last executing test programs: 12.509238085s ago: executing program 3 (id=14879): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'veth1_to_hsr\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6tnl0\x00', r1, 0x4, 0x81, 0x5, 0xe, 0x4d, @mcast1, @empty, 0x0, 0x700, 0x6}}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) syz_init_net_socket$ax25(0x3, 0x3, 0xce) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000022780)=ANY=[@ANYBLOB="4000000010003b1400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100677470000c00028008000200", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x40}, 0x1, 0x0, 0x0, 0x8004}, 0x24000800) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)={r3}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r7, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8317}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x800}]}]}, 0x30}}, 0x48880) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0xe315}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0xffffffffffffffe0}}, 0x0) 12.191773013s ago: executing program 3 (id=14882): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc041301004810000a005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0xc000014) 11.949461886s ago: executing program 3 (id=14886): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20008041}, 0xc000041) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000e80)=@gcm_256={{0x303, 0x36}, "437e509e2d2800", "8b3de2aabceef2a0640000d5a66fd32f419e59f3000000000400", "7d939a3c", "0000001500"}, 0x38) 11.778968037s ago: executing program 3 (id=14888): socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) socket$kcm(0x2, 0xa, 0x2) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) socket$inet(0x2, 0xa, 0x1) (async) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000000800007f00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000d0000019000000000000000000000000000000fc7e934af1ea0e48f464c5930f53e393092ba2caa7f2872b9303c7d97d60aa544973d3bac0417f58e061473b9cce83f439b2b10f9783cae31cedc44cbf6f6450296c4dffefff2520cb38675a7a86b16b14d371a86d95c22efe8e4aa7"], 0x50) (async) r0 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a, 0x12, r0, 0x852ac000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff0000820095"], &(0x7f0000000040)='syzkaller\x00', 0x7, 0xfa, &(0x7f0000000f40)=""/250, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa}, 0x94) (async) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000100)=0x7, 0x4) (async) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000080)=0x1, 0x4) (async) bind$inet(r1, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) (async) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) (async) r3 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000d379)={&(0x7f00000002c0)=ANY=[@ANYBLOB="180000001400010300000000000000001e"], 0x18}}, 0x0) (async) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) (async) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYRES32], 0x28}}, 0x802) 11.558654218s ago: executing program 3 (id=14889): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000500)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030e000000000700000000000004000900a000000001d78771b90bd8a3b4914783c58777003d5b95380000000003000600000000000200000000000000000900000000000002000100000000000000fb16ff000000030005000000000002"], 0x70}, 0x1, 0x7}, 0x0) 11.15111654s ago: executing program 3 (id=14892): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xe, 0x0, 0x0) 6.451254442s ago: executing program 1 (id=14915): bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000003c0)={0xffffffffffffffff, &(0x7f0000000440)="b67a5890586308ea9bf0d1a667cb787e3e15ebd02f3ce798d2952e96636f4cf3ea5d07f3341097d05bd7512fd47a53cb4abaa601e736278576604f86b2e60358a19905e9f349b0ae82cafb6892ec9900e2dfa6bfbf7b5f007190e3459cf68e11edc753d076a46fa7b7e74965363244d1b938fd4cbe1199296214e628fc38b215be4928f8fb8196c75cfd775c32705b0872e5d0c7e9b3c338c49a3f0afc7b6f51e4cb20f2d73d0a4206cdd644415b2a2837bc13eff2be4ea90cfcd1cd3f8b73fa4f4ce73c05f2521754b8d234220decb62a78f7d499", 0x0}, 0x20) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0200001900010000000000000000000a0101000000000000000000000000000a010101000000ffffff80000000000000000003000000000a00000008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fcffffffffffffff0000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000001e0000000000000001000000040000000000000000000000fdffffffffffffff0600000000000000040000000000000000000100000000008401050020010000000000000000000000000001000000002b00000000000000fc010000000000000000000000000001000000000000ff000000000000000000000000000000000000000000000000000000000100000000320000000000000000000000000000000000ffffac1e0001feffbfff0000"], 0x23c}}, 0x8000000) 6.325738119s ago: executing program 1 (id=14917): unshare(0x62040200) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0) r5 = openat$cgroup_netprio_ifpriomap(r4, &(0x7f0000000080), 0x2, 0x0) writev(r5, &(0x7f00000011c0)=[{&(0x7f00000001c0)="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", 0x201}], 0x1) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000600), r6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c0, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x328, 0x2e8, 0x2e8, 0x328, 0x2e8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0xffffff00, 0xff000000], [0xff, 0x34da508f3e8fb0eb, 0xffffff00, 0xff], 'veth0_to_batadv\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x89, 0x7, 0x7, 0x38}, 0x0, 0xa8, 0xe0, 0x0, {0x0, 0x2000000000000}}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x6, 0x7}, {0x3, 0x3, 0x6}, {0x1, 0x1, 0x2}, 0x3, 0x29b}}}, {{@ipv6={@remote, @loopback, [], [], 'macvtap0\x00', 'syzkaller1\x00', {}, {0xff}, 0x0, 0x0, 0x2}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00', {0xfffffffffffffffd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1400000000000000100100000d00000001000000000000001800000000000000100100000d"], 0x30}, 0x0) unshare(0x400) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000001600), 0x0}, 0x50) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x12141) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r8, 0xfeffff, 0xe80, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0200000004000000040b00000800000014100200e2a66a2dac7545468d684a35b0ce93296ad69463547fc878dd915d055dbc6449ff770fe42c98e58c03b978632c1a642d21dddbd1d6e10509cba33cefcbbeeacc41eabee55f0024a49bd75b19477cf681f3cda2b9289a387eeecde7dd10108b4524befc3ae11fcad63a1afd10ba3549a70227236a1b4edd4fb5a5812bf85ca53039cece8fd7ff15b1ddd7cdd13437d1f6d6c505bcff49270e9a167fc12f708057d7670e94b91851100570abf43b43de4b03f9caacc2d93f80c22f9d6295dad53ffb031c252d2ee87477a0bf09d3fe5821965ce6d0b0f04d5c376087571018b9d18a71856811049b0035b5195a", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRESOCT=r1], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0xa}, @NFT_OBJECT_LIMIT=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x98}, 0x1, 0x0, 0x0, 0x840}, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001788cf728f519d422f1e64caff100f1e4ed71600515351f8dbe490e43d40d76f06a9faaab91adfeed54a771a6c1e311185dd56f76d2846d9704e2dce8839d8f639aee6e7d1d421c42452473bd6ca282d34bd3fb64d5b3dbed7f5f47993affb3bae4475e23451ee4c9663cfee9ade90ae100ce0", @ANYRES16=r3, @ANYBLOB="01000000000000000000100000001800018014000200776c616e31000000000000000000000008000800000000000800070004000000"], 0x3c}}, 0x0) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto(r9, 0x0, 0x0, 0x4004, &(0x7f0000000180)=@nfc_llcp={0x27, 0x0, 0xffffffffffffffff, 0x1, 0x58, 0x5, "acbabdccfd12dfda2d08f9ac237de1e496f254c9b2bd7d103a5d7b2a73cfb5462a02412f676e5718836b7a2b228fe925c4a61d1c8d326f25091762c7233fcd", 0x35}, 0x80) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r10, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r10, &(0x7f0000000100)="520003000100b8", 0x7) sendmsg$nl_route(r0, 0x0, 0xc0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {0x0, 0x0, 0x0, 0x0, 0x31}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000) 3.114299883s ago: executing program 0 (id=14936): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r2) sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="010e2abd7000fddbdf2506000000"], 0x14}, 0x1, 0x0, 0x0, 0x4004041}, 0x40) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r4, 0x80108906, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x18, 0x4, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) vmsplice(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000600)=';', 0x1}], 0x1, 0x4) r5 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r5, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x3c, r6, 0x1, 0x0, 0x25dfdbff, {0x54}, [{{@nsim={{0xe, 0x2}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8001}, 0x80) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, r5, 0x0, 0x8000, 0x0) socket$packet(0x11, 0x0, 0x300) recvmmsg(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000400)}, 0x88f}, {{&(0x7f0000000000)=@l2tp={0x2, 0x0, @loopback}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000380)=""/180, 0xb4}, {&(0x7f0000000440)=""/139, 0x8b}, {&(0x7f0000000500)=""/147, 0x93}, {&(0x7f00000005c0)=""/86, 0x56}], 0x4, &(0x7f0000000640)=""/229, 0xe5}, 0x80000001}], 0x2, 0x122, 0x0) getsockopt$sock_buf(r0, 0x1, 0x38, &(0x7f0000000140)=""/169, &(0x7f0000000200)=0xa9) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r8, 0x1, 0x21, 0x0, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) 3.065488149s ago: executing program 1 (id=14938): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000e500000001"], 0x48) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000000), &(0x7f0000000080)=0x4) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000006800010400000000000000000a000000000000000800010001000000040004"], 0x24}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="2400000068000100020000000600000000000000000000000c00020001"], 0x24}, 0x1, 0x0, 0x0, 0x400c000}, 0x4000) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@ipv4_getnexthop={0x18, 0x6a, 0x7d9504e1c39794d, 0x70bd2a, 0x25dfdbfb}, 0x18}}, 0x24044000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'sit0\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r6) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000001c0)={0x38, r7, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x38}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x6, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r0}, @ldst={0x3, 0x0, 0x3, 0x0, 0x0, 0xa0}]}, &(0x7f0000000180)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 2.697758323s ago: executing program 0 (id=14940): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0xefff, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac0040002020800020003000a0004000600eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20004080) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)={0x98, r2, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [{{0x8, 0x1, r3}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff0}}}]}}]}, 0x98}, 0x1, 0x1000000, 0x0, 0x805}, 0x24048840) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000480)=[{&(0x7f0000000140)="3b010000000080000000b66a443625ffd53439f6b6f78b06b4a05cb3112721d6151d3e85bed7bfefca5f009e3cd2", 0x2e}], 0x1, 0x4) r6 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r6, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r6, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) connect$inet(r6, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r4, 0x0, r6, 0x0, 0x8000, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r9, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0xfffe, @local}, 0x10, &(0x7f0000001980)=[{&(0x7f00000006c0)="a1c0ffff000039a9029e2d347a0000000666eeee", 0x14}, {0x0, 0x26}], 0x2}}], 0x1, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d}, 0x94) r11 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r12 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r12, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r11, &(0x7f0000000880)={0x27, r13, 0x0, 0x6, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e879918d20000000f2170e65e3f50327080e000000000000001600", 0x3c}, 0x60) sendto(r11, 0x0, 0x0, 0x4000, 0x0, 0x0) ioctl$sock_FIOGETOWN(r11, 0x8903, &(0x7f0000000180)) r14 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x34, r15, 0x1, 0x0, 0x25dfdbfe, {0x2, 0x2, 0x2}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x34}, 0x1, 0x40030000000000, 0x0, 0x800}, 0x80) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000040)=r10, 0x4) sendmsg$unix(r8, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0) 2.568019504s ago: executing program 4 (id=14942): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x18, 0x3, 0x735dde7b) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) setsockopt(0xffffffffffffffff, 0x84, 0x7f, 0x0, 0x0) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000100)="bdcbe691a3401b8d80ab04767e7a8c75f887df3631fd1bcb4bb6ddafcc7a8299b0c00fbbb589f34a426af4118cd75e6a74d5d7bb9b4cd8c5ac") openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) socket$alg(0x26, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r3, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e23, 0x80000, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="110000000000000029000000", @ANYRES16=r3], 0x18}, 0x40c0) ioctl$sock_rose_SIOCADDRT(r1, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @bcast, @rose={'rose', 0x0}, 0xfe, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000007c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @null, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) connect$rose(r4, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @null}, 0x1c) connect$rose(r4, &(0x7f0000000240)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @null}, 0x1c) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000340)={0xfffbfffc, 0x2000000, 0x5, 0x6}, 0x10) 2.479361476s ago: executing program 1 (id=14943): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0xd1}, 0x880) r2 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0x0, 0x4, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}]]}, 0x28}, 0x1, 0x0, 0x0, 0x4000880}, 0x20048810) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'ip6_vti0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x29, 0xff, 0xb, 0x5f0, 0x1, @remote, @rand_addr=' \x01\x00', 0x20, 0x10, 0x400, 0x6}}) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}, @GTPA_MS_ADDR6={0x14, 0xc, @empty}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_LINK={0x8, 0x1, r3}, @GTPA_FAMILY={0x5, 0xd, 0x2b}, @GTPA_PEER_ADDRESS={0x8, 0x4, @private=0xa010101}, @GTPA_O_TEI={0x8}]}, 0x58}}, 0x800) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000480)={[{0x2b, 'net_cls'}, {0x2b, 'io'}, {0x2d, 'blkio'}]}, 0x14) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup/syz1\x00', 0x1ff) ioctl(r4, 0x9, &(0x7f0000000500)="1fd04c518fde99b07c25fd01f7076c4487e900c81f128abcfb10bce6f0fe5b47025e19765a3ea6b5129c21457148d89eeed97ec0e595c02e") poll(&(0x7f0000000540)=[{r4, 0x200}, {r5, 0x4}, {r2, 0x1001}, {r4, 0x2005}], 0x4, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000580)={'veth0\x00', 0x0}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0xb2cab000) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x54, r7, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x54}}, 0x20008000) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r8, 0x11, 0x65, &(0x7f0000000740)=0x9, 0x4) r9 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r9, &(0x7f0000000780)={0x2, 0x0, @multicast2}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000008c0)={&(0x7f00000007c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x4, [@int={0x3, 0x0, 0x0, 0x1, 0x0, 0x27, 0x0, 0x5a, 0x1}]}, {0x0, [0x61, 0x30]}}, &(0x7f0000000800)=""/179, 0x2c, 0xb3, 0x0, 0x1242, 0x10000, @value=r2}, 0x28) r10 = syz_genetlink_get_family_id$gtp(&(0x7f0000000940), r0) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, r10, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@GTPA_LINK={0x8, 0x1, r3}]}, 0x1c}}, 0x40844) r11 = socket$nl_rdma(0x10, 0x3, 0x14) r12 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000a80)='ns/time\x00') sendmsg$RDMA_NLDEV_CMD_SET(r11, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, 0x1402, 0x0, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r12}]}, 0x44}, 0x1, 0x0, 0x0, 0x8004}, 0x44041) recvfrom$l2tp(r9, &(0x7f0000000bc0)=""/4, 0x4, 0x20, &(0x7f0000000c00)={0x2, 0x0, @loopback}, 0x10) syz_init_net_socket$ax25(0x3, 0x2, 0x6) r13 = accept(r4, 0x0, &(0x7f0000000c40)) ioctl$sock_x25_SIOCADDRT(r13, 0x890b, &(0x7f0000000c80)={@null, 0x9, 'vcan0\x00'}) 2.360596602s ago: executing program 0 (id=14944): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='reno', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x7}, 0x4) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000000c0)='gretap0\x00', 0x10) sendmmsg$inet(r2, &(0x7f0000001480)=[{{&(0x7f0000000800)={0x2, 0xce24, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000740)=[{&(0x7f0000000400)=""/248, 0xf8}, {&(0x7f0000000280)=""/181, 0xb5}, {&(0x7f0000000340)=""/21, 0x15}, {&(0x7f0000000540)=""/136, 0x88}, {&(0x7f0000000680)=""/140, 0x8c}, {&(0x7f0000000380)=""/122, 0x7a}], 0x6, 0x0, 0x0, 0x200000}, 0x1f00) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r3, 0x891a) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r6, &(0x7f0000000640)={&(0x7f0000000200)={0x2, 0x4ea0, @broadcast}, 0x10, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000080)="5b020075c69700", 0x7}], 0x2}, 0x20000000) r7 = socket(0x2a, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r8, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000005c0)=""/151, 0x97}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x0) sendmsg$tipc(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="b8d3d8e48974aae56e0000000000000061b9459b68100dbf05177b2490a5408bdf271fd6b9aa6701365ffc723899ad120c5a54b1c64080f64f103ee1de769e5e9dd847dc85fea662eaad499c52a16f40cb3a1f6f3d5f8df14c53b2e6b5397f7806b6ff846de37a34c8342b9ac5a51eacf8a09cede8676044eafd3d7935f90698aa2d9c57276322b82e8976f5a4d980eaeb3b636630b810f2e2", 0x99}], 0x1, 0x0, 0x0, 0x84}, 0x20000000) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x2000004, 0x31, 0xffffffffffffffff, 0xf98be000) close(r9) getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendto$inet(r7, &(0x7f0000000c80)="e8", 0x1, 0x12000080, 0x0, 0x0) 2.110970351s ago: executing program 2 (id=14945): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4028800) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xf5, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0xb5, &(0x7f00000001c0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0x30, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000008000000000"], 0x50) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0xa0028000}) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000100001f400000000000000000500000a5c000000180a0500fffffff50000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x54}, 0x20008000) 2.004891997s ago: executing program 4 (id=14946): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x1c, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x19, 0x0, 0x0, @binary}, @typed={0x4, 0x1e}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x20000000) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x3, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5}}, &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1414, 0x2021}, [@IFLA_PROTO_DOWN={0x0, 0x27, 0x3}, @IFLA_EXT_MASK={0x0, 0x1d, 0xc37}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) listen(r1, 0x8) setsockopt$ax25_SO_BINDTODEVICE(r1, 0x101, 0x19, &(0x7f0000000080)=@netrom={'nr', 0x0}, 0x10) 2.003828354s ago: executing program 2 (id=14947): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@loopback}, @in6=@remote, {@in=@remote, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56befe125658cb64}, {{@in6=@private2, @in=@broadcast, 0x4e23, 0x0, 0x4e23, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xee00}, {}, {0x600000000000000, 0x2}, 0x0, 0x0, 0x2, 0x0, 0x3}, 0xfffffff9, 0x400000}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d4, 0x32}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x19}, 0x3504, 0x0, 0x2, 0x1, 0x9, 0x101, 0x8}]}]}, 0x16c}}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000000), 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, 0x0, 0x0) 1.774411547s ago: executing program 2 (id=14948): r0 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x24020400) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, 0x0, 0x300) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)={0x1c, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@nested={0x8, 0x1a, 0x0, 0x1, [@nested={0x4, 0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xc, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x8, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x4, 0x30}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000000)={0x0, 'veth0_virt_wifi\x00'}) 1.662943385s ago: executing program 4 (id=14949): socket$inet6(0xa, 0x2, 0x0) (async) r0 = socket$inet6(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000001e80)=ANY=[@ANYBLOB="1802000000000080000000006f9e000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000ffffff7f7b0180ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000820000009500000000000000"], 0x0, 0x20004, 0x0, 0x0, 0x40f00, 0x61}, 0x94) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000001c00)=[{{&(0x7f00000000c0)=@alg, 0x0, &(0x7f0000000640)=[{&(0x7f0000000140)=""/97}, {&(0x7f0000000240)=""/121}, {&(0x7f0000000340)=""/107}, {&(0x7f00000001c0)=""/12}, {&(0x7f00000003c0)=""/124}, {&(0x7f0000001cc0)=""/213}, {&(0x7f0000000580)=""/181}], 0x0, &(0x7f00000009c0)=""/4096}, 0xbac00000}, {{&(0x7f00000006c0), 0x0, &(0x7f00000002c0)=[{&(0x7f0000000740)=""/214}, {&(0x7f0000000840)=""/201}]}, 0x100}, {{&(0x7f00000019c0)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x0, &(0x7f0000000940)=[{&(0x7f0000001a40)=""/207}], 0x0, &(0x7f0000001b40)=""/173}, 0x7a}], 0x400000000000273, 0x2b, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001f40)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001e40), &(0x7f0000001f00)='%pi6 \x00'}, 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000002080)={r1, &(0x7f0000001f80)="41b5d5646d16ac22b9efb7d4fc300fd1a4a0358ab3181750650639ef571aaab38ad2fb5d61eae4d3d8431ed9dd0b1cee4703d8a5f774bec508d87d510d3cde0dff833f8c58879b35147feeb3a5de672e2aae1b421a8874dce90d4c9cf71e23038caca9c082b4ef55b4c2cda442feaf4531ba8ff355a089f3050f59595154d08d397d534a34825725e02ddd453ff964ad76a5965756922b2ddc17bab650697855c2ddec4cb7dfb5401cc60371127e", &(0x7f0000002040)=@tcp=r2}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x401, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) (async) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$pppl2tp(0x18, 0x1, 0x1) (async) r3 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r3, 0x111, 0x3, 0x0, 0x4) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x310, 0x168, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3c0, 0xffffffff, 0xffffffff, 0x3c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x148, 0x168, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x810001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x370) pipe(&(0x7f00000001c0)) (async) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) read$alg(r4, &(0x7f0000000200)=""/96, 0x60) (async) read$alg(r4, &(0x7f0000000200)=""/96, 0x60) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write(r6, &(0x7f0000000700)="f574c3", 0x3) splice(r6, &(0x7f0000000040), r5, 0x0, 0x6, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r7, 0x0, 0x30, 0x0, @val=@kprobe_multi=@addrs={0x1, 0x5, 0x0, &(0x7f0000000040)=[0xfffffffff2512593, 0x6, 0x6, 0x4, 0x1], 0xf6c5}}, 0x30) r8 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) (async) r9 = socket$inet6(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000001e80)=ANY=[@ANYBLOB="1802006f9e000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000ffffff7f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000820000009500000000000000"], 0x0, 0x20004, 0x0, 0x0, 0x40f00, 0x61}, 0x94) setsockopt$inet6_IPV6_DSTOPTS(r9, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) bind$inet6(r9, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r9, &(0x7f0000001c00)=[{{&(0x7f0000001dc0)=@alg, 0x80, &(0x7f0000000640)=[{&(0x7f0000000140)=""/97, 0x61}, {&(0x7f0000000240)=""/121, 0x79}, {&(0x7f0000000340)=""/107, 0x6b}, {&(0x7f0000000980)=""/21, 0x15}, {&(0x7f00000003c0)=""/124, 0x7c}, {&(0x7f0000001cc0)=""/213, 0xd5}, {&(0x7f0000000580)=""/181, 0xb5}], 0x7, &(0x7f00000009c0)=""/4096, 0x1000}, 0xbac00000}, {{&(0x7f00000006c0), 0x80, &(0x7f00000002c0)=[{&(0x7f0000000740)=""/214, 0xd6}, {&(0x7f0000000840)=""/201, 0xc9}], 0x2}, 0x100}, {{&(0x7f00000019c0)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x80, &(0x7f0000000940)=[{&(0x7f0000001a40)=""/207, 0xcf}], 0x1, &(0x7f0000001b40)=""/173, 0xad}, 0x7a}], 0x3, 0x2b, 0x0) (async) recvmmsg(r9, &(0x7f0000001c00)=[{{&(0x7f0000001dc0)=@alg, 0x80, &(0x7f0000000640)=[{&(0x7f0000000140)=""/97, 0x61}, {&(0x7f0000000240)=""/121, 0x79}, {&(0x7f0000000340)=""/107, 0x6b}, {&(0x7f0000000980)=""/21, 0x15}, {&(0x7f00000003c0)=""/124, 0x7c}, {&(0x7f0000001cc0)=""/213, 0xd5}, {&(0x7f0000000580)=""/181, 0xb5}], 0x7, &(0x7f00000009c0)=""/4096, 0x1000}, 0xbac00000}, {{&(0x7f00000006c0), 0x80, &(0x7f00000002c0)=[{&(0x7f0000000740)=""/214, 0xd6}, {&(0x7f0000000840)=""/201, 0xc9}], 0x2}, 0x100}, {{&(0x7f00000019c0)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x80, &(0x7f0000000940)=[{&(0x7f0000001a40)=""/207, 0xcf}], 0x1, &(0x7f0000001b40)=""/173, 0xad}, 0x7a}], 0x3, 0x2b, 0x0) setsockopt$inet6_int(r9, 0x29, 0x4, &(0x7f0000000000)=0x401, 0x4) (async) setsockopt$inet6_int(r9, 0x29, 0x4, &(0x7f0000000000)=0x401, 0x4) sendto$inet6(r9, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) (async) sendto$inet6(r9, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000020c0)={'ipvlan0\x00'}) sendmsg$nl_route(r8, &(0x7f0000000840)={0x0, 0xfffffffffffffe61, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[], 0x80}, 0x1, 0x0, 0x0, 0x20044081}, 0x8000) 1.449774689s ago: executing program 4 (id=14950): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x78, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xf}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x48, 0x2, [@TCA_FLOW_EMATCHES={0x44, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x34, 0x1, 0x0, 0x0, {{0x8, 0x9, 0x40}, [@TCA_EM_IPT_NFPROTO={0x1, 0x4, 0x2}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xfc}, @TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_MATCH_NAME={0x5}]}}]}]}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x2008c014) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000300)={0x11, 0x63dcbf62d8600606, r6, 0x1, 0x8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}, 0x14) bind$packet(r1, &(0x7f0000000040)={0x11, 0x4, r6, 0x1, 0x3, 0x6, @remote}, 0x14) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETTXFILTER(r7, 0x400454d1, &(0x7f00000003c0)=ANY=[@ANYBLOB="44cdd73f398cfd8f532b002743ceb6347c27d3ef50915e1110f73e6be3af1452a20d70634fee089c3c9492f1a7cd610510cb8e166d177892812270ceddb5d314f1561bd4b97d12f1d30c28a64d2c180847f612"]) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x9c, r8, 0x300, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x21}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2b}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2c}]}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x45da}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x35}}}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x44052}, 0x40001) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[], 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f00000002c0)={0x8400001e}, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[], 0x5c}}, 0x20084884) sendmsg$IPSET_CMD_ADD(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000600000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040007}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r10) r12 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r10, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r11, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r12}]}, 0x24}, 0x1, 0x0, 0x0, 0x8001}, 0x40) close(0x3) 1.342416018s ago: executing program 0 (id=14951): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x4, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2002}, [@func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}]}, &(0x7f00000000c0)='GPL\x00', 0x9, 0x100d, &(0x7f00000038c0)=""/4109, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value=0x30d}, 0x94) 1.254545377s ago: executing program 0 (id=14952): r0 = socket$pptp(0x18, 0x1, 0x2) tee(0xffffffffffffffff, r0, 0x0, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba", 0x10}], 0x2}], 0x1, 0x40800) recvmsg(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000300)=""/32, 0x20}], 0x1}, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="140100002500010300000000c00e0000010100800c0001"], 0x114}], 0x1}, 0x40000) 870.900757ms ago: executing program 1 (id=14953): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x10, 0x10, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}, [@snprintf={{0x7, 0x0, 0xb, 0x8, 0x0, 0x208, 0x2}, {}, {0x6, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {0x5}, {0x7, 0x0, 0x0, 0x0}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x5b}}]}, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 750.350772ms ago: executing program 2 (id=14954): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040), 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r0}, @ldst={0x1, 0x2, 0x4, 0x0, 0x0, 0x1}]}, &(0x7f0000000d40)='syzkaller\x00'}, 0x94) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'dummy0\x00'}) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x80010, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) socket$kcm(0x10, 0x2, 0x10) mmap$xdp(&(0x7f0000344000/0x1000)=nil, 0x1000, 0x1000000, 0x13, r1, 0x100000000) socket$kcm(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r5, &(0x7f0000019440)=[{&(0x7f0000000340)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed090f0000600000f3a1bc5603ca00000f7f89e3ff296aa1f6475322f000200000004a2471083ec6991778581acb6c0101ff00", 0x48}], 0x1) 749.905455ms ago: executing program 1 (id=14955): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000010c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x9e9}, @NFTA_SET_DATA_TYPE={0x8}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x8, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x3, 0x84}}}, 0xe0}}, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) setsockopt$sock_timeval(r1, 0x1, 0x4b, &(0x7f0000000180), 0x10) close(0x3) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, 0x0, 0x48040) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, &(0x7f0000004340)={0x0, 0x0, 0x0}, 0x800) ioctl$int_in(r4, 0x5452, &(0x7f0000000280)=0xffffffffffffffff) sendto$inet6(r4, &(0x7f0000000300)="8b", 0x1, 0x4, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffff8}, 0x1c) ppoll(&(0x7f00000002c0)=[{r4, 0x2088}], 0x1, 0x0, 0x0, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{r6, 0xc74c021a65794a64}, {r6, 0xa781617f70b9cab0}], 0x2, 0x0, 0x0, 0x0) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r5) sendmsg$DEVLINK_CMD_SB_POOL_GET(r5, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="00ffdb5f250f000000601fb4b92b13f1680f8cc8a9cb59b80bbe4f12bf34623bb6e3bc20c34eb726925392a59bf5722943cdb0bac8c83f9e8206b6e9f3a73cba887535899cb9f83a73554f44083071d107efb31749446382aab43824bdf110a54f93817179bd512043f63df2e99bc36bc0a163986892563c3b6b1e513d474df8843cb03b8112edd15b104807e81bd1285d38cd0727d6d3e2b079712d82116d0e1906ad806bb80cf9ca3aedca320e182237d9e380edcd232d3b7b7c480bbb5e540c7c6bfb5bd366c9e7ccbaa05320b2ea5fc21ae2fe5ed4be32afd49efc39c5a814fd1dd8"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r6, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f6003300", 0x10) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r8, &(0x7f00000006c0)=[{{&(0x7f0000000000)={0xa, 0x40, 0x0, @private0={0xfc, 0x0, '\x00', 0xfe}}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000200)="18", 0x1}], 0x1}}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r8, 0x84, 0x6, &(0x7f00000009c0)={0x0, @in6={{0xa, 0x4e23, 0xab9, @local, 0x8}}}, &(0x7f0000000100)=0x84) listen(r6, 0x0) shutdown(r6, 0x0) setsockopt$sock_int(r0, 0x1, 0x20, 0x0, 0x0) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000000e1401012abd7000fec9df25080001"], 0x18}, 0x1, 0x0, 0x0, 0x4000040}, 0x40080) recvmsg(r9, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x2000) 718.755309ms ago: executing program 0 (id=14956): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x884}, 0x20000080) socket(0x10, 0x803, 0x0) r0 = socket$netlink(0x10, 0x3, 0x12) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x24000840) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x800) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r3, 0xfffffffc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r8, 0x8946, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, 0x0, 0x0) sendmsg$NFT_BATCH(r9, 0x0, 0x40) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="070000000000000000000200000014000180060001000700000008000300ac1414aa84768bdd498b08c9420db57a2a6fb9e4dcd6c0137a70522450286d4a62ed69ff51ba1cec2a084ab38b1e525fddde6a3f57edc6d2"], 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 383.217962ms ago: executing program 4 (id=14957): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000f3ffffff0000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 177.553597ms ago: executing program 4 (id=14958): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8}}]}}]}, 0x48}}, 0x20040084) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0xfffffffe, 0x1, 0xd, 0x9, 0x800, 0x1, 0x7, 0x1, 0x8001, 0xffffffff, 0x14, 0x13, 0x10, 0x10, 0x10000ff, 0x126}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x200400dc}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r8) r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r10, 0x84, 0x16, &(0x7f0000000140)={0x3, [0x400, 0x7, 0x2]}, 0xa) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 151.194116ms ago: executing program 2 (id=14959): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="270000000000000071116b00000000008510000002000000850002010500000095010000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) 0s ago: executing program 2 (id=14960): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x46, &(0x7f0000000040)={0x0, 0x0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=@ipv4_getrule={0x1c, 0x22, 0x4, 0x70bd2a, 0x25dfdbfb, {0x2, 0x20, 0x80, 0x5, 0x6, 0x0, 0x0, 0x6, 0x10008}, ["", "", "", "", ""]}, 0x1c}}, 0x0) socket(0x1d, 0x2, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000003c0)={0x4, &(0x7f0000000200)=[{0x1, 0x40, 0x5, 0x4000}, {0xffc0, 0x8, 0x3, 0x401}, {0x2, 0x9, 0x5, 0x5}, {0x0, 0x1, 0x2, 0x33b}]}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502"], 0x40}}, 0x0) sendmsg$key(r4, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300090a00000000000000000000000300060000000e0002000000e0001009000000000000000002000100000000000000000200000000030005000000000002000000e0000001"], 0x50}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000280)={0x48, r6, 0x1, 0x70bd2a, 0x0, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xfb2e77a8993c191b}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x24004050}, 0x20000040) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000c80), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r5, &(0x7f0000000dc0)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x14, r8, 0x1, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000886}, 0x54) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000340)={'gre0\x00', &(0x7f0000000300)=@ethtool_pauseparam={0x13, 0xa, 0x0, 0x6}}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d00000080", 0x5}], 0x2, &(0x7f0000000100)=ANY=[], 0xd}, 0x20000810) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r12, @ANYBLOB="24005a8020000180140003000000000000001400010000000000000004000200040001"], 0x40}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffde}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x0) kernel console output (not intermixed with test programs): c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1325.222409][T18285] RSP: 002b:00007f9602e12028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1325.222426][T18285] RAX: ffffffffffffffda RBX: 00007f9602215fa0 RCX: 00007f9601f9c629 [ 1325.222438][T18285] RDX: 000000000400008a RSI: 0000200000000180 RDI: 0000000000000003 [ 1325.222449][T18285] RBP: 00007f9602e12090 R08: 0000000000000000 R09: 0000000000000000 [ 1325.222460][T18285] R10: 000000000000ff80 R11: 0000000000000246 R12: 0000000000000002 [ 1325.222470][T18285] R13: 00007f9602216038 R14: 00007f9602215fa0 R15: 00007fff25fe5fc8 [ 1325.222499][T18285] [ 1326.769650][T18304] netlink: 20 bytes leftover after parsing attributes in process `syz.2.13905'. [ 1326.820520][T18304] vlan2: entered promiscuous mode [ 1326.836550][T18305] netlink: 16 bytes leftover after parsing attributes in process `syz.4.13906'. [ 1326.874429][T18305] netlink: 16 bytes leftover after parsing attributes in process `syz.4.13906'. [ 1327.146735][T18319] netlink: 'syz.3.13907': attribute type 10 has an invalid length. [ 1327.247957][T18319] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 1327.258515][T18319] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 1327.286456][T18319] team0: Failed to send options change via netlink (err -105) [ 1327.333637][T18319] team0: Port device netdevsim0 added [ 1327.659293][T18339] veth1_vlan: left allmulticast mode [ 1327.972248][T18310] team0: Failed to send options change via netlink (err -105) [ 1328.012367][T18310] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 1328.058913][T18310] team0: Port device netdevsim0 removed [ 1328.325963][T18358] syzkaller1: entered promiscuous mode [ 1328.348307][T18358] syzkaller1: entered allmulticast mode [ 1328.489043][T18367] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13919'. [ 1328.643602][T18367] vlan2: entered promiscuous mode [ 1328.799802][T18369] netlink: 'syz.3.13920': attribute type 10 has an invalid length. [ 1328.833809][T18369] bond0: (slave dummy0): Releasing backup interface [ 1328.851786][T18373] netlink: 'syz.3.13920': attribute type 10 has an invalid length. [ 1328.887084][T18369] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1328.928175][T18369] team0: Failed to send options change via netlink (err -105) [ 1328.967322][T18369] team0: Port device dummy0 added [ 1329.007283][T18373] team0: Failed to send options change via netlink (err -105) [ 1329.033479][T18373] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1329.045083][T18373] team0: Port device dummy0 removed [ 1329.085085][T18373] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1329.301733][T18387] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13925'. [ 1329.336723][T18387] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13925'. [ 1329.704198][T18405] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input18 [ 1329.758847][T31838] lec:lec_start_xmit: lec0:No lecd attached [ 1329.866093][T18415] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13932'. [ 1330.641840][T18439] netlink: 'syz.2.13942': attribute type 5 has an invalid length. [ 1330.943493][T18452] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13944'. [ 1330.978203][T18452] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13944'. [ 1331.277229][T18463] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13948'. [ 1331.294490][T18462] ip6t_rpfilter: unknown options [ 1331.320259][T18463] vlan3: entered promiscuous mode [ 1331.398123][T18468] openvswitch: netlink: Missing key (keys=40, expected=80) [ 1331.767985][T18485] FAULT_INJECTION: forcing a failure. [ 1331.767985][T18485] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1331.784713][T18485] CPU: 0 UID: 0 PID: 18485 Comm: syz.4.13957 Not tainted syzkaller #0 PREEMPT(full) [ 1331.784737][T18485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1331.784748][T18485] Call Trace: [ 1331.784756][T18485] [ 1331.784764][T18485] dump_stack_lvl+0xe8/0x150 [ 1331.784792][T18485] should_fail_ex+0x412/0x560 [ 1331.784827][T18485] _copy_from_user+0x2d/0xb0 [ 1331.784850][T18485] generic_map_update_batch+0x648/0x990 [ 1331.784878][T18485] ? __pfx_generic_map_update_batch+0x10/0x10 [ 1331.784898][T18485] ? __fget_files+0x2a/0x420 [ 1331.784926][T18485] ? __pfx_generic_map_update_batch+0x10/0x10 [ 1331.784944][T18485] bpf_map_do_batch+0x39b/0x630 [ 1331.784966][T18485] __sys_bpf+0x7c1/0x950 [ 1331.784990][T18485] ? __pfx___sys_bpf+0x10/0x10 [ 1331.785024][T18485] ? ksys_write+0x242/0x270 [ 1331.785042][T18485] ? __pfx_ksys_write+0x10/0x10 [ 1331.785063][T18485] __x64_sys_bpf+0x7c/0x90 [ 1331.785084][T18485] do_syscall_64+0x14d/0xf80 [ 1331.785108][T18485] ? trace_irq_disable+0x3b/0x150 [ 1331.785129][T18485] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1331.785143][T18485] ? clear_bhb_loop+0x40/0x90 [ 1331.785163][T18485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1331.785178][T18485] RIP: 0033:0x7fbae599c629 [ 1331.785193][T18485] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1331.785208][T18485] RSP: 002b:00007fbae68b3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1331.785227][T18485] RAX: ffffffffffffffda RBX: 00007fbae5c15fa0 RCX: 00007fbae599c629 [ 1331.785238][T18485] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a [ 1331.785248][T18485] RBP: 00007fbae68b3090 R08: 0000000000000000 R09: 0000000000000000 [ 1331.785257][T18485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1331.785266][T18485] R13: 00007fbae5c16038 R14: 00007fbae5c15fa0 R15: 00007ffd87594df8 [ 1331.785292][T18485] [ 1332.535274][T18509] x_tables: duplicate underflow at hook 3 [ 1332.722876][T18517] __nla_validate_parse: 2 callbacks suppressed [ 1332.722894][T18517] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13968'. [ 1332.774642][T18524] syzkaller0: entered promiscuous mode [ 1332.780154][T18524] syzkaller0: entered allmulticast mode [ 1332.853178][T15655] Bluetooth: hci2: command 0x0406 tx timeout [ 1333.591176][T18563] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13981'. [ 1334.066937][T18580] FAULT_INJECTION: forcing a failure. [ 1334.066937][T18580] name failslab, interval 1, probability 0, space 0, times 0 [ 1334.142940][T18580] CPU: 0 UID: 0 PID: 18580 Comm: syz.0.13986 Not tainted syzkaller #0 PREEMPT(full) [ 1334.142965][T18580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1334.142977][T18580] Call Trace: [ 1334.142985][T18580] [ 1334.142993][T18580] dump_stack_lvl+0xe8/0x150 [ 1334.143022][T18580] should_fail_ex+0x412/0x560 [ 1334.143048][T18580] should_failslab+0xa8/0x100 [ 1334.143072][T18580] __kmalloc_cache_noprof+0x88/0x660 [ 1334.143093][T18580] ? sctp_add_bind_addr+0x8c/0x370 [ 1334.143112][T18580] ? __pfx_sctp_get_port_local+0x10/0x10 [ 1334.143141][T18580] sctp_add_bind_addr+0x8c/0x370 [ 1334.143160][T18580] ? sctp_auto_asconf_init+0x15c/0x1e0 [ 1334.143192][T18580] sctp_do_bind+0x5b2/0x9d0 [ 1334.143228][T18580] sctp_connect_new_asoc+0x270/0x6b0 [ 1334.143255][T18580] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1334.143285][T18580] ? __local_bh_enable_ip+0xd0/0x130 [ 1334.143306][T18580] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1334.143326][T18580] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1334.143356][T18580] sctp_sendmsg+0x1528/0x2c10 [ 1334.143395][T18580] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1334.143417][T18580] ? aa_sk_perm+0x15a/0x960 [ 1334.143438][T18580] ? aa_sk_perm+0x82d/0x960 [ 1334.143464][T18580] ? __pfx_aa_sk_perm+0x10/0x10 [ 1334.143486][T18580] ? sock_rps_record_flow+0x19/0x400 [ 1334.143514][T18580] ? inet_sendmsg+0x2f4/0x370 [ 1334.143542][T18580] ____sys_sendmsg+0x894/0xad0 [ 1334.143574][T18580] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1334.143607][T18580] ? import_iovec+0x73/0xa0 [ 1334.143634][T18580] ___sys_sendmsg+0x2a5/0x360 [ 1334.143664][T18580] ? __pfx____sys_sendmsg+0x10/0x10 [ 1334.143693][T18580] ? kstrtouint+0x6e/0xe0 [ 1334.143738][T18580] ? __fget_files+0x2a/0x420 [ 1334.143761][T18580] ? __fget_files+0x3a0/0x420 [ 1334.143794][T18580] __sys_sendmmsg+0x27c/0x4e0 [ 1334.143830][T18580] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1334.143852][T18580] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1334.143902][T18580] ? ksys_write+0x242/0x270 [ 1334.143923][T18580] ? __pfx_ksys_write+0x10/0x10 [ 1334.143948][T18580] __x64_sys_sendmmsg+0xa0/0xc0 [ 1334.143974][T18580] do_syscall_64+0x14d/0xf80 [ 1334.143998][T18580] ? trace_irq_disable+0x3b/0x150 [ 1334.144022][T18580] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1334.144040][T18580] ? clear_bhb_loop+0x40/0x90 [ 1334.144062][T18580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1334.144078][T18580] RIP: 0033:0x7f4c1d99c629 [ 1334.144095][T18580] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1334.144110][T18580] RSP: 002b:00007f4c1e794028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1334.144129][T18580] RAX: ffffffffffffffda RBX: 00007f4c1dc15fa0 RCX: 00007f4c1d99c629 [ 1334.144143][T18580] RDX: 0000000000000001 RSI: 0000200000000440 RDI: 0000000000000003 [ 1334.144154][T18580] RBP: 00007f4c1e794090 R08: 0000000000000000 R09: 0000000000000000 [ 1334.144165][T18580] R10: 00000000200400c0 R11: 0000000000000246 R12: 0000000000000001 [ 1334.144175][T18580] R13: 00007f4c1dc16038 R14: 00007f4c1dc15fa0 R15: 00007ffe5650f5d8 [ 1334.144205][T18580] [ 1334.496366][T18573] tipc: Enabling of bearer rejected, failed to enable media [ 1334.537944][T18582] netlink: 'syz.1.13985': attribute type 4 has an invalid length. [ 1334.547892][T18582] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.13985'. [ 1334.772740][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1334.774934][T18591] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13987'. [ 1334.780772][ C0] lec:lec_tx_timeout: lec0 [ 1334.892112][T18595] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13988'. [ 1334.914302][T18595] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13988'. [ 1334.987162][T18591] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 1335.018707][T15768] vlan2: left promiscuous mode [ 1335.043498][T15768] bridge0: port 3(vlan2) entered disabled state [ 1335.087833][T18599] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13990'. [ 1335.144567][T18600] netlink: 'syz.3.13989': attribute type 31 has an invalid length. [ 1335.160593][T15768] bridge_slave_1: left allmulticast mode [ 1335.179139][T15768] bridge_slave_1: left promiscuous mode [ 1335.195886][T15768] bridge0: port 2(bridge_slave_1) entered disabled state [ 1335.275654][T15768] bridge_slave_0: left promiscuous mode [ 1335.281660][T15768] bridge0: port 1(bridge_slave_0) entered disabled state [ 1335.858487][T18627] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 3 [ 1336.227052][T15768] bond3 (unregistering): (slave geneve2): Releasing active interface [ 1336.689566][T15768] bond7 (unregistering): (slave bridge8): Releasing backup interface [ 1336.706900][T15768] bridge8 (unregistering): left promiscuous mode [ 1336.822571][T15768] bond6 (unregistering): (slave macvlan4): Removing an active aggregator [ 1336.835136][T15768] bond6 (unregistering): (slave macvlan4): Releasing backup interface [ 1336.869353][T15768] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1336.889185][T15768] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1336.908641][T15768] bond0 (unregistering): Released all slaves [ 1336.944374][T15768] bond1 (unregistering): Released all slaves [ 1336.987360][T15768] bond2 (unregistering): Released all slaves [ 1337.026579][T15768] bond3 (unregistering): Released all slaves [ 1337.069597][T15768] bond4 (unregistering): Released all slaves [ 1337.112801][T15768] bond5 (unregistering): left allmulticast mode [ 1337.124185][T15768] macvlan3 (unregistering): left allmulticast mode [ 1337.144479][T15768] team0: Port device macvlan3 removed [ 1337.160449][T15768] bond5 (unregistering): Released all slaves [ 1337.178366][T15768] bond6 (unregistering): Released all slaves [ 1337.196828][T15768] bond7 (unregistering): Released all slaves [ 1337.226723][T18599] macvtap2: entered promiscuous mode [ 1337.232790][T18599] macvtap2: entered allmulticast mode [ 1337.238182][T18599] veth1_vlan: entered allmulticast mode [ 1337.424115][T18650] netlink: 'syz.3.14003': attribute type 21 has an invalid length. [ 1337.432054][T18650] netlink: 128 bytes leftover after parsing attributes in process `syz.3.14003'. [ 1337.603940][T18650] netlink: 3 bytes leftover after parsing attributes in process `syz.3.14003'. [ 1337.617265][T15768] : left promiscuous mode [ 1337.838250][T15768] tipc: Left network mode [ 1337.857497][T18671] netlink: 'syz.3.14009': attribute type 4 has an invalid length. [ 1337.876343][T18671] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.14009'. [ 1337.949816][T18675] netlink: 128 bytes leftover after parsing attributes in process `syz.2.14011'. [ 1338.819162][T18730] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14025'. [ 1339.256837][T18750] netlink: 28 bytes leftover after parsing attributes in process `syz.4.14034'. [ 1339.280155][T18752] vlan2: entered allmulticast mode [ 1339.395865][T18762] netlink: 'syz.1.14036': attribute type 10 has an invalid length. [ 1339.451889][T18765] netlink: 'syz.1.14036': attribute type 10 has an invalid length. [ 1339.501893][T18762] bond0: (slave dummy0): Releasing backup interface [ 1339.520958][T18762] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1339.533511][T18769] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14038'. [ 1339.543997][T18762] team0: Failed to send options change via netlink (err -105) [ 1339.551803][T18762] team0: Port device dummy0 added [ 1339.591069][T18755] syzkaller0: entered promiscuous mode [ 1339.596785][T18755] syzkaller0: entered allmulticast mode [ 1339.611574][T18765] team0: Failed to send options change via netlink (err -105) [ 1339.633285][T18765] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1339.644772][T18765] team0: Port device dummy0 removed [ 1339.656276][T18765] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1339.665489][T18757] lo speed is unknown, defaulting to 1000 [ 1339.702653][T18769] macvtap1: entered promiscuous mode [ 1339.713049][T18769] macvtap1: entered allmulticast mode [ 1339.718614][T18769] veth1_vlan: entered allmulticast mode [ 1339.860226][T18775] netlink: 'syz.3.14037': attribute type 1 has an invalid length. [ 1339.999393][T18783] netlink: 'syz.1.14042': attribute type 1 has an invalid length. [ 1340.008963][T18783] netlink: 'syz.1.14042': attribute type 1 has an invalid length. [ 1342.149634][T18767] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1342.164461][T18767] syzkaller1: linktype set to 260 [ 1342.209885][T18772] ip6tnl3: entered promiscuous mode [ 1342.231372][T18788] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14043'. [ 1342.322574][T18757] lo speed is unknown, defaulting to 1000 [ 1342.569441][T18797] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14047'. [ 1342.797499][T18808] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14052'. [ 1342.989427][T18822] netlink: 'syz.0.14054': attribute type 13 has an invalid length. [ 1343.007896][T18818] netlink: 84 bytes leftover after parsing attributes in process `syz.1.14055'. [ 1343.039558][T18818] netlink: 84 bytes leftover after parsing attributes in process `syz.1.14055'. [ 1343.062661][T18822] netlink: 'syz.0.14054': attribute type 17 has an invalid length. [ 1343.075198][T18818] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1343.114128][T18821] tipc: Enabled bearer , priority 0 [ 1343.154387][T18811] syzkaller0: entered promiscuous mode [ 1343.159969][T18811] syzkaller0: entered allmulticast mode [ 1343.349377][T18822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1343.385618][T18822] 8021q: adding VLAN 0 to HW filter on device team0 [ 1343.431142][T18822] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1343.489707][T18811] tipc: Resetting bearer [ 1343.522687][T18810] tipc: Resetting bearer [ 1343.565825][T18810] tipc: Disabling bearer [ 1343.788158][T18826] veth1_vlan: left allmulticast mode [ 1343.851836][T18826] net veth1_virt_wifi virt_wifi0: left promiscuous mode [ 1343.897016][T18830] macsec0: entered promiscuous mode [ 1343.903072][T18832] macsec0: left promiscuous mode [ 1343.940606][T18831] veth0_to_bridge: entered promiscuous mode [ 1343.963751][T18829] veth0_to_bridge: left promiscuous mode [ 1344.027776][T15768] hsr_slave_0: left promiscuous mode [ 1344.036188][T15768] hsr_slave_1: left promiscuous mode [ 1344.048972][T15768] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1344.059907][T15768] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1344.075912][T15768] team_slave_0: left promiscuous mode [ 1344.081672][T15768] team_slave_1: left promiscuous mode [ 1344.088668][T15768] veth1_vlan: left allmulticast mode [ 1344.094698][T15768] veth1_macvtap: left promiscuous mode [ 1344.100832][T15768] veth0_macvtap: left promiscuous mode [ 1344.106741][T15768] veth1_vlan: left promiscuous mode [ 1344.112265][T15768] veth0_vlan: left promiscuous mode [ 1344.246283][T18842] netlink: 4188 bytes leftover after parsing attributes in process `syz.1.14062'. [ 1344.491942][T18846] x_tables: duplicate underflow at hook 3 [ 1344.565729][T15768] team_slave_1 (unregistering): left allmulticast mode [ 1344.588393][T15768] team0 (unregistering): Port device team_slave_1 removed [ 1344.606152][T15768] team_slave_0 (unregistering): left allmulticast mode [ 1344.613981][T15768] team0 (unregistering): Port device team_slave_0 removed [ 1344.726211][T15768] dummy0 (unregistering): left allmulticast mode [ 1344.733831][T15768] team0 (unregistering): Port device dummy0 removed [ 1344.769246][T15768] lo (unregistering): left allmulticast mode [ 1344.778935][ T1147] smc: removing ib device syz0 [ 1344.793708][ T8078] lo speed is unknown, defaulting to 1000 [ 1344.822785][ T8078] syz0: Port: 1 Link DOWN [ 1345.144234][T18855] netlink: 20 bytes leftover after parsing attributes in process `syz.0.14066'. [ 1345.196481][T18857] netlink: 'syz.4.14068': attribute type 3 has an invalid length. [ 1345.271258][ T9] hid-generic 0005:0006:5508.0001: hidraw0: BLUETOOTH HID vc3.36 Device [syz0] on aa:aa:aa:aa:aa:aa [ 1345.699475][T18879] sock: sock_timestamping_bind_phc: sock not bind to device [ 1345.856407][T18883] netlink: 28 bytes leftover after parsing attributes in process `syz.4.14079'. [ 1345.891650][T18883] netlink: 28 bytes leftover after parsing attributes in process `syz.4.14079'. [ 1345.993786][T18890] netlink: 'syz.1.14081': attribute type 10 has an invalid length. [ 1346.025385][T18890] veth1_macvtap: left promiscuous mode [ 1346.032149][T18890] team0: Device veth1_macvtap failed to register rx_handler [ 1346.081618][T18888] netlink: 'syz.1.14081': attribute type 2 has an invalid length. [ 1346.363130][T18903] netlink: 84 bytes leftover after parsing attributes in process `syz.3.14087'. [ 1346.420433][T18903] netlink: 84 bytes leftover after parsing attributes in process `syz.3.14087'. [ 1346.457516][T18903] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1346.498417][T18907] netlink: 24 bytes leftover after parsing attributes in process `syz.4.14088'. [ 1346.517620][T18905] netlink: 36 bytes leftover after parsing attributes in process `syz.0.14083'. [ 1346.638965][T18918] openvswitch: netlink: IPv4 tun info is not correct [ 1348.280737][T15768] IPVS: stop unused estimator thread 0... [ 1356.385738][ T35] vlan2: left allmulticast mode [ 1356.390640][ T35] vlan2: left promiscuous mode [ 1356.398758][ T35] bridge0: port 2(vlan2) entered disabled state [ 1356.407524][ T35] bridge_slave_0: left promiscuous mode [ 1356.416131][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 1356.544014][ T35] erspan0 (unregistering): left promiscuous mode [ 1356.615515][ T35] macvlan3 (unregistering): left allmulticast mode [ 1356.626346][ T35] team0: Port device macvlan3 removed [ 1356.949074][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1356.959487][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1356.969681][ T35] bond0 (unregistering): Released all slaves [ 1356.981691][ T35] bond1 (unregistering): Released all slaves [ 1357.012087][ T35] macvlan4 (unregistering): left allmulticast mode [ 1357.022328][ T35] team0: Port device macvlan4 removed [ 1357.033766][ T35] bond2 (unregistering): Released all slaves [ 1357.059166][ T35] bond3 (unregistering): Released all slaves [ 1357.078951][ T35] bond4 (unregistering): Released all slaves [ 1357.217289][ T35] tipc: Left network mode [ 1357.644527][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1357.652314][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1357.932055][ T35] team_slave_1 (unregistering): left allmulticast mode [ 1357.939959][ T35] team0 (unregistering): Port device team_slave_1 removed [ 1357.963787][ T35] team_slave_0 (unregistering): left allmulticast mode [ 1357.971551][ T35] team0 (unregistering): Port device team_slave_0 removed [ 1359.815707][ T8078] page_pool_release_retry() stalled pool shutdown: id 62, 1 inflight 1210 sec [ 1361.496190][ T1302] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1361.507761][ T1302] lec:lec_start_xmit: lec0:No lecd attached [ 1366.772464][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5260 ms [ 1366.780502][ C0] lec:lec_tx_timeout: lec0 [ 1393.130844][T31838] lec:lec_start_xmit: lec0:No lecd attached [ 1398.772460][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5640 ms [ 1398.780573][ C0] lec:lec_tx_timeout: lec0 [ 1402.724745][ T1147] erspan0 (unregistering): left promiscuous mode [ 1402.859147][ T1147] bond11 (unregistering): (slave geneve3): Releasing active interface [ 1402.999592][ T1147] bond5 (unregistering): (slave bridge3): Releasing backup interface [ 1403.064941][ T1147] bond6 (unregistering): (slave bridge4): Releasing active interface [ 1403.143838][ T1147] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1403.153038][ T1147] bond_slave_0: left promiscuous mode [ 1403.160149][ T1147] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1403.169414][ T1147] bond_slave_1: left promiscuous mode [ 1403.179848][ T1147] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 1403.189539][ T1147] bond0 (unregistering): Released all slaves [ 1403.201558][ T1147] bond1 (unregistering): Released all slaves [ 1403.226661][ T1147] bond2 (unregistering): Released all slaves [ 1403.248336][ T1147] bond3 (unregistering): Released all slaves [ 1403.266929][ T1147] bond4 (unregistering): (slave wireguard0): Releasing backup interface [ 1403.278433][ T1147] bond4 (unregistering): (slave wireguard1): Releasing backup interface [ 1403.294614][ T1147] bond4 (unregistering): Released all slaves [ 1403.311786][ T1147] bond5 (unregistering): Released all slaves [ 1403.330230][ T1147] bond6 (unregistering): Released all slaves [ 1403.366700][ T1147] bond7 (unregistering): Released all slaves [ 1403.385147][ T1147] bond8 (unregistering): Released all slaves [ 1403.409099][ T1147] bond9 (unregistering): Released all slaves [ 1403.430358][ T1147] bond10 (unregistering): Released all slaves [ 1403.451004][ T1147] bond11 (unregistering): Released all slaves [ 1403.726899][ T1147] tipc: Left network mode [ 1404.584219][T18990] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14105'. [ 1404.733987][T18999] FAULT_INJECTION: forcing a failure. [ 1404.733987][T18999] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1404.792636][T18999] CPU: 1 UID: 0 PID: 18999 Comm: syz.0.14107 Not tainted syzkaller #0 PREEMPT(full) [ 1404.792663][T18999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1404.792674][T18999] Call Trace: [ 1404.792682][T18999] [ 1404.792690][T18999] dump_stack_lvl+0xe8/0x150 [ 1404.792719][T18999] should_fail_ex+0x412/0x560 [ 1404.792744][T18999] _copy_from_user+0x2d/0xb0 [ 1404.792769][T18999] generic_map_update_batch+0x69a/0x990 [ 1404.792801][T18999] ? __pfx_generic_map_update_batch+0x10/0x10 [ 1404.792823][T18999] ? __fget_files+0x2a/0x420 [ 1404.792853][T18999] ? __pfx_generic_map_update_batch+0x10/0x10 [ 1404.792873][T18999] bpf_map_do_batch+0x39b/0x630 [ 1404.792897][T18999] __sys_bpf+0x7c1/0x950 [ 1404.792924][T18999] ? __pfx___sys_bpf+0x10/0x10 [ 1404.792963][T18999] ? ksys_write+0x242/0x270 [ 1404.792982][T18999] ? __pfx_ksys_write+0x10/0x10 [ 1404.793007][T18999] __x64_sys_bpf+0x7c/0x90 [ 1404.793031][T18999] do_syscall_64+0x14d/0xf80 [ 1404.793056][T18999] ? trace_irq_disable+0x3b/0x150 [ 1404.793079][T18999] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1404.793097][T18999] ? clear_bhb_loop+0x40/0x90 [ 1404.793119][T18999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1404.793137][T18999] RIP: 0033:0x7f4c1d99c629 [ 1404.793154][T18999] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1404.793170][T18999] RSP: 002b:00007f4c1e794028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1404.793190][T18999] RAX: ffffffffffffffda RBX: 00007f4c1dc15fa0 RCX: 00007f4c1d99c629 [ 1404.793203][T18999] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a [ 1404.793215][T18999] RBP: 00007f4c1e794090 R08: 0000000000000000 R09: 0000000000000000 [ 1404.793227][T18999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1404.793244][T18999] R13: 00007f4c1dc16038 R14: 00007f4c1dc15fa0 R15: 00007ffe5650f5d8 [ 1404.793271][T18999] [ 1405.012699][T19003] netlink: 4188 bytes leftover after parsing attributes in process `syz.3.14108'. [ 1405.166159][T19008] netlink: 'syz.1.14109': attribute type 1 has an invalid length. [ 1405.269092][T19013] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14109'. [ 1405.494550][T19007] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1405.528502][T19032] netlink: 'syz.3.14114': attribute type 1 has an invalid length. [ 1405.550368][T19013] bond5 (unregistering): Released all slaves [ 1405.738454][T19044] netlink: 28 bytes leftover after parsing attributes in process `syz.3.14114'. [ 1405.853023][T19020] syzkaller0: entered promiscuous mode [ 1405.859285][T19020] syzkaller0: entered allmulticast mode [ 1405.943861][T19052] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14114'. [ 1406.080408][T19064] netlink: 28 bytes leftover after parsing attributes in process `syz.2.14121'. [ 1406.103910][T19064] netlink: 28 bytes leftover after parsing attributes in process `syz.2.14121'. [ 1406.107834][T19037] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1406.163429][T19037] bond7: (slave bond8): making interface the new active one [ 1406.180480][T19037] bond7: (slave bond8): Enslaving as an active interface with an up link [ 1406.291480][T19041] bond7: (slave gretap1): Enslaving as a backup interface with an up link [ 1406.341814][T19044] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1406.361632][T19032] vlan4: entered promiscuous mode [ 1406.390338][T19032] bond7: entered promiscuous mode [ 1406.396256][T19032] bond8: entered promiscuous mode [ 1406.727734][T19080] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1406.758318][T19053] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1406.870089][T19088] openvswitch: netlink: IPv4 tun info is not correct [ 1406.993465][T19093] bridge3: entered promiscuous mode [ 1407.014138][T19093] bridge3: entered allmulticast mode [ 1407.047727][T19093] netlink: 'syz.0.14127': attribute type 2 has an invalid length. [ 1407.084778][T19093] netlink: 'syz.0.14127': attribute type 1 has an invalid length. [ 1407.119461][T19093] netlink: 224 bytes leftover after parsing attributes in process `syz.0.14127'. [ 1407.150773][T19096] netlink: 16 bytes leftover after parsing attributes in process `syz.3.14128'. [ 1407.213484][T19097] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14127'. [ 1407.255476][T19097] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1407.321037][T19093] netlink: 'syz.0.14127': attribute type 11 has an invalid length. [ 1407.376033][T19093] netlink: 'syz.0.14127': attribute type 23 has an invalid length. [ 1407.455994][T19115] RDS: rds_bind could not find a transport for fe88::4002, load rds_tcp or rds_rdma? [ 1407.765139][ T1147] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1407.788056][ T1147] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1408.220829][T19139] netlink: 'syz.0.14131': attribute type 13 has an invalid length. [ 1409.088794][T19120] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1409.113970][T19120] bond5: (slave macvlan3): Enslaving as an active interface with an up link [ 1409.145097][T19133] syzkaller0: entered promiscuous mode [ 1409.157379][T19133] syzkaller0: entered allmulticast mode [ 1409.335363][T19152] tipc: Enabled bearer , priority 0 [ 1409.396446][T19122] tipc: Resetting bearer [ 1409.476659][T19122] tipc: Disabling bearer [ 1409.500512][T19183] netlink: 'syz.1.14141': attribute type 4 has an invalid length. [ 1409.683596][T19193] __nla_validate_parse: 4 callbacks suppressed [ 1409.683618][T19193] netlink: 68 bytes leftover after parsing attributes in process `syz.3.14144'. [ 1409.781293][T19195] netlink: 16 bytes leftover after parsing attributes in process `syz.2.14145'. [ 1409.849292][T19195] netlink: 64 bytes leftover after parsing attributes in process `syz.2.14145'. [ 1410.006186][T19209] netlink: 84 bytes leftover after parsing attributes in process `syz.1.14148'. [ 1410.065580][T19209] netlink: 84 bytes leftover after parsing attributes in process `syz.1.14148'. [ 1410.157075][T19209] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1410.413043][T19219] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14146'. [ 1410.630303][T19217] vlan0: left promiscuous mode [ 1410.663714][T19217] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 1410.695997][T19217] ipvlan2: left promiscuous mode [ 1410.755582][T19217] hsr1: left promiscuous mode [ 1410.816455][T19217] bond5: left promiscuous mode [ 1410.873597][T19217] ip6erspan0: left allmulticast mode [ 1410.946476][T19217] veth1_vlan: left allmulticast mode [ 1410.965583][T19217] macvtap1: left promiscuous mode [ 1410.973623][T19217] macvtap1: left allmulticast mode [ 1410.993820][T19217] bridge3: left promiscuous mode [ 1411.008904][T19217] bridge3: left allmulticast mode [ 1411.064175][T19233] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1411.107665][T19233] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1411.125790][T19233] batman_adv: batadv0: Removing interface: macvtap1 [ 1411.201477][T19245] hid-generic 0005:0006:5508.0002: hidraw0: BLUETOOTH HID vc3.36 Device [syz0] on aa:aa:aa:aa:aa:aa [ 1411.403776][T19253] syzkaller0: entered promiscuous mode [ 1411.415129][T19253] syzkaller0: entered allmulticast mode [ 1411.429444][T19226] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1411.482812][T19270] veth1_to_bond: entered allmulticast mode [ 1411.494738][T19269] veth1_to_bond: left allmulticast mode [ 1411.514140][T19280] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14158'. [ 1411.540953][T19281] openvswitch: netlink: IPv4 tun info is not correct [ 1411.791300][T19287] netlink: 'syz.4.14161': attribute type 3 has an invalid length. [ 1411.799755][T19287] netlink: 'syz.4.14161': attribute type 3 has an invalid length. [ 1411.811049][T19287] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14161'. [ 1412.018305][T19290] netlink: 'syz.4.14162': attribute type 1 has an invalid length. [ 1414.426456][ T1147] IPVS: stop unused estimator thread 0... [ 1414.433689][T19290] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 1414.921267][T19326] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14169'. [ 1414.951440][ T1147] vlan2: left allmulticast mode [ 1414.968543][ T1147] vlan2: left promiscuous mode [ 1414.982407][ T1147] bridge0: port 2(vlan2) entered disabled state [ 1415.022194][ T1147] bridge_slave_0: left promiscuous mode [ 1415.038058][ T1147] bridge0: port 1(bridge_slave_0) entered disabled state [ 1415.758262][ T1147] bond2 (unregistering): (slave macvlan2): Removing an active aggregator [ 1415.789679][ T1147] bond2 (unregistering): (slave macvlan2): Releasing backup interface [ 1415.820378][ T1147] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1415.840454][ T1147] bond_slave_0: left promiscuous mode [ 1415.862190][ T1147] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1415.882083][ T1147] bond_slave_1: left promiscuous mode [ 1415.903075][ T1147] bond0 (unregistering): Released all slaves [ 1415.934035][ T1147] bond1 (unregistering): Released all slaves [ 1415.962102][ T1147] bond2 (unregistering): Released all slaves [ 1415.989730][ T1147] bond3 (unregistering): Released all slaves [ 1416.006663][ T1147] bond4 (unregistering): Released all slaves [ 1416.030819][ T1147] bond5 (unregistering): Released all slaves [ 1416.047770][ T1147] bond6 (unregistering): Released all slaves [ 1416.080218][ T1147] team0: Port device macvlan3 removed [ 1416.091298][ T1147] bond7 (unregistering): Released all slaves [ 1416.115236][ T1147] team0: Port device macvlan4 removed [ 1416.126184][ T1147] bond8 (unregistering): Released all slaves [ 1416.144343][ T1147] bond9 (unregistering): Released all slaves [ 1416.171864][T19332] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1416.535725][T19377] netlink: 24 bytes leftover after parsing attributes in process `syz.3.14177'. [ 1416.559208][ T1147] : left promiscuous mode [ 1416.683532][T19368] netlink: 'syz.4.14175': attribute type 13 has an invalid length. [ 1416.820661][T19389] netlink: 'syz.2.14179': attribute type 4 has an invalid length. [ 1416.828748][T19389] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.14179'. [ 1416.877884][ T1147] tipc: Disabling bearer [ 1416.889453][ T1147] tipc: Left network mode [ 1416.896885][T19377] lo speed is unknown, defaulting to 1000 [ 1416.905434][T19396] netlink: 'syz.1.14181': attribute type 10 has an invalid length. [ 1416.958784][T19398] netlink: 'syz.1.14181': attribute type 10 has an invalid length. [ 1416.979874][T19370] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1416.988425][T19370] syzkaller0: entered promiscuous mode [ 1417.006579][T19370] syzkaller0: entered allmulticast mode [ 1417.028688][T19369] tipc: Enabled bearer , priority 0 [ 1417.111762][T19396] bond0: (slave dummy0): Releasing backup interface [ 1417.150864][T19396] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1417.160300][T19396] team0: Failed to send options change via netlink (err -105) [ 1417.187094][T19396] team0: Port device dummy0 added [ 1417.218185][T19398] team0: Failed to send options change via netlink (err -105) [ 1417.241311][T19398] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1417.248198][T19401] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14182'. [ 1417.251999][T19398] team0: Port device dummy0 removed [ 1417.270628][T19398] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1417.294001][T19367] tipc: Resetting bearer [ 1417.303677][T19367] tipc: Disabling bearer [ 1417.341090][T19401] vlan2: entered promiscuous mode [ 1417.572890][T19406] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1417.596127][T19406] batman_adv: batadv0: Removing interface: gretap1 [ 1417.620021][T19418] openvswitch: netlink: IPv4 tun info is not correct [ 1417.926740][T19426] bridge6: entered promiscuous mode [ 1417.936061][T19428] netlink: 20 bytes leftover after parsing attributes in process `syz.3.14191'. [ 1418.161686][T19432] bond0: (slave vlan4): Opening slave failed [ 1418.392271][T19436] syzkaller0: entered promiscuous mode [ 1418.399106][T19436] syzkaller0: entered allmulticast mode [ 1418.405931][T19442] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14195'. [ 1418.455058][T19442] vlan4: entered promiscuous mode [ 1418.648126][T19447] netlink: 'syz.0.14197': attribute type 4 has an invalid length. [ 1418.664425][T19447] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.14197'. [ 1418.925871][T19463] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14202'. [ 1418.960365][T19460] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14202'. [ 1420.140833][T19239] page_pool_release_retry() stalled pool shutdown: id 62, 1 inflight 1271 sec [ 1421.583869][ T1147] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1421.591948][ T1147] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1421.683109][ T1147] veth1_vlan: left allmulticast mode [ 1421.786346][T19499] netlink: 28 bytes leftover after parsing attributes in process `syz.0.14213'. [ 1422.274234][T19519] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1422.284045][ T1147] team0 (unregistering): Port device team_slave_1 removed [ 1422.323429][ T1147] team0 (unregistering): Port device team_slave_0 removed [ 1422.542265][ T1147] team0 (unregistering): Port device dummy0 removed [ 1422.616577][T19510] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1422.744283][T19526] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14222'. [ 1422.796573][T19526] vlan2: entered promiscuous mode [ 1422.938744][ T1302] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1422.949978][ T1302] lec:lec_start_xmit: lec0:No lecd attached [ 1423.028927][T19533] tipc: Enabled bearer , priority 0 [ 1423.045228][T19533] syzkaller0: entered promiscuous mode [ 1423.069855][T19533] syzkaller0: entered allmulticast mode [ 1423.110396][T19542] netlink: 'syz.3.14223': attribute type 4 has an invalid length. [ 1423.136820][T19533] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1423.163053][T19542] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.14223'. [ 1423.315647][T19552] FAULT_INJECTION: forcing a failure. [ 1423.315647][T19552] name failslab, interval 1, probability 0, space 0, times 0 [ 1423.329487][T19552] CPU: 1 UID: 0 PID: 19552 Comm: syz.2.14225 Not tainted syzkaller #0 PREEMPT(full) [ 1423.329510][T19552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1423.329521][T19552] Call Trace: [ 1423.329529][T19552] [ 1423.329536][T19552] dump_stack_lvl+0xe8/0x150 [ 1423.329566][T19552] should_fail_ex+0x412/0x560 [ 1423.329593][T19552] should_failslab+0xa8/0x100 [ 1423.329615][T19552] __kmalloc_cache_noprof+0x88/0x660 [ 1423.329634][T19552] ? __kfree_rcu_sheaf+0x1f/0x5d0 [ 1423.329651][T19552] ? nsim_fib_event_nb+0x190/0x1210 [ 1423.329679][T19552] nsim_fib_event_nb+0x190/0x1210 [ 1423.329713][T19552] notifier_call_chain+0x1be/0x400 [ 1423.329743][T19552] ? atomic_notifier_call_chain+0x26/0x180 [ 1423.329770][T19552] atomic_notifier_call_chain+0xda/0x180 [ 1423.329798][T19552] call_fib_notifiers+0x31/0x60 [ 1423.329822][T19552] fib6_del+0xf7e/0x15a0 [ 1423.329846][T19552] ? fib6_del+0x10e1/0x15a0 [ 1423.329882][T19552] ? __pfx_fib6_del+0x10/0x10 [ 1423.329904][T19552] ? is_bpf_text_address+0x292/0x2b0 [ 1423.329921][T19552] ? is_bpf_text_address+0x26/0x2b0 [ 1423.329950][T19552] fib6_clean_node+0x29c/0x580 [ 1423.329979][T19552] ? __pfx_fib6_clean_node+0x10/0x10 [ 1423.330002][T19552] ? stack_trace_save+0xa9/0x100 [ 1423.330020][T19552] ? __pfx_stack_trace_save+0x10/0x10 [ 1423.330037][T19552] ? kfree+0x1c1/0x630 [ 1423.330067][T19552] fib6_walk_continue+0x67b/0x910 [ 1423.330103][T19552] __fib6_clean_all+0x35b/0x5a0 [ 1423.330129][T19552] ? __fib6_clean_all+0xbd/0x5a0 [ 1423.330149][T19552] ? __lock_acquire+0x6b5/0x2cf0 [ 1423.330168][T19552] ? __pfx_fib6_ifdown+0x10/0x10 [ 1423.330192][T19552] ? __pfx___fib6_clean_all+0x10/0x10 [ 1423.330214][T19552] ? __pfx_fib6_clean_node+0x10/0x10 [ 1423.330236][T19552] ? __pfx_fib6_ifdown+0x10/0x10 [ 1423.330257][T19552] ? do_raw_spin_lock+0x12b/0x2f0 [ 1423.330277][T19552] ? __mutex_trylock_common+0x158/0x260 [ 1423.330314][T19552] rt6_disable_ip+0x128/0x730 [ 1423.330340][T19552] ? rcu_is_watching+0x15/0xb0 [ 1423.330365][T19552] ? trace_contention_end+0x3d/0x150 [ 1423.330391][T19552] ? __pfx_rt6_disable_ip+0x10/0x10 [ 1423.330423][T19552] addrconf_ifdown+0x161/0x1a40 [ 1423.330444][T19552] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1423.330478][T19552] ? tls_dev_event+0x745/0xf00 [ 1423.330502][T19552] ? __pfx_addrconf_ifdown+0x10/0x10 [ 1423.330537][T19552] addrconf_notify+0x1bc/0x1050 [ 1423.330567][T19552] notifier_call_chain+0x1be/0x400 [ 1423.330601][T19552] netif_set_mtu_ext+0x5aa/0x800 [ 1423.330632][T19552] ? __pfx_netif_set_mtu_ext+0x10/0x10 [ 1423.330653][T19552] ? do_raw_spin_lock+0x12b/0x2f0 [ 1423.330683][T19552] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1423.330715][T19552] netif_set_mtu+0xd7/0x1b0 [ 1423.330740][T19552] ? __pfx_netif_set_mtu+0x10/0x10 [ 1423.330778][T19552] ? __dev_get_by_name+0xe5/0x140 [ 1423.330803][T19552] dev_set_mtu+0x126/0x260 [ 1423.330830][T19552] dev_ioctl+0x7b4/0x1150 [ 1423.330856][T19552] sock_do_ioctl+0x23e/0x320 [ 1423.330877][T19552] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1423.330893][T19552] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1423.330931][T19552] sock_ioctl+0x5c6/0x7f0 [ 1423.330949][T19552] ? __pfx_sock_ioctl+0x10/0x10 [ 1423.330966][T19552] ? __fget_files+0x2a/0x420 [ 1423.330989][T19552] ? __fget_files+0x3a0/0x420 [ 1423.331009][T19552] ? __fget_files+0x2a/0x420 [ 1423.331035][T19552] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1423.331056][T19552] ? __pfx_sock_ioctl+0x10/0x10 [ 1423.331070][T19552] __se_sys_ioctl+0xfc/0x170 [ 1423.331091][T19552] do_syscall_64+0x14d/0xf80 [ 1423.331113][T19552] ? trace_irq_disable+0x3b/0x150 [ 1423.331133][T19552] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1423.331151][T19552] ? clear_bhb_loop+0x40/0x90 [ 1423.331172][T19552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1423.331189][T19552] RIP: 0033:0x7f16d499c629 [ 1423.331204][T19552] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1423.331218][T19552] RSP: 002b:00007f16d2bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1423.331237][T19552] RAX: ffffffffffffffda RBX: 00007f16d4c16180 RCX: 00007f16d499c629 [ 1423.331248][T19552] RDX: 0000200000002280 RSI: 0000000000008922 RDI: 0000000000000005 [ 1423.331259][T19552] RBP: 00007f16d2bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 1423.331268][T19552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1423.331278][T19552] R13: 00007f16d4c16218 R14: 00007f16d4c16180 R15: 00007ffc220b4768 [ 1423.331312][T19552] [ 1423.771335][T19552] tipc: Resetting bearer [ 1423.858109][T19532] tipc: Resetting bearer [ 1423.940315][T19532] tipc: Disabling bearer [ 1424.117050][T19566] netlink: 20 bytes leftover after parsing attributes in process `syz.4.14235'. [ 1424.184471][T19570] sctp: [Deprecated]: syz.3.14237 (pid 19570) Use of int in max_burst socket option deprecated. [ 1424.184471][T19570] Use struct sctp_assoc_value instead [ 1424.211066][T19566] vlan3: entered promiscuous mode [ 1424.257603][T19570] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14237'. [ 1424.598162][T19580] syzkaller0: entered promiscuous mode [ 1424.632077][T19580] syzkaller0: entered allmulticast mode [ 1424.857218][T19606] netlink: 'syz.3.14247': attribute type 4 has an invalid length. [ 1424.859816][T19607] openvswitch: netlink: IPv4 tun info is not correct [ 1424.887296][T19605] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1424.906891][T19606] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.14247'. [ 1425.628698][T19636] netlink: 16 bytes leftover after parsing attributes in process `syz.3.14257'. [ 1425.696186][T19642] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14260'. [ 1425.730176][T19642] netlink: 32 bytes leftover after parsing attributes in process `syz.1.14260'. [ 1425.783787][T19645] netlink: 'syz.4.14261': attribute type 4 has an invalid length. [ 1425.803680][T19645] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.14261'. [ 1425.881260][T19653] netlink: 'syz.0.14263': attribute type 3 has an invalid length. [ 1425.889755][T19653] netlink: 'syz.0.14263': attribute type 3 has an invalid length. [ 1425.994077][T19655] vlan4: entered promiscuous mode [ 1426.337498][T19673] syzkaller0: entered promiscuous mode [ 1426.352888][T19673] syzkaller0: entered allmulticast mode [ 1426.366152][T19678] batadv0: entered promiscuous mode [ 1426.371639][T19678] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1426.544656][T19686] tipc: Enabled bearer , priority 0 [ 1426.562288][T19678] mac80211_hwsim hwsim178 syzkaller0: entered promiscuous mode [ 1426.603424][T19678] mac80211_hwsim hwsim178 syzkaller0: entered allmulticast mode [ 1426.614683][T19678] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1426.644561][T19678] tipc: Resetting bearer [ 1427.214141][T19712] syzkaller0: entered promiscuous mode [ 1427.233004][T19712] syzkaller0: entered allmulticast mode [ 1427.645049][T18542] tipc: Node number set to 1909244343 [ 1427.730917][T19742] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 1427.761925][T19744] __nla_validate_parse: 4 callbacks suppressed [ 1427.761943][T19744] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14299'. [ 1427.785559][T19742] bond5: (slave macvlan4): Enslaving as an active interface with an up link [ 1427.814458][T19752] netlink: 16 bytes leftover after parsing attributes in process `syz.0.14301'. [ 1427.845416][T19744] vlan2: entered promiscuous mode [ 1427.892986][T19744] gretap0: entered promiscuous mode [ 1428.100142][T19764] netlink: 'syz.0.14304': attribute type 13 has an invalid length. [ 1428.167133][T19761] syzkaller1: entered promiscuous mode [ 1428.182598][T19761] syzkaller1: entered allmulticast mode [ 1428.194304][T19758] tipc: Enabling of bearer rejected, already enabled [ 1428.217534][T19763] syzkaller0: entered promiscuous mode [ 1428.224881][T19763] syzkaller0: entered allmulticast mode [ 1428.612852][T19787] netlink: 4188 bytes leftover after parsing attributes in process `syz.1.14311'. [ 1428.772460][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5820 ms [ 1428.780561][ C0] lec:lec_tx_timeout: lec0 [ 1428.877046][T19795] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14314'. [ 1429.153441][T19804] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14318'. [ 1429.460279][T19813] netlink: 84 bytes leftover after parsing attributes in process `syz.2.14321'. [ 1429.503931][T19813] netlink: 84 bytes leftover after parsing attributes in process `syz.2.14321'. [ 1429.555235][T19813] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1429.636068][T19818] syzkaller0: entered promiscuous mode [ 1429.641622][T19818] syzkaller0: entered allmulticast mode [ 1429.706790][T19827] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14327'. [ 1429.882856][T19826] team_slave_1: Caught tx_queue_len zero misconfig [ 1430.000330][T19842] netlink: 'syz.2.14329': attribute type 4 has an invalid length. [ 1430.008895][T19842] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.14329'. [ 1430.080599][T19847] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1430.181107][T30747] hid-generic 0005:0006:5508.0003: hidraw0: BLUETOOTH HID vc3.36 Device [syz0] on aa:aa:aa:aa:aa:aa [ 1430.250311][T19856] syzkaller0: entered promiscuous mode [ 1430.312584][T19856] syzkaller0: entered allmulticast mode [ 1430.554983][T19860] netlink: 28 bytes leftover after parsing attributes in process `syz.0.14336'. [ 1430.921882][T19875] netlink: 'syz.3.14339': attribute type 62 has an invalid length. [ 1431.295784][T19900] netlink: 'syz.3.14347': attribute type 4 has an invalid length. [ 1431.381664][T19899] syzkaller0: entered promiscuous mode [ 1431.397818][T19899] syzkaller0: entered allmulticast mode [ 1431.552098][T19913] netlink: 'syz.1.14349': attribute type 13 has an invalid length. [ 1431.738587][T19918] tipc: Enabled bearer , priority 0 [ 1431.776434][T19915] mac80211_hwsim hwsim178 syzkaller0: Caught tx_queue_len zero misconfig [ 1431.785844][T19915] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) ! [ 1431.834798][T19926] netlink: 'syz.3.14357': attribute type 10 has an invalid length. [ 1431.855425][T19898] tipc: Resetting bearer [ 1431.920328][T19898] tipc: Disabling bearer [ 1432.090753][T19933] syzkaller0: entered promiscuous mode [ 1432.107623][T19933] syzkaller0: entered allmulticast mode [ 1432.390949][T19943] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1432.399072][T19943] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1432.436583][T19938] syzkaller1: entered promiscuous mode [ 1432.442251][T19938] syzkaller1: entered allmulticast mode [ 1432.463848][T19946] syzkaller0: entered promiscuous mode [ 1432.483884][T19946] syzkaller0: entered allmulticast mode [ 1435.017885][T19952] tipc: Enabled bearer , priority 0 [ 1435.124528][T19957] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1435.139537][T19957] bond4: (slave macvlan3): Enslaving as an active interface with an up link [ 1435.193092][T19937] tipc: Resetting bearer [ 1435.277319][T19973] __nla_validate_parse: 8 callbacks suppressed [ 1435.277338][T19973] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14368'. [ 1435.303617][T19937] tipc: Disabling bearer [ 1435.385280][T19978] netlink: 112 bytes leftover after parsing attributes in process `syz.4.14369'. [ 1435.399383][T19979] netlink: 'syz.3.14367': attribute type 4 has an invalid length. [ 1435.407444][T19979] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.14367'. [ 1435.448752][T19980] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14369'. [ 1435.470765][T19978] netlink: 'syz.4.14369': attribute type 5 has an invalid length. [ 1435.694798][T19991] xt_connbytes: Forcing CT accounting to be enabled [ 1435.704024][T19989] syzkaller0: entered promiscuous mode [ 1435.709829][T19989] syzkaller0: entered allmulticast mode [ 1435.994666][T20006] netlink: 'syz.3.14377': attribute type 1 has an invalid length. [ 1436.135140][T20006] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1436.177499][T20014] netlink: 28 bytes leftover after parsing attributes in process `syz.4.14378'. [ 1436.243343][T20014] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 1436.279878][T20014] bond5: (slave macvlan5): Enslaving as an active interface with an up link [ 1436.302774][T20012] bond9: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 1436.567386][T20005] syzkaller0: entered promiscuous mode [ 1436.575020][T20005] syzkaller0: entered allmulticast mode [ 1436.601782][T20023] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14380'. [ 1436.638321][T20006] bond9: (slave ip6gretap0): Enslaving as an active interface with an up link [ 1436.977768][T20033] netlink: 'syz.4.14385': attribute type 4 has an invalid length. [ 1436.986706][T20033] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.14385'. [ 1438.348807][T20055] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14388'. [ 1439.412916][ T35] bond9: (slave ip6gretap0): failed to get link speed/duplex [ 1439.471743][T20053] macvtap2: left promiscuous mode [ 1439.510452][T20053] macvtap2: left allmulticast mode [ 1439.533821][ T1040] bond9: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1439.543481][ T1040] bond9: (slave ip6gretap0): failed to get link speed/duplex [ 1439.609574][T20059] syzkaller0: entered promiscuous mode [ 1439.615538][T20059] syzkaller0: entered allmulticast mode [ 1439.652945][ T1147] bond9: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1439.672552][ T1040] bond9: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1439.693189][ T1134] bond9: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1439.722873][ T1134] bond9: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1439.755231][ T1147] bond9: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1439.792503][ T1147] bond9: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1439.812990][ T1147] bond9: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1440.078453][T20087] netlink: 28 bytes leftover after parsing attributes in process `syz.2.14398'. [ 1440.108063][T20086] FAULT_INJECTION: forcing a failure. [ 1440.108063][T20086] name failslab, interval 1, probability 0, space 0, times 0 [ 1440.119539][T20087] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 1440.136437][T20087] bond4: (slave macvlan4): Enslaving as an active interface with an up link [ 1440.142461][T20086] CPU: 0 UID: 0 PID: 20086 Comm: syz.1.14399 Not tainted syzkaller #0 PREEMPT(full) [ 1440.142486][T20086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1440.142497][T20086] Call Trace: [ 1440.142504][T20086] [ 1440.142512][T20086] dump_stack_lvl+0xe8/0x150 [ 1440.142540][T20086] should_fail_ex+0x412/0x560 [ 1440.142565][T20086] should_failslab+0xa8/0x100 [ 1440.142592][T20086] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1440.142620][T20086] ? __alloc_skb+0x186/0x7d0 [ 1440.142640][T20086] ? __alloc_skb+0x1d0/0x7d0 [ 1440.142658][T20086] ? __local_bh_enable_ip+0xd0/0x130 [ 1440.142702][T20086] __alloc_skb+0x1d0/0x7d0 [ 1440.142728][T20086] netlink_sendmsg+0x5d4/0xb40 [ 1440.142756][T20086] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1440.142780][T20086] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1440.142800][T20086] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1440.142821][T20086] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1440.142840][T20086] ____sys_sendmsg+0xa68/0xad0 [ 1440.142871][T20086] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1440.142901][T20086] ? import_iovec+0x73/0xa0 [ 1440.142927][T20086] ___sys_sendmsg+0x2a5/0x360 [ 1440.142956][T20086] ? __pfx____sys_sendmsg+0x10/0x10 [ 1440.143014][T20086] ? __fget_files+0x2a/0x420 [ 1440.143037][T20086] ? __fget_files+0x3a0/0x420 [ 1440.143068][T20086] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1440.143093][T20086] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1440.143125][T20086] ? __pfx_ksys_write+0x10/0x10 [ 1440.143153][T20086] do_syscall_64+0x14d/0xf80 [ 1440.143176][T20086] ? trace_irq_disable+0x3b/0x150 [ 1440.143198][T20086] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1440.143216][T20086] ? clear_bhb_loop+0x40/0x90 [ 1440.143237][T20086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1440.143254][T20086] RIP: 0033:0x7f5b9079c629 [ 1440.143271][T20086] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1440.143285][T20086] RSP: 002b:00007f5b9158c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1440.143304][T20086] RAX: ffffffffffffffda RBX: 00007f5b90a15fa0 RCX: 00007f5b9079c629 [ 1440.143317][T20086] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000008 [ 1440.143328][T20086] RBP: 00007f5b9158c090 R08: 0000000000000000 R09: 0000000000000000 [ 1440.143339][T20086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1440.143350][T20086] R13: 00007f5b90a16038 R14: 00007f5b90a15fa0 R15: 00007ffe543e33c8 [ 1440.143378][T20086] [ 1440.274001][T20090] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14397'. [ 1440.477192][T20097] macsec0: entered promiscuous mode [ 1440.529312][T20086] ip6_vti0 speed is unknown, defaulting to 1000 [ 1440.544490][T20089] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.14397'. [ 1440.607726][T20096] macsec0: left promiscuous mode [ 1440.637621][T20086] ip6_vti0 speed is unknown, defaulting to 1000 [ 1440.669613][T20086] ip6_vti0 speed is unknown, defaulting to 1000 [ 1440.795577][T20106] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14404'. [ 1440.865408][T20107] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 1440.878967][T20106] macvtap4: entered promiscuous mode [ 1440.923800][T20106] macvtap4: entered allmulticast mode [ 1440.929228][T20106] veth1_vlan: entered allmulticast mode [ 1441.236038][T20112] syzkaller0: entered promiscuous mode [ 1441.241669][T20112] syzkaller0: entered allmulticast mode [ 1441.277078][T20086] infiniband syz2: set down [ 1441.281657][ T90] ip6_vti0 speed is unknown, defaulting to 1000 [ 1441.294323][T20086] infiniband syz2: added ip6_vti0 [ 1441.325856][T20086] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 1441.327854][T20086] infiniband syz2: Couldn't open port 1 [ 1441.390496][T20086] RDS/IB: syz2: added [ 1441.403262][T20086] smc: adding ib device syz2 with port count 1 [ 1441.419345][T20086] smc: ib device syz2 port 1 has no pnetid [ 1441.980878][T20132] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 3 [ 1443.810466][ T90] ip6_vti0 speed is unknown, defaulting to 1000 [ 1443.854424][T20086] ip6_vti0 speed is unknown, defaulting to 1000 [ 1443.895643][ T1147] team0: left allmulticast mode [ 1443.900546][ T1147] team_slave_0: left allmulticast mode [ 1443.932881][ T1147] team_slave_1: left allmulticast mode [ 1443.954066][ T1147] macvlan2: left allmulticast mode [ 1443.982841][ T1147] macvlan3: left allmulticast mode [ 1443.988003][ T1147] bridge2: left allmulticast mode [ 1444.011347][ T1147] erspan0: left allmulticast mode [ 1444.016790][ T1147] team0: left promiscuous mode [ 1444.021561][ T1147] team_slave_0: left promiscuous mode [ 1444.062794][ T1147] team_slave_1: left promiscuous mode [ 1444.068371][ T1147] macvlan2: left promiscuous mode [ 1444.087034][ T1147] macvlan3: left promiscuous mode [ 1444.092292][ T1147] bridge2: left promiscuous mode [ 1444.114106][ T1147] erspan0: left promiscuous mode [ 1444.119373][ T1147] bridge0: port 2(team0) entered disabled state [ 1444.177884][ T1147] bridge_slave_0: left promiscuous mode [ 1444.197294][ T1147] bridge0: port 1(bridge_slave_0) entered disabled state [ 1444.251053][T20156] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14415'. [ 1444.338078][T20161] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.14415'. [ 1444.432489][ T1134] net_ratelimit: 188 callbacks suppressed [ 1444.432510][ T1134] bond9: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1444.484173][ T1134] bond9: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1444.515071][ T1134] bond9: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1444.542482][ T1134] bond9: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1444.550509][ T1147] team0: Port device erspan0 removed [ 1444.572949][ T1134] bond9: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1444.598660][ T1134] bond9: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1444.623725][ T1147] bond4 (unregistering): (slave gretap1): Releasing active interface [ 1444.635450][ T1134] bond9: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1444.662570][ T1134] bond9: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1444.682682][ T1134] bond9: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1444.713974][ T1134] bond9: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1444.848466][ T1147] team0: Port device bridge2 removed [ 1444.948846][ T1147] bond4 (unregistering): (slave bridge4): Releasing active interface [ 1445.054735][ T1147] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1445.071257][ T1147] bond_slave_0: left promiscuous mode [ 1445.079256][ T1147] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1445.090263][ T1147] bond_slave_1: left promiscuous mode [ 1445.099455][ T1147] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 1445.108901][ T1147] bond0 (unregistering): Released all slaves [ 1445.121074][ T1147] bond1 (unregistering): Released all slaves [ 1445.140003][ T1147] team0: Port device macvlan2 removed [ 1445.156738][ T1147] bond2 (unregistering): Released all slaves [ 1445.176811][ T1147] team0: Port device macvlan3 removed [ 1445.188916][ T1147] bond3 (unregistering): Released all slaves [ 1445.210639][ T1147] bond4 (unregistering): Released all slaves [ 1445.233736][ T1147] bond5 (unregistering): Released all slaves [ 1445.279345][T20156] bond0: (slave dummy0): Releasing backup interface [ 1445.302663][T20086] ip6_vti0 speed is unknown, defaulting to 1000 [ 1445.477956][T20166] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14417'. [ 1445.499179][T20166] vlan2: entered promiscuous mode [ 1445.912307][T20086] ip6_vti0 speed is unknown, defaulting to 1000 [ 1446.013813][T20189] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14423'. [ 1446.058253][T20188] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14423'. [ 1446.391625][T19245] hid-generic 0005:0006:5508.0004: item fetching failed at offset 0/1 [ 1446.400606][T19245] hid-generic 0005:0006:5508.0004: probe with driver hid-generic failed with error -22 [ 1446.620555][T20086] ip6_vti0 speed is unknown, defaulting to 1000 [ 1446.649675][T20218] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14437'. [ 1446.653449][T20219] syzkaller0: entered promiscuous mode [ 1446.694201][T20219] syzkaller0: entered allmulticast mode [ 1446.714570][T20218] vlan2: entered allmulticast mode [ 1446.719729][T20218] erspan0: entered allmulticast mode [ 1447.052461][ T1147] tipc: Left network mode [ 1447.114019][T20086] ip6_vti0 speed is unknown, defaulting to 1000 [ 1447.941670][T20256] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14446'. [ 1448.192026][T20086] ip6_vti0 speed is unknown, defaulting to 1000 [ 1448.379027][T20270] syzkaller1: entered promiscuous mode [ 1448.393581][T20270] syzkaller1: entered allmulticast mode [ 1448.415867][T20271] syzkaller0: entered promiscuous mode [ 1448.432122][T20271] syzkaller0: entered allmulticast mode [ 1448.777807][T20277] bond4: option mode: unable to set because the bond device has slaves [ 1448.788397][T20246] ip6_vti0 speed is unknown, defaulting to 1000 [ 1448.996373][T20289] syzkaller1: entered promiscuous mode [ 1449.001902][T20289] syzkaller1: entered allmulticast mode [ 1449.288941][T20086] ip6_vti0 speed is unknown, defaulting to 1000 [ 1449.502623][T15768] net_ratelimit: 140 callbacks suppressed [ 1449.502645][T15768] bond9: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1449.544816][T15768] bond9: (slave ip6gretap0): failed to get link speed/duplex [ 1449.650570][T20300] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1449.672590][T16572] bond9: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1449.683536][T16572] bond9: (slave ip6gretap0): failed to get link speed/duplex [ 1449.700145][T20300] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14461'. [ 1449.718127][T20086] ip6_vti0 speed is unknown, defaulting to 1000 [ 1449.725415][T20300] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14461'. [ 1449.805645][ T1040] bond9: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1449.820529][ T1040] bond9: (slave ip6gretap0): failed to get link speed/duplex [ 1449.942612][T15768] bond9: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1449.950382][T15768] bond9: (slave ip6gretap0): failed to get link speed/duplex [ 1450.084750][ T1040] bond9: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1450.107125][ T1040] bond9: (slave ip6gretap0): failed to get link speed/duplex [ 1450.369450][T20311] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14466'. [ 1450.375840][T20309] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14465'. [ 1450.573465][ T1147] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1450.611548][ T1147] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1451.208836][ T1147] team0 (unregistering): Port device team_slave_1 removed [ 1451.254206][ T1147] team0 (unregistering): Port device team_slave_0 removed [ 1451.822937][T20341] syzkaller1: entered promiscuous mode [ 1451.828474][T20341] syzkaller1: entered allmulticast mode [ 1451.920100][T20354] ip6_vti0 speed is unknown, defaulting to 1000 [ 1452.470314][T20378] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14479'. [ 1452.492795][T20379] netlink: 'syz.2.14480': attribute type 2 has an invalid length. [ 1452.520024][T20379] netlink: 'syz.2.14480': attribute type 1 has an invalid length. [ 1452.535596][ T1147] IPVS: stop unused estimator thread 0... [ 1452.575844][T20379] netlink: 'syz.2.14480': attribute type 1 has an invalid length. [ 1452.841000][T20393] syzkaller0: entered promiscuous mode [ 1452.879579][T20393] syzkaller0: entered allmulticast mode [ 1453.004949][T20406] netlink: 36 bytes leftover after parsing attributes in process `syz.2.14486'. [ 1453.007002][T20393] tipc: Enabled bearer , priority 0 [ 1453.047583][T20392] tipc: Resetting bearer [ 1453.124723][T20392] tipc: Disabling bearer [ 1453.323340][T20419] netlink: 344 bytes leftover after parsing attributes in process `syz.1.14490'. [ 1453.423656][ T90] hid-generic 0005:0006:5508.0005: item fetching failed at offset 0/1 [ 1453.451785][ T90] hid-generic 0005:0006:5508.0005: probe with driver hid-generic failed with error -22 [ 1453.607791][T20433] syzkaller1: entered promiscuous mode [ 1453.637955][T20433] syzkaller1: entered allmulticast mode [ 1453.669917][T20438] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14494'. [ 1454.523092][ T35] net_ratelimit: 160 callbacks suppressed [ 1454.523112][ T35] bond9: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1454.563278][ T35] bond9: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1454.592612][ T35] bond9: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1454.612534][ T1040] bond9: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1454.642647][ T1040] bond9: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1454.679419][ T1040] bond9: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1454.715564][ T1040] bond9: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1454.742658][ T35] bond9: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1454.766421][ T35] bond9: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1454.808907][ T35] bond9: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1456.860391][T20456] ip6_vti0 speed is unknown, defaulting to 1000 [ 1457.162154][T20483] netlink: 'syz.2.14501': attribute type 21 has an invalid length. [ 1457.232040][T20483] netlink: 132 bytes leftover after parsing attributes in process `syz.2.14501'. [ 1457.243293][T20483] netlink: 28 bytes leftover after parsing attributes in process `syz.2.14501'. [ 1457.769276][T20480] ip6_vti0 speed is unknown, defaulting to 1000 [ 1458.029204][T20519] netlink: 'syz.0.14506': attribute type 13 has an invalid length. [ 1458.191958][T20520] tipc: Enabling of bearer rejected, already enabled [ 1458.224714][T20526] netlink: 'syz.4.14509': attribute type 10 has an invalid length. [ 1458.275075][T20526] bond0: (slave dummy0): Releasing backup interface [ 1458.284254][T20530] netlink: 'syz.4.14509': attribute type 10 has an invalid length. [ 1458.314418][T20526] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1458.372860][T20526] team0: Failed to send options change via netlink (err -105) [ 1458.385484][T20526] team0: Port device dummy0 added [ 1458.420886][T20535] syzkaller1: entered promiscuous mode [ 1458.429075][T20535] syzkaller1: entered allmulticast mode [ 1458.445237][T20530] team0: Failed to send options change via netlink (err -105) [ 1458.461865][T20530] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1458.477964][T20530] team0: Port device dummy0 removed [ 1458.546143][T20530] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1459.035716][T20560] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1459.245576][T31838] lec:lec_start_xmit: lec0:No lecd attached [ 1459.361655][T20572] netlink: 16 bytes leftover after parsing attributes in process `syz.2.14516'. [ 1459.395680][T20570] syzkaller0: entered promiscuous mode [ 1459.401401][T20570] syzkaller0: entered allmulticast mode [ 1459.570109][T20576] bond4: option mode: unable to set because the bond device has slaves [ 1459.612876][ T35] net_ratelimit: 176 callbacks suppressed [ 1459.612898][ T35] bond9: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1459.662590][T16572] bond9: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1459.696202][T20576] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 1459.703202][T16572] bond9: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1459.739918][T16572] bond9: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1459.782815][ T35] bond9: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1459.802660][ T35] bond9: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1459.822511][ T35] bond9: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1459.824130][T20585] netlink: 'syz.0.14522': attribute type 3 has an invalid length. [ 1459.855525][T20576] bond4: (slave macvlan5): Enslaving as an active interface with an up link [ 1459.856054][ T12] bond9: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1459.894103][T15768] bond9: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1459.902085][T15768] bond9: (slave ip6gretap0): failed to get link speed/duplex [ 1459.910339][T20585] netlink: 'syz.0.14522': attribute type 3 has an invalid length. [ 1460.150561][T20600] syzkaller1: entered promiscuous mode [ 1460.158813][T20600] syzkaller1: entered allmulticast mode [ 1460.177757][T20594] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14527'. [ 1460.224363][T20594] bond0: (slave dummy0): Releasing backup interface [ 1460.964367][T20628] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14541'. [ 1461.007465][T20628] bond0: (slave dummy0): Releasing backup interface [ 1461.181064][T20639] netlink: 'syz.2.14544': attribute type 10 has an invalid length. [ 1461.199586][T20639] netlink: 'syz.2.14544': attribute type 10 has an invalid length. [ 1461.663893][T20661] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14552'. [ 1461.690607][T20661] vlan2: entered promiscuous mode [ 1461.738186][T20663] geneve2: entered promiscuous mode [ 1461.763419][ T35] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1461.796849][ T35] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1461.826006][ T35] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1461.855622][ T35] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1461.975751][T20671] syzkaller1: entered promiscuous mode [ 1461.981522][T20671] syzkaller1: entered allmulticast mode [ 1461.993679][T20668] syzkaller1: entered promiscuous mode [ 1461.999246][T20668] syzkaller1: entered allmulticast mode [ 1462.233534][T20679] netlink: 28 bytes leftover after parsing attributes in process `syz.1.14560'. [ 1462.335659][T20684] netlink: 40 bytes leftover after parsing attributes in process `syz.1.14560'. [ 1462.842288][T20695] netlink: 'syz.4.14565': attribute type 16 has an invalid length. [ 1462.878145][T20695] netlink: 'syz.4.14565': attribute type 17 has an invalid length. [ 1463.011492][T20704] netlink: 4188 bytes leftover after parsing attributes in process `syz.0.14569'. [ 1463.013919][T20695] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1463.029910][T20695] 8021q: adding VLAN 0 to HW filter on device team0 [ 1463.195099][T20707] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 3 [ 1463.370447][T20715] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14574'. [ 1463.370939][T20717] netlink: 28 bytes leftover after parsing attributes in process `syz.3.14576'. [ 1463.429422][T20717] netlink: 28 bytes leftover after parsing attributes in process `syz.3.14576'. [ 1463.500236][T20729] FAULT_INJECTION: forcing a failure. [ 1463.500236][T20729] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1463.514464][T20729] CPU: 0 UID: 0 PID: 20729 Comm: syz.0.14579 Not tainted syzkaller #0 PREEMPT(full) [ 1463.514489][T20729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1463.514500][T20729] Call Trace: [ 1463.514508][T20729] [ 1463.514515][T20729] dump_stack_lvl+0xe8/0x150 [ 1463.514543][T20729] should_fail_ex+0x412/0x560 [ 1463.514577][T20729] _copy_from_user+0x2d/0xb0 [ 1463.514600][T20729] hidp_sock_ioctl+0x2dc/0x650 [ 1463.514624][T20729] ? __pfx_hidp_sock_ioctl+0x10/0x10 [ 1463.514684][T20729] ? do_vfs_ioctl+0x1166/0x1530 [ 1463.514715][T20729] sock_do_ioctl+0x101/0x320 [ 1463.514737][T20729] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1463.514753][T20729] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1463.514793][T20729] sock_ioctl+0x5c6/0x7f0 [ 1463.514811][T20729] ? __pfx_sock_ioctl+0x10/0x10 [ 1463.514829][T20729] ? __fget_files+0x2a/0x420 [ 1463.514850][T20729] ? __fget_files+0x3a0/0x420 [ 1463.514872][T20729] ? __fget_files+0x2a/0x420 [ 1463.514897][T20729] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1463.514918][T20729] ? __pfx_sock_ioctl+0x10/0x10 [ 1463.514935][T20729] __se_sys_ioctl+0xfc/0x170 [ 1463.514956][T20729] do_syscall_64+0x14d/0xf80 [ 1463.514979][T20729] ? trace_irq_disable+0x3b/0x150 [ 1463.515001][T20729] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1463.515019][T20729] ? clear_bhb_loop+0x40/0x90 [ 1463.515040][T20729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1463.515057][T20729] RIP: 0033:0x7f4c1d99c629 [ 1463.515074][T20729] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1463.515089][T20729] RSP: 002b:00007f4c1e794028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1463.515108][T20729] RAX: ffffffffffffffda RBX: 00007f4c1dc15fa0 RCX: 00007f4c1d99c629 [ 1463.515122][T20729] RDX: 0000200000000280 RSI: 00000000400448c8 RDI: 0000000000000004 [ 1463.515133][T20729] RBP: 00007f4c1e794090 R08: 0000000000000000 R09: 0000000000000000 [ 1463.515144][T20729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1463.515154][T20729] R13: 00007f4c1dc16038 R14: 00007f4c1dc15fa0 R15: 00007ffe5650f5d8 [ 1463.515182][T20729] [ 1464.163840][T20745] netlink: 'syz.3.14585': attribute type 10 has an invalid length. [ 1464.175992][T20745] bond0: (slave dummy0): Releasing backup interface [ 1464.199926][T20745] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1464.231004][T20749] netlink: 'syz.3.14585': attribute type 10 has an invalid length. [ 1464.260891][T20745] team0: Failed to send options change via netlink (err -105) [ 1464.272975][T20745] team0: Port device dummy0 added [ 1464.292240][T20749] team0: Failed to send options change via netlink (err -105) [ 1464.333037][T20749] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1464.376330][T20749] team0: Port device dummy0 removed [ 1464.408628][T20749] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1464.491817][T20760] __nla_validate_parse: 1 callbacks suppressed [ 1464.491836][T20760] netlink: 84 bytes leftover after parsing attributes in process `syz.2.14589'. [ 1464.542499][T20760] netlink: 84 bytes leftover after parsing attributes in process `syz.2.14589'. [ 1464.617936][T20766] syzkaller0: entered promiscuous mode [ 1464.632469][T20766] syzkaller0: entered allmulticast mode [ 1464.672573][ T1040] net_ratelimit: 106 callbacks suppressed [ 1464.672594][ T1040] bond9: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1464.712543][ T1040] bond9: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1464.742977][ T1040] bond9: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1464.762557][ T1040] bond9: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1464.762807][T20766] netlink: 'syz.3.14592': attribute type 13 has an invalid length. [ 1464.770336][ T1040] bond9: (slave ip6gretap0): failed to get link speed/duplex [ 1464.782370][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5530 ms [ 1464.794223][ C0] lec:lec_tx_timeout: lec0 [ 1464.823955][T20769] syzkaller0: entered promiscuous mode [ 1464.829515][T20769] syzkaller0: entered allmulticast mode [ 1464.900666][T20771] tipc: Enabled bearer , priority 0 [ 1464.950520][T20764] tipc: Resetting bearer [ 1464.962446][ T35] bond9: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1464.984787][ T35] bond9: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1465.012028][T20764] tipc: Disabling bearer [ 1465.030777][T20778] ip6_vti0: Caught tx_queue_len zero misconfig [ 1465.037411][ T12] bond9: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1465.048788][T20755] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1465.082572][ T35] bond9: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1465.106306][ T35] bond9: (slave ip6gretap0): failed to get link speed/duplex [ 1465.281070][T20792] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14601'. [ 1465.318388][T20792] : entered promiscuous mode [ 1465.411226][T20795] syzkaller1: entered promiscuous mode [ 1465.430300][T20795] syzkaller1: entered allmulticast mode [ 1465.514093][T20803] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 1465.525692][T20800] FAULT_INJECTION: forcing a failure. [ 1465.525692][T20800] name failslab, interval 1, probability 0, space 0, times 0 [ 1465.539884][ T29] audit: type=1800 audit(1771539858.917:26): pid=20801 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.14605" name="memory.events" dev="tmpfs" ino=2854 res=0 errno=0 [ 1465.561895][T20800] CPU: 0 UID: 0 PID: 20800 Comm: syz.0.14604 Not tainted syzkaller #0 PREEMPT(full) [ 1465.561921][T20800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1465.561932][T20800] Call Trace: [ 1465.561940][T20800] [ 1465.561947][T20800] dump_stack_lvl+0xe8/0x150 [ 1465.561977][T20800] should_fail_ex+0x412/0x560 [ 1465.562004][T20800] should_failslab+0xa8/0x100 [ 1465.562027][T20800] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1465.562056][T20800] ? __alloc_skb+0x1d0/0x7d0 [ 1465.562077][T20800] ? __local_bh_enable_ip+0xd0/0x130 [ 1465.562103][T20800] __alloc_skb+0x1d0/0x7d0 [ 1465.562129][T20800] rtmsg_ifinfo_build_skb+0x84/0x260 [ 1465.562148][T20800] ? lock_acquire+0xf0/0x2e0 [ 1465.562175][T20800] rtmsg_ifinfo+0x8c/0x1a0 [ 1465.562200][T20800] __dev_notify_flags+0xf2/0x310 [ 1465.562225][T20800] ? __pfx___dev_notify_flags+0x10/0x10 [ 1465.562245][T20800] ? __dev_change_flags+0x4c6/0x690 [ 1465.562273][T20800] ? __pfx___dev_change_flags+0x10/0x10 [ 1465.562308][T20800] netif_change_flags+0xe8/0x1a0 [ 1465.562338][T20800] do_setlink+0xf82/0x4590 [ 1465.562361][T20800] ? trace_sched_exit_tp+0x3a/0x150 [ 1465.562388][T20800] ? __pfx_do_setlink+0x10/0x10 [ 1465.562408][T20800] ? __lock_acquire+0x6b5/0x2cf0 [ 1465.562431][T20800] ? irqentry_exit+0x59e/0x620 [ 1465.562461][T20800] ? do_raw_spin_lock+0x12b/0x2f0 [ 1465.562482][T20800] ? do_raw_spin_lock+0x12b/0x2f0 [ 1465.562510][T20800] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1465.562532][T20800] ? lockdep_hardirqs_on+0x7a/0x110 [ 1465.562556][T20800] ? __mutex_lock+0xd09/0x1300 [ 1465.562585][T20800] ? __mutex_lock+0x5ac/0x1300 [ 1465.562622][T20800] ? rtnl_newlink+0x8a1/0x1be0 [ 1465.562646][T20800] ? __pfx___mutex_lock+0x10/0x10 [ 1465.562681][T20800] ? ns_capable+0x89/0xe0 [ 1465.562708][T20800] rtnl_newlink+0x147a/0x1be0 [ 1465.562739][T20800] ? __pfx_rtnl_newlink+0x10/0x10 [ 1465.562767][T20800] ? __lock_acquire+0x6b5/0x2cf0 [ 1465.562794][T20800] ? __lock_acquire+0x6b5/0x2cf0 [ 1465.562818][T20800] ? __lock_acquire+0x6b5/0x2cf0 [ 1465.562850][T20800] ? unwind_next_frame+0xa5/0x23c0 [ 1465.562896][T20800] ? __lock_acquire+0x6b5/0x2cf0 [ 1465.562920][T20800] ? is_bpf_text_address+0x26/0x2b0 [ 1465.562941][T20800] ? kernel_text_address+0xa5/0xe0 [ 1465.562986][T20800] ? __pfx_rtnl_newlink+0x10/0x10 [ 1465.563006][T20800] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1465.563030][T20800] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1465.563050][T20800] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1465.563074][T20800] ? __lock_acquire+0x6b5/0x2cf0 [ 1465.563105][T20800] netlink_rcv_skb+0x232/0x4b0 [ 1465.563127][T20800] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1465.563150][T20800] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1465.563181][T20800] ? netlink_deliver_tap+0x2e/0x1b0 [ 1465.563208][T20800] netlink_unicast+0x80f/0x9b0 [ 1465.563235][T20800] ? __pfx_netlink_unicast+0x10/0x10 [ 1465.563256][T20800] ? netlink_sendmsg+0x650/0xb40 [ 1465.563274][T20800] ? skb_put+0x11b/0x210 [ 1465.563299][T20800] netlink_sendmsg+0x813/0xb40 [ 1465.563328][T20800] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1465.563351][T20800] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1465.563374][T20800] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1465.563392][T20800] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1465.563409][T20800] ____sys_sendmsg+0xa68/0xad0 [ 1465.563439][T20800] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1465.563468][T20800] ? import_iovec+0x73/0xa0 [ 1465.563493][T20800] ___sys_sendmsg+0x2a5/0x360 [ 1465.563521][T20800] ? __pfx____sys_sendmsg+0x10/0x10 [ 1465.563575][T20800] ? __fget_files+0x2a/0x420 [ 1465.563604][T20800] ? __fget_files+0x3a0/0x420 [ 1465.563637][T20800] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1465.563664][T20800] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1465.563697][T20800] ? __pfx_ksys_write+0x10/0x10 [ 1465.563724][T20800] do_syscall_64+0x14d/0xf80 [ 1465.563747][T20800] ? trace_irq_disable+0x3b/0x150 [ 1465.563770][T20800] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1465.563786][T20800] ? clear_bhb_loop+0x40/0x90 [ 1465.563807][T20800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1465.563823][T20800] RIP: 0033:0x7f4c1d99c629 [ 1465.563839][T20800] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1465.563854][T20800] RSP: 002b:00007f4c1e794028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1465.563873][T20800] RAX: ffffffffffffffda RBX: 00007f4c1dc15fa0 RCX: 00007f4c1d99c629 [ 1465.563886][T20800] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000008 [ 1465.563896][T20800] RBP: 00007f4c1e794090 R08: 0000000000000000 R09: 0000000000000000 [ 1465.563907][T20800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1465.563916][T20800] R13: 00007f4c1dc16038 R14: 00007f4c1dc15fa0 R15: 00007ffe5650f5d8 [ 1465.563942][T20800] [ 1466.109348][T20809] netlink: 'syz.3.14608': attribute type 1 has an invalid length. [ 1466.422113][T20821] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14612'. [ 1466.453527][T20822] netlink: 'syz.4.14613': attribute type 3 has an invalid length. [ 1466.512983][T20822] netlink: 'syz.4.14613': attribute type 3 has an invalid length. [ 1466.558938][T20828] netlink: 4188 bytes leftover after parsing attributes in process `syz.1.14616'. [ 1466.662213][T20832] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1466.746033][T20839] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14619'. [ 1466.802867][T20839] vlan3: entered promiscuous mode [ 1467.165619][T20850] netlink: 'syz.1.14622': attribute type 10 has an invalid length. [ 1467.189430][T20850] team0: Device vxcan1 is of different type [ 1467.223013][T20854] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14625'. [ 1467.386891][T20858] sctp: [Deprecated]: syz.2.14626 (pid 20858) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1467.386891][T20858] Use struct sctp_sack_info instead [ 1467.467156][T20858] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14626'. [ 1467.733572][T19247] hid-generic 0005:0006:5508.0006: item fetching failed at offset 0/1 [ 1467.804727][T20874] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14628'. [ 1467.814095][T20874] netlink: 40 bytes leftover after parsing attributes in process `syz.2.14628'. [ 1467.830302][T19247] hid-generic 0005:0006:5508.0006: probe with driver hid-generic failed with error -22 [ 1468.545724][T16572] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1468.564959][T16572] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1468.596709][T16572] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1468.624333][T16572] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1468.697505][T20902] netlink: 'syz.0.14637': attribute type 13 has an invalid length. [ 1468.714004][T20902] tipc: Enabling of bearer rejected, already enabled [ 1469.081978][T20922] vlan2: entered promiscuous mode [ 1469.316909][T20929] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1469.346548][T20936] netlink: 'syz.4.14648': attribute type 13 has an invalid length. [ 1469.443875][T20936] netlink: 'syz.4.14648': attribute type 17 has an invalid length. [ 1469.534807][T20941] __nla_validate_parse: 3 callbacks suppressed [ 1469.534826][T20941] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14649'. [ 1469.575552][T20944] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 1469.696514][T15768] net_ratelimit: 107 callbacks suppressed [ 1469.696534][T15768] bond9: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1469.755752][T15768] bond9: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1469.796005][T20936] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1469.813178][T15768] bond9: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1469.856609][T15768] bond9: (slave ip6gretap0): failed to get link speed/duplex [ 1469.940848][T20952] netlink: 'syz.0.14654': attribute type 26 has an invalid length. [ 1469.982556][T16572] bond9: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1470.022539][T16572] bond9: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1470.030317][T16572] bond9: (slave ip6gretap0): failed to get link speed/duplex [ 1470.162853][ T1040] bond9: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1470.174331][ T1040] bond9: (slave ip6gretap0): failed to get link speed/duplex [ 1470.212774][T20963] netlink: 36 bytes leftover after parsing attributes in process `syz.0.14659'. [ 1470.235987][ T5829] Bluetooth: hci0: link tx timeout [ 1470.243701][ T5829] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 1470.298000][T20972] xt_hashlimit: max too large, truncated to 1048576 [ 1470.348580][T20972] xt_bpf: check failed: parse error [ 1470.468464][T20977] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14664'. [ 1470.700993][T20984] netlink: 28 bytes leftover after parsing attributes in process `syz.0.14666'. [ 1470.732793][T20984] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14666'. [ 1471.243931][T21011] tipc: Enabled bearer , priority 0 [ 1471.252102][T21011] syzkaller0: entered promiscuous mode [ 1471.260445][T21011] syzkaller0: entered allmulticast mode [ 1471.296923][T21011] SET target dimension over the limit! [ 1471.309879][T21011] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1471.331060][T21015] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14676'. [ 1471.345724][T21011] tipc: Resetting bearer [ 1471.359665][T21010] tipc: Resetting bearer [ 1471.407008][T21010] tipc: Disabling bearer [ 1471.510630][T21019] netlink: 'syz.0.14678': attribute type 4 has an invalid length. [ 1471.518852][T21019] netlink: 240 bytes leftover after parsing attributes in process `syz.0.14678'. [ 1471.540952][T21019] netlink: 'syz.0.14678': attribute type 10 has an invalid length. [ 1471.567964][T21019] bond7: option min_links: invalid value (18446744073709551612) [ 1471.582585][T21019] bond7: option min_links: allowed values 0 - 2147483647 [ 1471.601289][T21025] netlink: 'syz.0.14678': attribute type 10 has an invalid length. [ 1471.602262][T21019] bond7 (unregistering): Released all slaves [ 1471.650564][T21026] netlink: 20 bytes leftover after parsing attributes in process `syz.2.14677'. [ 1471.982258][T21042] syzkaller0: entered promiscuous mode [ 1471.995200][T21042] syzkaller0: entered allmulticast mode [ 1472.158472][T21053] netlink: 'syz.4.14685': attribute type 13 has an invalid length. [ 1472.294199][ T5829] Bluetooth: hci0: command 0x0c1a tx timeout [ 1472.377219][T21064] netlink: 4188 bytes leftover after parsing attributes in process `syz.1.14691'. [ 1472.440363][T21042] tipc: Enabled bearer , priority 0 [ 1472.455044][T21048] ip6_vti0 speed is unknown, defaulting to 1000 [ 1472.561399][T21041] tipc: Resetting bearer [ 1472.605502][T21068] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14693'. [ 1472.634384][T21041] tipc: Disabling bearer [ 1472.690527][T21067] vlan2: entered promiscuous mode [ 1472.782684][T21068] macvtap3: entered promiscuous mode [ 1472.790004][T21068] macvtap3: entered allmulticast mode [ 1473.002153][T21046] ip6_vti0 speed is unknown, defaulting to 1000 [ 1473.036806][T21083] syzkaller1: entered promiscuous mode [ 1473.082116][T21083] syzkaller1: entered allmulticast mode [ 1473.802058][T21094] ip6_vti0 speed is unknown, defaulting to 1000 [ 1474.036215][T21132] netlink: 'syz.4.14714': attribute type 10 has an invalid length. [ 1474.076161][T21132] bond0: (slave dummy0): Releasing backup interface [ 1474.096282][T21132] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1474.106866][T21132] team0: Failed to send options change via netlink (err -105) [ 1474.110315][T21136] netlink: 'syz.4.14714': attribute type 10 has an invalid length. [ 1474.138040][T21132] team0: Port device dummy0 added [ 1474.238642][T21136] team0: Failed to send options change via netlink (err -105) [ 1474.267905][T21136] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1474.283229][T21136] team0: Port device dummy0 removed [ 1474.333085][T21136] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1474.347509][ T1040] bridge_slave_0: left promiscuous mode [ 1474.353923][ T1040] bridge0: port 1(bridge_slave_0) entered disabled state [ 1474.714207][ T12] net_ratelimit: 140 callbacks suppressed [ 1474.714226][ T12] bond9: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1474.754132][T16572] bond9: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1474.785003][T16572] bond9: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1474.812800][T16572] bond9: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1474.845334][ T1147] bond9: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1474.872829][ T1147] bond9: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1474.892885][ T1147] bond9: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1474.912688][ T1147] bond9: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1474.922771][T21153] netlink: 'syz.2.14718': attribute type 2 has an invalid length. [ 1474.932913][ T1147] bond9: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1474.963211][ T1147] bond9: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1474.980892][ T1040] bond2 (unregistering): (slave bridge3): Releasing active interface [ 1475.082166][ T1040] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1475.091929][ T1040] bond_slave_0: left promiscuous mode [ 1475.101073][ T1040] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1475.116110][ T1040] bond_slave_1: left promiscuous mode [ 1475.123745][ T1040] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 1475.134309][ T1040] bond0 (unregistering): Released all slaves [ 1475.148035][ T1040] bond1 (unregistering): Released all slaves [ 1475.167251][ T1040] bond2 (unregistering): Released all slaves [ 1475.194846][ T1040] bond3 (unregistering): Released all slaves [ 1475.261113][T21139] mac80211_hwsim hwsim178 syzkaller0: left promiscuous mode [ 1475.290788][T21139] mac80211_hwsim hwsim178 syzkaller0: left allmulticast mode [ 1475.313296][T21139] vlan2: left allmulticast mode [ 1475.318194][T21139] erspan0: left allmulticast mode [ 1475.362829][T21139] geneve2: left promiscuous mode [ 1475.369657][T21152] netlink: 'syz.2.14718': attribute type 2 has an invalid length. [ 1475.378013][T21152] __nla_validate_parse: 7 callbacks suppressed [ 1475.378032][T21152] netlink: 36 bytes leftover after parsing attributes in process `syz.2.14718'. [ 1475.445860][ T1040] tipc: Left network mode [ 1475.607700][T21160] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14722'. [ 1475.692137][T21160] vlan3: entered promiscuous mode [ 1475.818746][T30747] hid-generic 0005:0006:5508.0007: item fetching failed at offset 0/1 [ 1475.843606][T30747] hid-generic 0005:0006:5508.0007: probe with driver hid-generic failed with error -22 [ 1476.099553][T21173] bond6: option mode: unable to set because the bond device has slaves [ 1476.165649][T21173] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 1476.180240][T21173] bond6: (slave macvlan5): Enslaving as an active interface with an up link [ 1476.559245][T21181] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14728'. [ 1476.592686][ T1040] hsr_slave_0: left promiscuous mode [ 1476.619066][ T1040] hsr_slave_1: left promiscuous mode [ 1476.652158][ T1040] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1476.695452][ T1040] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1476.960582][T21210] netlink: 'syz.0.14734': attribute type 4 has an invalid length. [ 1476.971821][T21210] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.14734'. [ 1477.440931][ T1040] team0 (unregistering): Port device team_slave_1 removed [ 1477.500050][ T1040] team0 (unregistering): Port device team_slave_0 removed [ 1477.957829][T21240] netlink: 20 bytes leftover after parsing attributes in process `syz.3.14737'. [ 1478.063523][T21246] netlink: 84 bytes leftover after parsing attributes in process `syz.1.14741'. [ 1478.096709][T21246] netlink: 84 bytes leftover after parsing attributes in process `syz.1.14741'. [ 1478.303979][T21253] netlink: 28 bytes leftover after parsing attributes in process `syz.4.14744'. [ 1478.342687][T21253] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14744'. [ 1478.616596][T21262] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14747'. [ 1478.868981][T21269] veth1_vlan: left allmulticast mode [ 1479.339711][T21294] ip6tnl0: Caught tx_queue_len zero misconfig [ 1479.623017][T21310] netlink: 'syz.0.14761': attribute type 4 has an invalid length. [ 1479.756078][ T1147] net_ratelimit: 155 callbacks suppressed [ 1479.756098][ T1147] bond9: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1479.801255][ T1147] bond9: (slave ip6gretap0): failed to get link speed/duplex [ 1479.922108][T30747] hid-generic 0005:0006:5508.0008: hidraw0: BLUETOOTH HID vc3.36 Device [syz0] on aa:aa:aa:aa:aa:aa [ 1479.922617][ T1147] bond9: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1479.971180][ T1147] bond9: (slave ip6gretap0): failed to get link speed/duplex [ 1480.014168][T21326] FAULT_INJECTION: forcing a failure. [ 1480.014168][T21326] name failslab, interval 1, probability 0, space 0, times 0 [ 1480.042045][T21326] CPU: 1 UID: 0 PID: 21326 Comm: syz.2.14768 Not tainted syzkaller #0 PREEMPT(full) [ 1480.042072][T21326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1480.042082][T21326] Call Trace: [ 1480.042089][T21326] [ 1480.042097][T21326] dump_stack_lvl+0xe8/0x150 [ 1480.042126][T21326] should_fail_ex+0x412/0x560 [ 1480.042152][T21326] should_failslab+0xa8/0x100 [ 1480.042174][T21326] __kmalloc_cache_noprof+0x88/0x660 [ 1480.042193][T21326] ? sctp_v6_cmp_addr+0x15/0xd0 [ 1480.042214][T21326] ? sctp_add_bind_addr+0x8c/0x370 [ 1480.042239][T21326] sctp_add_bind_addr+0x8c/0x370 [ 1480.042272][T21326] sctp_copy_local_addr_list+0x314/0x4f0 [ 1480.042297][T21326] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 1480.042317][T21326] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1480.042342][T21326] ? sctp_v6_is_any+0x64/0x80 [ 1480.042363][T21326] ? sctp_copy_one_addr+0x93/0x360 [ 1480.042387][T21326] sctp_bind_addr_copy+0x189/0x3c0 [ 1480.042415][T21326] sctp_connect_new_asoc+0x2ff/0x6b0 [ 1480.042443][T21326] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1480.042473][T21326] ? __local_bh_enable_ip+0xd0/0x130 [ 1480.042494][T21326] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1480.042514][T21326] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1480.042543][T21326] sctp_sendmsg+0x1528/0x2c10 [ 1480.042581][T21326] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1480.042603][T21326] ? aa_sk_perm+0x15a/0x960 [ 1480.042624][T21326] ? aa_sk_perm+0x82d/0x960 [ 1480.042650][T21326] ? __pfx_aa_sk_perm+0x10/0x10 [ 1480.042673][T21326] ? sock_rps_record_flow+0x19/0x400 [ 1480.042700][T21326] ? inet_sendmsg+0x2f4/0x370 [ 1480.042728][T21326] ____sys_sendmsg+0x894/0xad0 [ 1480.042761][T21326] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1480.042794][T21326] ? import_iovec+0x73/0xa0 [ 1480.042822][T21326] ___sys_sendmsg+0x2a5/0x360 [ 1480.042851][T21326] ? __pfx____sys_sendmsg+0x10/0x10 [ 1480.042881][T21326] ? kstrtouint+0x6e/0xe0 [ 1480.042925][T21326] ? __fget_files+0x2a/0x420 [ 1480.042947][T21326] ? __fget_files+0x3a0/0x420 [ 1480.042980][T21326] __sys_sendmmsg+0x27c/0x4e0 [ 1480.043009][T21326] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1480.043032][T21326] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1480.043079][T21326] ? ksys_write+0x242/0x270 [ 1480.043097][T21326] ? __pfx_ksys_write+0x10/0x10 [ 1480.043121][T21326] __x64_sys_sendmmsg+0xa0/0xc0 [ 1480.043146][T21326] do_syscall_64+0x14d/0xf80 [ 1480.043168][T21326] ? trace_irq_disable+0x3b/0x150 [ 1480.043190][T21326] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1480.043206][T21326] ? clear_bhb_loop+0x40/0x90 [ 1480.043226][T21326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1480.043250][T21326] RIP: 0033:0x7f16d499c629 [ 1480.043266][T21326] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1480.043279][T21326] RSP: 002b:00007f16d57a2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1480.043298][T21326] RAX: ffffffffffffffda RBX: 00007f16d4c15fa0 RCX: 00007f16d499c629 [ 1480.043311][T21326] RDX: 0000000000000001 RSI: 0000200000000440 RDI: 0000000000000003 [ 1480.043323][T21326] RBP: 00007f16d57a2090 R08: 0000000000000000 R09: 0000000000000000 [ 1480.043335][T21326] R10: 00000000200400c0 R11: 0000000000000246 R12: 0000000000000002 [ 1480.043345][T21326] R13: 00007f16d4c16038 R14: 00007f16d4c15fa0 R15: 00007ffc220b4768 [ 1480.043376][T21326] [ 1480.369290][ T1134] bond9: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1480.377427][ T1134] bond9: (slave ip6gretap0): failed to get link speed/duplex [ 1480.433051][T21330] FAULT_INJECTION: forcing a failure. [ 1480.433051][T21330] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1480.462715][T21330] CPU: 0 UID: 0 PID: 21330 Comm: syz.0.14769 Not tainted syzkaller #0 PREEMPT(full) [ 1480.462741][T21330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1480.462752][T21330] Call Trace: [ 1480.462760][T21330] [ 1480.462768][T21330] dump_stack_lvl+0xe8/0x150 [ 1480.462798][T21330] should_fail_ex+0x412/0x560 [ 1480.462824][T21330] _copy_to_user+0x31/0xb0 [ 1480.462850][T21330] simple_read_from_buffer+0xe1/0x170 [ 1480.462878][T21330] proc_fail_nth_read+0x1bb/0x230 [ 1480.462904][T21330] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1480.462929][T21330] ? rw_verify_area+0x2a6/0x4d0 [ 1480.462947][T21330] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1480.462980][T21330] vfs_read+0x20c/0xa70 [ 1480.462996][T21330] ? fdget_pos+0x246/0x320 [ 1480.463017][T21330] ? __pfx_do_recvmmsg+0x10/0x10 [ 1480.463045][T21330] ? __pfx___mutex_lock+0x10/0x10 [ 1480.463071][T21330] ? __pfx_vfs_read+0x10/0x10 [ 1480.463090][T21330] ? __fget_files+0x2a/0x420 [ 1480.463117][T21330] ? __fget_files+0x3a0/0x420 [ 1480.463138][T21330] ? __fget_files+0x2a/0x420 [ 1480.463169][T21330] ksys_read+0x150/0x270 [ 1480.463189][T21330] ? __pfx_ksys_read+0x10/0x10 [ 1480.463217][T21330] do_syscall_64+0x14d/0xf80 [ 1480.463240][T21330] ? trace_irq_disable+0x3b/0x150 [ 1480.463263][T21330] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1480.463281][T21330] ? clear_bhb_loop+0x40/0x90 [ 1480.463302][T21330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1480.463320][T21330] RIP: 0033:0x7f4c1d95cece [ 1480.463337][T21330] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1480.463351][T21330] RSP: 002b:00007f4c1e772fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1480.463370][T21330] RAX: ffffffffffffffda RBX: 00007f4c1e7736c0 RCX: 00007f4c1d95cece [ 1480.463383][T21330] RDX: 000000000000000f RSI: 00007f4c1e7730a0 RDI: 0000000000000004 [ 1480.463394][T21330] RBP: 00007f4c1e773090 R08: 0000000000000000 R09: 0000000000000000 [ 1480.463404][T21330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1480.463414][T21330] R13: 00007f4c1dc16128 R14: 00007f4c1dc16090 R15: 00007ffe5650f5d8 [ 1480.463444][T21330] [ 1480.717921][T18542] page_pool_release_retry() stalled pool shutdown: id 62, 1 inflight 1331 sec [ 1480.794878][ T1147] bond9: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1480.852662][ T1147] bond9: (slave ip6gretap0): failed to get link speed/duplex [ 1480.967889][T21340] __nla_validate_parse: 5 callbacks suppressed [ 1480.967916][T21340] netlink: 16 bytes leftover after parsing attributes in process `syz.2.14773'. [ 1481.073500][ T1147] bond9: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1481.085211][ T1147] bond9: (slave ip6gretap0): failed to get link speed/duplex [ 1481.137172][T21346] netlink: 20 bytes leftover after parsing attributes in process `syz.0.14776'. [ 1481.201173][T21348] netlink: 40 bytes leftover after parsing attributes in process `syz.2.14777'. [ 1481.699595][T21370] tipc: Enabled bearer , priority 0 [ 1481.701027][T21369] netlink: 20 bytes leftover after parsing attributes in process `syz.0.14784'. [ 1481.743312][T21369] vlan3: entered promiscuous mode [ 1481.784785][T21370] syzkaller0: entered promiscuous mode [ 1481.795071][T21370] syzkaller0: entered allmulticast mode [ 1481.855370][T21365] tipc: Resetting bearer [ 1481.945230][T21365] tipc: Disabling bearer [ 1481.947832][T21382] netlink: 20 bytes leftover after parsing attributes in process `syz.4.14791'. [ 1481.977028][T21376] bond4: option mode: unable to set because the bond device has slaves [ 1481.995822][T21379] 8021q: adding VLAN 0 to HW filter on device macvlan6 [ 1482.016824][T21379] bond4: (slave macvlan6): Enslaving as an active interface with an up link [ 1482.026477][T21352] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1482.166520][T21392] mac80211_hwsim hwsim178 syzkaller0: Caught tx_queue_len zero misconfig [ 1482.172728][T21394] netlink: 'syz.4.14794': attribute type 3 has an invalid length. [ 1482.195528][T21394] netlink: 'syz.4.14794': attribute type 3 has an invalid length. [ 1482.256846][T21392] mac80211_hwsim hwsim178 syzkaller0: entered promiscuous mode [ 1482.297837][T21392] mac80211_hwsim hwsim178 syzkaller0: entered allmulticast mode [ 1482.578157][T21406] tipc: Enabled bearer , priority 0 [ 1482.590155][T21406] syzkaller0: entered promiscuous mode [ 1482.620399][ T5829] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1482.623136][T21406] syzkaller0: entered allmulticast mode [ 1482.630421][ T5829] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1482.641848][ T5829] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1482.649844][ T5829] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1482.659361][ T5829] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1482.835195][T21415] syzkaller1: entered promiscuous mode [ 1482.850982][T21415] syzkaller1: entered allmulticast mode [ 1482.905324][T21418] tipc: Resetting bearer [ 1482.949290][T21414] ip6_vti0 speed is unknown, defaulting to 1000 [ 1482.963731][T21415] netlink: 20 bytes leftover after parsing attributes in process `syz.2.14799'. [ 1482.973287][T21402] tipc: Resetting bearer [ 1483.009536][T21429] netlink: 28 bytes leftover after parsing attributes in process `syz.1.14805'. [ 1483.078280][T21402] tipc: Disabling bearer [ 1483.290719][T21438] bond4: option mode: unable to set because the bond device has slaves [ 1483.374729][T21438] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 1483.394057][T21438] bond4: (slave macvlan4): Enslaving as an active interface with an up link [ 1483.501302][T21436] syzkaller0: entered promiscuous mode [ 1483.506945][T21436] syzkaller0: entered allmulticast mode [ 1483.588760][T21446] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14810'. [ 1483.707977][T21451] netlink: 4188 bytes leftover after parsing attributes in process `syz.2.14812'. [ 1483.902051][T21455] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14813'. [ 1483.971798][T21460] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 1483.988752][T21460] bond4: (slave macvlan5): Enslaving as an active interface with an up link [ 1484.066051][T21464] netlink: 'syz.3.14814': attribute type 4 has an invalid length. [ 1484.296878][T21414] chnl_net:caif_netlink_parms(): no params data found [ 1484.379446][ T1302] lec:lec_start_xmit: lec0:No lecd attached [ 1484.625917][T21414] bridge0: port 1(bridge_slave_0) entered blocking state [ 1484.633308][T21414] bridge0: port 1(bridge_slave_0) entered disabled state [ 1484.640543][T21414] bridge_slave_0: entered allmulticast mode [ 1484.648735][T21414] bridge_slave_0: entered promiscuous mode [ 1484.658220][T21414] bridge0: port 2(bridge_slave_1) entered blocking state [ 1484.665680][T21414] bridge0: port 2(bridge_slave_1) entered disabled state [ 1484.673672][T21414] bridge_slave_1: entered allmulticast mode [ 1484.681283][T21414] bridge_slave_1: entered promiscuous mode [ 1484.692681][ T5829] Bluetooth: hci3: command tx timeout [ 1484.767778][T21414] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1484.777608][T16572] net_ratelimit: 135 callbacks suppressed [ 1484.777627][T16572] bond9: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1484.824733][T21414] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1484.833905][ T1147] bond9: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1484.853270][ T1147] bond9: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1484.892776][ T1040] bond9: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1484.932716][ T1040] bond9: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1484.935915][T21414] team0: Port device team_slave_0 added [ 1484.965464][T21414] team0: Port device team_slave_1 added [ 1484.972553][ T1040] bond9: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1485.002642][ T1040] bond9: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1485.040771][T21414] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1485.042601][ T1040] bond9: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1485.063128][T21414] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1485.092654][T16572] bond9: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1485.124916][T21414] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1485.142656][T16572] bond9: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1485.155916][T21414] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1485.172932][T21414] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1485.258919][T21414] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1485.423675][T21414] hsr_slave_0: entered promiscuous mode [ 1485.435286][T21414] hsr_slave_1: entered promiscuous mode [ 1485.455923][T21414] debugfs: 'hsr0' already exists in 'hsr' [ 1485.461792][T21414] Cannot create hsr debugfs directory [ 1485.571319][T21517] tipc: Enabled bearer , priority 0 [ 1485.594537][T21517] syzkaller0: entered promiscuous mode [ 1485.606325][T21517] syzkaller0: entered allmulticast mode [ 1485.625393][T21517] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1485.971974][T21517] tipc: Resetting bearer [ 1486.096361][T21516] tipc: Resetting bearer [ 1486.108889][T21529] netlink: 'syz.1.14830': attribute type 4 has an invalid length. [ 1486.124918][T21529] __nla_validate_parse: 9 callbacks suppressed [ 1486.124934][T21529] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.14830'. [ 1486.249405][T21516] tipc: Disabling bearer [ 1486.272996][T21538] netlink: 44 bytes leftover after parsing attributes in process `syz.3.14833'. [ 1486.457547][T21545] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14832'. [ 1486.549682][T21414] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1486.625107][T21548] syzkaller1: entered promiscuous mode [ 1486.630621][T21548] syzkaller1: entered allmulticast mode [ 1486.644508][T21551] netlink: 28 bytes leftover after parsing attributes in process `syz.1.14836'. [ 1486.677210][T21551] netlink: 28 bytes leftover after parsing attributes in process `syz.1.14836'. [ 1486.770153][T21414] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1486.780666][T15655] Bluetooth: hci3: command tx timeout [ 1486.828000][T21551] erspan0: entered promiscuous mode [ 1486.883978][T21551] hsr1: Slave A (erspan0) is not up; please bring it up to get a fully working HSR network [ 1486.907100][T21551] hsr1: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network [ 1487.011726][T21414] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1487.035613][T21564] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14841'. [ 1487.089582][T21571] x_tables: duplicate underflow at hook 3 [ 1487.153879][T21414] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1487.189646][T21564] tipc: Enabling of bearer rejected, already enabled [ 1487.227913][T21567] ip6_vti0 speed is unknown, defaulting to 1000 [ 1487.264893][T21564] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14841'. [ 1487.277203][T21577] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14845'. [ 1487.296946][T21577] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14845'. [ 1487.341949][T21579] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14846'. [ 1487.374518][T21579] macvtap3: entered promiscuous mode [ 1487.379988][T21579] macvtap3: entered allmulticast mode [ 1487.429194][T21579] veth1_vlan: entered allmulticast mode [ 1487.686042][T21414] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1487.731375][T21414] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1487.776371][T21414] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1487.896309][T21414] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1487.985394][T21600] x_tables: duplicate underflow at hook 3 [ 1488.141979][T21605] vlan2: entered promiscuous mode [ 1488.499241][T21414] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1488.884425][T15655] Bluetooth: hci3: command 0x040f tx timeout [ 1489.160314][T21414] 8021q: adding VLAN 0 to HW filter on device team0 [ 1489.225925][ T1147] bridge0: port 1(bridge_slave_0) entered blocking state [ 1489.233117][ T1147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1489.305287][ T128] bridge0: port 2(bridge_slave_1) entered blocking state [ 1489.312496][ T128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1489.402002][T21414] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1489.445834][T21414] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1489.506146][T21635] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1489.617482][T21635] netlink: 'syz.1.14862': attribute type 1 has an invalid length. [ 1489.742596][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5360 ms [ 1489.750638][ C0] lec:lec_tx_timeout: lec0 [ 1489.785264][T21652] netlink: 'syz.0.14868': attribute type 11 has an invalid length. [ 1489.822538][ T1134] net_ratelimit: 146 callbacks suppressed [ 1489.822557][ T1134] bond9: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1489.872841][ T1134] bond9: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1489.906950][ T1147] bond9: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1489.942642][ T128] bond9: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1489.961800][T21414] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1489.962637][ T1134] bond9: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1490.035822][ T1134] bond9: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1490.073828][ T1134] bond9: (slave ip6gretap0): failed to get link speed/duplex [ 1490.189287][T21674] ip6_vti0 speed is unknown, defaulting to 1000 [ 1490.214595][ T1040] bond9: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1490.253680][ T1040] bond9: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1490.298737][ T12] bond9: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1490.752048][T21692] team0: Device gtp0 is of different type [ 1490.932610][ T5829] Bluetooth: hci3: command 0x040f tx timeout [ 1491.004896][T21414] veth0_vlan: entered promiscuous mode [ 1491.039362][T21702] netlink: 'syz.3.14882': attribute type 10 has an invalid length. [ 1491.064411][T21414] veth1_vlan: entered promiscuous mode [ 1491.197123][T21414] veth0_macvtap: entered promiscuous mode [ 1491.245764][T21414] veth1_macvtap: entered promiscuous mode [ 1491.270295][T21712] __nla_validate_parse: 4 callbacks suppressed [ 1491.270314][T21712] netlink: 40 bytes leftover after parsing attributes in process `syz.0.14885'. [ 1491.401384][T21414] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1491.448169][T21414] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1491.507208][T21715] netlink: 20 bytes leftover after parsing attributes in process `syz.1.14887'. [ 1491.539243][ T128] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1491.558679][ T128] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1491.747148][ T1134] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1491.778823][ T1134] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1491.808380][ T128] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1491.832844][ T128] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1491.875132][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1491.887606][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1492.201871][T21741] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 1492.368448][T15655] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1492.382298][T15655] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1492.400015][T15655] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1492.425040][T15655] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1492.451486][T15655] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1492.626261][ T90] hid-generic 0005:0006:5508.0009: hidraw0: BLUETOOTH HID vc3.36 Device [syz0] on aa:aa:aa:aa:aa:aa [ 1492.768496][T21746] ip6_vti0 speed is unknown, defaulting to 1000 [ 1492.984469][T21763] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1493.014876][ T5829] Bluetooth: hci3: command 0x040f tx timeout [ 1493.066021][T11951] bond0: (slave syz_tun): Releasing backup interface [ 1493.246293][T21771] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14905'. [ 1493.297179][T21771] vlan2: entered promiscuous mode [ 1493.570150][T21767] syzkaller0: entered promiscuous mode [ 1493.577033][T21767] syzkaller0: entered allmulticast mode [ 1493.591320][T21785] netlink: 'syz.0.14909': attribute type 49 has an invalid length. [ 1494.539369][ T5829] Bluetooth: hci1: command tx timeout [ 1494.832651][T16572] net_ratelimit: 179 callbacks suppressed [ 1494.832673][T16572] bond9: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1494.872698][ T12] bond9: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1494.892550][ T12] bond9: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1494.912633][ T12] bond9: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1494.933046][T16572] bond9: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1494.952545][T16572] bond9: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1494.982583][ T12] bond9: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1495.002572][ T1040] bond9: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1495.028466][ T12] bond9: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1495.053709][ T12] bond9: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1496.529303][T21785] netlink: 'syz.0.14909': attribute type 49 has an invalid length. [ 1496.565402][T21794] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1496.614289][ T5829] Bluetooth: hci1: command tx timeout [ 1496.730123][T21804] bond7: option fail_over_mac: invalid value (127) [ 1496.767412][T21810] netlink: 24 bytes leftover after parsing attributes in process `syz.4.14914'. [ 1496.819240][T21804] bond7 (unregistering): Released all slaves [ 1496.885209][T21817] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 1496.911568][T21819] Bluetooth: MGMT ver 1.23 [ 1497.079191][T21815] ip6_vti0 speed is unknown, defaulting to 1000 [ 1497.367629][T21842] netlink: 4188 bytes leftover after parsing attributes in process `syz.0.14924'. [ 1497.445469][T21833] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1497.649016][T21746] chnl_net:caif_netlink_parms(): no params data found [ 1497.703891][ T128] bridge_slave_0: left promiscuous mode [ 1497.709677][ T128] bridge0: port 1(bridge_slave_0) entered disabled state [ 1497.843191][ T128] bond9 (unregistering): (slave ip6gretap0): Releasing active interface [ 1497.988501][ T128] erspan0 (unregistering): left promiscuous mode [ 1498.037706][ T128] bond7 (unregistering): (slave gretap1): Releasing backup interface [ 1498.259179][T21844] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1498.329077][ T128] bond6 (unregistering): (slave macvlan3): Releasing active interface [ 1498.341733][ T128] bond6 (unregistering): (slave macvlan3): the permanent HWaddr of slave - 1a:2e:3c:cc:79:90 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1498.362618][ T128] bond6 (unregistering): (slave macvlan5): making interface the new active one [ 1498.384857][ T128] bond6 (unregistering): (slave macvlan5): Releasing active interface [ 1498.407226][ T128] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1498.419118][ T128] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1498.431901][ T128] bond0 (unregistering): (slave team0): Releasing backup interface [ 1498.445263][ T128] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 1498.457996][ T128] bond0 (unregistering): Released all slaves [ 1498.470532][ T128] bond1 (unregistering): Released all slaves [ 1498.490295][ T128] bond2 (unregistering): Released all slaves [ 1498.514682][ T128] bond3 (unregistering): Released all slaves [ 1498.534284][ T128] bond4 (unregistering): Released all slaves [ 1498.560331][ T128] team0: Port device macvlan2 removed [ 1498.575704][ T128] bond5 (unregistering): Released all slaves [ 1498.593646][ T128] bond6 (unregistering): Released all slaves [ 1498.625104][ T128] bond7 (unregistering): (slave bond8): Releasing backup interface [ 1498.634218][ T128] bond8 (unregistering): left promiscuous mode [ 1498.641232][ T128] bond7 (unregistering): Released all slaves [ 1498.662247][ T128] bond8 (unregistering): Released all slaves [ 1498.683518][ T128] bond9 (unregistering): Released all slaves [ 1498.710076][ T5829] Bluetooth: hci1: command tx timeout [ 1498.968431][ T128] tipc: Left network mode [ 1499.360052][T21867] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14927'. [ 1499.517883][T21878] RDS: rds_bind could not find a transport for 2001::2, load rds_tcp or rds_rdma? [ 1499.570282][T21746] bridge0: port 1(bridge_slave_0) entered blocking state [ 1499.589594][T21746] bridge0: port 1(bridge_slave_0) entered disabled state [ 1499.602821][T21746] bridge_slave_0: entered allmulticast mode [ 1499.659882][T21746] bridge_slave_0: entered promiscuous mode [ 1499.720417][T21746] bridge0: port 2(bridge_slave_1) entered blocking state [ 1499.739621][T21746] bridge0: port 2(bridge_slave_1) entered disabled state [ 1499.749949][T21746] bridge_slave_1: entered allmulticast mode [ 1499.759459][T21746] bridge_slave_1: entered promiscuous mode [ 1499.826173][T21884] lo: Caught tx_queue_len zero misconfig [ 1499.915934][T21746] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1499.944212][T21889] netlink: 84 bytes leftover after parsing attributes in process `syz.2.14935'. [ 1499.984404][T21889] netlink: 84 bytes leftover after parsing attributes in process `syz.2.14935'. [ 1500.001999][T21889] net_ratelimit: 114 callbacks suppressed [ 1500.002016][T21889] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1500.035666][T21746] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1500.190760][T21746] team0: Port device team_slave_0 added [ 1500.256659][T21893] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 1500.400503][T21746] team0: Port device team_slave_1 added [ 1500.577973][T21746] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1500.592385][T21746] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1500.634422][T21746] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1500.661965][T21907] smc: ib device syz2 ibport 2 applied user defined pnetid SYZ1 [ 1500.735820][T21746] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1500.756056][T21746] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1500.790164][ T5829] Bluetooth: hci1: command tx timeout [ 1500.806928][T21746] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1501.066083][T21746] hsr_slave_0: entered promiscuous mode [ 1501.074498][T21746] hsr_slave_1: entered promiscuous mode [ 1501.094495][T21746] debugfs: 'hsr0' already exists in 'hsr' [ 1501.100365][T21746] Cannot create hsr debugfs directory [ 1501.221139][T21938] netlink: 44 bytes leftover after parsing attributes in process `syz.4.14946'. [ 1501.420320][ T128] hsr_slave_0: left promiscuous mode [ 1501.430103][ T128] hsr_slave_1: left promiscuous mode [ 1501.440091][ T128] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1501.455869][ T128] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1501.490191][ T128] veth1_vlan: left allmulticast mode [ 1501.950504][ T128] team0 (unregistering): Port device team_slave_1 removed [ 1501.976444][ T128] team0 (unregistering): Port device team_slave_0 removed [ 1502.279499][T21961] netlink: 'syz.0.14952': attribute type 1 has an invalid length. [ 1502.294734][T21961] netlink: 244 bytes leftover after parsing attributes in process `syz.0.14952'. [ 1502.814211][ T128] IPVS: stop unused estimator thread 0... [ 1502.992203][T21988] syzkaller0: entered promiscuous mode [ 1503.008286][T21988] syzkaller0: entered allmulticast mode [ 1503.079194][T21988] tipc: Started in network mode [ 1503.090071][T21988] tipc: Node identity ea18ef450ca6, cluster identity 4711 [ 1503.103223][T21988] tipc: Enabled bearer , priority 0 [ 1503.132019][T21987] tipc: Resetting bearer [ 1503.171541][T21987] tipc: Disabling bearer [ 1503.264045][T21992] [ 1503.266416][T21992] ====================================================== [ 1503.273431][T21992] WARNING: possible circular locking dependency detected [ 1503.280461][T21992] syzkaller #0 Not tainted [ 1503.284871][T21992] ------------------------------------------------------ [ 1503.291882][T21992] syz.2.14960/21992 is trying to acquire lock: [ 1503.298028][T21992] ffff8880266e3ed0 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1b3/0x450 [ 1503.307459][T21992] [ 1503.307459][T21992] but task is already holding lock: [ 1503.314820][T21992] ffff8880266e3990 (&q->q_usage_counter(io)#50){++++}-{0:0}, at: elevator_change+0x198/0x450 [ 1503.325024][T21992] [ 1503.325024][T21992] which lock already depends on the new lock. [ 1503.325024][T21992] [ 1503.335433][T21992] [ 1503.335433][T21992] the existing dependency chain (in reverse order) is: [ 1503.344459][T21992] [ 1503.344459][T21992] -> #6 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 1503.353084][T21992] blk_alloc_queue+0x546/0x680 [ 1503.358401][T21992] __blk_mq_alloc_disk+0x197/0x390 [ 1503.364035][T21992] nbd_dev_add+0x499/0xb50 [ 1503.368975][T21992] nbd_init+0x168/0x1f0 [ 1503.373646][T21992] do_one_initcall+0x250/0x8d0 [ 1503.378921][T21992] do_initcall_level+0x104/0x190 [ 1503.384372][T21992] do_initcalls+0x59/0xa0 [ 1503.389210][T21992] kernel_init_freeable+0x2a6/0x3e0 [ 1503.394920][T21992] kernel_init+0x1d/0x1d0 [ 1503.399755][T21992] ret_from_fork+0x51e/0xb90 [ 1503.404864][T21992] ret_from_fork_asm+0x1a/0x30 [ 1503.410140][T21992] [ 1503.410140][T21992] -> #5 (fs_reclaim){+.+.}-{0:0}: [ 1503.417337][T21992] fs_reclaim_acquire+0x71/0x100 [ 1503.422782][T21992] kmem_cache_alloc_node_noprof+0x4a/0x690 [ 1503.429106][T21992] __alloc_skb+0x1d0/0x7d0 [ 1503.434030][T21992] __ip6_append_data+0x2a44/0x3c50 [ 1503.439665][T21992] ip6_append_data+0x10f/0x280 [ 1503.444941][T21992] rawv6_sendmsg+0x12d3/0x18e0 [ 1503.450217][T21992] ____sys_sendmsg+0x894/0xad0 [ 1503.455491][T21992] ___sys_sendmsg+0x2a5/0x360 [ 1503.460678][T21992] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1503.466125][T21992] do_syscall_64+0x14d/0xf80 [ 1503.471232][T21992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1503.477629][T21992] [ 1503.477629][T21992] -> #4 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 1503.485351][T21992] lock_sock_nested+0x48/0x100 [ 1503.490624][T21992] inet_shutdown+0x6a/0x390 [ 1503.495637][T21992] nbd_mark_nsock_dead+0x2e9/0x560 [ 1503.501260][T21992] recv_work+0x1c7f/0x1d90 [ 1503.506188][T21992] process_scheduled_works+0xb02/0x1830 [ 1503.512242][T21992] worker_thread+0xa50/0xfc0 [ 1503.517345][T21992] kthread+0x388/0x470 [ 1503.521918][T21992] ret_from_fork+0x51e/0xb90 [ 1503.527013][T21992] ret_from_fork_asm+0x1a/0x30 [ 1503.532288][T21992] [ 1503.532288][T21992] -> #3 (&nsock->tx_lock){+.+.}-{4:4}: [ 1503.539925][T21992] __mutex_lock+0x19f/0x1300 [ 1503.545036][T21992] nbd_queue_rq+0x37b/0x1100 [ 1503.550144][T21992] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 1503.556202][T21992] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 1503.563042][T21992] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1503.569538][T21992] blk_mq_run_hw_queue+0x348/0x4f0 [ 1503.575160][T21992] blk_mq_dispatch_list+0xd16/0xe10 [ 1503.580869][T21992] blk_mq_flush_plug_list+0x48d/0x570 [ 1503.586757][T21992] __blk_flush_plug+0x3ed/0x4d0 [ 1503.592121][T21992] __submit_bio+0x28d/0x580 [ 1503.597126][T21992] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 1503.603268][T21992] block_read_full_folio+0x599/0x830 [ 1503.609057][T21992] filemap_read_folio+0x137/0x3b0 [ 1503.614597][T21992] do_read_cache_folio+0x358/0x590 [ 1503.620225][T21992] read_part_sector+0xb6/0x2b0 [ 1503.625501][T21992] adfspart_check_ICS+0xa5/0xa40 [ 1503.630952][T21992] bdev_disk_changed+0x7ba/0x1550 [ 1503.636486][T21992] blkdev_get_whole+0x380/0x510 [ 1503.641850][T21992] bdev_open+0x31e/0xd30 [ 1503.646603][T21992] blkdev_open+0x470/0x610 [ 1503.651524][T21992] do_dentry_open+0x785/0x14e0 [ 1503.656806][T21992] vfs_open+0x3b/0x340 [ 1503.661383][T21992] path_openat+0x2e08/0x3860 [ 1503.666479][T21992] do_file_open+0x23e/0x4a0 [ 1503.671488][T21992] do_sys_openat2+0x113/0x200 [ 1503.676762][T21992] __x64_sys_openat+0x138/0x170 [ 1503.682137][T21992] do_syscall_64+0x14d/0xf80 [ 1503.687238][T21992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1503.693633][T21992] [ 1503.693633][T21992] -> #2 (&cmd->lock){+.+.}-{4:4}: [ 1503.700833][T21992] __mutex_lock+0x19f/0x1300 [ 1503.705933][T21992] nbd_queue_rq+0xc6/0x1100 [ 1503.710946][T21992] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 1503.717001][T21992] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 1503.723842][T21992] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1503.730333][T21992] blk_mq_run_hw_queue+0x348/0x4f0 [ 1503.735954][T21992] blk_mq_dispatch_list+0xd16/0xe10 [ 1503.741664][T21992] blk_mq_flush_plug_list+0x48d/0x570 [ 1503.747549][T21992] __blk_flush_plug+0x3ed/0x4d0 [ 1503.752917][T21992] __submit_bio+0x28d/0x580 [ 1503.757922][T21992] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 1503.764071][T21992] block_read_full_folio+0x599/0x830 [ 1503.769865][T21992] filemap_read_folio+0x137/0x3b0 [ 1503.775395][T21992] do_read_cache_folio+0x358/0x590 [ 1503.781012][T21992] read_part_sector+0xb6/0x2b0 [ 1503.786288][T21992] adfspart_check_ICS+0xa5/0xa40 [ 1503.791734][T21992] bdev_disk_changed+0x7ba/0x1550 [ 1503.797265][T21992] blkdev_get_whole+0x380/0x510 [ 1503.802625][T21992] bdev_open+0x31e/0xd30 [ 1503.807381][T21992] blkdev_open+0x470/0x610 [ 1503.812299][T21992] do_dentry_open+0x785/0x14e0 [ 1503.817575][T21992] vfs_open+0x3b/0x340 [ 1503.822154][T21992] path_openat+0x2e08/0x3860 [ 1503.827250][T21992] do_file_open+0x23e/0x4a0 [ 1503.832254][T21992] do_sys_openat2+0x113/0x200 [ 1503.837439][T21992] __x64_sys_openat+0x138/0x170 [ 1503.842801][T21992] do_syscall_64+0x14d/0xf80 [ 1503.847907][T21992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1503.854304][T21992] [ 1503.854304][T21992] -> #1 (set->srcu){.+.+}-{0:0}: [ 1503.861428][T21992] __synchronize_srcu+0xca/0x3e0 [ 1503.866891][T21992] elevator_switch+0x1e8/0x7a0 [ 1503.872173][T21992] elevator_change+0x2cc/0x450 [ 1503.877451][T21992] elevator_set_default+0x36c/0x430 [ 1503.883166][T21992] blk_register_queue+0x366/0x430 [ 1503.888697][T21992] __add_disk+0x677/0xd50 [ 1503.893532][T21992] add_disk_fwnode+0xfb/0x480 [ 1503.898715][T21992] nbd_dev_add+0x72c/0xb50 [ 1503.903637][T21992] nbd_init+0x168/0x1f0 [ 1503.908302][T21992] do_one_initcall+0x250/0x8d0 [ 1503.913576][T21992] do_initcall_level+0x104/0x190 [ 1503.919028][T21992] do_initcalls+0x59/0xa0 [ 1503.923864][T21992] kernel_init_freeable+0x2a6/0x3e0 [ 1503.929571][T21992] kernel_init+0x1d/0x1d0 [ 1503.934406][T21992] ret_from_fork+0x51e/0xb90 [ 1503.939503][T21992] ret_from_fork_asm+0x1a/0x30 [ 1503.944780][T21992] [ 1503.944780][T21992] -> #0 (&q->elevator_lock){+.+.}-{4:4}: [ 1503.952672][T21992] __lock_acquire+0x15a5/0x2cf0 [ 1503.958038][T21992] lock_acquire+0xf0/0x2e0 [ 1503.962962][T21992] __mutex_lock+0x19f/0x1300 [ 1503.968062][T21992] elevator_change+0x1b3/0x450 [ 1503.973338][T21992] elevator_set_none+0xb5/0x140 [ 1503.978697][T21992] blk_mq_update_nr_hw_queues+0x5e7/0x1ae0 [ 1503.985008][T21992] nbd_start_device+0x17f/0xb10 [ 1503.990377][T21992] nbd_genl_connect+0x165b/0x1cf0 [ 1503.995908][T21992] genl_family_rcv_msg_doit+0x22a/0x330 [ 1504.001969][T21992] genl_rcv_msg+0x61c/0x7a0 [ 1504.006981][T21992] netlink_rcv_skb+0x232/0x4b0 [ 1504.012253][T21992] genl_rcv+0x28/0x40 [ 1504.016744][T21992] netlink_unicast+0x80f/0x9b0 [ 1504.022029][T21992] netlink_sendmsg+0x813/0xb40 [ 1504.027299][T21992] ____sys_sendmsg+0xa68/0xad0 [ 1504.032572][T21992] ___sys_sendmsg+0x2a5/0x360 [ 1504.037758][T21992] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1504.043205][T21992] do_syscall_64+0x14d/0xf80 [ 1504.048306][T21992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1504.054706][T21992] [ 1504.054706][T21992] other info that might help us debug this: [ 1504.054706][T21992] [ 1504.064914][T21992] Chain exists of: [ 1504.064914][T21992] &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#50 [ 1504.064914][T21992] [ 1504.078636][T21992] Possible unsafe locking scenario: [ 1504.078636][T21992] [ 1504.086075][T21992] CPU0 CPU1 [ 1504.091432][T21992] ---- ---- [ 1504.096780][T21992] lock(&q->q_usage_counter(io)#50); [ 1504.102152][T21992] lock(fs_reclaim); [ 1504.108644][T21992] lock(&q->q_usage_counter(io)#50); [ 1504.116528][T21992] lock(&q->elevator_lock); [ 1504.121112][T21992] [ 1504.121112][T21992] *** DEADLOCK *** [ 1504.121112][T21992] [ 1504.129232][T21992] 6 locks held by syz.2.14960/21992: [ 1504.134495][T21992] #0: ffffffff8fc39470 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1504.142672][T21992] #1: ffffffff8fc39288 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1504.151628][T21992] #2: ffff888025a0f9d0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xad/0x1ae0 [ 1504.163012][T21992] #3: ffff888025a0f8d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xc0/0x1ae0 [ 1504.173963][T21992] #4: ffff8880266e3990 (&q->q_usage_counter(io)#50){++++}-{0:0}, at: elevator_change+0x198/0x450 [ 1504.184589][T21992] #5: ffff8880266e39c8 (&q->q_usage_counter(queue)#34){+.+.}-{0:0}, at: elevator_change+0x198/0x450 [ 1504.195569][T21992] [ 1504.195569][T21992] stack backtrace: [ 1504.201451][T21992] CPU: 1 UID: 0 PID: 21992 Comm: syz.2.14960 Not tainted syzkaller #0 PREEMPT(full) [ 1504.201472][T21992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1504.201483][T21992] Call Trace: [ 1504.201490][T21992] [ 1504.201499][T21992] dump_stack_lvl+0xe8/0x150 [ 1504.201523][T21992] print_circular_bug+0x2e1/0x300 [ 1504.201547][T21992] check_noncircular+0x12e/0x150 [ 1504.201570][T21992] __lock_acquire+0x15a5/0x2cf0 [ 1504.201596][T21992] lock_acquire+0xf0/0x2e0 [ 1504.201613][T21992] ? elevator_change+0x1b3/0x450 [ 1504.201638][T21992] __mutex_lock+0x19f/0x1300 [ 1504.201660][T21992] ? elevator_change+0x1b3/0x450 [ 1504.201682][T21992] ? rcu_is_watching+0x15/0xb0 [ 1504.201703][T21992] ? elevator_change+0x1b3/0x450 [ 1504.201725][T21992] ? __pfx___mutex_lock+0x10/0x10 [ 1504.201746][T21992] ? enable_work+0x17f/0x230 [ 1504.201768][T21992] ? lockdep_hardirqs_on+0x7a/0x110 [ 1504.201797][T21992] ? __cancel_work_sync+0xf7/0x110 [ 1504.201819][T21992] ? blk_mq_cancel_work_sync+0xa5/0xe0 [ 1504.201834][T21992] elevator_change+0x1b3/0x450 [ 1504.201857][T21992] elevator_set_none+0xb5/0x140 [ 1504.201878][T21992] ? __pfx_elevator_set_none+0x10/0x10 [ 1504.201905][T21992] ? xa_load+0x1db/0x210 [ 1504.201920][T21992] blk_mq_update_nr_hw_queues+0x5e7/0x1ae0 [ 1504.201940][T21992] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1504.201962][T21992] ? kernfs_add_one+0x477/0x5c0 [ 1504.201984][T21992] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 1504.202003][T21992] ? sysfs_add_file_mode_ns+0x259/0x300 [ 1504.202022][T21992] nbd_start_device+0x17f/0xb10 [ 1504.202045][T21992] ? device_create_file+0xf4/0x1b0 [ 1504.202068][T21992] nbd_genl_connect+0x165b/0x1cf0 [ 1504.202091][T21992] ? __pfx_nbd_genl_connect+0x10/0x10 [ 1504.202112][T21992] ? rcu_is_watching+0x15/0xb0 [ 1504.202134][T21992] ? __nla_parse+0x40/0x60 [ 1504.202154][T21992] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 1504.202179][T21992] genl_family_rcv_msg_doit+0x22a/0x330 [ 1504.202202][T21992] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1504.202228][T21992] ? __lock_acquire+0x6b5/0x2cf0 [ 1504.202247][T21992] genl_rcv_msg+0x61c/0x7a0 [ 1504.202269][T21992] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1504.202289][T21992] ? __pfx_nbd_genl_connect+0x10/0x10 [ 1504.202308][T21992] ? __lock_acquire+0x6b5/0x2cf0 [ 1504.202331][T21992] netlink_rcv_skb+0x232/0x4b0 [ 1504.202349][T21992] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1504.202370][T21992] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1504.202391][T21992] ? down_read+0x272/0x2e0 [ 1504.202405][T21992] ? genl_rcv+0xd/0x40 [ 1504.202425][T21992] genl_rcv+0x28/0x40 [ 1504.202443][T21992] netlink_unicast+0x80f/0x9b0 [ 1504.202461][T21992] ? __pfx_netlink_unicast+0x10/0x10 [ 1504.202476][T21992] ? netlink_sendmsg+0x650/0xb40 [ 1504.202493][T21992] ? skb_put+0x11b/0x210 [ 1504.202514][T21992] netlink_sendmsg+0x813/0xb40 [ 1504.202533][T21992] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1504.202552][T21992] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1504.202569][T21992] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1504.202589][T21992] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1504.202606][T21992] ____sys_sendmsg+0xa68/0xad0 [ 1504.202626][T21992] ? futex_unqueue+0x211/0x240 [ 1504.202646][T21992] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1504.202669][T21992] ? import_iovec+0x73/0xa0 [ 1504.202689][T21992] ___sys_sendmsg+0x2a5/0x360 [ 1504.202712][T21992] ? __pfx____sys_sendmsg+0x10/0x10 [ 1504.202734][T21992] ? futex_wait+0x29a/0x380 [ 1504.202763][T21992] ? __fget_files+0x2a/0x420 [ 1504.202787][T21992] ? __fget_files+0x3a0/0x420 [ 1504.202810][T21992] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1504.202831][T21992] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1504.202854][T21992] ? rcu_is_watching+0x15/0xb0 [ 1504.202877][T21992] do_syscall_64+0x14d/0xf80 [ 1504.202899][T21992] ? trace_irq_disable+0x3b/0x150 [ 1504.202921][T21992] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1504.202936][T21992] ? clear_bhb_loop+0x40/0x90 [ 1504.202952][T21992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1504.202968][T21992] RIP: 0033:0x7f16d499c629 [ 1504.202984][T21992] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1504.202998][T21992] RSP: 002b:00007f16d57a2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1504.203016][T21992] RAX: ffffffffffffffda RBX: 00007f16d4c15fa0 RCX: 00007f16d499c629 [ 1504.203029][T21992] RDX: 0000000020000040 RSI: 0000200000001ac0 RDI: 000000000000000c [ 1504.203040][T21992] RBP: 00007f16d4a32b39 R08: 0000000000000000 R09: 0000000000000000 [ 1504.203050][T21992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1504.203060][T21992] R13: 00007f16d4c16038 R14: 00007f16d4c15fa0 R15: 00007ffc220b4768 [ 1504.203077][T21992] [ 1504.900176][T21995] syzkaller0: entered promiscuous mode [ 1504.906565][T21995] syzkaller0: entered allmulticast mode [ 1505.051970][T15655] block nbd1: Receive control failed (result -32) [ 1505.051970][ T5829] block nbd1: Receive control failed (result -32) [ 1505.082240][T21746] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1505.097083][T21746] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1505.117697][T21746] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1505.134934][T21746] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1505.220301][T21746] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1505.234977][T21746] 8021q: adding VLAN 0 to HW filter on device team0 [ 1505.248486][ T128] bridge0: port 1(bridge_slave_0) entered blocking state [ 1505.255619][ T128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1505.287078][ T128] bridge0: port 2(bridge_slave_1) entered blocking state [ 1505.294213][ T128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1505.433255][T21746] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1505.473538][T21746] veth0_vlan: entered promiscuous mode [ 1505.484919][T21746] veth1_vlan: entered promiscuous mode [ 1505.510407][T21746] veth0_macvtap: entered promiscuous mode [ 1505.520448][T21746] veth1_macvtap: entered promiscuous mode [ 1505.535766][T21746] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1505.547859][T21746] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1505.560385][ T128] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1505.576537][ T128] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1505.587861][ T128] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1505.597900][ T128] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1505.632196][T21746] ieee80211 phy223: Selected rate control algorithm 'minstrel_ht' [ 1505.661212][ T128] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1505.671409][T21746] ieee80211 phy224: Selected rate control algorithm 'minstrel_ht' [ 1505.679516][ T128] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1505.710762][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1505.718912][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1509.974911][T16572] vlan2: left allmulticast mode [ 1509.979866][T16572] vlan2: left promiscuous mode [ 1509.985556][T16572] bridge0: port 3(vlan2) entered disabled state [ 1509.993808][T16572] bridge_slave_0: left promiscuous mode [ 1509.999549][T16572] bridge0: port 1(bridge_slave_0) entered disabled state [ 1510.100561][T16572] bond6 (unregistering): (slave vti1): Releasing backup interface [ 1510.124647][T16572] erspan0 (unregistering): left promiscuous mode [ 1510.507884][T16572] bond5 (unregistering): (slave macvlan2): Releasing active interface [ 1510.516337][T16572] bond5 (unregistering): (slave macvlan2): the permanent HWaddr of slave - 3a:06:29:0c:ed:52 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1510.537660][T16572] bond5 (unregistering): (slave macvlan3): making interface the new active one [ 1510.550665][T16572] bond5 (unregistering): (slave macvlan3): Releasing active interface [ 1510.559229][T16572] bond5 (unregistering): (slave macvlan4): making interface the new active one [ 1510.571662][T16572] bond5 (unregistering): (slave macvlan4): Releasing active interface [ 1510.582301][T16572] bond5 (unregistering): (slave macvlan5): making interface the new active one [ 1510.594867][T16572] bond5 (unregistering): (slave macvlan5): Releasing active interface [ 1510.608113][T16572] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1510.619277][T16572] bond_slave_0: left promiscuous mode [ 1510.627859][T16572] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1510.636908][T16572] bond_slave_1: left promiscuous mode [ 1510.643419][T16572] bond0 (unregistering): (slave team0): Releasing backup interface [ 1510.651610][T16572] team0: left promiscuous mode [ 1510.656962][T16572] team_slave_0: left promiscuous mode [ 1510.662670][T16572] team_slave_1: left promiscuous mode [ 1510.669696][T16572] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 1510.679323][T16572] bond0 (unregistering): Released all slaves [ 1510.689823][T16572] bond1 (unregistering): Released all slaves [ 1510.704390][T16572] bond2 (unregistering): Released all slaves [ 1510.717919][T16572] bond3 (unregistering): Released all slaves [ 1510.728544][T16572] bond4 (unregistering): Released all slaves [ 1510.746630][T16572] bond5 (unregistering): Released all slaves [ 1510.757873][T16572] bond6 (unregistering): Released all slaves [ 1510.844201][T16572] : left promiscuous mode [ 1510.895594][T16572] tipc: Left network mode [ 1511.297089][T16572] hsr_slave_0: left promiscuous mode [ 1511.302950][T16572] hsr_slave_1: left promiscuous mode [ 1511.309021][T16572] veth1_vlan: left allmulticast mode [ 1511.473375][T16572] team0 (unregistering): Port device team_slave_1 removed [ 1511.485717][T16572] team0 (unregistering): Port device team_slave_0 removed [ 1511.752136][T16572] IPVS: stop unused estimator thread 0...