0x100 [ 1676.264704][T30421] ? skb_clone+0x212/0x3a0 [ 1676.264729][T30421] kmem_cache_alloc_noprof+0x87/0x650 [ 1676.264756][T30421] ? __netlink_lookup+0xc6/0x8b0 [ 1676.264786][T30421] skb_clone+0x212/0x3a0 [ 1676.264816][T30421] __netlink_deliver_tap+0x404/0x850 [ 1676.264851][T30421] ? netlink_deliver_tap+0x2e/0x1b0 [ 1676.264874][T30421] netlink_deliver_tap+0x19c/0x1b0 [ 1676.264899][T30421] netlink_unicast+0x7e3/0x9b0 [ 1676.264926][T30421] ? __pfx_netlink_unicast+0x10/0x10 [ 1676.264948][T30421] ? netlink_sendmsg+0x650/0xb40 [ 1676.264964][T30421] ? skb_put+0x11b/0x210 [ 1676.264985][T30421] netlink_sendmsg+0x813/0xb40 [ 1676.265008][T30421] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1676.265026][T30421] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1676.265044][T30421] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1676.265064][T30421] sock_write_iter+0x503/0x550 [ 1676.265083][T30421] ? __pfx_sock_write_iter+0x10/0x10 [ 1676.265108][T30421] ? bpf_lsm_file_permission+0x9/0x20 [ 1676.265125][T30421] ? security_file_permission+0x75/0x260 [ 1676.265155][T30421] vfs_write+0x61d/0xb90 [ 1676.265178][T30421] ? __pfx_vfs_write+0x10/0x10 [ 1676.265204][T30421] ? __fget_files+0x2a/0x420 [ 1676.265235][T30421] ksys_write+0x150/0x270 [ 1676.265254][T30421] ? __pfx_ksys_write+0x10/0x10 [ 1676.265279][T30421] do_syscall_64+0x14d/0xf80 [ 1676.265300][T30421] ? trace_irq_disable+0x3b/0x150 [ 1676.265325][T30421] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1676.265344][T30421] ? clear_bhb_loop+0x40/0x90 [ 1676.265366][T30421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1676.265385][T30421] RIP: 0033:0x7f6d46d9c799 [ 1676.265402][T30421] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1676.265418][T30421] RSP: 002b:00007f6d47d05028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1676.265438][T30421] RAX: ffffffffffffffda RBX: 00007f6d47015fa0 RCX: 00007f6d46d9c799 [ 1676.265451][T30421] RDX: 000000000000fe33 RSI: 0000200000000000 RDI: 0000000000000003 [ 1676.265462][T30421] RBP: 00007f6d47d05090 R08: 0000000000000000 R09: 0000000000000000 [ 1676.265471][T30421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1676.265489][T30421] R13: 00007f6d47016038 R14: 00007f6d47015fa0 R15: 00007fffd8b6a5e8 [ 1676.265512][T30421] [ 1676.266571][T30417] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1676.407707][T30411] netlink: 'syz.1.15665': attribute type 4 has an invalid length. [ 1676.571241][T30417] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1676.648857][T30419] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1676.674097][T30419] bond2: (slave bond0): making interface the new active one [ 1676.684469][T30419] bond2: (slave bond0): Enslaving as an active interface with an up link [ 1676.702135][T30411] .`: renamed from bond0 (while UP) [ 1676.779562][T20311] bond2: (slave .`): link status definitely down, disabling slave [ 1676.802675][T20311] bond2: now running without any active interface! [ 1677.216512][T30459] FAULT_INJECTION: forcing a failure. [ 1677.216512][T30459] name failslab, interval 1, probability 0, space 0, times 0 [ 1677.232901][T30459] CPU: 1 UID: 0 PID: 30459 Comm: syz.1.15680 Not tainted syzkaller #0 PREEMPT(full) [ 1677.232927][T30459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1677.232939][T30459] Call Trace: [ 1677.232947][T30459] [ 1677.232955][T30459] dump_stack_lvl+0xe8/0x150 [ 1677.232987][T30459] should_fail_ex+0x412/0x560 [ 1677.233015][T30459] should_failslab+0xa8/0x100 [ 1677.233037][T30459] ? radix_tree_node_alloc+0x7e/0x3a0 [ 1677.233147][T30459] kmem_cache_alloc_noprof+0x87/0x650 [ 1677.233177][T30459] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1677.233209][T30459] radix_tree_node_alloc+0x7e/0x3a0 [ 1677.233239][T30459] idr_get_free+0x2b3/0xa70 [ 1677.233274][T30459] idr_alloc_u32+0x18d/0x320 [ 1677.233365][T30459] ? __pfx_idr_alloc_u32+0x10/0x10 [ 1677.233396][T30459] ? tcf_idr_check_alloc+0xc8/0x7f0 [ 1677.233462][T30459] tcf_idr_check_alloc+0x623/0x7f0 [ 1677.233479][T30459] ? tcf_idr_check_alloc+0xc8/0x7f0 [ 1677.233496][T30459] ? __pfx_tcf_idr_check_alloc+0x10/0x10 [ 1677.233517][T30459] ? __nla_parse+0x40/0x60 [ 1677.233545][T30459] tcf_mpls_init+0x2ee/0x12d0 [ 1677.233599][T30459] ? __pfx_tcf_mpls_init+0x10/0x10 [ 1677.233635][T30459] ? __nla_parse+0x40/0x60 [ 1677.233662][T30459] tcf_action_init_1+0x4ba/0x740 [ 1677.233689][T30459] ? __pfx_tcf_action_init_1+0x10/0x10 [ 1677.233709][T30459] ? _raw_read_unlock+0x28/0x50 [ 1677.233759][T30459] ? tc_action_load_ops+0x247/0x540 [ 1677.233798][T30459] ? __nla_parse+0x40/0x60 [ 1677.233822][T30459] tcf_action_init+0x31e/0xb40 [ 1677.233852][T30459] ? __pfx_tcf_action_init+0x10/0x10 [ 1677.233897][T30459] ? lockdep_hardirqs_on+0x7a/0x110 [ 1677.233920][T30459] ? __pfx___nla_validate_parse+0x10/0x10 [ 1677.233944][T30459] ? rcu_is_watching+0x15/0xb0 [ 1677.234000][T30459] tc_ctl_action+0x43b/0xc70 [ 1677.234034][T30459] ? __pfx_tc_ctl_action+0x10/0x10 [ 1677.234057][T30459] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1677.234081][T30459] ? lockdep_hardirqs_on+0x7a/0x110 [ 1677.234149][T30459] ? __pfx_tc_ctl_action+0x10/0x10 [ 1677.234170][T30459] rtnetlink_rcv_msg+0x77e/0xbe0 [ 1677.234196][T30459] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1677.234217][T30459] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1677.234236][T30459] ? ref_tracker_free+0x693/0x840 [ 1677.234257][T30459] ? __copy_skb_header+0xa3/0x4a0 [ 1677.234285][T30459] ? __pfx_ref_tracker_free+0x10/0x10 [ 1677.234344][T30459] netlink_rcv_skb+0x232/0x4b0 [ 1677.234369][T30459] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1677.234394][T30459] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1677.234428][T30459] ? netlink_deliver_tap+0x2e/0x1b0 [ 1677.234459][T30459] netlink_unicast+0x80f/0x9b0 [ 1677.234489][T30459] ? __pfx_netlink_unicast+0x10/0x10 [ 1677.234512][T30459] ? netlink_sendmsg+0x650/0xb40 [ 1677.234532][T30459] ? skb_put+0x11b/0x210 [ 1677.234559][T30459] netlink_sendmsg+0x813/0xb40 [ 1677.234592][T30459] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1677.234618][T30459] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1677.234643][T30459] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1677.234666][T30459] sock_write_iter+0x503/0x550 [ 1677.234689][T30459] ? __pfx_sock_write_iter+0x10/0x10 [ 1677.234720][T30459] ? bpf_lsm_file_permission+0x9/0x20 [ 1677.234740][T30459] ? security_file_permission+0x75/0x260 [ 1677.234777][T30459] vfs_write+0x61d/0xb90 [ 1677.234806][T30459] ? __pfx_vfs_write+0x10/0x10 [ 1677.234834][T30459] ? __fget_files+0x2a/0x420 [ 1677.234867][T30459] ksys_write+0x150/0x270 [ 1677.234888][T30459] ? __pfx_ksys_write+0x10/0x10 [ 1677.234918][T30459] do_syscall_64+0x14d/0xf80 [ 1677.234942][T30459] ? trace_irq_disable+0x3b/0x150 [ 1677.234967][T30459] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1677.234986][T30459] ? clear_bhb_loop+0x40/0x90 [ 1677.235009][T30459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1677.235027][T30459] RIP: 0033:0x7f702999c799 [ 1677.235045][T30459] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1677.235061][T30459] RSP: 002b:00007f702a839028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1677.235080][T30459] RAX: ffffffffffffffda RBX: 00007f7029c15fa0 RCX: 00007f702999c799 [ 1677.235094][T30459] RDX: 000000000000fe33 RSI: 0000200000000000 RDI: 0000000000000003 [ 1677.235106][T30459] RBP: 00007f702a839090 R08: 0000000000000000 R09: 0000000000000000 [ 1677.235117][T30459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1677.235128][T30459] R13: 00007f7029c16038 R14: 00007f7029c15fa0 R15: 00007ffc51c49a88 [ 1677.235160][T30459] [ 1677.878586][T30475] __nla_validate_parse: 17 callbacks suppressed [ 1677.878605][T30475] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15682'. [ 1678.049251][T30484] netlink: 'syz.0.15684': attribute type 21 has an invalid length. [ 1678.072834][T30484] netlink: 'syz.0.15684': attribute type 22 has an invalid length. [ 1678.094975][T30484] netlink: 'syz.0.15684': attribute type 23 has an invalid length. [ 1678.121969][T30484] netlink: 'syz.0.15684': attribute type 25 has an invalid length. [ 1678.160097][T30484] netlink: 96 bytes leftover after parsing attributes in process `syz.0.15684'. [ 1678.182199][T30484] macvlan2: entered promiscuous mode [ 1678.187987][T30484] macvlan2: entered allmulticast mode [ 1678.330608][T30505] lo speed is unknown, defaulting to 1000 [ 1678.370947][T30509] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15692'. [ 1678.392696][T30507] netlink: 'syz.1.15693': attribute type 21 has an invalid length. [ 1678.404139][T30509] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15692'. [ 1678.417812][T30507] netlink: 168 bytes leftover after parsing attributes in process `syz.1.15693'. [ 1678.666089][T30522] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15699'. [ 1678.711557][T30522] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1678.745159][T30522] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1678.810098][T30528] syzkaller1: entered promiscuous mode [ 1678.815800][T30528] syzkaller1: entered allmulticast mode [ 1679.156338][T30505] lo speed is unknown, defaulting to 1000 [ 1679.188806][T30550] netlink: 36 bytes leftover after parsing attributes in process `syz.0.15707'. [ 1679.213978][T30550] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15707'. [ 1679.233772][T30550] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15707'. [ 1679.444613][T30555] netlink: 236 bytes leftover after parsing attributes in process `syz.3.15709'. [ 1680.235568][T30593] netlink: 'syz.3.15719': attribute type 83 has an invalid length. [ 1680.295263][T30594] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 1680.350110][T30596] siw: device registration error -23 [ 1680.365772][T30594] ip6gretap1: entered allmulticast mode [ 1680.426729][T30602] netlink: 'syz.2.15724': attribute type 10 has an invalid length. [ 1680.440786][T30596] bond0: (slave batadv_slave_0): Error: Device can not be enslaved while up [ 1680.499927][T30602] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1680.553740][T30602] `: Port device bond0 added [ 1680.785957][T30622] lo speed is unknown, defaulting to 1000 [ 1681.604571][T30676] FAULT_INJECTION: forcing a failure. [ 1681.604571][T30676] name failslab, interval 1, probability 0, space 0, times 0 [ 1681.631698][T30676] CPU: 1 UID: 0 PID: 30676 Comm: syz.1.15741 Not tainted syzkaller #0 PREEMPT(full) [ 1681.631724][T30676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1681.631735][T30676] Call Trace: [ 1681.631743][T30676] [ 1681.631750][T30676] dump_stack_lvl+0xe8/0x150 [ 1681.631779][T30676] should_fail_ex+0x412/0x560 [ 1681.631805][T30676] should_failslab+0xa8/0x100 [ 1681.631829][T30676] __kmalloc_cache_noprof+0x88/0x660 [ 1681.631849][T30676] ? input_allocate_device+0xb0/0x2a0 [ 1681.632012][T30676] ? __kmalloc_cache_noprof+0x15b/0x660 [ 1681.632033][T30676] input_allocate_device+0xb0/0x2a0 [ 1681.632053][T30676] hidp_connection_add+0xfe3/0x1a10 [ 1681.632167][T30676] hidp_sock_ioctl+0x403/0x650 [ 1681.632214][T30676] ? __pfx_hidp_sock_ioctl+0x10/0x10 [ 1681.632272][T30676] ? do_vfs_ioctl+0x1166/0x1530 [ 1681.632304][T30676] sock_do_ioctl+0x101/0x320 [ 1681.632328][T30676] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1681.632345][T30676] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1681.632383][T30676] sock_ioctl+0x5c6/0x7f0 [ 1681.632404][T30676] ? __pfx_sock_ioctl+0x10/0x10 [ 1681.632423][T30676] ? __fget_files+0x2a/0x420 [ 1681.632445][T30676] ? __fget_files+0x3a0/0x420 [ 1681.632468][T30676] ? __fget_files+0x2a/0x420 [ 1681.632495][T30676] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1681.632518][T30676] ? __pfx_sock_ioctl+0x10/0x10 [ 1681.632536][T30676] __se_sys_ioctl+0xfc/0x170 [ 1681.632557][T30676] do_syscall_64+0x14d/0xf80 [ 1681.632590][T30676] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1681.632609][T30676] ? clear_bhb_loop+0x40/0x90 [ 1681.632631][T30676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1681.632648][T30676] RIP: 0033:0x7f702999c799 [ 1681.632664][T30676] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1681.632679][T30676] RSP: 002b:00007f702a818028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1681.632697][T30676] RAX: ffffffffffffffda RBX: 00007f7029c16090 RCX: 00007f702999c799 [ 1681.632709][T30676] RDX: 0000200000000280 RSI: 00000000400448c8 RDI: 000000000000000f [ 1681.632726][T30676] RBP: 00007f702a818090 R08: 0000000000000000 R09: 0000000000000000 [ 1681.632736][T30676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1681.632746][T30676] R13: 00007f7029c16128 R14: 00007f7029c16090 R15: 00007ffc51c49a88 [ 1681.632776][T30676] [ 1682.045893][T30622] lo speed is unknown, defaulting to 1000 [ 1682.143442][T30690] lo speed is unknown, defaulting to 1000 [ 1682.466908][T30629] netlink: 'syz.3.15729': attribute type 1 has an invalid length. [ 1682.475816][T30629] netlink: 'syz.3.15729': attribute type 3 has an invalid length. [ 1682.692391][T30728] netlink: 'syz.1.15756': attribute type 10 has an invalid length. [ 1682.710456][T30728] dummy0: entered promiscuous mode [ 1682.726794][T30728] bridge0: port 3(dummy0) entered blocking state [ 1682.738029][T30728] bridge0: port 3(dummy0) entered disabled state [ 1682.744734][T30728] dummy0: entered allmulticast mode [ 1682.869629][T30690] lo speed is unknown, defaulting to 1000 [ 1683.089639][T30742] xt_connbytes: Forcing CT accounting to be enabled [ 1683.331838][T30753] RDS: rds_bind could not find a transport for ::ffff:172.30.0.3, load rds_tcp or rds_rdma? [ 1683.563900][T30756] __nla_validate_parse: 19 callbacks suppressed [ 1683.563921][T30756] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.15764'. [ 1683.728416][T30766] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15763'. [ 1684.224801][T30793] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input22 [ 1684.522276][T30804] lo speed is unknown, defaulting to 1000 [ 1684.689159][T30811] netlink: 76 bytes leftover after parsing attributes in process `syz.0.15775'. [ 1684.704031][T30811] netlink: 76 bytes leftover after parsing attributes in process `syz.0.15775'. [ 1684.728270][T30811] netlink: 'syz.0.15775': attribute type 1 has an invalid length. [ 1684.819419][T30798] lo speed is unknown, defaulting to 1000 [ 1684.833011][T30804] lo speed is unknown, defaulting to 1000 [ 1685.204206][T30836] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15783'. [ 1685.270083][T30798] lo speed is unknown, defaulting to 1000 [ 1685.358159][T30834] lo speed is unknown, defaulting to 1000 [ 1685.369840][T30839] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.15784'. [ 1685.659017][T30834] lo speed is unknown, defaulting to 1000 [ 1698.308347][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1701.508715][ T2094] block nbd5: Possible stuck request ffff888026978000: control (read@0,1024B). Runtime 180 seconds [ 1701.519612][ T2094] block nbd5: Possible stuck request ffff888026978200: control (read@1024,1024B). Runtime 180 seconds [ 1701.530618][ T2094] block nbd5: Possible stuck request ffff888026978400: control (read@2048,1024B). Runtime 180 seconds [ 1701.541821][ T2094] block nbd5: Possible stuck request ffff888026978600: control (read@3072,1024B). Runtime 180 seconds [ 1701.553018][ T5191] udevd[5191]: worker [27014] /devices/virtual/block/nbd5 timeout; kill it [ 1701.561815][ T5191] udevd[5191]: seq 67432 '/devices/virtual/block/nbd5' killed [ 1717.795121][T13634] lec:lec_start_xmit: lec0:No lecd attached [ 1722.957552][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5160 ms [ 1722.965793][ C0] lec:lec_tx_timeout: lec0 [ 1725.022198][T30879] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15795'. [ 1725.170676][T30890] lo speed is unknown, defaulting to 1000 [ 1726.169342][T30917] netlink: 20 bytes leftover after parsing attributes in process `syz.1.15803'. [ 1726.191465][T30917] netlink: 40 bytes leftover after parsing attributes in process `syz.1.15803'. [ 1726.290568][T30914] tipc: Started in network mode [ 1726.295658][T30914] tipc: Node identity 4246, cluster identity 4711 [ 1726.307763][T30914] tipc: Node number set to 16966 [ 1726.479872][T30927] netlink: 'syz.1.15807': attribute type 3 has an invalid length. [ 1726.493591][T30890] lo speed is unknown, defaulting to 1000 [ 1726.502265][T30927] netlink: 'syz.1.15807': attribute type 3 has an invalid length. [ 1726.514052][T30924] netlink: 'syz.0.15806': attribute type 3 has an invalid length. [ 1726.875678][T30950] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15812'. [ 1727.048721][T30952] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 1727.072311][T30952] team0 (unregistering): Port device team_slave_0 removed [ 1727.090786][T30952] team0 (unregistering): Failed to send options change via netlink (err -105) [ 1727.121870][T30952] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 1727.138026][T30952] team0 (unregistering): Port device team_slave_1 removed [ 1727.330611][T30966] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15819'. [ 1727.351921][T30968] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.15820'. [ 1728.023755][T30999] netlink: 228 bytes leftover after parsing attributes in process `syz.4.15830'. [ 1728.116251][T31009] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15832'. [ 1728.644011][T31038] netlink: 'syz.4.15839': attribute type 4 has an invalid length. [ 1728.664650][T31038] netlink: 'syz.4.15839': attribute type 4 has an invalid length. [ 1728.803468][T30997] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1728.810201][T30997] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1728.843424][T30997] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1728.866706][T30997] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1728.979651][T30997] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1729.003219][T30997] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1729.198008][T30997] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1729.233551][T30997] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 1729.322970][T30997] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1729.334810][T30997] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1729.584064][T31091] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15854'. [ 1729.686063][T31091] bond4: entered promiscuous mode [ 1729.705775][T31109] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15859'. [ 1729.711393][T31091] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1729.729976][T31091] openvswitch: netlink: Missing valid actions attribute. [ 1729.737274][T31091] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1729.948185][T31124] netlink: 'syz.0.15863': attribute type 1 has an invalid length. [ 1730.017164][T31131] netlink: 'syz.3.15862': attribute type 1 has an invalid length. [ 1730.038064][T31131] __nla_validate_parse: 2 callbacks suppressed [ 1730.038082][T31131] netlink: 96 bytes leftover after parsing attributes in process `syz.3.15862'. [ 1730.040706][T31124] netlink: 165 bytes leftover after parsing attributes in process `syz.0.15863'. [ 1730.044630][T31131] netlink: 1 bytes leftover after parsing attributes in process `syz.3.15862'. [ 1730.315373][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 1730.321728][ T1300] aoe: packet could not be sent on bridge0. consider increasing tx_queue_len [ 1730.455748][T31158] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1730.536256][T31162] bridge0: entered allmulticast mode [ 1730.557493][T31162] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 1730.662648][T31173] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15877'. [ 1730.718096][T31173] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15877'. [ 1730.753179][T31175] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 1730.782129][T31173] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15877'. [ 1730.791747][T20329] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1730.817825][T20329] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1730.849243][T31173] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15877'. [ 1730.897095][T20329] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1730.927549][T20329] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1730.976922][T31187] netlink: 36 bytes leftover after parsing attributes in process `syz.1.15882'. [ 1731.214079][T31203] openvswitch: netlink: VXLAN extension 307 out of range max 1 [ 1731.229638][T31203] siw: device registration error -23 [ 1731.251582][T31203] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.15886'. [ 1731.279365][T31203] ksmbd: Unknown IPC event: 1, ignore. [ 1731.292212][T31203] A link change request failed with some changes committed already. Interface veth0_to_batadv may have been left with an inconsistent configuration, please check. [ 1731.591671][ T2094] block nbd5: Possible stuck request ffff888026978000: control (read@0,1024B). Runtime 210 seconds [ 1731.602771][ T2094] block nbd5: Possible stuck request ffff888026978200: control (read@1024,1024B). Runtime 210 seconds [ 1731.614097][ T2094] block nbd5: Possible stuck request ffff888026978400: control (read@2048,1024B). Runtime 210 seconds [ 1731.625685][ T2094] block nbd5: Possible stuck request ffff888026978600: control (read@3072,1024B). Runtime 210 seconds [ 1731.736071][T31230] netlink: 'syz.4.15895': attribute type 4 has an invalid length. [ 1731.866217][T31237] FAULT_INJECTION: forcing a failure. [ 1731.866217][T31237] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1731.923498][T31237] CPU: 0 UID: 0 PID: 31237 Comm: syz.2.15898 Not tainted syzkaller #0 PREEMPT(full) [ 1731.923526][T31237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1731.923546][T31237] Call Trace: [ 1731.923554][T31237] [ 1731.923563][T31237] dump_stack_lvl+0xe8/0x150 [ 1731.923657][T31237] should_fail_ex+0x412/0x560 [ 1731.923733][T31237] _copy_from_user+0x2d/0xb0 [ 1731.923776][T31237] copy_from_sockptr+0x5e/0x90 [ 1731.923948][T31237] packet_setsockopt+0x653/0x1510 [ 1731.923982][T31237] ? __pfx_packet_setsockopt+0x10/0x10 [ 1731.924013][T31237] ? aa_sk_perm+0x6d5/0x900 [ 1731.924062][T31237] ? fd_install+0x94/0x3d0 [ 1731.924111][T31237] ? __pfx_aa_sk_perm+0x10/0x10 [ 1731.924132][T31237] ? aa_sock_opt_perm+0xff/0x1a0 [ 1731.924160][T31237] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1731.924200][T31237] ? __pfx_packet_setsockopt+0x10/0x10 [ 1731.924224][T31237] do_sock_setsockopt+0x17c/0x1b0 [ 1731.924282][T31237] __x64_sys_setsockopt+0x13d/0x1b0 [ 1731.924312][T31237] do_syscall_64+0x14d/0xf80 [ 1731.924372][T31237] ? trace_irq_disable+0x3b/0x150 [ 1731.924406][T31237] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1731.924443][T31237] ? clear_bhb_loop+0x40/0x90 [ 1731.924465][T31237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1731.924487][T31237] RIP: 0033:0x7fb106b9c799 [ 1731.924517][T31237] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1731.924537][T31237] RSP: 002b:00007fb107a2e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1731.924565][T31237] RAX: ffffffffffffffda RBX: 00007fb106e15fa0 RCX: 00007fb106b9c799 [ 1731.924578][T31237] RDX: 0000000000000011 RSI: 0000000000000107 RDI: 0000000000000003 [ 1731.924589][T31237] RBP: 00007fb107a2e090 R08: 0000000000000004 R09: 0000000000000000 [ 1731.924601][T31237] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 1731.924612][T31237] R13: 00007fb106e16038 R14: 00007fb106e15fa0 R15: 00007fff672690d8 [ 1731.924642][T31237] [ 1732.296161][T31230] nbd: socks must be embedded in a SOCK_ITEM attr [ 1732.325698][T31230] block nbd7: shutting down sockets [ 1734.566642][T31238] dvmrp0: entered allmulticast mode [ 1734.575871][T31255] tipc: New replicast peer: 255.255.255.255 [ 1734.583560][T31255] tipc: Enabled bearer , priority 6 [ 1734.596035][T31234] lo speed is unknown, defaulting to 1000 [ 1734.674252][T31265] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15902'. [ 1734.795879][ T8494] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1734.828085][ T8494] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1734.860211][ T8494] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1734.877339][ T8494] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1735.145030][T31234] lo speed is unknown, defaulting to 1000 [ 1735.400064][T31309] tc_dump_action: action bad kind [ 1735.732466][T31317] netlink: 'syz.0.15916': attribute type 4 has an invalid length. [ 1735.745703][T31317] netlink: 'syz.0.15916': attribute type 4 has an invalid length. [ 1735.760754][T31317] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1735.773951][T31317] __nla_validate_parse: 7 callbacks suppressed [ 1735.773970][T31317] netlink: 165 bytes leftover after parsing attributes in process `syz.0.15916'. [ 1735.907454][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5590 ms [ 1735.915605][ C0] lec:lec_tx_timeout: lec0 [ 1736.174419][T31331] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15923'. [ 1736.244581][T31342] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1736.424072][T31356] tipc: Started in network mode [ 1736.429567][T31356] tipc: Node identity 22141fb21b0a, cluster identity 4711 [ 1736.442328][T31356] tipc: Enabled bearer , priority 0 [ 1736.458067][T31355] tipc: Enabling of bearer rejected, already enabled [ 1736.477633][T31356] syzkaller0: entered promiscuous mode [ 1736.483143][T31356] syzkaller0: entered allmulticast mode [ 1736.520022][T31355] tipc: Resetting bearer [ 1736.568775][T31355] tipc: Disabling bearer [ 1736.608578][T31366] syzkaller0: entered promiscuous mode [ 1736.614094][T31366] syzkaller0: entered allmulticast mode [ 1736.812317][T31370] netlink: 28 bytes leftover after parsing attributes in process `syz.1.15933'. [ 1736.822720][T31370] netlink: 28 bytes leftover after parsing attributes in process `syz.1.15933'. [ 1736.839131][T31370] netlink: 28 bytes leftover after parsing attributes in process `syz.1.15933'. [ 1737.100286][T31383] syzkaller0: entered promiscuous mode [ 1737.106765][T31383] syzkaller0: entered allmulticast mode [ 1737.124527][T31386] netlink: 16 bytes leftover after parsing attributes in process `syz.2.15935'. [ 1737.341878][T31395] netlink: 488 bytes leftover after parsing attributes in process `syz.3.15940'. [ 1737.374673][T31395] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.15940'. [ 1737.501231][T31399] netlink: 24 bytes leftover after parsing attributes in process `syz.1.15941'. [ 1737.534939][T31406] netlink: 20 bytes leftover after parsing attributes in process `syz.3.15943'. [ 1737.618371][T31410] hsr0: entered promiscuous mode [ 1738.545524][T31456] lo speed is unknown, defaulting to 1000 [ 1739.113457][T31456] lo speed is unknown, defaulting to 1000 [ 1739.749841][T31498] vlan4: entered promiscuous mode [ 1741.095398][ T30] audit: type=1804 audit(1772631528.275:24): pid=31529 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.15980" name="/newroot/100/memory.events" dev="tmpfs" ino=525 res=1 errno=0 [ 1741.515541][T31548] Cannot find add_set index 2 as target [ 1741.671777][T31563] __nla_validate_parse: 8 callbacks suppressed [ 1741.671797][T31563] netlink: 52 bytes leftover after parsing attributes in process `syz.4.15991'. [ 1741.791878][T31573] netlink: 16 bytes leftover after parsing attributes in process `syz.0.15995'. [ 1741.898773][T20329] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1741.910621][T20329] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1741.922910][T20329] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1741.932132][T20329] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1742.084497][T31593] netlink: 'syz.0.16001': attribute type 10 has an invalid length. [ 1742.100728][T31593] netlink: 40 bytes leftover after parsing attributes in process `syz.0.16001'. [ 1742.112285][T31593] dummy0: entered promiscuous mode [ 1742.124778][T31593] bridge0: port 3(dummy0) entered blocking state [ 1742.132150][T31593] bridge0: port 3(dummy0) entered disabled state [ 1742.134943][T31596] netlink: 32 bytes leftover after parsing attributes in process `syz.4.16002'. [ 1742.139499][T31593] dummy0: entered allmulticast mode [ 1742.154938][T31593] bridge0: port 3(dummy0) entered blocking state [ 1742.161519][T31593] bridge0: port 3(dummy0) entered forwarding state [ 1742.171642][T31596] netlink: 56 bytes leftover after parsing attributes in process `syz.4.16002'. [ 1742.227908][T31596] ipvlan2: entered promiscuous mode [ 1742.233934][T31596] bridge0: port 3(ipvlan2) entered blocking state [ 1742.241766][T31596] bridge0: port 3(ipvlan2) entered disabled state [ 1742.250118][T31596] ipvlan2: entered allmulticast mode [ 1742.255629][T31596] bridge0: entered allmulticast mode [ 1742.262831][T31596] ipvlan2: left allmulticast mode [ 1742.268613][T31596] bridge0: left allmulticast mode [ 1742.543492][T31609] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16008'. [ 1742.645156][T31621] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16012'. [ 1742.673619][T31624] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16013'. [ 1742.675942][T31621] netlink: 24 bytes leftover after parsing attributes in process `syz.4.16012'. [ 1742.803039][T31630] lo speed is unknown, defaulting to 1000 [ 1742.853257][T31639] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16016'. [ 1742.890540][T31639] netlink: 'syz.0.16016': attribute type 1 has an invalid length. [ 1742.975705][T31643] batadv_slave_0: entered promiscuous mode [ 1743.130230][T31642] batadv_slave_0: left promiscuous mode [ 1743.136281][T31630] lo speed is unknown, defaulting to 1000 [ 1743.326733][T31662] lo speed is unknown, defaulting to 1000 [ 1743.558929][T31662] lo speed is unknown, defaulting to 1000 [ 1744.298727][T31701] sctp: [Deprecated]: syz.3.16034 (pid 31701) Use of int in max_burst socket option deprecated. [ 1744.298727][T31701] Use struct sctp_assoc_value instead [ 1745.111541][T31757] lo speed is unknown, defaulting to 1000 [ 1745.239956][T31765] syzkaller0: entered promiscuous mode [ 1745.253108][T31765] syzkaller0: entered allmulticast mode [ 1745.418558][T31757] lo speed is unknown, defaulting to 1000 [ 1745.878498][T31795] vlan0: entered promiscuous mode [ 1745.889790][T31795] bridge0: entered promiscuous mode [ 1746.050786][T31804] Cannot find map_set index 135 as target [ 1746.101228][T31806] syzkaller1: entered promiscuous mode [ 1746.106930][T31806] syzkaller1: entered allmulticast mode [ 1746.427188][T31820] lo speed is unknown, defaulting to 1000 [ 1746.554050][T31834] bridge2: entered promiscuous mode [ 1746.567084][T31834] macsec1: entered promiscuous mode [ 1746.575839][T31834] bridge2: port 1(macsec1) entered blocking state [ 1746.589633][T31834] bridge2: port 1(macsec1) entered disabled state [ 1746.597329][T31834] macsec1: entered allmulticast mode [ 1746.605630][T31834] bridge2: entered allmulticast mode [ 1746.643605][T31843] netlink: 'syz.1.16079': attribute type 2 has an invalid length. [ 1746.658940][T31834] macsec1: left allmulticast mode [ 1746.664019][T31834] bridge2: left allmulticast mode [ 1746.684165][T31834] bridge2: left promiscuous mode [ 1746.731176][T31835] bridge2: entered promiscuous mode [ 1746.736578][T31835] macsec1: entered promiscuous mode [ 1746.744202][T31835] bridge2: port 1(macsec1) entered blocking state [ 1746.751408][T31835] bridge2: port 1(macsec1) entered disabled state [ 1746.755840][T31845] __nla_validate_parse: 11 callbacks suppressed [ 1746.755860][T31845] netlink: 16 bytes leftover after parsing attributes in process `syz.3.16082'. [ 1746.764898][T31835] macsec1: entered allmulticast mode [ 1746.780019][T31835] bridge2: entered allmulticast mode [ 1746.808782][T31835] macsec1: left allmulticast mode [ 1746.827776][T31835] bridge2: left allmulticast mode [ 1746.839269][T31835] bridge2: left promiscuous mode [ 1747.141693][T31820] lo speed is unknown, defaulting to 1000 [ 1747.293782][T31870] bond5: invalid ARP target 0.0.0.0 specified for addition [ 1747.301260][T31870] bond5: option arp_ip_target: invalid value (0) [ 1747.315147][T31870] bond5 (unregistering): Released all slaves [ 1747.374611][T31886] delete_channel: no stack [ 1747.922877][T31907] syzkaller0: entered promiscuous mode [ 1747.932395][T31907] syzkaller0: entered allmulticast mode [ 1748.011236][T31912] lo speed is unknown, defaulting to 1000 [ 1748.017087][T31917] netlink: 20 bytes leftover after parsing attributes in process `syz.1.16097'. [ 1748.047868][T31917] netlink: 6028 bytes leftover after parsing attributes in process `syz.1.16097'. [ 1748.221944][T31934] netlink: 'syz.1.16102': attribute type 4 has an invalid length. [ 1748.388997][T31940] netlink: 44 bytes leftover after parsing attributes in process `syz.1.16104'. [ 1748.448747][T31940] netlink: 40 bytes leftover after parsing attributes in process `syz.1.16104'. [ 1748.462308][T31938] netlink: 'syz.0.16103': attribute type 39 has an invalid length. [ 1748.516655][T31946] netlink: 12 bytes leftover after parsing attributes in process `syz.4.16106'. [ 1748.531509][T31912] lo speed is unknown, defaulting to 1000 [ 1749.094329][T31952] bridge0: port 3(dummy0) entered blocking state [ 1749.100938][T31952] bridge0: port 3(dummy0) entered forwarding state [ 1749.107823][T31952] bridge0: port 1(bridge_slave_0) entered blocking state [ 1749.115115][T31952] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1749.125659][T27191] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1749.141936][T31952] 8021q: adding VLAN 0 to HW filter on device .` [ 1749.155241][T31952] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 1749.282338][T31726] bond2: (slave .`): link status definitely up, 20000 Mbps full duplex [ 1749.298218][T31726] bond2: (slave .`): making interface the new active one [ 1749.311391][T31726] bond2: active interface up! [ 1749.673325][T32006] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16121'. [ 1749.743302][T32006] vlan3: entered promiscuous mode [ 1749.753151][T32006] bond0: entered promiscuous mode [ 1749.769622][T32006] bond_slave_0: entered promiscuous mode [ 1749.782987][T32006] bond_slave_1: entered promiscuous mode [ 1749.860936][T32013] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1749.881387][T32007] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1750.148529][T13944] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1750.258065][T32036] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16130'. [ 1750.304100][T32041] netlink: 16 bytes leftover after parsing attributes in process `syz.1.16130'. [ 1750.507337][T32058] bridge0: port 3(dummy0) entered disabled state [ 1750.513947][T32058] bridge0: port 2(bridge_slave_1) entered disabled state [ 1750.521516][T32058] bridge0: port 1(bridge_slave_0) entered disabled state [ 1750.551977][T32058] bridge0: entered allmulticast mode [ 1750.617166][T32065] netlink: 44 bytes leftover after parsing attributes in process `syz.2.16143'. [ 1750.792960][T32078] vlan3: entered promiscuous mode [ 1750.918374][T32077] lo speed is unknown, defaulting to 1000 [ 1751.318543][T32077] lo speed is unknown, defaulting to 1000 [ 1751.318952][T32087] lo speed is unknown, defaulting to 1000 [ 1751.716077][T32102] lo speed is unknown, defaulting to 1000 [ 1751.855214][T32102] lo speed is unknown, defaulting to 1000 [ 1751.914536][T32087] lo speed is unknown, defaulting to 1000 [ 1752.091615][T32114] __nla_validate_parse: 2 callbacks suppressed [ 1752.091631][T32114] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16152'. [ 1752.172917][T32115] vxcan3: entered promiscuous mode [ 1752.198404][T32120] netlink: 'syz.4.16153': attribute type 11 has an invalid length. [ 1752.442006][T32135] netlink: 36 bytes leftover after parsing attributes in process `syz.4.16157'. [ 1752.887500][T32153] Cannot find del_set index 1 as target [ 1752.921407][T32155] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16165'. [ 1753.419146][T32178] syzkaller0: entered promiscuous mode [ 1753.424660][T32178] syzkaller0: entered allmulticast mode [ 1753.494319][T32178] netlink: 'syz.1.16173': attribute type 1 has an invalid length. [ 1753.586408][T32178] veth3: entered promiscuous mode [ 1753.623347][T32186] lo speed is unknown, defaulting to 1000 [ 1753.843258][T32186] lo speed is unknown, defaulting to 1000 [ 1753.843286][T32192] lo speed is unknown, defaulting to 1000 [ 1753.863826][T32205] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16176'. [ 1753.883193][T32205] vlan0: entered promiscuous mode [ 1754.019615][T32192] lo speed is unknown, defaulting to 1000 [ 1754.200510][T32210] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16177'. [ 1754.544439][T32222] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16182'. [ 1754.718748][T32233] netlink: 12 bytes leftover after parsing attributes in process `syz.4.16188'. [ 1754.778339][T32235] xt_TCPMSS: Only works on TCP SYN packets [ 1754.791337][T32233] bridge_slave_1: left allmulticast mode [ 1754.803860][T32233] bridge_slave_1: left promiscuous mode [ 1754.814854][T32235] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16187'. [ 1754.825782][T32233] bridge0: port 2(bridge_slave_1) entered disabled state [ 1754.835840][T32237] x_tables: ip6_tables: SNPT target: used from hooks FORWARD, but only usable from INPUT/POSTROUTING [ 1754.849814][T32237] netlink: 56 bytes leftover after parsing attributes in process `syz.2.16189'. [ 1755.030896][T32246] nbd: socks must be embedded in a SOCK_ITEM attr [ 1755.564867][T32273] syz_tun: entered allmulticast mode [ 1755.572257][T32271] netlink: 'syz.1.16201': attribute type 13 has an invalid length. [ 1755.593951][T32271] netlink: 'syz.1.16201': attribute type 5 has an invalid length. [ 1755.667130][T32276] syz_tun: left allmulticast mode [ 1755.678372][T32272] lo speed is unknown, defaulting to 1000 [ 1755.911576][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1756.123841][T32300] sit1: left promiscuous mode [ 1756.133163][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1756.153569][T32300] vlan2: left promiscuous mode [ 1756.170846][T32300] bond4: left promiscuous mode [ 1756.176135][T32300] bridge3: left promiscuous mode [ 1756.183671][T32300] gretap1: left promiscuous mode [ 1756.190613][T32300] vlan4: left promiscuous mode [ 1756.195401][T32300] bridge0: left promiscuous mode [ 1756.201958][T13941] lo speed is unknown, defaulting to 1000 [ 1756.225417][T32272] lo speed is unknown, defaulting to 1000 [ 1756.225431][T32289] lo speed is unknown, defaulting to 1000 [ 1756.241000][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1756.288213][T31726] bond5: (slave ip6gretap1): link status up again after 0 ms [ 1756.298066][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1756.324605][T20330] bond5: (slave ip6gretap1): link status up again after 0 ms [ 1756.348151][T31726] bond5: (slave ip6gretap1): link status up again after 0 ms [ 1756.381971][T20330] bond5: (slave ip6gretap1): link status up again after 0 ms [ 1756.417796][T20330] bond5: (slave ip6gretap1): link status up again after 0 ms [ 1756.457515][T31726] bond5: (slave ip6gretap1): link status up again after 0 ms [ 1756.578368][T32323] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16214'. [ 1756.805573][T32289] lo speed is unknown, defaulting to 1000 [ 1757.085096][T32339] tipc: Enabled bearer , priority 0 [ 1757.175800][T32344] __nla_validate_parse: 1 callbacks suppressed [ 1757.175819][T32344] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16221'. [ 1757.181145][T32339] syzkaller0: entered promiscuous mode [ 1757.198139][T32339] syzkaller0: entered allmulticast mode [ 1757.204745][T32339] tipc: Resetting bearer [ 1757.296851][T32346] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16222'. [ 1757.306823][T32346] netlink: 'syz.0.16222': attribute type 9 has an invalid length. [ 1757.316682][T32338] tipc: Resetting bearer [ 1759.862520][T32338] tipc: Disabling bearer [ 1759.887707][T13944] tipc: Node number set to 958275506 [ 1760.274471][T32375] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16230'. [ 1760.301033][T32378] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1760.426224][T32378] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1760.534051][T32378] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1760.701807][T32378] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1760.795782][T32414] netlink: 'syz.0.16239': attribute type 21 has an invalid length. [ 1760.814448][T32414] netlink: 132 bytes leftover after parsing attributes in process `syz.0.16239'. [ 1760.830156][T32415] netlink: 'syz.3.16241': attribute type 1 has an invalid length. [ 1760.906004][T32417] bond6: entered promiscuous mode [ 1760.928819][T32417] bond6: entered allmulticast mode [ 1760.940554][T32417] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1760.965663][T32415] bridge4: entered promiscuous mode [ 1760.975378][T32415] bridge4: entered allmulticast mode [ 1760.983055][T32415] bond6: (slave bridge4): Enslaving as a backup interface with an up link [ 1761.007667][T31727] net_ratelimit: 35 callbacks suppressed [ 1761.007688][T31727] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1761.033159][T20330] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1761.137078][ T8503] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1761.158314][T20311] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1761.165846][T20311] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1761.193956][ T8503] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1761.221288][ T8503] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1761.257346][ T8503] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1761.288218][ T8503] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1761.512333][ T8503] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1761.637573][ T8503] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1761.749281][T31727] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1761.868832][ T8503] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1761.880636][T32456] netlink: 'syz.4.16254': attribute type 11 has an invalid length. [ 1761.953574][ T2094] block nbd5: Possible stuck request ffff888026978000: control (read@0,1024B). Runtime 240 seconds [ 1761.966888][ T2094] block nbd5: Possible stuck request ffff888026978200: control (read@1024,1024B). Runtime 240 seconds [ 1761.979766][ T2094] block nbd5: Possible stuck request ffff888026978400: control (read@2048,1024B). Runtime 240 seconds [ 1761.997582][ T2094] block nbd5: Possible stuck request ffff888026978600: control (read@3072,1024B). Runtime 240 seconds [ 1762.047791][T31727] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1762.254409][T32440] netlink: 44 bytes leftover after parsing attributes in process `syz.0.16248'. [ 1762.470186][T32483] netlink: 32 bytes leftover after parsing attributes in process `syz.3.16259'. [ 1762.535022][T32483] netlink: 104 bytes leftover after parsing attributes in process `syz.3.16259'. [ 1762.749070][T32490] bond7: option arp_all_targets: invalid value (129) [ 1762.786395][T32490] bond7 (unregistering): Released all slaves [ 1763.138699][T32509] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16265'. [ 1763.155137][T32509] bond0: Unable to set up delay as MII monitoring is disabled [ 1763.479091][T32524] netlink: 'syz.3.16269': attribute type 1 has an invalid length. [ 1763.522179][T32526] tipc: Enabled bearer , priority 0 [ 1763.534386][T32526] syzkaller0: entered promiscuous mode [ 1763.540423][T32526] syzkaller0: entered allmulticast mode [ 1763.594945][T32526] tipc: Resetting bearer [ 1763.622118][T32525] tipc: Resetting bearer [ 1763.648529][T32525] tipc: Disabling bearer [ 1763.835703][T32532] gtp0: entered promiscuous mode [ 1763.857838][T32532] gtp0: entered allmulticast mode [ 1763.924778][T32529] tipc: Enabling of bearer rejected, failed to enable media [ 1764.083934][T32545] lo speed is unknown, defaulting to 1000 [ 1764.156939][T32556] netlink: 12 bytes leftover after parsing attributes in process `syz.4.16279'. [ 1764.544097][T32545] lo speed is unknown, defaulting to 1000 [ 1764.573452][T32564] bpq0: left allmulticast mode [ 1764.579987][T32564] netlink: 'syz.0.16282': attribute type 11 has an invalid length. [ 1764.588910][T32564] netlink: 'syz.0.16282': attribute type 23 has an invalid length. [ 1764.596935][T32564] netlink: 224 bytes leftover after parsing attributes in process `syz.0.16282'. [ 1765.419623][T32600] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.16292'. [ 1765.533978][T32611] netlink: 68 bytes leftover after parsing attributes in process `syz.3.16296'. [ 1765.996353][T32636] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16301'. [ 1766.025710][T32635] xt_TCPMSS: Only works on TCP SYN packets [ 1766.097997][T20303] net_ratelimit: 29 callbacks suppressed [ 1766.098015][T20303] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1766.113492][T32643] FAULT_INJECTION: forcing a failure. [ 1766.113492][T32643] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1766.127421][T32643] CPU: 1 UID: 0 PID: 32643 Comm: syz.4.16305 Not tainted syzkaller #0 PREEMPT(full) [ 1766.127444][T32643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1766.127455][T32643] Call Trace: [ 1766.127462][T32643] [ 1766.127469][T32643] dump_stack_lvl+0xe8/0x150 [ 1766.127498][T32643] should_fail_ex+0x412/0x560 [ 1766.127523][T32643] _copy_from_user+0x2d/0xb0 [ 1766.127548][T32643] ethtool_set_per_queue+0xef/0x1f0 [ 1766.127683][T32643] ? __pfx_ethtool_set_per_queue+0x10/0x10 [ 1766.127752][T32643] ? apparmor_capable+0x126/0x170 [ 1766.127784][T32643] ? bpf_lsm_capable+0x9/0x20 [ 1766.127805][T32643] ? security_capable+0x7e/0x2c0 [ 1766.127843][T32643] dev_ethtool+0x1928/0x1ae0 [ 1766.127884][T32643] ? __pfx_dev_ethtool+0x10/0x10 [ 1766.127923][T32643] ? dev_load+0x21/0x1f0 [ 1766.127962][T32643] dev_ioctl+0x392/0x1150 [ 1766.127987][T32643] sock_do_ioctl+0x23e/0x320 [ 1766.128015][T32643] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1766.128032][T32643] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1766.128083][T32643] sock_ioctl+0x5c6/0x7f0 [ 1766.128104][T32643] ? __pfx_sock_ioctl+0x10/0x10 [ 1766.128120][T32643] ? __fget_files+0x2a/0x420 [ 1766.128142][T32643] ? __fget_files+0x3a0/0x420 [ 1766.128164][T32643] ? __fget_files+0x2a/0x420 [ 1766.128190][T32643] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1766.128209][T32643] ? __pfx_sock_ioctl+0x10/0x10 [ 1766.128226][T32643] __se_sys_ioctl+0xfc/0x170 [ 1766.128256][T32643] do_syscall_64+0x14d/0xf80 [ 1766.128279][T32643] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1766.128296][T32643] ? clear_bhb_loop+0x40/0x90 [ 1766.128315][T32643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1766.128331][T32643] RIP: 0033:0x7ff5b9d9c799 [ 1766.128348][T32643] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1766.128363][T32643] RSP: 002b:00007ff5bac38028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1766.128381][T32643] RAX: ffffffffffffffda RBX: 00007ff5ba015fa0 RCX: 00007ff5b9d9c799 [ 1766.128393][T32643] RDX: 0000200000000100 RSI: 0000000000008946 RDI: 0000000000000006 [ 1766.128405][T32643] RBP: 00007ff5bac38090 R08: 0000000000000000 R09: 0000000000000000 [ 1766.128416][T32643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1766.128427][T32643] R13: 00007ff5ba016038 R14: 00007ff5ba015fa0 R15: 00007ffc1fade708 [ 1766.128456][T32643] [ 1766.373648][T20303] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1766.410485][T32647] netlink: 'syz.3.16306': attribute type 32 has an invalid length. [ 1766.451022][T32651] netlink: 20 bytes leftover after parsing attributes in process `syz.2.16307'. [ 1766.488026][T20311] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1766.528948][T32651] siw: device registration error -23 [ 1766.619640][T32659] syz.1.16310: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1766.636351][T32659] CPU: 0 UID: 0 PID: 32659 Comm: syz.1.16310 Not tainted syzkaller #0 PREEMPT(full) [ 1766.636369][T32659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1766.636376][T32659] Call Trace: [ 1766.636381][T32659] [ 1766.636386][T32659] dump_stack_lvl+0xe8/0x150 [ 1766.636409][T32659] warn_alloc+0x249/0x340 [ 1766.636455][T32659] ? stack_trace_save+0xa9/0x100 [ 1766.636478][T32659] ? __pfx_warn_alloc+0x10/0x10 [ 1766.636494][T32659] ? kasan_save_track+0x4f/0x80 [ 1766.636508][T32659] ? kasan_save_track+0x3e/0x80 [ 1766.636518][T32659] ? __kasan_kmalloc+0x93/0xb0 [ 1766.636529][T32659] ? __kmalloc_cache_noprof+0x31c/0x660 [ 1766.636550][T32659] ? xskq_create+0x56/0x170 [ 1766.636584][T32659] ? xsk_setsockopt+0x54c/0x990 [ 1766.636597][T32659] ? do_sock_setsockopt+0x17c/0x1b0 [ 1766.636613][T32659] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 1766.636628][T32659] ? do_syscall_64+0x14d/0xf80 [ 1766.636645][T32659] __vmalloc_node_range_noprof+0x132/0x1730 [ 1766.636673][T32659] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1766.636687][T32659] ? __kasan_kmalloc+0x93/0xb0 [ 1766.636702][T32659] vmalloc_user_noprof+0xad/0xe0 [ 1766.636713][T32659] ? xskq_create+0xbf/0x170 [ 1766.636727][T32659] xskq_create+0xbf/0x170 [ 1766.636741][T32659] xsk_init_queue+0x8a/0xe0 [ 1766.636756][T32659] xsk_setsockopt+0x54c/0x990 [ 1766.636770][T32659] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1766.636782][T32659] ? __pfx_aa_sk_perm+0x10/0x10 [ 1766.636797][T32659] ? aa_sock_opt_perm+0xff/0x1a0 [ 1766.636811][T32659] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1766.636823][T32659] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1766.636836][T32659] do_sock_setsockopt+0x17c/0x1b0 [ 1766.636854][T32659] __x64_sys_setsockopt+0x13d/0x1b0 [ 1766.636872][T32659] do_syscall_64+0x14d/0xf80 [ 1766.636886][T32659] ? trace_irq_disable+0x3b/0x150 [ 1766.636902][T32659] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1766.636913][T32659] ? clear_bhb_loop+0x40/0x90 [ 1766.636926][T32659] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1766.636937][T32659] RIP: 0033:0x7f702999c799 [ 1766.636949][T32659] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1766.636959][T32659] RSP: 002b:00007f702a839028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1766.636971][T32659] RAX: ffffffffffffffda RBX: 00007f7029c15fa0 RCX: 00007f702999c799 [ 1766.636979][T32659] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007 [ 1766.636986][T32659] RBP: 00007f7029a32bd9 R08: 0000000000000004 R09: 0000000000000000 [ 1766.636993][T32659] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1766.636999][T32659] R13: 00007f7029c16038 R14: 00007f7029c15fa0 R15: 00007ffc51c49a88 [ 1766.637016][T32659] [ 1766.637025][T32659] Mem-Info: [ 1766.920224][T32659] active_anon:7719 inactive_anon:0 isolated_anon:0 [ 1766.920224][T32659] active_file:3485 inactive_file:41317 isolated_file:0 [ 1766.920224][T32659] unevictable:768 dirty:126 writeback:0 [ 1766.920224][T32659] slab_reclaimable:14406 slab_unreclaimable:151897 [ 1766.920224][T32659] mapped:30618 shmem:1388 pagetables:3775 [ 1766.920224][T32659] sec_pagetables:0 bounce:0 [ 1766.920224][T32659] kernel_misc_reclaimable:0 [ 1766.920224][T32659] free:1242763 free_pcp:27587 free_cma:0 [ 1766.977742][T32659] Node 0 active_anon:30828kB inactive_anon:0kB active_file:13940kB inactive_file:165064kB unevictable:1540kB isolated(anon):0kB isolated(file):0kB mapped:24172kB dirty:512kB writeback:0kB shmem:4020kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16456kB pagetables:14688kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1767.020483][T32659] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:98304kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1767.057534][T32659] Node 0 DMA free:11112kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:152kB local_pcp:28kB free_cma:0kB [ 1767.097860][T32659] lowmem_reserve[]: 0 2493 2493 2493 2493 [ 1767.103993][T32659] Node 0 DMA32 free:1357416kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:30828kB inactive_anon:0kB active_file:13940kB inactive_file:165064kB unevictable:1540kB writepending:512kB zspages:0kB present:3129332kB managed:2552864kB mlocked:4kB bounce:0kB free_pcp:43944kB local_pcp:20852kB free_cma:0kB [ 1767.139598][T32659] lowmem_reserve[]: 0 0 0 0 0 [ 1767.150877][T32659] Node 0 Normal free:12kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:888kB mlocked:0kB bounce:0kB free_pcp:20kB local_pcp:8kB free_cma:0kB [ 1767.193292][T32659] lowmem_reserve[]: 0 0 0 0 0 [ 1767.198715][T20311] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1767.199818][T32659] Node 1 Normal free:3602564kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:65652kB local_pcp:33064kB free_cma:0kB [ 1767.239437][T32659] lowmem_reserve[]: 0 0 0 0 0 [ 1767.244381][T32659] Node 0 DMA: 2*4kB (U) 2*8kB (U) 1*16kB (U) 0*32kB 1*64kB (U) 2*128kB (U) 2*256kB (U) 2*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (U) = 11112kB [ 1767.260123][T32659] Node 0 DMA32: 7709*4kB (UME) 10247*8kB (UM) 7363*16kB (UM) 839*32kB (UME) 344*64kB (UM) 258*128kB (UME) 892*256kB (UM) 541*512kB (UME) 367*1024kB (UM) 80*2048kB (UM) 0*4096kB = 1357500kB [ 1767.279321][T32659] Node 0 Normal: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB [ 1767.283756][T32667] bridge0: entered promiscuous mode [ 1767.298840][T32659] 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 1767.305538][T32659] Node 1 Normal: 9*4kB (UM) 20*8kB (UM) 24*16kB (UME) 14*32kB (UME) 22*64kB (UM) 18*128kB (UM) 16*256kB (UM) 15*512kB (UM) 14*1024kB (UME) 16*2048kB (UE) 864*4096kB (UM) = 3602564kB [ 1767.324363][T32667] vlan0: entered promiscuous mode [ 1767.338199][T31729] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1767.367439][T32659] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1767.377030][T32659] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1767.398062][T32659] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1767.402632][T32675] xt_TCPMSS: Only works on TCP SYN packets [ 1767.408717][T32659] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1767.439473][T32659] 46187 total pagecache pages [ 1767.444418][T32659] 0 pages in swap cache [ 1767.450175][T32659] Free swap = 124996kB [ 1767.454357][T32659] Total swap = 124996kB [ 1767.460275][T32659] 2097051 pages RAM [ 1767.464108][T32659] 0 pages HighMem/MovableOnly [ 1767.469476][T32659] 426998 pages reserved [ 1767.473690][T32659] 0 pages cma reserved [ 1767.485632][T32672] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1767.502398][T20311] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1767.514315][T20311] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1767.556753][T31729] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1767.574274][T31729] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1767.617524][T31729] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1767.727608][T20311] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1767.752105][T32696] __nla_validate_parse: 1 callbacks suppressed [ 1767.752127][T32696] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16321'. [ 1767.859611][T32696] veth0: entered promiscuous mode [ 1767.868010][T32696] macvtap1: entered allmulticast mode [ 1767.873552][T32696] veth0: entered allmulticast mode [ 1767.883042][T32696] veth0: left allmulticast mode [ 1767.888547][T32696] veth0: left promiscuous mode [ 1767.915241][T32705] netlink: 132 bytes leftover after parsing attributes in process `syz.0.16323'. [ 1767.943296][T32707] netlink: 20 bytes leftover after parsing attributes in process `syz.1.16324'. [ 1767.994859][T20311] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1768.051561][T32712] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16326'. [ 1768.107820][T31727] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1768.128970][T32712] lo speed is unknown, defaulting to 1000 [ 1768.345824][T32726] netlink: 'syz.1.16331': attribute type 1 has an invalid length. [ 1768.374858][T32726] netlink: 13 bytes leftover after parsing attributes in process `syz.1.16331'. [ 1768.591207][T32712] lo speed is unknown, defaulting to 1000 [ 1768.608503][T32745] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16335'. [ 1768.717183][T32752] lo: entered allmulticast mode [ 1768.964415][T32765] IPVS: Scheduler module ip_vs_sip not found [ 1769.124290][ T305] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16344'. [ 1769.139465][ T305] netlink: 20 bytes leftover after parsing attributes in process `syz.0.16344'. [ 1769.207694][ T309] x9: renamed from bridge_slave_0 (while UP) [ 1769.460440][ T322] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1769.497275][ T323] lo speed is unknown, defaulting to 1000 [ 1769.804677][ T323] lo speed is unknown, defaulting to 1000 [ 1769.853404][ T337] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16356'. [ 1770.103068][ T361] netlink: 28 bytes leftover after parsing attributes in process `syz.4.16362'. [ 1770.806369][ T396] syzkaller0: entered promiscuous mode [ 1770.815290][ T396] syzkaller0: entered allmulticast mode [ 1770.981356][ T403] bond5: option all_slaves_active: invalid value (13) [ 1770.997190][ T403] bond5 (unregistering): Released all slaves [ 1771.032267][ T406] vlan2: left promiscuous mode [ 1771.053285][ T406] macsec1: left allmulticast mode [ 1771.074028][ T406] ip6gretap1: left allmulticast mode [ 1771.081202][ T406] bond4: left promiscuous mode [ 1771.086973][ T406] gtp0: left promiscuous mode [ 1771.107760][ T406] gtp0: left allmulticast mode [ 1771.131103][ T415] tipc: Enabled bearer , priority 0 [ 1771.149535][ T420] ipvlan2: entered promiscuous mode [ 1771.167211][ T415] tipc: Disabling bearer [ 1771.177804][T31729] net_ratelimit: 20 callbacks suppressed [ 1771.177823][T31729] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1771.280133][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1771.298393][T20330] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1771.430109][T31729] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1771.524749][ T435] netlink: 'syz.1.16385': attribute type 16 has an invalid length. [ 1771.533436][ T435] netlink: 'syz.1.16385': attribute type 17 has an invalid length. [ 1771.553782][ T435] bridge0: left allmulticast mode [ 1771.563821][ T435] 0X: left allmulticast mode [ 1771.569662][ T435] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 1771.585658][ T826] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1771.618150][T31729] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1771.727503][T31727] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1771.745990][ T826] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1771.802849][ C1] IPv4: Oversized IP packet from 127.0.0.1 [ 1771.837741][T31727] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1771.846375][ T448] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1771.981740][ T460] vlan3: entered promiscuous mode [ 1771.999357][ T460] geneve1: entered promiscuous mode [ 1772.004799][ T460] vlan3: entered allmulticast mode [ 1772.014626][ T460] geneve1: entered allmulticast mode [ 1772.046230][ T462] bond0: (slave sit0): The slave device specified does not support setting the MAC address [ 1772.069476][ T462] bond0: (slave sit0): Error -95 calling set_mac_address [ 1772.077798][T20311] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1772.107316][ T465] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 8 [ 1772.228769][T31726] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1772.871181][ T520] __nla_validate_parse: 8 callbacks suppressed [ 1772.871199][ T520] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16413'. [ 1773.003927][ T526] netlink: 124 bytes leftover after parsing attributes in process `syz.1.16416'. [ 1773.054109][ T526] nbd: nbd1 already in use [ 1773.059505][ T526] block nbd1: NBD_DISCONNECT [ 1773.064986][ T526] block nbd1: Send disconnect failed -110 [ 1773.071319][ T526] block nbd1: shutting down sockets [ 1773.099540][ T503] netlink: 'syz.4.16408': attribute type 4 has an invalid length. [ 1773.110686][ T503] netlink: 156 bytes leftover after parsing attributes in process `syz.4.16408'. [ 1773.194301][ T537] netlink: 'syz.0.16418': attribute type 5 has an invalid length. [ 1773.221076][T31726] bridge_slave_1: left allmulticast mode [ 1773.230365][T31726] bridge_slave_1: left promiscuous mode [ 1773.247648][T31726] bridge0: port 2(bridge_slave_1) entered disabled state [ 1773.276509][T31726] bridge_slave_0: left allmulticast mode [ 1773.285455][T31726] bridge_slave_0: left promiscuous mode [ 1773.309563][ T544] netlink: 'syz.3.16420': attribute type 7 has an invalid length. [ 1773.327762][T31726] bridge0: port 1(bridge_slave_0) entered disabled state [ 1773.379364][T31726] pimreg3: left allmulticast mode [ 1773.443322][T31726] bond3 (unregistering): (slave ip6gretap1): Releasing active interface [ 1773.767054][T31726] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1773.777861][T31726] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1773.788307][T31726] bond0 (unregistering): (slave bond6): Releasing backup interface [ 1773.797040][T31726] bond0 (unregistering): Released all slaves [ 1773.810310][T31726] bond1 (unregistering): Released all slaves [ 1773.824231][T31726] bond2 (unregistering): Released all slaves [ 1773.841742][T31726] bond3 (unregistering): Released all slaves [ 1773.855014][T31726] bond4 (unregistering): Released all slaves [ 1773.869777][T31726] bond5 (unregistering): Released all slaves [ 1773.896995][T31726] bond6 (unregistering): Released all slaves [ 1773.910134][T31726] bond7 (unregistering): Released all slaves [ 1773.923691][T31726] bond8 (unregistering): Released all slaves [ 1773.936779][T31726] bond9 (unregistering): Released all slaves [ 1773.960491][T31726] bond10 (unregistering): Released all slaves [ 1773.973220][T31726] bond11 (unregistering): Released all slaves [ 1773.986552][T31726] bond12 (unregistering): Released all slaves [ 1774.018408][ T544] netlink: 'syz.3.16420': attribute type 7 has an invalid length. [ 1775.859555][ T552] veth3: entered promiscuous mode [ 1775.865520][T20311] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1775.887944][T20311] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1775.926883][T31726] tipc: Left network mode [ 1775.936764][ T560] bond0: (slave sit0): The slave device specified does not support setting the MAC address [ 1775.951808][ T560] bond0: (slave sit0): Error -95 calling set_mac_address [ 1775.997437][T20311] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1776.006024][T20311] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1776.041604][ T567] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16427'. [ 1776.061956][ T567] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16427'. [ 1776.214999][ T565] tipc: Started in network mode [ 1776.220447][ T565] tipc: Node identity 62405e4c56b6, cluster identity 4711 [ 1776.232931][ T565] tipc: Enabled bearer , priority 0 [ 1776.325812][ T565] tipc: Disabling bearer [ 1776.357849][T20311] net_ratelimit: 8 callbacks suppressed [ 1776.357868][T20311] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1776.427269][ T595] batadv1: entered promiscuous mode [ 1776.433093][ T595] batadv1: entered allmulticast mode [ 1776.440401][ T595] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1776.728287][T31729] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1776.845035][ T607] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16436'. [ 1776.892689][ T611] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16438'. [ 1776.995114][T31726] hsr_slave_0: left promiscuous mode [ 1777.008546][T31726] hsr_slave_1: left promiscuous mode [ 1777.109349][T31726] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1777.146525][T31726] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1777.623590][T31726] team_slave_1 (unregistering): left allmulticast mode [ 1777.658906][T31726] team0 (unregistering): Port device team_slave_1 removed [ 1777.727033][T31726] team_slave_0 (unregistering): left allmulticast mode [ 1777.762937][T31726] team0 (unregistering): Port device team_slave_0 removed [ 1778.088022][T20311] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1778.144850][ T618] wg1: entered promiscuous mode [ 1778.159065][ T618] wg1: entered allmulticast mode [ 1778.175055][ T625] kthread_run failed with err -4 [ 1778.317581][T20311] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1778.333370][ T653] netlink: 68 bytes leftover after parsing attributes in process `syz.3.16446'. [ 1778.352833][ T653] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16446'. [ 1778.478010][T20330] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1778.651640][ T671] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16448'. [ 1778.837326][ T676] erspan0: entered promiscuous mode [ 1778.909573][ T673] lo speed is unknown, defaulting to 1000 [ 1778.937980][ T8503] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1778.982150][ T679] netlink: 24 bytes leftover after parsing attributes in process `syz.2.16452'. [ 1779.025558][T31726] IPVS: stop unused estimator thread 0... [ 1779.189900][ T8503] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1779.318800][T31726] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1779.456694][ T702] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16456'. [ 1779.466258][ T702] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16456'. [ 1779.486258][T20311] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1779.498013][ T702] netlink: 'syz.3.16456': attribute type 15 has an invalid length. [ 1779.517891][ T714] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1779.717472][ T8503] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1779.965407][ T673] lo speed is unknown, defaulting to 1000 [ 1780.131443][ T747] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16462'. [ 1780.424678][ T760] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16465'. [ 1780.452249][ T762] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16466'. [ 1780.553066][ T754] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16465'. [ 1780.594971][ T762] vlan0: entered promiscuous mode [ 1780.629606][ T767] netlink: 'syz.3.16467': attribute type 1 has an invalid length. [ 1780.820202][ T775] netlink: 'syz.0.16469': attribute type 1 has an invalid length. [ 1781.011612][ T775] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1781.122386][ T779] bond1: (slave geneve0): making interface the new active one [ 1781.146122][ T779] bond1: (slave geneve0): Enslaving as an active interface with an up link [ 1781.179929][T31726] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 1781.211044][T31726] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 1781.276305][T31726] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 1781.308257][T31726] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 1781.351677][ T796] tipc: Started in network mode [ 1781.366817][ T796] tipc: Node identity 929dec8c9a47, cluster identity 4711 [ 1781.388666][ T796] tipc: Enabled bearer , priority 0 [ 1781.459470][T31726] net_ratelimit: 7 callbacks suppressed [ 1781.459489][T31726] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1781.495877][ T796] tipc: Disabling bearer [ 1781.597731][T31729] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1781.657617][ T817] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1781.732707][T31726] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1781.867663][T31729] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1781.889797][ T834] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1781.978039][T20330] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1782.009039][ T837] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1782.014982][ T837] syzkaller1: Refused to change device type [ 1782.140000][T20311] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1782.258458][T31729] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1782.371355][ T8503] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1782.964247][T13634] lec:lec_start_xmit: lec0:No lecd attached [ 1782.976244][ T903] netlink: 'syz.2.16493': attribute type 4 has an invalid length. [ 1783.034924][ T901] lo speed is unknown, defaulting to 1000 [ 1783.416195][ T929] __nla_validate_parse: 10 callbacks suppressed [ 1783.416216][ T929] netlink: 136 bytes leftover after parsing attributes in process `syz.4.16502'. [ 1783.615683][ T901] lo speed is unknown, defaulting to 1000 [ 1783.765711][ T956] netlink: 'syz.2.16509': attribute type 7 has an invalid length. [ 1783.779364][ T957] netlink: 72 bytes leftover after parsing attributes in process `syz.0.16511'. [ 1783.797962][ T951] netlink: 'syz.2.16509': attribute type 7 has an invalid length. [ 1784.239573][ T983] gretap2: entered promiscuous mode [ 1784.294050][ T984] netlink: 'syz.4.16519': attribute type 1 has an invalid length. [ 1784.609659][ T1016] netlink: 'syz.2.16527': attribute type 4 has an invalid length. [ 1784.633504][ T1016] netlink: 'syz.2.16527': attribute type 4 has an invalid length. [ 1784.639804][ T1008] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16526'. [ 1784.651209][ T1020] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16523'. [ 1784.981853][ T1008] netlink: 60 bytes leftover after parsing attributes in process `syz.4.16526'. [ 1784.994064][ T1008] veth1_to_team: Caught tx_queue_len zero misconfig [ 1785.152331][ T1042] ipt_rpfilter: unknown options [ 1785.172517][ T1035] netlink: 'syz.3.16531': attribute type 10 has an invalid length. [ 1785.173264][ T1038] netlink: 112 bytes leftover after parsing attributes in process `syz.0.16532'. [ 1785.215302][ T1035] netlink: 'syz.3.16531': attribute type 10 has an invalid length. [ 1785.234797][ T1035] dummy0: entered promiscuous mode [ 1785.250135][ T1035] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1785.263341][ T1051] netlink: 24 bytes leftover after parsing attributes in process `syz.1.16536'. [ 1785.628986][ T1076] lo speed is unknown, defaulting to 1000 [ 1786.022640][ T1076] lo speed is unknown, defaulting to 1000 [ 1786.256554][ T1114] netlink: 'syz.3.16556': attribute type 13 has an invalid length. [ 1786.273555][ T1114] netlink: 'syz.3.16556': attribute type 17 has an invalid length. [ 1786.448569][ T1125] netlink: 24 bytes leftover after parsing attributes in process `syz.1.16557'. [ 1786.509172][ T1114] net_ratelimit: 30 callbacks suppressed [ 1786.509182][ T1114] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1786.560194][ T1130] netlink: 'syz.4.16560': attribute type 11 has an invalid length. [ 1786.586900][ T1115] lo speed is unknown, defaulting to 1000 [ 1786.588220][T20328] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1786.798558][T31729] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1786.908729][T20330] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1787.017541][T31726] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1787.127514][T31729] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1787.290521][T20328] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1787.417553][T20330] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1787.504098][ T1115] lo speed is unknown, defaulting to 1000 [ 1787.628618][T31729] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1787.819966][T31729] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1787.977490][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1787.985651][ C0] lec:lec_tx_timeout: lec0 [ 1788.241453][ T1183] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16574'. [ 1788.260850][ T1183] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16574'. [ 1788.445565][ T1205] __nla_validate_parse: 3 callbacks suppressed [ 1788.445583][ T1205] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16575'. [ 1791.124124][ T1226] sctp: [Deprecated]: syz.2.16581 (pid 1226) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1791.124124][ T1226] Use struct sctp_sack_info instead [ 1791.240810][ T1236] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16583'. [ 1791.420082][ T1255] netlink: 20 bytes leftover after parsing attributes in process `syz.2.16586'. [ 1791.578550][T20328] net_ratelimit: 7 callbacks suppressed [ 1791.578568][T20328] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1791.600640][ T1261] netlink: 'syz.0.16589': attribute type 1 has an invalid length. [ 1791.714808][ T1274] IPv6: NLM_F_CREATE should be specified when creating new route [ 1791.757929][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 1791.764104][ T1300] aoe: packet could not be sent on bridge0. consider increasing tx_queue_len [ 1791.807273][ T1261] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1791.937527][T20328] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1791.969095][ T1269] lo speed is unknown, defaulting to 1000 [ 1792.069918][T20311] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1792.189006][T20328] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1792.210031][ T30] audit: type=1800 audit(1772631579.625:25): pid=1295 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.16594" name=CB dev="tmpfs" ino=1533 res=0 errno=0 [ 1792.337847][T31729] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1792.393094][ T2094] block nbd5: Possible stuck request ffff888026978000: control (read@0,1024B). Runtime 270 seconds [ 1792.405928][ T2094] block nbd5: Possible stuck request ffff888026978200: control (read@1024,1024B). Runtime 270 seconds [ 1792.418765][ T2094] block nbd5: Possible stuck request ffff888026978400: control (read@2048,1024B). Runtime 270 seconds [ 1792.431035][ T2094] block nbd5: Possible stuck request ffff888026978600: control (read@3072,1024B). Runtime 270 seconds [ 1792.513008][ T1312] bond5: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1792.575310][ T1312] bond5: (slave lo): Enslaving as an active interface with an up link [ 1792.586291][ T1312] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1792.610830][ T1326] nbd: must specify at least one socket [ 1792.619980][ T1329] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16600'. [ 1792.637766][T20328] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1792.701783][ T1322] netlink: 'syz.4.16602': attribute type 29 has an invalid length. [ 1792.717868][ T1329] bond0: Unable to set down delay as MII monitoring is disabled [ 1792.739644][ T1316] tipc: Enabled bearer , priority 0 [ 1792.767789][T20311] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1792.805988][ T1326] veth1_macvtap: left promiscuous mode [ 1792.917562][T20311] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1792.944174][ T1331] syzkaller0: entered promiscuous mode [ 1792.954142][ T1331] syzkaller0: entered allmulticast mode [ 1792.977648][ T1313] tipc: Resetting bearer [ 1793.079884][ T1313] tipc: Disabling bearer [ 1793.116349][ T1269] lo speed is unknown, defaulting to 1000 [ 1793.142667][ T1256] infiniband syz1: set active [ 1793.170269][ T1256] infiniband syz1: added veth0_to_batadv [ 1793.198406][ T1256] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 1793.202272][ T1256] infiniband syz1: Couldn't open port 1 [ 1793.348414][ T1256] RDS/IB: syz1: added [ 1793.352568][ T1256] smc: adding ib device syz1 with port count 1 [ 1793.401913][ T1256] smc: ib device syz1 port 1 has no pnetid [ 1793.821064][ T1386] tipc: Enabled bearer , priority 0 [ 1793.920337][ T1388] syzkaller0: entered promiscuous mode [ 1793.925862][ T1388] syzkaller0: entered allmulticast mode [ 1794.277993][ T1388] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16616'. [ 1794.329428][ T1386] tipc: Resetting bearer [ 1794.465295][ T1385] tipc: Resetting bearer [ 1794.583043][ T1431] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16627'. [ 1794.583207][ T1385] tipc: Disabling bearer [ 1794.603896][ T1432] netlink: 272 bytes leftover after parsing attributes in process `syz.3.16626'. [ 1794.958858][ T1443] netlink: 16 bytes leftover after parsing attributes in process `syz.3.16630'. [ 1795.018409][ T1443] netlink: 'syz.3.16630': attribute type 2 has an invalid length. [ 1795.189383][ T1431] netlink: 16 bytes leftover after parsing attributes in process `syz.2.16627'. [ 1795.220921][ T1431] netlink: 28 bytes leftover after parsing attributes in process `syz.2.16627'. [ 1795.757114][ T1475] team_slave_1: Caught tx_queue_len zero misconfig [ 1795.879458][ T1487] wireguard0: entered promiscuous mode [ 1795.943173][ T1492] netlink: 16 bytes leftover after parsing attributes in process `syz.0.16639'. [ 1795.956788][ T1496] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16636'. [ 1795.978700][ T1496] caif0: entered allmulticast mode [ 1795.988075][ T1495] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16638'. [ 1796.160007][ T1505] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16641'. [ 1796.193464][ T1505] netlink: 'syz.0.16641': attribute type 1 has an invalid length. [ 1796.529156][ T5487] veth1_macvtap: entered promiscuous mode [ 1796.587594][T20328] net_ratelimit: 28 callbacks suppressed [ 1796.587613][T20328] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1796.727556][T31726] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1796.870679][T20330] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1796.947394][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5190 ms [ 1796.955467][ C0] lec:lec_tx_timeout: lec0 [ 1796.994117][T20328] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1797.013107][ T1536] : renamed from bond_slave_0 (while UP) [ 1797.208527][T31726] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1797.340174][T20328] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1797.473003][T31726] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1797.598786][T20328] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1797.708193][T20330] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1797.818852][T20330] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1798.005936][ T1592] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1798.101066][ T1592] syzkaller0: entered promiscuous mode [ 1798.106669][ T1592] syzkaller0: entered allmulticast mode [ 1799.383188][ T1604] lo speed is unknown, defaulting to 1000 [ 1799.436056][ T1662] __nla_validate_parse: 4 callbacks suppressed [ 1799.436080][ T1662] netlink: 24 bytes leftover after parsing attributes in process `syz.2.16676'. [ 1799.474648][ T1662] netlink: 'syz.2.16676': attribute type 1 has an invalid length. [ 1799.483123][ T1662] netlink: 'syz.2.16676': attribute type 2 has an invalid length. [ 1799.491246][ T1662] netlink: 'syz.2.16676': attribute type 1 has an invalid length. [ 1799.499155][ T1662] netlink: 16 bytes leftover after parsing attributes in process `syz.2.16676'. [ 1799.865264][ T1604] lo speed is unknown, defaulting to 1000 [ 1799.889916][ T1688] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16680'. [ 1799.900336][ T1688] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16680'. [ 1799.982530][ T1688] `: Port device bond0 removed [ 1800.429286][ T1706] netlink: 'syz.4.16683': attribute type 21 has an invalid length. [ 1800.499062][ T1706] netlink: 132 bytes leftover after parsing attributes in process `syz.4.16683'. [ 1801.649164][T20303] net_ratelimit: 31 callbacks suppressed [ 1801.649185][T20303] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1801.817792][T20303] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1801.937884][T20311] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1802.034506][ T1762] netlink: 116 bytes leftover after parsing attributes in process `syz.0.16702'. [ 1802.057794][T20311] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1802.126085][ T1765] bond6: Removing last arp target with arp_interval on [ 1802.196405][ T1770] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16705'. [ 1802.228312][T20303] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1802.239644][ T1770] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16705'. [ 1802.307757][ T1771] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16705'. [ 1802.360536][ T1779] netlink: 32 bytes leftover after parsing attributes in process `syz.4.16708'. [ 1802.398331][T20303] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1802.410342][ T1779] netlink: 'syz.4.16708': attribute type 4 has an invalid length. [ 1802.432219][ T1779] netlink: 'syz.4.16708': attribute type 4 has an invalid length. [ 1802.506322][ T1786] netlink: 'syz.3.16709': attribute type 1 has an invalid length. [ 1802.583956][ T1787] bond9 (unregistering): Released all slaves [ 1802.686542][ T1786] bond9: entered promiscuous mode [ 1802.705266][ T1786] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1802.727933][T31726] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1802.824567][ T1809] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1802.899601][ T1809] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1802.996548][ T1809] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1803.061287][T20330] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1803.094802][ T1809] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1803.109464][ T1820] xt_CT: No such helper "netbios-ns" [ 1803.177511][ T8503] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1803.294564][T31729] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1803.309124][T31729] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1803.334671][ T1838] netlink: 'syz.4.16721': attribute type 1 has an invalid length. [ 1803.337022][T31729] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1803.406740][ T1838] bond6: entered promiscuous mode [ 1803.415116][ T1838] bond6: entered allmulticast mode [ 1803.422715][ T1838] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1803.461495][T20311] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1803.476290][ T8503] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1803.708418][ T1857] can: request_module (can-proto-3) failed. [ 1804.425343][ T1920] bridge0: port 4(gretap0) entered blocking state [ 1804.440063][ T1920] bridge0: port 4(gretap0) entered disabled state [ 1804.457128][ T1920] gretap0: entered allmulticast mode [ 1804.465473][ T1920] gretap0: entered promiscuous mode [ 1804.523868][ T1924] __nla_validate_parse: 6 callbacks suppressed [ 1804.523887][ T1924] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16747'. [ 1804.652474][ T1932] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16750'. [ 1804.705655][ T1936] netlink: 'syz.1.16750': attribute type 3 has an invalid length. [ 1804.795299][ T1940] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16753'. [ 1804.816569][ T1940] netlink: 'syz.0.16753': attribute type 3 has an invalid length. [ 1804.825391][ T1940] netlink: 666 bytes leftover after parsing attributes in process `syz.0.16753'. [ 1804.890232][ T1941] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16753'. [ 1804.956228][ T1943] SET target dimension over the limit! [ 1805.094819][ T1949] netlink: 24 bytes leftover after parsing attributes in process `syz.2.16757'. [ 1805.395712][ T1960] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1805.430360][ T1960] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1805.442648][ T1960] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1805.627291][ T1960] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1805.638471][ T1960] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1805.651768][ T1960] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1805.762249][ T1960] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1805.773141][ T1960] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1805.784263][ T1960] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1805.809107][ T1991] netlink: 28 bytes leftover after parsing attributes in process `syz.2.16770'. [ 1805.824503][ T1987] lo speed is unknown, defaulting to 1000 [ 1805.897049][T13940] IPVS: starting estimator thread 0... [ 1805.901693][ T1960] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1805.930900][ T1960] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1805.944282][ T1960] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1806.010624][ T1994] IPVS: using max 34 ests per chain, 81600 per kthread [ 1806.046581][ T1996] xt_ecn: cannot match TCP bits for non-tcp packets [ 1806.105498][T31726] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1806.114181][T31726] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 1806.133609][T31726] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 1806.183243][T31726] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1806.194277][T31726] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 1806.207413][T31726] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 1806.233589][T20311] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1806.244457][T20311] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 1806.253776][T20311] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 1806.265201][ T1987] lo speed is unknown, defaulting to 1000 [ 1806.369398][T31726] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1806.397865][T31726] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 1806.415314][T31726] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 1806.717450][T20311] net_ratelimit: 22 callbacks suppressed [ 1806.717470][T20311] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1806.854099][T20311] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1807.123663][ T2022] netlink: 12 bytes leftover after parsing attributes in process `syz.4.16778'. [ 1807.239448][ T2024] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16779'. [ 1807.449352][T20330] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1807.580005][T31729] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1807.658887][ T2043] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16780'. [ 1807.707523][T31729] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1808.133385][ T2057] lo speed is unknown, defaulting to 1000 [ 1808.139705][T31729] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1808.277605][T20303] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1808.447480][T20303] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1808.610954][T31726] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1808.747582][T31726] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1809.075423][ T2057] lo speed is unknown, defaulting to 1000 [ 1809.127516][ T2054] lo speed is unknown, defaulting to 1000 [ 1809.393213][ T2110] syzkaller1: entered promiscuous mode [ 1809.419879][ T2110] syzkaller1: entered allmulticast mode [ 1809.825572][ T2138] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 3 [ 1810.101800][ T2095] lo speed is unknown, defaulting to 1000 [ 1810.177541][ T2054] lo speed is unknown, defaulting to 1000 [ 1810.696746][ T2119] lo speed is unknown, defaulting to 1000 [ 1810.981745][ T2179] __nla_validate_parse: 2 callbacks suppressed [ 1810.981767][ T2179] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16806'. [ 1811.303410][ T2119] lo speed is unknown, defaulting to 1000 [ 1811.416460][ T2095] lo speed is unknown, defaulting to 1000 [ 1811.620534][ T2209] syzkaller1: entered allmulticast mode [ 1811.629347][ T2209] netlink: 88 bytes leftover after parsing attributes in process `syz.3.16813'. [ 1811.757913][T20330] net_ratelimit: 19 callbacks suppressed [ 1811.757933][T20330] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1811.806783][ T2217] C: renamed from team_slave_0 [ 1811.824368][ T2217] netlink: 'syz.2.16814': attribute type 1 has an invalid length. [ 1811.840765][ T2217] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1811.885250][ T2217] netlink: 'syz.2.16814': attribute type 1 has an invalid length. [ 1811.900160][ T2217] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1811.916557][ T2217] netlink: 'syz.2.16814': attribute type 1 has an invalid length. [ 1811.924903][ T2217] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1811.945977][ T2217] netlink: 'syz.2.16814': attribute type 1 has an invalid length. [ 1811.955056][ T2217] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1811.971183][ T2217] netlink: 'syz.2.16814': attribute type 1 has an invalid length. [ 1811.979915][ T2217] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1811.995981][ T2217] netlink: 'syz.2.16814': attribute type 1 has an invalid length. [ 1812.004964][ T2217] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1812.054767][ T2217] netlink: 'syz.2.16814': attribute type 1 has an invalid length. [ 1812.066966][ T2217] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1812.098233][ T2217] netlink: 'syz.2.16814': attribute type 1 has an invalid length. [ 1812.124001][ T2217] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1812.226016][ T2217] netlink: 'syz.2.16814': attribute type 1 has an invalid length. [ 1812.235938][ T2217] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1812.319789][ T2217] netlink: 'syz.2.16814': attribute type 1 has an invalid length. [ 1812.571570][ T2240] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16820'. [ 1812.587019][ T2242] netlink: 20 bytes leftover after parsing attributes in process `syz.2.16820'. [ 1812.802193][ T2247] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16822'. [ 1812.812650][ T2247] siw: device registration error -23 [ 1813.252684][ T2253] syzkaller0: entered promiscuous mode [ 1813.268164][ T2253] syzkaller0: entered allmulticast mode [ 1813.278525][ T2253] tipc: Enabled bearer , priority 0 [ 1813.292454][ T2253] tipc: Resetting bearer [ 1813.375216][ T2253] tipc: Disabling bearer [ 1814.276199][ T2302] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16838'. [ 1814.427289][ T2313] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16841'. [ 1814.666616][ T2324] netlink: 40 bytes leftover after parsing attributes in process `syz.1.16845'. [ 1814.696007][ T2324] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16845'. [ 1814.720264][ T2324] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16845'. [ 1814.793988][ T2326] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1815.289323][ T2338] veth0_to_bond: entered promiscuous mode [ 1815.305567][ T2338] veth0_to_bond: entered allmulticast mode [ 1815.324956][ T2338] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 1815.356578][ T2338] RDS: rds_bind could not find a transport for 2001::2, load rds_tcp or rds_rdma? [ 1815.806238][ T2357] syzkaller0: entered promiscuous mode [ 1815.812431][ T2357] syzkaller0: entered allmulticast mode [ 1816.065779][ T2366] lo speed is unknown, defaulting to 1000 [ 1816.111211][ T2371] __nla_validate_parse: 2 callbacks suppressed [ 1816.111232][ T2371] netlink: 108 bytes leftover after parsing attributes in process `syz.2.16856'. [ 1816.154937][ T2376] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16860'. [ 1816.357481][ T2373] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1816.511266][ T2366] lo speed is unknown, defaulting to 1000 [ 1816.511283][T20330] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1816.536825][T20330] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 1816.564890][T20330] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1816.583851][T20330] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1816.617789][T20330] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 1816.635248][T20330] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1816.654549][T20330] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1816.677752][T20330] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 1816.686384][T20330] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1816.707166][T20330] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1816.729003][T20330] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 1816.752334][T20330] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1816.788920][T31729] net_ratelimit: 85 callbacks suppressed [ 1816.788940][T31729] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1816.833901][ T2401] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16866'. [ 1816.853708][ T2401] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16866'. [ 1816.869114][ T2401] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16866'. [ 1816.884114][ T2401] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16866'. [ 1816.903650][ T2398] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16862'. [ 1816.915802][ T2401] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16866'. [ 1816.926963][ T2401] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16866'. [ 1816.940250][ T2401] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16866'. [ 1816.965394][ T2401] bridge0: port 4(gretap0) entered blocking state [ 1816.972154][ T2401] bridge0: port 4(gretap0) entered forwarding state [ 1816.980361][ T2401] bridge0: left allmulticast mode [ 1816.989018][ T2401] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1816.998766][ T2401] 8021q: adding VLAN 0 to HW filter on device team0 [ 1817.003180][ T2408] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1817.010832][ T2401] bridge0: port 3(dummy0) entered blocking state [ 1817.022622][ T2401] bridge0: port 3(dummy0) entered forwarding state [ 1817.044176][ T2401] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1817.101118][T31729] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1817.334659][ T2419] syzkaller1: entered promiscuous mode [ 1817.340890][ T2419] syzkaller1: entered allmulticast mode [ 1817.364287][ T2423] tipc: Enabling of bearer rejected, failed to enable media [ 1817.397994][T20303] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1817.434044][ T2435] sctp: [Deprecated]: syz.0.16871 (pid 2435) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1817.434044][ T2435] Use struct sctp_sack_info instead [ 1817.527901][T20330] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1817.633999][ T2446] delete_channel: no stack [ 1817.668654][T20311] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1817.732735][ T2446] netem: change failed [ 1817.797841][T31729] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1817.887048][ T2441] lo speed is unknown, defaulting to 1000 [ 1817.928291][T20311] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1817.996346][ T2456] validate_nla: 55 callbacks suppressed [ 1817.996366][ T2456] netlink: 'syz.4.16877': attribute type 14 has an invalid length. [ 1818.015207][ T2456] netlink: 'syz.4.16877': attribute type 13 has an invalid length. [ 1818.050545][T31729] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1818.333985][ T2441] lo speed is unknown, defaulting to 1000 [ 1818.341184][ T2440] lo speed is unknown, defaulting to 1000 [ 1818.394348][ T2472] ipt_REJECT: ECHOREPLY no longer supported. [ 1819.406745][ T2487] bond3: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3) [ 1819.438312][ T2487] bond3 (unregistering): Released all slaves [ 1819.464475][ T2440] lo speed is unknown, defaulting to 1000 [ 1819.651463][ T2501] lo speed is unknown, defaulting to 1000 [ 1820.112765][ T2501] lo speed is unknown, defaulting to 1000 [ 1821.492618][ T2578] netlink: 'syz.1.16905': attribute type 1 has an invalid length. [ 1821.542809][ T2567] lo speed is unknown, defaulting to 1000 [ 1821.830536][T31729] net_ratelimit: 14 callbacks suppressed [ 1821.830558][T31729] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1821.984235][T20330] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1822.112862][ T2600] tipc: Enabling of bearer rejected, failed to enable media [ 1822.128227][T20330] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1822.218780][ T2567] lo speed is unknown, defaulting to 1000 [ 1822.247534][T20330] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1822.263313][ T2582] lo speed is unknown, defaulting to 1000 [ 1822.357503][T20330] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1822.468219][T31729] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1822.479006][ T2094] block nbd5: Possible stuck request ffff888026978000: control (read@0,1024B). Runtime 300 seconds [ 1822.490193][ T2094] block nbd5: Possible stuck request ffff888026978200: control (read@1024,1024B). Runtime 300 seconds [ 1822.501409][ T2094] block nbd5: Possible stuck request ffff888026978400: control (read@2048,1024B). Runtime 300 seconds [ 1822.513261][ T2094] block nbd5: Possible stuck request ffff888026978600: control (read@3072,1024B). Runtime 300 seconds [ 1822.587721][T20311] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1822.679048][ T2582] lo speed is unknown, defaulting to 1000 [ 1822.817437][T31729] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1822.927757][T20311] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1823.037448][T31729] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1826.907867][T31729] net_ratelimit: 32 callbacks suppressed [ 1826.907890][T31729] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1827.028186][T20303] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1827.137862][T20311] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1827.247598][T31726] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1827.357573][T31729] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1827.468016][T31726] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1827.577712][T20311] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1827.687839][T20311] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1827.797975][T20311] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1827.908228][T31729] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1831.987905][T20303] net_ratelimit: 36 callbacks suppressed [ 1831.987927][T20303] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1832.107554][T20311] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1832.217775][T20303] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1832.327733][T31726] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1832.437714][T20303] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1832.548050][T31726] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1832.657831][T20303] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1832.767670][T31726] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1832.877527][T20303] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1832.987780][T20303] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1837.057605][T20303] net_ratelimit: 36 callbacks suppressed [ 1837.057627][T20303] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1837.177718][T31726] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1837.287916][T20311] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1837.397617][T20311] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1837.508030][T20311] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1837.618009][T31726] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1837.727909][T20311] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1837.837641][T31726] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1837.947798][T20303] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1838.057864][T20303] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1842.137828][T20311] net_ratelimit: 36 callbacks suppressed [ 1842.137851][T20311] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1842.257558][T31729] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1842.367547][T20311] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1842.478186][T31729] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1842.587705][T31729] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1842.697665][T20311] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1842.807931][T31726] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1842.917637][T20311] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1843.027806][T20311] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1843.137839][T31726] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1846.148129][ T31] INFO: task udevd:27014 blocked for more than 143 seconds. [ 1846.155467][ T31] Not tainted syzkaller #0 [ 1846.160654][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1846.169693][ T31] task:udevd state:D stack:22528 pid:27014 tgid:27014 ppid:5191 task_flags:0x400140 flags:0x00080002 [ 1846.181868][ T31] Call Trace: [ 1846.185160][ T31] [ 1846.188334][ T31] __schedule+0x1585/0x5340 [ 1846.192874][ T31] ? __lock_acquire+0x6b5/0x2cf0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 1846.198301][ T31] ? __pfx___schedule+0x10/0x10 [ 1846.203886][ T31] ? schedule+0x90/0x360 [ 1846.208928][ T31] schedule+0x164/0x360 [ 1846.213131][ T31] io_schedule+0x7f/0xd0 [ 1846.217906][ T31] folio_wait_bit_common+0x6d8/0xbc0 [ 1846.223242][ T31] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 1846.237424][ T31] ? __pfx_wake_page_function+0x10/0x10 [ 1846.257677][ T31] ? __filemap_get_folio_mpol+0x7a9/0xb00 [ 1846.263813][ T31] do_read_cache_folio+0x1ad/0x590 [ 1846.327689][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 1846.333399][ T31] read_part_sector+0xb6/0x2b0 [ 1846.360677][ T31] adfspart_check_POWERTEC+0x92/0xef0 [ 1846.366126][ T31] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 1846.418087][ T31] ? __pfx_adfspart_check_POWERTEC+0x10/0x10 [ 1846.424408][ T31] bdev_disk_changed+0x7ba/0x1550 [ 1846.477410][ T31] ? bdev_open+0xe0/0xd30 [ 1846.482170][ T31] ? __pfx_bdev_disk_changed+0x10/0x10 [ 1846.527879][ T31] blkdev_get_whole+0x380/0x510 [ 1846.532815][ T31] bdev_open+0x31e/0xd30 [ 1846.537096][ T31] blkdev_open+0x470/0x610 [ 1846.577652][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 1846.582661][ T31] do_dentry_open+0x785/0x14e0 [ 1846.617519][ T31] vfs_open+0x3b/0x340 [ 1846.621672][ T31] ? path_openat+0x2df0/0x3860 [ 1846.626496][ T31] path_openat+0x2e08/0x3860 [ 1846.677490][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 1846.682943][ T31] ? stack_depot_save_flags+0x33/0x810 [ 1846.727699][ T31] ? __pfx_path_openat+0x10/0x10 [ 1846.732706][ T31] ? __x64_sys_openat+0x138/0x170 [ 1846.767434][ T31] ? do_syscall_64+0x14d/0xf80 [ 1846.772276][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1846.807465][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 1846.812486][ T31] do_file_open+0x23e/0x4a0 [ 1846.817200][ T31] ? __pfx_do_file_open+0x10/0x10 [ 1846.867504][ T31] ? _raw_spin_unlock+0x28/0x50 [ 1846.872447][ T31] ? alloc_fd+0x64b/0x6c0 [ 1846.876811][ T31] do_sys_openat2+0x113/0x200 [ 1846.907614][ T31] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 1846.913237][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 1846.937696][ T31] ? rcu_is_watching+0x15/0xb0 [ 1846.942543][ T31] __x64_sys_openat+0x138/0x170 [ 1846.967460][ T31] do_syscall_64+0x14d/0xf80 [ 1846.972126][ T31] ? trace_irq_disable+0x3b/0x150 [ 1846.980126][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1846.986418][ T31] ? clear_bhb_loop+0x40/0x90 [ 1847.009473][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1847.015422][ T31] RIP: 0033:0x7fc583aa7407 [ 1847.028292][ T31] RSP: 002b:00007ffd171c2b90 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1847.036788][ T31] RAX: ffffffffffffffda RBX: 00007fc58414d880 RCX: 00007fc583aa7407 [ 1847.056484][ T31] RDX: 00000000000a0800 RSI: 00005585e0678aa0 RDI: ffffffffffffff9c [ 1847.065176][ T31] RBP: 00005585e0667910 R08: 0000000000000000 R09: 0000000000000000 [ 1847.073806][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 00005585e067fe00 [ 1847.081971][ T31] R13: 00005585e0675190 R14: 0000000000000000 R15: 00005585e067fe00 [ 1847.090286][ T31] [ 1847.093398][ T31] [ 1847.093398][ T31] Showing all locks held in the system: [ 1847.107726][ T31] 1 lock held by khungtaskd/31: [ 1847.112750][ T31] #0: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1847.122835][ T31] 1 lock held by klogd/5180: [ 1847.127834][ T31] #0: ffff8880b873ade0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x31/0x150 [ 1847.138163][ T31] 2 locks held by getty/5583: [ 1847.142873][ T31] #0: ffff8880371310a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1847.152998][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 1847.163450][ T31] 2 locks held by kworker/0:0/13940: [ 1847.169153][ T31] #0: ffff88813fe0f548 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 1847.180826][ T31] #1: ffffc9000c76fc40 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 1847.191571][ T31] 1 lock held by syz-executor/27006: [ 1847.196853][ T31] #0: ffffffff8fbc5e48 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 1847.206056][ T31] 1 lock held by udevd/27014: [ 1847.210911][ T31] #0: ffff888026811358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 1847.220869][ T31] 1 lock held by syz-executor/27156: [ 1847.226221][ T31] #0: ffffffff8e766578 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 1847.237591][ T31] 1 lock held by dhcpcd/2612: [ 1847.242303][ T31] #0: ffff88807c68e260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe10 [ 1847.289708][ T31] [ 1847.294316][ T31] ============================================= [ 1847.294316][ T31] [ 1847.323279][ T31] NMI backtrace for cpu 0 [ 1847.323299][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1847.323320][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1847.323331][ T31] Call Trace: [ 1847.323339][ T31] [ 1847.323347][ T31] dump_stack_lvl+0xe8/0x150 [ 1847.323379][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 1847.323420][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1847.323457][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1847.323480][ T31] sys_info+0x135/0x170 [ 1847.323496][ T31] watchdog+0xfd9/0x1030 [ 1847.323534][ T31] ? watchdog+0x21a/0x1030 [ 1847.323598][ T31] kthread+0x388/0x470 [ 1847.323617][ T31] ? __pfx_watchdog+0x10/0x10 [ 1847.323640][ T31] ? __pfx_kthread+0x10/0x10 [ 1847.323658][ T31] ret_from_fork+0x51e/0xb90 [ 1847.323691][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1847.323712][ T31] ? __switch_to+0xc7d/0x1450 [ 1847.323745][ T31] ? __pfx_kthread+0x10/0x10 [ 1847.323763][ T31] ret_from_fork_asm+0x1a/0x30 [ 1847.323802][ T31] [ 1847.323809][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1847.438809][ C1] NMI backtrace for cpu 1 [ 1847.438827][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 1847.438844][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1847.438854][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1847.438881][ C1] Code: be 6d 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 3d 1c 00 fb f4 7c ea 02 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 1847.438895][ C1] RSP: 0018:ffffc90000197e20 EFLAGS: 00000242 [ 1847.438910][ C1] RAX: 0000000000448c6d RBX: ffffffff819a80dd RCX: 0000000080000001 [ 1847.438921][ C1] RDX: 0000000000000001 RSI: ffffffff8def494c RDI: ffffffff8c27aa00 [ 1847.438932][ C1] RBP: ffffc90000197f10 R08: ffff8880b873395b R09: 1ffff110170e672b [ 1847.438943][ C1] R10: dffffc0000000000 R11: ffffed10170e672c R12: ffffffff901117b0 [ 1847.438954][ C1] R13: 1ffff11003b5c000 R14: 0000000000000001 R15: 0000000000000001 [ 1847.438965][ C1] FS: 0000000000000000(0000) GS:ffff88812556d000(0000) knlGS:0000000000000000 [ 1847.438977][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1847.438988][ C1] CR2: 0000563898fe2168 CR3: 000000000e54c000 CR4: 00000000003526f0 [ 1847.439002][ C1] Call Trace: [ 1847.439008][ C1] [ 1847.439014][ C1] default_idle+0x9/0x20 [ 1847.439028][ C1] default_idle_call+0x72/0xb0 [ 1847.439044][ C1] do_idle+0x1bd/0x500 [ 1847.439064][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 1847.439085][ C1] ? __pfx_do_idle+0x10/0x10 [ 1847.439110][ C1] cpu_startup_entry+0x43/0x60 [ 1847.439129][ C1] start_secondary+0x101/0x110 [ 1847.439147][ C1] common_startup_64+0x13e/0x147 [ 1847.439170][ C1] [ 1847.603425][T13634] lec:lec_start_xmit: lec0:No lecd attached [ 1847.611981][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1847.612005][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1847.612027][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1847.612039][ T31] Call Trace: [ 1847.612048][ T31] [ 1847.612056][ T31] vpanic+0x56c/0xa60 [ 1847.612087][ T31] ? __pfx___schedule+0x10/0x10 [ 1847.612112][ T31] ? __pfx_vpanic+0x10/0x10 [ 1847.612136][ T31] ? __pfx_console_unlock+0x10/0x10 [ 1847.612210][ T31] panic+0xc5/0xd0 [ 1847.612234][ T31] ? __pfx_panic+0x10/0x10 [ 1847.612259][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1847.612284][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1847.612308][ T31] watchdog+0x1023/0x1030 [ 1847.612340][ T31] ? watchdog+0x21a/0x1030 [ 1847.612373][ T31] kthread+0x388/0x470 [ 1847.612392][ T31] ? __pfx_watchdog+0x10/0x10 [ 1847.612420][ T31] ? __pfx_kthread+0x10/0x10 [ 1847.612440][ T31] ret_from_fork+0x51e/0xb90 [ 1847.612469][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1847.612491][ T31] ? __switch_to+0xc7d/0x1450 [ 1847.612515][ T31] ? __pfx_kthread+0x10/0x10 [ 1847.612535][ T31] ret_from_fork_asm+0x1a/0x30 [ 1847.612576][ T31] [ 1847.613898][ T31] Kernel Offset: disabled